@engramx/client 0.16.0-rc.2 → 0.16.0-rc.21

package/dist/evidence.d.ts

@@ -0,0 +1,94 @@
+import { toHexString, type SealedRow } from './recordChain.js';
+import { verifyHistoricalCertificate } from './certifiedAudit.js';
+export declare const EVIDENCE_FORMAT = "engramx-evidence/1";
+/**
+ * The bundle, as JSON. Hashes are lowercase hex; bytes and certificates base64; every integer a
+ * decimal string (JSON numbers lose precision past 2^53, and record times are nanoseconds).
+ */
+export interface EvidenceBundle {
+    format: typeof EVIDENCE_FORMAT;
+    /** The canister whose record this is (an engram, usually). */
+    canisterId: string;
+    /** The record entry being proven, in full. */
+    entry: {
+        id: string;
+        timestampNs: string;
+        caller: string;
+        callerRole: string;
+        operation: string;
+        details: string;
+        success: boolean;
+        /** As served; checked when present. */
+        entryHash?: string;
+    };
+    /** The record head just before the entry (the write receipt's `recordPrev`). */
+    recordPrev: string;
+    /** The record's switch point to the hash-first rule, as its record read serves it. */
+    hashFirstFrom: string;
+    /** A certified head captured after the entry (`getCertifiedAuditHead`). */
+    certified: {
+        certificate: string;
+        headHash: string;
+        /** Entries ever appended, as the canister claimed; the walk proves or refutes it. */
+        total?: string;
+        /** The registry's tree format only: the witness, and the head is the `audit_head` leaf. */
+        witness?: string | null;
+    };
+    /** Hash-only rows after the entry, up to (at least) the certified head. Absent: fetch them. */
+    rows?: {
+        id: string;
+        digest: string;
+        entryHash: string;
+    }[];
+    /** The memory write the entry records, when the bundle proves content too. */
+    write?: {
+        path: string;
+        /** The bytes the write sent: the appended delta, or the whole new content of a set. */
+        bytes: string;
+        /** The writer's principal (the event's `by`). */
+        by: string;
+        receipt: {
+            version: string;
+            seq: string;
+            head: string;
+            prev: string;
+            atNs: string;
+            contentRoot: string;
+            size: string;
+        };
+    };
+}
+export interface EvidenceLink {
+    link: string;
+    ok: boolean;
+    detail: string;
+}
+export interface EvidenceCheck {
+    ok: boolean;
+    links: EvidenceLink[];
+    /** The first broken link's detail; 'ok' when every link held. */
+    why: string;
+    signedTimeNs?: bigint;
+    /** Entries walked past the proven entry to the certified head. */
+    distance?: bigint;
+    /** Entries the certified head covers (the walk's proof of `total`). */
+    entriesCovered?: bigint;
+}
+export interface CheckOptions {
+    /** Default: the pinned IC mainnet root key. Anything else is printed as such by the CLI. */
+    rootKey?: Uint8Array;
+    /** Rows to walk when the bundle carries none, or too few: fetched from `fromId` onward. */
+    fetchRows?: (fromId: bigint) => Promise<{
+        rows: SealedRow[];
+        hashFirstFrom: bigint;
+    }>;
+    /** For tests only: stands in for the subnet's signature, which a test cannot produce. */
+    verifyCertificate?: typeof verifyHistoricalCertificate;
+}
+/** Run every link. Never throws for a broken bundle: a malformed field is a broken link, named. */
+export declare function checkEvidence(bundle: EvidenceBundle, opts?: CheckOptions): Promise<EvidenceCheck>;
+/** Encode a bundle field from bytes. */
+export declare const bundleHex: typeof toHexString;
+export declare const bundleB64: (b: Uint8Array | number[]) => string;
+/** For a page's full items: the hash-only row of each, so a page that mixes both can be walked. */
+export { sealedRowOf, recordEntryBody } from './recordChain.js';

package/dist/evidence.js

@@ -0,0 +1,352 @@
+// Evidence bundles: what a writer captures right after a write, and the check anyone runs on it.
+//
+// ⟨ADDED 2026-10-15, the owner's ruling 6B of 2026-10-14⟩ The claim a bundle proves is narrow and
+// exact: "this entry — and, when the bundle carries one, this write's bytes — was in the record by
+// the time the subnet signed this certificate." The check is a chain of links, and each must hold:
+//
+//   1. content → memory event   the bytes, with the receipt's previous head, time, size and content
+//                               root, rebuild the memory-file event whose hash is the receipt's head;
+//   2. memory event → entry     the record entry names that event (`seq=…` and `head=…`);
+//   3. entry → entry hash       the entry's body, hashed first and chained onto the record head
+//                               before it (the receipt's `recordPrev`);
+//   4. certificate              it verifies against the pinned IC mainnet root key for this canister,
+//                               at any age, and its signed `/time` is read;
+//   5. certified head           the certificate's certified data is the bundle's head;
+//   6. walk                     from the entry, through hash-only rows (from the bundle, or fetched
+//                               from the canister by anyone), to the certified head;
+//   7. total                    the number of entries that head covers, proven by the walk, is the
+//                               number the bundle claims.
+//
+// What it does NOT prove: that nothing was written elsewhere (another path, engram or key), or any
+// time EARLIER than the certificate's — an entry's certified time is the signed time of the earliest
+// certificate one keeps that covers it. A controller can rewrite a record and certify a new,
+// self-consistent head; only someone who kept an OLDER certificate catches that, which is why the
+// bundle keeps the certificate's bytes, not a flag saying one was checked.
+//
+// NODE-ONLY: the memory-file half (ledgerfsHash.ts) hashes with node:crypto. The browser-safe parts
+// (the chain walk, the historical certificate check) are in recordChain.ts and certifiedAudit.ts.
+import { Principal } from '@icp-sdk/core/principal';
+import { contentRoot as ledgerContentRoot, chunkHash, deltaHash, eventHash, } from './ledgerfsHash.js';
+import { recordEntryHash, sameBytes, toHexString, walkToCertifiedHead, } from './recordChain.js';
+import { verifyHistoricalCertificate } from './certifiedAudit.js';
+export const EVIDENCE_FORMAT = 'engramx-evidence/1';
+/** ledgerfs's fixed chunk size (src/ledgerfs/Types.mo · CHUNK_SIZE) — part of every content root. */
+const CHUNK_SIZE = 262144;
+// ── parsing (every field checked, so a malformed bundle is named, never half-checked) ────────────
+const hex = (what, h, len) => {
+    if (typeof h !== 'string' || !/^([0-9a-f]{2})*$/.test(h)) {
+        throw new Error(`${what} is not lowercase hex`);
+    }
+    const out = Uint8Array.from(h.match(/../g) ?? [], (b) => parseInt(b, 16));
+    if (len !== undefined && out.length !== len)
+        throw new Error(`${what} is ${out.length} bytes, not ${len}`);
+    return out;
+};
+const nat = (what, n) => {
+    if (typeof n !== 'string' || !/^\d+$/.test(n))
+        throw new Error(`${what} is not a decimal string`);
+    return BigInt(n);
+};
+const int = (what, n) => {
+    if (typeof n !== 'string' || !/^-?\d+$/.test(n))
+        throw new Error(`${what} is not a decimal string`);
+    return BigInt(n);
+};
+const b64 = (what, s) => {
+    if (typeof s !== 'string')
+        throw new Error(`${what} is not base64 text`);
+    return new Uint8Array(Buffer.from(s, 'base64'));
+};
+/** Which ledgerfs op a record entry's operation wrote — the two a writer can rebuild from its bytes. */
+function opKind(operation) {
+    if (operation === 'memory.append' ||
+        operation === 'mcp.append' ||
+        operation === 'memory.append.session') {
+        return 'append';
+    }
+    if (operation === 'memory.write' || operation === 'memory.revise')
+        return 'set';
+    return null;
+}
+/** The memory-file event a write committed, rebuilt from its bytes and its receipt. */
+function rebuildEvent(kind, w, bytes) {
+    const r = w.receipt;
+    const seq = nat('write.receipt.seq', r.seq);
+    const size = nat('write.receipt.size', r.size);
+    const receiptRoot = hex('write.receipt.contentRoot', r.contentRoot, 32);
+    let op;
+    let contentRootChecked = false;
+    if (kind === 'append') {
+        op = { kind: 'append', deltaHash: deltaHash(bytes), deltaSize: bytes.length, newSize: size };
+    }
+    else {
+        // A set seals its whole content from an empty tail: full 256 KiB chunks, then the remainder,
+        // every ref born at this event's seq (Store.prepareSet · seal).
+        const full = [];
+        let i = 0;
+        for (; i + CHUNK_SIZE <= bytes.length; i += CHUNK_SIZE)
+            full.push(bytes.subarray(i, i + CHUNK_SIZE));
+        const tail = bytes.subarray(i);
+        const fullHashes = full.map((c) => chunkHash(c));
+        const tailHash = tail.length > 0 ? chunkHash(tail) : null;
+        const root = ledgerContentRoot(fullHashes, tailHash);
+        const chunks = fullHashes.map((h) => ({ hash: h, size: CHUNK_SIZE, birthSeq: seq }));
+        if (tailHash)
+            chunks.push({ hash: tailHash, size: tail.length, birthSeq: seq });
+        op = { kind: 'set', manifest: { chunks, totalSize: BigInt(bytes.length), contentRoot: root } };
+        contentRootChecked = sameBytes(root, receiptRoot);
+    }
+    return {
+        event: {
+            seq,
+            path: w.path,
+            version: nat('write.receipt.version', r.version),
+            op,
+            byRaw: Principal.fromText(w.by).toUint8Array(),
+            at: int('write.receipt.atNs', r.atNs),
+            size,
+            contentRoot: receiptRoot,
+            prev: hex('write.receipt.prev', r.prev, 32),
+        },
+        contentRootChecked,
+    };
+}
+/** Run every link. Never throws for a broken bundle: a malformed field is a broken link, named. */
+export async function checkEvidence(bundle, opts = {}) {
+    const links = [];
+    const done = (extra = {}) => {
+        const broken = links.find((l) => !l.ok);
+        return {
+            ok: !broken,
+            links,
+            why: broken ? `${broken.link}: ${broken.detail}` : 'ok',
+            ...extra,
+        };
+    };
+    const fail = (link, detail, extra = {}) => {
+        links.push({ link, ok: false, detail });
+        return done(extra);
+    };
+    try {
+        if (bundle?.format !== EVIDENCE_FORMAT) {
+            return fail('bundle', `format is ${JSON.stringify(bundle?.format)}, not "${EVIDENCE_FORMAT}"`);
+        }
+        Principal.fromText(bundle.canisterId);
+    }
+    catch (e) {
+        return fail('bundle', e.message);
+    }
+    let entry;
+    let entryId;
+    let recordPrev;
+    let hashFirstFrom;
+    try {
+        const e = bundle.entry;
+        entryId = nat('entry.id', e.id);
+        entry = {
+            id: entryId,
+            timestampNs: int('entry.timestampNs', e.timestampNs),
+            caller: Principal.fromText(e.caller).toText(),
+            callerRole: String(e.callerRole),
+            operation: String(e.operation),
+            details: String(e.details),
+            success: e.success === true,
+        };
+        recordPrev = hex('recordPrev', bundle.recordPrev);
+        if (recordPrev.length !== 0 && recordPrev.length !== 32)
+            throw new Error('recordPrev is neither empty (genesis) nor 32 bytes');
+        hashFirstFrom = nat('hashFirstFrom', bundle.hashFirstFrom);
+    }
+    catch (e) {
+        return fail('bundle', e.message);
+    }
+    // 1–2. content → memory event → record entry
+    if (bundle.write) {
+        const kind = opKind(entry.operation);
+        if (!kind) {
+            return fail('content → memory event', `the entry's operation "${entry.operation}" is not a write this check can rebuild from its bytes (an append or a set)`);
+        }
+        let built;
+        let receiptHead;
+        try {
+            built = rebuildEvent(kind, bundle.write, b64('write.bytes', bundle.write.bytes));
+            receiptHead = hex('write.receipt.head', bundle.write.receipt.head, 32);
+        }
+        catch (e) {
+            return fail('content → memory event', `the write is malformed: ${e.message}`);
+        }
+        if (kind === 'set' && !built.contentRootChecked) {
+            return fail('content → memory event', "the bytes do not hash to the receipt's content root: they are not the content this write set");
+        }
+        const h = eventHash(built.event);
+        if (!sameBytes(h, receiptHead)) {
+            return fail('content → memory event', `the event rebuilt from the bytes and the receipt hashes to ${toHexString(h)}, not to the receipt's head ` +
+                `${toHexString(receiptHead)}: the bytes are not the ones written, or the receipt's previous head, time, size ` +
+                `or content root is wrong`);
+        }
+        links.push({
+            link: 'content → memory event',
+            ok: true,
+            detail: `${kind === 'append' ? 'the appended bytes' : 'the content'} rebuild event ${bundle.write.receipt.seq}, head ${toHexString(receiptHead)}`,
+        });
+        // The engram writes a memory entry's details as `v=<version>[ src=…] seq=<seq> head=<head>[ conn=…]
+        // path=<path>[ key=…]`, capped at 512 characters with the path LAST so a cap cuts the path, never
+        // the proof (main.mo · receiptSuffix). All three tokens must name THIS write.
+        const d = entry.details;
+        const seqTok = ` seq=${bundle.write.receipt.seq} head=${toHexString(receiptHead)}`;
+        const versionTok = `v=${bundle.write.receipt.version} `;
+        const pathTok = ` path=${bundle.write.path}`;
+        const pathCut = Array.from(d).length === 512 && pathTok.startsWith(d.slice(d.lastIndexOf(' path=')));
+        if (!d.startsWith(versionTok) ||
+            !d.includes(`${seqTok} `) ||
+            !(d.includes(pathTok) || pathCut)) {
+            return fail('memory event → record entry', `the entry does not name this write: its details are "${d.slice(0, 200)}", and they must begin ` +
+                `"${versionTok.trim()}", carry "${seqTok.trim()}" and name path "${bundle.write.path}"`);
+        }
+        links.push({
+            link: 'memory event → record entry',
+            ok: true,
+            detail: `entry ${entryId} records seq ${bundle.write.receipt.seq}`,
+        });
+    }
+    // 3. entry → its hash
+    const entryHash = await recordEntryHash(entry, recordPrev, hashFirstFrom);
+    if (bundle.entry.entryHash !== undefined) {
+        let served;
+        try {
+            served = hex('entry.entryHash', bundle.entry.entryHash, 32);
+        }
+        catch (e) {
+            return fail('record entry → entry hash', e.message);
+        }
+        if (!sameBytes(served, entryHash)) {
+            return fail('record entry → entry hash', `the entry, chained onto the previous record head ${toHexString(recordPrev) || '(genesis)'}, hashes to ` +
+                `${toHexString(entryHash)}, not to its entry hash ${toHexString(served)}: the entry's text, or the receipt's previous record head, is wrong`);
+        }
+    }
+    links.push({
+        link: 'record entry → entry hash',
+        ok: true,
+        detail: `entry ${entryId} hashes to ${toHexString(entryHash)} (${entryId >= hashFirstFrom ? 'hashed first, then chained' : 'the older rule'})`,
+    });
+    // 4–5. certificate and certified head
+    let certified;
+    let claimedHead;
+    try {
+        claimedHead = hex('certified.headHash', bundle.certified.headHash, 32);
+        const witness = bundle.certified.witness
+            ? b64('certified.witness', bundle.certified.witness)
+            : null;
+        certified = await (opts.verifyCertificate ?? verifyHistoricalCertificate)({
+            certificate: b64('certified.certificate', bundle.certified.certificate),
+            canisterId: bundle.canisterId,
+            rootKey: opts.rootKey,
+            witness,
+            leafPath: witness ? [new TextEncoder().encode('audit_head')] : undefined,
+        });
+    }
+    catch (e) {
+        return fail('certificate', e.message);
+    }
+    if (!certified.verified || certified.signedTimeNs === null) {
+        return fail('certificate', certified.why);
+    }
+    const signedTimeNs = certified.signedTimeNs;
+    links.push({
+        link: 'certificate',
+        ok: true,
+        detail: `signed by the subnet at ${new Date(Number(signedTimeNs / 1000000n)).toISOString()} for ${bundle.canisterId}`,
+    });
+    const certifiedHead = certified.leaf ?? certified.certifiedData;
+    if (!sameBytes(certifiedHead, claimedHead)) {
+        return fail('certified head', `the certificate certifies ${toHexString(certifiedHead)}, not the bundle's head ${toHexString(claimedHead)}`, { signedTimeNs });
+    }
+    links.push({
+        link: 'certified head',
+        ok: true,
+        detail: `the subnet signed head ${toHexString(certifiedHead)}`,
+    });
+    // The certificate predates the entry when it certifies the head the entry was chained onto.
+    if (sameBytes(certifiedHead, recordPrev)) {
+        return fail('walk', `the certificate precedes the entry: it certifies the record head from just before entry ${entryId}, so it was captured before the write and proves nothing about it`, { signedTimeNs });
+    }
+    // 6. walk
+    let rows;
+    try {
+        rows = (bundle.rows ?? []).map((r, i) => ({
+            id: nat(`rows[${i}].id`, r.id),
+            digest: hex(`rows[${i}].digest`, r.digest, 32),
+            entryHash: hex(`rows[${i}].entryHash`, r.entryHash, 32),
+        }));
+    }
+    catch (e) {
+        return fail('walk', `the bundle's rows are malformed: ${e.message}`, {
+            signedTimeNs,
+        });
+    }
+    let walk = await walkToCertifiedHead({
+        fromId: entryId,
+        fromHash: entryHash,
+        rows,
+        certifiedHead,
+        hashFirstFrom,
+    });
+    // Fetch only when the bundle carried no rows, or its rows simply ran out. A row that is missing,
+    // swapped or altered INSIDE the bundle is a broken bundle — never repaired by fetching.
+    const ranOut = !walk.ok && (rows.length === 0 || /was not reached/.test(walk.why));
+    if (!walk.ok && ranOut && opts.fetchRows) {
+        const last = rows.length ? rows[rows.length - 1].id : entryId;
+        let fetched;
+        try {
+            fetched = await opts.fetchRows(rows.length ? last + 1n : entryId + 1n);
+        }
+        catch (e) {
+            return fail('walk', `fetching hash-only rows failed: ${e.message}`, {
+                signedTimeNs,
+            });
+        }
+        if (fetched.hashFirstFrom !== hashFirstFrom) {
+            return fail('walk', `the canister says its record switched rule at ${fetched.hashFirstFrom}, the bundle says ${hashFirstFrom}`, { signedTimeNs });
+        }
+        walk = await walkToCertifiedHead({
+            fromId: entryId,
+            fromHash: entryHash,
+            rows: [...rows, ...fetched.rows.filter((r) => r.id > last)],
+            certifiedHead,
+            hashFirstFrom,
+        });
+    }
+    if (!walk.ok)
+        return fail('walk', walk.why, { signedTimeNs });
+    links.push({
+        link: 'walk',
+        ok: true,
+        detail: `${walk.distance} entr${walk.distance === 1n ? 'y' : 'ies'} from entry ${entryId} to the certified head (entry ${walk.headId})`,
+    });
+    // 7. total
+    const covered = walk.headId + 1n;
+    if (bundle.certified.total !== undefined) {
+        let claimed;
+        try {
+            claimed = nat('certified.total', bundle.certified.total);
+        }
+        catch (e) {
+            return fail('total', e.message, { signedTimeNs, distance: walk.distance });
+        }
+        if (claimed !== covered) {
+            return fail('total', `the bundle says the head covers ${claimed} entries; the walk proves it covers ${covered}`, { signedTimeNs, distance: walk.distance });
+        }
+        links.push({
+            link: 'total',
+            ok: true,
+            detail: `the certified head covers exactly ${covered} entries`,
+        });
+    }
+    return done({ signedTimeNs, distance: walk.distance, entriesCovered: covered });
+}
+/** Encode a bundle field from bytes. */
+export const bundleHex = toHexString;
+export const bundleB64 = (b) => Buffer.from(Uint8Array.from(b)).toString('base64');
+/** For a page's full items: the hash-only row of each, so a page that mixes both can be walked. */
+export { sealedRowOf, recordEntryBody } from './recordChain.js';
+//# sourceMappingURL=evidence.js.map

package/dist/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../src/evidence.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,EAAE;AACF,kGAAkG;AAClG,mGAAmG;AACnG,mGAAmG;AACnG,EAAE;AACF,oGAAoG;AACpG,sGAAsG;AACtG,0FAA0F;AAC1F,gGAAgG;AAChG,wEAAwE;AACxE,sGAAsG;AACtG,4EAA4E;AAC5E,uFAAuF;AACvF,oGAAoG;AACpG,qFAAqF;AACrF,mGAAmG;AACnG,0DAA0D;AAC1D,EAAE;AACF,mGAAmG;AACnG,qGAAqG;AACrG,6FAA6F;AAC7F,kGAAkG;AAClG,2EAA2E;AAC3E,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAElG,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EACL,WAAW,IAAI,iBAAiB,EAChC,SAAS,EACT,SAAS,EACT,SAAS,GAGV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,SAAS,EACT,WAAW,EACX,mBAAmB,GAGpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,2BAA2B,EAA8B,MAAM,qBAAqB,CAAC;AAE9F,MAAM,CAAC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAEpD,qGAAqG;AACrG,MAAM,UAAU,GAAG,MAAO,CAAC;AAmF3B,oGAAoG;AAEpG,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,CAAU,EAAE,GAAY,EAAc,EAAE;IACjE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1E,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QACzC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AACF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,CAAU,EAAU,EAAE;IAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IAClG,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC,CAAC;AACF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,CAAU,EAAU,EAAE;IAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC,CAAC;AACF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,CAAU,EAAc,EAAE;IACnD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qBAAqB,CAAC,CAAC;IACzE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,wGAAwG;AACxG,SAAS,MAAM,CAAC,SAAiB;IAC/B,IACE,SAAS,KAAK,eAAe;QAC7B,SAAS,KAAK,YAAY;QAC1B,SAAS,KAAK,uBAAuB,EACrC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,SAAS,KAAK,cAAc,IAAI,SAAS,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAChF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uFAAuF;AACvF,SAAS,YAAY,CACnB,IAAsB,EACtB,CAAuC,EACvC,KAAiB;IAEjB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IACpB,MAAM,GAAG,GAAG,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,2BAA2B,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACxE,IAAI,EAAM,CAAC;IACX,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/F,CAAC;SAAM,CAAC;QACN,6FAA6F;QAC7F,gEAAgE;QAChE,MAAM,IAAI,GAAiB,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,UAAU,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,UAAU;YACpD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACrF,IAAI,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAChF,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QAC/F,kBAAkB,GAAG,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,CAAC;IACD,OAAO;QACL,KAAK,EAAE;YACL,GAAG;YACH,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC;YAChD,EAAE;YACF,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,EAAE;YAC9C,EAAE,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC;YACrC,IAAI;YACJ,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;SAC5C;QACD,kBAAkB;KACnB,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAsB,EACtB,IAAI,GAAiB,EAAE;IAEvB,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,KAAK,GAA2B,EAAE,EAAiB,EAAE;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxC,OAAO;YACL,EAAE,EAAE,CAAC,MAAM;YACX,KAAK;YACL,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;YACvD,GAAG,KAAK;SACT,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,KAAK,GAA2B,EAAE,EAAE,EAAE;QAChF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,MAAM,KAAK,eAAe,EAAE,CAAC;YACvC,OAAO,IAAI,CACT,QAAQ,EACR,aAAa,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,eAAe,GAAG,CACxE,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,QAAQ,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,KAAwB,CAAC;IAC7B,IAAI,OAAe,CAAC;IACpB,IAAI,UAAsB,CAAC;IAC3B,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QACvB,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC,KAAK,GAAG;YACN,EAAE,EAAE,OAAO;YACX,WAAW,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,WAAW,CAAC;YACpD,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;YAC7C,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;YAChC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9B,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI;SAC5B,CAAC;QACF,UAAU,GAAG,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE;YACrD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,aAAa,GAAG,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,QAAQ,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,6CAA6C;IAC7C,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CACT,wBAAwB,EACxB,0BAA0B,KAAK,CAAC,SAAS,6EAA6E,CACvH,CAAC;QACJ,CAAC;QACD,IAAI,KAAsC,CAAC;QAC3C,IAAI,WAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACjF,WAAW,GAAG,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,wBAAwB,EAAE,2BAA4B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAChD,OAAO,IAAI,CACT,wBAAwB,EACxB,8FAA8F,CAC/F,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CACT,wBAAwB,EACxB,8DAA8D,WAAW,CAAC,CAAC,CAAC,8BAA8B;gBACxG,GAAG,WAAW,CAAC,WAAW,CAAC,mFAAmF;gBAC9G,0BAA0B,CAC7B,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,wBAAwB;YAC9B,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,kBAAkB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,UAAU,WAAW,CAAC,WAAW,CAAC,EAAE;SAClJ,CAAC,CAAC;QACH,oGAAoG;QACpG,kGAAkG;QAClG,8EAA8E;QAC9E,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QACxB,MAAM,MAAM,GAAG,QAAQ,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,SAAS,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QACnF,MAAM,UAAU,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC;QACxD,MAAM,OAAO,GAAG,SAAS,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GACX,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACvF,IACE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;YACzB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,MAAM,GAAG,CAAC;YACzB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,EACjC,CAAC;YACD,OAAO,IAAI,CACT,6BAA6B,EAC7B,wDAAwD,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,yBAAyB;gBAC9F,IAAI,UAAU,CAAC,IAAI,EAAE,aAAa,MAAM,CAAC,IAAI,EAAE,oBAAoB,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAC1F,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,6BAA6B;YACnC,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,SAAS,OAAO,gBAAgB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,2BAA2B,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CACT,2BAA2B,EAC3B,oDAAoD,WAAW,CAAC,UAAU,CAAC,IAAI,WAAW,cAAc;gBACtG,GAAG,WAAW,CAAC,SAAS,CAAC,2BAA2B,WAAW,CAAC,MAAM,CAAC,qEAAqE,CAC/I,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,2BAA2B;QACjC,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,SAAS,OAAO,cAAc,WAAW,CAAC,SAAS,CAAC,KAAK,OAAO,IAAI,aAAa,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,gBAAgB,GAAG;KAC/I,CAAC,CAAC;IAEH,sCAAsC;IACtC,IAAI,SAAgC,CAAC;IACrC,IAAI,WAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,WAAW,GAAG,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO;YACtC,CAAC,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;YACpD,CAAC,CAAC,IAAI,CAAC;QACT,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,IAAI,2BAA2B,CAAC,CAAC;YACxE,WAAW,EAAE,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC;YACvE,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO;YACP,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,aAAa,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,aAAa;QACnB,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,2BAA2B,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,QAAU,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,MAAM,CAAC,UAAU,EAAE;KACxH,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,aAAc,CAAC;IACjE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CACT,gBAAgB,EAChB,6BAA6B,WAAW,CAAC,aAAa,CAAC,2BAA2B,WAAW,CAAC,WAAW,CAAC,EAAE,EAC5G,EAAE,YAAY,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,gBAAgB;QACtB,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,0BAA0B,WAAW,CAAC,aAAa,CAAC,EAAE;KAC/D,CAAC,CAAC;IAEH,4FAA4F;IAC5F,IAAI,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,CAAC;QACzC,OAAO,IAAI,CACT,MAAM,EACN,2FAA2F,OAAO,mEAAmE,EACrK,EAAE,YAAY,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,UAAU;IACV,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;SACxD,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,MAAM,EAAE,oCAAqC,CAAW,CAAC,OAAO,EAAE,EAAE;YAC9E,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,GAAG,MAAM,mBAAmB,CAAC;QACnC,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,SAAS;QACnB,IAAI;QACJ,aAAa;QACb,aAAa;KACd,CAAC,CAAC;IACH,iGAAiG;IACjG,wFAAwF;IACxF,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/D,IAAI,OAAqD,CAAC;QAC1D,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,MAAM,EAAE,mCAAoC,CAAW,CAAC,OAAO,EAAE,EAAE;gBAC7E,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;YAC5C,OAAO,IAAI,CACT,MAAM,EACN,iDAAiD,OAAO,CAAC,aAAa,qBAAqB,aAAa,EAAE,EAC1G,EAAE,YAAY,EAAE,CACjB,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,MAAM,mBAAmB,CAAC;YAC/B,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;YAC3D,aAAa;YACb,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9D,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,QAAQ,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,eAAe,OAAO,iCAAiC,IAAI,CAAC,MAAM,GAAG;KACxI,CAAC,CAAC;IAEH,WAAW;IACX,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACjC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,OAAO,EAAG,CAAW,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,OAAO,IAAI,CACT,OAAO,EACP,mCAAmC,OAAO,uCAAuC,OAAO,EAAE,EAC1F,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAC1C,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,qCAAqC,OAAO,UAAU;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,wCAAwC;AACxC,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC;AACrC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAwB,EAAU,EAAE,CAC5D,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAErD,mGAAmG;AACnG,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/idl.d.ts

@@ -1,3 +1,4 @@
+import type { _SERVICE as GeneratedEngramService } from '@engramx/idl/engram';
 type InterfaceFactory = (env: {
     IDL: any;
 }) => any;
@@ -8,6 +9,9 @@ type InterfaceFactory = (env: {
  * vendored inside this package, so a missing name is a fact about this build, identical in every
  * environment — never a runtime surprise that only some caller hits. The message names the fix,
  * because the tempting wrong fix is to paste the old shape back in.
+ * ⟨2026-10-06⟩ "vendored inside this package" is no longer how: the factory comes from
+ * `@engramx/idl`, pinned to this package's exact version when it is packed. The conclusion stands
+ * for the same reason — one version of the interface per version of this package.
  */
 export declare function projectService(generated: InterfaceFactory, methods: readonly string[], IDL: any): any;
 /** A factory over the engram interface, narrowed to `methods`. */
@@ -25,11 +29,11 @@ export declare const marketSubset: (methods?: readonly string[]) => InterfaceFac
  * nothing calls reads as a supported capability to the next person who greps for one, and a name
  * here the CANISTER does not serve is a construction-time failure — projectService throws on it.
  *
- * The market serves 64 methods. These nine are the BUYER path, which is the only path this SDK has
+ * The market serves 64 methods. These seven are the BUYER path, which is the only path this SDK has
  * ever wrapped: the seller surface (uploads, endpoints, service registration, pricing) is console
  * work, and the admin surface is recovery work. Neither belongs in an agent's client library.
  */
-export declare const SDK_MARKET_METHODS: readonly ["confirmJob", "disputeJob", "getJob", "getJobResult", "getJobStatus", "listServices", "createJob"];
+export declare const SDK_MARKET_METHODS: readonly ['confirmJob', 'disputeJob', 'getJob', 'getJobResult', 'getJobStatus', 'listServices', 'createJob'];
 /**
  * The engram methods EngramClient's actor may call.
  *
@@ -52,11 +56,25 @@ export declare const SDK_MARKET_METHODS: readonly ["confirmJob", "disputeJob", "
  * owner-mode `git-revert`, which reaches the actor directly and says so at its call site, and the
  * encryption migrations the encryption runbook names by hand. If a name here has no caller, that is
  * a bug in this list, not a reserve.
+ * ⟨2026-10-13, the owner's 5A⟩ `git-revert` no longer calls writeMemory: its canister restore moved
+ * to @engramx/owner (`--restore`). The encryption migrations and `setMemoryEncryption` are now the
+ * only callers of `writeMemory` and `setEncryptionEnabled`; both names leave this list when that
+ * trio moves to the owner kit too (it waits on the kit taking `@engramx/client/encryption` as a
+ * dependency).
  *
  * ADDING A NAME IS A PRODUCT DECISION, not a maintenance one (surface-budget rule L6): no addition
  * without a named caller.
  */
-export declare const SDK_ENGRAM_METHODS: readonly ["about", "appendMemory", "backupAbort", "backupFinalize", "backupInit", "backupPullChunk", "backupPushChunk", "getBackupMetadata", "getCertifiedAuditHead", "getEncryptedMemoryKey", "getMemoryHistory", "getMemoryKeyVerificationKey", "getOwnerConsole", "getProtectedPaths", "getWalletBalances", "getWorldIdVerification", "listAuditEntries", "listBackups", "listGuardians", "listMemoryFiles", "listMyApprovalRequests", "readMemory", "readMemoryBatch", "readMemoryBytes", "pairAgent", "reviseMemory", "resignAgent", "rotateAgentKeyHash", "nominateAgentKey", "acceptAgentKeyNomination", "getChildAllowance", "openChildEngram", "getSpawnedBy", "sessionReadContext", "setEncryptionEnabled", "writeMemory"];
+export declare const SDK_ENGRAM_METHODS: readonly ['about', 'appendMemory', 'backupAbort', 'backupFinalize', 'backupInit', 'backupPullChunk', 'backupPushChunk', 'getBackupMetadata', 'getBackupRetention', 'getCertifiedAuditHead', 'getEncryptedMemoryKey', 'getMemoryHistory', 'getMemoryKeyVerificationKey', 'getOwnerConsole', 'getProtectedPaths', 'getWalletBalances', 'getWorldIdVerification', 'listAuditEntries', 'listBackups', 'listGuardians', 'listMemoryFiles', 'listMyApprovalRequests', 'readMemory', 'readMemoryBatch', 'readMemoryBytes', 'pairAgent', 'reviseMemory', 'resignAgent', 'myGrant', 'rotateAgentKeyHash', 'nominateAgentKey', 'acceptAgentKeyNomination', 'getChildAllowance', 'openChildEngram', 'getSpawnedBy', 'sessionReadContext', 'setEncryptionEnabled', 'writeMemory'];
+/** One of the engram methods this SDK may call. */
+export type SdkEngramMethod = (typeof SDK_ENGRAM_METHODS)[number];
+/**
+ * ⟨2026-10-13, the owner's 3A⟩ The TYPE of the actor EngramClient builds: the generated engram
+ * interface, narrowed to SDK_ENGRAM_METHODS. It was `ActorSubclass<any>`, so a call with the wrong
+ * arguments, a method this list does not declare, or a reply read as the wrong shape compiled and
+ * failed at run time (types.ts says which ones did). Now tsc checks every call and every reply.
+ */
+export type SdkEngramService = Pick<GeneratedEngramService, SdkEngramMethod>;
 /**
  * The engram actor interface EngramClient builds. Exported because the fidelity gate imports it
  * and because a caller holding its own agent may want the same narrowing; it is not part of the

package/dist/idl.js

@@ -16,6 +16,18 @@
 // derived factory cannot hold that defect: there is no hand-typed shape left to be wrong. What
 // remains checkable is FRESHNESS of the vendored copy and VALIDITY of the name list, and both are
 // gates in test/idl-fidelity.test.ts.
+// ⟨2026-10-06, the owner's ruling of 2026-10-05: "engramx/idl changes in rc.3"⟩ There is no vendored
+// copy any more. The three factories below are imported from `@engramx/idl`, the package the
+// release publishes the generated interfaces in, and `src/generated/` inside this package is
+// deleted. The dependency is declared `workspace:*`, which packing rewrites to the EXACT version
+// being released, so an installed @engramx/client@X always projects from @engramx/idl@X — the
+// interface it was tested against, never a neighbouring one. FRESHNESS is no longer this package's
+// question: @engramx/idl copies what scripts/gen-did.sh wrote, byte for byte, and its own test
+// (test/idl-package.test.ts at the repo root) holds that. What test/idl-fidelity.test.ts checks
+// now is that this package resolves the workspace's @engramx/idl, that the dist it resolves is
+// the generator's current output, that the projection keeps the package's signatures, and the
+// name list. WHAT WOULD MAKE THIS WRONG: a consumer forcing a different @engramx/idl version
+// (an `overrides` entry, a hand-edited lockfile); the exact pin is then theirs to break.
 //
 // WHY A METHOD SUBSET SURVIVES AT ALL. ADR-0018 retires the client-subset rule for clients that
 // ship WITH their canister — the platform apps deploy in the same release as the engram they
@@ -70,9 +82,9 @@
 // an older engram does not, the fix is the interface law itself — the field is `opt` from birth
 // (rule 1: absent + declared-`opt` decodes to null on both halves, measured cases 1 and 9) —
 // or a codegen-time projection. Never a hand edit here.
-import { idlFactory as generatedEngramIdl } from './generated/engram.idl.js';
-import { idlFactory as generatedRegistryIdl } from './generated/registry.idl.js';
-import { idlFactory as generatedMarketIdl } from './generated/market.idl.js';
+import { idlFactory as generatedEngramIdl } from '@engramx/idl/engram';
+import { idlFactory as generatedRegistryIdl } from '@engramx/idl/registry';
+import { idlFactory as generatedMarketIdl } from '@engramx/idl/market';
 /**
  * Build a service carrying exactly `methods`, taking every signature from `generated`.
  *
@@ -80,6 +92,9 @@ import { idlFactory as generatedMarketIdl } from './generated/market.idl.js';
  * vendored inside this package, so a missing name is a fact about this build, identical in every
  * environment — never a runtime surprise that only some caller hits. The message names the fix,
  * because the tempting wrong fix is to paste the old shape back in.
+ * ⟨2026-10-06⟩ "vendored inside this package" is no longer how: the factory comes from
+ * `@engramx/idl`, pinned to this package's exact version when it is packed. The conclusion stands
+ * for the same reason — one version of the interface per version of this package.
  */
 export function projectService(generated, methods, IDL) {
     const served = new Map(generated({ IDL })._fields);
@@ -113,7 +128,7 @@ export const marketSubset = (methods = SDK_MARKET_METHODS) => ({ IDL }) => proje
  * nothing calls reads as a supported capability to the next person who greps for one, and a name
  * here the CANISTER does not serve is a construction-time failure — projectService throws on it.
  *
- * The market serves 64 methods. These nine are the BUYER path, which is the only path this SDK has
+ * The market serves 64 methods. These seven are the BUYER path, which is the only path this SDK has
  * ever wrapped: the seller surface (uploads, endpoints, service registration, pricing) is console
  * work, and the admin surface is recovery work. Neither belongs in an agent's client library.
  */
@@ -148,6 +163,11 @@ export const SDK_MARKET_METHODS = [
  * owner-mode `git-revert`, which reaches the actor directly and says so at its call site, and the
  * encryption migrations the encryption runbook names by hand. If a name here has no caller, that is
  * a bug in this list, not a reserve.
+ * ⟨2026-10-13, the owner's 5A⟩ `git-revert` no longer calls writeMemory: its canister restore moved
+ * to @engramx/owner (`--restore`). The encryption migrations and `setMemoryEncryption` are now the
+ * only callers of `writeMemory` and `setEncryptionEnabled`; both names leave this list when that
+ * trio moves to the owner kit too (it waits on the kit taking `@engramx/client/encryption` as a
+ * dependency).
  *
  * ADDING A NAME IS A PRODUCT DECISION, not a maintenance one (surface-budget rule L6): no addition
  * without a named caller.
@@ -158,6 +178,9 @@ export const SDK_ENGRAM_METHODS = [
     // it that the canister does not serve fails at RUNTIME with method-not-found, exactly like the
     // hand-written Motoko IDLs check-client-idls.mjs gates. Nothing type-checks it: projectService
     // narrows a generated factory, and an actor call is `any`.
+    // ⟨2026-10-13, the owner's 3A⟩ Something does now: SdkEngramService (below) is the generated
+    // interface narrowed to this list, and EngramClient's actor has that type — a name here the
+    // canister stopped serving fails to compile, and so does a call to a name not here.
     //
     // Six of the twenty MOVED to the market with the commerce graft (confirmJob, disputeJob, getJob,
     // getJobResult, listServices, createJob) and are NOT replaced here — they belong to a
@@ -174,6 +197,10 @@ export const SDK_ENGRAM_METHODS = [
     'backupPullChunk',
     'backupPushChunk',
     'getBackupMetadata',
+    // ⟨2026-10-21, the owner's round-11 answers h and m⟩ Named caller: EngramClient.getBackupRetention —
+    // an agent that uploads backups reads how many of its OWN the engram keeps per kind (the cap is per
+    // creator from that day: an agent's backup never removes another party's).
+    'getBackupRetention',
     'getCertifiedAuditHead',
     'getEncryptedMemoryKey',
     'getMemoryHistory',
@@ -200,6 +227,9 @@ export const SDK_ENGRAM_METHODS = [
     // ⟨2026-09-28⟩ Named caller: EngramClient.resignAgent — the agent's own exit, which the owner
     // decided the same day an agent must be able to take (and have recorded).
     'resignAgent',
+    // ⟨2026-10-21, the owner's round-11 answer g⟩ Named callers: EngramClient.myGrant and the MCP
+    // server's engram_my_grant tool — an agent reads its own grant (its own key only).
+    'myGrant',
     'rotateAgentKeyHash',
     // ⟨2026-09-29, the owner's ruling of that date (follow-up 10, option A)⟩ Named callers:
     // EngramClient.nominateAgentKey and EngramClient.acceptAgentKeyNomination — the agent's one-step

package/dist/idl.js.map

@@ -1 +1 @@
-{"version":3,"file":"idl.js","sourceRoot":"","sources":["../src/idl.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,EAAE;AACF,wFAAwF;AACxF,sFAAsF;AACtF,2FAA2F;AAC3F,6FAA6F;AAC7F,0FAA0F;AAC1F,qFAAqF;AACrF,6FAA6F;AAC7F,wFAAwF;AACxF,EAAE;AACF,4FAA4F;AAC5F,gGAAgG;AAChG,8FAA8F;AAC9F,iGAAiG;AACjG,+FAA+F;AAC/F,kGAAkG;AAClG,sCAAsC;AACtC,EAAE;AACF,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,8FAA8F;AAC9F,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,sFAAsF;AACtF,EAAE;AACF,kGAAkG;AAClG,uFAAuF;AACvF,EAAE;AACF,mGAAmG;AACnG,gGAAgG;AAChG,kFAAkF;AAClF,oGAAoG;AACpG,8FAA8F;AAC9F,0DAA0D;AAC1D,EAAE;AACF,2FAA2F;AAC3F,mEAAmE;AACnE,4EAA4E;AAC5E,mGAAmG;AACnG,kGAAkG;AAClG,mGAAmG;AACnG,oGAAoG;AACpG,4EAA4E;AAC5E,EAAE;AACF,iGAAiG;AACjG,oGAAoG;AACpG,6EAA6E;AAC7E,EAAE;AACF,8FAA8F;AAC9F,kGAAkG;AAClG,kGAAkG;AAClG,8FAA8F;AAC9F,gGAAgG;AAChG,mFAAmF;AACnF,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,oGAAoG;AACpG,iGAAiG;AACjG,mGAAmG;AACnG,oDAAoD;AACpD,EAAE;AACF,6FAA6F;AAC7F,4FAA4F;AAC5F,2FAA2F;AAC3F,8FAA8F;AAC9F,gGAAgG;AAChG,6FAA6F;AAC7F,wDAAwD;AACxD,OAAO,EAAE,UAAU,IAAI,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,UAAU,IAAI,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAI7E;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,SAA2B,EAC3B,OAA0B,EAC1B,GAAQ;IAER,MAAM,MAAM,GAAG,IAAI,GAAG,CAAc,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACtC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD;YACzF,uGAAuG,CAC1G,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GACvB,CAAC,OAA0B,EAAoB,EAAE,CACjD,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,kBAAsC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAEzE,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GACzB,CAAC,OAA0B,EAAoB,EAAE,CACjD,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,oBAAwC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAE3E,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GACvB,CAAC,UAA6B,kBAAkB,EAAoB,EAAE,CACtE,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,kBAAsC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAEzE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY;IACZ,YAAY;IACZ,QAAQ;IACR,cAAc;IACd,cAAc;IACd,cAAc;IACd,WAAW;CACH,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,8FAA8F;IAC9F,gGAAgG;IAChG,+FAA+F;IAC/F,+FAA+F;IAC/F,2DAA2D;IAC3D,EAAE;IACF,iGAAiG;IACjG,sFAAsF;IACtF,uCAAuC;IACvC,EAAE;IACF,gGAAgG;IAChG,+FAA+F;IAC/F,qEAAqE;IACrE,OAAO;IACP,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,uBAAuB;IACvB,uBAAuB;IACvB,kBAAkB;IAClB,6BAA6B;IAC7B,8FAA8F;IAC9F,4FAA4F;IAC5F,+FAA+F;IAC/F,4FAA4F;IAC5F,+BAA+B;IAC/B,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,kBAAkB;IAClB,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,wBAAwB;IACxB,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,WAAW;IACX,cAAc;IACd,8FAA8F;IAC9F,0EAA0E;IAC1E,aAAa;IACb,oBAAoB;IACpB,wFAAwF;IACxF,iGAAiG;IACjG,8FAA8F;IAC9F,2CAA2C;IAC3C,kBAAkB;IAClB,0BAA0B;IAC1B,6FAA6F;IAC7F,iGAAiG;IACjG,yFAAyF;IACzF,6FAA6F;IAC7F,mBAAmB;IACnB,iBAAiB;IACjB,cAAc;IACd,oBAAoB;IACpB,sBAAsB;IACtB,aAAa;CACL,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAqB,YAAY,CAAC,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"idl.js","sourceRoot":"","sources":["../src/idl.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,EAAE;AACF,wFAAwF;AACxF,sFAAsF;AACtF,2FAA2F;AAC3F,6FAA6F;AAC7F,0FAA0F;AAC1F,qFAAqF;AACrF,6FAA6F;AAC7F,wFAAwF;AACxF,EAAE;AACF,4FAA4F;AAC5F,gGAAgG;AAChG,8FAA8F;AAC9F,iGAAiG;AACjG,+FAA+F;AAC/F,kGAAkG;AAClG,sCAAsC;AACtC,qGAAqG;AACrG,6FAA6F;AAC7F,6FAA6F;AAC7F,iGAAiG;AACjG,8FAA8F;AAC9F,mGAAmG;AACnG,+FAA+F;AAC/F,gGAAgG;AAChG,+FAA+F;AAC/F,8FAA8F;AAC9F,6FAA6F;AAC7F,yFAAyF;AACzF,EAAE;AACF,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,8FAA8F;AAC9F,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,sFAAsF;AACtF,EAAE;AACF,kGAAkG;AAClG,uFAAuF;AACvF,EAAE;AACF,mGAAmG;AACnG,gGAAgG;AAChG,kFAAkF;AAClF,oGAAoG;AACpG,8FAA8F;AAC9F,0DAA0D;AAC1D,EAAE;AACF,2FAA2F;AAC3F,mEAAmE;AACnE,4EAA4E;AAC5E,mGAAmG;AACnG,kGAAkG;AAClG,mGAAmG;AACnG,oGAAoG;AACpG,4EAA4E;AAC5E,EAAE;AACF,iGAAiG;AACjG,oGAAoG;AACpG,6EAA6E;AAC7E,EAAE;AACF,8FAA8F;AAC9F,kGAAkG;AAClG,kGAAkG;AAClG,8FAA8F;AAC9F,gGAAgG;AAChG,mFAAmF;AACnF,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,oGAAoG;AACpG,iGAAiG;AACjG,mGAAmG;AACnG,oDAAoD;AACpD,EAAE;AACF,6FAA6F;AAC7F,4FAA4F;AAC5F,2FAA2F;AAC3F,8FAA8F;AAC9F,gGAAgG;AAChG,6FAA6F;AAC7F,wDAAwD;AACxD,OAAO,EAAE,UAAU,IAAI,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,UAAU,IAAI,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAIvE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,SAA2B,EAC3B,OAA0B,EAC1B,GAAQ;IAER,MAAM,MAAM,GAAG,IAAI,GAAG,CAAc,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACtC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD;YACzF,uGAAuG,CAC1G,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GACvB,CAAC,OAA0B,EAAoB,EAAE,CACjD,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,kBAAsC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAEzE,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GACzB,CAAC,OAA0B,EAAoB,EAAE,CACjD,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,oBAAwC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAE3E,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GACvB,CAAC,OAAO,GAAsB,kBAAkB,EAAoB,EAAE,CACtE,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,kBAAsC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAEzE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY;IACZ,YAAY;IACZ,QAAQ;IACR,cAAc;IACd,cAAc;IACd,cAAc;IACd,WAAW;CACH,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,8FAA8F;IAC9F,gGAAgG;IAChG,+FAA+F;IAC/F,+FAA+F;IAC/F,2DAA2D;IAC3D,6FAA6F;IAC7F,4FAA4F;IAC5F,oFAAoF;IACpF,EAAE;IACF,iGAAiG;IACjG,sFAAsF;IACtF,uCAAuC;IACvC,EAAE;IACF,gGAAgG;IAChG,+FAA+F;IAC/F,qEAAqE;IACrE,OAAO;IACP,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,qGAAqG;IACrG,oGAAoG;IACpG,2EAA2E;IAC3E,oBAAoB;IACpB,uBAAuB;IACvB,uBAAuB;IACvB,kBAAkB;IAClB,6BAA6B;IAC7B,8FAA8F;IAC9F,4FAA4F;IAC5F,+FAA+F;IAC/F,4FAA4F;IAC5F,+BAA+B;IAC/B,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,kBAAkB;IAClB,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,wBAAwB;IACxB,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,WAAW;IACX,cAAc;IACd,8FAA8F;IAC9F,0EAA0E;IAC1E,aAAa;IACb,8FAA8F;IAC9F,mFAAmF;IACnF,SAAS;IACT,oBAAoB;IACpB,wFAAwF;IACxF,iGAAiG;IACjG,8FAA8F;IAC9F,2CAA2C;IAC3C,kBAAkB;IAClB,0BAA0B;IAC1B,6FAA6F;IAC7F,iGAAiG;IACjG,yFAAyF;IACzF,6FAA6F;IAC7F,mBAAmB;IACnB,iBAAiB;IACjB,cAAc;IACd,oBAAoB;IACpB,sBAAsB;IACtB,aAAa;CACL,CAAC;AAaX;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAqB,YAAY,CAAC,kBAAkB,CAAC,CAAC"}