@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

package/src/supply-chain/blueprint-verification-execution.js

@@ -0,0 +1,624 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertBlueprintVerificationInstalledToolPaths = assertBlueprintVerificationInstalledToolPaths;
+exports.resolveBlueprintVerificationExecution = resolveBlueprintVerificationExecution;
+exports.resolveBlueprintVerificationExecutions = resolveBlueprintVerificationExecutions;
+exports.runBlueprintVerificationExecution = runBlueprintVerificationExecution;
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_module_1 = require("node:module");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const semver_1 = require("semver");
+const blueprint_trust_js_1 = require("./blueprint-trust.js");
+const blueprint_trust_process_js_1 = require("./blueprint-trust-process.js");
+const blueprint_verification_authority_js_1 = require("./blueprint-verification-authority.js");
+const MAX_TOOL_BYTES = 256 * 1024 * 1024;
+const PACKAGE_GROUPS = [
+    'dependencies',
+    'devDependencies',
+    'optionalDependencies',
+];
+const PROJECT_ROOT = /^packages\/[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u;
+function hasUnsafeWindowsPathCharacter(value) {
+    const metacharacters = new Set([
+        '\r',
+        '\n',
+        '"',
+        '%',
+        '!',
+        '^',
+        '&',
+        '|',
+        '<',
+        '>',
+    ]);
+    return [...value].some((character) => character.codePointAt(0) === 0 || metacharacters.has(character));
+}
+function fileIdentity(metadata) {
+    return {
+        ctimeMs: metadata.ctimeMs,
+        dev: metadata.dev,
+        ino: metadata.ino,
+        mode: metadata.mode,
+        mtimeMs: metadata.mtimeMs,
+        nlink: metadata.nlink,
+        size: metadata.size,
+    };
+}
+function sameFileIdentity(left, right) {
+    return Object.keys(left).every((key) => left[key] ===
+        right[key]);
+}
+function nodeFingerprint(path, metadata, readAuthorityFile) {
+    return {
+        identity: fileIdentity(metadata),
+        path,
+        sha256: (0, node_crypto_1.createHash)('sha256').update(readAuthorityFile(path)).digest('hex'),
+    };
+}
+function assertBlueprintVerificationInstalledToolPaths(input) {
+    const rootNodeModules = (0, node_path_1.join)(input.workspaceRoot, 'node_modules');
+    const rootNodeModulesMetadata = (0, node_fs_1.lstatSync)(rootNodeModules);
+    if (rootNodeModulesMetadata.isSymbolicLink() ||
+        !rootNodeModulesMetadata.isDirectory() ||
+        (0, node_fs_1.realpathSync)(rootNodeModules) !== rootNodeModules) {
+        throw new Error('Blueprint verification requires one canonical root node_modules authority.');
+    }
+    const packageChild = (0, node_path_1.relative)(input.packageRoot, input.binPath);
+    const installedBinChild = (0, node_path_1.relative)(rootNodeModules, input.binPath);
+    const installedManifestChild = (0, node_path_1.relative)(rootNodeModules, input.manifestPath);
+    const binMetadata = (0, node_fs_1.lstatSync)(input.binPath);
+    if (packageChild === '..' ||
+        packageChild.startsWith(`..${node_path_1.sep}`) ||
+        installedBinChild === '' ||
+        installedBinChild === '..' ||
+        installedBinChild.startsWith(`..${node_path_1.sep}`) ||
+        (0, node_path_1.isAbsolute)(installedBinChild) ||
+        installedManifestChild === '' ||
+        installedManifestChild === '..' ||
+        installedManifestChild.startsWith(`..${node_path_1.sep}`) ||
+        (0, node_path_1.isAbsolute)(installedManifestChild) ||
+        binMetadata.isSymbolicLink() ||
+        !binMetadata.isFile() ||
+        binMetadata.size <= 0 ||
+        binMetadata.size > MAX_TOOL_BYTES) {
+        throw new Error('Blueprint verification installed tool is not one canonical root module.');
+    }
+}
+function readJsonFile(path, label) {
+    const metadata = (0, node_fs_1.lstatSync)(path);
+    if (metadata.isSymbolicLink() ||
+        !metadata.isFile() ||
+        metadata.size <= 0 ||
+        metadata.size > 5 * 1024 * 1024 ||
+        (0, node_fs_1.realpathSync)(path) !== path) {
+        throw new Error(`${label} must be one canonical bounded JSON file.`);
+    }
+    const value = JSON.parse((0, node_fs_1.readFileSync)(path, 'utf8'));
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`${label} must contain one JSON object.`);
+    }
+    return value;
+}
+function dependencySpecifier(manifest, name, label) {
+    const declarations = PACKAGE_GROUPS.flatMap((group) => {
+        const values = manifest[group];
+        return values &&
+            typeof values === 'object' &&
+            !Array.isArray(values) &&
+            Object.prototype.hasOwnProperty.call(values, name)
+            ? [values[name]]
+            : [];
+    });
+    if (declarations.length > 1 ||
+        (declarations.length === 1 && typeof declarations[0] !== 'string')) {
+        throw new Error(`${label} requires at most one exact package declaration.`);
+    }
+    return declarations[0];
+}
+function installedTool(workspaceRoot, parsedLockfile, importer, importerManifest, name, binName, fingerprint, readAuthorityFile) {
+    const specifier = dependencySpecifier(importerManifest, name, `Blueprint verification ${name}`);
+    if (specifier === undefined) {
+        throw new Error(`Blueprint verification ${name} requires one direct importer declaration.`);
+    }
+    const importerManifestPath = (0, node_path_1.join)(workspaceRoot, ...(importer === '.' ? [] : importer.split('/')), 'package.json');
+    const require = (0, node_module_1.createRequire)(importerManifestPath);
+    const manifestPath = (0, node_fs_1.realpathSync)(require.resolve(`${name}/package.json`));
+    const manifest = readJsonFile(manifestPath, `Blueprint verification ${name} installed manifest`);
+    const bin = typeof manifest.bin === 'string'
+        ? manifest.bin
+        : manifest.bin &&
+            typeof manifest.bin === 'object' &&
+            !Array.isArray(manifest.bin)
+            ? manifest.bin[binName]
+            : undefined;
+    if (manifest.name !== name ||
+        typeof manifest.version !== 'string' ||
+        !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u.test(manifest.version) ||
+        typeof bin !== 'string' ||
+        !/^\.\/[A-Za-z0-9._/-]+$/u.test(bin) ||
+        bin.split('/').includes('..')) {
+        throw new Error(`Blueprint verification ${name} has no exact installed package bin.`);
+    }
+    const packageRoot = (0, node_path_1.dirname)(manifestPath);
+    const binPath = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(packageRoot, bin));
+    assertBlueprintVerificationInstalledToolPaths({
+        binPath,
+        manifestPath,
+        packageRoot,
+        workspaceRoot,
+    });
+    const digest = (path) => (0, node_crypto_1.createHash)('sha256').update(readAuthorityFile(path)).digest('hex');
+    const lockedVersion = (0, blueprint_trust_js_1.resolvePnpmImporterPackageVersionFromParsed)(parsedLockfile, importer, name, specifier);
+    if (manifest.version !== lockedVersion) {
+        throw new Error(`Blueprint verification ${name} installed version differs from its exact current lock importer.`);
+    }
+    return {
+        binPath,
+        files: fingerprint
+            ? [
+                { path: manifestPath, sha256: digest(manifestPath) },
+                { path: binPath, sha256: digest(binPath) },
+            ]
+            : [],
+        portable: {
+            bin,
+            importer,
+            name,
+            specifier,
+            version: manifest.version,
+        },
+    };
+}
+function assertInstalledTool(authority, readAuthorityFile) {
+    for (const file of authority.files) {
+        const metadata = (0, node_fs_1.lstatSync)(file.path);
+        if ((0, node_fs_1.realpathSync)(file.path) !== file.path ||
+            metadata.isSymbolicLink() ||
+            !metadata.isFile() ||
+            metadata.size <= 0 ||
+            metadata.size > MAX_TOOL_BYTES ||
+            (0, node_crypto_1.createHash)('sha256')
+                .update(readAuthorityFile(file.path))
+                .digest('hex') !== file.sha256) {
+            throw new Error('Blueprint verification installed tool changed during execution.');
+        }
+    }
+}
+function projectByPackageName(context, packageName) {
+    if (!context.packageIndex) {
+        context.resolutionHooks?.onPackageIndex?.();
+        const index = new Map();
+        const packagesRoot = (0, node_path_1.join)(context.workspaceRoot, 'packages');
+        for (const entry of (0, node_fs_1.readdirSync)(packagesRoot, { withFileTypes: true })) {
+            if (!entry.isDirectory() || entry.isSymbolicLink())
+                continue;
+            const root = `packages/${entry.name}`;
+            if (!PROJECT_ROOT.test(root))
+                continue;
+            const manifestPath = (0, node_path_1.join)(packagesRoot, entry.name, 'package.json');
+            if (!(0, node_fs_1.existsSync)(manifestPath))
+                continue;
+            const manifest = readJsonFile(manifestPath, `Blueprint verification filter package ${root}`);
+            context.projectManifests.set(root, manifest);
+            if (typeof manifest.name !== 'string')
+                continue;
+            const matches = index.get(manifest.name) ?? [];
+            matches.push({ manifest, root });
+            index.set(manifest.name, matches);
+        }
+        context.packageIndex = index;
+    }
+    const matches = context.packageIndex.get(packageName) ?? [];
+    if (matches.length !== 1 || !matches[0]) {
+        throw new Error('Blueprint verification Vitest filter must resolve one exact workspace package.');
+    }
+    return matches[0];
+}
+function prepareResolutionContext(workspace, fingerprint, readAuthorityFile = node_fs_1.readFileSync, resolutionHooks) {
+    const workspaceRoot = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(workspace));
+    const node = (0, node_fs_1.realpathSync)(process.execPath);
+    const rootManifest = readJsonFile((0, node_path_1.join)(workspaceRoot, 'package.json'), 'Blueprint verification root package manifest');
+    const nodeEngine = rootManifest.engines &&
+        typeof rootManifest.engines === 'object' &&
+        !Array.isArray(rootManifest.engines)
+        ? rootManifest.engines.node
+        : undefined;
+    const nodeVersionPath = (0, node_path_1.join)(workspaceRoot, '.node-version');
+    const nodeVersionMetadata = (0, node_fs_1.lstatSync)(nodeVersionPath);
+    const lockPath = (0, node_path_1.join)(workspaceRoot, 'pnpm-lock.yaml');
+    const lockMetadata = (0, node_fs_1.lstatSync)(lockPath);
+    const nodeMetadata = (0, node_fs_1.lstatSync)(node);
+    const nodeChild = (0, node_path_1.relative)(workspaceRoot, node);
+    const systemRoot = process.env.SystemRoot ?? process.env.WINDIR;
+    if (!(0, node_path_1.isAbsolute)(node) ||
+        (0, node_path_1.dirname)(node).includes(node_path_1.delimiter) ||
+        nodeChild === '' ||
+        (nodeChild !== '..' &&
+            !nodeChild.startsWith(`..${node_path_1.sep}`) &&
+            !(0, node_path_1.isAbsolute)(nodeChild)) ||
+        nodeMetadata.isSymbolicLink() ||
+        !nodeMetadata.isFile() ||
+        nodeMetadata.nlink !== 1 ||
+        nodeMetadata.size <= 0 ||
+        nodeMetadata.size > MAX_TOOL_BYTES ||
+        nodeVersionMetadata.isSymbolicLink() ||
+        !nodeVersionMetadata.isFile() ||
+        nodeVersionMetadata.nlink !== 1 ||
+        nodeVersionMetadata.size <= 0 ||
+        nodeVersionMetadata.size > 128 ||
+        (0, node_fs_1.realpathSync)(nodeVersionPath) !== nodeVersionPath ||
+        lockMetadata.isSymbolicLink() ||
+        !lockMetadata.isFile() ||
+        lockMetadata.nlink !== 1 ||
+        lockMetadata.size <= 0 ||
+        lockMetadata.size > 25 * 1024 * 1024 ||
+        (0, node_fs_1.realpathSync)(lockPath) !== lockPath ||
+        (process.platform === 'win32' &&
+            (typeof systemRoot !== 'string' ||
+                !(0, node_path_1.isAbsolute)(systemRoot) ||
+                systemRoot.includes(node_path_1.delimiter) ||
+                hasUnsafeWindowsPathCharacter(systemRoot) ||
+                hasUnsafeWindowsPathCharacter(node)))) {
+        throw new Error('Blueprint verification cannot bind the current Node executable.');
+    }
+    const nodeVersionSource = (0, node_fs_1.readFileSync)(nodeVersionPath, 'utf8');
+    const declaredNodeVersion = nodeVersionSource.slice(0, -1);
+    const lockfile = (0, node_fs_1.readFileSync)(lockPath, 'utf8');
+    if (typeof nodeEngine !== 'string' ||
+        !(0, semver_1.satisfies)(process.versions.node, nodeEngine) ||
+        !/^\d+\.\d+\.\d+\n$/u.test(nodeVersionSource) ||
+        !(0, semver_1.satisfies)(declaredNodeVersion, nodeEngine)) {
+        throw new Error('Blueprint verification requires exact engine-compatible Node declarations.');
+    }
+    const parsedLockfile = (0, blueprint_trust_js_1.parsePnpmImporterPackageAuthorityLockfile)(lockfile);
+    resolutionHooks?.onLockfileParse?.();
+    return {
+        fingerprint,
+        installedTools: new Map(),
+        lockfile,
+        node,
+        ...(fingerprint
+            ? {
+                nodeAuthority: nodeFingerprint(node, nodeMetadata, readAuthorityFile),
+            }
+            : {}),
+        parsedLockfile,
+        projectManifests: new Map(),
+        readAuthorityFile,
+        ...(resolutionHooks === undefined ? {} : { resolutionHooks }),
+        rootManifest,
+        workspaceRoot,
+    };
+}
+function contextProjectManifest(context, projectRoot, label) {
+    const cached = context.projectManifests.get(projectRoot);
+    if (cached)
+        return cached;
+    const manifest = readJsonFile((0, node_path_1.join)(context.workspaceRoot, ...projectRoot.split('/'), 'package.json'), label);
+    context.projectManifests.set(projectRoot, manifest);
+    return manifest;
+}
+function contextInstalledTool(context, importer, importerManifest, name, binName) {
+    const key = `${importer}\u0000${name}`;
+    const cached = context.installedTools.get(key);
+    if (cached)
+        return cached;
+    context.resolutionHooks?.onInstalledToolResolution?.(importer, name);
+    const authority = installedTool(context.workspaceRoot, context.parsedLockfile, importer, importerManifest, name, binName, context.fingerprint, context.readAuthorityFile);
+    context.installedTools.set(key, authority);
+    return authority;
+}
+function resolveInvocation(input, fingerprint, prepared, readAuthorityFile = node_fs_1.readFileSync) {
+    const requestedWorkspaceRoot = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(input.workspaceRoot));
+    if (!PROJECT_ROOT.test(input.projectRoot) ||
+        input.projectRoot !== `packages/${input.projectName}`) {
+        throw new Error('Blueprint verification executor requires its exact Slice project identity.');
+    }
+    const context = prepared ??
+        prepareResolutionContext(requestedWorkspaceRoot, fingerprint, readAuthorityFile);
+    if (context.workspaceRoot !== requestedWorkspaceRoot ||
+        context.fingerprint !== fingerprint) {
+        throw new Error('Blueprint verification resolution context differs from its workspace authority.');
+    }
+    const workspaceRoot = context.workspaceRoot;
+    const projectRoot = (0, node_path_1.join)(workspaceRoot, ...input.projectRoot.split('/'));
+    if (!(0, node_path_1.isAbsolute)(projectRoot) ||
+        (0, node_fs_1.realpathSync)(projectRoot) !== projectRoot ||
+        (0, node_path_1.relative)(workspaceRoot, projectRoot).startsWith(`..${node_path_1.sep}`)) {
+        throw new Error('Blueprint verification executor project resolves outside its workspace.');
+    }
+    const plan = (0, blueprint_trust_js_1.planBlueprintVerificationExecution)(input.options);
+    if (!plan) {
+        throw new Error('Blueprint verification executor options are not one exact structured plan.');
+    }
+    const node = context.node;
+    const rootManifest = context.rootManifest;
+    const nodeAuthority = context.nodeAuthority;
+    if (plan.kind === 'node') {
+        return {
+            invocation: {
+                arguments: plan.arguments,
+                command: node,
+                cwd: projectRoot,
+                nodeVersion: process.versions.node,
+                plan,
+            },
+            ...(nodeAuthority === undefined ? {} : { nodeAuthority }),
+        };
+    }
+    if (plan.kind === 'typescript') {
+        const projectManifest = contextProjectManifest(context, input.projectRoot, 'Blueprint verification Slice package manifest');
+        const localSpecifier = dependencySpecifier(projectManifest, 'typescript', 'Blueprint verification Slice TypeScript');
+        const importer = (localSpecifier === undefined ? '.' : input.projectRoot);
+        const importerManifest = importer === '.' ? rootManifest : projectManifest;
+        const installed = contextInstalledTool(context, importer, importerManifest, 'typescript', 'tsc');
+        return {
+            installedTool: installed,
+            invocation: {
+                arguments: [installed.binPath, '--noEmit', '-p', 'tsconfig.json'],
+                command: node,
+                cwd: projectRoot,
+                nodeVersion: process.versions.node,
+                plan,
+                toolAuthority: installed.portable,
+            },
+            ...(nodeAuthority === undefined ? {} : { nodeAuthority }),
+        };
+    }
+    const filter = projectByPackageName(context, plan.filterPackage);
+    const reviewedManifest = contextProjectManifest(context, input.projectRoot, 'Blueprint verification reviewed Slice package manifest');
+    if (filter.root !== input.projectRoot) {
+        const dependencies = reviewedManifest.dependencies;
+        const ownership = readJsonFile((0, node_path_1.join)(projectRoot, '.ebk', 'ownership.json'), 'Blueprint verification reviewed Slice ownership');
+        const consumes = ownership.contracts &&
+            typeof ownership.contracts === 'object' &&
+            !Array.isArray(ownership.contracts)
+            ? ownership.contracts.consumes
+            : undefined;
+        const inputs = ownership.inputs;
+        const consumeApiContract = inputs && typeof inputs === 'object' && !Array.isArray(inputs)
+            ? inputs.consumeApiContract
+            : undefined;
+        if (!dependencies ||
+            typeof dependencies !== 'object' ||
+            Array.isArray(dependencies) ||
+            dependencies[plan.filterPackage] !==
+                'workspace:*' ||
+            !Array.isArray(consumes) ||
+            !consumes.some((publication) => typeof publication === 'string' &&
+                publication.startsWith(`${plan.filterPackage}/`)) ||
+            (consumeApiContract !== undefined &&
+                (typeof consumeApiContract !== 'string' ||
+                    !consumeApiContract.startsWith(`${plan.filterPackage}/`)))) {
+            throw new Error('Blueprint verification Vitest filter lacks an exact cross-Slice consumption contract.');
+        }
+    }
+    if (!context.vitestConfig) {
+        const candidate = (0, node_path_1.join)(workspaceRoot, 'tools/blueprint-verification-vitest.config.mjs');
+        const metadata = (0, node_fs_1.lstatSync)(candidate);
+        if (metadata.isSymbolicLink() ||
+            !metadata.isFile() ||
+            metadata.nlink !== 1 ||
+            metadata.size <= 0 ||
+            metadata.size > 5 * 1024 * 1024 ||
+            (0, node_fs_1.realpathSync)(candidate) !== candidate ||
+            (0, node_fs_1.readFileSync)(candidate, 'utf8') !==
+                blueprint_verification_authority_js_1.BLUEPRINT_VERIFICATION_VITEST_CONFIG_SOURCE) {
+            throw new Error('Blueprint verification Vitest requires the exact managed configuration.');
+        }
+        context.vitestConfig = candidate;
+    }
+    const vitestConfig = context.vitestConfig;
+    const installed = contextInstalledTool(context, '.', rootManifest, 'vitest', 'vitest');
+    return {
+        installedTool: installed,
+        invocation: {
+            arguments: [
+                installed.binPath,
+                'run',
+                '--config',
+                vitestConfig,
+                '--root',
+                projectRoot,
+                plan.spec,
+            ],
+            command: node,
+            cwd: (0, node_path_1.join)(workspaceRoot, ...filter.root.split('/')),
+            nodeVersion: process.versions.node,
+            plan,
+            toolAuthority: installed.portable,
+        },
+        ...(nodeAuthority === undefined ? {} : { nodeAuthority }),
+    };
+}
+/**
+ * Resolves the exact structured invocation and portable package authority
+ * without starting a child. Receipt authentication and recurring execution
+ * use this same derivation so package-manager semantics cannot drift between
+ * the two routes.
+ */
+function resolveBlueprintVerificationExecution(input) {
+    return resolveInvocation(input, false).invocation;
+}
+function resolveBlueprintVerificationExecutions(inputs, readAuthorityFile = node_fs_1.readFileSync, resolutionHooks) {
+    if (inputs.length === 0 || inputs.length > 64 || !inputs[0]) {
+        throw new Error('Blueprint verification portable authority resolution requires 1-64 targets.');
+    }
+    const context = prepareResolutionContext(inputs[0].workspaceRoot, false, readAuthorityFile, resolutionHooks);
+    return inputs.map((input) => resolveInvocation(input, false, context).invocation);
+}
+function removePrivateExecutionEnvironment(privateRoot) {
+    (0, node_fs_1.rmSync)(privateRoot, { force: true, recursive: true });
+    if ((0, node_fs_1.existsSync)(privateRoot)) {
+        throw new Error('Blueprint verification private environment cleanup was incomplete.');
+    }
+}
+function withPrivateExecutionEnvironment(workspaceRoot, callback) {
+    const canonicalWorkspaceRoot = (0, node_fs_1.realpathSync)(workspaceRoot);
+    const canonicalTemporaryRoot = (0, node_fs_1.realpathSync)((0, node_os_1.tmpdir)());
+    const privateRoot = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)(canonicalTemporaryRoot, 'ebk-blueprint-execution-'));
+    try {
+        if (process.platform !== 'win32')
+            (0, node_fs_1.chmodSync)(privateRoot, 0o700);
+        const privateChild = (0, node_path_1.relative)(canonicalWorkspaceRoot, privateRoot);
+        const privateMetadata = (0, node_fs_1.lstatSync)(privateRoot);
+        if ((0, node_fs_1.realpathSync)(privateRoot) !== privateRoot ||
+            privateMetadata.isSymbolicLink() ||
+            !privateMetadata.isDirectory() ||
+            privateChild === '' ||
+            (privateChild !== '..' &&
+                !privateChild.startsWith(`..${node_path_1.sep}`) &&
+                !(0, node_path_1.isAbsolute)(privateChild)) ||
+            (process.platform !== 'win32' && (privateMetadata.mode & 0o777) !== 0o700)) {
+            throw new Error('Blueprint verification private environment must be outside the workspace.');
+        }
+    }
+    catch (error) {
+        (0, node_fs_1.rmSync)(privateRoot, { force: true, recursive: true });
+        throw error;
+    }
+    let directories;
+    const userConfig = (0, node_path_1.join)(privateRoot, 'npmrc');
+    const globalConfig = (0, node_path_1.join)(privateRoot, 'npmrc-global');
+    try {
+        directories = Object.fromEntries(['cache', 'config', 'data', 'home', 'state', 'temporary'].map((name) => {
+            const directory = (0, node_path_1.join)(privateRoot, name);
+            (0, node_fs_1.mkdirSync)(directory, { mode: 0o700 });
+            if (process.platform !== 'win32')
+                (0, node_fs_1.chmodSync)(directory, 0o700);
+            return [name, directory];
+        }));
+        if (process.platform === 'win32' &&
+            [
+                canonicalTemporaryRoot,
+                privateRoot,
+                ...Object.values(directories),
+                userConfig,
+                globalConfig,
+            ].some((value) => !(0, node_path_1.isAbsolute)(value) ||
+                value.includes(node_path_1.delimiter) ||
+                hasUnsafeWindowsPathCharacter(value))) {
+            throw new Error('Blueprint verification requires metacharacter-free Windows private paths.');
+        }
+        (0, node_fs_1.writeFileSync)(userConfig, '', { encoding: 'utf8', mode: 0o400 });
+        (0, node_fs_1.writeFileSync)(globalConfig, '', { encoding: 'utf8', mode: 0o400 });
+    }
+    catch (error) {
+        (0, node_fs_1.rmSync)(privateRoot, { force: true, recursive: true });
+        throw error;
+    }
+    const assertPrivateEnvironment = () => {
+        const rootMetadata = (0, node_fs_1.lstatSync)(privateRoot);
+        if ((0, node_fs_1.realpathSync)(privateRoot) !== privateRoot ||
+            rootMetadata.isSymbolicLink() ||
+            !rootMetadata.isDirectory() ||
+            (process.platform !== 'win32' && (rootMetadata.mode & 0o777) !== 0o700)) {
+            throw new Error('Blueprint verification private environment changed during execution.');
+        }
+        for (const directory of Object.values(directories)) {
+            const metadata = (0, node_fs_1.lstatSync)(directory);
+            if ((0, node_fs_1.realpathSync)(directory) !== directory ||
+                metadata.isSymbolicLink() ||
+                !metadata.isDirectory() ||
+                (process.platform !== 'win32' && (metadata.mode & 0o777) !== 0o700)) {
+                throw new Error('Blueprint verification private directory changed during execution.');
+            }
+        }
+        for (const configuration of [userConfig, globalConfig]) {
+            const metadata = (0, node_fs_1.lstatSync)(configuration);
+            if ((0, node_fs_1.realpathSync)(configuration) !== configuration ||
+                metadata.isSymbolicLink() ||
+                !metadata.isFile() ||
+                metadata.nlink !== 1 ||
+                metadata.size !== 0 ||
+                (0, node_fs_1.readFileSync)(configuration, 'utf8') !== '' ||
+                (process.platform !== 'win32' && (metadata.mode & 0o777) !== 0o400)) {
+                throw new Error('Blueprint verification private npm configuration changed during execution.');
+            }
+        }
+    };
+    try {
+        assertPrivateEnvironment();
+        const result = callback({
+            ...(0, blueprint_trust_process_js_1.controlledBlueprintTrustEnvironment)(),
+            COREPACK_ENABLE_DOWNLOAD_PROMPT: '0',
+            HOME: directories.home,
+            NPM_CONFIG_GLOBALCONFIG: globalConfig,
+            NPM_CONFIG_IGNORE_PNPMFILE: 'true',
+            NPM_CONFIG_NODE_OPTIONS: '',
+            NPM_CONFIG_SCRIPT_SHELL: '',
+            NPM_CONFIG_USERCONFIG: userConfig,
+            TEMP: directories.temporary,
+            TMP: directories.temporary,
+            TMPDIR: directories.temporary,
+            USERPROFILE: directories.home,
+            XDG_CACHE_HOME: directories.cache,
+            XDG_CONFIG_HOME: directories.config,
+            XDG_DATA_HOME: directories.data,
+            XDG_STATE_HOME: directories.state,
+            npm_config_globalconfig: globalConfig,
+            npm_config_ignore_pnpmfile: 'true',
+            npm_config_node_options: '',
+            npm_config_script_shell: '',
+            npm_config_userconfig: userConfig,
+        });
+        assertPrivateEnvironment();
+        return result;
+    }
+    finally {
+        try {
+            assertPrivateEnvironment();
+        }
+        finally {
+            removePrivateExecutionEnvironment(privateRoot);
+        }
+    }
+}
+function runBlueprintVerificationExecution(input, spawn = node_child_process_1.spawnSync, readAuthorityFile = node_fs_1.readFileSync) {
+    const { installedTool: tool, invocation, nodeAuthority, } = resolveInvocation(input, true, undefined, readAuthorityFile);
+    if (!nodeAuthority) {
+        throw new Error('Blueprint verification execution lacks Node authority.');
+    }
+    const assertAuthority = (rehash) => {
+        const nodeMetadata = (0, node_fs_1.lstatSync)(nodeAuthority.path);
+        if ((0, node_fs_1.realpathSync)(nodeAuthority.path) !== nodeAuthority.path ||
+            nodeMetadata.isSymbolicLink() ||
+            !nodeMetadata.isFile() ||
+            nodeMetadata.nlink !== 1 ||
+            nodeMetadata.size <= 0 ||
+            nodeMetadata.size > MAX_TOOL_BYTES ||
+            !sameFileIdentity(nodeAuthority.identity, fileIdentity(nodeMetadata)) ||
+            (rehash &&
+                (0, node_crypto_1.createHash)('sha256')
+                    .update(readAuthorityFile(nodeAuthority.path))
+                    .digest('hex') !== nodeAuthority.sha256)) {
+            throw new Error('Blueprint verification Node authority changed during execution.');
+        }
+        if (rehash && tool)
+            assertInstalledTool(tool, readAuthorityFile);
+        input.validateToolAuthority?.(invocation.toolAuthority);
+        input.assertAuthority?.(invocation);
+    };
+    assertAuthority(false);
+    const result = withPrivateExecutionEnvironment(input.workspaceRoot, (environment) => {
+        try {
+            return spawn(invocation.command, invocation.arguments, {
+                cwd: invocation.cwd,
+                encoding: 'utf8',
+                env: environment,
+                maxBuffer: 5 * 1024 * 1024,
+                shell: false,
+                timeout: input.timeoutMs ?? 10 * 60 * 1_000,
+                windowsHide: true,
+            });
+        }
+        finally {
+            assertAuthority(true);
+        }
+    });
+    return { invocation, result };
+}
+//# sourceMappingURL=blueprint-verification-execution.js.map

package/src/supply-chain/blueprint-verification-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blueprint-verification-execution.js","sourceRoot":"","sources":["../../../../../packages/nx/src/supply-chain/blueprint-verification-execution.ts"],"names":[],"mappings":";;AA0IA,sGAyCC;AAwlBD,sFAIC;AAED,wFAmBC;AA6JD,8EA2DC;AA5/BD,2DAAsE;AACtE,6CAAyC;AACzC,qCAYiB;AACjB,6CAA4C;AAC5C,qCAAiC;AACjC,yCAQmB;AACnB,mCAAmC;AAEnC,6DAK8B;AAC9B,6EAAmF;AACnF,+FAAoG;AAEpG,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,cAAc,GAAG;IACrB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;CACd,CAAC;AACX,MAAM,YAAY,GAAG,4CAA4C,CAAC;AAElE,SAAS,6BAA6B,CAAC,KAAa;IAClD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;QAC7B,IAAI;QACJ,IAAI;QACJ,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;KACJ,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CACpB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAClE,CAAC;AACJ,CAAC;AAkBD,SAAS,YAAY,CAAC,QAAe;IACnC,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAuC,EACvC,KAAwC;IAExC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAC5B,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,CAAC,GAA8C,CAAC;QACpD,KAAK,CAAC,GAA8C,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,QAAe,EACf,iBAAsC;IAEtC,OAAO;QACL,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;QAChC,IAAI;QACJ,MAAM,EAAE,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAC3E,CAAC;AACJ,CAAC;AAyBD,SAAgB,6CAA6C,CAAC,KAK7D;IACC,MAAM,eAAe,GAAG,IAAA,gBAAI,EAAC,KAAK,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,uBAAuB,GAAG,IAAA,mBAAS,EAAC,eAAe,CAAC,CAAC;IAC3D,IACE,uBAAuB,CAAC,cAAc,EAAE;QACxC,CAAC,uBAAuB,CAAC,WAAW,EAAE;QACtC,IAAA,sBAAY,EAAC,eAAe,CAAC,KAAK,eAAe,EACjD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,IAAA,oBAAQ,EAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,iBAAiB,GAAG,IAAA,oBAAQ,EAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,sBAAsB,GAAG,IAAA,oBAAQ,EAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAA,mBAAS,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,IACE,YAAY,KAAK,IAAI;QACrB,YAAY,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;QACnC,iBAAiB,KAAK,EAAE;QACxB,iBAAiB,KAAK,IAAI;QAC1B,iBAAiB,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;QACxC,IAAA,sBAAU,EAAC,iBAAiB,CAAC;QAC7B,sBAAsB,KAAK,EAAE;QAC7B,sBAAsB,KAAK,IAAI;QAC/B,sBAAsB,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;QAC7C,IAAA,sBAAU,EAAC,sBAAsB,CAAC;QAClC,WAAW,CAAC,cAAc,EAAE;QAC5B,CAAC,WAAW,CAAC,MAAM,EAAE;QACrB,WAAW,CAAC,IAAI,IAAI,CAAC;QACrB,WAAW,CAAC,IAAI,GAAG,cAAc,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAoED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa;IAC/C,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;IACjC,IACE,QAAQ,CAAC,cAAc,EAAE;QACzB,CAAC,QAAQ,CAAC,MAAM,EAAE;QAClB,QAAQ,CAAC,IAAI,IAAI,CAAC;QAClB,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;QAC/B,IAAA,sBAAY,EAAC,IAAI,CAAC,KAAK,IAAI,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAiC,EACjC,IAAY,EACZ,KAAa;IAEb,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,MAAM;YACX,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACtB,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;YAClD,CAAC,CAAC,CAAE,MAAkC,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,IACE,YAAY,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kDAAkD,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAuB,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CACpB,aAAqB,EACrB,cAAuB,EACvB,QAAoC,EACpC,gBAAyC,EACzC,IAA6B,EAC7B,OAAyB,EACzB,WAAoB,EACpB,iBAAsC;IAEtC,MAAM,SAAS,GAAG,mBAAmB,CACnC,gBAAgB,EAChB,IAAI,EACJ,0BAA0B,IAAI,EAAE,CACjC,CAAC;IACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,4CAA4C,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,GAAG,IAAA,gBAAI,EAC/B,aAAa,EACb,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAChD,cAAc,CACf,CAAC;IACF,MAAM,OAAO,GAAG,IAAA,2BAAa,EAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,IAAA,sBAAY,EAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,YAAY,CAC3B,YAAY,EACZ,0BAA0B,IAAI,qBAAqB,CACpD,CAAC;IACF,MAAM,GAAG,GACP,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ;QAC9B,CAAC,CAAC,QAAQ,CAAC,GAAG;QACd,CAAC,CAAC,QAAQ,CAAC,GAAG;YACV,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ;YAChC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC9B,CAAC,CAAE,QAAQ,CAAC,GAA+B,CAAC,OAAO,CAAC;YACpD,CAAC,CAAC,SAAS,CAAC;IAClB,IACE,QAAQ,CAAC,IAAI,KAAK,IAAI;QACtB,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QACpC,CAAC,sCAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC9D,OAAO,GAAG,KAAK,QAAQ;QACvB,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,sCAAsC,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,mBAAO,EAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IACxD,6CAA6C,CAAC;QAC5C,OAAO;QACP,YAAY;QACZ,WAAW;QACX,aAAa;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAC9B,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,IAAA,gEAA2C,EAC/D,cAAc,EACd,QAAQ,EACR,IAAI,EACJ,SAAS,CACV,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,kEAAkE,CACjG,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO;QACP,KAAK,EAAE,WAAW;YAChB,CAAC,CAAC;gBACE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE;gBACpD,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;aAC3C;YACH,CAAC,CAAC,EAAE;QACN,QAAQ,EAAE;YACR,GAAG;YACH,QAAQ;YACR,IAAI;YACJ,SAAS;YACT,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,SAAiC,EACjC,iBAAsC;IAEtC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IACE,IAAA,sBAAY,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YACrC,QAAQ,CAAC,cAAc,EAAE;YACzB,CAAC,QAAQ,CAAC,MAAM,EAAE;YAClB,QAAQ,CAAC,IAAI,IAAI,CAAC;YAClB,QAAQ,CAAC,IAAI,GAAG,cAAc;YAC9B,IAAA,wBAAU,EAAC,QAAQ,CAAC;iBACjB,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACpC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,EAChC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA+C,EAC/C,WAAmB;IAKnB,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,OAAO,CAAC,eAAe,EAAE,cAAc,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAGlB,CAAC;QACJ,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YAC7D,MAAM,IAAI,GAAG,YAAY,KAAK,CAAC,IAAI,EAAW,CAAC;YAC/C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvC,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACpE,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC;gBAAE,SAAS;YACxC,MAAM,QAAQ,GAAG,YAAY,CAC3B,YAAY,EACZ,yCAAyC,IAAI,EAAE,CAChD,CAAC;YACF,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAChD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,wBAAwB,CAC/B,SAAiB,EACjB,WAAoB,EACpB,oBAAyC,sBAAY,EACrD,eAAsD;IAEtD,MAAM,aAAa,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,SAAS,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,YAAY,CAC/B,IAAA,gBAAI,EAAC,aAAa,EAAE,cAAc,CAAC,EACnC,8CAA8C,CAC/C,CAAC;IACF,MAAM,UAAU,GACd,YAAY,CAAC,OAAO;QACpB,OAAO,YAAY,CAAC,OAAO,KAAK,QAAQ;QACxC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC;QAClC,CAAC,CAAE,YAAY,CAAC,OAAmC,CAAC,IAAI;QACxD,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,eAAe,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC7D,MAAM,mBAAmB,GAAG,IAAA,mBAAS,EAAC,eAAe,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,IAAA,mBAAS,EAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAA,oBAAQ,EAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;IAChE,IACE,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC;QACjB,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,qBAAS,CAAC;QACjC,SAAS,KAAK,EAAE;QAChB,CAAC,SAAS,KAAK,IAAI;YACjB,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;YACjC,CAAC,IAAA,sBAAU,EAAC,SAAS,CAAC,CAAC;QACzB,YAAY,CAAC,cAAc,EAAE;QAC7B,CAAC,YAAY,CAAC,MAAM,EAAE;QACtB,YAAY,CAAC,KAAK,KAAK,CAAC;QACxB,YAAY,CAAC,IAAI,IAAI,CAAC;QACtB,YAAY,CAAC,IAAI,GAAG,cAAc;QAClC,mBAAmB,CAAC,cAAc,EAAE;QACpC,CAAC,mBAAmB,CAAC,MAAM,EAAE;QAC7B,mBAAmB,CAAC,KAAK,KAAK,CAAC;QAC/B,mBAAmB,CAAC,IAAI,IAAI,CAAC;QAC7B,mBAAmB,CAAC,IAAI,GAAG,GAAG;QAC9B,IAAA,sBAAY,EAAC,eAAe,CAAC,KAAK,eAAe;QACjD,YAAY,CAAC,cAAc,EAAE;QAC7B,CAAC,YAAY,CAAC,MAAM,EAAE;QACtB,YAAY,CAAC,KAAK,KAAK,CAAC;QACxB,YAAY,CAAC,IAAI,IAAI,CAAC;QACtB,YAAY,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;QACpC,IAAA,sBAAY,EAAC,QAAQ,CAAC,KAAK,QAAQ;QACnC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC3B,CAAC,OAAO,UAAU,KAAK,QAAQ;gBAC7B,CAAC,IAAA,sBAAU,EAAC,UAAU,CAAC;gBACvB,UAAU,CAAC,QAAQ,CAAC,qBAAS,CAAC;gBAC9B,6BAA6B,CAAC,UAAU,CAAC;gBACzC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,EACzC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAA,sBAAY,EAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAA,sBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,CAAC,IAAA,kBAAS,EAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAC7C,CAAC,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAC7C,CAAC,IAAA,kBAAS,EAAC,mBAAmB,EAAE,UAAU,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,IAAA,8DAAyC,EAAC,QAAQ,CAAC,CAAC;IAC3E,eAAe,EAAE,eAAe,EAAE,EAAE,CAAC;IACrC,OAAO;QACL,WAAW;QACX,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,QAAQ;QACR,IAAI;QACJ,GAAG,CAAC,WAAW;YACb,CAAC,CAAC;gBACE,aAAa,EAAE,eAAe,CAAC,IAAI,EAAE,YAAY,EAAE,iBAAiB,CAAC;aACtE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,cAAc;QACd,gBAAgB,EAAE,IAAI,GAAG,EAAE;QAC3B,iBAAiB;QACjB,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,YAAY;QACZ,aAAa;KACd,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA+C,EAC/C,WAAmB,EACnB,KAAa;IAEb,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,QAAQ,GAAG,YAAY,CAC3B,IAAA,gBAAI,EAAC,OAAO,CAAC,aAAa,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,EACtE,KAAK,CACN,CAAC;IACF,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA+C,EAC/C,QAAoC,EACpC,gBAAyC,EACzC,IAA6B,EAC7B,OAAyB;IAEzB,MAAM,GAAG,GAAG,GAAG,QAAQ,SAAS,IAAI,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,OAAO,CAAC,eAAe,EAAE,yBAAyB,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,aAAa,CAC7B,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,cAAc,EACtB,QAAQ,EACR,gBAAgB,EAChB,IAAI,EACJ,OAAO,EACP,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,iBAAiB,CAC1B,CAAC;IACF,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA0C,EAC1C,WAAoB,EACpB,QAAiD,EACjD,oBAAyC,sBAAY;IAMrD,MAAM,sBAAsB,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1E,IACE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QACrC,KAAK,CAAC,WAAW,KAAK,YAAY,KAAK,CAAC,WAAW,EAAE,EACrD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GACX,QAAQ;QACR,wBAAwB,CACtB,sBAAsB,EACtB,WAAW,EACX,iBAAiB,CAClB,CAAC;IACJ,IACE,OAAO,CAAC,aAAa,KAAK,sBAAsB;QAChD,OAAO,CAAC,WAAW,KAAK,WAAW,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,IACE,CAAC,IAAA,sBAAU,EAAC,WAAW,CAAC;QACxB,IAAA,sBAAY,EAAC,WAAW,CAAC,KAAK,WAAW;QACzC,IAAA,oBAAQ,EAAC,aAAa,EAAE,WAAW,CAAC,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,uDAAkC,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO;YACL,UAAU,EAAE;gBACV,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,IAAI;gBACb,GAAG,EAAE,WAAW;gBAChB,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAClC,IAAI;aACL;YACD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,eAAe,GAAG,sBAAsB,CAC5C,OAAO,EACP,KAAK,CAAC,WAAW,EACjB,+CAA+C,CAChD,CAAC;QACF,MAAM,cAAc,GAAG,mBAAmB,CACxC,eAAe,EACf,YAAY,EACZ,yCAAyC,CAC1C,CAAC;QACF,MAAM,QAAQ,GAAG,CACf,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CACzB,CAAC;QAChC,MAAM,gBAAgB,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3E,MAAM,SAAS,GAAG,oBAAoB,CACpC,OAAO,EACP,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,KAAK,CACN,CAAC;QACF,OAAO;YACL,aAAa,EAAE,SAAS;YACxB,UAAU,EAAE;gBACV,SAAS,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,CAAC;gBACjE,OAAO,EAAE,IAAI;gBACb,GAAG,EAAE,WAAW;gBAChB,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAClC,IAAI;gBACJ,aAAa,EAAE,SAAS,CAAC,QAAQ;aAClC;YACD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,gBAAgB,GAAG,sBAAsB,CAC7C,OAAO,EACP,KAAK,CAAC,WAAW,EACjB,wDAAwD,CACzD,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,gBAAgB,CAAC,YAAY,CAAC;QACnD,MAAM,SAAS,GAAG,YAAY,CAC5B,IAAA,gBAAI,EAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAC3C,iDAAiD,CAClD,CAAC;QACF,MAAM,QAAQ,GACZ,SAAS,CAAC,SAAS;YACnB,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;YACvC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;YACjC,CAAC,CAAE,SAAS,CAAC,SAAqC,CAAC,QAAQ;YAC3D,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAChC,MAAM,kBAAkB,GACtB,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5D,CAAC,CAAE,MAAkC,CAAC,kBAAkB;YACxD,CAAC,CAAC,SAAS,CAAC;QAChB,IACE,CAAC,YAAY;YACb,OAAO,YAAY,KAAK,QAAQ;YAChC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;YAC1B,YAAwC,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC3D,aAAa;YACf,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxB,CAAC,QAAQ,CAAC,IAAI,CACZ,CAAC,WAAW,EAAE,EAAE,CACd,OAAO,WAAW,KAAK,QAAQ;gBAC/B,WAAW,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CACnD;YACD,CAAC,kBAAkB,KAAK,SAAS;gBAC/B,CAAC,OAAO,kBAAkB,KAAK,QAAQ;oBACrC,CAAC,kBAAkB,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAC9D,CAAC;YACD,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAA,gBAAI,EACpB,aAAa,EACb,gDAAgD,CACjD,CAAC;QACF,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,SAAS,CAAC,CAAC;QACtC,IACE,QAAQ,CAAC,cAAc,EAAE;YACzB,CAAC,QAAQ,CAAC,MAAM,EAAE;YAClB,QAAQ,CAAC,KAAK,KAAK,CAAC;YACpB,QAAQ,CAAC,IAAI,IAAI,CAAC;YAClB,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;YAC/B,IAAA,sBAAY,EAAC,SAAS,CAAC,KAAK,SAAS;YACrC,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC;gBAC7B,iFAA2C,EAC7C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IACnC,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,MAAM,SAAS,GAAG,oBAAoB,CACpC,OAAO,EACP,GAAG,EACH,YAAY,EACZ,QAAQ,EACR,QAAQ,CACT,CAAC;IACF,OAAO;QACL,aAAa,EAAE,SAAS;QACxB,UAAU,EAAE;YACV,SAAS,EAAE;gBACT,SAAS,CAAC,OAAO;gBACjB,KAAK;gBACL,UAAU;gBACV,YAAY;gBACZ,QAAQ;gBACR,WAAW;gBACX,IAAI,CAAC,IAAI;aACV;YACD,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,IAAA,gBAAI,EAAC,aAAa,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnD,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAClC,IAAI;YACJ,aAAa,EAAE,SAAS,CAAC,QAAQ;SAClC;QACD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qCAAqC,CACnD,KAA0C;IAE1C,OAAO,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC;AACpD,CAAC;AAED,SAAgB,sCAAsC,CACpD,MAAsD,EACtD,oBAAyC,sBAAY,EACrD,eAAsD;IAEtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,wBAAwB,CACtC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,EACvB,KAAK,EACL,iBAAiB,EACjB,eAAe,CAChB,CAAC;IACF,OAAO,MAAM,CAAC,GAAG,CACf,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,UAAU,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CAAC,WAAmB;IAC5D,IAAA,gBAAM,EAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,IAAA,oBAAU,EAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,aAAqB,EACrB,QAA+C;IAE/C,MAAM,sBAAsB,GAAG,IAAA,sBAAY,EAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,sBAAsB,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAM,GAAE,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,IAAA,qBAAW,EAC7B,IAAA,gBAAI,EAAC,sBAAsB,EAAE,0BAA0B,CAAC,CACzD,CAAC;IACF,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,IAAA,mBAAS,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,IAAA,oBAAQ,EAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;QACnE,MAAM,eAAe,GAAG,IAAA,mBAAS,EAAC,WAAW,CAAC,CAAC;QAC/C,IACE,IAAA,sBAAY,EAAC,WAAW,CAAC,KAAK,WAAW;YACzC,eAAe,CAAC,cAAc,EAAE;YAChC,CAAC,eAAe,CAAC,WAAW,EAAE;YAC9B,YAAY,KAAK,EAAE;YACnB,CAAC,YAAY,KAAK,IAAI;gBACpB,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;gBACpC,CAAC,IAAA,sBAAU,EAAC,YAAY,CAAC,CAAC;YAC5B,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,EAC1E,CAAC;YACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,gBAAM,EAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,WAAmC,CAAC;IACxC,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,CAAC,WAAW,CAC9B,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACrE,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,IAAA,mBAAS,EAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3B,CAAC,CAAC,CACH,CAAC;QACF,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B;gBACE,sBAAsB;gBACtB,WAAW;gBACX,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC7B,UAAU;gBACV,YAAY;aACb,CAAC,IAAI,CACJ,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,IAAA,sBAAU,EAAC,KAAK,CAAC;gBAClB,KAAK,CAAC,QAAQ,CAAC,qBAAS,CAAC;gBACzB,6BAA6B,CAAC,KAAK,CAAC,CACvC,EACD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QACD,IAAA,uBAAa,EAAC,UAAU,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,IAAA,uBAAa,EAAC,YAAY,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,gBAAM,EAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,wBAAwB,GAAG,GAAG,EAAE;QACpC,MAAM,YAAY,GAAG,IAAA,mBAAS,EAAC,WAAW,CAAC,CAAC;QAC5C,IACE,IAAA,sBAAY,EAAC,WAAW,CAAC,KAAK,WAAW;YACzC,YAAY,CAAC,cAAc,EAAE;YAC7B,CAAC,YAAY,CAAC,WAAW,EAAE;YAC3B,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,EACvE,CAAC;YACD,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,SAAS,CAAC,CAAC;YACtC,IACE,IAAA,sBAAY,EAAC,SAAS,CAAC,KAAK,SAAS;gBACrC,QAAQ,CAAC,cAAc,EAAE;gBACzB,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACvB,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,EACnE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,aAAa,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,aAAa,CAAC,CAAC;YAC1C,IACE,IAAA,sBAAY,EAAC,aAAa,CAAC,KAAK,aAAa;gBAC7C,QAAQ,CAAC,cAAc,EAAE;gBACzB,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAClB,QAAQ,CAAC,KAAK,KAAK,CAAC;gBACpB,QAAQ,CAAC,IAAI,KAAK,CAAC;gBACnB,IAAA,sBAAY,EAAC,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE;gBAC1C,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,EACnE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC;QACH,wBAAwB,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC;YACtB,GAAG,IAAA,gEAAmC,GAAE;YACxC,+BAA+B,EAAE,GAAG;YACpC,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,uBAAuB,EAAE,YAAY;YACrC,0BAA0B,EAAE,MAAM;YAClC,uBAAuB,EAAE,EAAE;YAC3B,uBAAuB,EAAE,EAAE;YAC3B,qBAAqB,EAAE,UAAU;YACjC,IAAI,EAAE,WAAW,CAAC,SAAS;YAC3B,GAAG,EAAE,WAAW,CAAC,SAAS;YAC1B,MAAM,EAAE,WAAW,CAAC,SAAS;YAC7B,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,cAAc,EAAE,WAAW,CAAC,KAAK;YACjC,eAAe,EAAE,WAAW,CAAC,MAAM;YACnC,aAAa,EAAE,WAAW,CAAC,IAAI;YAC/B,cAAc,EAAE,WAAW,CAAC,KAAK;YACjC,uBAAuB,EAAE,YAAY;YACrC,0BAA0B,EAAE,MAAM;YAClC,uBAAuB,EAAE,EAAE;YAC3B,uBAAuB,EAAE,EAAE;YAC3B,qBAAqB,EAAE,UAAU;SAClC,CAAC,CAAC;QACH,wBAAwB,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,wBAAwB,EAAE,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,iCAAiC,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,iCAAiC,CAC/C,KAA0C,EAC1C,QAAoC,8BAAS,EAC7C,oBAAyC,sBAAY;IAKrD,MAAM,EACJ,aAAa,EAAE,IAAI,EACnB,UAAU,EACV,aAAa,GACd,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACjE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,eAAe,GAAG,CAAC,MAAe,EAAE,EAAE;QAC1C,MAAM,YAAY,GAAG,IAAA,mBAAS,EAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACnD,IACE,IAAA,sBAAY,EAAC,aAAa,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,IAAI;YACvD,YAAY,CAAC,cAAc,EAAE;YAC7B,CAAC,YAAY,CAAC,MAAM,EAAE;YACtB,YAAY,CAAC,KAAK,KAAK,CAAC;YACxB,YAAY,CAAC,IAAI,IAAI,CAAC;YACtB,YAAY,CAAC,IAAI,GAAG,cAAc;YAClC,CAAC,gBAAgB,CAAC,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YACrE,CAAC,MAAM;gBACL,IAAA,wBAAU,EAAC,QAAQ,CAAC;qBACjB,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;qBAC7C,MAAM,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,EAC5C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,IAAI,IAAI;YAAE,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACjE,KAAK,CAAC,qBAAqB,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACxD,KAAK,CAAC,eAAe,EAAE,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,eAAe,CAAC,KAAK,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,+BAA+B,CAC5C,KAAK,CAAC,aAAa,EACnB,CAAC,WAAW,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,EAAE;gBACrD,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,QAAQ,EAAE,MAAM;gBAChB,GAAG,EAAE,WAAW;gBAChB,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;gBAC1B,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK;gBAC3C,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,eAAe,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CACF,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC"}