@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

package/src/supply-chain/blueprint-verification-authority.js

@@ -0,0 +1,588 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BLUEPRINT_VERIFICATION_VITEST_CONFIG_SOURCE = void 0;
+exports.assertExternalBlueprintGeneratedNxProjectConfinement = assertExternalBlueprintGeneratedNxProjectConfinement;
+exports.assertExternalBlueprintNxProjectConfinement = assertExternalBlueprintNxProjectConfinement;
+exports.assertDeveloperAgentNxProjectConfinement = assertDeveloperAgentNxProjectConfinement;
+exports.isBlueprintVerificationExecutionAuthorityPath = isBlueprintVerificationExecutionAuthorityPath;
+exports.assertNoMutableBlueprintVerificationConfiguration = assertNoMutableBlueprintVerificationConfiguration;
+exports.workspaceHasExternalBlueprintOwnership = workspaceHasExternalBlueprintOwnership;
+exports.externalBlueprintOwnershipRoots = externalBlueprintOwnershipRoots;
+exports.assertBlueprintVerificationNxAuthority = assertBlueprintVerificationNxAuthority;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const yaml_1 = require("yaml");
+const resolver_js_1 = require("../blueprints/resolver.js");
+const foundation_record_js_1 = require("../ownership/foundation-record.js");
+const record_js_1 = require("../ownership/record.js");
+const pnpm_toolchain_authority_js_1 = require("./pnpm-toolchain-authority.js");
+exports.BLUEPRINT_VERIFICATION_VITEST_CONFIG_SOURCE = 'export default {};\n';
+const MAX_CONFIGURATION_BYTES = 5 * 1024 * 1024;
+const MAX_CONFIGURATION_ENTRIES = 25_000;
+const MAX_OWNERSHIP_BYTES = 5 * 1024 * 1024;
+const MAX_OWNERSHIP_PACKAGES = 2_000;
+const MAX_EXTERNAL_NX_CONFIGURATION_BYTES = 1024 * 1024;
+const MAX_EXTERNAL_NX_CONFIGURATION_ENTRIES = 100_000;
+const EXTERNAL_SLICE_ROOT = /^packages\/[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u;
+const NX_PROJECT_NAME = /^(?:[a-z0-9][a-z0-9._-]{0,127}|@[a-z0-9][a-z0-9._-]{0,62}\/[a-z0-9][a-z0-9._-]{0,63})$/u;
+const FORBIDDEN_CONFIGURATION_NAMES = new Set([
+    '.npmrc',
+    '.pnpmfile.cjs',
+    '.pnpmfile.mjs',
+    'pnpmfile.cjs',
+    'pnpmfile.mjs',
+]);
+const SKIPPED_CONFIGURATION_DIRECTORIES = new Set([
+    '.ebk',
+    '.git',
+    '.next',
+    '.nx',
+    '.open-next',
+    'coverage',
+    'dist',
+    'node_modules',
+]);
+function workspacePackageMatchers(workspaceRoot) {
+    const workspacePath = (0, node_path_1.join)(workspaceRoot, 'pnpm-workspace.yaml');
+    const source = readExternalNxConfiguration(workspacePath, 'Developer-Agent pnpm workspace package authority');
+    const document = (0, yaml_1.parseDocument)(source, { merge: false, uniqueKeys: true });
+    const packages = document.get('packages', true);
+    if (document.errors.length > 0 || !(0, yaml_1.isSeq)(packages)) {
+        throw new Error('Developer-Agent Nx configuration requires one unambiguous pnpm workspace package list.');
+    }
+    if (packages.items.length > MAX_OWNERSHIP_PACKAGES) {
+        throw new Error('Developer-Agent Nx configuration exceeds 2,000 pnpm workspace package patterns.');
+    }
+    return packages.items.map((item) => {
+        if (!(0, yaml_1.isScalar)(item) || typeof item.value !== 'string') {
+            throw new Error('Developer-Agent Nx configuration requires scalar pnpm workspace package patterns.');
+        }
+        const pattern = item.value;
+        const segments = pattern.split('/');
+        if (pattern.length === 0 ||
+            pattern.length > 512 ||
+            pattern !== pattern.trim() ||
+            pattern.includes('\\') ||
+            segments.some((segment) => segment !== '*' && !/^[A-Za-z0-9@+._-]+$/u.test(segment))) {
+            throw new Error('Developer-Agent Nx configuration requires bounded literal-or-segment-wildcard pnpm workspace package patterns.');
+        }
+        return new RegExp(`^${segments
+            .map((segment) => segment === '*'
+            ? '[^/]+'
+            : segment.replace(/[.*+?^${}()|[\]\\]/gu, '\\$&'))
+            .join('/')}$`, 'u');
+    });
+}
+function parseExternalBlueprintNxConfiguration(file, authority = 'External Blueprint') {
+    let value;
+    try {
+        value = JSON.parse(file.contents);
+    }
+    catch {
+        throw new Error(`${authority} Nx configuration at ${file.path} must be valid JSON.`);
+    }
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`${authority} Nx configuration at ${file.path} must contain one JSON object.`);
+    }
+    return value;
+}
+function assertNxProjectConfigurationFiles(input) {
+    const projectNames = new Map();
+    const addProjectIdentity = (name, root) => {
+        if (!NX_PROJECT_NAME.test(name)) {
+            throw new Error(`${input.authority} Nx configuration contains an invalid project identity.`);
+        }
+        const existingRoot = projectNames.get(name);
+        if (existingRoot !== undefined && existingRoot !== root) {
+            throw new Error(`${input.authority} Nx configuration contains a cross-root project identity.`);
+        }
+        projectNames.set(name, root);
+    };
+    for (const file of input.files) {
+        const normalizedPath = file.path.split('\\').join('/');
+        const name = node_path_1.posix.basename(normalizedPath);
+        const normalizedName = name.normalize('NFC').toLowerCase();
+        if (!['package.json', 'project.json'].includes(normalizedName))
+            continue;
+        if (name !== normalizedName) {
+            throw new Error(`${input.authority} Nx configuration at ${file.path} has an ambiguous portable filename.`);
+        }
+        const configuration = parseExternalBlueprintNxConfiguration(file, input.authority);
+        const expectedRoot = normalizedPath === name
+            ? input.root
+            : node_path_1.posix.join(input.root, node_path_1.posix.dirname(normalizedPath));
+        if (name === 'package.json') {
+            if (!Object.prototype.hasOwnProperty.call(configuration, 'nx')) {
+                continue;
+            }
+            if (!input.allowPackageNx) {
+                throw new Error(`${input.authority} Nx configuration package.json at ${file.path} cannot declare Nx project configuration.`);
+            }
+            const nx = configuration['nx'];
+            if (!nx || typeof nx !== 'object' || Array.isArray(nx)) {
+                throw new Error(`${input.authority} Nx configuration package.json at ${file.path} must declare one Nx object.`);
+            }
+            const packageNx = nx;
+            if (Object.prototype.hasOwnProperty.call(packageNx, 'root') &&
+                packageNx['root'] !== expectedRoot) {
+                throw new Error(`${input.authority} Nx configuration package.json at ${file.path} cannot redirect its exact containing project root.`);
+            }
+            const configuredName = packageNx['name'];
+            if (configuredName !== undefined && typeof configuredName !== 'string') {
+                throw new Error(`${input.authority} Nx configuration package.json at ${file.path} contains an invalid project identity.`);
+            }
+            const projectName = configuredName ?? configuration['name'];
+            if (typeof projectName !== 'string') {
+                throw new Error(`${input.authority} Nx configuration package.json at ${file.path} requires one exact project identity.`);
+            }
+            addProjectIdentity(projectName, expectedRoot);
+            continue;
+        }
+        if (configuration['root'] !== expectedRoot) {
+            throw new Error(`${input.authority} Nx configuration project.json at ${file.path} must declare its exact containing directory as its exact canonical project root.`);
+        }
+        const projectName = configuration['name'];
+        if (typeof projectName === 'string') {
+            addProjectIdentity(projectName, expectedRoot);
+        }
+    }
+    return [...projectNames.keys()].sort();
+}
+/**
+ * Prevents an external Blueprint from using Nx's project-configuration merge
+ * behavior to contribute targets, tags, or other authority to a project that
+ * lives outside the generated Slice root.
+ */
+function assertExternalBlueprintGeneratedNxProjectConfinement(input) {
+    if (!EXTERNAL_SLICE_ROOT.test(input.root)) {
+        throw new Error('External Blueprint Nx configuration requires one canonical Product Slice root.');
+    }
+    return assertNxProjectConfigurationFiles({
+        allowPackageNx: false,
+        authority: 'External Blueprint',
+        ...input,
+    });
+}
+function readExternalNxConfiguration(path, label) {
+    const before = (0, node_fs_1.lstatSync)(path);
+    if (before.isSymbolicLink() ||
+        !before.isFile() ||
+        before.nlink !== 1 ||
+        before.size <= 0 ||
+        before.size > MAX_EXTERNAL_NX_CONFIGURATION_BYTES ||
+        (0, node_fs_1.realpathSync)(path) !== path) {
+        throw new Error(`${label} must be one canonical bounded file.`);
+    }
+    let descriptor;
+    try {
+        descriptor = (0, node_fs_1.openSync)(path, node_fs_1.constants.O_RDONLY | node_fs_1.constants.O_NOFOLLOW);
+        const opened = (0, node_fs_1.fstatSync)(descriptor);
+        if (!opened.isFile() ||
+            opened.dev !== before.dev ||
+            opened.ino !== before.ino ||
+            opened.size !== before.size) {
+            throw new Error(`${label} changed while it was opened.`);
+        }
+        const bytes = Buffer.alloc(opened.size + 1);
+        let offset = 0;
+        while (offset < bytes.byteLength) {
+            const count = (0, node_fs_1.readSync)(descriptor, bytes, offset, bytes.byteLength - offset, null);
+            if (count === 0)
+                break;
+            offset += count;
+        }
+        const after = (0, node_fs_1.fstatSync)(descriptor);
+        if (offset !== opened.size ||
+            after.dev !== opened.dev ||
+            after.ino !== opened.ino ||
+            after.size !== opened.size ||
+            after.mtimeMs !== opened.mtimeMs) {
+            throw new Error(`${label} changed while it was inspected.`);
+        }
+        return bytes.subarray(0, offset).toString('utf8');
+    }
+    finally {
+        if (descriptor !== undefined)
+            (0, node_fs_1.closeSync)(descriptor);
+    }
+}
+/**
+ * Inspects external (or conservatively external-capable) package roots before
+ * Nx is allowed to build a graph. No generated configuration can redirect its
+ * project identity into Foundation or another Product Slice.
+ */
+function assertExternalBlueprintNxProjectConfinement(input) {
+    const workspaceRoot = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(input.workspaceRoot));
+    const packagesRoot = (0, node_path_1.join)(workspaceRoot, 'packages');
+    const roots = new Set();
+    const aliases = new Set();
+    for (const root of input.externalRoots) {
+        if (!EXTERNAL_SLICE_ROOT.test(root)) {
+            throw new Error('External Blueprint Nx configuration contains an invalid Product Slice root.');
+        }
+        const alias = root.normalize('NFC').toLowerCase();
+        if (aliases.has(alias) && !roots.has(root)) {
+            throw new Error('External Blueprint Nx configuration contains an ambiguous Product Slice root.');
+        }
+        aliases.add(alias);
+        roots.add(root);
+    }
+    if (input.includeAllPackageRoots) {
+        if (!(0, node_fs_1.existsSync)(packagesRoot))
+            return;
+        const metadata = (0, node_fs_1.lstatSync)(packagesRoot);
+        if (metadata.isSymbolicLink() ||
+            !metadata.isDirectory() ||
+            (0, node_fs_1.realpathSync)(packagesRoot) !== packagesRoot) {
+            throw new Error('External Blueprint Nx configuration requires one canonical packages directory.');
+        }
+        const entries = (0, node_fs_1.readdirSync)(packagesRoot, { withFileTypes: true });
+        if (entries.length > MAX_OWNERSHIP_PACKAGES) {
+            throw new Error('External Blueprint Nx configuration exceeds 2,000 package roots.');
+        }
+        for (const entry of entries) {
+            if (entry.isSymbolicLink()) {
+                throw new Error(`External Blueprint Nx configuration refuses symbolic-link package ${entry.name}.`);
+            }
+            if (entry.isDirectory())
+                roots.add(`packages/${entry.name}`);
+        }
+    }
+    if (input.includeWorkspaceRoot)
+        roots.add('.');
+    let entries = 0;
+    const configurationIdentities = new Set();
+    for (const root of [...roots].sort()) {
+        if (root !== '.' && !EXTERNAL_SLICE_ROOT.test(root)) {
+            throw new Error('External Blueprint Nx configuration found a non-canonical package root.');
+        }
+        const absoluteRoot = root === '.' ? workspaceRoot : (0, node_path_1.join)(workspaceRoot, ...root.split('/'));
+        if (!(0, node_fs_1.existsSync)(absoluteRoot))
+            continue;
+        const rootMetadata = (0, node_fs_1.lstatSync)(absoluteRoot);
+        if (rootMetadata.isSymbolicLink() ||
+            !rootMetadata.isDirectory() ||
+            (0, node_fs_1.realpathSync)(absoluteRoot) !== absoluteRoot) {
+            throw new Error(`External Blueprint Nx configuration requires canonical root ${root}.`);
+        }
+        const files = [];
+        const visit = (directory, directoryPath) => {
+            const names = new Set();
+            for (const entry of (0, node_fs_1.readdirSync)(directory, { withFileTypes: true }).sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0)) {
+                entries += 1;
+                if (entries > MAX_EXTERNAL_NX_CONFIGURATION_ENTRIES) {
+                    throw new Error('External Blueprint Nx configuration inventory exceeds 100,000 entries.');
+                }
+                const alias = entry.name.normalize('NFC').toLowerCase();
+                if (names.has(alias)) {
+                    throw new Error('External Blueprint Nx configuration inventory refuses case or Unicode aliases.');
+                }
+                names.add(alias);
+                const relativePath = directoryPath
+                    ? `${directoryPath}/${entry.name}`
+                    : entry.name;
+                if (entry.name === '.git')
+                    continue;
+                if (entry.name === 'node_modules') {
+                    if (!entry.isDirectory() && !entry.isSymbolicLink()) {
+                        throw new Error(`Developer-Agent Nx configuration requires ${entry.name} to be a directory boundary.`);
+                    }
+                    continue;
+                }
+                const candidate = (0, node_path_1.join)(directory, entry.name);
+                if (entry.isSymbolicLink()) {
+                    throw new Error(`External Blueprint Nx configuration refuses symbolic-link authority at ${root}/${relativePath}.`);
+                }
+                if (entry.isDirectory()) {
+                    if ((0, node_fs_1.realpathSync)(candidate) !== candidate) {
+                        throw new Error(`External Blueprint Nx configuration requires canonical directory ${root}/${relativePath}.`);
+                    }
+                    visit(candidate, relativePath);
+                    continue;
+                }
+                const normalizedName = entry.name.normalize('NFC').toLowerCase();
+                if (!['package.json', 'project.json'].includes(normalizedName)) {
+                    continue;
+                }
+                if (normalizedName === 'package.json' &&
+                    input.packageNxPathMatchers !== undefined) {
+                    const packageRoot = relativePath === 'package.json'
+                        ? root
+                        : node_path_1.posix.join(root, node_path_1.posix.dirname(relativePath));
+                    if (packageRoot !== '.' &&
+                        !input.packageNxPathMatchers.some((matcher) => matcher.test(packageRoot))) {
+                        continue;
+                    }
+                }
+                files.push({
+                    contents: readExternalNxConfiguration(candidate, `External Blueprint Nx configuration at ${root}/${relativePath}`),
+                    path: relativePath,
+                });
+            }
+        };
+        visit(absoluteRoot, '');
+        for (const projectName of assertNxProjectConfigurationFiles({
+            allowPackageNx: true,
+            authority: 'Developer-Agent',
+            files,
+            root,
+        })) {
+            if (configurationIdentities.has(projectName)) {
+                throw new Error('External Blueprint Nx configuration contains a cross-root project identity collision.');
+            }
+            configurationIdentities.add(projectName);
+        }
+    }
+}
+/**
+ * Binds the plugin-free Nx graph to canonical repository configuration before
+ * any project can contribute a reviewed built-in target signature. This is a
+ * universal Developer-Agent boundary: source edits must not mint additional
+ * graph authority merely by copying an exact protected target definition.
+ */
+function assertDeveloperAgentNxProjectConfinement(workspaceRoot) {
+    const canonicalRoot = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(workspaceRoot));
+    assertExternalBlueprintNxProjectConfinement({
+        externalRoots: [],
+        includeWorkspaceRoot: true,
+        packageNxPathMatchers: workspacePackageMatchers(canonicalRoot),
+        workspaceRoot: canonicalRoot,
+    });
+}
+function forbiddenConfigurationName(name) {
+    const normalized = name.toLowerCase();
+    return (FORBIDDEN_CONFIGURATION_NAMES.has(normalized) ||
+        normalized.startsWith('.env') ||
+        normalized.endsWith('.env'));
+}
+function protectedConfigurationName(name) {
+    return (name.toLowerCase() === 'package.json' ||
+        /^(?:vite|vitest)\.config\.[a-z0-9]+$/iu.test(name));
+}
+function isBlueprintVerificationExecutionAuthorityPath(path) {
+    const normalized = path.normalize('NFC').toLowerCase();
+    const name = normalized.slice(normalized.lastIndexOf('/') + 1);
+    return ([
+        '.gitattributes',
+        '.node-version',
+        'nx.json',
+        'package.json',
+        'pnpm-lock.yaml',
+        'pnpm-workspace.yaml',
+        'tools/blueprint-trust-check.mjs',
+        'tools/blueprint-verification-vitest.config.mjs',
+    ].includes(normalized) ||
+        normalized === '.nx/installation' ||
+        normalized.startsWith('.nx/installation/') ||
+        name.startsWith('.env') ||
+        name.endsWith('.env') ||
+        [
+            '.npmrc',
+            '.pnpmfile.cjs',
+            '.pnpmfile.mjs',
+            'pnpmfile.cjs',
+            'pnpmfile.mjs',
+        ].includes(name) ||
+        name === 'package.json' ||
+        /^(?:vite|vitest)\.config\.[a-z0-9]+$/u.test(name) ||
+        /^packages\/[^/]+\/\.ebk\/ownership\.json$/u.test(normalized));
+}
+/**
+ * Inventories every execution-loader configuration outside bounded generated,
+ * dependency, cache, and evidence directories. Forbidden ambient config is
+ * rejected; package/Vite/Vitest files are returned for selected Git authority.
+ */
+function assertNoMutableBlueprintVerificationConfiguration(workspace) {
+    const workspaceRoot = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(workspace));
+    if ((0, node_fs_1.existsSync)((0, node_path_1.join)(workspaceRoot, '.nx', 'installation'))) {
+        throw new Error('Blueprint verification refuses mutable local Nx installation authority at .nx/installation.');
+    }
+    const authorityPaths = [];
+    const authorityAliases = new Set();
+    let entries = 0;
+    const visit = (directory, directoryPath) => {
+        const directoryMetadata = (0, node_fs_1.lstatSync)(directory);
+        if (directoryMetadata.isSymbolicLink() ||
+            !directoryMetadata.isDirectory() ||
+            (0, node_fs_1.realpathSync)(directory) !== directory) {
+            throw new Error('Blueprint verification configuration inventory requires canonical directories.');
+        }
+        for (const entry of (0, node_fs_1.readdirSync)(directory, { withFileTypes: true }).sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0)) {
+            entries += 1;
+            if (entries > MAX_CONFIGURATION_ENTRIES) {
+                throw new Error('Blueprint verification configuration inventory exceeds 25,000 entries.');
+            }
+            const path = directoryPath
+                ? `${directoryPath}/${entry.name}`
+                : entry.name;
+            const skippedDirectory = entry.isDirectory() &&
+                SKIPPED_CONFIGURATION_DIRECTORIES.has(entry.name.toLowerCase());
+            if (entry.isSymbolicLink() && !skippedDirectory) {
+                throw new Error(`Blueprint verification configuration inventory refuses symbolic-link authority at ${path}.`);
+            }
+            if (forbiddenConfigurationName(entry.name)) {
+                throw new Error(`Blueprint verification refuses mutable environment or package-manager configuration at ${path}.`);
+            }
+            const candidate = (0, node_path_1.join)(directory, entry.name);
+            if (protectedConfigurationName(entry.name)) {
+                const metadata = (0, node_fs_1.lstatSync)(candidate);
+                const child = (0, node_path_1.relative)(workspaceRoot, candidate);
+                if (metadata.isSymbolicLink() ||
+                    !metadata.isFile() ||
+                    metadata.nlink !== 1 ||
+                    metadata.size <= 0 ||
+                    metadata.size > MAX_CONFIGURATION_BYTES ||
+                    (0, node_fs_1.realpathSync)(candidate) !== candidate ||
+                    child === '' ||
+                    child === '..' ||
+                    child.startsWith(`..${node_path_1.sep}`)) {
+                    throw new Error(`Blueprint verification configuration ${path} must be one canonical bounded file.`);
+                }
+                if (entry.name.toLowerCase() === 'package.json') {
+                    (0, pnpm_toolchain_authority_js_1.assertPnpmReviewPackageConfiguration)((0, node_fs_1.readFileSync)(candidate, 'utf8'), `Blueprint verification package configuration at ${path}`);
+                }
+                const authorityAlias = path.normalize('NFC').toLowerCase();
+                if (authorityAliases.has(authorityAlias)) {
+                    throw new Error('Blueprint verification configuration inventory refuses case or Unicode aliases.');
+                }
+                authorityAliases.add(authorityAlias);
+                authorityPaths.push(path);
+            }
+            if (entry.isDirectory() && !skippedDirectory) {
+                visit(candidate, path);
+            }
+        }
+    };
+    visit(workspaceRoot, '');
+    return authorityPaths;
+}
+/**
+ * Inventories only canonical top-level package ownership records before Nx is
+ * allowed to load project-graph plugins. A valid external Blueprint opts the
+ * workspace into the strict execution-loader boundary; malformed or aliased
+ * ownership fails closed without evaluating workspace code.
+ */
+function workspaceHasExternalBlueprintOwnership(workspace) {
+    return externalBlueprintOwnershipRoots(workspace).length > 0;
+}
+/**
+ * Returns the canonical package roots governed by current external Blueprint
+ * ownership. This inventory deliberately precedes and does not trust the Nx
+ * graph: a publisher cannot escape classification by changing project tags,
+ * names, or the ownership record's projects array.
+ */
+function externalBlueprintOwnershipRoots(workspace) {
+    const workspaceRoot = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(workspace));
+    const packagesRoot = (0, node_path_1.join)(workspaceRoot, 'packages');
+    if (!(0, node_fs_1.existsSync)(packagesRoot))
+        return [];
+    const packagesMetadata = (0, node_fs_1.lstatSync)(packagesRoot);
+    if (packagesMetadata.isSymbolicLink() ||
+        !packagesMetadata.isDirectory() ||
+        (0, node_fs_1.realpathSync)(packagesRoot) !== packagesRoot) {
+        throw new Error('Developer-Agent Blueprint ownership preflight requires one canonical packages directory.');
+    }
+    const entries = (0, node_fs_1.readdirSync)(packagesRoot, { withFileTypes: true }).sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0);
+    if (entries.length > MAX_OWNERSHIP_PACKAGES) {
+        throw new Error('Developer-Agent Blueprint ownership preflight exceeds 2,000 package entries.');
+    }
+    const identities = new Set();
+    const external = [];
+    for (const entry of entries) {
+        const identity = entry.name.normalize('NFC').toLowerCase();
+        if (identities.has(identity)) {
+            throw new Error('Developer-Agent Blueprint ownership preflight found ambiguous package identities.');
+        }
+        identities.add(identity);
+        if (entry.isSymbolicLink()) {
+            throw new Error(`Developer-Agent Blueprint ownership preflight refuses symbolic-link package ${entry.name}.`);
+        }
+        if (!entry.isDirectory())
+            continue;
+        const packageRoot = (0, node_path_1.join)(packagesRoot, entry.name);
+        if ((0, node_fs_1.realpathSync)(packageRoot) !== packageRoot) {
+            throw new Error(`Developer-Agent Blueprint ownership preflight requires canonical package ${entry.name}.`);
+        }
+        const metadataRoot = (0, node_path_1.join)(packageRoot, '.ebk');
+        if (!(0, node_fs_1.existsSync)(metadataRoot))
+            continue;
+        const metadataRootEntry = (0, node_fs_1.lstatSync)(metadataRoot);
+        if (metadataRootEntry.isSymbolicLink() ||
+            !metadataRootEntry.isDirectory() ||
+            (0, node_fs_1.realpathSync)(metadataRoot) !== metadataRoot) {
+            throw new Error(`Developer-Agent Blueprint ownership preflight requires canonical metadata for ${entry.name}.`);
+        }
+        const ownershipPath = (0, node_path_1.join)(metadataRoot, 'ownership.json');
+        if (!(0, node_fs_1.existsSync)(ownershipPath)) {
+            throw new Error(`Developer-Agent Blueprint ownership preflight requires ownership.json in reserved metadata for ${entry.name}.`);
+        }
+        const ownershipMetadata = (0, node_fs_1.lstatSync)(ownershipPath);
+        if (ownershipMetadata.isSymbolicLink() ||
+            !ownershipMetadata.isFile() ||
+            ownershipMetadata.nlink !== 1 ||
+            ownershipMetadata.size <= 0 ||
+            ownershipMetadata.size > MAX_OWNERSHIP_BYTES ||
+            (0, node_fs_1.realpathSync)(ownershipPath) !== ownershipPath) {
+            throw new Error(`Developer-Agent Blueprint ownership preflight requires one canonical bounded ownership record for ${entry.name}.`);
+        }
+        let value;
+        try {
+            value = JSON.parse((0, node_fs_1.readFileSync)(ownershipPath, 'utf8'));
+        }
+        catch {
+            value = undefined;
+        }
+        if (entry.name === 'foundation') {
+            const foundation = (0, foundation_record_js_1.validateFoundationOwnershipRecord)(value);
+            if (foundation.valid)
+                continue;
+            throw new Error('Developer-Agent Blueprint ownership preflight found malformed Foundation ownership.');
+        }
+        const generated = (0, record_js_1.validateGeneratedOwnershipRecord)(value);
+        if (!generated.valid || generated.value.slice !== entry.name) {
+            throw new Error(`Developer-Agent Blueprint ownership preflight found malformed or ambiguous ownership for ${entry.name}.`);
+        }
+        if (generated.value.blueprint.name !== resolver_js_1.BUILTIN_BLUEPRINT_NAME) {
+            external.push({
+                blueprint: generated.value.blueprint.name,
+                projects: generated.value.projects,
+                root: packageRoot,
+                slice: generated.value.slice,
+            });
+        }
+    }
+    return external;
+}
+function assertBlueprintVerificationNxAuthority(value, environment = process.env) {
+    let configuration = value;
+    if (typeof value === 'string') {
+        try {
+            configuration = JSON.parse(value);
+        }
+        catch {
+            configuration = undefined;
+        }
+    }
+    if (!configuration ||
+        typeof configuration !== 'object' ||
+        Array.isArray(configuration)) {
+        throw new Error('Blueprint verification requires one exact Nx configuration object.');
+    }
+    const nx = configuration;
+    const daemonOverrides = Object.entries(environment).filter(([name, environmentValue]) => name.toLowerCase() === 'nx_daemon' &&
+        environmentValue !== undefined &&
+        environmentValue !== '' &&
+        environmentValue !== 'false');
+    if (nx.neverConnectToCloud !== true ||
+        nx.useDaemonProcess !== false ||
+        daemonOverrides.length > 0 ||
+        Object.prototype.hasOwnProperty.call(nx, 'extends') ||
+        Object.prototype.hasOwnProperty.call(nx, 'installation') ||
+        Object.prototype.hasOwnProperty.call(nx, 'plugins') ||
+        Object.prototype.hasOwnProperty.call(nx, 'sync') ||
+        Object.prototype.hasOwnProperty.call(nx, 'tasksRunnerOptions') ||
+        Object.keys(nx).some((key) => key.toLowerCase().startsWith('nxcloud'))) {
+        throw new Error('Blueprint verification Nx authority must use the non-daemon local default runner without plugins, global synchronization, extension, or cloud execution.');
+    }
+}
+//# sourceMappingURL=blueprint-verification-authority.js.map

package/src/supply-chain/blueprint-verification-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blueprint-verification-authority.js","sourceRoot":"","sources":["../../../../../packages/nx/src/supply-chain/blueprint-verification-authority.ts"],"names":[],"mappings":";;;AA+NA,oHAcC;AA4DD,kGAwKC;AAQD,4FAUC;AAkBD,sGA+BC;AAOD,8GA0FC;AAQD,wFAIC;AAeD,0EA2GC;AAED,wFA4CC;AAzyBD,qCAWiB;AACjB,yCAAgE;AAChE,+BAAsD;AAEtD,2DAAmE;AACnE,4EAAsF;AACtF,sDAA0E;AAC1E,+EAAqF;AAExE,QAAA,2CAA2C,GACtD,sBAAsB,CAAC;AAEzB,MAAM,uBAAuB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5C,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,mCAAmC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,qCAAqC,GAAG,OAAO,CAAC;AACtD,MAAM,mBAAmB,GAAG,4CAA4C,CAAC;AACzE,MAAM,eAAe,GACnB,yFAAyF,CAAC;AAC5F,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC;IAC5C,QAAQ;IACR,eAAe;IACf,eAAe;IACf,cAAc;IACd,cAAc;CACf,CAAC,CAAC;AACH,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAAC;IAChD,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,YAAY;IACZ,UAAU;IACV,MAAM;IACN,cAAc;CACf,CAAC,CAAC;AAOH,SAAS,wBAAwB,CAAC,aAAqB;IACrD,MAAM,aAAa,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,2BAA2B,CACxC,aAAa,EACb,kDAAkD,CACnD,CAAC;IACF,MAAM,QAAQ,GAAG,IAAA,oBAAa,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAA,YAAK,EAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,IAAI,CAAC,IAAA,eAAQ,EAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;QAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,OAAO,CAAC,MAAM,GAAG,GAAG;YACpB,OAAO,KAAK,OAAO,CAAC,IAAI,EAAE;YAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CACtE,EACD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gHAAgH,CACjH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,MAAM,CACf,IAAI,QAAQ;aACT,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,OAAO,KAAK,GAAG;YACb,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,CACpD;aACA,IAAI,CAAC,GAAG,CAAC,GAAG,EACf,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qCAAqC,CAC5C,IAA0C,EAC1C,SAAS,GAAG,oBAAoB;IAEhC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,GAAG,SAAS,wBAAwB,IAAI,CAAC,IAAI,sBAAsB,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,GAAG,SAAS,wBAAwB,IAAI,CAAC,IAAI,gCAAgC,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,iCAAiC,CAAC,KAK1C;IACC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAE,IAAY,EAAQ,EAAE;QAC9D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,SAAS,yDAAyD,CAC5E,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,SAAS,2DAA2D,CAC9E,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,iBAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3D,IAAI,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,SAAS;QACzE,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,SAAS,wBAAwB,IAAI,CAAC,IAAI,sCAAsC,CAC1F,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,qCAAqC,CACzD,IAAI,EACJ,KAAK,CAAC,SAAS,CAChB,CAAC;QACF,MAAM,YAAY,GAChB,cAAc,KAAK,IAAI;YACrB,CAAC,CAAC,KAAK,CAAC,IAAI;YACZ,CAAC,CAAC,iBAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAC5D,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC/D,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,SAAS,qCAAqC,IAAI,CAAC,IAAI,2CAA2C,CAC5G,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,SAAS,qCAAqC,IAAI,CAAC,IAAI,8BAA8B,CAC/F,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,EAA6B,CAAC;YAChD,IACE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;gBACvD,SAAS,CAAC,MAAM,CAAC,KAAK,YAAY,EAClC,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,SAAS,qCAAqC,IAAI,CAAC,IAAI,qDAAqD,CACtH,CAAC;YACJ,CAAC;YACD,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,cAAc,KAAK,SAAS,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;gBACvE,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,SAAS,qCAAqC,IAAI,CAAC,IAAI,wCAAwC,CACzG,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,cAAc,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,SAAS,qCAAqC,IAAI,CAAC,IAAI,uCAAuC,CACxG,CAAC;YACJ,CAAC;YACD,kBAAkB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,YAAY,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,SAAS,qCAAqC,IAAI,CAAC,IAAI,mFAAmF,CACpJ,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,kBAAkB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,SAAgB,oDAAoD,CAAC,KAGpE;IACC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,iCAAiC,CAAC;QACvC,cAAc,EAAE,KAAK;QACrB,SAAS,EAAE,oBAAoB;QAC/B,GAAG,KAAK;KACT,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY,EAAE,KAAa;IAC9D,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;IAC/B,IACE,MAAM,CAAC,cAAc,EAAE;QACvB,CAAC,MAAM,CAAC,MAAM,EAAE;QAChB,MAAM,CAAC,KAAK,KAAK,CAAC;QAClB,MAAM,CAAC,IAAI,IAAI,CAAC;QAChB,MAAM,CAAC,IAAI,GAAG,mCAAmC;QACjD,IAAA,sBAAY,EAAC,IAAI,CAAC,KAAK,IAAI,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,IAAA,kBAAQ,EAAC,IAAI,EAAE,mBAAS,CAAC,QAAQ,GAAG,mBAAS,CAAC,UAAU,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;QACrC,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;YAChB,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YACzB,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YACzB,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAC3B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,IAAA,kBAAQ,EACpB,UAAU,EACV,KAAK,EACL,MAAM,EACN,KAAK,CAAC,UAAU,GAAG,MAAM,EACzB,IAAI,CACL,CAAC;YACF,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM;YACvB,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;QACpC,IACE,MAAM,KAAK,MAAM,CAAC,IAAI;YACtB,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YACxB,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YACxB,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC1B,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAChC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,2CAA2C,CAAC,KAM3D;IACC,MAAM,aAAa,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjC,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC;YAAE,OAAO;QACtC,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,YAAY,CAAC,CAAC;QACzC,IACE,QAAQ,CAAC,cAAc,EAAE;YACzB,CAAC,QAAQ,CAAC,WAAW,EAAE;YACvB,IAAA,sBAAY,EAAC,YAAY,CAAC,KAAK,YAAY,EAC3C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,qBAAW,EAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,qEAAqE,KAAK,CAAC,IAAI,GAAG,CACnF,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,oBAAoB;QAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE/C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAChB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAA,gBAAI,EAAC,aAAa,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC;YAAE,SAAS;QACxC,MAAM,YAAY,GAAG,IAAA,mBAAS,EAAC,YAAY,CAAC,CAAC;QAC7C,IACE,YAAY,CAAC,cAAc,EAAE;YAC7B,CAAC,YAAY,CAAC,WAAW,EAAE;YAC3B,IAAA,sBAAY,EAAC,YAAY,CAAC,KAAK,YAAY,EAC3C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,+DAA+D,IAAI,GAAG,CACvE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAA2C,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAE,aAAqB,EAAQ,EAAE;YAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;YAChC,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACtE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/D,EAAE,CAAC;gBACF,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,OAAO,GAAG,qCAAqC,EAAE,CAAC;oBACpD,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBACxD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACjB,MAAM,YAAY,GAAG,aAAa;oBAChC,CAAC,CAAC,GAAG,aAAa,IAAI,KAAK,CAAC,IAAI,EAAE;oBAClC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBACf,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;oBAAE,SAAS;gBACpC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBAClC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;wBACpD,MAAM,IAAI,KAAK,CACb,6CAA6C,KAAK,CAAC,IAAI,8BAA8B,CACtF,CAAC;oBACJ,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC9C,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,0EAA0E,IAAI,IAAI,YAAY,GAAG,CAClG,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxB,IAAI,IAAA,sBAAY,EAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;wBAC1C,MAAM,IAAI,KAAK,CACb,oEAAoE,IAAI,IAAI,YAAY,GAAG,CAC5F,CAAC;oBACJ,CAAC;oBACD,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;oBAC/B,SAAS;gBACX,CAAC;gBACD,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBACjE,IAAI,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC/D,SAAS;gBACX,CAAC;gBACD,IACE,cAAc,KAAK,cAAc;oBACjC,KAAK,CAAC,qBAAqB,KAAK,SAAS,EACzC,CAAC;oBACD,MAAM,WAAW,GACf,YAAY,KAAK,cAAc;wBAC7B,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,iBAAK,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;oBACpD,IACE,WAAW,KAAK,GAAG;wBACnB,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5C,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAC1B,EACD,CAAC;wBACD,SAAS;oBACX,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,2BAA2B,CACnC,SAAS,EACT,0CAA0C,IAAI,IAAI,YAAY,EAAE,CACjE;oBACD,IAAI,EAAE,YAAY;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACxB,KAAK,MAAM,WAAW,IAAI,iCAAiC,CAAC;YAC1D,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,iBAAiB;YAC5B,KAAK;YACL,IAAI;SACL,CAAC,EAAE,CAAC;YACH,IAAI,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;YACJ,CAAC;YACD,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wCAAwC,CACtD,aAAqB;IAErB,MAAM,aAAa,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,aAAa,CAAC,CAAC,CAAC;IAC3D,2CAA2C,CAAC;QAC1C,aAAa,EAAE,EAAE;QACjB,oBAAoB,EAAE,IAAI;QAC1B,qBAAqB,EAAE,wBAAwB,CAAC,aAAa,CAAC;QAC9D,aAAa,EAAE,aAAa;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,CACL,6BAA6B,CAAC,GAAG,CAAC,UAAU,CAAC;QAC7C,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY;IAC9C,OAAO,CACL,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc;QACrC,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,SAAgB,6CAA6C,CAC3D,IAAY;IAEZ,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,CACL;QACE,gBAAgB;QAChB,eAAe;QACf,SAAS;QACT,cAAc;QACd,gBAAgB;QAChB,qBAAqB;QACrB,iCAAiC;QACjC,gDAAgD;KACjD,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtB,UAAU,KAAK,kBAAkB;QACjC,UAAU,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB;YACE,QAAQ;YACR,eAAe;YACf,eAAe;YACf,cAAc;YACd,cAAc;SACf,CAAC,QAAQ,CAAC,IAAI,CAAC;QAChB,IAAI,KAAK,cAAc;QACvB,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC;QAClD,4CAA4C,CAAC,IAAI,CAAC,UAAU,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,iDAAiD,CAC/D,SAAiB;IAEjB,MAAM,aAAa,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,SAAS,CAAC,CAAC,CAAC;IACvD,IAAI,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,aAAa,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAE,aAAqB,EAAQ,EAAE;QAC/D,MAAM,iBAAiB,GAAG,IAAA,mBAAS,EAAC,SAAS,CAAC,CAAC;QAC/C,IACE,iBAAiB,CAAC,cAAc,EAAE;YAClC,CAAC,iBAAiB,CAAC,WAAW,EAAE;YAChC,IAAA,sBAAY,EAAC,SAAS,CAAC,KAAK,SAAS,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACtE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/D,EAAE,CAAC;YACF,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,OAAO,GAAG,yBAAyB,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,aAAa;gBACxB,CAAC,CAAC,GAAG,aAAa,IAAI,KAAK,CAAC,IAAI,EAAE;gBAClC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACf,MAAM,gBAAgB,GACpB,KAAK,CAAC,WAAW,EAAE;gBACnB,iCAAiC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAClE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CACb,qFAAqF,IAAI,GAAG,CAC7F,CAAC;YACJ,CAAC;YACD,IAAI,0BAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,0FAA0F,IAAI,GAAG,CAClG,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,0BAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,SAAS,CAAC,CAAC;gBACtC,MAAM,KAAK,GAAG,IAAA,oBAAQ,EAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBACjD,IACE,QAAQ,CAAC,cAAc,EAAE;oBACzB,CAAC,QAAQ,CAAC,MAAM,EAAE;oBAClB,QAAQ,CAAC,KAAK,KAAK,CAAC;oBACpB,QAAQ,CAAC,IAAI,IAAI,CAAC;oBAClB,QAAQ,CAAC,IAAI,GAAG,uBAAuB;oBACvC,IAAA,sBAAY,EAAC,SAAS,CAAC,KAAK,SAAS;oBACrC,KAAK,KAAK,EAAE;oBACZ,KAAK,KAAK,IAAI;oBACd,KAAK,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC,EAC5B,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,wCAAwC,IAAI,sCAAsC,CACnF,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc,EAAE,CAAC;oBAChD,IAAA,kEAAoC,EAClC,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC,EAC/B,mDAAmD,IAAI,EAAE,CAC1D,CAAC;gBACJ,CAAC;gBACD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC3D,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;gBACJ,CAAC;gBACD,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACrC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC7C,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACzB,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sCAAsC,CACpD,SAAiB;IAEjB,OAAO,+BAA+B,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/D,CAAC;AASD;;;;;GAKG;AACH,SAAgB,+BAA+B,CAC7C,SAAiB;IAEjB,MAAM,aAAa,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,SAAS,CAAC,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,gBAAgB,GAAG,IAAA,mBAAS,EAAC,YAAY,CAAC,CAAC;IACjD,IACE,gBAAgB,CAAC,cAAc,EAAE;QACjC,CAAC,gBAAgB,CAAC,WAAW,EAAE;QAC/B,IAAA,sBAAY,EAAC,YAAY,CAAC,KAAK,YAAY,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,qBAAW,EAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACrE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,QAAQ,GAAqC,EAAE,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3D,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,+EAA+E,KAAK,CAAC,IAAI,GAAG,CAC7F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAA,sBAAY,EAAC,WAAW,CAAC,KAAK,WAAW,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,4EAA4E,KAAK,CAAC,IAAI,GAAG,CAC1F,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC;YAAE,SAAS;QACxC,MAAM,iBAAiB,GAAG,IAAA,mBAAS,EAAC,YAAY,CAAC,CAAC;QAClD,IACE,iBAAiB,CAAC,cAAc,EAAE;YAClC,CAAC,iBAAiB,CAAC,WAAW,EAAE;YAChC,IAAA,sBAAY,EAAC,YAAY,CAAC,KAAK,YAAY,EAC3C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,iFAAiF,KAAK,CAAC,IAAI,GAAG,CAC/F,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAA,oBAAU,EAAC,aAAa,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,kGAAkG,KAAK,CAAC,IAAI,GAAG,CAChH,CAAC;QACJ,CAAC;QACD,MAAM,iBAAiB,GAAG,IAAA,mBAAS,EAAC,aAAa,CAAC,CAAC;QACnD,IACE,iBAAiB,CAAC,cAAc,EAAE;YAClC,CAAC,iBAAiB,CAAC,MAAM,EAAE;YAC3B,iBAAiB,CAAC,KAAK,KAAK,CAAC;YAC7B,iBAAiB,CAAC,IAAI,IAAI,CAAC;YAC3B,iBAAiB,CAAC,IAAI,GAAG,mBAAmB;YAC5C,IAAA,sBAAY,EAAC,aAAa,CAAC,KAAK,aAAa,EAC7C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,qGAAqG,KAAK,CAAC,IAAI,GAAG,CACnH,CAAC;QACJ,CAAC;QACD,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,MAAM,UAAU,GAAG,IAAA,wDAAiC,EAAC,KAAK,CAAC,CAAC;YAC5D,IAAI,UAAU,CAAC,KAAK;gBAAE,SAAS;YAC/B,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,IAAA,4CAAgC,EAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,4FAA4F,KAAK,CAAC,IAAI,GAAG,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,oCAAsB,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI;gBACzC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ;gBAClC,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,sCAAsC,CACpD,KAAuC,EACvC,cAA4D,OAAO,CAAC,GAAG;IAEvE,IAAI,aAAa,GAAY,KAAK,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,IACE,CAAC,aAAa;QACd,OAAO,aAAa,KAAK,QAAQ;QACjC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,aAAwC,CAAC;IACpD,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CACxD,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAC3B,IAAI,CAAC,WAAW,EAAE,KAAK,WAAW;QAClC,gBAAgB,KAAK,SAAS;QAC9B,gBAAgB,KAAK,EAAE;QACvB,gBAAgB,KAAK,OAAO,CAC/B,CAAC;IACF,IACE,EAAE,CAAC,mBAAmB,KAAK,IAAI;QAC/B,EAAE,CAAC,gBAAgB,KAAK,KAAK;QAC7B,eAAe,CAAC,MAAM,GAAG,CAAC;QAC1B,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC;QACnD,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC;QACxD,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC;QACnD,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EACtE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0JAA0J,CAC3J,CAAC;IACJ,CAAC;AACH,CAAC"}