@homeflare/alchemy 0.37.0 → 0.37.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/proxmox/ceph-daemon-wire.d.ts +5 -7
- package/dist/proxmox/ceph-daemon-wire.d.ts.map +1 -1
- package/dist/proxmox/ceph-daemon.d.ts +7 -8
- package/dist/proxmox/ceph-daemon.d.ts.map +1 -1
- package/dist/proxmox/ceph-fs-distilled.d.ts +31 -5
- package/dist/proxmox/ceph-fs-distilled.d.ts.map +1 -1
- package/dist/proxmox/ceph-fs-wire.d.ts +5 -22
- package/dist/proxmox/ceph-fs-wire.d.ts.map +1 -1
- package/dist/proxmox/ceph-fs.d.ts +5 -6
- package/dist/proxmox/ceph-fs.d.ts.map +1 -1
- package/dist/proxmox/ceph-pool-settle.d.ts +9 -8
- package/dist/proxmox/ceph-pool-settle.d.ts.map +1 -1
- package/dist/proxmox/ceph-pool-wire.d.ts +11 -20
- package/dist/proxmox/ceph-pool-wire.d.ts.map +1 -1
- package/dist/proxmox/group-wire.d.ts +8 -13
- package/dist/proxmox/group-wire.d.ts.map +1 -1
- package/dist/proxmox/index.js +296 -326
- package/dist/proxmox/index.js.map +14 -14
- package/dist/proxmox/node-network-wire.d.ts +1 -1
- package/dist/proxmox/node-network-wire.d.ts.map +1 -1
- package/dist/proxmox/storage-wire.d.ts +8 -11
- package/dist/proxmox/storage-wire.d.ts.map +1 -1
- package/dist/proxmox/unreadable-read.d.ts +7 -7
- package/dist/proxmox/user-wire.d.ts +8 -11
- package/dist/proxmox/user-wire.d.ts.map +1 -1
- package/dist/proxmox/user.d.ts +5 -5
- package/dist/proxmox/zfs-pool-wire.d.ts +1 -1
- package/dist/proxmox/zfs-pool-wire.d.ts.map +1 -1
- package/docs/changelog/README.md +22 -0
- package/docs/changelog/archive-01.md +176 -0
- package/docs/changelog/archive-02.md +180 -0
- package/docs/changelog/archive-03.md +179 -0
- package/docs/changelog/archive-04.md +178 -0
- package/docs/changelog/archive-05.md +177 -0
- package/docs/changelog/archive-06.md +180 -0
- package/docs/changelog/archive-07.md +180 -0
- package/docs/changelog/archive-08.md +178 -0
- package/docs/changelog/archive-09.md +181 -0
- package/docs/changelog/archive-10.md +182 -0
- package/docs/changelog/archive-11.md +182 -0
- package/docs/changelog/archive-12.md +183 -0
- package/docs/changelog/archive-13.md +180 -0
- package/docs/changelog/archive-14.md +178 -0
- package/docs/changelog/archive-15.md +181 -0
- package/docs/changelog/archive-16.md +182 -0
- package/docs/changelog/archive-17.md +183 -0
- package/docs/changelog/archive-18.md +55 -0
- package/docs/distilled-interim.md +15 -3
- package/docs/provider-standard.md +24 -6
- package/docs/proxmox.md +26 -0
- package/docs/upstream-conformance-bun.md +67 -0
- package/docs/upstream-conformance-conforms.md +55 -0
- package/docs/upstream-conformance-families.md +95 -0
- package/docs/upstream-conformance-grafana.md +106 -0
- package/docs/upstream-conformance.md +20 -298
- package/package.json +3 -3
- package/src/proxmox/ceph-daemon-wire.ts +4 -7
- package/src/proxmox/ceph-daemon.ts +7 -8
- package/src/proxmox/ceph-fs-delete.test.ts +5 -8
- package/src/proxmox/ceph-fs-destroy-sdk.test.ts +98 -0
- package/src/proxmox/ceph-fs-distilled.ts +45 -19
- package/src/proxmox/ceph-fs-wire.ts +5 -93
- package/src/proxmox/ceph-fs.ts +13 -15
- package/src/proxmox/ceph-pool-settle.ts +11 -10
- package/src/proxmox/ceph-pool-wire.ts +11 -20
- package/src/proxmox/ceph-pool-write.test.ts +9 -8
- package/src/proxmox/group-wire.ts +7 -12
- package/src/proxmox/read-failure-propagation.test.ts +5 -5
- package/src/proxmox/storage-wire.ts +9 -10
- package/src/proxmox/typed-absence.test.ts +146 -0
- package/src/proxmox/unreadable-read.ts +7 -7
- package/src/proxmox/user-wire.ts +7 -10
- package/src/proxmox/user.ts +5 -5
|
@@ -29,7 +29,7 @@
|
|
|
29
29
|
"/**\n * Minting one PVE/PBS credential from OpenBao: `GET /v1/<mount>/creds/<role>`, alive for five\n * minutes. Split out of `credentials.ts` (2026-09-24) to keep that file's TYPES under the\n * 250-line cap once `PveCredentialDenied`'s catchers needed a real header there; the reasoning\n * for WHY the estate mints rather than stores a token is still credentials.ts's own header.\n *\n * ⛔ THE SECRET NEVER TOUCHES DISK, A LOG, OR ALCHEMY STATE — see credentials.ts's ⛔. Nothing\n * here returns it to a resource; it is used to build a header and then dropped.\n */\nimport * as Effect from 'effect/Effect';\nimport * as Option from 'effect/Option';\nimport * as FetchHttpClient from 'effect/unstable/http/FetchHttpClient';\nimport * as Headers from 'effect/unstable/http/Headers';\nimport * as HttpClient from 'effect/unstable/http/HttpClient';\nimport * as HttpClientRequest from 'effect/unstable/http/HttpClientRequest';\nimport { PveCredentialDenied } from './credential-errors.ts';\nimport type { ApiTarget, BaoEnvironment, PveCredential, PveRole } from './credentials.ts';\n\n/** openbao v2.6.2 api/env.go:22-34 — a present BAO_* wins, even empty; else its VAULT_* twin. */\nconst baoVariable = (env: BaoEnvironment, name: string) =>\n env[`BAO_${name}`] ?? env[`VAULT_${name}`] ?? '';\n\n/**\n * Mint one credential for `role`: `GET /v1/<mount>/creds/<role>` on OpenBao's HTTP API.\n *\n * 🔴 IT SHELLED OUT TO `bao read -format=json` UNTIL 2026-09-14. The case for the CLI was that one\n * client could not disagree with `bao kv get` about what this machine may do. <estate>/openbao then\n * learned twice what deciding by stderr costs — every failure read as absent, and two commands\n * said \"absent\" in different words — so this reads STATUS CODES: 2xx is a credential, and 403\n * (denied), 404 (no such role or mount — a mint has no \"absent\"), 503 (sealed) all fail.\n * ★ THE ENVIRONMENT CONTRACT IS STILL THE CLI's, READ THE CLI's WAY, which keeps the case above\n * true (openbao v2.6.2 api/client.go:34-66, 370, 503-507, 761-762, 776-785): BAO_AGENT_ADDR over\n * BAO_ADDR over https://127.0.0.1:8200; BAO_NAMESPACE as X-Vault-Namespace; BAO_TOKEN as\n * X-Vault-Token; X-Vault-Request always. <estate>/openbao/src/bao-address.ts has the long form.\n * ★ AGENT MODE IS NO BAO_TOKEN AND NO TOKEN HEADER. An Agent or Proxy listener with\n * `api_proxy { use_auto_auth_token = true }` (or the older `cache { … }`) substitutes its\n * auto-auth token exactly when a request carries none — command/agentproxyshared/cache/handler.go\n * :29-38, command/agent.go:517-541, command/agent/config/config.go:288-292, and\n * website/content/docs/agent-and-proxy/agent/apiproxy.mdx:57-62. The CLI's token-file fallback\n * is deliberately not read. ⚠️ So an unset BAO_TOKEN aimed at a SERVER rather than an agent is a\n * 403, which reads like a missing grant rather than a missing variable.\n * ★ UNIX SOCKETS: `unix:///path` is plain HTTP to `localhost` over that socket, as the CLI does it\n * (api/client.go:654-667). Bun's fetch takes a `unix` option; `FetchHttpClient.RequestInit` is\n * Effect's documented way to pass fetch options, read from the calling fiber (effect\n * FetchHttpClient.ts:59-72). Off Bun it REFUSES, rather than reach http://localhost:80.\n */\nexport const mint = (target: ApiTarget, role: PveRole, env: BaoEnvironment = process.env) =>\n Effect.gen(function* () {\n const path = `${target.mount}/creds/${role}`;\n // ⛔ METHOD, PATH AND OpenBao's `errors` ONLY — never a header (the token), never a success\n // body (the credential is IN it, so echoing it would print the secret into a log).\n const refuse = (status: number, detail: string) =>\n new Error(`OpenBao GET /v1/${path} -> ${status === 0 ? 'no response' : status}: ${detail}`);\n const address =\n baoVariable(env, 'AGENT_ADDR') || baoVariable(env, 'ADDR') || 'https://127.0.0.1:8200';\n const socket = address.startsWith('unix://') ? address.slice('unix://'.length) : undefined;\n const base = socket === undefined ? address.replace(/\\/+$/, '') : 'http://localhost';\n const headers: Record<string, string> = { 'X-Vault-Request': 'true' };\n const namespace = baoVariable(env, 'NAMESPACE');\n if (namespace !== '') headers['X-Vault-Namespace'] = namespace;\n const token = baoVariable(env, 'TOKEN');\n if (token !== '') headers['X-Vault-Token'] = token;\n if (socket !== undefined && !('Bun' in globalThis)) {\n return yield* Effect.fail(refuse(0, 'a unix:// address needs Bun fetch; this is not Bun'));\n }\n\n const client = yield* HttpClient.HttpClient;\n // ⛔ Effect records request headers on the client span, and its default redaction list does\n // not name x-vault-token (effect Headers.ts:753-762). It is added for this call.\n const redacted = yield* Headers.CurrentRedactedNames;\n const defaults = Option.getOrElse(\n yield* Effect.serviceOption(FetchHttpClient.RequestInit),\n () => ({}),\n );\n const request = HttpClientRequest.get(`${base}/v1/${path}`).pipe(\n HttpClientRequest.setHeaders(headers),\n );\n const exchange = client.execute(request).pipe(\n Effect.flatMap((response) =>\n Effect.map(response.text, (text) => ({ status: response.status, text })),\n ),\n // ⚠️ The CLI's default client timeout (api/client.go:324) — a hung agent must not hang a plan.\n Effect.timeout('60 seconds'),\n Effect.provideService(Headers.CurrentRedactedNames, [...redacted, 'x-vault-token']),\n );\n // ⚠️ `| undefined` under exactOptionalPropertyTypes: `socket` is narrowed to a string\n // only on the branch below, so the object literal genuinely carries\n // `unix: string | undefined` and the type must say so. The alternative — building\n // the key conditionally — hides that this request is the unix-socket path.\n const init: RequestInit & { unix?: string | undefined } = { ...defaults, unix: socket };\n const { status, text } = yield* (\n socket === undefined\n ? exchange\n : Effect.provideService(exchange, FetchHttpClient.RequestInit, init)\n ).pipe(\n // ⛔ `.message` only — the error object holds the request, and the request holds the token.\n Effect.mapError((cause) => refuse(0, cause.message)),\n );\n\n let parsed:\n | {\n lease_duration?: unknown;\n data?: { token_id?: unknown; secret?: unknown };\n errors?: unknown;\n }\n | undefined;\n try {\n parsed = JSON.parse(text) as typeof parsed;\n } catch {\n parsed = undefined;\n }\n if (status < 200 || status >= 300) {\n const errors = parsed?.errors;\n const isOpenBaoBody = Array.isArray(errors);\n const detail = isOpenBaoBody ? errors.map(String).join('; ') : 'not an OpenBao error body';\n /**\n * ⛔ 403 GETS THE TYPED TAG ONLY WITH A GENUINE OpenBao ERROR BODY — found on adversarial\n * review 2026-09-24. Status alone is not enough: a WAF, a proxy in front of OpenBao, or an\n * mTLS terminator can answer 403 without OpenBao ever seeing the request, and `parsed` is\n * then `undefined`/`errors` is not an array (the `try`/`catch` above, or a body that\n * parses but isn't OpenBao's shape). That is an infrastructure fault, not \"this identity\n * is denied this role\" — tagging it `PveCredentialDenied` would fold a REAL outage into\n * \"unreadable, report noop\" exactly as quietly as the bug this fix exists to remove. Only\n * a parsed `errors` array is OpenBao's own documented error shape (mint.ts's own header),\n * so it is the one signal trusted here.\n */\n if (status === 403 && isOpenBaoBody) {\n return yield* Effect.fail(new PveCredentialDenied({ detail, mount: target.mount, role }));\n }\n return yield* Effect.fail(refuse(status, detail || '(no errors given)'));\n }\n const tokenId = parsed?.data?.token_id;\n const secret = parsed?.data?.secret;\n if (typeof tokenId !== 'string' || typeof secret !== 'string') {\n // ⛔ REFUSE RATHER THAN RETURN A HALF CREDENTIAL, and again WITHOUT quoting the body.\n return yield* Effect.fail(\n new Error(\n `${target.mount}/creds/${role} returned no token_id/secret. Either this approle lacks ` +\n `the grant, or the mount is not ${target.mount}. Say which mount and role you needed ` +\n `than falling back to a stored credential -- every stored PVE token is read-only.`,\n ),\n );\n }\n const lease = parsed?.lease_duration;\n const leaseSeconds = typeof lease === 'number' ? lease : 0;\n return { leaseSeconds, secret, tokenId } satisfies PveCredential;\n });\n\n/**\n * The header PVE wants. `PVEAPIToken=<tokenid>=<secret>`.\n *\n * ⚠️ THE SEPARATOR IS `=`, NOT `:`. Proxmox rejects the colon form with a 401 that says only\n * \"authentication failure\", which reads as a bad credential rather than as a malformed header.\n */\nexport const authorization = (credential: PveCredential, target: ApiTarget): string =>\n target.scheme === 'pbs'\n ? `PBSAPIToken=${credential.tokenId}:${credential.secret}`\n : `PVEAPIToken=${credential.tokenId}=${credential.secret}`;\n",
|
|
30
30
|
"/**\n * `credentials.ts`'s one typed mint failure (S21) — split out to keep that file under the\n * 250-line cap once this class grew a real header (2026-09-24, the cries-wolf fix).\n */\nimport * as Data from 'effect/Data';\nimport type { PveRole } from './credentials.ts';\n\n/**\n * OpenBao answered 403 to `GET /v1/<mount>/creds/<role>`: this identity's AppRole has no grant\n * for `role` on `mount` — measured 2026-09-24 as \"the agent lane cannot mint `provision`\" (the\n * lane's policy grants `read` but not `provision`). A TYPED tag, not the plain `Error` every\n * other mint failure still is (404 no such role/mount, 503 sealed, a network failure), because\n * this ONE case means \"refused, not evidence of anything about the object\" — a family's\n * `readOrUnreadable` (unreadable-read.ts) `catchTag`s exactly this, never any other mint\n * failure, which stays a hard error precisely because it is NOT a scoped refusal.\n *\n * ⛔ WHY NOT EVERY NON-2xx: A 503 (sealed) or a 404 (misconfigured mount/role) is the estate\n * BROKEN, not this identity being narrowly scoped — folding those into \"unreadable, report\n * noop\" would hide a real outage behind a quiet, misleadingly reassuring plan. Only 403 is\n * \"this identity, this role, denied\" and safe to read as \"cannot see, not evidence of absence\".\n */\nexport class PveCredentialDenied extends Data.TaggedError('PveCredentialDenied')<{\n readonly mount: string;\n readonly role: PveRole;\n readonly detail: string;\n}> {\n override get message(): string {\n return (\n `OpenBao GET /v1/${this.mount}/creds/${this.role} -> 403: ${this.detail}. This identity's ` +\n 'AppRole has no grant for this role -- a refused read, not evidence the object is gone.'\n );\n }\n}\n",
|
|
31
31
|
"/**\n * C1 cluster members: ordered failover, last-good preference, transport classification.\n *\n * ★ ANY MEMBER'S :8006 API MANAGES THE WHOLE CLUSTER — PVE proxies node paths itself — so the\n * provider reaches the cluster through whichever member is up, not through one pinned node.\n *\n * ⛔ NEVER cluster-c1.example.com: it resolves to 192.0.2.250, which nothing serves.\n */\nimport * as Cause from 'effect/Cause';\nimport type * as Duration from 'effect/Duration';\nimport * as Effect from 'effect/Effect';\nimport * as Result from 'effect/Result';\nimport * as HttpClient from 'effect/unstable/http/HttpClient';\nimport * as HttpClientError from 'effect/unstable/http/HttpClientError';\nimport type * as HttpClientRequest from 'effect/unstable/http/HttpClientRequest';\nimport type * as HttpClientResponse from 'effect/unstable/http/HttpClientResponse';\nimport type { PveTarget } from './credentials.ts';\n\nexport const PVE_API_PORT = 8006;\n\n/** Strict TLS, always :8006 — each node's certificate carries its mgmt name as a SAN. */\nexport const pveApiBase = (member: string) => `https://${member}:${String(PVE_API_PORT)}/api2/json`;\n\n/**\n * Bound on ONE member attempt, shared by `client.ts`'s `executeOnCluster` and\n * `distilled-pve.ts`'s `runPveWith` — both loop over `orderedMembers` and both call this file's\n * classifiers, so one constant keeps them in the same failure-mode boundary.\n *\n * ⛔ MEASURED GAP, FIXED 2026-09-24: before this, NOTHING bounded a single attempt. A member that\n * accepted the TCP connection but never answered hung the whole call forever — the for-loop\n * never produced a failure for `isTransportFailure`/`isPreSendTransport` to classify, so it\n * never advanced to a healthy member. `isTimeoutCause` below existed already (written for this\n * exact case, per its own comment: \"no answer after connect\") but nothing ever called\n * `Effect.timeout` to produce one.\n * ★ TB4 (the live 3-member cluster, `homeflare-proxmox/src/target.ts`) waits at most 3× this\n * before `PveClusterExhausted` — well under S26's ~90-second ceiling on a bounded wait.\n */\nexport const MEMBER_TIMEOUT: Duration.Input = '20 seconds';\n\n/** Process-scoped last member that answered, keyed by OpenBao mount (= one PVE cluster). */\nconst lastGoodByMount = new Map<string, string>();\n\n/** ⚠️ TESTS ONLY — resets sticky member choice between cases. */\nexport const resetLastGoodForTest = () => lastGoodByMount.clear();\n\nexport const noteGoodMember = (target: PveTarget, member: string) => {\n lastGoodByMount.set(target.mount, member);\n};\n\n/** Last-good first, then the rest in configuration order. */\nexport const orderedMembers = (target: PveTarget): readonly string[] => {\n const preferred = lastGoodByMount.get(target.mount);\n if (preferred === undefined || !target.members.includes(preferred)) return target.members;\n return [preferred, ...target.members.filter((member) => member !== preferred)];\n};\n\nconst errorCode = (cause: unknown): string | undefined => {\n if (cause !== null && typeof cause === 'object') {\n if ('code' in cause && typeof cause.code === 'string') return cause.code;\n if ('cause' in cause) return errorCode((cause as { cause: unknown }).cause);\n }\n return undefined;\n};\n\nconst isTimeoutCause = (cause: unknown): boolean => {\n const code = errorCode(cause);\n if (code === 'AbortError' || code === 'ETIMEDOUT' || code === 'UND_ERR_CONNECT_TIMEOUT') {\n return true;\n }\n return cause instanceof Error && /timed out|timeout/i.test(cause.message);\n};\n\n/**\n * Error codes that PROVE the request never left this machine.\n *\n * ★ MEASURED 2026-09-14 through Effect's FetchHttpClient on Bun 1.4. The codes are Bun's, not\n * Node's, which made the first draft's Node-only list dead code for the commonest case:\n * connection refused cause.code = \"ConnectionRefused\" (Node says ECONNREFUSED)\n * name does not resolve cause.code = \"ENOTFOUND\"\n * wrong certificate name cause.code = \"ERR_TLS_CERT_ALTNAME_INVALID\"\n * no answer after connect Effect's TimeoutError — not an HttpClientError at all\n * ⛔ CODES ONLY, NEVER MESSAGE TEXT. The first draft also matched /TLS|SSL|certificate/ in the\n * message, and a connection that drops mid-response can mention TLS too — which would have sent a\n * write that had already landed to a second node.\n * ⚠️ A CERTIFICATE failure is pre-send: the handshake has to finish before a byte of the request is\n * written. A generic ERR_SSL_* is deliberately absent, because it can happen mid-stream.\n */\nconst PRE_SEND_CODES = new Set(['ConnectionRefused', 'ECONNREFUSED', 'ENOTFOUND', 'EAI_AGAIN']);\n\nconst isCertificateCode = (code: string) =>\n /^(ERR_TLS_CERT_|CERT_|UNABLE_TO_VERIFY_|DEPTH_ZERO_SELF_SIGNED|SELF_SIGNED_CERT)/.test(code);\n\nconst isPreSendCause = (cause: unknown): boolean => {\n const code = errorCode(cause);\n return code !== undefined && (PRE_SEND_CODES.has(code) || isCertificateCode(code));\n};\n\n/**\n * Effect HttpClientError.reason._tag — see effect HttpClientError.ts RequestError vs ResponseError.\n * ★ TransportError | InvalidUrlError | EncodeError occur before a response exists; StatusCodeError\n * and kin include a response. client.execute does NOT filter status, so HTTP answers are never\n * TransportError — only the transport layer is.\n * ★ `Cause.TimeoutError` (from `MEMBER_TIMEOUT` below, via `Effect.timeout`) counts too — a read\n * with no side effect to duplicate fails over on ANY transport failure, a hang included.\n */\nexport const isTransportFailure = (cause: unknown): boolean => {\n if (Cause.isTimeoutError(cause)) return true;\n if (!HttpClientError.isHttpClientError(cause)) return false;\n const tag = cause.reason._tag;\n return tag === 'TransportError' || tag === 'InvalidUrlError' || tag === 'EncodeError';\n};\n\n/**\n * Pre-send only: connection refused, DNS, a certificate refused — never a timeout after connect.\n * ⛔ `Cause.TimeoutError` (MEMBER_TIMEOUT firing) falls through to `false` here on purpose, same\n * as any other non-`HttpClientError` cause: the request may already have reached the member, so\n * a write must not repeat it elsewhere.\n */\nexport const isPreSendTransport = (cause: unknown): boolean => {\n if (!HttpClientError.isHttpClientError(cause)) return false;\n const { reason } = cause;\n if (reason._tag === 'InvalidUrlError' || reason._tag === 'EncodeError') return true;\n if (reason._tag === 'TransportError') {\n if (isTimeoutCause(reason.cause)) return false;\n return isPreSendCause(reason.cause);\n }\n return false;\n};\n\nexport const describeTransport = (cause: unknown): string => {\n if (Cause.isTimeoutError(cause)) return `timed out after ${String(MEMBER_TIMEOUT)}`;\n if (HttpClientError.isHttpClientError(cause)) return cause.message;\n return String(cause);\n};\n\nexport type MemberAttempt = { readonly member: string; readonly why: string };\n\nexport type PveMethod = 'GET' | 'POST' | 'PUT' | 'DELETE';\n\n/**\n * Run one request against cluster members with failover.\n *\n * ⛔ A POST/PUT/DELETE WHOSE REQUEST MAY HAVE REACHED A MEMBER MUST NOT BE SENT AGAIN TO ANOTHER.\n * Only fail over a write on a provably pre-send transport failure — connection refused, DNS or a\n * refused certificate. A timeout after sending is NOT pre-send: fail it, never repeat it. An HTTP\n * status of any kind, including 5xx and PVE's 596, is the answer from a live member — retrying\n * elsewhere can repeat a write.\n *\n * ★ Reads fail over on any transport failure, including timeout — no side effect to duplicate.\n * MEASURED 2026-09-14: full C1 plans stayed all-noop with the first member refused (127.0.0.1)\n * and with it unresolvable (n9.invalid).\n *\n * @param timeout Bound on ONE member's attempt — defaults to `MEMBER_TIMEOUT`. A test passes a\n * short one to prove failover happens without waiting out the real bound; production code never\n * overrides it.\n */\nexport const executeOnCluster = (\n target: PveTarget,\n method: PveMethod,\n path: string,\n build: (apiBase: string) => HttpClientRequest.HttpClientRequest,\n timeout: Duration.Input = MEMBER_TIMEOUT,\n): Effect.Effect<\n HttpClientResponse.HttpClientResponse,\n {\n readonly tag: 'cluster';\n readonly method: PveMethod;\n readonly path: string;\n readonly attempts: readonly MemberAttempt[];\n },\n HttpClient.HttpClient\n> =>\n Effect.gen(function* () {\n /**\n * ★ `HttpClient`, NOT RAW `fetch`, BECAUSE THAT IS WHAT ALCHEMY'S OWN PROVIDERS USE. Its\n * Hetzner provider builds on `FetchHttpClient.layer` and the `HttpClient` service\n * (src/Hetzner/Providers.ts), and there is no bare `fetch` anywhere in its Docker,\n * Kubernetes or GitHub providers. Going through the service rather than the global buys\n * the things a provider actually needs: a typed error channel instead of a thrown promise,\n * interruption when a plan is cancelled, whatever tracing the runtime has installed, and a\n * client that can be swapped for a stub in a test without monkey-patching a global.\n *\n * ⚠️ THE REQUIREMENT IS REAL AND IT PROPAGATES. Every operation carries `HttpClient`, so every\n * resource's Requirements type names it (PveRequirements in resource.ts) and the stack\n * provides `FetchHttpClient.layer`. That is the cost of the above, paid once.\n */\n const client = yield* HttpClient.HttpClient;\n const isWrite = method !== 'GET';\n const attempts: MemberAttempt[] = [];\n for (const member of orderedMembers(target)) {\n const outcome = yield* client\n .execute(build(pveApiBase(member)))\n .pipe(Effect.timeout(timeout), Effect.result);\n if (Result.isSuccess(outcome)) {\n noteGoodMember(target, member);\n return outcome.success;\n }\n const why = describeTransport(outcome.failure);\n attempts.push({ member, why });\n const mayRetry = isWrite\n ? isPreSendTransport(outcome.failure)\n : isTransportFailure(outcome.failure);\n if (!mayRetry) {\n return yield* Effect.fail({ attempts, method, path, tag: 'cluster' as const });\n }\n }\n return yield* Effect.fail({ attempts, method, path, tag: 'cluster' as const });\n });\n",
|
|
32
|
-
"/**\n * The \"unreadable\" outcome a refused read produces — distinct from `undefined` (genuinely\n * absent) and from a real attributes object (present) — so `diff` stops treating a REFUSED read\n * the same as a confirmed-gone one. Fixes the \"cries wolf\" bug (measured 2026-09-24): on a lane\n * whose credential cannot mint `provision`, every already-correct ACL and storage row read back\n * as absent, and `diff` forced `update` for every one of them without comparing a single field,\n * because `.pipe(Effect.orElseSucceed(() => undefined))` folds every failure — a genuine 404, a\n * network blip, AND a permission refusal — into the one \"absent\" value `diff` cannot tell apart.\n *\n * ★ WHY A SENTINEL, NOT A FAILED `diff`. Upstream's `Diff` type is exactly\n * `NoopDiff | UpdateDiff | ReplaceDiff` (`packages/alchemy/src/Diff.ts@v2.0.0-beta.79`) — there\n * is no fourth \"unreadable\" action to return. And `Plan.ts`'s resource pass runs every\n * resource's `diff` under `Effect.exit`, then FAILS THE WHOLE PLAN if even one failed\n * (`diffFailures.length > 0` -> `Effect.failCause`, `Plan.ts@v2.0.0-beta.79` ~lines 1711-1731).\n * So making `diff` FAIL on a refused read would not report one honest row — it would abort\n * `bun run plan` for every OTHER resource in the stack too, worse than today's false \"update\".\n * `{ action: 'noop' }` plus a logged warning is the only outcome that (a) never forces a write\n * on a lane that cannot prove one is needed and (b) never takes the rest of the plan down with\n * it — the \"noop-with-warning\" reading of the fix, over the alternative of a typed plan error.\n *\n * ⛔ ONLY THE CREDENTIAL DENIAL IS CAUGHT HERE.
|
|
32
|
+
"/**\n * The \"unreadable\" outcome a refused read produces — distinct from `undefined` (genuinely\n * absent) and from a real attributes object (present) — so `diff` stops treating a REFUSED read\n * the same as a confirmed-gone one. Fixes the \"cries wolf\" bug (measured 2026-09-24): on a lane\n * whose credential cannot mint `provision`, every already-correct ACL and storage row read back\n * as absent, and `diff` forced `update` for every one of them without comparing a single field,\n * because `.pipe(Effect.orElseSucceed(() => undefined))` folds every failure — a genuine 404, a\n * network blip, AND a permission refusal — into the one \"absent\" value `diff` cannot tell apart.\n *\n * ★ WHY A SENTINEL, NOT A FAILED `diff`. Upstream's `Diff` type is exactly\n * `NoopDiff | UpdateDiff | ReplaceDiff` (`packages/alchemy/src/Diff.ts@v2.0.0-beta.79`) — there\n * is no fourth \"unreadable\" action to return. And `Plan.ts`'s resource pass runs every\n * resource's `diff` under `Effect.exit`, then FAILS THE WHOLE PLAN if even one failed\n * (`diffFailures.length > 0` -> `Effect.failCause`, `Plan.ts@v2.0.0-beta.79` ~lines 1711-1731).\n * So making `diff` FAIL on a refused read would not report one honest row — it would abort\n * `bun run plan` for every OTHER resource in the stack too, worse than today's false \"update\".\n * `{ action: 'noop' }` plus a logged warning is the only outcome that (a) never forces a write\n * on a lane that cannot prove one is needed and (b) never takes the rest of the plan down with\n * it — the \"noop-with-warning\" reading of the fix, over the alternative of a typed plan error.\n *\n * ⛔ ONLY THE CREDENTIAL DENIAL IS CAUGHT HERE. Other errors propagate to the caller.\n * Legacy callers may still fold them, but the typed-absence follow-up makes User/Group/\n * Storage catch only their SDK missing-object tag. Never infer a resource is absent from\n * this sentinel. See credential-errors.ts's own ⛔ for why the OpenBao mint's 403 qualifies.\n */\nimport * as Effect from 'effect/Effect';\nimport type { PveCredentialDenied } from './credential-errors.ts';\n\n/** Distinct from `undefined` (absent) and from a real attributes object (present). */\nexport const UNREADABLE = Symbol('pve-unreadable');\nexport type Unreadable = typeof UNREADABLE;\n\n/**\n * Catches ONLY `PveCredentialDenied` and returns the sentinel. Compose this BEFORE the\n * caller's absence handling so a credential refusal cannot become a genuine absence.\n * This helper itself classifies neither SDK missing-object tags nor transport failures.\n *\n * ⚠️ `E | PveCredentialDenied` IN, `E` OUT — not a generic `E` narrowed by `Exclude`. `catchTag`\n * needs the tag to be STATICALLY present in the error union to typecheck at all; a bare\n * unconstrained `E` gives it nothing to match against. Every caller's `runPve` already carries\n * `PveCredentialDenied` explicitly (distilled-pve.ts's own ★ on why), so this signature costs\n * nothing at the call site.\n */\nexport const readOrUnreadable = <A, E, R>(\n effect: Effect.Effect<A, E | PveCredentialDenied, R>,\n): Effect.Effect<A | Unreadable, E, R> =>\n effect.pipe(Effect.catchTag('PveCredentialDenied', () => Effect.succeed(UNREADABLE)));\n\n/**\n * The warning `diff` logs when it reports `noop` for a row it could not actually read — visible\n * in `bun run plan`'s own output (Effect's default logger), even though the Diff type has\n * nowhere to carry the distinction through to the printed action. See the header for why a log\n * line, not a failed diff or a fourth Diff action, is what \"the plan reports\" means here.\n */\nexport const unreadableWarning = (type: string, identity: string): Effect.Effect<void> =>\n Effect.logWarning(\n `${type} ${identity}: the read was refused (no grant for this credential's role) -- ` +\n 'reporting noop rather than forcing an update with nothing compared. Re-plan on a lane ' +\n 'that can read this object before trusting this row.',\n );\n",
|
|
33
33
|
"/**\n * A PBS webhook body that posts one Alertmanager v2 alert — `POST /api/v2/alerts` takes a JSON\n * ARRAY of `postableAlert`, each with a required `labels` map and an optional `annotations` map,\n * every value a string (Alertmanager's api/v2/openapi.yaml, read at main 2026-09-22).\n *\n * ★ PURE TEXT, NOT A RENDERER. PBS renders it, with Handlebars, at send time: `{{ severity }}`,\n * `{{ title }}`, `{{ message }}`, `{{ timestamp }}` and `{{ fields.<name> }}` are the\n * notification, and `json`, `escape` and `url-encode` are the only helpers\n * (proxmox-notify endpoints/webhook.rs `setup_handlebars`, read at HEAD 2026-09-22).\n *\n * ⛔ THERE IS NO ESCAPING UNLESS THE TEMPLATE ASKS FOR IT. The webhook's Handlebars registers\n * `no_escape` (\"There is no escape.\"), so `\"{{ message }}\"` breaks the JSON the first time a\n * task log holds a quote or a newline — and a failed job's message is exactly a task log. Every\n * value below goes through `json`, which emits a complete, quoted JSON string.\n * ⛔ A FIELD THE NOTIFICATION DOES NOT CARRY MUST NOT BE REACHED FOR BARE. `escape` on a missing\n * field fails the whole render, and the notification is then lost — not degraded. MEASURED\n * (2026-09-22) with handlebars-rust 5.1.2 and the webhook's three helpers restated from source:\n * `{{ escape fields.job-id }}` over no fields errors \"param at index 0 required but not found\";\n * `{{ json fields.job-id }}` renders `null`, valid JSON but not a label value. Garbage\n * collection has no `job-id`, and the UI's \"Test\" button sends a notification with NO fields at\n * all (lib.rs `test_target`). So every field-derived label sits inside\n * `{{#if}}`, ends with its own comma, and the labels after them are always there: whichever\n * fields are present, the object stays valid JSON.\n *\n * ⚠️ ALERTMANAGER RESOLVES IT BY ITSELF. With no `endsAt` it sets `now + resolve_timeout` (5m by\n * default, api/v2/api.go `postAlertsHandler`), and PBS never sends a resolve — so a receiver\n * with `send_resolved: true` reports \"resolved\" five minutes after a failure that nobody fixed.\n * Page on the firing notification; do not read the resolve as a recovery.\n * ⚠️ `severity` IS PBS'S WORD, not Alertmanager convention: `info`, `notice`, `warning`, `error`,\n * `unknown`. Route on `severity=\"error\"`, or relabel it in the Alertmanager config.\n */\n\nexport interface AlertmanagerBodyOptions {\n /** The `alertname` label. Default `PbsNotification`; `job_type` says which job it was. */\n readonly alertname?: string;\n /** The `source` label. Default `pbs`. */\n readonly source?: string;\n /** Optional `generatorURL` — an absolute link back to the PBS UI. */\n readonly generatorURL?: string;\n}\n\n/**\n * ⛔ AN OPTION IS PASTED INTO THE TEMPLATE, SO IT MAY NOT CARRY TEMPLATE SYNTAX. A `{{` in an\n * alert name would be rendered by PBS as an expression; a brace or backslash is refused here\n * rather than escaped, because Handlebars' escape rules are the renderer's, not this file's.\n */\nconst literal = (label: string, value: string): string => {\n if (/[{}\\\\]/.test(value) || value === '') {\n throw new Error(\n `alertmanagerAlertBody: ${label} must be non-empty and hold no '{', '}' or '\\\\'`,\n );\n }\n return JSON.stringify(value);\n};\n\n/**\n * ⛔ AN ABSOLUTE http(s) URL OR NOTHING. Alertmanager validates `generatorURL` as `format: uri`\n * (api/v2/openapi.yaml) and answers 422 for the WHOLE post — so a typo here would not degrade\n * one field, it would lose every notification, and only at send time.\n */\nconst absoluteUrl = (value: string): string => {\n const text = literal('generatorURL', value);\n let protocol = '';\n try {\n protocol = new URL(value).protocol;\n } catch {\n // not a URL at all: refused below, like a relative one\n }\n if (protocol !== 'https:' && protocol !== 'http:') {\n throw new Error('alertmanagerAlertBody: generatorURL must be an absolute http(s) URL');\n }\n return text;\n};\n\n/** Label name → notification field. ⚠️ Label names must match `[a-zA-Z_][a-zA-Z0-9_]*`. */\nconst FIELD_LABELS: readonly (readonly [label: string, field: string])[] = [\n ['job_type', 'type'],\n ['job_id', 'job-id'],\n ['datastore', 'datastore'],\n ['hostname', 'hostname'],\n];\n\n/**\n * The body template. Declare it on a webhook target together with `Content-Type:\n * application/json`, method `post`, and the URL `<alertmanager>/api/v2/alerts`.\n *\n * ★ `fields.job-id` IS A VALID PATH: Handlebars-rust 5 (the version proxmox-notify pins) allows\n * `-` in an identifier (grammar.pest `symbol_char`), as handlebars.js does. The same scratch\n * build rendered this template for a GC failure, a verify failure and a field-less test\n * notification, and each parsed as JSON with string-only labels. The adversarial review re-ran\n * it over the test file's whole matrix — every PBS event's fields x five severities x hostile\n * text, 840 renders with and without `generatorURL` — and every one parsed (2026-09-22).\n * ⚠️ THAT BUILD IS NOT PBS. The first real notification is the measurement that counts: send one\n * with the target's \"Test\" button and read what Alertmanager received.\n */\nexport const alertmanagerAlertBody = (options: AlertmanagerBodyOptions = {}): string => {\n const alertname = literal('alertname', options.alertname ?? 'PbsNotification');\n const source = literal('source', options.source ?? 'pbs');\n const labels = FIELD_LABELS.map(\n ([label, field]) =>\n ` {{#if fields.${field}}}\"${label}\": {{ json fields.${field} }},{{/if}}`,\n );\n const link =\n options.generatorURL === undefined\n ? ''\n : `,\\n \"generatorURL\": ${absoluteUrl(options.generatorURL)}`;\n return [\n '[',\n ' {',\n ' \"labels\": {',\n ...labels,\n ' \"severity\": {{ json severity }},',\n ` \"alertname\": ${alertname},`,\n ` \"source\": ${source}`,\n ' },',\n ' \"annotations\": {',\n ' \"summary\": {{ json title }},',\n ' \"description\": {{ json message }},',\n ' \"timestamp\": \"{{ timestamp }}\"',\n ` }${link}`,\n ' }',\n ']',\n '',\n ].join('\\n');\n};\n",
|
|
34
34
|
"/**\n * `Proxmox.ApiToken` — a PVE API token: the thing a service actually authenticates as.\n *\n * ⛔ THE SECRET EXISTS FOR ONE HTTP RESPONSE AND THEN NOWHERE. MEASURED from the cluster's own\n * schema: POST returns `[\"full-tokenid\",\"info\",\"value\"]`; PUT returns `[\"comment\",\"expire\",\n * \"full-tokenid\",\"privsep\",\"value\"]` with `value` present ONLY when `regenerate` was set; GET\n * returns `[\"comment\",\"expire\",\"privsep\"]` and never the secret. PVE says it plainly on the\n * POST: the value \"needs to be stored as it cannot be retrieved afterwards\".\n *\n * ⛔ SO A TOKEN THIS RESOURCE CREATES IS UNUSABLE, AND SAYING SO IS THE POINT OF THIS BLOCK. The\n * secret may not become an attribute: Alchemy persists attributes UNENCRYPTED, and this estate's\n * state store is a Postgres dumped nightly (the ⛔ in credentials.ts). So `reconcile` refuses\n * before any POST, and what would land is a live credential in `/etc/pve/user.cfg` whose secret\n * nobody holds. No `regenerate` rescues it, because a regenerated value is discarded the same\n * way. The only escape is an operator who captured the value out of band — which this provider\n * gives them no way to do.\n * ★ SO POINT THIS FAMILY AT TOKENS THAT ALREADY EXIST. `comment`, `expire` and `privsep` are the\n * whole of a token's policy, and declaring them is real work: it is how `expire` stops being\n * whatever somebody typed in 2024. Mint NEW tokens where the secret can be caught — OpenBao's\n * `proxmox-c1` mount, or a human at `pveum user token add`.\n *\n * ⛔ THERE IS NO `regenerate` PROP, AND IT IS NOT AN OVERSIGHT. PVE's own description: \"All users\n * of the previous secret will lose access after this operation.\" A prop for it would revoke a\n * live credential during a deploy whose plan said `update`, and hand back a replacement this\n * provider is obliged to throw away — breakage with no recovery.\n *\n * ⚠️ THERE IS A SECOND WRITER TO THESE OBJECTS AND IT IS THE ONE THIS PROVIDER RUNS ON. OpenBao's\n * `proxmox-c1` engine mints PVE tokens under `hf-read@pve` and `hf-provision@pve` with an id it\n * CHOOSES (`hf-<role>-<actor>-<entity6>-<stamp>-<nonce>`), so the two systems cannot collide on\n * one object by accident — but they share the USER, and `Proxmox.User` deleting that account\n * takes every one of its tokens with it. ⛔ DO NOT DECLARE A TOKEN UNDER A MINT USER: `expire`\n * is what makes that dangerous — a 300-second lease token becomes a permanent one.\n *\n * ⚠️ PRIVILEGES, AND THE READ LANE CANNOT DO IT. MEASURED: all four methods on this path check\n * `['or', ['userid-param','self'], ['userid-group', ['User.Modify']]]` — with no `Sys.Audit`\n * alternative — so the 3600s read lease reaches at most its OWN account's tokens and is refused\n * for every other userid. `readRole: 'provision'` below, for the same reason storage.ts,\n * sdn-zone.ts and sdn-vnet.ts set it, at the same cost: every plan mints a 300s non-renewable\n * provision lease just to read.\n *\n * ★ MIGRATED OFF `client.ts`'s generic `pve()`/`pveHandlers`/`pveOperations` ONTO\n * `@distilled.cloud/proxmox`'s typed `access.getAccessUserToken`/`putAccessUserToken`/\n * `deleteAccessUserToken` (2026-09-24, decision 43's proxmox walk-down, the last access-family\n * resource). There is no `createAccessUserToken` call anywhere in this file — the create branch\n * was already provably unreachable before the migration (`reconcile` dies on an absent read\n * before any create path runs), so nothing calls distilled's POST-shaped `updateAccessUserToken`\n * operation either; see api-token-form.ts for why the generator gave it that name.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as access from '@distilled.cloud/proxmox/access';\nimport * as Effect from 'effect/Effect';\nimport { API_TOKEN_UPDATE, attributesOf, matches, shape } from './api-token-form.ts';\nimport { guardWrite } from './distilled-guard.ts';\nimport type { PveRequirements, WithTarget } from './resource-spec.ts';\nimport { runPve } from './distilled-pve.ts';\nimport {\n UNREADABLE,\n type Unreadable,\n readOrUnreadable,\n unreadableWarning,\n} from './unreadable-read.ts';\n\nexport interface ApiTokenProps extends WithTarget {\n /**\n * The account that owns the token, realm-qualified: `iac@pve`, `root@pam`. Identity.\n *\n * ⚠️ THE ACCOUNT MUST ALREADY EXIST. Every method here runs `check_user_exist` first, so a\n * token named under a missing user fails the READ (folded to \"absent\") and then fails the\n * create with \"no such user\" — the honest error, arriving one step after the misleading plan.\n * Sequence a `Proxmox.User` ahead of it and the ordering takes care of itself.\n */\n userid: string;\n /**\n * The token's own name, unique within the account. Identity.\n *\n * ⚠️ PVE HAS NO RENAME. Editing this prop (or `userid`) points `path` at a DIFFERENT token,\n * which reads as absent and is then created — leaving the old token LIVE, invisible to the\n * plan, while the new one is the unusable kind described at the top. Rename by declaring a\n * delete and a create.\n * ⛔ `diff` IS NOT OVERRIDDEN TO SAY `replace` THE WAY acl.ts DOES: there, replace removes a\n * grant that can be rebuilt from its own tuple; here it would DELETE a live token —\n * destroying an irrecoverable secret — to tidy up a name. Leaving the old token standing is\n * the lesser harm.\n * ⚠️ PATTERN `[A-Za-z][A-Za-z0-9.\\-_]+`: a letter first, two characters minimum.\n */\n tokenid: string;\n /** Free text in `pveum user token list` and the UI. Empty is how it is cleared — see `shape`. */\n comment?: string;\n /**\n * Seconds since the epoch, or 0 for \"never expires\".\n *\n * ⛔ REQUIRED, AND THE SCHEMA WILL TELL YOU IT NEED NOT BE. It declares the default \"same as\n * user\", and the code never implements it: `generate_token` writes `expire` only when the\n * parameter is defined, and the parser does `$expire = 0 if !$expire`. Required, so \"this\n * token never expires\" is a sentence somebody had to type, rather than an omission that would\n * quietly WRITE 0 over a live deadline.\n */\n expire: number;\n /**\n * True keeps the token's privileges separate from its owner's — it gets NOTHING until an ACL\n * names `fullTokenid`. False gives it the owner's privileges entire.\n *\n * ⛔ REQUIRED FOR THE SAME REASON AS `expire`, AND THE BLAST RADIUS IS LARGER. Were this\n * optional, adopting a live token without mentioning `privsep` would plan an update to 1 and\n * STRIP a working credential of every privilege it has, silently.\n */\n privsep: boolean;\n}\n\nexport interface ApiTokenAttributes {\n userid: string;\n tokenid: string;\n /** `<userid>!<tokenid>` — what `Proxmox.Acl` binds as its `ugid`. Derived; never compared. */\n fullTokenid: string;\n comment: string;\n expire: number;\n privsep: boolean;\n /**\n * ⛔ THERE IS NO `value` FIELD HERE AND THERE NEVER MAY BE. Adding one would write a working PVE\n * credential, in clear, into the state Postgres and into every nightly dump of it.\n */\n}\n\nexport interface ProxmoxApiToken extends Resource<\n 'Proxmox.ApiToken',\n ApiTokenProps,\n ApiTokenAttributes,\n never,\n PveRequirements\n> {}\n\n/**\n * ★ `retain` BY DEFAULT, AND THIS IS THE PLAINEST CASE FOR IT IN THE PACKAGE. A token's contents\n * are one irreplaceable secret: delete it and the value is gone, and every holder loses access\n * the instant `cfs_write_file` returns — with no error raised anywhere near them. `delete` is\n * FULLY IMPLEMENTED and runs the moment a caller opts in with `.pipe(RemovalPolicy.destroy())`.\n */\nexport const ProxmoxApiToken = Resource<ProxmoxApiToken>('Proxmox.ApiToken', {\n defaultRemovalPolicy: 'retain',\n});\n\n/**\n * ⛔ `readRole: 'provision'` — see the header's ⚠️ on privileges.\n * ⛔ `{ userid, tokenid }`, NEVER THE WHOLE `props` — group.ts's readGroup has the full measured\n * mechanism (kit 0.31.1's regression): an extra key beyond the schema's own path labels gets\n * encoded onto this GET as a body, which a stricter fetch client refuses outright.\n * ⛔ NO `orElseSucceed` — a MISSING token's absence signal is a SUCCESSFUL read with `expire`/\n * `privsep` both absent (`attributesOf`/api-token-form.ts, MEASURED pre-migration), unlike\n * user.ts/group.ts's missing-object 500 — so this family never needed their folding split. A\n * THROWN failure here is genuinely unexpected and must propagate and fail the plan loudly.\n */\nconst readToken = (props: ApiTokenProps) => {\n const label = { tokenid: props.tokenid, userid: props.userid };\n return readOrUnreadable(\n runPve(props.target, 'provision', false, access.getAccessUserToken(label)),\n ).pipe(Effect.map((live) => (live === UNREADABLE ? UNREADABLE : attributesOf(live, props))));\n};\n\n/** `read`/`reconcile` return `Attributes | undefined`; only `diff` tells `UNREADABLE` apart. */\nconst dropUnreadable = (live: ApiTokenAttributes | Unreadable | undefined) =>\n live === UNREADABLE ? undefined : live;\n\n/**\n * ⛔ THIS FAMILY ADOPTS AND MANAGES TOKENS; IT REFUSES TO MINT ONE — see the header. `reconcile`\n * refuses by name before any write when the read finds nothing, so the create path this\n * family's spec would otherwise need never runs, and no `createAccessUserToken`-shaped call\n * exists in this file at all.\n */\nexport const ProxmoxApiTokenProvider = () =>\n Provider.effect(\n ProxmoxApiToken,\n Effect.succeed(\n ProxmoxApiToken.Provider.of({\n /**\n * ⛔ `list` IS EMPTY, AND FOR THIS FAMILY THAT MATTERS MORE THAN THE GENERIC ARGUMENT.\n * A token index handed to Alchemy would offer up `mint@pve!engine` and every live\n * OpenBao lease for adoption — and adoption is what makes a later plan willing to delete.\n */\n list: () => Effect.succeed([]),\n read: Effect.fn(function* ({ olds }) {\n return dropUnreadable(yield* readToken(olds));\n }),\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n yield* guardWrite(API_TOKEN_UPDATE, shape(news), false);\n if (output === undefined) return undefined;\n const live = yield* readToken(news);\n // ⛔ THE CRIES-WOLF FIX: a refused read used to fall into `undefined` below and force\n // `update` on a token that was plainly there — see unreadable-read.ts.\n if (live === UNREADABLE) {\n yield* unreadableWarning('Proxmox.ApiToken', `${news.userid}!${news.tokenid}`);\n return { action: 'noop' } as const;\n }\n // ⚠️ NO GUARDED-CREATE BRANCH HERE, UNLIKE EVERY OTHER FAMILY IN THIS SUB-AREA. There\n // is nothing to guard a create form for — `reconcile` refuses instead, and `diff`\n // answering `update` for an absent token is what routes a real deploy into that\n // refusal rather than silently reporting `noop` over a token that never landed.\n return live !== undefined && matches(live, news)\n ? ({ action: 'noop' } as const)\n : ({ action: 'update' } as const);\n }),\n reconcile: Effect.fn(function* ({ news }) {\n // ⚠️ `dropUnreadable`: reconcile only runs once `provision` already minted for the\n // read that fed `diff`'s `update` verdict, so `UNREADABLE` here is a narrow race, not\n // the routine case `diff` handles. Any OTHER read failure now propagates on its own\n // (readToken no longer folds it), so the die() message below is reached only on a\n // genuinely absent token, never on a transient failure wearing that message.\n const before = dropUnreadable(yield* readToken(news));\n if (before === undefined) {\n return yield* Effect.die(\n new Error(\n `${news.userid}!${news.tokenid}: this resource does not create API tokens. PVE ` +\n 'returns the secret only in the create response and it cannot be stored, so a ' +\n 'token made here would be a live credential nobody holds. Create it with ' +\n '`pveum user token add` and capture the value, or mint a short-lived one from ' +\n 'the OpenBao proxmox mount (`bao read proxmox-c1/creds/<role>`) -- then declare ' +\n 'it here to manage it.',\n ),\n );\n }\n yield* guardWrite(API_TOKEN_UPDATE, shape(news), false);\n if (!matches(before, news)) {\n yield* runPve(news.target, 'provision', true, access.putAccessUserToken(shape(news)));\n }\n const after = dropUnreadable(yield* readToken(news));\n if (after === undefined) {\n return yield* Effect.die(\n new Error(\n `${news.userid}!${news.tokenid}: the write returned no error but the token is ` +\n 'still absent. PVE wraps every answer in {\"data\":...} and can report success ' +\n 'on a call that did nothing -- read back rather than trusting the status code.',\n ),\n );\n }\n return after;\n }),\n delete: Effect.fn(function* ({ olds }) {\n yield* runPve(\n olds.target,\n 'provision',\n true,\n access.deleteAccessUserToken({ tokenid: olds.tokenid, userid: olds.userid }),\n );\n }),\n }),\n ),\n );\n",
|
|
35
35
|
"/**\n * How PVE spells a value on the wire, and how to get it back to something comparable.\n *\n * ⛔ EVERY FUNCTION HERE WAS FOUND IN TWO OR MORE RESOURCE FILES, AND THE COPIES HAD DRIFTED.\n * `num` was byte-identical in three files, so merging it is free. The boolean was NOT: four\n * files declared `const flag` and meant four different things by it, including one that ran the\n * other way round. That is the whole reason this module exists — not to save lines, but because\n * a name that means four things is a bug waiting for the person who assumes it means the first\n * one they read.\n *\n * ★ THE TWO DIRECTIONS ARE NAMED APART, DELIBERATELY. `bool` reads the wire and answers a\n * TypeScript boolean; `flag` writes a form field and answers PVE's `'1'`/`'0'`. `storage.ts`\n * held both under one name — `flag` there was the write direction while `flag` in three other\n * files was the read direction — which typechecks in both files and is exactly the confusion\n * that survives review.\n *\n * ⚠️ NOTHING HERE IS RESOURCE-SPECIFIC. A coercion that only one PVE object needs belongs in that\n * object's file, where its reasoning sits next to the field it serves. `role.ts` keeps its own\n * `canonical` for the same reason: that one sorts a privilege SET, which is a different idea\n * from `canonicalToken` below however similar the names read.\n */\n\n/** ⚠️ `typeof value === 'number'` and not `Number(value)`: PVE sends `null` for an unset field. */\nexport const num = (value: unknown, fallback: number) =>\n typeof value === 'number' ? value : fallback;\n\nexport const text = (value: unknown, fallback = '') =>\n typeof value === 'string' ? value : fallback;\n\n/**\n * A PVE boolean off the wire.\n *\n * ⛔ THE FOUR SPELLINGS THIS REPLACES, AND WHY THIS ONE IS A SUPERSET OF ALL OF THEM. Measured in\n * the files they came from: `backup-job` accepted `1 | true | '1'` with a caller's fallback;\n * `sdn-vnet` the same three with no fallback; `storage` accepted only `1 | true`; `user` ran the\n * value through `Number()` and asked `!== 0`. For the values PVE actually returns on these\n * endpoints — `0` and `1` — all four agree, so accepting the union changes no live answer.\n *\n * ⚠️ THE ONE REAL DIFFERENCE IS `2`. `user.ts` would have read any non-zero number as true; this\n * reads only `1`. No PVE field in this package is documented to return anything but 0 or 1, and\n * a field that did would be a flag with more than two states — which is not a boolean, and\n * should be read with `num` and named for what it is rather than quietly coerced here.\n *\n * ⚠️ `null`, `undefined` AND `''` ALL TAKE THE FALLBACK. An absent key means PVE's documented\n * default for that field, which is not always `false` — so the default is the CALLER's to state,\n * and `false` is only the fallback's own default for fields that really do default off.\n *\n * ⛔ THE EMPTY STRING IS ABSENT, NOT FALSE, AND GETTING THAT WRONG WRITES THE WRONG VALUE. A\n * metric server is a SectionConfig section and can hand back `''` for an unset flag. Read as\n * `false`, the two fields in this package that default ON — `backup-job.enabled` and\n * `user.enable` — would come back disabled, `matches` would report an update nobody asked for,\n * and the deploy would then WRITE `enabled=0` onto a live job. An empty string is not a\n * boolean; it is the absence of one.\n */\nexport const bool = (value: unknown, fallback = false) =>\n value === undefined || value === null || value === ''\n ? fallback\n : value === 1 || value === true || value === '1';\n\n/**\n * A boolean on its way INTO a PVE form.\n *\n * ⚠️ `undefined` IN, `undefined` OUT — an undeclared field must not be sent at all. Sending `'0'`\n * for a prop the caller never set would write PVE's default over whatever is live, turning an\n * omission into an edit.\n */\nexport const flag = (value?: boolean) => (value === undefined ? undefined : value ? '1' : '0');\n\n/**\n * A comma list PVE does not promise to give back in the order it was handed.\n *\n * ⚠️ `nodes` IS A SET AND PVE DOES NOT PRESERVE ITS ORDER. The zone plugin decodes the list into a\n * hash and re-encodes it by joining that hash's keys, so the string you get back is not the one\n * you sent. Sorting both sides is what stops a plan reporting an update because two names came\n * back the other way round. `peers` gets the same treatment: it is a mesh, not a queue.\n */\nexport const csv = (value: readonly string[] | string | undefined) =>\n (typeof value === 'string' ? value.split(',') : (value ?? []))\n .map((part) => part.trim())\n .filter((part) => part !== '')\n .sort()\n .join(',');\n\n/**\n * A comma list of guest IDs, in numeric order.\n *\n * ⚠️ ORDER IS NOT MEANING IN A GUEST LIST, SO IT MUST NOT BE A DIFF. PVE stores `vmid` as the\n * comma-separated string it was handed and gives it back the same way, so a declaration listing\n * the same guests in another order would otherwise be an update that rewrites the job to say\n * exactly what it already said. Both sides are sorted numerically before they meet.\n *\n * ⚠️ NUMERIC, NOT LEXICAL — this is why it is not `csv`. Sorted as text, `101` precedes `99`.\n */\nexport const guestList = (value: unknown): string => {\n const parts =\n typeof value === 'string'\n ? value.split(',')\n : Array.isArray(value)\n ? value.map((entry: unknown) => String(entry))\n : [];\n return parts\n .map((part) => Number(part.trim()))\n .filter((id) => Number.isFinite(id))\n .sort((left, right) => left - right)\n .map((id) => String(id))\n .join(',');\n};\n\n/** `yes`/`true`/`on` and their opposites are the same value as 1/0 to PVE; make them one string. */\nexport const canonicalToken = (raw: string) => {\n const lowered = raw.trim().toLowerCase();\n if (['1', 'yes', 'true', 'on'].includes(lowered)) return '1';\n if (['0', 'no', 'false', 'off'].includes(lowered)) return '0';\n return lowered;\n};\n\n/**\n * A PVE property string, flattened to one comparable form.\n *\n * ⚠️ A PROPERTY STRING AND ITS PARSED FORM ARE ONE VALUE IN TWO SHAPES, AND PVE HANDS BACK\n * WHICHEVER IT LIKES. MEASURED: `fleecing` is WRITTEN as the property string `fleecing=enabled=0`\n * and READ BACK as the nested object {\"enabled\":0}. Comparing raw values would report an update\n * on every plan for a job nobody touched — the same forever-diff a create-only field causes. So\n * both sides are flattened here, sorted, and only then compared. `prune-backups` goes through\n * the same funnel: same kind of value, the normalisation is free, and guessing which shape it\n * comes back in is exactly the guess that costs a permanent diff.\n *\n * ⚠️ `defaultKey` EXISTS BECAUSE `fleecing=1` IS SHORTHAND FOR `fleecing=enabled=1`. PVE's format\n * for it is written `[enabled=]<1|0>`, so a bare token is legal on write and comes back expanded\n * on read; unexpanded, the short and long spellings never compare equal. `prune-backups` has no\n * default key, so a bare token there is passed through as-is rather than invented into one.\n */\nexport const propertyString = (value: unknown, defaultKey?: string): string => {\n const pairs: [string, string][] =\n typeof value === 'string'\n ? value.split(',').map((part) => {\n const [key, ...rest] = part.split('=');\n return rest.length === 0 && defaultKey !== undefined\n ? [defaultKey, key ?? '']\n : [key ?? '', rest.join('=')];\n })\n : typeof value === 'object' && value !== null\n ? Object.entries(value).map(([key, entry]) => [key, String(entry)])\n : [];\n return pairs\n .map(([key, entry]) => [key.trim(), canonicalToken(entry)] as const)\n .filter(([key]) => key !== '')\n .map(([key, entry]) => `${key}=${entry}`)\n .sort()\n .join(',');\n};\n\n/**\n * An integer PVE may have spelled as a string.\n *\n * ⚠️ PVE MAY HAND BACK EITHER `8086` OR `\"8086\"`. These objects are SectionConfig sections, and the\n * integer check VALIDATES the parsed string rather than converting it, so whether a number\n * arrives as a number is a property of the version you are talking to. `'8086' === 8086` is\n * false, and that is an update consisting of nothing, reported on every plan forever.\n */\nexport const int = (value: unknown, fallback: number) => {\n if (typeof value === 'number') return value;\n const parsed = Number.parseInt(text(value), 10);\n return Number.isNaN(parsed) ? fallback : parsed;\n};\n\n/**\n * A PVE update form with its clear-list attached, and the two guaranteed not to overlap.\n *\n * ⛔ PVE DIES IF A KEY IS SET AND DELETED IN ONE CALL, AND SIX FAMILIES HERE BUILT THAT FORM BY\n * HAND. Measured in the shipped Perl on node-b — `PVE::SectionConfig::delete_from_config`, line 1860:\n *\n * die \"cannot set and delete property '$k' at the same time!\\n\"\n * if defined($new_options->{$k});\n *\n * `defined` is the test, not truth, so `strict=0` or `comment=''` in the body counts as SET. The\n * concrete failure: a live node-affinity rule with `strict 1` and a declaration carrying\n * `strict: false`. `matches` reports an update; the clear-list has to name `strict`, because a\n * PUT of `strict=0` merges a falsy value the plugin still stores; and if the body also emits\n * `strict: '0'` the PUT is refused. The update never lands, the next plan reports the same\n * update, and every deploy 500s — forever.\n *\n * ★ SO DISJOINTNESS IS ENFORCED HERE RATHER THAN REASONED ABOUT SIX TIMES. A cleared key is\n * dropped from the body: CLEAR WINS. That is the right way round because a clear-list entry is\n * computed from \"this prop is absent, and absent means remove it\", which is a deliberate\n * statement, while the body's value for the same key is the coercion of that same absence —\n * `flag(false)` is `'0'`, and `'0'` is exactly what must not be sent.\n *\n * ⚠️ UNDEFINED VALUES ARE DROPPED TOO, so a form builder may emit `undefined` for a field it does\n * not set without the caller filtering first. `new URLSearchParams` would otherwise stringify it\n * to the literal text \"undefined\".\n */\nexport const withClears = (\n fields: Record<string, string | undefined>,\n clear: readonly string[],\n): Record<string, string> => {\n const cleared = new Set(clear);\n const kept: Record<string, string> = {};\n for (const [key, value] of Object.entries(fields)) {\n if (value !== undefined && !cleared.has(key)) kept[key] = value;\n }\n return cleared.size === 0 ? kept : { ...kept, delete: [...cleared].join(',') };\n};\n",
|
|
@@ -40,24 +40,24 @@
|
|
|
40
40
|
"/**\n * One authenticated call to the Proxmox VE API.\n *\n * ★ PLAIN `fetch`, NO TLS ESCAPE HATCH, AND THAT IS A MEASURED CHOICE RATHER THAN AN OMISSION.\n * Proxmox is usually met with `curl -k` because a fresh install serves its own self-signed\n * certificate — I reached for `-k` myself before checking. This cluster serves a real Let's\n * Encrypt certificate (`CN=cluster-c1.example.com`), and strict TLS answers 401, i.e. the\n * handshake succeeds and only the credential is missing. So there is no `rejectUnauthorized`\n * option here to be left switched on by accident in somebody else's estate.\n *\n * ⚠️ EVERY PVE ANSWER IS WRAPPED IN `{\"data\": ...}`, errors included — a failed call can still be\n * HTTP 200 with `{\"data\": null}`. Unwrapping is not cosmetic; a caller that reads the envelope\n * as the payload sees `undefined` and calls it \"absent\".\n */\nimport * as Effect from 'effect/Effect';\nimport * as HttpClient from 'effect/unstable/http/HttpClient';\nimport * as HttpClientRequest from 'effect/unstable/http/HttpClientRequest';\nimport type { ApiTarget, PveCredential, PveRole, PveTarget } from './credentials.ts';\nimport { leased } from './lease-cache.ts';\nimport { authorization } from './mint.ts';\nimport { executeOnCluster } from './members.ts';\n\nexport class PveError extends Error {\n constructor(\n readonly status: number,\n readonly method: string,\n readonly path: string,\n detail: string,\n ) {\n super(`PVE ${method} ${path} -> ${String(status)}: ${detail}`);\n this.name = 'PveError';\n }\n}\n\nconst clusterExhausted = (\n method: 'GET' | 'POST' | 'PUT' | 'DELETE',\n path: string,\n attempts: ReadonlyArray<{ member: string; why: string }>,\n) =>\n new PveError(\n 0,\n method,\n path,\n `all members failed: ${attempts.map((a) => `${a.member} (${a.why})`).join('; ')}`,\n );\n\n/**\n * A form body, where a value may be a LIST.\n *\n * ⛔ PVE AND PBS SPELL A MULTI-VALUED FIELD DIFFERENTLY, AND THE LIST FORM IS FOR PBS. PBS is Rust:\n * its schemas use `type: array` — `delete` on every update endpoint is one — and its urlencoded\n * decoder builds that array from REPEATED KEYS (`delete=a&delete=b`). PVE's Perl takes a comma\n * string for the same idea, which is what `withClears` in values.ts produces, and for the one\n * PVE field that genuinely needs repetition it wants a NUL-joined value instead (see\n * notification-target.ts). So: PVE callers pass strings and are unaffected; a PBS caller that\n * needs an array passes one and gets repeated keys rather than reaching for PVE's encoding.\n */\nexport type PveForm = Record<string, readonly string[] | string>;\n\n/** ⚠️ `append`, NOT `set`: a repeated key is the point, and `set` would keep only the last. */\nconst encode = (form: PveForm): string => {\n const params = new URLSearchParams();\n for (const [key, value] of Object.entries(form)) {\n if (typeof value === 'string') params.append(key, value);\n else for (const item of value) params.append(key, item);\n }\n return params.toString();\n};\n\nconst buildRequest = (\n method: 'GET' | 'POST' | 'PUT' | 'DELETE',\n apiBase: string,\n path: string,\n credential: PveCredential,\n target: ApiTarget,\n form?: PveForm,\n) => {\n const url = `${apiBase}/${path}`;\n /**\n * ⛔ THE CONTENT TYPE IS AN ARGUMENT TO `bodyText`, NOT AN ENTRY IN THE HEADER MAP, AND GETTING\n * THAT WRONG MADE EVERY WRITE IN THIS PACKAGE FAIL.\n *\n * 🔴 THE BUG, AND HOW IT HID FOR A WHOLE DAY. The header map DID set\n * `application/x-www-form-urlencoded` — and `bodyText(s)` with no second argument sets\n * `text/plain` and OVERWRITES it, because it is piped AFTER `setHeaders`. PVE and PBS accept\n * ONLY form encoding or JSON and reject everything else outright (measured in\n * proxmox-rest-server's `get_request_parameters`), so every create, update and delete this\n * package can perform was broken from the day the client was written.\n * ⛔ NOTHING CAUGHT IT BECAUSE NOTHING HAD EVER WRITTEN. Ninety-eight resources were adopted\n * against the live cluster and every one matched, so `reconcile` never reached a PUT. The\n * identical bug in <estate>/forgejo/src/client.ts surfaced the moment a write token existed\n * and answered `422 Unsupported Content-Type`; this one is the same line, found by looking.\n * ★ A PLAN THAT SAYS `noop` PROVES THE READ PATH AND NOTHING ELSE. That is the lesson worth\n * more than the fix.\n *\n * ⚠️ PVE TAKES FORM ENCODING, NOT JSON. Sending application/json is accepted and then SILENTLY\n * IGNORED on several endpoints, which reads as \"the API did nothing\" rather than as a wrong\n * content type — so the type below is load bearing in both directions.\n */\n return HttpClientRequest.make(method)(url).pipe(\n HttpClientRequest.setHeaders({ Authorization: authorization(credential, target) }),\n form === undefined\n ? (self) => self\n : HttpClientRequest.bodyText(encode(form), 'application/x-www-form-urlencoded'),\n );\n};\n\nconst executeOne = (\n target: ApiTarget,\n credential: PveCredential,\n method: 'GET' | 'POST' | 'PUT' | 'DELETE',\n path: string,\n form: PveForm | undefined,\n apiBase: string,\n) =>\n Effect.gen(function* () {\n const client = yield* HttpClient.HttpClient;\n const request = buildRequest(method, apiBase, path, credential, target, form);\n return yield* client\n .execute(request)\n .pipe(Effect.mapError((cause) => new PveError(0, method, path, String(cause))));\n });\n\nconst readResponse = <T>(\n response: {\n status: number;\n text: Effect.Effect<string, unknown>;\n json: Effect.Effect<unknown, unknown>;\n },\n method: string,\n path: string,\n) =>\n Effect.gen(function* () {\n /**\n * ⛔ STATUS FIRST, THEN THE BODY, AND THE BODY IS READ EXACTLY ONCE. `text` and `json` both\n * consume the response stream, so asking for both is a bug waiting to happen. A failure is\n * read as TEXT because an error body is not reliably JSON — PVE answers HTML for some 5xx —\n * and a success is read as JSON by the client rather than by a hand-rolled `JSON.parse`.\n */\n if (response.status < 200 || response.status >= 300) {\n // ⚠️ 401 HERE USUALLY MEANS THE LEASE EXPIRED, NOT THAT THE ROLE IS WRONG. `provision` is a\n // 300s non-renewable lease; a long reconcile should mint again rather than widen the role.\n const detail = yield* response.text.pipe(Effect.orElseSucceed(() => ''));\n return yield* Effect.fail(new PveError(response.status, method, path, detail.slice(0, 300)));\n }\n const body = (yield* response.json.pipe(\n Effect.mapError((cause) => new PveError(0, method, path, String(cause))),\n )) as { data?: T };\n return body.data;\n });\n\n/** A call that already holds a credential. Used when one mint serves several calls. */\nexport const pveWith = <T>(\n target: ApiTarget,\n credential: PveCredential,\n method: 'GET' | 'POST' | 'PUT' | 'DELETE',\n path: string,\n form?: PveForm,\n) =>\n Effect.gen(function* () {\n const response =\n target.scheme === 'pve'\n ? yield* executeOnCluster(target, method, path, (apiBase) =>\n buildRequest(method, apiBase, path, credential, target, form),\n ).pipe(\n Effect.mapError((failure) =>\n failure.tag === 'cluster'\n ? clusterExhausted(failure.method, failure.path, failure.attempts)\n : new PveError(0, method, path, String(failure)),\n ),\n )\n : yield* executeOne(target, credential, method, path, form, target.api);\n return yield* readResponse<T>(response, method, path);\n });\n\n/**\n * Like `pveWith`, but returns the full JSON body — for endpoints whose answer lives beside `data`.\n *\n * ⚠️ `network-apply-read.ts` is the caller today; the local fetch there should fold into this once\n * the envelope shape is stable across both paths.\n */\nexport const pveEnvelopeWith = (\n target: PveTarget,\n credential: PveCredential,\n method: 'GET' | 'POST' | 'PUT' | 'DELETE',\n path: string,\n) =>\n Effect.gen(function* () {\n const response = yield* executeOnCluster(target, method, path, (apiBase) =>\n buildRequest(method, apiBase, path, credential, target),\n ).pipe(\n Effect.mapError((failure) =>\n failure.tag === 'cluster'\n ? clusterExhausted(failure.method, failure.path, failure.attempts)\n : new PveError(0, method, path, String(failure)),\n ),\n );\n if (response.status < 200 || response.status >= 300) {\n const detail = yield* response.text.pipe(Effect.orElseSucceed(() => ''));\n return yield* Effect.fail(new PveError(response.status, method, path, detail.slice(0, 300)));\n }\n return (yield* response.json.pipe(\n Effect.mapError((cause) => new PveError(0, method, path, String(cause))),\n )) as Record<string, unknown>;\n });\n\n/**\n * Make one call on a credential for `role`, REUSING a still-valid lease rather than minting one.\n *\n * 🔴 IT USED TO MINT PER CALL, AND AT 98 RESOURCES THAT STOPPED BEING FREE. One plan plus deploy\n * of the C1 stack left 760 token entries in `/etc/pve/user.cfg` — read, diff, reconcile and the\n * read-back each minted their own, and `/etc/pve` is a replicated cluster filesystem every node\n * has to agree on. src/lease-cache.ts carries the measurement and the safety argument.\n *\n * ⚠️ `pveWith` IS STILL THERE AND STILL TAKES AN EXPLICIT CREDENTIAL. network-apply.ts needs ONE\n * identity across its apply and its task poll — PVE only skips the task-status privilege check\n * for the task's OWNER — and it threads a lease through by hand for that. Caching makes that\n * property easier to hold, never weaker, but the explicit path stays because that caller is\n * reasoning about identity rather than about cost.\n *\n * ★ TASK POLL ON A DIFFERENT MEMBER THAN THE APPLY STILL HOLDS: the owner is the token id, not the\n * node that received the PUT. Any member serves any task path; the privilege skip is keyed on\n * whether the caller IS the task's owner.\n */\nexport const pve = <T>(\n target: ApiTarget,\n role: PveRole,\n method: 'GET' | 'POST' | 'PUT' | 'DELETE',\n path: string,\n form?: PveForm,\n) =>\n Effect.gen(function* () {\n const credential = yield* leased(target, role);\n return yield* pveWith<T>(target, credential, method, path, form);\n });\n",
|
|
41
41
|
"/**\n * A spec's two forms, checked against the vendor's own tables before either goes on the wire.\n *\n * ★ A FILE OF ITS OWN BECAUSE resource.ts REACHED THE 250-LINE CAP, and the seam is the same one\n * resource-spec.ts cuts on: that file says what a PVE object DECLARES, resource.ts says how one\n * is read and written, and this one says what makes a declaration legal. `constraint-guard.ts`\n * is the layer below — it owns the lookup and the refusal; this owns which form to check when.\n */\nimport * as Effect from 'effect/Effect';\nimport { guardForm } from './constraint-guard.ts';\nimport type { PveSpec, WithApiTarget } from './resource-spec.ts';\n\nexport const specGuards = <Props extends WithApiTarget, Attributes>(\n spec: PveSpec<Props, Attributes>,\n) => {\n /** ⚠️ A function for the two families whose endpoint is a prop — see `PveSpec['endpoint']`. */\n const endpointsOf = (props: Props) =>\n typeof spec.endpoint === 'function' ? spec.endpoint(props) : spec.endpoint;\n\n /**\n * The create form against its own endpoint's table.\n *\n * ⛔ `presence` MEANS \"A CREATE IS REALLY ABOUT TO HAPPEN\", NOT \"THIS IS THE CREATE FORM\", AND\n * THE DIFFERENCE IS A WHOLE FAMILY. `Proxmox.NotificationTarget` cannot send gotify's `token`\n * or smtp's `password` — they are write-only secrets and props are persisted to the state\n * store unencrypted (notification-target.ts's third ⛔) — so PVE's `token: required` is\n * permanently unsatisfiable here. The documented way to run one is to create it out of band\n * with its secret and then DECLARE it, which is an adopt and then updates forever after.\n * Requiring the create form's parameters on that path would refuse a deploy that has worked\n * all along, which is the one failure worse than the 400 this feature removes.\n * ⚠️ VALUE RULES STILL RUN ON EVERY PLAN, presence or not: a 129-character comment is wrong\n * whether it is being created or edited, and that is the case this whole feature exists for.\n *\n * ⛔ THE FORM IS BUILT ONLY WHEN THERE IS A TABLE TO CHECK IT AGAINST. Calling `spec.createForm`\n * unconditionally would run every family's form builder on every diff — work nobody asked\n * for, and a new way for a builder that throws on an update-only path to break a plan it\n * never touched.\n */\n const guardCreate = (props: Props, presence: boolean): Effect.Effect<void> =>\n Effect.suspend(() => {\n const create = endpointsOf(props)?.create;\n return create === undefined\n ? Effect.void\n : guardForm(create, spec.createForm(props), presence);\n });\n\n /**\n * ⛔ NEVER WITH PRESENCE. An update form is deliberately PARTIAL — `formToSend` sends the fields\n * that changed and nothing else — so requiring the vendor's required parameters here would\n * refuse every ordinary edit. Value rules (length, range, enum, pattern) apply to both forms.\n */\n const guardUpdate = (props: Props): Effect.Effect<void> =>\n Effect.suspend(() => {\n const update = endpointsOf(props)?.update;\n if (update === undefined) return Effect.void;\n const form = spec.updateForm?.(props);\n return form === undefined ? Effect.void : guardForm(update, form, false);\n });\n\n return { guardCreate, guardUpdate };\n};\n",
|
|
42
42
|
"/**\n * Whether an update has anything to write — decided ONCE for every PVE and PBS family.\n *\n * ⛔ AN ADOPTED ROW IS RECONCILED EVEN WHEN ITS DIFF SAID `noop`, SO THIS GUARD IS WHAT MAKES\n * ADOPTION FREE. alchemy beta.79 Plan.ts sets `forceUpdateAfterAdoption` after the cold-start\n * probe and turns a `noop` diff into an update; Apply.ts then calls `reconcile` for the\n * `adopted` action exactly as for `update`. The plan prints `adopted` either way, so nothing on\n * screen tells a matching object from a drifting one. docs/adopt-verify.md has the table of\n * what each family does on that path.\n *\n * 🔴 THE FAMILY THAT DID NOT HAVE IT. `Proxmox.CephPool` wrote its own reconcile and PUT the\n * declared set whenever the pool existed, so adopting a pool that already matched sent\n * `setpool` and forked a worker on the live cluster (found 2026-09-21 by tracing every family).\n * resource.ts and pbs-datastore.ts each had the guard inline; three copies of one predicate is\n * how the fourth family forgets it, so it lives here and all three call it.\n *\n * ★ `matches` IS THE SAME PREDICATE `diff` USES, so \"the diff said noop\" and \"reconcile writes\n * nothing\" cannot disagree. A field left OUT of `matches` is one the family does not manage, so\n * its drift is not this write's to repair.\n *\n * ⚠️ AN EMPTY FORM IS ALSO NOT A WRITE. `updateForm` can legitimately answer `{}` — a storage\n * declaring only `storage`, `type` and its locator has no mutable field at all — and PUTting an\n * empty body is a pointless write at best and a 400 that reads as a broken provider at worst.\n * (Moved here from resource.ts with the guard it explains.)\n */\nexport const formToSend = <Attributes, Props, Form extends object>(\n matches: (attributes: Attributes, props: Props) => boolean,\n live: Attributes,\n props: Props,\n form: Form,\n): Form | undefined => (matches(live, props) || Object.keys(form).length === 0 ? undefined : form);\n",
|
|
43
|
-
"/**\n * `Proxmox.CephDaemon` — a Ceph monitor, manager or metadata server on one node.\n *\n * ★ ONE RESOURCE FOR THREE KINDS, AND THE SCHEMAS WERE CHECKED BEFORE THAT WAS DECIDED. Parsed\n * from `/usr/share/pve-docs/api-viewer/apidoc.js` on node-b, 2026-09-13: mon, mgr and mds each\n * expose GET on the collection and POST + DELETE on the id below it, each returns\n * name/host/state/addr/ceph_version*, and the only divergence is the create parameter\n * (`mon-address` / none / `hotstandby`) and the read-only extras (mon: quorum, rank; mds: rank,\n * fs_name, standby_replay). Three near-identical files would have carried the traps below three\n * times over and let them drift — the argument resource.ts already makes for the factory itself.\n *\n * ⛔ THE ONLY GET IS THE COLLECTION'S, AND IT ANSWERS FOR THE WHOLE CLUSTER. MEASURED:\n * `GET /nodes/node-b/ceph/mon` returns node-b, node-c AND node-d, and `GET /nodes/node-c/ceph/mon` returns the same\n * three IN A DIFFERENT ORDER — [node-d,node-b,node-c] from node-b, [node-c,node-b,node-d] from node-c — so a row is found by\n * `name` and NEVER by position, and the `{node}` in the path is only the node being ASKED.\n * MEASURED too: there is no GET on the id path at all; `pvesh get /nodes/node-b/ceph/mon/node-b` answers\n * \"No 'get' handler defined for '/nodes/node-b/ceph/mon/node-b'\", and mgr and mds answer the same.\n * That is why `path()` below is the COLLECTION, and that in turn is why `delete` is the one\n * handler this file writes by hand: `pveOperations.destroy` sends its DELETE to `spec.path`,\n * which here would be the collection — a 501 reported as a failed destroy, with the daemon still\n * running. Same shape and same rule as the override in acl.ts: do not \"restore symmetry\" by\n * pointing it back at `ops.destroy`.\n *\n * ⛔ WHAT A DESTROY ACTUALLY DOES, BECAUSE THE PLAN LINE SAYS ONLY \"delete\". REASONED FROM PVE'S\n * AND CEPH'S DOCUMENTED BEHAVIOUR, NOT MEASURED — nothing on this cluster was destroyed to find\n * out, and nothing should be to check. `mon`: stops ceph-mon@id, removes it from the monmap and\n * strips its section from ceph.conf. THREE MONS TOLERATE ONE LOSS; TWO TOLERATE NONE. Removing\n * two in one deploy — or removing the mon on the node whose API is serving the call — loses\n * quorum, and a cluster without mon quorum BLOCKS every RBD and CephFS I/O rather than erroring\n * it, so on this cluster every guest on `rbd-c1` hangs.\n * `mds`: destroying a STANDBY is a non-event; destroying the ACTIVE one fails CephFS over,\n * and with no standby left `cephfs-c1` goes unavailable. `mgr`: no guest I/O depends on it, but\n * the last one takes the PG autoscaler, the dashboard and PVE's own Ceph status with it.\n * Live on 2026-09-13: mon, mgr AND mds on each of node-b, node-c, node-d.\n *\n * ★ AND THE ONLY WAY TO REACH THAT DESTROY IS TO DELETE THE DECLARATION. `matches` is deliberately\n * total (see its ⛔), so this resource CANNOT plan a `replace` — which is the one action that\n * would tear down a live mon off the back of an edited field rather than a removed line.\n *\n * ⚠️ THE PRIVILEGES ARE ASYMMETRIC AND THE READ SIDE IS THE CHEAP ONE. The GET checks `any` of\n * `Sys.Audit`/`Datastore.Audit` on `/`, and PVEAuditor holds both (MEASURED:\n * `GET /access/roles/PVEAuditor`), so the mount's `read` role can see this family — unlike\n * `Proxmox.Storage`, which 403s under that lease. POST and DELETE both check `Sys.Modify` on\n * `/`, and MEASURED on this cluster the provision role already held it (it is in `PROVISION_PRIVILEGES`), so the provision lane\n * needs no widening for once. ⚠️ `Sys.Modify` on the ROOT path is broad — it also buys\n * datacenter options and every other cluster-wide config write — so it is worth knowing that\n * this credential already has it rather than discovering it the next time something is scoped.\n *\n * ★ MIGRATED OFF `client.ts` (2026-09-24, decision 43, 2c) — ceph-daemon-wire.ts has the rename\n * and why no protocol gap blocks any of the three kinds; `readDaemon` there keeps this family's\n * pre-migration single-fold shape (ceph-pool-wire.ts explains why that is not left unfixed).\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { DAEMON_ENDPOINTS, createForm } from './ceph-daemon-form.ts';\nimport { createDaemon, deleteDaemon, notCreated, readDaemon } from './ceph-daemon-wire.ts';\nimport { guardWrite } from './distilled-guard.ts';\nimport { type PveRequirements, type WithTarget } from './resource.ts';\n\n/**\n * Which Ceph daemon this is. The discriminant picks the collection, the create parameters and\n * which of the read-only extras below will even be populated.\n *\n * ⚠️ `osd` IS NOT HERE AND MUST NOT BE ADDED TO THIS UNION. `/nodes/{node}/ceph/osd` takes a disk\n * device, wipes it, and its DELETE has a `cleanup` flag — a create that destroys data on the way\n * in is a different resource with a different set of refusals, not a fourth case in this one.\n */\nexport type CephDaemonKind = 'mon' | 'mgr' | 'mds';\n\nexport interface CephDaemonProps extends WithTarget {\n kind: CephDaemonKind;\n /**\n * The node the daemon RUNS on. Identity — a daemon cannot be moved, only destroyed and rebuilt.\n * ⚠️ It is also the node whose API is asked, and the read is only as available as that node: a\n * node that is down — or has no Ceph installed, or answers 403 — reads as nothing at all,\n * because `pveOperations.read` folds EVERY failure into \"absent\" (a 404 is a legitimate answer\n * there and it cannot tell the two apart). Its daemons then plan as `update`, and reconcile\n * POSTs a create for a mon that already exists. PVE refuses that with \"monitor already\n * exists\", and the read-back refuses again — so it fails loudly rather than damaging anything,\n * but the message will point at the daemon rather than at the node that would not answer.\n */\n node: string;\n /**\n * The daemon id. PVE defaults it to the nodename, and `daemonId` in ceph-daemon-form.ts resolves\n * that default HERE rather than leaving it to PVE, because the id is a PATH SEGMENT: create,\n * delete and the row lookup all need the same string, and a default resolved on the far side\n * would leave three call sites guessing. Live on this cluster every daemon's name is its node.\n */\n name?: string;\n /**\n * mon only. Overrides the autodetected monitor IP; must sit in Ceph's public network — on this\n * cluster that is 198.51.100.0/24, carried by `vmbr1.42`.\n * ⛔ CREATE-ONLY AND NEVER COMPARED. PVE takes a bare ip-list on write and hands back `addr` as\n * `198.51.100.12:6789/0` — an address, a port and a nonce. The two are not the same string and\n * never will be, so diffing them would report a mismatch on every plan; with no PUT on this\n * family that mismatch becomes a REPLACE, and a replace of a mon is the quorum loss in the\n * header. Left out of `matches` on purpose.\n */\n 'mon-address'?: string;\n /**\n * mds only. Makes this standby replay the active MDS's journal for a faster failover.\n * ⛔ CREATE-ONLY AND NEVER COMPARED, AND THE FIELD THAT LOOKS LIKE ITS READBACK IS NOT ONE.\n * `standby_replay` in the list is the daemon's CURRENT state, not its configuration: MEASURED\n * 2026-09-13, all three mds report `standby_replay: false`, node-c included — and node-c is the ACTIVE\n * mds, which is not a standby at all and so can never report true however it was created.\n * Comparing `hotstandby` to it would plan a replace against whichever mds Ceph happens to have\n * elected, i.e. against a value no declaration controls.\n * ⚠️ SET ON A mon OR mgr IT IS DROPPED RATHER THAN SENT, and `mon-address` likewise on an mds:\n * each POST schema lists only its own parameter, so the wrong one is a 400 rather than an\n * ignored hint. A field silently dropped is the lesser of the two, but it IS dropped.\n */\n hotstandby?: boolean;\n}\n\n/**\n * Everything the cluster says about this daemon — reported, and (bar its identity) none of it\n * compared. Read the ⛔ on `matches` for why that is the only safe split on this family.\n */\nexport interface CephDaemonAttributes {\n kind: CephDaemonKind;\n node: string;\n name: string;\n /**\n * The host Ceph says it runs on.\n * ⚠️ REPORTED, NOT COMPARED, AND THAT IS A DELIBERATE BLIND SPOT. A daemon found under this name\n * on a DIFFERENT node than `node` declares plans as `noop`, which does hide a misdeclaration.\n * The alternative is worse: `host` is `optional` in the schema, so an absent one would read as\n * a mismatch, and with no PUT a mismatch is a replace — i.e. a missing field in one API answer\n * would destroy a live mon. When in doubt, out of `matches`; fix a wrong node by hand.\n */\n host: string;\n /**\n * mon `running`/`stopped`/`unknown`, mgr `active`/`standby`, mds `up:active`/`up:standby`/…\n * ⛔ CEPH ELECTS THIS AND REWRITES IT WITHOUT ANYONE DECLARING ANYTHING. MEASURED: mgr node-b is\n * `active` while node-c and node-d are `standby`; mds node-c is `up:active` while node-b and node-d are\n * `up:standby`. Restart a daemon and the roles move. It is reported so a plan can show what is\n * live and kept out of `matches` so that an election is never a diff.\n * ⚠️ IT ALSO MEANS THIS RESOURCE DOES NOT MANAGE WHETHER THE DAEMON IS RUNNING. A configured but\n * stopped daemon is still a row in the list, so it reads as present and plans `noop`.\n */\n state: string;\n /** Ceph-formatted, e.g. `198.51.100.12:6789/0`. Reported; see `mon-address` for why never compared. */\n addr: string;\n /** `ceph_version_short`, e.g. `20.2.2`. Reported: a straggler after an upgrade is worth seeing. */\n version: string;\n /**\n * mon rank in the monmap, mds rank in the filesystem, `-1` when the daemon has neither.\n * ⛔ CEPH ASSIGNS IT AND NOTHING DECLARES IT. MEASURED: the mons are ranked node-d=0, node-c=1, node-b=2 —\n * monmap order, not declaration order — and the mds ranks are 0 for the active node-c and -1 for\n * the two standbys. Rank moves when a daemon is added, removed or restarted.\n */\n rank: number;\n /** mon only: in the current quorum. Reported. MEASURED: all three mons are in quorum. */\n quorum: boolean;\n /** mds only, and NOT the readback of `hotstandby` — see the ⛔ on that prop. */\n standbyReplay: boolean;\n /**\n * mds only: the CephFS this daemon currently serves — `cephfs-c1` here.\n * ⛔ PRESENT ONLY ON THE ACTIVE MDS. MEASURED: node-c carries `fs_name`, node-b and node-d have no such key\n * at all. So it is empty for two of three identical declarations, and comparing it would\n * report work on exactly the daemons that are healthy standbys.\n */\n fsName: string;\n /** A `ceph-<kind>@<id>` systemd unit is enabled on the host. Reported; absent reads as false. */\n service: boolean;\n}\n\nexport interface ProxmoxCephDaemon extends Resource<\n 'Proxmox.CephDaemon',\n CephDaemonProps,\n CephDaemonAttributes,\n never,\n PveRequirements\n> {}\n\n/** ★ `retain` by default — a mon carrying quorum cannot be rebuilt. See the ★ in resource.ts. */\nexport const ProxmoxCephDaemon = Resource<ProxmoxCephDaemon>('Proxmox.CephDaemon', {\n defaultRemovalPolicy: 'retain',\n});\n\n/**\n * ⛔ TOTAL, AND THIS IS THE REASON THE FILE EXISTS RATHER THAN A SHORTCUT PAST WRITING IT. Every\n * field a declaration can carry is CREATE-ONLY and unreadable — `mon-address` comes back as a\n * different kind of string, `hotstandby` comes back as a state Ceph elects — and every field\n * the read returns is assigned by Ceph: state, rank, quorum, fs_name, standby_replay, addr,\n * version. Nothing is left that is both declared and readable. So the honest comparison is\n * \"does a daemon of this kind and name exist\", which `readDaemon` has already answered by\n * returning a value at all, and anything further would be a diff no write could ever satisfy.\n * ⛔ AND ON THIS FAMILY THAT DIFF IS NOT MERELY NOISY. There is no PUT, so a false mismatch\n * would have to be a REPLACE — and replace on a mon is delete-then-create against a live\n * quorum. A forever-diff here is a forever-OUTAGE-RISK.\n * ⚠️ THE PRICE, STATED PLAINLY: editing `hotstandby` or `mon-address` on a declared daemon\n * plans as `noop` and never applies. Same bargain storage.ts strikes for a changed `type`.\n * Change one by removing the declaration and re-adding it, ONE DAEMON AT A TIME, reading the\n * ⛔ on destroy in the header first.\n */\n/**\n * ★ The factory's shape with no `updateForm`: create if absent, else read back untouched.\n * ⛔ `guardWrite` RUNS RIGHT AFTER THE READ, UNCONDITIONALLY, NOT ONLY ON THE CREATE BRANCH —\n * found on adversarial review, 2026-09-24, matching node-network.ts's own `reconcile`.\n * `reconcile` also runs for an ADOPTED row with no fresh `diff` first (Plan.ts forces it after\n * the probe even when `diff` said noop), so a guard only on the create branch would let a\n * caller that skips `diff` (a resumed apply, a verify harness) reach `createDaemon` with\n * `mon-address` — a real vendor rule — unchecked.\n * ★ EXPORTED SO A TEST CAN CALL IT DIRECTLY, bypassing `diff` — the shape the review's own proof\n * needed: `findProvider` gives back the wrapped service, this gives the plain function.\n */\nexport const reconcileDaemon = Effect.fn(function* ({ news }: { news: CephDaemonProps }) {\n const live = yield* readDaemon(news);\n yield* guardWrite(DAEMON_ENDPOINTS[news.kind], createForm(news), live === undefined);\n if (live !== undefined) return live;\n yield* createDaemon(news);\n const after = yield* readDaemon(news);\n if (after === undefined) return yield* Effect.die(notCreated(news));\n return after;\n});\n\nexport const ProxmoxCephDaemonProvider = () =>\n Provider.effect(\n ProxmoxCephDaemon,\n Effect.succeed(\n ProxmoxCephDaemon.Provider.of({\n /** ⛔ Empty, like every other resource here — adopting the whole cluster's daemons is not\n * an accident anyone should be one `destroy` away from. Adoption stays explicit. */\n list: () => Effect.succeed([]),\n read: ({ olds }) => readDaemon(olds),\n // ★ Matches the pre-migration factory shape exactly (resource.ts): present is settled.\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n yield* guardWrite(DAEMON_ENDPOINTS[news.kind], createForm(news), output === undefined);\n if (output === undefined) return undefined;\n const live = yield* readDaemon(news);\n if (live === undefined) {\n yield* guardWrite(DAEMON_ENDPOINTS[news.kind], createForm(news), true);\n return { action: 'update' } as const;\n }\n return { action: 'noop' } as const;\n }),\n reconcile: ({ news }) => reconcileDaemon({ news }),\n /**\n * ⛔ THE DANGEROUS ONE. Re-read the destroy ⛔ in the header before letting a plan that\n * removes a mon run: two gone at once is a cluster with no quorum and every guest on\n * `rbd-c1` blocked on I/O.\n */\n delete: ({ olds }) => deleteDaemon(olds),\n }),\n ),\n );\n",
|
|
43
|
+
"/**\n * `Proxmox.CephDaemon` — a Ceph monitor, manager or metadata server on one node.\n *\n * ★ ONE RESOURCE FOR THREE KINDS, AND THE SCHEMAS WERE CHECKED BEFORE THAT WAS DECIDED. Parsed\n * from `/usr/share/pve-docs/api-viewer/apidoc.js` on node-b, 2026-09-13: mon, mgr and mds each\n * expose GET on the collection and POST + DELETE on the id below it, each returns\n * name/host/state/addr/ceph_version*, and the only divergence is the create parameter\n * (`mon-address` / none / `hotstandby`) and the read-only extras (mon: quorum, rank; mds: rank,\n * fs_name, standby_replay). Three near-identical files would have carried the traps below three\n * times over and let them drift — the argument resource.ts already makes for the factory itself.\n *\n * ⛔ THE ONLY GET IS THE COLLECTION'S, AND IT ANSWERS FOR THE WHOLE CLUSTER. MEASURED:\n * `GET /nodes/node-b/ceph/mon` returns node-b, node-c AND node-d, and `GET /nodes/node-c/ceph/mon` returns the same\n * three IN A DIFFERENT ORDER — [node-d,node-b,node-c] from node-b, [node-c,node-b,node-d] from node-c — so a row is found by\n * `name` and NEVER by position, and the `{node}` in the path is only the node being ASKED.\n * MEASURED too: there is no GET on the id path at all; `pvesh get /nodes/node-b/ceph/mon/node-b` answers\n * \"No 'get' handler defined for '/nodes/node-b/ceph/mon/node-b'\", and mgr and mds answer the same.\n * That is why `path()` below is the COLLECTION, and that in turn is why `delete` is the one\n * handler this file writes by hand: `pveOperations.destroy` sends its DELETE to `spec.path`,\n * which here would be the collection — a 501 reported as a failed destroy, with the daemon still\n * running. Same shape and same rule as the override in acl.ts: do not \"restore symmetry\" by\n * pointing it back at `ops.destroy`.\n *\n * ⛔ WHAT A DESTROY ACTUALLY DOES, BECAUSE THE PLAN LINE SAYS ONLY \"delete\". REASONED FROM PVE'S\n * AND CEPH'S DOCUMENTED BEHAVIOUR, NOT MEASURED — nothing on this cluster was destroyed to find\n * out, and nothing should be to check. `mon`: stops ceph-mon@id, removes it from the monmap and\n * strips its section from ceph.conf. THREE MONS TOLERATE ONE LOSS; TWO TOLERATE NONE. Removing\n * two in one deploy — or removing the mon on the node whose API is serving the call — loses\n * quorum, and a cluster without mon quorum BLOCKS every RBD and CephFS I/O rather than erroring\n * it, so on this cluster every guest on `rbd-c1` hangs.\n * `mds`: destroying a STANDBY is a non-event; destroying the ACTIVE one fails CephFS over,\n * and with no standby left `cephfs-c1` goes unavailable. `mgr`: no guest I/O depends on it, but\n * the last one takes the PG autoscaler, the dashboard and PVE's own Ceph status with it.\n * Live on 2026-09-13: mon, mgr AND mds on each of node-b, node-c, node-d.\n *\n * ★ AND THE ONLY WAY TO REACH THAT DESTROY IS TO DELETE THE DECLARATION. `matches` is deliberately\n * total (see its ⛔), so this resource CANNOT plan a `replace` — which is the one action that\n * would tear down a live mon off the back of an edited field rather than a removed line.\n *\n * ⚠️ THE PRIVILEGES ARE ASYMMETRIC AND THE READ SIDE IS THE CHEAP ONE. The GET checks `any` of\n * `Sys.Audit`/`Datastore.Audit` on `/`, and PVEAuditor holds both (MEASURED:\n * `GET /access/roles/PVEAuditor`), so the mount's `read` role can see this family — unlike\n * `Proxmox.Storage`, which 403s under that lease. POST and DELETE both check `Sys.Modify` on\n * `/`, and MEASURED on this cluster the provision role already held it (it is in `PROVISION_PRIVILEGES`), so the provision lane\n * needs no widening for once. ⚠️ `Sys.Modify` on the ROOT path is broad — it also buys\n * datacenter options and every other cluster-wide config write — so it is worth knowing that\n * this credential already has it rather than discovering it the next time something is scoped.\n *\n * ★ MIGRATED OFF `client.ts` (2026-09-24, decision 43, 2c) — ceph-daemon-wire.ts has the rename\n * and why no protocol gap blocks any of the three kinds. The follow-up removes the preserved\n * catch-all read fold: only a successful index without this daemon proves absence.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { DAEMON_ENDPOINTS, createForm } from './ceph-daemon-form.ts';\nimport { createDaemon, deleteDaemon, notCreated, readDaemon } from './ceph-daemon-wire.ts';\nimport { guardWrite } from './distilled-guard.ts';\nimport { type PveRequirements, type WithTarget } from './resource.ts';\n\n/**\n * Which Ceph daemon this is. The discriminant picks the collection, the create parameters and\n * which of the read-only extras below will even be populated.\n *\n * ⚠️ `osd` IS NOT HERE AND MUST NOT BE ADDED TO THIS UNION. `/nodes/{node}/ceph/osd` takes a disk\n * device, wipes it, and its DELETE has a `cleanup` flag — a create that destroys data on the way\n * in is a different resource with a different set of refusals, not a fourth case in this one.\n */\nexport type CephDaemonKind = 'mon' | 'mgr' | 'mds';\n\nexport interface CephDaemonProps extends WithTarget {\n kind: CephDaemonKind;\n /**\n * The node the daemon RUNS on. Identity — a daemon cannot be moved, only destroyed and rebuilt.\n * ⚠️ It is also the node whose API is asked, and the read is only as available as that node: a\n * failed index now propagates its error. Before the typed-read follow-up, a down node,\n * missing Ceph installation or 403 was folded to \"absent\"; its daemons planned `update`\n * and reconcile POSTed a create for a mon that already existed. PVE refused with \"monitor\n * already exists\", then read-back failed again, obscuring the original node read error.\n * That incident is why collection failure can never prove a daemon is missing.\n */\n node: string;\n /**\n * The daemon id. PVE defaults it to the nodename, and `daemonId` in ceph-daemon-form.ts resolves\n * that default HERE rather than leaving it to PVE, because the id is a PATH SEGMENT: create,\n * delete and the row lookup all need the same string, and a default resolved on the far side\n * would leave three call sites guessing. Live on this cluster every daemon's name is its node.\n */\n name?: string;\n /**\n * mon only. Overrides the autodetected monitor IP; must sit in Ceph's public network — on this\n * cluster that is 198.51.100.0/24, carried by `vmbr1.42`.\n * ⛔ CREATE-ONLY AND NEVER COMPARED. PVE takes a bare ip-list on write and hands back `addr` as\n * `198.51.100.12:6789/0` — an address, a port and a nonce. The two are not the same string and\n * never will be, so diffing them would report a mismatch on every plan; with no PUT on this\n * family that mismatch becomes a REPLACE, and a replace of a mon is the quorum loss in the\n * header. Left out of `matches` on purpose.\n */\n 'mon-address'?: string;\n /**\n * mds only. Makes this standby replay the active MDS's journal for a faster failover.\n * ⛔ CREATE-ONLY AND NEVER COMPARED, AND THE FIELD THAT LOOKS LIKE ITS READBACK IS NOT ONE.\n * `standby_replay` in the list is the daemon's CURRENT state, not its configuration: MEASURED\n * 2026-09-13, all three mds report `standby_replay: false`, node-c included — and node-c is the ACTIVE\n * mds, which is not a standby at all and so can never report true however it was created.\n * Comparing `hotstandby` to it would plan a replace against whichever mds Ceph happens to have\n * elected, i.e. against a value no declaration controls.\n * ⚠️ SET ON A mon OR mgr IT IS DROPPED RATHER THAN SENT, and `mon-address` likewise on an mds:\n * each POST schema lists only its own parameter, so the wrong one is a 400 rather than an\n * ignored hint. A field silently dropped is the lesser of the two, but it IS dropped.\n */\n hotstandby?: boolean;\n}\n\n/**\n * Everything the cluster says about this daemon — reported, and (bar its identity) none of it\n * compared. Read the ⛔ on `matches` for why that is the only safe split on this family.\n */\nexport interface CephDaemonAttributes {\n kind: CephDaemonKind;\n node: string;\n name: string;\n /**\n * The host Ceph says it runs on.\n * ⚠️ REPORTED, NOT COMPARED, AND THAT IS A DELIBERATE BLIND SPOT. A daemon found under this name\n * on a DIFFERENT node than `node` declares plans as `noop`, which does hide a misdeclaration.\n * The alternative is worse: `host` is `optional` in the schema, so an absent one would read as\n * a mismatch, and with no PUT a mismatch is a replace — i.e. a missing field in one API answer\n * would destroy a live mon. When in doubt, out of `matches`; fix a wrong node by hand.\n */\n host: string;\n /**\n * mon `running`/`stopped`/`unknown`, mgr `active`/`standby`, mds `up:active`/`up:standby`/…\n * ⛔ CEPH ELECTS THIS AND REWRITES IT WITHOUT ANYONE DECLARING ANYTHING. MEASURED: mgr node-b is\n * `active` while node-c and node-d are `standby`; mds node-c is `up:active` while node-b and node-d are\n * `up:standby`. Restart a daemon and the roles move. It is reported so a plan can show what is\n * live and kept out of `matches` so that an election is never a diff.\n * ⚠️ IT ALSO MEANS THIS RESOURCE DOES NOT MANAGE WHETHER THE DAEMON IS RUNNING. A configured but\n * stopped daemon is still a row in the list, so it reads as present and plans `noop`.\n */\n state: string;\n /** Ceph-formatted, e.g. `198.51.100.12:6789/0`. Reported; see `mon-address` for why never compared. */\n addr: string;\n /** `ceph_version_short`, e.g. `20.2.2`. Reported: a straggler after an upgrade is worth seeing. */\n version: string;\n /**\n * mon rank in the monmap, mds rank in the filesystem, `-1` when the daemon has neither.\n * ⛔ CEPH ASSIGNS IT AND NOTHING DECLARES IT. MEASURED: the mons are ranked node-d=0, node-c=1, node-b=2 —\n * monmap order, not declaration order — and the mds ranks are 0 for the active node-c and -1 for\n * the two standbys. Rank moves when a daemon is added, removed or restarted.\n */\n rank: number;\n /** mon only: in the current quorum. Reported. MEASURED: all three mons are in quorum. */\n quorum: boolean;\n /** mds only, and NOT the readback of `hotstandby` — see the ⛔ on that prop. */\n standbyReplay: boolean;\n /**\n * mds only: the CephFS this daemon currently serves — `cephfs-c1` here.\n * ⛔ PRESENT ONLY ON THE ACTIVE MDS. MEASURED: node-c carries `fs_name`, node-b and node-d have no such key\n * at all. So it is empty for two of three identical declarations, and comparing it would\n * report work on exactly the daemons that are healthy standbys.\n */\n fsName: string;\n /** A `ceph-<kind>@<id>` systemd unit is enabled on the host. Reported; absent reads as false. */\n service: boolean;\n}\n\nexport interface ProxmoxCephDaemon extends Resource<\n 'Proxmox.CephDaemon',\n CephDaemonProps,\n CephDaemonAttributes,\n never,\n PveRequirements\n> {}\n\n/** ★ `retain` by default — a mon carrying quorum cannot be rebuilt. See the ★ in resource.ts. */\nexport const ProxmoxCephDaemon = Resource<ProxmoxCephDaemon>('Proxmox.CephDaemon', {\n defaultRemovalPolicy: 'retain',\n});\n\n/**\n * ⛔ TOTAL, AND THIS IS THE REASON THE FILE EXISTS RATHER THAN A SHORTCUT PAST WRITING IT. Every\n * field a declaration can carry is CREATE-ONLY and unreadable — `mon-address` comes back as a\n * different kind of string, `hotstandby` comes back as a state Ceph elects — and every field\n * the read returns is assigned by Ceph: state, rank, quorum, fs_name, standby_replay, addr,\n * version. Nothing is left that is both declared and readable. So the honest comparison is\n * \"does a daemon of this kind and name exist\", which `readDaemon` has already answered by\n * returning a value at all, and anything further would be a diff no write could ever satisfy.\n * ⛔ AND ON THIS FAMILY THAT DIFF IS NOT MERELY NOISY. There is no PUT, so a false mismatch\n * would have to be a REPLACE — and replace on a mon is delete-then-create against a live\n * quorum. A forever-diff here is a forever-OUTAGE-RISK.\n * ⚠️ THE PRICE, STATED PLAINLY: editing `hotstandby` or `mon-address` on a declared daemon\n * plans as `noop` and never applies. Same bargain storage.ts strikes for a changed `type`.\n * Change one by removing the declaration and re-adding it, ONE DAEMON AT A TIME, reading the\n * ⛔ on destroy in the header first.\n */\n/**\n * ★ The factory's shape with no `updateForm`: create if absent, else read back untouched.\n * ⛔ `guardWrite` RUNS RIGHT AFTER THE READ, UNCONDITIONALLY, NOT ONLY ON THE CREATE BRANCH —\n * found on adversarial review, 2026-09-24, matching node-network.ts's own `reconcile`.\n * `reconcile` also runs for an ADOPTED row with no fresh `diff` first (Plan.ts forces it after\n * the probe even when `diff` said noop), so a guard only on the create branch would let a\n * caller that skips `diff` (a resumed apply, a verify harness) reach `createDaemon` with\n * `mon-address` — a real vendor rule — unchecked.\n * ★ EXPORTED SO A TEST CAN CALL IT DIRECTLY, bypassing `diff` — the shape the review's own proof\n * needed: `findProvider` gives back the wrapped service, this gives the plain function.\n */\nexport const reconcileDaemon = Effect.fn(function* ({ news }: { news: CephDaemonProps }) {\n const live = yield* readDaemon(news);\n yield* guardWrite(DAEMON_ENDPOINTS[news.kind], createForm(news), live === undefined);\n if (live !== undefined) return live;\n yield* createDaemon(news);\n const after = yield* readDaemon(news);\n if (after === undefined) return yield* Effect.die(notCreated(news));\n return after;\n});\n\nexport const ProxmoxCephDaemonProvider = () =>\n Provider.effect(\n ProxmoxCephDaemon,\n Effect.succeed(\n ProxmoxCephDaemon.Provider.of({\n /** ⛔ Empty, like every other resource here — adopting the whole cluster's daemons is not\n * an accident anyone should be one `destroy` away from. Adoption stays explicit. */\n list: () => Effect.succeed([]),\n read: ({ olds }) => readDaemon(olds),\n // ★ Matches the pre-migration factory shape exactly (resource.ts): present is settled.\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n yield* guardWrite(DAEMON_ENDPOINTS[news.kind], createForm(news), output === undefined);\n if (output === undefined) return undefined;\n const live = yield* readDaemon(news);\n if (live === undefined) {\n yield* guardWrite(DAEMON_ENDPOINTS[news.kind], createForm(news), true);\n return { action: 'update' } as const;\n }\n return { action: 'noop' } as const;\n }),\n reconcile: ({ news }) => reconcileDaemon({ news }),\n /**\n * ⛔ THE DANGEROUS ONE. Re-read the destroy ⛔ in the header before letting a plan that\n * removes a mon run: two gone at once is a cluster with no quorum and every guest on\n * `rbd-c1` blocked on I/O.\n */\n delete: ({ olds }) => deleteDaemon(olds),\n }),\n ),\n );\n",
|
|
44
44
|
"/**\n * Where a Ceph daemon lives on the API, and what a declaration of one looks like as a PVE form.\n *\n * ★ SPLIT OUT OF ceph-daemon.ts TO KEEP BOTH FILES UNDER THE 250-LINE CAP, and the seam is a real\n * one rather than a convenient line number — the same seam metric-server-form.ts cuts on.\n * This file answers \"how does a declaration address ONE daemon\" — which URL, which body, and\n * which row of the collection's answer is it. ceph-daemon.ts answers \"what does the cluster\n * say about that daemon, and when has it changed\". Nothing here calls the API and nothing\n * here decides a diff; `findRow` picks a row out of an answer its caller already fetched.\n *\n * ⛔ THE TWO PATHS ARE DIFFERENT AND THAT IS THE WHOLE REASON THIS FILE HAS TWO OF THEM. MEASURED\n * on node-b, 2026-09-13: there is no GET on the id path — `pvesh get /nodes/node-b/ceph/mon/node-b` answers\n * \"No 'get' handler defined\" — while POST and DELETE are registered ONLY there. So the read uses\n * `collectionPath` and the two writes use `daemonPath`, and swapping either one is a silent\n * 501: a create that never lands, or a destroy that reports failure while the daemon runs on.\n *\n * ⚠️ THE `import type` BACK TO ceph-daemon.ts IS A CYCLE ON PAPER ONLY — type-only, so it is\n * erased before anything runs. `CephDaemonProps` stays the resource's public shape, in the file\n * that declares the resource.\n *\n * ⛔ POST AND DELETE RETURN A UPID, NOT AN OBJECT — both are `protected` task endpoints whose\n * schema `returns` is a bare string. REASONED, NOT MEASURED: this cluster is read-only to me, so\n * no create was ever run. The consequence to expect is that `reconcile` reads back immediately\n * after the POST, and if the worker has not yet written ceph.conf the read-back still says\n * absent and reconcile dies with \"the write returned no error but the object is still absent\".\n * That refusal is honest — nothing is recorded for an object that is not there — and a second\n * deploy converges once the task has finished, but it is a confusing FIRST-RUN failure. Watch\n * the task in the PVE UI before concluding the create failed.\n *\n */\nimport type { CephDaemonAttributes, CephDaemonKind, CephDaemonProps } from './ceph-daemon.ts';\nimport type { EndpointKey } from './constraints.ts';\nimport { bool, flag, num, text } from './values.ts';\n\n/**\n * The vendor endpoint each kind is created at, as the generated tables key it.\n *\n * ⛔ ONE PER KIND, NOT A `{type}` PATH. PVE registers `mds`, `mgr` and `mon` as three separate\n * nodes with three separate parameter schemas — `hotstandby` belongs to the first and\n * `mon-address` to the third — so a single key would enforce one kind's rules on all three.\n * `ceph-daemon.ts` indexes this by `props.kind` for exactly that reason, on every `guardWrite`.\n * ⛔ THE STRINGS MUST STAY LITERALS. `codegen/constraints.ts` finds the endpoints to table by\n * SCANNING THIS PACKAGE'S TEXT, so a key assembled from `props.kind` would be tabled by\n * nothing and `constraintsFor` would throw on the first deploy that reached it.\n * ⚠️ THE PARAMETER NAMES DIFFER AND ARE THE VENDOR'S OWN — `{name}`, `{id}`, `{monid}`. The\n * generator resolves each against the schema, so a tidied-up spelling stops the build.\n * ⚠️ NO `update` HERE: none of the three kinds has a PUT — ceph-daemon-wire.ts's own header.\n */\nexport const DAEMON_ENDPOINTS: Readonly<Record<CephDaemonKind, EndpointKey>> = {\n mds: 'pve:POST /nodes/{node}/ceph/mds/{name}',\n mgr: 'pve:POST /nodes/{node}/ceph/mgr/{id}',\n mon: 'pve:POST /nodes/{node}/ceph/mon/{monid}',\n};\n\n/**\n * PVE defaults the id to the nodename for all three kinds, and that default is resolved HERE\n * rather than left to PVE, because the id is a PATH SEGMENT: create, delete and the row lookup in\n * ceph-daemon.ts all need the same string, and a default resolved on the far side would leave\n * three call sites guessing. Live on this cluster every daemon's name equals its node.\n */\nexport const daemonId = (props: CephDaemonProps) => props.name ?? props.node;\n\n/**\n * The read path. ⚠️ `{node}` HERE IS ONLY THE NODE BEING ASKED, not a filter. MEASURED:\n * `GET /nodes/node-b/ceph/mon` returns node-b, node-c AND node-d, and `GET /nodes/node-c/ceph/mon` returns the same\n * three IN A DIFFERENT ORDER — [node-d,node-b,node-c] from node-b against [node-c,node-b,node-d] from node-c. A caller that took\n * row zero, or assumed the list was this node's daemons, would be wrong on both counts.\n */\nexport const collectionPath = (props: CephDaemonProps) => `nodes/${props.node}/ceph/${props.kind}`;\n\n/** The write path: POST creates here, DELETE destroys here. Never read from — see the ⛔ above. */\nexport const daemonPath = (props: CephDaemonProps) => `${collectionPath(props)}/${daemonId(props)}`;\n\n/**\n * The create body, which is EMPTY for a mgr and nearly empty for the other two.\n *\n * ⚠️ THE ID IS NOT SENT, because it is already the last segment of the path being POSTed to — the\n * same reasoning as metric-server.ts, where a second copy of the key can only disagree with the\n * first. PVE's schema does accept `monid`/`id`/`name` as body parameters; the path wins, so\n * sending one would be a second source of truth for the object's identity and nothing else.\n *\n * ⚠️ AND THE BRANCHES CANNOT BE ONE SHARED BODY. `hotstandby` is an mds parameter and\n * `mon-address` a mon one; each POST schema lists only its own, so the wrong field is a 400\n * rather than an ignored hint. Both are create-only — the ⛔s on those props say why neither is\n * ever compared afterwards.\n */\nexport const createForm = (props: CephDaemonProps): Record<string, string> => {\n if (props.kind === 'mon' && props['mon-address'] !== undefined) {\n return { 'mon-address': props['mon-address'] };\n }\n const hotstandby = props.kind === 'mds' ? flag(props.hotstandby) : undefined;\n return hotstandby === undefined ? {} : { hotstandby };\n};\n\n/**\n * ⚠️ THE COLLECTION ANSWERS AN ARRAY while the factory types `attributes`' first parameter as the\n * `Record<string, unknown>` every other PVE read is shaped like — the same mismatch acl.ts\n * carries, handled the same way: narrow the rows, trust none of them, and match on `name`.\n * ⚠️ MATCHED ON `name` ALONE, NEVER ON POSITION — the list comes back in a different order\n * depending on which node was asked. See the ⚠️ on `collectionPath` above.\n */\nexport const findRow = (live: unknown, props: CephDaemonProps) =>\n (Array.isArray(live) ? live : [])\n .filter((row): row is Record<string, unknown> => typeof row === 'object' && row !== null)\n .find((row) => row['name'] === daemonId(props));\n\n/**\n * One live row as attributes, or `undefined` — \"no daemon of this kind carries this name\".\n *\n * ★ HERE RATHER THAN IN ceph-daemon.ts FOR THE REASON THAT FILE'S SIBLING EXISTS AT ALL: the\n * 250-line cap, and a seam that is real. It reads the row `findRow` picked out of an answer its\n * caller already fetched, three lines above, so the lookup and the mapping now live together\n * instead of a function call apart.\n *\n * ⚠️ `undefined` WHEN NO ROW CARRIES THIS NAME: that is how the factory learns to create.\n */\nexport const daemonAttributes = (\n live: Record<string, unknown>,\n props: CephDaemonProps,\n): CephDaemonAttributes | undefined => {\n const row = findRow(live, props);\n if (row === undefined) return undefined;\n return {\n addr: text(row['addr']),\n fsName: text(row['fs_name']),\n host: text(row['host']),\n kind: props.kind,\n name: daemonId(props),\n node: props.node,\n quorum: bool(row['quorum']),\n rank: num(row['rank'], -1),\n service: bool(row['service']),\n standbyReplay: bool(row['standby_replay']),\n state: text(row['state']),\n version: text(row['ceph_version_short']),\n };\n};\n",
|
|
45
|
-
"/**\n * `Proxmox.CephDaemon`'s distilled wire lane: one dispatch per kind, because mon/mgr/mds are three\n * separate distilled operations with three separate request shapes (`{node,monid}` /\n * `{node,id}` / `{node,name}`) — the SAME reason `DAEMON_ENDPOINTS` (ceph-daemon-form.ts) is a\n * per-kind table rather than one templated string.\n *\n * ⛔
|
|
45
|
+
"/**\n * `Proxmox.CephDaemon`'s distilled wire lane: one dispatch per kind, because mon/mgr/mds are three\n * separate distilled operations with three separate request shapes (`{node,monid}` /\n * `{node,id}` / `{node,name}`) — the SAME reason `DAEMON_ENDPOINTS` (ceph-daemon-form.ts) is a\n * per-kind table rather than one templated string.\n *\n * ⛔ ABSENCE IS A SUCCESSFUL INDEX WITH NO MATCHING ROW. The original transport swap\n * preserved `pveOperations.read`'s catch-all fold; the 2026-09-24 follow-up removes it. A failed\n * mon/mgr/mds list proves nothing about whether a daemon exists, so its SDK error propagates.\n *\n * ⚠️ `mon_address` IS THE ONE RENAME THIS FAMILY NEEDS — distilled's generator maps the wire name\n * `mon-address` to `mon_address` on `UpdateNodeCephMonRequest` (`T.Body(\"mon-address\")`,\n * confirmed against its schema), the same one-key pattern node-network-form.ts's `RENAMED`\n * table carries for three fields. `hotstandby` needs no rename.\n */\nimport * as nodes from '@distilled.cloud/proxmox/nodes';\nimport * as Effect from 'effect/Effect';\nimport type { CephDaemonKind, CephDaemonProps } from './ceph-daemon.ts';\nimport { daemonAttributes, daemonId, daemonPath } from './ceph-daemon-form.ts';\nimport { runPve } from './distilled-pve.ts';\n\n/**\n * The index, per kind — the same array `daemonAttributes`/`findRow` already narrow.\n *\n * ⚠️ CAST TO `unknown[]` PER BRANCH, NOT LEFT TO INFERENCE. mon/mgr/mds answer three DIFFERENT\n * row shapes (`ListNodeCephMonResponseBodyItem` and its two siblings), and a switch returning\n * each as-is infers their INTERSECTION rather than their union — TypeScript refuses that under\n * `exactOptionalPropertyTypes`. `daemonAttributes` already treats the row generically (it reads\n * by string key, the same shape acl.ts narrows), so the cast costs nothing real.\n */\nconst listRows = (props: CephDaemonProps) => {\n const node = props.node;\n switch (props.kind) {\n case 'mon':\n return runPve(props.target, 'read', false, nodes.listNodeCephMon({ node })).pipe(\n Effect.map((rows): unknown[] => rows),\n );\n case 'mgr':\n return runPve(props.target, 'read', false, nodes.listNodeCephMgr({ node })).pipe(\n Effect.map((rows): unknown[] => rows),\n );\n case 'mds':\n return runPve(props.target, 'read', false, nodes.listNodeCephMds({ node })).pipe(\n Effect.map((rows): unknown[] => rows),\n );\n }\n};\n\n/** A missing row is absent; a failed index read keeps its typed SDK error. */\nexport const readDaemon = (props: CephDaemonProps) =>\n listRows(props).pipe(\n Effect.map((rows) => daemonAttributes(rows as unknown as Record<string, unknown>, props)),\n );\n\n/** POST — distilled's generator misnames it \"update\" (checked against `T.Http`); it is a create. */\nexport const createDaemon = (props: CephDaemonProps) => {\n const node = props.node;\n const id = daemonId(props);\n switch (props.kind) {\n case 'mon':\n return runPve(\n props.target,\n 'provision',\n true,\n nodes.updateNodeCephMon({\n ...(props['mon-address'] === undefined ? {} : { mon_address: props['mon-address'] }),\n monid: id,\n node,\n }),\n );\n case 'mgr':\n return runPve(props.target, 'provision', true, nodes.updateNodeCephMgr({ id, node }));\n case 'mds':\n return runPve(\n props.target,\n 'provision',\n true,\n nodes.updateNodeCephMds({\n ...(props.hotstandby === undefined ? {} : { hotstandby: props.hotstandby ? '1' : '0' }),\n name: id,\n node,\n }),\n );\n }\n};\n\n/** ⚠️ NO FLAGS ON ANY OF THE THREE — unlike CephFs/CephOsd, nothing here is at risk of a\n * DELETE-body PVE would ignore, because nothing here is ever sent. */\nexport const deleteDaemon = (props: CephDaemonProps) => {\n const node = props.node;\n const id = daemonId(props);\n switch (props.kind) {\n case 'mon':\n return runPve(props.target, 'provision', true, nodes.deleteNodeCephMon({ monid: id, node }));\n case 'mgr':\n return runPve(props.target, 'provision', true, nodes.deleteNodeCephMgr({ id, node }));\n case 'mds':\n return runPve(props.target, 'provision', true, nodes.deleteNodeCephMds({ name: id, node }));\n }\n};\n\n/** Re-exported so ceph-daemon.ts can narrow a switch exhaustively without importing the union twice. */\nexport type { CephDaemonKind };\n\n/** ★ Moved here from ceph-daemon.ts's `reconcile` for the 250-line cap — matches ceph-fs.ts's own\n * `notCreated`/`notDestroyed` seam: the message, not the decision to die, lives with the calls. */\nexport const notCreated = (props: CephDaemonProps) =>\n new Error(\n `${daemonPath(props)}: no ${props.kind} named ${daemonId(props)} in GET nodes/` +\n `${props.node}/ceph/${props.kind} after the create task finished. POST answers a UPID, ` +\n 'not a result -- watch the task in the PVE UI (ceph-daemon-form.ts).',\n );\n",
|
|
46
46
|
"/**\n * `Proxmox.CephFlag` — one cluster-wide Ceph OSD flag, declared: `noout`, `pause`, `norebalance`.\n *\n * ★ ONE RESOURCE PER FLAG, NOT ONE CARRYING ALL ELEVEN, AND THE CLUSTER'S OWN API DECIDED IT.\n * MEASURED on C1 2026-09-13 (pve-manager 9.2.11, ceph tentacle 20.2.2) by reading\n * `/usr/share/perl5/PVE/API2/Cluster/Ceph.pm` and the published schema in\n * `/usr/share/pve-docs/api-viewer/apidoc.js`:\n * · `PUT /cluster/ceph/flags` ends in `fork_worker('cephsetflags', ...)` and returns a STRING\n * — a UPID. The bulk write is ASYNCHRONOUS, and this package has no task-polling machinery.\n * · `PUT /cluster/ceph/flags/{flag}` calls `$rados->mon_command` inline and returns null. The\n * per-flag write is SYNCHRONOUS.\n * `pveOperations.reconcile` READS BACK after every write and refuses to record a value it did\n * not see. Against the bulk endpoint that read-back races a worker which has not run yet, so it\n * would record the OLD value as the new attributes — the one honesty mechanism in this package\n * turned into a lie generator. Per-flag, the read-back means what it says.\n * ★ THE SECOND REASON IS SMALLER AND STILL REAL. The bulk GET answers rows of\n * `{name, description, value}`, and `description` is PVE's own English prose that no write\n * accepts: compare it and you have a forever-update, report it and this provider is pretending\n * to manage prose. `GET /cluster/ceph/flags/{flag}` answers a BARE BOOLEAN, so that trap\n * cannot be written here at all. The brief's plural `Proxmox.CephFlags` became singular for\n * those two reasons; the bulk endpoint is read by nothing in this package.\n *\n * ⛔ THESE ARE NOT CONFIGURATION. THEY ARE A HAND ON THE BRAKE, AND A DECLARATION CAN PULL IT OFF.\n * `noout` is what a person sets before pulling a disk. A stack saying `value: false` reasserts\n * that off on EVERY deploy — including a deploy somebody else runs, for an unrelated resource,\n * twenty minutes into a maintenance window — and the plan line reads `Proxmox.CephFlag noout\n * update`, which nobody reads as \"ceph is about to start rebalancing 128 PGs across three nodes\n * while a disk is out of the chassis\".\n * ★ SO `value` IS REQUIRED AND HAS NO DEFAULT, AND THAT IS THE MITIGATION. An optional `value`\n * defaulting to false would make `CephFlag('noout', { flag: 'noout', target })` mean \"clear\n * it\" — the dangerous direction, chosen by OMISSION. Here the dangerous sentence has to be\n * typed out by a person. Do not add a default, and do not declare a flag merely to document\n * that it is off: MEASURED 2026-09-13, all eleven flags on C1 read 0, so eleven\n * `value: false` lines would plan green forever and do nothing except take the brake off\n * whenever somebody happens to apply them.\n *\n * ⛔ `delete` DOES NOTHING, ON PURPOSE, AND THE ASYMMETRY OF THE TWO FAILURES IS THE ARGUMENT.\n * `flags/{flag}` has exactly two methods, GET and PUT, so the factory's `destroy` would answer\n * \"Method 'DELETE /cluster/ceph/flags/noout' not implemented\" on every teardown — whatever this\n * handler does is INVENTED. The obvious invention, \"clear the flag\", is refused: removing a line\n * from a stack file, or Alchemy collecting an old generation after a replace, would silently\n * take the brake off and nothing would warn. Leaving a flag set that nothing declares any more\n * is the opposite kind of failure — ceph reports `HEALTH_WARN ... flag(s) set` for every one of\n * these, on `ceph -s`, in the PVE UI and in the `pve_*` metrics this estate already scrapes.\n * A silent destructive failure loses to a loud inert one.\n * ⚠️ THE RESIDUAL RISK, NAMED RATHER THAN DENIED: deleting a `value: true` declaration LEAVES\n * THE FLAG SET. Retire a maintenance window by flipping the line to `value: false` and\n * deploying BEFORE the line is removed, or a `noout` outlives the window that needed it.\n * ⚠️ REASONED, NOT MEASURED: that health warning was not observed, because observing it means\n * setting a flag on a live cluster and this file was researched read-only. Undeclaring stops\n * MANAGING a flag; to clear one, declare `value: false` and deploy, where a plan says so.\n *\n * ⛔ `pause` IS TWO CEPH FLAGS AND THIS RESOURCE READS ONLY ONE OF THEM. MEASURED in\n * `PVE::Ceph::Tools::get_real_flag_name`, whose own comment reads \"the 'pause' flag gets always\n * set to both 'pauserd' and 'pausewr'\": PVE writes both and then decides the flag is set by\n * looking at `pauserd` alone. A cluster where somebody ran `ceph osd unset pauserd` by hand\n * still has `pausewr` — writes blocked, guests hung — and this resource reports `value: false`\n * and plans `noop` straight past it. It cannot express a half-pause, so never use it to prove\n * one is gone; `ceph osd dump | head -1` can.\n * ⛔ `pause` AND `noup` ARE ALSO THE TWO THAT TAKE THE CLUSTER DOWN FROM A TYPO. `pause: true`\n * stops all reads and writes, so every guest on `rbd-c1` — the cluster's only rbd pool,\n * MEASURED 2026-09-13 — freezes on its root disk, and so does `cephfs-c1`. `noup: true`\n * stops a rebooted OSD from ever rejoining. Neither is undone by deleting the line.\n *\n * ⚠️ PRIVILEGES, AND THE WRITE ONE IS A BIG ASK. Both GETs check `Sys.Audit` on `/`; both PUTs\n * check `Sys.Modify` on `/`, and all four carry `allowtoken => 1`, so an API token may make the\n * call at all. There is no `/ceph` ACL object to scope to — the check names the ROOT path\n * literally — so granting the provision role `Sys.Modify` here also buys datacenter options,\n * metric servers, notification targets and every other cluster-wide write, exactly as\n * metric-server.ts warns about its own family.\n * ⚠️ REASONED, NOT MEASURED: nothing here was exercised under a minted lease, because a mint\n * writes an API token into the cluster and the brief for this file was reads only. Expect\n * \"Permission check failed (/, Sys.Modify)\" on the first deploy, and widen deliberately.\n */\nimport { Resource } from 'alchemy';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { type PveRequirements, type WithTarget, pveHandlers } from './resource.ts';\nimport { bool, flag } from './values.ts';\n\n/**\n * PVE's eleven flags, spelled as `PVE::Ceph::Tools::get_possible_osd_flags` spells them.\n *\n * ⚠️ THE ENUM IS CLOSED AND A TYPO IS A 400, WHICH IS WHY THIS IS A UNION AND NOT `string`. Both\n * the GET and the PUT declare `additionalProperties => 0` over exactly this list.\n * ⚠️ CEPH HAS FLAGS PVE DOES NOT MODEL, and four of them are always on. MEASURED on C1:\n * `ceph osd dump` reports `flags sortbitwise,recovery_deletes,purged_snapdirs,pglog_hardlimit`.\n * PVE reads that same string and answers only about its own eleven, so the others can neither\n * leak in here nor be set from here — `noautoscale` and `nosnaptrim` included.\n * ⛔ IF SOMEBODY LATER \"IMPROVES\" THE READ BY PARSING `osd dump` DIRECTLY, those four become\n * permanently-set flags that nothing declares: a forever-diff on a brand new cluster.\n */\nexport type CephFlagName =\n | 'nobackfill'\n | 'nodeep-scrub'\n | 'nodown'\n | 'noin'\n | 'noout'\n | 'norebalance'\n | 'norecover'\n | 'noscrub'\n | 'notieragent'\n | 'noup'\n | 'pause';\n\nexport interface CephFlagProps extends WithTarget {\n /**\n * Which flag. PVE's primary key here, and the last segment of the path.\n *\n * ⚠️ EDITING IT IN PLACE ORPHANS THE OLD FLAG RATHER THAN MOVING ANYTHING. `diff` reads the NEW\n * path and reconcile writes it, while the old flag keeps whatever this stack last put there.\n * There is deliberately no replace override for it — acl.ts needs one because its `delete`\n * removes a real grant, and `delete` here is inert by design, so a replace would do exactly\n * what an update already does. Declare a second resource and set the old one to `value: false`\n * rather than renaming this one.\n * ⛔ TWO RESOURCES DECLARING THE SAME FLAG ARE ONE CLUSTER OBJECT, and Alchemy sees two ids\n * rather than a collision — the acl.ts hazard exactly. Disagreeing, they take turns winning\n * and BOTH plan `update` for ever; agreeing, deleting either leaves the flag where the other\n * put it. One declaration per flag per cluster.\n */\n flag: CephFlagName;\n /**\n * Set the flag (`true`) or clear it (`false`).\n *\n * ⛔ REQUIRED, WITH NO DEFAULT — see the second ⛔ in the header, which is the whole safety\n * argument for this family. It is also the only field PVE accepts on this endpoint, and it is\n * not optional in the schema either: omitting it from the form is a 400, not an untouched\n * flag. (The BULK endpoint is the one where omission means \"leave it alone\"; this is not it.)\n */\n value: boolean;\n}\n\nexport interface CephFlagAttributes {\n /**\n * ⚠️ REPORTED, NEVER COMPARED. It is the path key the read was made WITH, copied back out of\n * props, so comparing it against props would be true by construction — the same reasoning\n * acl.ts gives for the four identity fields it also declines to diff.\n */\n flag: CephFlagName;\n /** Whether ceph has the flag set right now. The only field `matches` looks at. */\n value: boolean;\n}\n\nexport interface ProxmoxCephFlag extends Resource<\n 'Proxmox.CephFlag',\n CephFlagProps,\n CephFlagAttributes,\n never,\n PveRequirements\n> {}\n\nexport const ProxmoxCephFlag = Resource<ProxmoxCephFlag>('Proxmox.CephFlag');\n\nconst handlers = pveHandlers<CephFlagProps, CephFlagAttributes>({\n /**\n * ⚠️ `live` IS A BARE BOOLEAN HERE, NOT AN OBJECT, AND IT IS HANDED TO `bool` WHOLE ON PURPOSE.\n * `get_flag` returns perl `1` or `0` under a `type => 'boolean'` return schema, so the wire is\n * `{\"data\":0}` or `{\"data\":false}` depending on how the REST layer renders it. `bool` accepts\n * every one of those spellings, which is exactly why it is a shared coercion. The factory\n * types this parameter `Record<string, unknown>` because every OTHER PVE read is an object;\n * reaching for `live['value']` here would answer undefined on every plan and diff `false`\n * forever against a set flag.\n * ⚠️ THE SCALAR IS A MEASURED PROPERTY OF THIS PVE, NOT A PROMISE. A later version wrapping\n * the answer in an object would make `bool` read a SET flag as false, and `value: false`\n * would then plan `noop` over a live flag — silently. Re-measure\n * `GET /cluster/ceph/flags/noout` after a major upgrade; cheaper than a second parse path.\n *\n * ⛔ IT NEVER ANSWERS undefined, WHICH MAKES THE CREATE BRANCH UNREACHABLE, AND ITS ERROR WILL\n * MISLEAD YOU. All eleven flags always exist; there is nothing for \"absent\" to mean. So a POST\n * to `collection` means the READ failed — an expired 300s lease, node-b down, or ceph simply not\n * configured on the cluster (every one of these four handlers opens with\n * `check_ceph_configured()`, which dies). Read the resulting \"Method 'POST /cluster/ceph/flags'\n * not implemented\" as \"the read failed\" and go and look at the credential, not at ceph. Same\n * shape as the unreachable POST in acl.ts, same advice.\n */\n attributes: (live, props) => ({ flag: props.flag, value: bool(live) }),\n collection: () => 'cluster/ceph/flags',\n /**\n * ⛔ UNREACHABLE — see the second ⛔ in `attributes`. It is written in the BULK endpoint's shape\n * (the flag name is the parameter, not `value`) rather than left empty, because that is the\n * only body `cluster/ceph/flags` has ever documented. Nothing sends it today.\n */\n createForm: (props) => ({ [props.flag]: flag(props.value) ?? '0' }),\n endpoint: { update: 'pve:PUT /cluster/ceph/flags/{flag}' }, // ⛔ No create: see above.\n /**\n * ⚠️ `value` IS THE ONLY THING COMPARED, AND THE LIST OF THINGS DELIBERATELY NOT COMPARED IS THE\n * point of this resource. `flag` is props-derived (see `CephFlagAttributes`). `description`\n * and `name` exist only on the bulk GET, which this file does not read, so neither can be\n * compared by accident. Nothing PVE returns here is rewritten, re-ordered or re-typed by the\n * cluster, because all PVE returns here is one boolean.\n * ★ MEASURED: on C1, `GET /cluster/ceph/flags` answers value 0 for all eleven flags, so a\n * declaration of `value: false` reads back false and plans `noop`.\n */\n matches: (attributes, props) => attributes.value === props.value,\n path: (props) => `cluster/ceph/flags/${props.flag}`,\n /**\n * ⚠️ ONLY `value` GOES IN THE BODY. `flag` is already bound by the path and the PUT declares\n * `additionalProperties => 0`, so a second copy in the form could only disagree with the URL.\n * ⚠️ THE `?? '0'` IS UNREACHABLE, AND IS WRITTEN RATHER THAN CAST AWAY. `flag()` types its\n * answer `string | undefined` because it serves OPTIONAL props, and `value` here is required,\n * so the branch cannot be taken; a cast would claim a proof the type system has not made.\n */\n updateForm: (props) => ({ value: flag(props.value) ?? '0' }),\n});\n\nexport const ProxmoxCephFlagProvider = () =>\n Provider.effect(\n ProxmoxCephFlag,\n Effect.succeed(\n ProxmoxCephFlag.Provider.of({\n /**\n * ⚠️ NOT THE ONE-LINE `Provider.of(handlers)` EVERY OTHER FILE HERE USES, AND THE TWO\n * REASONS ARE BOTH acl.ts's. PVE implements no DELETE on this path, and the factory's\n * read-back guard is dead whenever `attributes` cannot answer undefined. Unlike acl.ts\n * this SPREADS the factory's handlers instead of retyping them, so `list`, `read` and\n * `diff` cannot drift from the shared ones — only the two that genuinely differ are\n * written out below.\n */\n ...handlers,\n /** ⛔ Inert, deliberately. The third ⛔ in the header is the whole argument; read it. */\n delete: () => Effect.void,\n /**\n * ⚠️ THE READ-BACK GUARD, RESTORED FOR A FAMILY WHOSE \"ABSENT\" DOES NOT EXIST.\n * `ops.reconcile` refuses when the object is still missing after a write, and a flag is\n * never missing, so that check can never fire here — exactly the hole acl.ts patches\n * with `bound`. PVE answers 200 with `{\"data\":null}` on calls that did nothing, and this\n * PUT's documented return IS null, so the status code carries no evidence at all.\n * ⚠️ THE PER-FLAG PUT IS SYNCHRONOUS (`$rados->mon_command` inline, MEASURED in Ceph.pm),\n * which is what makes this check fair rather than a race against a worker task. If it\n * ever fires spuriously the honest fix is to look at the mon, not to delete the guard.\n */\n reconcile: Effect.fn(function* ({ news }) {\n const after = yield* handlers.reconcile({ news });\n if (after.value !== news.value) {\n return yield* Effect.die(\n new Error(\n `cluster/ceph/flags/${news.flag}: the PUT returned no error but ceph still ` +\n `reports the flag ${after.value ? 'set' : 'clear'} rather than ` +\n `${news.value ? 'set' : 'clear'}. This endpoint's success is documented as a ` +\n 'null body, so the status code proves nothing -- check `ceph osd dump | ' +\n 'head -1` and the cluster log. `pause` in particular is two ceph flags read ' +\n 'as one; see the header.',\n ),\n );\n }\n return after;\n }),\n }),\n ),\n );\n",
|
|
47
|
-
"/**\n * `Proxmox.CephFs` — a CephFS on the cluster's own Ceph. The filesystem a `cephfs` storage mounts.\n *\n * ⛔ A REPLACE OF THIS RESOURCE DESTROYS A LIVE FILESYSTEM, AND THERE IS NO PUT TO SAVE YOU FROM\n * IT. MEASURED from the published schema on node-b, 2026-09-13: `/nodes/{node}/ceph/fs/{name}` has\n * exactly two methods, POST and DELETE. A CephFS cannot be edited in place, so `updateForm` is\n * left undefined and anything the factory can see as changed becomes a REPLACE — and Alchemy's\n * replace is create-then-delete, where the delete is `destroyfs`: the entry leaves the MDS map,\n * every mount on every node breaks, and whether the bytes survive rests on `remove-pools` alone.\n * ★ WHICH IS THE WHOLE REASON `matches` COMPARES NOTHING. Read its ⛔ before adding a field to\n * it. On every other resource in this package a forever-diff is an annoying plan line; on this\n * one it is a live filesystem destroyed on every deploy, forever, because a background daemon\n * moved a number nobody declared.\n *\n * ⛔ THERE IS NO SINGLE-OBJECT READ, WHICH INVERTS `path` AND `collection`. MEASURED on node-b:\n * pvesh get /nodes/node-b/ceph/fs/cephfs-c1\n * -> No 'get' handler defined for '/nodes/node-b/ceph/fs/cephfs-c1'\n * `GET /nodes/{node}/ceph/fs` is a directory index and is the only read there is, so `path()`\n * below returns the INDEX and `attributes` picks this filesystem out of the array client-side —\n * the shape acl.ts uses for the one flat `GET /access/acl`. The POST goes to the `{name}` path,\n * so `collection()` is the LONGER of the two strings, the mirror of metric-server.ts.\n * ⚠️ AND THAT IS WHY EVERY HANDLER BELOW IS HAND-WRITTEN rather than taken from a factory. A\n * factory `destroy` deletes the read path, which here is the index: `DELETE /nodes/{node}/\n * ceph/fs` is not a route, so it would fail every destroy while the filesystem stayed exactly\n * where it was. `reconcile` is hand-written for a second, independent reason — the forked\n * worker — set out in ceph-fs-wire.ts. acl.ts is the precedent for a family that genuinely\n * does not fit a shared shape.\n *\n * ★ MIGRATED OFF `client.ts`'s generic `pve()` ONTO `@distilled.cloud/proxmox`'s typed\n * `nodes.listNodeCephFs`/`updateNodeCephFs` for the READ and the CREATE (2026-09-24, decision\n * 43's walk-down, 2c — ceph-fs-distilled.ts). `destroyFs` STAYS on `client.ts`, unmigrated:\n * distilled types the delete's `remove-pools`/`remove-storages` flags as a request BODY, and\n * this file's own next ⛔ (unchanged from before this migration) is the measured reason PVE\n * would silently ignore both on a DELETE sent that way — ceph-fs-wire.ts's header has the fuller\n * evidence. `readFs`/`diff`/`reconcile` keep the SAME single-fold, present-is-settled shape this\n * family always had; see ceph-pool-wire.ts's own header for why that is not a bug left unfixed.\n *\n * ⛔ CREATING A CephFS CREATES TWO CEPH POOLS, AND A `Proxmox.CephPool` MUST NOT ALSO DECLARE THEM.\n * `createfs` builds `<name>_data` and `<name>_metadata` itself and refuses outright if either\n * exists (\"ceph pools '…_data' and/or '…_metadata' already exist\"). MEASURED on C1: the live\n * `cephfs-c1` owns `cephfs-c1_data` (id 6) and `cephfs-c1_metadata` (id 7), both of which\n * `GET /nodes/node-b/ceph/pool` lists like any other pool — and `/nodes/{node}/ceph/pool/{name}` DOES\n * have GET, PUT and DELETE, so a pool resource would be a clean `pveHandlers` fit and would\n * adopt them without noticing. Declaring both is double management of one object: whichever\n * reconciles first wins, and the loser either fails its create or PUTs `size`/`pg_num` onto pools\n * this resource believes it owns. Declare the filesystem here and leave its two pools alone.\n *\n * ⚠️ `add-storage` IS A SECOND SIDE EFFECT AND IT LANDS IN storage.cfg. Set, `createfs` also calls\n * `PVE::API2::Storage::Config->create` with type `cephfs`, content `backup,iso,vztmpl` and\n * `fs-name <name>`. MEASURED: /etc/pve/storage.cfg on node-b holds exactly that — `cephfs:\n * cephfs-c1` / `content backup,vztmpl,iso` / `fs-name cephfs-c1`. So a `Proxmox.Storage`\n * declaring `cephfs-c1` would be managing an entry this resource created. Declare ONE of them:\n * either `add-storage` here and no storage resource, or `add-storage` off and a\n * `Proxmox.Storage` that reads this resource's `name` attribute — which also gets the ordering\n * right for free, because Alchemy orders by data flow.\n *\n * ⚠️ `node` IS A ROUTE, NOT IDENTITY, AND MUST NEVER BE DIFFED. A CephFS is cluster-wide; the node\n * in the path only says which node PVE proxies the call to. MEASURED: `GET /nodes/node-b/ceph/fs`,\n * `…/node-c/…` and `…/node-d/…` returned the byte-identical array. So changing `node` plans `noop`, and\n * two resources naming the same `name` on different nodes are the SAME filesystem — the vmid\n * hazard from lxc.ts, with a filesystem on the end of it instead of a container.\n *\n * ⚠️ PRIVILEGES: the read lane needs `Sys.Audit` OR `Datastore.Audit` on `/`, which an auditor\n * role already holds — unlike storage.ts, nothing needs widening before the first plan. The\n * write side is in ceph-fs-wire.ts beside the calls, and in docs/privileges.md with the rest.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { createFs, readFs } from './ceph-fs-distilled.ts';\nimport { CEPH_FS_CREATE, createForm, destroyFs, notCreated, notDestroyed } from './ceph-fs-wire.ts';\nimport { guardWrite } from './distilled-guard.ts';\nimport { type PveRequirements, type WithTarget } from './resource.ts';\n\nexport interface CephFsProps extends WithTarget {\n /** ⚠️ Which node answers the call, NOT which node holds the filesystem. See the header. */\n node: string;\n /**\n * The filesystem name, and the cluster-wide primary key. PVE's pattern is `^[^:/\\s]+$`.\n * ⛔ CHANGING IT IS A REPLACE, WHICH DESTROYS THE OLD FILESYSTEM. `diff` says so explicitly\n * below rather than letting the factory report a create-shaped `update` and orphan the old one.\n */\n name: string;\n /**\n * Placement groups for the backing data pool; the metadata pool gets a quarter of it, or 8 when\n * this is under 32. PVE's default is 128.\n *\n * ⛔ CREATE-TIME ONLY, UNREADABLE, AND OWNED BY THE AUTOSCALER FROM THE SECOND IT LANDS. It is\n * never compared — see the ⛔ on `matches` — and this is not caution, it is measured. C1's\n * `cephfs-c1` was created with the default 128 (the arithmetic proves it: `cephfs-c1_metadata`\n * sits at 32, which is 128/4), and `cephfs-c1_data` reads pg_num 32 TODAY. The autoscaler moved\n * it by a factor of four, and it is not finished: `pg_autoscale_mode` is `on` for every pool on\n * this cluster and `cephfs-c1_metadata` already reports `pg_num_final: 16` against its live 32.\n */\n pg_num?: number;\n /**\n * Also write a `cephfs` storage entry for this filesystem. ⚠️ Create-time only and never read\n * back — it is an ACTION, not a field. See the header for what it does to `Proxmox.Storage`.\n */\n 'add-storage'?: boolean;\n /** ⛔ DELETE-TIME ONLY, AND IT ERASES THE DATA. Read the ⛔ on `destroyFs` before setting it. */\n 'remove-pools'?: boolean;\n /**\n * Delete the pveceph-managed storage entries too. ⚠️ PVE refuses unless they are already\n * disabled (\"storage '…' is not disabled, make sure to disable and unmount the storage first\"),\n * so this fails the destroy rather than unmounting anything out from under a running guest.\n */\n 'remove-storages'?: boolean;\n}\n\n/**\n * ⚠️ EVERY FIELD HERE IS REPORTED AND NONE IS COMPARED. They exist so a plan, and the state entry\n * behind it, can say what the declaration actually points at — which pools hold the bytes.\n */\nexport interface CephFsAttributes {\n name: string;\n /** The first data pool. PVE keeps it for compatibility; `data_pools` is the real answer. */\n data_pool: string;\n /**\n * ⚠️ SORTED, AND IT IS A SET RATHER THAN A LIST. A CephFS can hold several data pools — added\n * with `ceph fs add_data_pool`, which this resource has no way to express — and PVE reports\n * them in the MDS map's own order. Sorting is what keeps this attribute stable across reads.\n */\n data_pools: string;\n metadata_pool: string;\n /**\n * ⚠️ AN INTEGER THAT NAMES SOMETHING WRITTEN AS A NAME, AND THEREFORE A CLASSIC FOREVER-DIFF IF\n * IT EVER REACHED `matches`. PVE answers `metadata_pool_id: 7` while every write in this family\n * spells a pool by name. It is here to be read, never to be compared. `-1` means absent: the\n * field is optional in the schema and older PVE omits it.\n */\n metadata_pool_id: number;\n}\n\nexport interface ProxmoxCephFs extends Resource<\n 'Proxmox.CephFs',\n CephFsProps,\n CephFsAttributes,\n never,\n PveRequirements\n> {}\n\n/** ★ `retain` by default — a filesystem holding data cannot be rebuilt. See the ★ in resource.ts. */\nexport const ProxmoxCephFs = Resource<ProxmoxCephFs>('Proxmox.CephFs', {\n defaultRemovalPolicy: 'retain',\n});\n\n/**\n * ⛔ NOTHING IS COMPARED, AND THAT IS THE MOST DELIBERATE LINE IN THIS FILE. A CephFS has no\n * readable, writable field: the index returns only the name and the pools behind it, and every\n * prop this resource accepts is create-time or delete-time. So \"present\" IS \"settled\", and the\n * only honest comparison is none at all.\n * ⚠️ THE TEMPTING ADDITION IS `pg_num`, AND IT WOULD BE THE WORST BUG THIS PACKAGE HAS SHIPPED.\n * It is not in the index at all, so it can only be read from the pool endpoint — where the\n * autoscaler owns it. MEASURED on C1 today: created at 128, live at 32, with the metadata\n * pool already scheduled down to 16. Compared, that is an eternal mismatch — and since there\n * is no update path, treating this as a diff would plan a REPLACE. The plan would destroy and\n * rebuild a live filesystem on every deploy, triggered by a daemon on its own schedule.\n * ⚠️ `data_pools` AND `metadata_pool_id` ARE OUT FOR THE ORDINARY REASONS: a set PVE returns\n * in its own order, and an integer id for something written as a name. `name` is out because\n * it is the FILTER that produced these attributes, so comparing it is true by construction —\n * an identity change is handled in `diff`, not here. `node` is out because it is a route.\n */\nexport const ProxmoxCephFsProvider = () =>\n Provider.effect(\n ProxmoxCephFs,\n Effect.succeed(\n ProxmoxCephFs.Provider.of({\n /**\n * ⛔ EMPTY, LIKE EVERY OTHER RESOURCE HERE. The index answers with every filesystem on the\n * cluster, `cephfs-c1` included — the one holding this estate's ISOs and templates.\n * Adopting it would put Alchemy one `destroy` away from it. Adoption stays explicit.\n */\n list: () => Effect.succeed([]),\n read: Effect.fn(function* ({ olds }) {\n return yield* readFs(olds);\n }),\n /**\n * ⛔ A CHANGED `name` IS A REPLACE, AND NOTHING ELSE CAN SAY SO. Left undetected, a rename\n * reads the NEW name, finds nothing, and plans the drift-shaped `update` this family uses\n * for \"Alchemy has state, the cluster does not\" — so reconcile would build the new\n * filesystem and LEAVE THE OLD ONE, with its pools, its storage entry and its bytes,\n * owned by nobody and invisible in every later plan.\n * ⛔ SAYING `replace` IS HONEST, AND IT IS ALSO WHAT MAKES A TYPO EXPENSIVE. Alchemy\n * creates first and deletes second, so the old filesystem is destroyed AFTER the new\n * one exists — with `remove-pools` unset the bytes are stranded rather than erased, and\n * that default is the only thing between a mis-typed rename and an unrecoverable one.\n * ⚠️ `node` is NOT part of identity and must never join this comparison.\n */\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n yield* guardWrite(CEPH_FS_CREATE, createForm(news), output === undefined);\n if (output !== undefined && news.name !== output.name) {\n return { action: 'replace' } as const;\n }\n if (output === undefined) return undefined;\n const live = yield* readFs(news);\n if (live === undefined) {\n yield* guardWrite(CEPH_FS_CREATE, createForm(news), true);\n return { action: 'update' } as const;\n }\n // ⛔ SEE THE ⛔ ABOVE `ProxmoxCephFsProvider`: NOTHING ELSE IS COMPARED. Present is settled.\n return { action: 'noop' } as const;\n }),\n /**\n * ⚠️ THE READ-BACK IS KEPT EVEN THOUGH `createFs` ALREADY WAITED OUT THE TASK. Waiting\n * proves the task ENDED, reading proves the filesystem EXISTS, and PVE has shipped tasks\n * that end OK having done nothing.\n * ⚠️ AN EXISTING FILESYSTEM IS RETURNED UNTOUCHED. There is no update call to make, so the\n * only write this handler can perform is a create; `diff` has already decided that a\n * real change is a replace, and Alchemy calls delete for the old generation itself.\n */\n reconcile: Effect.fn(function* ({ news }) {\n const live = yield* readFs(news);\n if (live !== undefined) return live;\n yield* createFs(news);\n const after = yield* readFs(news);\n if (after === undefined) return yield* Effect.die(notCreated(news));\n return after;\n }),\n /**\n * ⛔ THE READ-BACK IS WHAT TURNS \"the task said OK\" INTO \"it is actually gone\": `destroyfs`\n * refuses while a non-disabled `cephfs` storage still references the filesystem, and that\n * refusal must fail the destroy rather than letting Alchemy drop the state entry for a\n * live object. `destroyFs` itself stays on `client.ts` — ceph-fs-wire.ts's own header has\n * the measured, protocol-level reason.\n */\n delete: Effect.fn(function* ({ olds }) {\n /**\n * ⚠️ A FILESYSTEM SOMEBODY ALREADY REMOVED BY HAND IS NOT AN ERROR. `destroyfs` dies\n * synchronously with \"no such cephfs\", which would fail every destroy of a stack whose\n * filesystem was cleaned up outside Alchemy and leave the state entry unremovable\n * without editing the store. ⚠️ THE COST IS STATED PLAINLY: `readFs` folds a FAILED\n * read into \"absent\" (the storage.ts trap), so a read this credential cannot perform\n * turns this into a destroy that reports success having done nothing. That is not a\n * new hazard — a broken read defeats the read-back below in exactly the same way — but\n * it is the reason a 403 on this family must be fixed rather than lived with.\n */\n if ((yield* readFs(olds)) === undefined) return;\n yield* destroyFs(olds);\n const after = yield* readFs(olds);\n if (after !== undefined) return yield* Effect.die(notDestroyed(olds));\n }),\n }),\n ),\n );\n",
|
|
48
|
-
"/**\n * `Proxmox.CephFs`'s distilled
|
|
49
|
-
"/**\n * The wire lane of `Proxmox.CephFs`: how a PVE answer becomes attributes, how a declaration becomes\n * a PVE call, and how that call becomes a fact.\n *\n * ★ SPLIT OUT OF ceph-fs.ts TO KEEP BOTH FILES UNDER THE 250-LINE CAP, and the seam is a real one\n * rather than a convenient line number. ceph-fs.ts answers \"what is a CephFS, and when has it\n * changed\"; this file answers \"what does PVE say, what does it want, and has it finished\". On\n * this family that is where all the strangeness lives — the read is an index and not an object,\n * the paths are inverted, the delete takes its arguments in the query string, and both writes\n * fork a worker — so keeping it in one place is what stops the next reader assuming the ordinary\n * shape from the other nineteen resources. ⚠️ NOTHING HERE DECIDES A DIFF.\n *\n * ⚠️ THE `import type` BACK TO ceph-fs.ts IS A CYCLE ON PAPER ONLY. It is type-only and erased\n * before anything runs, exactly as metric-server-form.ts imports `MetricServerProps`. The props\n * stay the resource's public shape, declared in the file that declares the resource.\n *\n * ⛔ POST AND DELETE ANSWER WITH A UPID, NOT A RESULT — THE WRITE IS ASYNCHRONOUS AND A FAILED ONE\n * IS STILL HTTP 200. Read from the cluster's own source, /usr/share/perl5/PVE/API2/Ceph/FS.pm on\n * node-b: `createfs` and `destroyfs` both end `return $rpcenv->fork_worker(...)`. Two different lies\n * come out of trusting that status code. A read-back straight after the POST reports \"still\n * absent\" about a filesystem that is being built as it says so — which is precisely the message\n * `pveOperations.reconcile` would print, pointing at the wrong cause. And a worker that dies\n * INSIDE — the pool create, or the add-storage step, both of which are wrapped in `eval` — is\n * never reported to the caller at all. `settle` below is the answer to both.\n * ⚠️ REASONED FROM THAT SOURCE, NOT MEASURED. Nothing was written to this cluster, so the race\n * has not been observed; only the `fork_worker` that guarantees it is there.\n *\n * ⛔ A DELETE BODY IS SILENTLY DISCARDED BY PVE, SO `remove-pools` GOES IN THE QUERY STRING.\n * MEASURED in /usr/share/perl5/PVE/APIServer/AnyEvent.pm on node-b: line 928 reads the request\n * content into params only `if ($method eq 'PUT' || $method eq 'POST')`, and line 1653 sends\n * every other method down a branch that parses `$request->url->query()` and nothing else. So\n * `pve(target, role, 'DELETE', path, form)` would send a body PVE never looks at: the flags would\n * read as unset, the pools would quietly survive a delete that asked for them, and no error would\n * be raised anywhere. sdn-apply.ts already puts `?pending=1` in the path for the same reason.\n *\n * ⚠️ THE TASK POLL RUNS ON THE `read` ROLE THOUGH IT SITS INSIDE reconcile, FOR TWO REASONS. It is\n * a read, and resource.ts already mints `read` for its own read-back inside reconcile. And the\n * leases differ where it matters: `provision` is 300s and explicitly non-renewable, so a create\n * that waits out a slow worker on that lease can expire mid-poll, while `read` is 3600s.\n *\n * ⛔ THE POLLER IS NEVER THE TASK'S OWNER, WHICH COSTS A PRIVILEGE, AND THIS ONE IS MEASURED\n * RATHER THAN FEARED. client.ts mints a fresh credential per call and the mount vends a NEW\n * token id each time, so the token reading the status is never the token recorded in the UPID —\n * and PVE compares them exactly. /usr/share/perl5/PVE/API2/Tasks.pm on node-b, `$check_task_user`:\n * `return $user eq $fulltoken || $user eq $task->{user};`, above it the comment \"token only sees\n * token tasks, user sees user + token tasks\". Token B of the same user matches neither branch.\n * So the fallback is the schema's other clause for `GET /nodes/{node}/tasks/{upid}/status`: \"The\n * user needs 'Sys.Audit' permissions on '/nodes/<node>' if they are not the owner of the task.\"\n * Grant it on the `read` role, or every create burns the full cap below and reports the wrong\n * cause.\n *\n * ★ AS OF 2026-09-24 (decision 43's walk-down, 2c) THIS FILE IS `client.ts`'s HALF ONLY. The read\n * (`readRow`) moved to `ceph-fs-distilled.ts`, and so did the create — `nodes.updateNodeCephFs`\n * (distilled's own misnamed POST, confirmed against its `T.Http` annotation) plus a SEPARATE\n * distilled `settle`, using the raw `getNodeTaskStatus` operation in its own tolerant poll loop\n * rather than `Task.awaitTask`, which does not tolerate a poll failure the way this family needs\n * (network-apply-read.ts's own header has the fuller reasoning). `destroyFs` stays HERE,\n * unmigrated: distilled types `remove_pools`/`remove_storages` as `T.Body` on a DELETE, and the\n * ⛔ two paragraphs up is the MEASURED reason PVE would silently ignore both flags if sent that\n * way — a real protocol gap, not a judgement call. `settle` below is still shared where it can\n * be: `createForm`/`objectPath`/`destroyPath` are pure and reused by the distilled file too.\n */\nimport * as Effect from 'effect/Effect';\nimport type { CephFsAttributes, CephFsProps } from './ceph-fs.ts';\nimport { pve } from './client.ts';\nimport type { PveTarget } from './credentials.ts';\nimport { csv, flag, int, text } from './values.ts';\n\n/**\n * This filesystem's row of the index, as attributes.\n *\n * ⚠️ `GET /nodes/{node}/ceph/fs` ANSWERS AN ARRAY, while the factory hands `attributes` the\n * `Record<string, unknown>` every other PVE read is shaped like. Rows are narrowed rather than\n * trusted, the same way acl.ts narrows its one flat grant list.\n *\n * ⛔ RETURNING undefined IS WHAT MAKES \"ABSENT\" MEAN ABSENT HERE, unlike acl.ts where the object is\n * always present-but-unbound. A filesystem missing from the index has not been created, and\n * `reconcile` takes the create branch on exactly that signal.\n */\nexport const readRow = (\n live: Record<string, unknown>,\n props: CephFsProps,\n): CephFsAttributes | undefined => {\n const row = (Array.isArray(live) ? live : [])\n .filter(\n (entry): entry is Record<string, unknown> => typeof entry === 'object' && entry !== null,\n )\n .find((entry) => entry['name'] === props.name);\n if (row === undefined) return undefined;\n return {\n data_pool: text(row['data_pool']),\n data_pools: csv(\n Array.isArray(row['data_pools'])\n ? row['data_pools'].map((entry: unknown) => String(entry))\n : [],\n ),\n metadata_pool: text(row['metadata_pool']),\n metadata_pool_id: int(row['metadata_pool_id'], -1),\n name: props.name,\n };\n};\n\n/** ⚠️ `exitstatus` is ABSENT while a task runs, and is the exact string `OK` only on success. */\ntype TaskStatus = { readonly status?: string; readonly exitstatus?: string };\n\n/**\n * ⚠️ SHORT POLLS, LOW CAP. Ninety seconds covers two pool creates plus the ten seconds `createfs`\n * itself spends waiting for an MDS to go active, and is short enough that a stuck task fails the\n * deploy rather than parking it for the afternoon.\n */\n// ★ EXPORTED so ceph-fs-distilled.ts's OWN settle polls the same cadence and cap — one number.\nexport const POLL_SECONDS = 2;\nexport const POLL_ATTEMPTS = 45;\n\n/** ⚠️ `nodes/{n}/ceph/fs/{name}` — the POST and DELETE target, and NOT where a read goes. */\nexport const objectPath = (props: CephFsProps) => `nodes/${props.node}/ceph/fs/${props.name}`;\n\n/** The vendor rules `createForm` is checked against — `guardWrite`, distilled-guard.ts. */\nexport const CEPH_FS_CREATE = 'pve:POST /nodes/{node}/ceph/fs/{name}';\n\n/** Only the declared flags. ⚠️ An omitted one is PVE's own default, not a value to send. */\nconst field = (name: string, value: string | undefined): Record<string, string> =>\n value === undefined ? {} : { [name]: value };\n\n/**\n * ⚠️ `name` IS DELIBERATELY ABSENT FROM THE FORM. It is already the last segment of the path being\n * POSTed to — the metric-server.ts case again — and a second copy can only ever disagree with it.\n */\nexport const createForm = (props: CephFsProps): Record<string, string> => ({\n ...field('add-storage', flag(props['add-storage'])),\n ...field('pg_num', props.pg_num === undefined ? undefined : String(props.pg_num)),\n});\n\n/** The delete target with its flags in the query string — see the ⛔ in the header. */\nconst destroyPath = (props: CephFsProps) => {\n const query = [\n props['remove-pools'] === true ? 'remove-pools=1' : undefined,\n props['remove-storages'] === true ? 'remove-storages=1' : undefined,\n ].filter((part) => part !== undefined);\n return query.length === 0 ? objectPath(props) : `${objectPath(props)}?${query.join('&')}`;\n};\n\n/**\n * Wait for a forked PVE task, and fail loudly rather than quietly.\n *\n * ⚠️ THE UPID IS PERCENT-ENCODED BECAUSE IT IS FULL OF COLONS — `UPID:node-b:00396D3A:…:root@pam:`\n * (MEASURED shape, from `GET /nodes/node-b/tasks`) is ONE path segment, not seven. Encoding is what\n * guarantees it arrives as one; PVE's router decodes each segment before matching. REASONED from\n * the URI handling rather than measured — no task of this provider's has been polled yet.\n */\nconst settle = (target: PveTarget, node: string, upid: string, what: string) =>\n Effect.gen(function* () {\n for (let attempt = 0; attempt < POLL_ATTEMPTS; attempt += 1) {\n const status = yield* pve<TaskStatus>(\n target,\n 'read',\n 'GET',\n `nodes/${node}/tasks/${encodeURIComponent(upid)}/status`,\n ).pipe(\n // ⚠️ AN UNREADABLE STATUS IS \"NOT SETTLED YET\", NOT A FAILURE. It is a missing Sys.Audit\n // (see the header) or a node mid-restart; either way the task is still the cluster's\n // business, and the cap is what ends the wait rather than one unlucky GET.\n Effect.orElseSucceed(() => undefined),\n );\n if (status?.status === 'stopped') {\n const exit = text(status.exitstatus);\n if (exit === 'OK') return;\n return yield* Effect.die(\n new Error(\n `${what}: PVE task ${upid} finished with \"${exit === '' ? 'no exit status' : exit}\". ` +\n 'The write returned HTTP 200 because it only forked the worker -- the real error is ' +\n `in \\`pvesh get /nodes/${node}/tasks/${upid}/log\\`.`,\n ),\n );\n }\n // ⚠️ A BARE NUMBER IS MILLISECONDS to Effect's Duration, not seconds. The cap in the\n // message below is derived from the same constant so the two cannot drift apart.\n yield* Effect.sleep(POLL_SECONDS * 1000);\n }\n return yield* Effect.die(\n new Error(\n `${what}: PVE task ${upid} was still running after ` +\n `${String(POLL_ATTEMPTS * POLL_SECONDS)}s, or its ` +\n 'status could not be read. Check the task log, and check that the `read` role holds ' +\n `Sys.Audit on /nodes/${node} -- each call mints a new token, so the poller is never the ` +\n 'task owner and is answered 403 rather than told to wait.',\n ),\n );\n });\n\n/**\n * DELETE the filesystem, then wait for the worker.\n *\n * ⛔ WHAT THIS TAKES AWAY DEPENDS ENTIRELY ON `remove-pools`, AND THE DEFAULT IS THE SAFE ONE. With\n * it unset PVE removes the filesystem from the MDS map and LEAVES the two pools on disk: every\n * mount breaks, but the bytes are still there for an operator to recover. With it set the pools\n * go too and nothing is recoverable. Leaving it unset also means a later create of the SAME name\n * fails with \"ceph pools '<name>_data' and/or '<name>_metadata' already exist\" -- that refusal is\n * a BRAKE, not a bug, and it is the last thing standing between a mis-typed rename and the data.\n */\nexport const destroyFs = (props: CephFsProps) =>\n Effect.gen(function* () {\n const upid = text(yield* pve<string>(props.target, 'provision', 'DELETE', destroyPath(props)));\n // ⚠️ A DESTROY THAT ANSWERS WITHOUT A UPID IS NOT REFUSED HERE. `destroyfs` dies synchronously\n // with \"no such cephfs\" when the filesystem is already gone, which surfaces as a failed\n // DELETE; an empty answer that is not an error is best treated as already-absent, and the\n // caller's read-back is what proves it either way.\n if (upid !== '') yield* settle(props.target, props.node, upid, destroyPath(props));\n });\n\n/**\n * The two read-back failures, as messages rather than as guesses.\n *\n * ⛔ WAITING PROVES THE TASK ENDED; ONLY A READ PROVES THE FILESYSTEM DID OR DID NOT. `createfs`\n * wraps its pool creates in an `eval` and CLEANS THEM UP on error before dying, so a worker can\n * plausibly end having built and then removed everything it made. `destroyfs` refuses outright\n * while a non-disabled `cephfs` storage still references the filesystem. Neither outcome is\n * visible in a status code, which is why ceph-fs.ts reads back after both and dies with these.\n */\nexport const notCreated = (props: CephFsProps) =>\n new Error(\n `${objectPath(props)}: the create task finished but the filesystem is not in ` +\n `GET nodes/${props.node}/ceph/fs. Check the task log -- a PVE worker can exit having ` +\n 'rolled back the pools it had just made.',\n );\n\nexport const notDestroyed = (props: CephFsProps) =>\n new Error(\n `${objectPath(props)}: the destroy task finished but the filesystem is still in ` +\n `GET nodes/${props.node}/ceph/fs. PVE refuses to destroy a CephFS while a PVE storage entry ` +\n 'of type cephfs still references it and is not disabled.',\n );\n",
|
|
47
|
+
"/**\n * `Proxmox.CephFs` — a CephFS on the cluster's own Ceph. The filesystem a `cephfs` storage mounts.\n *\n * ⛔ A REPLACE OF THIS RESOURCE DESTROYS A LIVE FILESYSTEM, AND THERE IS NO PUT TO SAVE YOU FROM\n * IT. MEASURED from the published schema on node-b, 2026-09-13: `/nodes/{node}/ceph/fs/{name}` has\n * exactly two methods, POST and DELETE. A CephFS cannot be edited in place, so `updateForm` is\n * left undefined and anything the factory can see as changed becomes a REPLACE — and Alchemy's\n * replace is create-then-delete, where the delete is `destroyfs`: the entry leaves the MDS map,\n * every mount on every node breaks, and whether the bytes survive rests on `remove-pools` alone.\n * ★ WHICH IS THE WHOLE REASON `matches` COMPARES NOTHING. Read its ⛔ before adding a field to\n * it. On every other resource in this package a forever-diff is an annoying plan line; on this\n * one it is a live filesystem destroyed on every deploy, forever, because a background daemon\n * moved a number nobody declared.\n *\n * ⛔ THERE IS NO SINGLE-OBJECT READ, WHICH INVERTS `path` AND `collection`. MEASURED on node-b:\n * pvesh get /nodes/node-b/ceph/fs/cephfs-c1\n * -> No 'get' handler defined for '/nodes/node-b/ceph/fs/cephfs-c1'\n * `GET /nodes/{node}/ceph/fs` is a directory index and is the only read there is, so `path()`\n * below returns the INDEX and `attributes` picks this filesystem out of the array client-side —\n * the shape acl.ts uses for the one flat `GET /access/acl`. The POST goes to the `{name}` path,\n * so `collection()` is the LONGER of the two strings, the mirror of metric-server.ts.\n * ⚠️ AND THAT IS WHY EVERY HANDLER BELOW IS HAND-WRITTEN rather than taken from a factory. A\n * factory `destroy` deletes the read path, which here is the index: `DELETE /nodes/{node}/\n * ceph/fs` is not a route, so it would fail every destroy while the filesystem stayed exactly\n * where it was. `reconcile` is hand-written for a second, independent reason — the forked\n * worker — set out in ceph-fs-wire.ts. acl.ts is the precedent for a family that genuinely\n * does not fit a shared shape.\n *\n * ★ MIGRATED OFF `client.ts`'s generic `pve()` ONTO `@distilled.cloud/proxmox`'s typed\n * `nodes.listNodeCephFs`/`updateNodeCephFs` for the READ and the CREATE (2026-09-24, decision\n * 43's walk-down, 2c — ceph-fs-distilled.ts). DELETE originally stayed on `client.ts`:\n * the SDK put its flags in a body that PVE discards (ceph-fs-wire.ts's history).\n * SDK 0.3.0 fixes the query binding; delete now uses it and catches only CephFsNotFound.\n * The typed-read follow-up removes the catch-all fold from `readFs`: a failed index must\n * fail read/diff/reconcile/delete, not report a missing filesystem or a successful destroy.\n *\n * ⛔ CREATING A CephFS CREATES TWO CEPH POOLS, AND A `Proxmox.CephPool` MUST NOT ALSO DECLARE THEM.\n * `createfs` builds `<name>_data` and `<name>_metadata` itself and refuses outright if either\n * exists (\"ceph pools '…_data' and/or '…_metadata' already exist\"). MEASURED on C1: the live\n * `cephfs-c1` owns `cephfs-c1_data` (id 6) and `cephfs-c1_metadata` (id 7), both of which\n * `GET /nodes/node-b/ceph/pool` lists like any other pool — and `/nodes/{node}/ceph/pool/{name}` DOES\n * have GET, PUT and DELETE, so a pool resource would be a clean `pveHandlers` fit and would\n * adopt them without noticing. Declaring both is double management of one object: whichever\n * reconciles first wins, and the loser either fails its create or PUTs `size`/`pg_num` onto pools\n * this resource believes it owns. Declare the filesystem here and leave its two pools alone.\n *\n * ⚠️ `add-storage` IS A SECOND SIDE EFFECT AND IT LANDS IN storage.cfg. Set, `createfs` also calls\n * `PVE::API2::Storage::Config->create` with type `cephfs`, content `backup,iso,vztmpl` and\n * `fs-name <name>`. MEASURED: /etc/pve/storage.cfg on node-b holds exactly that — `cephfs:\n * cephfs-c1` / `content backup,vztmpl,iso` / `fs-name cephfs-c1`. So a `Proxmox.Storage`\n * declaring `cephfs-c1` would be managing an entry this resource created. Declare ONE of them:\n * either `add-storage` here and no storage resource, or `add-storage` off and a\n * `Proxmox.Storage` that reads this resource's `name` attribute — which also gets the ordering\n * right for free, because Alchemy orders by data flow.\n *\n * ⚠️ `node` IS A ROUTE, NOT IDENTITY, AND MUST NEVER BE DIFFED. A CephFS is cluster-wide; the node\n * in the path only says which node PVE proxies the call to. MEASURED: `GET /nodes/node-b/ceph/fs`,\n * `…/node-c/…` and `…/node-d/…` returned the byte-identical array. So changing `node` plans `noop`, and\n * two resources naming the same `name` on different nodes are the SAME filesystem — the vmid\n * hazard from lxc.ts, with a filesystem on the end of it instead of a container.\n *\n * ⚠️ PRIVILEGES: the read lane needs `Sys.Audit` OR `Datastore.Audit` on `/`, which an auditor\n * role already holds — unlike storage.ts, nothing needs widening before the first plan. The\n * write side is in ceph-fs-wire.ts beside the calls, and in docs/privileges.md with the rest.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { createFs, destroyFs, readFs } from './ceph-fs-distilled.ts';\nimport { CEPH_FS_CREATE, createForm, notCreated, notDestroyed } from './ceph-fs-wire.ts';\nimport { guardWrite } from './distilled-guard.ts';\nimport { type PveRequirements, type WithTarget } from './resource.ts';\n\nexport interface CephFsProps extends WithTarget {\n /** ⚠️ Which node answers the call, NOT which node holds the filesystem. See the header. */\n node: string;\n /**\n * The filesystem name, and the cluster-wide primary key. PVE's pattern is `^[^:/\\s]+$`.\n * ⛔ CHANGING IT IS A REPLACE, WHICH DESTROYS THE OLD FILESYSTEM. `diff` says so explicitly\n * below rather than letting the factory report a create-shaped `update` and orphan the old one.\n */\n name: string;\n /**\n * Placement groups for the backing data pool; the metadata pool gets a quarter of it, or 8 when\n * this is under 32. PVE's default is 128.\n *\n * ⛔ CREATE-TIME ONLY, UNREADABLE, AND OWNED BY THE AUTOSCALER FROM THE SECOND IT LANDS. It is\n * never compared — see the ⛔ on `matches` — and this is not caution, it is measured. C1's\n * `cephfs-c1` was created with the default 128 (the arithmetic proves it: `cephfs-c1_metadata`\n * sits at 32, which is 128/4), and `cephfs-c1_data` reads pg_num 32 TODAY. The autoscaler moved\n * it by a factor of four, and it is not finished: `pg_autoscale_mode` is `on` for every pool on\n * this cluster and `cephfs-c1_metadata` already reports `pg_num_final: 16` against its live 32.\n */\n pg_num?: number;\n /**\n * Also write a `cephfs` storage entry for this filesystem. ⚠️ Create-time only and never read\n * back — it is an ACTION, not a field. See the header for what it does to `Proxmox.Storage`.\n */\n 'add-storage'?: boolean;\n /** ⛔ DELETE-TIME ONLY, AND IT ERASES THE DATA. Read the ⛔ on `destroyFs` before setting it. */\n 'remove-pools'?: boolean;\n /**\n * Delete the pveceph-managed storage entries too. ⚠️ PVE refuses unless they are already\n * disabled (\"storage '…' is not disabled, make sure to disable and unmount the storage first\"),\n * so this fails the destroy rather than unmounting anything out from under a running guest.\n */\n 'remove-storages'?: boolean;\n}\n\n/**\n * ⚠️ EVERY FIELD HERE IS REPORTED AND NONE IS COMPARED. They exist so a plan, and the state entry\n * behind it, can say what the declaration actually points at — which pools hold the bytes.\n */\nexport interface CephFsAttributes {\n name: string;\n /** The first data pool. PVE keeps it for compatibility; `data_pools` is the real answer. */\n data_pool: string;\n /**\n * ⚠️ SORTED, AND IT IS A SET RATHER THAN A LIST. A CephFS can hold several data pools — added\n * with `ceph fs add_data_pool`, which this resource has no way to express — and PVE reports\n * them in the MDS map's own order. Sorting is what keeps this attribute stable across reads.\n */\n data_pools: string;\n metadata_pool: string;\n /**\n * ⚠️ AN INTEGER THAT NAMES SOMETHING WRITTEN AS A NAME, AND THEREFORE A CLASSIC FOREVER-DIFF IF\n * IT EVER REACHED `matches`. PVE answers `metadata_pool_id: 7` while every write in this family\n * spells a pool by name. It is here to be read, never to be compared. `-1` means absent: the\n * field is optional in the schema and older PVE omits it.\n */\n metadata_pool_id: number;\n}\n\nexport interface ProxmoxCephFs extends Resource<\n 'Proxmox.CephFs',\n CephFsProps,\n CephFsAttributes,\n never,\n PveRequirements\n> {}\n\n/** ★ `retain` by default — a filesystem holding data cannot be rebuilt. See the ★ in resource.ts. */\nexport const ProxmoxCephFs = Resource<ProxmoxCephFs>('Proxmox.CephFs', {\n defaultRemovalPolicy: 'retain',\n});\n\n/**\n * ⛔ NOTHING IS COMPARED, AND THAT IS THE MOST DELIBERATE LINE IN THIS FILE. A CephFS has no\n * readable, writable field: the index returns only the name and the pools behind it, and every\n * prop this resource accepts is create-time or delete-time. So \"present\" IS \"settled\", and the\n * only honest comparison is none at all.\n * ⚠️ THE TEMPTING ADDITION IS `pg_num`, AND IT WOULD BE THE WORST BUG THIS PACKAGE HAS SHIPPED.\n * It is not in the index at all, so it can only be read from the pool endpoint — where the\n * autoscaler owns it. MEASURED on C1 today: created at 128, live at 32, with the metadata\n * pool already scheduled down to 16. Compared, that is an eternal mismatch — and since there\n * is no update path, treating this as a diff would plan a REPLACE. The plan would destroy and\n * rebuild a live filesystem on every deploy, triggered by a daemon on its own schedule.\n * ⚠️ `data_pools` AND `metadata_pool_id` ARE OUT FOR THE ORDINARY REASONS: a set PVE returns\n * in its own order, and an integer id for something written as a name. `name` is out because\n * it is the FILTER that produced these attributes, so comparing it is true by construction —\n * an identity change is handled in `diff`, not here. `node` is out because it is a route.\n */\nexport const ProxmoxCephFsProvider = () =>\n Provider.effect(\n ProxmoxCephFs,\n Effect.succeed(\n ProxmoxCephFs.Provider.of({\n /**\n * ⛔ EMPTY, LIKE EVERY OTHER RESOURCE HERE. The index answers with every filesystem on the\n * cluster, `cephfs-c1` included — the one holding this estate's ISOs and templates.\n * Adopting it would put Alchemy one `destroy` away from it. Adoption stays explicit.\n */\n list: () => Effect.succeed([]),\n read: Effect.fn(function* ({ olds }) {\n return yield* readFs(olds);\n }),\n /**\n * ⛔ A CHANGED `name` IS A REPLACE, AND NOTHING ELSE CAN SAY SO. Left undetected, a rename\n * reads the NEW name, finds nothing, and plans the drift-shaped `update` this family uses\n * for \"Alchemy has state, the cluster does not\" — so reconcile would build the new\n * filesystem and LEAVE THE OLD ONE, with its pools, its storage entry and its bytes,\n * owned by nobody and invisible in every later plan.\n * ⛔ SAYING `replace` IS HONEST, AND IT IS ALSO WHAT MAKES A TYPO EXPENSIVE. Alchemy\n * creates first and deletes second, so the old filesystem is destroyed AFTER the new\n * one exists — with `remove-pools` unset the bytes are stranded rather than erased, and\n * that default is the only thing between a mis-typed rename and an unrecoverable one.\n * ⚠️ `node` is NOT part of identity and must never join this comparison.\n */\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n yield* guardWrite(CEPH_FS_CREATE, createForm(news), output === undefined);\n if (output !== undefined && news.name !== output.name) {\n return { action: 'replace' } as const;\n }\n if (output === undefined) return undefined;\n const live = yield* readFs(news);\n if (live === undefined) {\n yield* guardWrite(CEPH_FS_CREATE, createForm(news), true);\n return { action: 'update' } as const;\n }\n // ⛔ SEE THE ⛔ ABOVE `ProxmoxCephFsProvider`: NOTHING ELSE IS COMPARED. Present is settled.\n return { action: 'noop' } as const;\n }),\n /**\n * ⚠️ THE READ-BACK IS KEPT EVEN THOUGH `createFs` ALREADY WAITED OUT THE TASK. Waiting\n * proves the task ENDED, reading proves the filesystem EXISTS, and PVE has shipped tasks\n * that end OK having done nothing.\n * ⚠️ AN EXISTING FILESYSTEM IS RETURNED UNTOUCHED. There is no update call to make, so the\n * only write this handler can perform is a create; `diff` has already decided that a\n * real change is a replace, and Alchemy calls delete for the old generation itself.\n */\n reconcile: Effect.fn(function* ({ news }) {\n const live = yield* readFs(news);\n if (live !== undefined) return live;\n yield* createFs(news);\n const after = yield* readFs(news);\n if (after === undefined) return yield* Effect.die(notCreated(news));\n return after;\n }),\n /**\n * ⛔ THE READ-BACK IS WHAT TURNS \"the task said OK\" INTO \"it is actually gone\": `destroyfs`\n * refuses while a non-disabled `cephfs` storage still references the filesystem, and that\n * refusal must fail the destroy rather than letting Alchemy drop the state entry for a\n * live object. `destroyFs` now uses the SDK query binding — ceph-fs-wire.ts preserves\n * the measured DELETE query-binding history.\n */\n delete: Effect.fn(function* ({ olds }) {\n /**\n * ⚠️ A FILESYSTEM SOMEBODY ALREADY REMOVED BY HAND IS NOT AN ERROR. `destroyfs` dies\n * synchronously with \"no such cephfs\", which would fail every destroy of a stack whose\n * filesystem was cleaned up outside Alchemy and leave the state entry unremovable\n * without editing the store. The original catch-all read fold could also report\n * success after a 403 without deleting anything, and could defeat read-back after a\n * write. `readFs` now propagates those failures: only a successful index with no\n * matching row may short-circuit this delete or confirm the filesystem is gone.\n */\n if ((yield* readFs(olds)) === undefined) return;\n yield* destroyFs(olds);\n const after = yield* readFs(olds);\n if (after !== undefined) return yield* Effect.die(notDestroyed(olds));\n }),\n }),\n ),\n );\n",
|
|
48
|
+
"/**\n * `Proxmox.CephFs`'s distilled transport: index, create, delete and task status.\n * SDK 0.3.0 fixes DELETE query flags and supplies the measured CephFsNotFound tag.\n *\n * ⛔ `nodes.updateNodeCephFs` IS distilled's GENERATOR MISNAMING A CREATE, NOT A SECOND ENDPOINT.\n * Checked directly against its schema (`T.Http({ method: \"POST\", uri:\n * \"/nodes/{node}/ceph/fs/{name}\" })`) rather than trusted from the function name — it is the\n * SAME single write PVE registers, `createfs`. Harmless once named here for what it is.\n *\n * ★ CREATE AND DELETE SHARE THE SAME BOUNDED POLL POLICY. The raw getNodeTaskStatus\n * operation preserves this family's tolerance of a missing Sys.Audit grant or a node\n * mid-restart until the deadline. The former SDK Task.awaitTask propagated poll failures;\n * SDK PR #265 removed it because polling policy belongs in the provider.\n */\nimport * as nodes from '@distilled.cloud/proxmox/nodes';\nimport * as Effect from 'effect/Effect';\nimport type { CephFsProps } from './ceph-fs.ts';\nimport { POLL_ATTEMPTS, POLL_SECONDS, createForm, objectPath, readRow } from './ceph-fs-wire.ts';\nimport { runPve } from './distilled-pve.ts';\n\n/**\n * The index, read via distilled — the same shape `readRow` (ceph-fs-wire.ts) already narrows.\n *\n * ⛔ ABSENCE IS A SUCCESSFUL INDEX WITH NO MATCHING FILESYSTEM. The transport swap\n * initially preserved the generic factory's catch-all fold. The 2026-09-24 follow-up removes it:\n * a failed list is not proof that a filesystem is missing. Task polling below retains its\n * separate bounded wait policy; it does not decide whether a resource exists.\n */\nexport const readFs = (props: CephFsProps) =>\n runPve(props.target, 'read', false, nodes.listNodeCephFs({ node: props.node })).pipe(\n Effect.map((rows) => readRow(rows as unknown as Record<string, unknown>, props)),\n );\n\n/** `updateNodeCephFs`'s own request shape — `createForm`, translated. No field is renamed. */\nconst toDistilledCreate = (props: CephFsProps): nodes.UpdateNodeCephFsRequest =>\n ({\n ...createForm(props),\n name: props.name,\n node: props.node,\n }) as unknown as nodes.UpdateNodeCephFsRequest;\n\n/**\n * Wait for a forked task. `exitstatus` is absent while running and exactly `OK` on success.\n * ⚠️ T.Label encodes the colon-filled UPID as one path segment, as the hand client did.\n */\nconst settleTask = (props: CephFsProps, upid: string) =>\n Effect.gen(function* () {\n for (let attempt = 0; attempt < POLL_ATTEMPTS; attempt += 1) {\n const status = yield* runPve(\n props.target,\n 'read',\n false,\n nodes.getNodeTaskStatus({ node: props.node, upid }),\n ).pipe(Effect.orElseSucceed(() => undefined));\n if (status?.status === 'stopped') {\n if (status.exitstatus === 'OK') return;\n return yield* Effect.die(\n new Error(\n `${objectPath(props)}: PVE task ${upid} finished with \"${status.exitstatus ?? 'no exit status'}\". ` +\n 'The write returned HTTP 200 because it only forked the worker -- the real error is ' +\n `in \\`pvesh get /nodes/${props.node}/tasks/${upid}/log\\`.`,\n ),\n );\n }\n yield* Effect.sleep(POLL_SECONDS * 1000);\n }\n return yield* Effect.die(\n new Error(\n `${objectPath(props)}: PVE task ${upid} was still running after ` +\n `${String(POLL_ATTEMPTS * POLL_SECONDS)}s, or its status could not be read. Check the ` +\n 'task log, and check that the `read` role holds Sys.Audit on ' +\n `/nodes/${props.node} -- each call mints a new token, so the poller is never the task ` +\n 'owner and is answered 403 rather than told to wait.',\n ),\n );\n });\n\n/** POST the create, then wait for the worker. ⛔ The caller still reads back; see ceph-fs.ts. */\nexport const createFs = (props: CephFsProps) =>\n Effect.gen(function* () {\n const upid = yield* runPve(\n props.target,\n 'provision',\n true,\n nodes.updateNodeCephFs(toDistilledCreate(props)),\n );\n // ⛔ NO UPID MEANS NO WORKER. PVE answers 200 with `{\"data\":null}` on calls that did nothing,\n // and here that is indistinguishable from success by status code alone. Refusing now is the\n // difference between a clear failure and a state entry for a filesystem nobody built.\n if (upid === '') {\n return yield* Effect.die(\n new Error(\n `${objectPath(props)}: POST returned no task id. PVE wraps every answer in ` +\n '{\"data\":...} and can report success on a call that did nothing.',\n ),\n );\n }\n yield* settleTask(props, upid);\n });\n\n/**\n * DELETE the filesystem, then wait for the worker.\n *\n * ⛔ WHAT THIS TAKES AWAY DEPENDS ENTIRELY ON `remove-pools`, AND THE DEFAULT IS THE SAFE ONE. With\n * it unset PVE removes the filesystem from the MDS map and LEAVES the two pools on disk: every\n * mount breaks, but the bytes are still there for an operator to recover. With it set the pools\n * go too and nothing is recoverable. Leaving it unset also means a later create of the SAME name\n * fails with \"ceph pools '<name>_data' and/or '<name>_metadata' already exist\" -- that refusal is\n * a BRAKE, not a bug, and it is the last thing standing between a mis-typed rename and the data.\n */\nexport const destroyFs = (props: CephFsProps) =>\n Effect.gen(function* () {\n const upid = yield* runPve(\n props.target,\n 'provision',\n true,\n nodes.deleteNodeCephFs({\n node: props.node,\n name: props.name,\n // ⛔ Query fields, never a DELETE body. Omitted/false retains PVE's safe default.\n ...(props['remove-pools'] === true ? { remove_pools: '1' } : {}),\n ...(props['remove-storages'] === true ? { remove_storages: '1' } : {}),\n }),\n ).pipe(Effect.catchTag('CephFsNotFound', () => Effect.succeed('')));\n // ⚠️ Missing already is idempotent; every other SDK error propagates. The caller's\n // successful index read must still confirm absence after the DELETE or task.\n if (upid !== '') yield* settleTask(props, upid);\n });\n",
|
|
49
|
+
"/**\n * The wire lane of `Proxmox.CephFs`: how a PVE answer becomes attributes, how a declaration becomes\n * a PVE call, and how that call becomes a fact.\n *\n * ★ SPLIT OUT OF ceph-fs.ts TO KEEP BOTH FILES UNDER THE 250-LINE CAP, and the seam is a real one\n * rather than a convenient line number. ceph-fs.ts answers \"what is a CephFS, and when has it\n * changed\"; this file answers \"what does PVE say, what does it want, and has it finished\". On\n * this family that is where all the strangeness lives — the read is an index and not an object,\n * the paths are inverted, the delete takes its arguments in the query string, and both writes\n * fork a worker — so keeping it in one place is what stops the next reader assuming the ordinary\n * shape from the other nineteen resources. ⚠️ NOTHING HERE DECIDES A DIFF.\n *\n * ⚠️ THE `import type` BACK TO ceph-fs.ts IS A CYCLE ON PAPER ONLY. It is type-only and erased\n * before anything runs, exactly as metric-server-form.ts imports `MetricServerProps`. The props\n * stay the resource's public shape, declared in the file that declares the resource.\n *\n * ⛔ POST AND DELETE ANSWER WITH A UPID, NOT A RESULT — THE WRITE IS ASYNCHRONOUS AND A FAILED ONE\n * IS STILL HTTP 200. Read from the cluster's own source, /usr/share/perl5/PVE/API2/Ceph/FS.pm on\n * node-b: `createfs` and `destroyfs` both end `return $rpcenv->fork_worker(...)`. Two different lies\n * come out of trusting that status code. A read-back straight after the POST reports \"still\n * absent\" about a filesystem that is being built as it says so — which is precisely the message\n * `pveOperations.reconcile` would print, pointing at the wrong cause. And a worker that dies\n * INSIDE — the pool create, or the add-storage step, both of which are wrapped in `eval` — is\n * never reported to the caller at all. `settle` below is the answer to both.\n * ⚠️ REASONED FROM THAT SOURCE, NOT MEASURED. Nothing was written to this cluster, so the race\n * has not been observed; only the `fork_worker` that guarantees it is there.\n *\n * ⛔ A DELETE BODY IS SILENTLY DISCARDED BY PVE, SO `remove-pools` GOES IN THE QUERY STRING.\n * MEASURED in /usr/share/perl5/PVE/APIServer/AnyEvent.pm on node-b: line 928 reads the request\n * content into params only `if ($method eq 'PUT' || $method eq 'POST')`, and line 1653 sends\n * every other method down a branch that parses `$request->url->query()` and nothing else. So\n * `pve(target, role, 'DELETE', path, form)` would send a body PVE never looks at: the flags would\n * read as unset, the pools would quietly survive a delete that asked for them, and no error would\n * be raised anywhere. sdn-apply.ts already puts `?pending=1` in the path for the same reason.\n *\n * ⚠️ THE TASK POLL RUNS ON THE `read` ROLE THOUGH IT SITS INSIDE reconcile, FOR TWO REASONS. It is\n * a read, and resource.ts already mints `read` for its own read-back inside reconcile. And the\n * leases differ where it matters: `provision` is 300s and explicitly non-renewable, so a create\n * that waits out a slow worker on that lease can expire mid-poll, while `read` is 3600s.\n *\n * ⛔ THE POLLER IS NEVER THE TASK'S OWNER, WHICH COSTS A PRIVILEGE, AND THIS ONE IS MEASURED\n * RATHER THAN FEARED. client.ts mints a fresh credential per call and the mount vends a NEW\n * token id each time, so the token reading the status is never the token recorded in the UPID —\n * and PVE compares them exactly. /usr/share/perl5/PVE/API2/Tasks.pm on node-b, `$check_task_user`:\n * `return $user eq $fulltoken || $user eq $task->{user};`, above it the comment \"token only sees\n * token tasks, user sees user + token tasks\". Token B of the same user matches neither branch.\n * So the fallback is the schema's other clause for `GET /nodes/{node}/tasks/{upid}/status`: \"The\n * user needs 'Sys.Audit' permissions on '/nodes/<node>' if they are not the owner of the task.\"\n * Grant it on the `read` role, or every create burns the full cap below and reports the wrong\n * cause.\n *\n * ★ THE ORIGINAL DISTILLED WALK MOVED READ AND CREATE FIRST, leaving DELETE here because\n * SDK flags were annotated as body fields. Distilled Proxmox 0.3.0 fixes their query binding\n * and adds the measured CephFsNotFound tag. All calls now live in ceph-fs-distilled.ts;\n * this file keeps the pure forms, attributes and read-back failure messages. The protocol\n * history above remains load-bearing: moving a DELETE flag back into a body loses it silently.\n */\nimport type { CephFsAttributes, CephFsProps } from './ceph-fs.ts';\nimport { csv, flag, int, text } from './values.ts';\n\n/**\n * This filesystem's row of the index, as attributes.\n *\n * ⚠️ `GET /nodes/{node}/ceph/fs` ANSWERS AN ARRAY, while the factory hands `attributes` the\n * `Record<string, unknown>` every other PVE read is shaped like. Rows are narrowed rather than\n * trusted, the same way acl.ts narrows its one flat grant list.\n *\n * ⛔ RETURNING undefined IS WHAT MAKES \"ABSENT\" MEAN ABSENT HERE, unlike acl.ts where the object is\n * always present-but-unbound. A filesystem missing from the index has not been created, and\n * `reconcile` takes the create branch on exactly that signal.\n */\nexport const readRow = (\n live: Record<string, unknown>,\n props: CephFsProps,\n): CephFsAttributes | undefined => {\n const row = (Array.isArray(live) ? live : [])\n .filter(\n (entry): entry is Record<string, unknown> => typeof entry === 'object' && entry !== null,\n )\n .find((entry) => entry['name'] === props.name);\n if (row === undefined) return undefined;\n return {\n data_pool: text(row['data_pool']),\n data_pools: csv(\n Array.isArray(row['data_pools'])\n ? row['data_pools'].map((entry: unknown) => String(entry))\n : [],\n ),\n metadata_pool: text(row['metadata_pool']),\n metadata_pool_id: int(row['metadata_pool_id'], -1),\n name: props.name,\n };\n};\n\n/**\n * ⚠️ SHORT POLLS, LOW CAP. Ninety seconds covers two pool creates plus the ten seconds `createfs`\n * itself spends waiting for an MDS to go active, and is short enough that a stuck task fails the\n * deploy rather than parking it for the afternoon.\n */\n// ★ EXPORTED so ceph-fs-distilled.ts's OWN settle polls the same cadence and cap — one number.\nexport const POLL_SECONDS = 2;\nexport const POLL_ATTEMPTS = 45;\n\n/** ⚠️ `nodes/{n}/ceph/fs/{name}` — the POST and DELETE target, and NOT where a read goes. */\nexport const objectPath = (props: CephFsProps) => `nodes/${props.node}/ceph/fs/${props.name}`;\n\n/** The vendor rules `createForm` is checked against — `guardWrite`, distilled-guard.ts. */\nexport const CEPH_FS_CREATE = 'pve:POST /nodes/{node}/ceph/fs/{name}';\n\n/** Only the declared flags. ⚠️ An omitted one is PVE's own default, not a value to send. */\nconst field = (name: string, value: string | undefined): Record<string, string> =>\n value === undefined ? {} : { [name]: value };\n\n/**\n * ⚠️ `name` IS DELIBERATELY ABSENT FROM THE FORM. It is already the last segment of the path being\n * POSTed to — the metric-server.ts case again — and a second copy can only ever disagree with it.\n */\nexport const createForm = (props: CephFsProps): Record<string, string> => ({\n ...field('add-storage', flag(props['add-storage'])),\n ...field('pg_num', props.pg_num === undefined ? undefined : String(props.pg_num)),\n});\n\n/**\n * The two read-back failures, as messages rather than as guesses.\n *\n * ⛔ WAITING PROVES THE TASK ENDED; ONLY A READ PROVES THE FILESYSTEM DID OR DID NOT. `createfs`\n * wraps its pool creates in an `eval` and CLEANS THEM UP on error before dying, so a worker can\n * plausibly end having built and then removed everything it made. `destroyfs` refuses outright\n * while a non-disabled `cephfs` storage still references the filesystem. Neither outcome is\n * visible in a status code, which is why ceph-fs.ts reads back after both and dies with these.\n */\nexport const notCreated = (props: CephFsProps) =>\n new Error(\n `${objectPath(props)}: the create task finished but the filesystem is not in ` +\n `GET nodes/${props.node}/ceph/fs. Check the task log -- a PVE worker can exit having ` +\n 'rolled back the pools it had just made.',\n );\n\nexport const notDestroyed = (props: CephFsProps) =>\n new Error(\n `${objectPath(props)}: the destroy task finished but the filesystem is still in ` +\n `GET nodes/${props.node}/ceph/fs. PVE refuses to destroy a CephFS while a PVE storage entry ` +\n 'of type cephfs still references it and is not disabled.',\n );\n",
|
|
50
50
|
"/**\n * `Proxmox.CephOsd` — one OSD in the cluster's CRUSH tree.\n *\n * ⛔ CREATE AND DELETE ARE IMPLEMENTED AND `root@pam` IS THE ONLY IDENTITY THAT CAN RUN THEM.\n * That is PVE's restriction, not this package's caution, and it is MEASURED from the cluster's\n * own schema (`/usr/share/pve-docs/api-viewer/apidoc.js`, 2026-09-13):\n *\n * GET /nodes/{node}/ceph/osd -> {\"check\":[\"perm\",\"/\",[\"Sys.Audit\",\"Datastore.Audit\"],\"any\",1]}\n * POST /nodes/{node}/ceph/osd -> *** no permissions block at all ***\n * DELETE /nodes/{node}/ceph/osd/{osdid} -> *** no permissions block at all ***\n *\n * A PVE method with no permissions block is refused to every identity except `root@pam`, so an\n * OpenBao-minted `hf-provision@pve!…` token is answered 403 however wide its role — widening\n * the provision role cannot fix it. Compare the sibling families, which DO carry a check and\n * therefore do work with a token: `ceph/fs`, `ceph/mon` and `disks/zfs` all want `Sys.Modify`.\n *\n * ⚠️ SO THE WRITE PATH IS HONEST RATHER THAN USEFUL. It is written out properly in\n * `ceph-osd-write.ts` — read that file for what each verb destroys — and it will work for an\n * operator running as root@pam. Through this package's credential it will 403, and a 403 is a\n * better answer than a `delete` that silently does nothing while the plan claims otherwise.\n *\n * ★ WHAT IT IS ACTUALLY FOR, THEN: ASSERTION. It turns \"node-b, node-c and node-d each hold two ssd OSDs\"\n * into a line a plan checks, and it gives Ceph-backed resources something real to depend on —\n * read `osd.osdid` into an `rbd` storage's props and Alchemy orders that storage after the\n * assertion, so a stack can no longer report a healthy Ceph storage on a cluster whose OSDs are\n * gone. A replica that disappears becomes work in `plan` and a loud failure on the deploy.\n *\n * ⛔ THE WRITE VERBS MAY NOT EVEN BE REACHABLE FOR THIS PACKAGE'S CREDENTIAL. MEASURED from the\n * cluster's own schema (`/usr/share/pve-docs/api-viewer/apidoc.js`, 2026-09-13): `index`,\n * `osdindex`, `metadata` and `lv-info` each declare a `permissions` block, while `createosd`\n * and `destroyosd` declare NONE — the key is absent, not empty. REASONED, NOT MEASURED: PVE\n * refuses a method with no permissions block to everyone but `root@pam`, so an OpenBao-minted\n * `hf-provision@pve!…` token would likely be answered 403 however wide its role. That is a\n * reason to leave the write lane closed, not something to confirm by trying: if the reasoning\n * is wrong, the confirmation costs a disk.\n *\n * ★ MIGRATED OFF `client.ts` ONTO `@distilled.cloud/proxmox` (2026-09-24, decision 43, 2c) — this\n * file itself never called `pve()` directly, so nothing here changed; ceph-osd-tree.ts's own\n * header has the read side (still no `Effect.orElseSucceed`, unlike every other migrated Ceph\n * family), ceph-osd-write.ts's has the write side and the one pre-existing, out-of-scope gap\n * this migration carries forward rather than fixes.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport type { Input } from 'alchemy/Input';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport type { CephOsdAttributes } from './ceph-osd-tree.ts';\nimport { readOsd } from './ceph-osd-tree.ts';\nimport { createOsd, destroyOsd } from './ceph-osd-write.ts';\nimport type { PveRequirements } from './resource.ts';\nimport type { WithTarget } from './resource.ts';\n\n/**\n * ⚠️ RE-EXPORTED, NOT DECLARED HERE — it is built in ceph-osd-tree.ts, next to the walk that fills\n * it in and to the reasoning for which of its fields may be compared. One name, one import.\n */\nexport type { CephOsdAttributes };\n\nexport interface CephOsdProps extends WithTarget {\n /**\n * Which node ANSWERS the read — not where the OSD lives. MEASURED: the tree node-b returns and the\n * tree node-c returns are the same six leaves, node-d's included. Point this at any node that is up;\n * `host` is the field that says where the disk is.\n */\n node: string;\n /** `2` for `osd.2`. Identity, and an INTEGER — see the ⛔ on `findOsd` in ceph-osd-tree.ts. */\n osdid: number;\n /**\n * The CRUSH host bucket this OSD must sit in. Undeclared means unmanaged, as in storage.ts.\n *\n * ⚠️ DECLARING IT IS AN ASSERTION WITH NO REPAIR. If osd.2 turns up under node-c, the plan reports\n * work every time and the deploy fails, because moving an OSD between failure domains is a\n * `ceph osd crush move` this provider will not perform. That is the intent: a replica in the\n * wrong failure domain is not something to converge quietly past.\n */\n host?: string;\n /**\n * `ssd` | `hdd` | `nvme`, asserted the same way as `host`.\n *\n * ⚠️ THE READ'S SPELLING IS KEPT rather than the create parameter's (`crush-device-class`).\n * This resource never writes, so the tree's name is the only one it has, and inventing a\n * second name for one field is exactly what values.ts exists to stop.\n */\n device_class?: string;\n /**\n * The block device to build this OSD from, e.g. `/dev/nvme1n1`. Declaring it makes the resource\n * able to CREATE; leaving it out keeps the resource a pure assertion over an OSD that exists.\n *\n * ⛔ EVERYTHING ON THIS DEVICE IS DESTROYED BY A CREATE. `POST /nodes/{node}/ceph/osd` hands it\n * to `ceph-volume lvm create`, which zaps it. Declare it only for a disk that is genuinely\n * blank, and read the ⛔ about id allocation below before assuming the create will land as the\n * `osdid` written above.\n */\n dev?: string;\n /**\n * Zap the OSD's logical volumes on destroy (`cleanup=1`). Default false: the LVs are left behind\n * so the disk can be re-added without a rebuild, which is the recoverable choice.\n */\n cleanup?: boolean;\n}\n\nexport interface ProxmoxCephOsd extends Resource<\n 'Proxmox.CephOsd',\n CephOsdProps,\n CephOsdAttributes,\n never,\n PveRequirements\n> {}\n\n/**\n * ★ `retain` BY DEFAULT, FOLLOWING ALCHEMY'S OWN PRECEDENT. `GitHub.Repository` and\n * `Cloudflare.Zone` default to retain \"because their contents are irreplaceable\"; an OSD is a\n * replica of live data and qualifies twice over. Retain means DELETING THE DECLARATION DOES NOT\n * DELETE THE OSD — Alchemy drops its state row and leaves the disk alone. `destroyOsd` is fully\n * implemented in ceph-osd-write.ts and runs when the caller opts in with\n * `.pipe(RemovalPolicy.destroy())`, so this is the Terraform `prevent_destroy` shape rather than\n * a missing operation — and through a minted token it 403s anyway, per the ⛔ at the top.\n */\nexport const ProxmoxCephOsd = Resource<ProxmoxCephOsd>('Proxmox.CephOsd', {\n defaultRemovalPolicy: 'retain',\n});\n\n/**\n * The live OSD, or undefined when the tree has no leaf with that id.\n *\n * ⛔ NO `Effect.orElseSucceed(() => undefined)`, AND THAT IS THE ONE DELIBERATE DEPARTURE FROM\n * `pveOperations.read`. The factory folds every failure into \"absent\" because a 404 is a\n * legitimate answer on a per-object path — but this path is a COLLECTION that always exists\n * while Ceph is installed, so a failure here is never \"the OSD is gone\". It is an unreachable\n * node, an expired lease, a role without `Sys.Audit`, or a cluster with no Ceph at all. Folding\n * those into \"absent\" would turn every one of them into the sentence \"osd.2 is missing\", which\n * is the most alarming thing this provider can say and would be a lie in all four cases. Left\n * to fail, the plan shows `PVE GET nodes/node-b/ceph/osd -> 500: …` and names the real problem.\n */\n\n/**\n * Whether the live OSD is the one that was declared.\n *\n * ⚠️ AN UNDECLARED FIELD IS NOT COMPARED, as in storage.ts: undeclared means unmanaged, and there\n * is no default to fall back on — the whole point of a CRUSH placement is that it is a choice.\n * Declaring nothing but `osdid` therefore asserts only presence, which is a perfectly good\n * thing to assert about a replica and the safest declaration this resource accepts.\n */\nconst settled = (live: CephOsdAttributes, props: CephOsdProps) =>\n (props.host === undefined || props.host === live.host) &&\n (props.device_class === undefined || props.device_class === live.device_class);\n\nconst describe = (props: CephOsdProps) =>\n `osd.${String(props.osdid)} (read via nodes/${props.node}/ceph/osd)`;\n\n/**\n * ⛔ HAND-WRITTEN RATHER THAN `pveHandlers(spec)`, and the reason is not that the shape does not\n * fit — it fits perfectly, which is the danger. Given a spec, the factory's `reconcile` POSTs\n * `createForm` at `collection` whenever the read says absent, and `destroy` DELETEs `path`.\n * Wired to this family that is: build an OSD over whatever block device the props named, and\n * remove a replica when somebody deletes a line from a stack file. acl.ts is the precedent for\n * overriding the factory because PVE lacks a verb; this file overrides it because PVE HAS the\n * verbs and they must not be reachable from a declaration.\n *\n * ⚠️ THERE IS NO `replace` PATH HERE AND THERE CANNOT BE ONE. Alchemy implements a replace as\n * create-then-delete (or the reverse); with both of those refusing, `replace` could only ever\n * be a failure wearing a different word. A changed `osdid` is simply a different assertion.\n */\nconst handlers = {\n /**\n * ⛔ EMPTY, as everywhere in this package, and here the stakes are at their highest. The tree is\n * the whole cluster's — adopting it would hand Alchemy six resources it never created, each\n * with a `delete` in its future. Adoption stays an explicit act, and for this family it stays\n * an act with no teeth: see `delete` below.\n */\n list: () => Effect.succeed([]),\n\n read: Effect.fn(function* ({ olds }: { olds: CephOsdProps }) {\n return yield* readOsd(olds);\n }),\n\n /**\n * ⚠️ `update` IS THE LOUDEST WORD AVAILABLE, NOT A PROMISE TO FIX ANYTHING. Alchemy's Diff\n * admits only noop/update/replace, so a missing or misplaced OSD has to be spelled `update`\n * — and the deploy that follows fails on purpose in `reconcile`. A resource that answered\n * `noop` over a replica that is not there would be the exact lie this package keeps writing\n * guards against; a permanent entry in `plan` until a human puts a disk back is the cost, and\n * it is the right cost for a degraded pool.\n */\n diff: Effect.fn(function* ({\n news,\n output,\n }: {\n news: Input<CephOsdProps>;\n output: CephOsdAttributes | undefined;\n }) {\n if (output === undefined || !isResolved(news)) return undefined;\n const live = yield* readOsd(news);\n if (live === undefined) return { action: 'update' } as const;\n /**\n * ⛔ THE RECORDED STATE MUST DESCRIBE THE OSD THE DECLARATION NOW NAMES. `settled` compares\n * only host and device_class, so changing `osdid: 2` to `3` reads osd.3, finds it on the\n * same host with the same class, and answers noop — which records nothing, leaving OSD 2's\n * crush_weight, pgs and name in state under a declaration that says 3. It is the OUTPUT's id\n * that must be checked: the LIVE id is found BY `news.osdid`, so comparing that is vacuous.\n */\n if (output.osdid !== news.osdid) return { action: 'update' } as const;\n return settled(live, news) ? ({ action: 'noop' } as const) : ({ action: 'update' } as const);\n }),\n\n /**\n * ⛔ THE ASSERTION, AND THE WHOLE REASON THIS PROVIDER IS HAND-WRITTEN. It reads, and then it\n * either records what it found or dies. It never POSTs. The first deploy of a declaration is\n * an adoption of an OSD that already exists; every later one is a check that it still does.\n */\n reconcile: Effect.fn(function* ({ news }: { news: CephOsdProps }) {\n const live = yield* readOsd(news);\n if (live === undefined) {\n /**\n * ⛔ CEPH ALLOCATES THE OSD ID; THE DECLARATION CANNOT CHOOSE IT. Measured from the schema:\n * `POST /nodes/{node}/ceph/osd` requires `dev` and takes `crush-device-class`, `db_dev`,\n * `wal_dev`, `encrypted` and `osds-per-device` — and NO id. The cluster assigns the next\n * free number. So a create only lands on the declared `osdid` when that number happens to\n * be the one Ceph picks, which for a fresh disk on a contiguous cluster it usually is.\n * The read-back below is what keeps that from being a silent mismatch: if Ceph assigned a\n * different id, the OSD this resource names is still absent and reconcile refuses.\n */\n return yield* createOsd(news);\n }\n if (!settled(live, news)) {\n return yield* Effect.die(\n new Error(\n `${describe(news)}: exists but not as declared -- live host=${live.host} ` +\n `device_class=${live.device_class}. Nothing here moves an OSD between hosts or ` +\n 'reclassifies it; fix the declaration, or move it deliberately with `ceph osd crush ' +\n 'move` / `ceph osd crush set-device-class` and deploy again.',\n ),\n );\n }\n return live;\n }),\n\n /**\n * ⛔ REMOVING THE DECLARATION REMOVES THE ASSERTION, NOT THE REPLICA — the resource defaults\n * to `retain`, so this runs only on `.pipe(RemovalPolicy.destroy())`. What the DELETE actually\n * does to a live pool is documented on `destroyOsd` in ceph-osd-write.ts.\n */\n delete: Effect.fn(function* ({ olds }: { olds: CephOsdProps }) {\n yield* destroyOsd(olds);\n }),\n};\n\nexport const ProxmoxCephOsdProvider = () =>\n Provider.effect(ProxmoxCephOsd, Effect.succeed(ProxmoxCephOsd.Provider.of(handlers)));\n",
|
|
51
51
|
"/**\n * The CRUSH tree, walked down to one OSD leaf.\n *\n * ★ SPLIT OUT OF ceph-osd.ts TO KEEP BOTH FILES UNDER THE 250-LINE CAP, and the seam is the same\n * one metric-server-form.ts cuts: this file answers \"what does the cluster say about osd.N\",\n * ceph-osd.ts answers \"what is an OSD and what may a plan do about it\". Nothing here calls the\n * API and nothing here decides a diff. `CephOsdAttributes` lives on this side of the seam\n * because it is a description of what the TREE says — keeping each field's\n * reported-never-compared reasoning against the line that builds it — and ceph-osd.ts re-exports\n * it so a consumer still imports one name from one place. The `import type` back for\n * `CephOsdProps` is a cycle on paper only: it is erased before anything runs.\n *\n * ⛔ `GET /nodes/{node}/ceph/osd` ANSWERS A TREE, NOT A LIST, AND IT IS THE WHOLE CLUSTER'S TREE.\n * MEASURED 2026-09-13: asked of node-b it answers `{\"flags\":…,\"root\":{\"children\":[…]}}` whose\n * leaves include osd.0 and osd.5 on node-d; asked of node-c it answers the identical six leaves. The\n * `{node}` in the path chooses WHO ANSWERS, not what is listed. A provider that read it as \"the\n * OSDs on this node\" would find osd.0 through node-b and then report it as living there.\n *\n * ⛔ AND THE SINGLE-OBJECT PATH CANNOT BE USED INSTEAD — THIS WALK EXISTS BECAUSE IT LIES.\n * MEASURED: `GET /nodes/node-b/ceph/osd/99`, an id with no OSD behind it, answers HTTP 200 with\n * `[{\"name\":\"metadata\"},{\"name\":\"lv-info\"}]` — byte for byte what `…/osd/2` answers for a real\n * one. It is a directory index (its schema says `permissions: {\"user\":\"all\"}`), not a read of\n * the OSD. Point `PveSpec.path` at it and every declared OSD is \"present\": `diff` reports\n * `noop` over a dead replica forever, and `reconcile`'s read-back guard — the one thing that\n * stops this package recording objects that do not exist — passes on an OSD that was never\n * built. The only endpoint that can tell present from absent is the tree.\n *\n * ★ MEASURED ON C1 ON 2026-09-13, `GET /nodes/node-b/ceph/osd`. Six leaves, all `up` and `in`, Ceph\n * 20.2.2 tentacle:\n *\n * id name host device_class crush_weight reweight pgs status\n * 0 osd.0 node-d ssd 1.86299133300781 1 99 up\n * 5 osd.5 node-d ssd 1.86299133300781 1 94 up\n * 1 osd.1 node-c ssd 1.86299133300781 1 96 up\n * 4 osd.4 node-c ssd 1.81939697265625 1 97 up\n * 2 osd.2 node-b ssd 1.81939697265625 1 88 up\n * 3 osd.3 node-b ssd 1.81939697265625 1 105 up\n *\n * `{ node: 'node-b', osdid: 2, host: 'node-b', device_class: 'ssd' }` plans `noop` against that row.\n * That is the acceptance test this file was written to pass.\n *\n * ⚠️ EVERY OTHER COLUMN IS REPORTED AND NEVER COMPARED, FOR FOUR DIFFERENT REASONS. `pgs` is the\n * autoscaler's placement rather than anybody's declaration — MEASURED, it spans 88 to 105 across\n * six identical disks, and Ceph moves PGs whenever it rebalances. `crush_weight` is a FLOAT\n * derived from device size (MEASURED: 1.86299133300781), so comparing it is float equality\n * against a number Ceph recomputes on `crush reweight`. `reweight` is what\n * `reweight-by-utilization` writes, unasked. `status` and `in` are daemon state: an OSD that\n * flaps down while a node reboots would otherwise put work in the plan that no write this\n * provider owns could ever clear. Each of those is the forever-update this package has already\n * been bitten by, and each is out of `settled` below.\n *\n * ⚠️ THE CLUSTER'S OSD FLAGS ARE NOT AN ATTRIBUTE EITHER. The read carries\n * `\"flags\":\"sortbitwise,recovery_deletes,purged_snapdirs,pglog_hardlimit\"` NEXT TO the root\n * rather than inside any leaf: they describe the OSDMap, not this OSD. Recording them per-OSD\n * would rewrite all six resources' state the moment somebody set `noout` for ten minutes of\n * maintenance — the churn-that-reads-like-drift that keeps `digest` out of storage.ts.\n *\n */\nimport * as nodes from '@distilled.cloud/proxmox/nodes';\nimport * as Effect from 'effect/Effect';\nimport type { CephOsdProps } from './ceph-osd.ts';\nimport { runPve } from './distilled-pve.ts';\nimport { bool, int, num, text } from './values.ts';\n\n/** A CRUSH node. Buckets carry `children`; an OSD leaf carries `type: 'osd'`. */\ntype CrushNode = Record<string, unknown>;\n\nconst branches = (node: CrushNode): CrushNode[] =>\n (Array.isArray(node['children']) ? node['children'] : []).filter(\n (child): child is CrushNode => typeof child === 'object' && child !== null,\n );\n\n/**\n * Every OSD leaf under the tree root, at any depth.\n *\n * ⚠️ RECURSIVE BECAUSE THE TREE IS NOT THREE LEVELS DEEP BY LAW. C1 measures as\n * root(`default`) -> host(node-b|node-c|node-d) -> osd, but CRUSH admits datacenter, rack and chassis\n * buckets between them, and an OSD created outside a host bucket hangs off the root. Reaching\n * in as `root.children[].children[]` would read this cluster correctly and answer \"absent\" —\n * i.e. \"the replica is gone\" — on the first cluster that has a rack in it.\n *\n * ⚠️ THE OUTERMOST OBJECT IS NOT ITSELF A BUCKET. MEASURED: `root` is `{\"children\":[…],\"leaf\":0}`\n * with no `type` and no `name`; the bucket called `default` is its first child. So the walk\n * starts at `tree.root` and selects on `type === 'osd'` rather than assuming a shape.\n */\nexport const osdLeaves = (tree: CrushNode): CrushNode[] => {\n const root = tree['root'];\n const start: CrushNode = typeof root === 'object' && root !== null ? (root as CrushNode) : {};\n const walk = (node: CrushNode): CrushNode[] => [\n ...(node['type'] === 'osd' ? [node] : []),\n ...branches(node).flatMap(walk),\n ];\n return walk(start);\n};\n\n/**\n * The leaf for one OSD id, or undefined when nothing in the tree carries it.\n *\n * ⛔ `id` COMES BACK AS A STRING HERE AND AS AN INTEGER EVERYWHERE ELSE, which is the \"an id\n * returned one way and written another\" forever-diff in its most expensive form. MEASURED: the\n * leaf for osd.2 carries `\"id\":\"2\"` (and the host buckets carry `\"id\":\"-7\"`), while\n * `GET …/osd/2/metadata` carries `\"id\":2` and the `osdid` parameter on POST and DELETE is typed\n * integer. `'2' === 2` is false, so a provider comparing the raw value finds NOTHING, calls\n * every declared OSD absent — and, with a create path wired up, offers to build six OSDs over\n * six live disks. `int` from values.ts is the narrowing, and `Number.NaN` is the fallback\n * precisely because it equals nothing, id 0 included.\n *\n * ⚠️ FIRST MATCH WINS. OSD ids are unique cluster-wide, and PVE does not put the per-device-class\n * shadow buckets (`default~ssd`) in this tree — MEASURED: the whole tree is one `default` root,\n * three hosts, six leaves. If a future PVE did include them, taking the first match keeps the\n * answer stable instead of reporting drift depending on which copy was walked into first.\n */\nexport const findOsd = (tree: CrushNode, osdid: number) =>\n osdLeaves(tree).find((leaf) => int(leaf['id'], Number.NaN) === osdid);\n\nexport interface CephOsdAttributes {\n /** Normalised to an integer here even though the tree spells it `\"2\"`. */\n osdid: number;\n /** `osd.2` — how Ceph, the UI and every log line name it. */\n name: string;\n /** COMPARED, but only when `props.host` is declared. */\n host: string;\n /** COMPARED, but only when `props.device_class` is declared. */\n device_class: string;\n /**\n * ⚠️ REPORTED, NEVER COMPARED — `bluestore` on every live OSD and filestore has been gone for\n * years, so declaring it would add a field that cannot disagree. It is recorded because a\n * future objectstore change is exactly the kind of thing state should have caught in writing.\n */\n osdtype: string;\n /** ⚠️ REPORTED, NEVER COMPARED. Daemon state — see the second ⚠️ in the header. */\n status: string;\n /** ⚠️ REPORTED, NEVER COMPARED. Ceph itself sets this to 0 after `mon_osd_down_out_interval`. */\n in: boolean;\n /** ⚠️ REPORTED, NEVER COMPARED. A float Ceph recomputes; comparing it is a permanent diff. */\n crush_weight: number;\n /** ⚠️ REPORTED, NEVER COMPARED. `reweight-by-utilization` owns this number, not a declaration. */\n reweight: number;\n /** ⚠️ REPORTED, NEVER COMPARED. The autoscaler moves PGs between OSDs whenever it likes. */\n pgs: number;\n /** Device capacity in bytes. Stable per disk, and the honest answer to \"how big is this OSD\". */\n total_space: number;\n /** `20.2.2`. ⚠️ Reported, never compared — an upgrade is not this resource's drift. */\n ceph_version: string;\n}\n\n/**\n * One leaf, as the attributes a plan and the state store get to see.\n *\n * ⚠️ THE TELEMETRY IS DELIBERATELY DROPPED, NOT FORGOTTEN. The leaf also carries `bytes_used`,\n * `percent_used`, `apply_latency_ms` and `commit_latency_ms`. MEASURED, AND THE MEASUREMENT SAYS\n * THE OPPOSITE OF WHAT YOU WOULD EXPECT: across two reads minutes apart, all four were identical\n * on every OSD, and both latencies read 0 — C1 was idle, so nothing was caught in the act. That\n * these move is therefore REASONED, from what they count, not observed. Alchemy persists\n * attributes; on a cluster doing work, keeping them would rewrite all six resources' state on\n * every deploy and record a number that is stale by the time anybody reads it. What is kept is\n * what a human asking \"what is this replica, and is it healthy\" needs; it is not a metrics feed.\n *\n * ⚠️ `osdid` AND `name` ARE THE NORMALISED ID AND ITS SPELLING, taken from the leaf rather than\n * echoed from props, so that state records what the cluster said. They agree by construction\n * here — the leaf was found BY id — but echoing props into attributes is how a resource ends up\n * recording a declaration as though it were an observation.\n */\nexport const osdAttributes = (leaf: CrushNode, props: CephOsdProps): CephOsdAttributes => ({\n ceph_version: text(leaf['ceph_version_short']),\n crush_weight: num(leaf['crush_weight'], 0),\n device_class: text(leaf['device_class']),\n host: text(leaf['host']),\n in: bool(leaf['in']),\n name: text(leaf['name'], `osd.${String(props.osdid)}`),\n osdid: int(leaf['id'], props.osdid),\n osdtype: text(leaf['osdtype']),\n pgs: num(leaf['pgs'], 0),\n reweight: num(leaf['reweight'], 0),\n status: text(leaf['status']),\n total_space: num(leaf['total_space'], 0),\n});\n\n/**\n * The live OSD as attributes, or undefined.\n *\n * ★ IT LIVES HERE RATHER THAN IN ceph-osd.ts BECAUSE THE READ SIDE IS THIS FILE'S WHOLE JOB —\n * `findOsd` and `osdAttributes` are the two halves it composes, and keeping the caller beside\n * them is what let ceph-osd.ts come back under the 250-line cap when create and delete were\n * added.\n *\n * ★ MIGRATED OFF `client.ts`'s `pve()` ONTO `@distilled.cloud/proxmox`'s typed `nodes.\n * getNodeCephOsd` (2026-09-24, decision 43, 2c) — the tree endpoint, confirmed against\n * distilled's own schema to still answer `{flags?, root: unknown}`, matching the shape\n * `osdLeaves` already walks. ⛔ STILL NO `Effect.orElseSucceed` — the ⛔ on `handlers.read` in\n * ceph-osd.ts is unchanged and is still the reason: this path is a collection that always\n * exists while Ceph is installed, so a failure here is never \"the OSD is gone\" and must\n * propagate rather than fold. This is the one migrated Ceph family that does NOT match\n * ceph-pool-wire.ts's/ceph-fs-distilled.ts's single-fold shape, because it never had it.\n */\nexport const readOsd = (props: CephOsdProps) =>\n runPve(props.target, 'read', false, nodes.getNodeCephOsd({ node: props.node })).pipe(\n Effect.map((t) => {\n const leaf = findOsd(t as unknown as CrushNode, props.osdid);\n return leaf === undefined ? undefined : osdAttributes(leaf, props);\n }),\n );\n",
|
|
52
52
|
"/**\n * The two operations that change a disk: building an OSD and removing one.\n *\n * ★ SPLIT OUT OF ceph-osd.ts FOR THE 250-LINE CAP, and the seam is the honest one — this file is\n * everything that WRITES, and ceph-osd.ts is the declaration and the assertion. A reader asking\n * \"can this destroy my data\" has one file to read.\n *\n * ⛔ BOTH OF THESE ARE IRREVERSIBLE. `create` hands a block device to `ceph-volume lvm create`,\n * which zaps it; `delete` takes a replica out of a live pool and Ceph immediately begins\n * rewriting the missing copies across the remaining nodes. `Proxmox.CephOsd` therefore declares\n * `defaultRemovalPolicy: 'retain'`, so removing a declaration does NOT reach `destroyOsd` — a\n * caller opts in with `.pipe(RemovalPolicy.destroy())`.\n */\nimport * as nodes from '@distilled.cloud/proxmox/nodes';\nimport * as Effect from 'effect/Effect';\nimport { readOsd } from './ceph-osd-tree.ts';\nimport type { CephOsdProps } from './ceph-osd.ts';\nimport { guardForm } from './constraint-guard.ts';\nimport type { EndpointKey } from './constraints.ts';\nimport { runPve } from './distilled-pve.ts';\n\n/**\n * The vendor rules the create form is checked against at plan time.\n *\n * ⛔ DECLARED HERE RATHER THAN ON A SPEC BECAUSE THIS FAMILY HAS NO SPEC — `ceph-osd.ts` writes\n * all five handlers by hand (the ⛔ there says why), so it cannot inherit the shared guard and\n * would otherwise be the one family that writes to Ceph with nothing checking the body.\n * ⚠️ `dev` IS REQUIRED AND THE REFUSAL BELOW ALREADY COVERS IT, with a message about a missing\n * replica that is far more useful than `dev: required`. The table is still worth checking: it\n * also carries `db_dev_size` ≥ 1, `wal_dev_size` ≥ 0.5 and `osds-per-device` ≥ 1, and nothing\n * else in this package knows those numbers.\n * ⚠️ THERE IS NO UPDATE KEY: PVE registers no PUT under `ceph/osd`, and an OSD is not editable.\n */\nexport const OSD_CREATE_ENDPOINT: EndpointKey = 'pve:POST /nodes/{node}/ceph/osd';\n\nconst describe = (props: CephOsdProps) => `osd.${String(props.osdid)} on ${props.node}`;\n\n/**\n * The create body. ★ Exported so the constraint proof can run the REAL form.\n * ⚠️ `dev` is `string | undefined` on the props and non-optional here: `createOsd` refuses first.\n */\nexport const createOsdForm = (props: CephOsdProps, dev: string): Record<string, string> => ({\n dev,\n ...(props.device_class === undefined ? {} : { 'crush-device-class': props.device_class }),\n});\n\nexport const createOsd = Effect.fn(function* (news: CephOsdProps) {\n if (news.dev === undefined) {\n return yield* Effect.die(\n new Error(\n `${describe(news)}: no such OSD in the CRUSH tree, and no \\`dev\\` was declared. ` +\n 'Without a device this resource is an ASSERTION over an OSD that must already ' +\n 'exist. Declare `dev` to let it create one -- which WIPES that device -- or fix ' +\n 'the declaration; if the disk was there yesterday, a replica is missing and Ceph ' +\n 'is degraded.',\n ),\n );\n }\n const form = createOsdForm(news, news.dev);\n // ⛔ BEFORE THE POST, BECAUSE THE POST ZAPS A BLOCK DEVICE. A vendor rule broken here is worth\n // refusing at plan rather than discovering from a 400 after `ceph-volume` has run.\n yield* guardForm(OSD_CREATE_ENDPOINT, form, true);\n yield* runPve(\n news.target,\n 'provision',\n true,\n nodes.createNodeCephOsd({\n dev: news.dev,\n node: news.node,\n ...(news.device_class === undefined ? {} : { crush_device_class: news.device_class }),\n }),\n );\n const created = yield* readOsd(news);\n if (created === undefined) {\n return yield* Effect.die(\n new Error(\n `${describe(news)}: the create returned no error but osd.${String(news.osdid)} is ` +\n 'still absent. Ceph allocates OSD ids and cannot be told which to use, so it most ' +\n 'likely assigned a different number -- check `ceph osd tree`, and declare the id it ' +\n 'actually gave the device rather than deploying again.',\n ),\n );\n }\n return created;\n});\n\n/**\n * ⛔ REMOVING THE DECLARATION REMOVES THE ASSERTION, NOT THE REPLICA, AND THAT ASYMMETRY IS THE\n * POINT. `DELETE /nodes/{node}/ceph/osd/{osdid}` takes a replica out of a live pool — with\n * `nobackfill`/`norecover` unset, Ceph immediately starts rewriting the missing copies across\n * the two remaining nodes — and with `cleanup=1` it zaps the LVs as well. A stack file is\n * edited by people in a hurry; a disk is not a thing a deleted line gets to destroy. Take an\n * OSD out by hand, with the cluster healthy and `ceph -s` in front of you: `ceph osd out N`,\n * wait for the backfill to finish, then `pveceph osd destroy N`.\n *\n * ★ SO IT IS IMPLEMENTED, AND THE RESOURCE DEFAULTS TO `retain` INSTEAD. Removing a declaration\n * drops the state row and leaves the replica alone; a caller who really means it opts in with\n * `.pipe(RemovalPolicy.destroy())`. That is the same shape Terraform gives `prevent_destroy`,\n * and it beats a `delete` that silently does nothing — which is a lie to anyone reading the\n * plan.\n *\n * ⚠️ `cleanup` DEFAULTS TO FALSE, so the logical volumes survive and the disk can be re-added\n * without a rebuild. Ceph still starts backfilling the missing copies the moment the OSD goes.\n *\n * ⚠️ `cleanup` RIDES A DELETE BODY, ON `client.ts` AND ON DISTILLED ALIKE — PRE-EXISTING, NOT\n * INTRODUCED HERE. `client.ts`'s own `buildRequest` (client.ts) puts `form` in the body for\n * every method, DELETE included, and CHECKED against distilled's generated\n * `DeleteNodeCephOsdRequest`: `cleanup` carries no `T.Query()` annotation either, so it also\n * defaults to a body field. ceph-fs-wire.ts's own ⛔ (measured from PVE's `AnyEvent.pm`) is that\n * PVE's server never reads a body on DELETE — so `cleanup=1` was ALREADY silently ignored by\n * the live cluster before this migration, on the unmigrated code too. Migrating carries the\n * SAME behaviour forward exactly, byte-for-byte, rather than introducing a new gap; unlike\n * `Proxmox.CephFs`'s delete, this is not a reason to keep the call on the hand client. It has\n * zero practical effect today regardless, since the whole DELETE 403s for this package's\n * credential either way (the root-only ⛔ at the top of ceph-osd.ts) — flagged separately as a\n * pre-existing, out-of-scope bug worth its own fix (move `cleanup` into the query string, the\n * way `destroyPath` in ceph-fs-wire.ts already does).\n */\nexport const destroyOsd = (olds: CephOsdProps) =>\n runPve(\n olds.target,\n 'provision',\n true,\n nodes.deleteNodeCephOsd({\n node: olds.node,\n osdid: String(olds.osdid),\n ...(olds.cleanup === true ? { cleanup: '1' } : {}),\n }),\n );\n",
|
|
53
53
|
"/**\n * `Proxmox.CephPool` — a Ceph RADOS pool, declared. The richest Ceph family and the one a stack is\n * most likely to reach for, because every RBD disk in the cluster lives inside one.\n *\n * ⛔ IT DOES NOT USE `pveHandlers`, AND THE REASON IS MEASURED RATHER THAN STYLISTIC: THE READ AND\n * THE WRITES SIT AT DIFFERENT PATHS. `GET /nodes/{node}/ceph/pool/{name}` is `poolindex` and\n * answers `[{\"name\":\"status\"}]` — an INDEX OF CHILDREN, not the pool. The pool is one level\n * further down, at `.../status` (`getpool`), which accepts no PUT and no DELETE. Every handler\n * below is hand-written for that reason, on `client.ts` and now on distilled alike — acl.ts is\n * the precedent for hand-writing over the factory.\n *\n * ★ MIGRATED OFF `client.ts`'s generic `pve()` ONTO `@distilled.cloud/proxmox`'s typed\n * `nodes.getNodeCephPoolStatus`/`createNodeCephPool`/`putNodeCephPool`/`deleteNodeCephPool`/\n * `listNodeCephPool` (2026-09-24, decision 43's walk-down, 2c). `distilled-pve.ts`'s `runPve`\n * replaces `pve()`; `readPoolStatus` (ceph-pool-wire.ts) keeps the SAME single-fold shape this\n * family always had — see that file's own header for why this migration does not also add the\n * newer dual-path pattern `Proxmox.NodeNetwork` carries.\n *\n * ⛔ A CREATE FIRED AT A POOL THAT ALREADY EXISTS IS NOT A NO-OP, IT IS A PG MERGE — the second ⛔\n * in ceph-pool-form.ts has the evidence, and `confirmAbsent` below is the guard that stops it.\n *\n * ⛔ EVERY WRITE HERE IS A FORKED WORKER. createpool, setpool and destroypool each return a UPID\n * string, so HTTP 200 means \"the task started\" — an immediate read-back can see a pool that does\n * not exist yet, or values that have not landed. `settle` waits for the cluster to agree.\n *\n * ⛔ THE FOUR POOLS ON C1 INCLUDE CEPH'S OWN, AND NONE OF THEM MAY BE ADOPTED. Measured\n * 2026-09-13: `.mgr` (application `mgr`, created and owned by the manager daemons),\n * `cephfs-c1_data` and `cephfs-c1_metadata` (the two halves of the `cephfs-c1` filesystem —\n * destroying either destroys the filesystem), and `rbd-c1`, the rbd pool the guests sit on.\n * `list` answers empty like every resource in this package, so adoption stays an explicit act;\n * the `applications` attribute is reported so that a plan SHOWS which of those a declaration hit.\n *\n * ⚠️ DELETING A POOL DESTROYS EVERY OBJECT IN IT AND CEPH DOES NOT ASK TWICE. Neither `force` nor\n * `remove_storages` is ever sent, so PVE's refusal while a storage on the pool still lists RBD\n * images is left standing. That refusal does NOT cover an RBD user outside storage.cfg.\n *\n * ⚠️ PRIVILEGES, AND THE WRITE LANE IS A BIG ASK. Read is `Sys.Audit` OR `Datastore.Audit` on `/`\n * (PVEAuditor holds both, so the mount's `read` role covers read, diff and the guard). Create,\n * update and delete each check `Sys.Modify` on `/` — there is no `/ceph` object to scope to, so\n * granting it also buys datacenter options and every other cluster-wide write. Widen\n * deliberately, the way `Pool.Allocate` was widened for `Proxmox.Pool`.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as nodes from '@distilled.cloud/proxmox/nodes';\nimport * as Effect from 'effect/Effect';\nimport {\n type CephPoolAttributes,\n type CephPoolProps,\n createBody,\n hint,\n object,\n same,\n updateBody,\n} from './ceph-pool-form.ts';\nimport { confirmAbsent, settle } from './ceph-pool-settle.ts';\nimport {\n CEPH_POOL_CREATE,\n CEPH_POOL_UPDATE,\n readPoolStatus,\n toDistilledCreate,\n toDistilledUpdate,\n} from './ceph-pool-wire.ts';\nimport { guardWrite } from './distilled-guard.ts';\nimport { runPve } from './distilled-pve.ts';\nimport { type PveRequirements } from './resource.ts';\nimport { formToSend } from './update-guard.ts';\n\nexport type { CephPoolAttributes, CephPoolProps };\n\nexport interface ProxmoxCephPool extends Resource<\n 'Proxmox.CephPool',\n CephPoolProps,\n CephPoolAttributes,\n never,\n PveRequirements\n> {}\n\n/** ★ `retain` by default — a pool holding objects cannot be rebuilt. See the ★ in resource.ts. */\nexport const ProxmoxCephPool = Resource<ProxmoxCephPool>('Proxmox.CephPool', {\n defaultRemovalPolicy: 'retain',\n});\n\n/**\n * ⛔ DECLARING WHAT IS LIVE MUST PLAN noop, AND EVERY OMISSION HERE IS WHY. Out, each with its\n * reason on the prop it belongs to: `pg_num` (the autoscaler rewrites it), `application` (the\n * write only ever ADDS to a list), `target_size_ratio` (float equality), `id`, `applications`\n * and the three `no*` flags (PVE returns them and accepts none of them on write), `node` and\n * `name` (the address the read was made at — true by construction, never a diff). In, and each\n * measured to round-trip unchanged against C1's four pools on 2026-09-13: size 3, min_size 2,\n * pg_autoscale_mode `on`, crush_rule `replicated_rule`, pg_num_min where it is set (16 on\n * cephfs-c1_metadata, absent on rbd-c1), target_size in bytes — and each of the last two\n * through `hint`, which drops a declared zero for the reason given on it.\n */\nconst matches = (attributes: CephPoolAttributes, props: CephPoolProps) =>\n same(props.size, attributes.size, attributes.nosizechange) &&\n same(props.min_size, attributes.min_size, attributes.nosizechange) &&\n same(props.pg_autoscale_mode, attributes.pg_autoscale_mode) &&\n same(hint(props.pg_num_min), attributes.pg_num_min, attributes.nopgchange) &&\n same(props.crush_rule, attributes.crush_rule, attributes.crush_rule === '') &&\n same(hint(props.target_size), attributes.target_size);\n\nexport const ProxmoxCephPoolProvider = () =>\n Provider.effect(\n ProxmoxCephPool,\n Effect.succeed(\n ProxmoxCephPool.Provider.of({\n /** ⛔ Empty, and here it is what keeps `.mgr` and the two cephfs pools out — see the header. */\n list: () => Effect.succeed([]),\n read: ({ olds }) => readPoolStatus(olds),\n /**\n * ★ HAND-WRITTEN, matching the pre-migration `ops.diff` shape exactly (resource.ts) — this\n * family never used the factory's own `diff`/`reconcile` (only its `read`), and the\n * factory itself cannot run a distilled operation, so both are inlined here now.\n */\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n yield* guardWrite(CEPH_POOL_CREATE, createBody(news), output === undefined);\n yield* guardWrite(CEPH_POOL_UPDATE, updateBody(news), false);\n if (output === undefined) return undefined;\n const live = yield* readPoolStatus(news);\n if (live === undefined) {\n yield* guardWrite(CEPH_POOL_CREATE, createBody(news), true);\n return { action: 'update' } as const;\n }\n return matches(live, news)\n ? ({ action: 'noop' } as const)\n : ({ action: 'update' } as const);\n }),\n /**\n * ⚠️ NOT A GENERIC reconcile: it POSTs the moment a read comes back empty, and reads back\n * once, immediately. Both are wrong for a family whose writes are forked workers and whose\n * create is destructive against a pool that is already there.\n */\n reconcile: Effect.fn(function* ({ news }) {\n const live = yield* readPoolStatus(news);\n let upid: string | undefined;\n if (live === undefined) {\n // ⛔ THE GUARD A GENERIC reconcile WOULD HAVE RUN, RESTORED. This handler replaces it\n // wholesale, so without these two calls an ADOPTED pool — whose diff answer Alchemy\n // discards — would reach the cluster with nothing having checked its body.\n yield* guardWrite(CEPH_POOL_CREATE, createBody(news), true);\n yield* confirmAbsent(news, object(news));\n upid = yield* runPve(\n news.target,\n 'provision',\n true,\n nodes.createNodeCephPool(toDistilledCreate(news)),\n );\n } else {\n /**\n * ⛔ ONLY WHEN `matches` IS FALSE. This PUT used to fire whenever the pool existed, so\n * adopting a pool that already matched — Plan.ts forces reconcile after the probe —\n * sent `setpool` and forked a worker on the live cluster. PVE skipping the unchanged\n * settings (ceph-pool-form.ts) made it harmless to Ceph, not free: it is still a\n * provision-lease write and a task in the cluster's list. update-guard.ts has the rest.\n */\n const form = formToSend(matches, live, news, updateBody(news));\n if (form !== undefined) {\n yield* guardWrite(CEPH_POOL_UPDATE, updateBody(news), false);\n upid = yield* runPve(\n news.target,\n 'provision',\n true,\n nodes.putNodeCephPool(toDistilledUpdate(news)),\n );\n }\n }\n const after = yield* settle(\n news,\n readPoolStatus,\n (row) => row !== undefined && matches(row, news),\n );\n if (after === undefined || !matches(after, news)) {\n return yield* Effect.die(\n new Error(\n `${object(news)}: the write returned no error but the pool still does not match ` +\n `the declaration after 60s. PVE answered with task ${upid ?? '(none)'} -- read ` +\n 'its log with `pvesh get /nodes/<node>/tasks/<upid>/log` to see what Ceph ' +\n 'refused.',\n ),\n );\n }\n return after;\n }),\n /**\n * ⛔ THIS DESTROYS EVERY OBJECT IN THE POOL. No `force`, so PVE's own check — it refuses\n * while a PVE storage on this pool still lists RBD images — is left standing; and no\n * `remove_storages`, so a storage.cfg section pointing here survives and stays somebody's\n * to remove deliberately.\n * ⚠️ AND THE REFUSAL CAN ARRIVE AFTER THE RESPONSE, WHICH IS WHY THIS WAITS. The DELETE\n * forks a worker and answers 200 with a UPID, so mons running with\n * `mon_allow_pool_delete` false fail once the call has already returned. MEASURED on C1\n * 2026-09-13: the config-db value is false while the running mons report true, i.e. it is\n * set in ceph.conf and the two sources disagree by design.\n */\n delete: Effect.fn(function* ({ olds }) {\n yield* runPve(\n olds.target,\n 'provision',\n true,\n nodes.deleteNodeCephPool({ name: olds.name, node: olds.node }),\n );\n const left = yield* settle(olds, readPoolStatus, (row) => row === undefined);\n if (left !== undefined) {\n return yield* Effect.die(\n new Error(\n `${object(olds)}: the DELETE returned no error but the pool is still there after ` +\n '60s. Either a storage on it still holds RBD images, or the mons are running ' +\n 'with mon_allow_pool_delete false.',\n ),\n );\n }\n }),\n }),\n ),\n );\n",
|
|
54
54
|
"/**\n * What a Ceph pool IS as a declaration, and the two different forms PVE wants it in.\n *\n * ★ SPLIT OUT OF ceph-pool.ts TO KEEP BOTH FILES UNDER THE 250-LINE CAP, and the seam is\n * \"does this touch the cluster\" — the same one metric-server-form.ts draws, just with more on\n * this side because this family needs it. Here: the declared shape, the reported shape, and the\n * coercions that turn one into the other. There: reading C1, deciding a diff, and the four\n * handlers. Nothing in this file makes a call or decides an action.\n * ⚠️ THE PROPS LIVE HERE RATHER THAN IN THE RESOURCE FILE, which is the one place this pair\n * differs from metric-server / notification-target. There is no `import type` cycle back as a\n * result; ceph-pool.ts re-exports both interfaces so the public surface is unchanged.\n *\n * ⛔ POST AND PUT DO NOT TAKE THE SAME PARAMETERS, AND BOTH EXTRAS ARE DESTRUCTIVE. MEASURED from\n * the cluster's own schema (/usr/share/pve-docs/api-viewer/apidoc.js on node-b, pve-manager 9.2.11,\n * 2026-09-13): POST adds `add_storages` and `erasure-coding` to the shared set, PUT takes\n * neither. Both are refused below, so what is left between the two bodies is `name`, which PUT\n * reads from the path, and `pg_num`.\n *\n * ⛔ `pg_num` IS IN THE CREATE BODY AND NOT IN THE UPDATE BODY, AND THAT IS THE MOST IMPORTANT\n * LINE IN THIS FILE. MEASURED in PVE::API2::Ceph::Pool::createpool on node-b: a POST carrying no\n * `pg_num` gets 128 substituted (`$param->{pg_num} //= 128`), and PVE::Ceph::Tools::create_pool\n * then runs `osd pool create` — which Ceph answers with SUCCESS for a pool that already exists,\n * before applying the rest of the body to it. So a create fired at a live pool SETS its pg_num,\n * and lowering pg_num starts a PG MERGE: hours of backfill across every OSD, on a cluster whose\n * Ceph traffic shares vmbr1.42 with everything else. ceph-pool.ts guards the create for exactly\n * that reason; this half simply never offers pg_num to an update.\n */\nimport type { WithTarget } from './resource.ts';\nimport { csv } from './values.ts';\n\nexport interface CephPoolProps extends WithTarget {\n /**\n * ⚠️ WHICH NODE THE CALL GOES THROUGH, NOT WHERE THE POOL LIVES. A pool is cluster-wide: node-b and\n * node-c answer byte-identically for `rbd-c1` (measured). The endpoint is node-scoped only\n * because PVE talks to the local RADOS socket, so this is a door, not a location — it is never\n * compared, and moving a declaration from node-b to node-c plans noop. Point it at a node you expect\n * to be up: a node that is down makes the read fail, and a failed read reads as \"absent\".\n */\n node: string;\n /**\n * Ceph's primary key, cluster-wide.\n * ⛔ CHANGING IT DOES NOT RENAME ANYTHING. There is no rename in this API: the plan reads the new\n * name, finds nothing, and CREATES AN EMPTY POOL, leaving the old one and its data behind,\n * untracked. `replace` was considered and rejected — it would DELETE the old pool and every\n * image in it to satisfy an edited string. Rename by hand, deliberately, or not at all.\n */\n name: string;\n /** Replicas per object, 1-7. ⚠️ Frozen when the pool carries Ceph's `nosizechange`. */\n size?: number;\n /** Replicas required to accept writes, 1-7. ⚠️ Frozen by `nosizechange` too. */\n min_size?: number;\n /**\n * ⛔ CREATE-TIME ONLY, AND NEVER COMPARED — the single biggest noop hazard in this family. With\n * `pg_autoscale_mode` on or warn the autoscaler owns this number: MEASURED on C1, `rbd-c1`\n * sits at pg_num 128 while the autoscaler's own `pg_num_final` is 256, so a declaration\n * diffing it reports an update the moment Ceph decides to act. A split is gradual even with\n * the autoscaler off, and `nopgchange` can refuse the write outright — which kills the WHOLE\n * PUT, not just this field. Declare it as the birth size; steer it afterwards with\n * `pg_num_min`, or by hand.\n */\n pg_num?: number;\n /** The floor the autoscaler may not go below. Operator-owned and stable, so it IS compared. */\n pg_num_min?: number;\n /** ⚠️ PVE's create default is `warn`; Ceph's own is `on`, which is what all four C1 pools have. */\n pg_autoscale_mode?: 'off' | 'on' | 'warn';\n /**\n * The CRUSH rule BY NAME, e.g. `replicated_rule`.\n * ★ THE SUSPECTED INTEGER-VS-NAME TRAP IS REAL BUT NOT ON THE PATH THIS RESOURCE READS, AND THAT\n * IS MEASURED BOTH WAYS. `GET .../ceph/pool` (the collection) reports `crush_rule: 0` with the\n * name beside it in `crush_rule_name`; `GET .../ceph/pool/{name}/status` reports\n * `crush_rule: \"replicated_rule\"` — the same spelling POST and PUT accept. Reading the\n * collection instead would reintroduce the forever-diff in a single edit.\n */\n crush_rule?: string;\n /**\n * ⛔ CREATE-TIME ONLY, AND NEVER COMPARED. PVE's PUT turns this into\n * `osd pool application enable` (Tools.pm:250-255), which ADDS a tag and never removes one,\n * and Ceph refuses a second application without `--yes-i-really-mean-it` — so an update would\n * either leave the pool tagged twice or die, and comparing one declared string against the\n * LIST that comes back is the set-in-arbitrary-order forever-diff. The live list is reported\n * as `applications` instead.\n */\n application?: 'cephfs' | 'rbd' | 'rgw';\n /** Autoscaler size hint, ⚠️ IN BYTES — see the ⚠️ on `updateBody`. A `1T` string is not accepted. */\n target_size?: number;\n /**\n * Autoscaler share of total capacity, 0-1.\n * ⚠️ WRITTEN BUT NEVER DIFFED, because a float is not a safe equality: Ceph stores a double and\n * PVE prints about 15 significant digits, so a ratio that is not exactly representable would\n * report an update on every plan for a pool nobody touched.\n */\n target_size_ratio?: number;\n /**\n * ⛔ `never` ON PURPOSE, BOTH OF THEM, AND THE COMPILE ERROR IS THE FEATURE.\n * `erasure-coding` does not configure this pool — it makes PVE build TWO pools and name\n * neither of them what you declared: `<name>-data` for the EC data and `<name>-metadata` for\n * the replicated half (Pool.pm:517-530). Nothing would then exist at `{name}`, so every plan\n * would read absent and try to create it again, forever.\n * `add_storages` writes a section into storage.cfg that this graph does not own; declare a\n * `Proxmox.Storage` and pass this pool's `name` into it instead, which makes the link real.\n */\n 'erasure-coding'?: never;\n add_storages?: never;\n}\n\n/**\n * ⚠️ THE THREE `no*` FLAGS ARE REPORTED BECAUSE THEY EXPLAIN A REFUSAL. Ceph can freeze a pool's\n * size or its PG shape, and `set_pool` dies on the whole PUT when any one parameter will not\n * apply (Tools.pm:310). `matches` refuses to diff the fields they freeze, so these attributes\n * are the only place a plan can show WHY a declared size is not being enforced. All three read\n * false on all four C1 pools.\n * ⚠️ `pg_num`, `id` AND `applications` ARE REPORTED AND NEVER COMPARED — see the props above.\n * ⛔ NO `statistics` AND NO `autoscale_status`, though the verbose read returns both. They change\n * every few seconds; persisting them would rewrite this resource's state on every deploy and\n * read like drift. `UNSET` means the pool carries no value for that field.\n */\nexport interface CephPoolAttributes {\n name: string;\n /** The node the read went through. A debugging aid, not a property of the pool. */\n node: string;\n id: number;\n size: number;\n min_size: number;\n pg_num: number;\n pg_num_min: number;\n pg_autoscale_mode: string;\n /** ⚠️ Empty when PVE answered with a rule id instead of a name; `matches` then stops diffing it. */\n crush_rule: string;\n /** Sorted comma list, e.g. `rbd` or `cephfs`. Readable only under `?verbose=1`. */\n applications: string;\n target_size: number;\n target_size_ratio: number;\n nodelete: boolean;\n nopgchange: boolean;\n nosizechange: boolean;\n}\n\n/**\n * Where one pool is WRITTEN, and where a new one is POSTed.\n *\n * ⚠️ NEITHER IS WHERE IT IS READ — the read path is a segment longer and lives in ceph-pool.ts\n * next to the ⛔ that explains it. These two are here because a path is wire knowledge, and\n * because the create guard needs the collection without needing anything else from the spec.\n */\nexport const object = (props: CephPoolProps) => `nodes/${props.node}/ceph/pool/${props.name}`;\nexport const collection = (props: CephPoolProps) => `nodes/${props.node}/ceph/pool`;\n\n/**\n * ⚠️ \"NOT SET\" IS -1 AND NOT 0, for the reason metric-server-form.ts gives: `pg_num_min`,\n * `target_size` and `target_size_ratio` each take 0 as a REAL value meaning \"no floor, no hint\",\n * so a provider using 0 as its absent-marker cannot tell a declared zero from an undeclared\n * field. Every one of these is >= 0, so -1 sits outside all of their ranges.\n */\nexport const UNSET = -1;\n\n/** ⚠️ PVE returns the tags as an ARRAY in Ceph's order, so `csv` sorts before anything sees them. */\nexport const applications = (value: unknown) =>\n csv(Array.isArray(value) ? value.map((entry: unknown) => String(entry)) : []);\n\n/**\n * Declared? compare it. Undeclared, or frozen by a flag the pool carries? leave it alone.\n *\n * ⚠️ `frozen` IS THE WHOLE ANSWER TO \"A FIELD PVE WILL NOT ACCEPT ON WRITE\". Comparing one can only\n * plan an update that no write can satisfy: work reported on every run, forever.\n */\nexport const same = <T>(declared: T | undefined, live: T, frozen = false) =>\n declared === undefined || frozen || declared === live;\n\n/**\n * A declared autoscaler hint, or nothing when it is zero.\n *\n * ⚠️ A DECLARED ZERO IS \"NO FLOOR, NO HINT\", AND IT IS DELIBERATELY LEFT UNCOMPARED. REASONED, NOT\n * MEASURED: all four C1 pools carry null for both `pg_num_min` and `target_size`, and finding\n * out for certain would mean writing to the cluster. Ceph CLEARS both when they are set to 0 and\n * `osd pool get all` then omits the key, which PVE reports as null and this pair reads as UNSET\n * — so a declared 0 would compare 0 against -1 on every plan, forever. Mapping 0 to UNSET\n * instead would be a guess in the OTHER direction, and wrong the same way if Ceph does report\n * the zero. Neither guess is made: a zero is still written, and then left unmanaged exactly like\n * an undeclared field.\n */\nexport const hint = (value: number | undefined) => (value === 0 ? undefined : value);\n\n/** One optional field, present in the form only when it was declared. */\nconst field = (name: string, value: string | undefined): Record<string, string> =>\n value === undefined ? {} : { [name]: value };\n\n/** ⚠️ Not named `digits`: `target_size_ratio` is a fraction, and `String` is right for both. */\nconst numeric = (value: number | undefined) => (value === undefined ? undefined : String(value));\n\n/**\n * The PUT body: everything POST and PUT both accept, `pg_num` excepted. `createBody` builds on it,\n * the way storage.ts's `mutable` serves both of its forms. `name` is the path's last segment on an\n * update and is not repeated here.\n *\n * ⚠️ SAFE TO RE-APPLY TO A POOL THAT ALREADY MATCHES (reconcile leaned on it until update-guard.ts).\n * MEASURED in PVE::Ceph::Tools::set_pool (Tools.pm:293-300): it reads `osd pool get all` first\n * and SKIPS every unchanged setting, so the undrifted fields that ride along cost one mon read.\n * ⛔ BUT A SETTING THAT DID CHANGE AND CANNOT BE APPLIED KILLS THE WHOLE PUT. Tools.pm:310 dies\n * with \"Could not set: <fields>\" if any parameter is left unapplied, so a pool carrying Ceph's\n * `nosizechange` fails an entire update over one field. That is why the `no*` flags are reported\n * and why `matches` refuses to diff what they freeze.\n *\n * ⚠️ AN UNDECLARED FIELD IS NEITHER SENT NOR COMPARED — storage.ts's rule, and the opposite of\n * Proxmox.Pool's. Undeclared means UNMANAGED here, because a pool has no one set of defaults to\n * fall back on: PVE's POST fills in size 3, min_size 2, application rbd and pg_autoscale_mode\n * 'warn' (MEASURED in createpool), while Ceph's own defaults — which is what every pool on C1\n * was actually born with — put pg_autoscale_mode at 'on'. Guessing either set would rewrite a\n * pool somebody tuned by hand.\n *\n * ⛔ THERE IS NO `delete=` HERE AND THERE MUST NOT BE ONE. `setpool` is not a SectionConfig write:\n * it turns each parameter into an `osd pool set`, and Ceph has no \"unset\" for size, min_size or\n * crush_rule. metric-server-form.ts clears an undeclared optional because status.cfg supports\n * it; the same move here would send a parameter PVE has no verb for.\n *\n * ⚠️ `target_size` IS BYTES ON THE WIRE IN BOTH DIRECTIONS, WHICH IS WHY THE PROP IS A NUMBER AND\n * NOT PVE's `1T` STRING. MEASURED: the API parses the string with PVE::JSONSchema::parse_size\n * and stores Ceph's `target_size_bytes` (Pool.pm:474-477 for POST, 683-686 for PUT), and\n * `GET .../status` hands that integer back under the name `target_size` (Pool.pm:878). Run on\n * node-b, `parse_size('1099511627776')` returns 1099511627776 — bare digits are bytes, no\n * multiplier — so a byte count survives the round trip exactly, while a declared `1T` would read\n * back as 1099511627776 and diff against itself on every plan, forever.\n */\nexport const updateBody = (props: CephPoolProps): Record<string, string> => ({\n ...field('crush_rule', props.crush_rule),\n ...field('min_size', numeric(props.min_size)),\n ...field('pg_autoscale_mode', props.pg_autoscale_mode),\n ...field('pg_num_min', numeric(props.pg_num_min)),\n ...field('size', numeric(props.size)),\n ...field('target_size', numeric(props.target_size)),\n ...field('target_size_ratio', numeric(props.target_size_ratio)),\n});\n\n/**\n * The POST body.\n *\n * ⛔ `add_storages=0` IS SENT EXPLICITLY RATHER THAN LEFT OUT, AND THE DEFAULT IS NOT WHAT IT LOOKS\n * LIKE. MEASURED at Pool.pm:481 — `$add_storages = 1 if $ec && !defined($add_storages)` — so for\n * an erasure-coded pool PVE turns it ON when the parameter is absent. A pool created with it\n * writes a NEW SECTION INTO storage.cfg that this graph does not own: `Proxmox.Storage` would\n * not know about it, `alchemy destroy` would leave it behind, and the first person to notice\n * would be whoever found a storage nobody declared.\n */\nexport const createBody = (props: CephPoolProps): Record<string, string> => ({\n ...updateBody(props),\n ...field('application', props.application),\n ...field('pg_num', numeric(props.pg_num)),\n add_storages: '0',\n name: props.name,\n});\n",
|
|
55
|
-
"/**\n * Waiting for Ceph to finish, which is a concern of its own.\n *\n * ★ SPLIT OUT OF ceph-pool.ts FOR THE 250-LINE CAP, and the seam is real: every other PVE family\n * in this package writes and reads back in one breath, because PVE's config endpoints are\n * synchronous. Ceph's are not — a pool delete returns before the PGs are gone — so this file is\n * the polling that difference forces, and ceph-pool.ts is the declaration.\n */\nimport * as nodes from '@distilled.cloud/proxmox/nodes';\nimport * as Effect from 'effect/Effect';\nimport type { CephPoolAttributes, CephPoolProps } from './ceph-pool-form.ts';\nimport { runPve } from './distilled-pve.ts';\nimport type { PveRequirements } from './resource.ts';\n\n/**\n * ⚠️ THE DEPENDENCIES ARE PASSED IN RATHER THAN IMPORTED, and that is what made this file\n * separable at all. `ops.read` — now `readPoolStatus` (ceph-pool-wire.ts) — is a module-level\n * binding in ceph-pool.ts; importing it back would be a runtime cycle, and duplicating it would\n * be two definitions of one path. Passing it is the pattern zfs-pool-write.ts already uses.\n */\nexport type PoolRead = (\n props: CephPoolProps,\n) => Effect.Effect<CephPoolAttributes | undefined,
|
|
56
|
-
"/**\n * `Proxmox.CephPool`'s distilled wire lane: the status read, and the two request translations.\n *\n * ★ SPLIT OUT OF ceph-pool-form.ts FOR THE 250-LINE CAP (that file is already near it) — the seam\n * is \"touches the cluster or not\", the same one ceph-pool-form.ts itself draws against\n * ceph-pool.ts. Nothing in ceph-pool-form.ts changed: `createBody`/`updateBody` still build the\n * PVE form, unaware distilled exists: this file is the ONLY place that translates one into a\n * typed distilled request.\n *\n * ⛔
|
|
55
|
+
"/**\n * Waiting for Ceph to finish, which is a concern of its own.\n *\n * ★ SPLIT OUT OF ceph-pool.ts FOR THE 250-LINE CAP, and the seam is real: every other PVE family\n * in this package writes and reads back in one breath, because PVE's config endpoints are\n * synchronous. Ceph's are not — a pool delete returns before the PGs are gone — so this file is\n * the polling that difference forces, and ceph-pool.ts is the declaration.\n */\nimport * as nodes from '@distilled.cloud/proxmox/nodes';\nimport * as Effect from 'effect/Effect';\nimport type { CephPoolAttributes, CephPoolProps } from './ceph-pool-form.ts';\nimport { runPve } from './distilled-pve.ts';\nimport type { PveRequirements } from './resource.ts';\n\n/**\n * ⚠️ THE DEPENDENCIES ARE PASSED IN RATHER THAN IMPORTED, and that is what made this file\n * separable at all. `ops.read` — now `readPoolStatus` (ceph-pool-wire.ts) — is a module-level\n * binding in ceph-pool.ts; importing it back would be a runtime cycle, and duplicating it would\n * be two definitions of one path. Passing it is the pattern zfs-pool-write.ts already uses.\n * The error parameter preserves the reader's typed failures through settle; it is not `never`.\n */\nexport type PoolRead<E> = (\n props: CephPoolProps,\n) => Effect.Effect<CephPoolAttributes | undefined, E, PveRequirements>;\n\n/**\n * ⛔ THE GUARD ON THE CREATE. The original read folded 403s/timeouts into absence, so this\n * independent index check prevented creating over a live pool. The typed reader now\n * propagates those failures, but a `CephPoolNotFound` must still not override a listed pool:\n * the measured PG-merge risk warrants keeping both observations. Failed index reads also\n * propagate. An empty list is trusted: the collection refuses a narrow role with 403 rather\n * than filtering, so `[]` really does mean a cluster with no pools.\n *\n * ⚠️ `describe` IS STILL A PLAIN STRING (ceph-pool.ts builds it from `object`/`collection` in\n * ceph-pool-form.ts) — this function no longer takes a `collection` PATH, since\n * `nodes.listNodeCephPool` addresses the endpoint itself; the parameter list keeps `describe`\n * only, to name the object in the refusal message.\n */\nexport const confirmAbsent = (props: CephPoolProps, describe: string) =>\n runPve(props.target, 'read', false, nodes.listNodeCephPool({ node: props.node })).pipe(\n Effect.flatMap((rows) =>\n rows.some((row) => row.pool_name === props.name)\n ? Effect.die(\n new Error(\n `${describe}: the cluster lists this pool but its status could not be read, ` +\n 'so this deploy will NOT create over it. Check that the node is up and that the ' +\n 'read role holds Sys.Audit or Datastore.Audit on / -- a create here would apply ' +\n 'pg_num to a live pool and start a PG merge.',\n ),\n )\n : Effect.void,\n ),\n );\n\n/**\n * Wait for the cluster to agree, then answer the last thing it said.\n *\n * ★ IT POLLS `matches`, THE SAME PREDICATE `diff` USES, so \"settled\" has exactly one definition in\n * this file. Polling `/nodes/{node}/tasks/{upid}/status` instead would read the worker's own\n * exit status, but it needs `Sys.Audit` on the node for a token that is NOT the one that started\n * the task — every `pve` call mints a fresh token, so the task's owner check cannot pass.\n * ⚠️ SHORT POLLS, LOW CAP: 2s apart, 30 tries, about a minute. A pool create takes seconds; one\n * still unsettled after a minute is a fault to surface, not a wait to lengthen.\n */\nexport const settle = <E>(\n props: CephPoolProps,\n read: PoolRead<E>,\n done: (live: CephPoolAttributes | undefined) => boolean,\n) =>\n Effect.gen(function* () {\n for (let attempt = 0; attempt < 30; attempt += 1) {\n const live = yield* read(props);\n if (done(live)) return live;\n yield* Effect.sleep('2 seconds');\n }\n return yield* read(props);\n });\n",
|
|
56
|
+
"/**\n * `Proxmox.CephPool`'s distilled wire lane: the status read, and the two request translations.\n *\n * ★ SPLIT OUT OF ceph-pool-form.ts FOR THE 250-LINE CAP (that file is already near it) — the seam\n * is \"touches the cluster or not\", the same one ceph-pool-form.ts itself draws against\n * ceph-pool.ts. Nothing in ceph-pool-form.ts changed: `createBody`/`updateBody` still build the\n * PVE form, unaware distilled exists: this file is the ONLY place that translates one into a\n * typed distilled request.\n *\n * ⛔ ONLY TYPED ABSENCE MAY REACH A CREATE. The transport migration deliberately preserved\n * `pveOperations.read`'s catch-all `Effect.orElseSucceed(() => undefined)` to avoid changing\n * behavior during the swap. That also hid refused credentials and transient failures, risking\n * a false update/create. SDK PR #265 added the measured `CephPoolNotFound` tag; the follow-up\n * now catches only it. One reader serves read/diff/reconcile/settle, so all propagate other\n * failures. `confirmAbsent` still checks the index before create: a missing status alone must\n * never override a pool that the index lists (the PG-merge incident, ceph-pool-settle.ts).\n */\nimport * as nodes from '@distilled.cloud/proxmox/nodes';\nimport * as Effect from 'effect/Effect';\nimport { runPve } from './distilled-pve.ts';\nimport {\n type CephPoolAttributes,\n type CephPoolProps,\n UNSET,\n applications,\n createBody,\n updateBody,\n} from './ceph-pool-form.ts';\nimport { bool, int, num, text } from './values.ts';\n\n/**\n * One status answer as attributes, or `undefined` for the index-trap shape — the same defensive\n * check ceph-pool.ts's pre-migration `attributes` carried, kept even though a well-formed\n * distilled decode should never hand this function anything else: `GetNodeCephPoolStatusResponse`\n * declares `name` required, so a response shaped like the INDEX (an array) fails the Schema decode\n * before this runs at all. Left in as the same fail-safe rather than trusting that alone.\n *\n * ⚠️ `live` IS CAST PAST `GetNodeCephPoolStatusResponse`'s OWN TS TYPE, the same measured reason\n * node-network-wire.ts's `attributesOf` casts past `GetNodeNetworkResponse`: Effect Schema's\n * structural (non-exact) decode does not strip fields the declared type omits, and the live\n * probe below (2026-09-24) showed extra fields (`statistics`, `autoscale_status`) surviving.\n */\nconst attributesOf = (live: unknown, props: CephPoolProps): CephPoolAttributes | undefined => {\n const row = live as Record<string, unknown>;\n if (typeof row['name'] !== 'string') return undefined;\n return {\n applications: applications(row['application_list']),\n crush_rule: text(row['crush_rule']),\n id: int(row['id'], UNSET),\n min_size: int(row['min_size'], UNSET),\n name: props.name,\n node: props.node,\n nodelete: bool(row['nodelete']),\n nopgchange: bool(row['nopgchange']),\n nosizechange: bool(row['nosizechange']),\n pg_autoscale_mode: text(row['pg_autoscale_mode']),\n pg_num: int(row['pg_num'], UNSET),\n pg_num_min: int(row['pg_num_min'], UNSET),\n size: int(row['size'], UNSET),\n target_size: int(row['target_size'], UNSET),\n target_size_ratio: num(row['target_size_ratio'], UNSET),\n };\n};\n\n/**\n * The live pool, or `undefined` only for the SDK's measured `CephPoolNotFound`. The initial\n * transport swap preserved `ops.read`'s catch-all fold; the 2026-09-24 follow-up removes that ambiguity.\n * Read, reconcile and settle now propagate every other failure instead of assuming absence.\n *\n * ⛔ `verbose=1` IS WHAT MAKES `applications` VISIBLE AT ALL — ceph-pool.ts's own header has the\n * measured reason and the cost (two extra, unguarded mon commands PVE runs to answer it).\n */\nexport const readPoolStatus = (props: CephPoolProps) =>\n runPve(\n props.target,\n 'read',\n false,\n nodes.getNodeCephPoolStatus({ name: props.name, node: props.node, verbose: '1' }),\n ).pipe(\n Effect.map((live) => attributesOf(live, props)),\n Effect.catchTag('CephPoolNotFound', () => Effect.succeed(undefined)),\n );\n\n/** The two endpoints, as the keys `guardWrite` (distilled-guard.ts) checks both forms against. */\nexport const CEPH_POOL_CREATE = 'pve:POST /nodes/{node}/ceph/pool';\nexport const CEPH_POOL_UPDATE = 'pve:PUT /nodes/{node}/ceph/pool/{name}';\n\n/** The actual `createNodeCephPool` call body — `createBody`, translated. No field is renamed. */\nexport const toDistilledCreate = (props: CephPoolProps): nodes.CreateNodeCephPoolRequest =>\n ({\n ...createBody(props),\n node: props.node,\n }) as unknown as nodes.CreateNodeCephPoolRequest;\n\n/** The actual `putNodeCephPool` call body — `updateBody`, translated. No field is renamed. */\nexport const toDistilledUpdate = (props: CephPoolProps): nodes.PutNodeCephPoolRequest =>\n ({\n ...updateBody(props),\n name: props.name,\n node: props.node,\n }) as unknown as nodes.PutNodeCephPoolRequest;\n",
|
|
57
57
|
"/**\n * `Proxmox.FirewallAlias` — a named network the cluster firewall can be written in terms of.\n *\n * ★ WHY THIS FAMILY AND NOT FIREWALL RULES, WHICH IS THE ONE EVERYONE REACHES FOR FIRST. A rule is\n * addressed BY POSITION — `/cluster/firewall/rules/{pos}` — so inserting a rule renumbers every\n * rule below it. A position-keyed resource therefore RETARGETS ITSELF at somebody else's rule the\n * moment anything is inserted above it, and it does so while the plan looks clean: the path still\n * resolves, the read still succeeds, the diff is simply computed against the wrong object.\n * Aliases, ipsets and security groups are the firewall objects with STABLE IDENTITY — a name, not\n * an index — and they are the ones worth declaring. Rules belong in this package only once\n * somebody models the whole ordered list as ONE resource, which is a different shape from\n * `PveSpec` and should look different.\n *\n * ★ AND THE ALIAS IS THE PIECE THAT EARNS THE MOST BY BEING DECLARED. `10.1.0.0/16` spelled into\n * nine rules is nine places to edit and one to forget; `HomeLan` spelled into nine rules is one\n * place, resolved by PVE at compile time. The alias is the object that has to be right.\n *\n * ⛔ PVE REWRITES THE CIDR ON READ, AND THAT IS THE FOREVER-DIFF THIS RESOURCE IS SHAPED AROUND.\n * A declared `10.1.1.5/32` reads back as `10.1.1.5`. `cidr()` in `firewall-alias-form.ts` applies\n * exactly the cluster's own transformation to BOTH sides and carries the measurements; read that\n * comment before touching either side of `matches` below.\n *\n * ⛔ `ipversion` IS RETURNED BY THE READ AND REFUSED BY EVERY WRITE. `parse_alias` derives it from\n * the address and `read_alias` hands the parsed entry straight back, while POST and PUT declare\n * `additionalProperties: 0` with no such parameter — sending it is a 400, not an ignored hint. It\n * is REPORTED as an attribute so a plan can say whether an alias is v4 or v6, and kept OUT of\n * `matches`, exactly like `pool.members` and `user.tokens`.\n *\n * ⚠️ `digest` NEVER REACHES THIS PROVIDER, which is a better answer than keeping it out of\n * `matches`. The LIST read runs its entries through `copy_list_with_digest` and stamps one — and\n * it changes whenever ANYTHING else in the firewall config changes, so a resource that stored it\n * would diff on a rule somebody else edited. The SINGLE-OBJECT read this resource uses returns\n * `$aliases->{$name}` raw, with no digest in it at all. None is sent on write either:\n * `PVE::Tools::assert_if_modified` skips the comparison when either side is undef, and the API\n * handler already holds `lock_clusterfw_conf(10, ...)` for the whole read-modify-write. So\n * declining optimistic locking buys last-writer-wins between two concurrent editors, not a torn\n * file — and the alternative, storing a cluster-wide digest per alias, buys a permanent diff.\n *\n * ⚠️ THE NAME IS CASE-FOLDED FOR IDENTITY AND PRESERVED FOR DISPLAY, which reads as a bug until you\n * see both halves. The config is keyed `$aliases->{lc($data->{name})}` while the entry stores the\n * name as written, and the item GET lowers its path segment too — so `homelan` and `HomeLan` are\n * ONE alias, reachable by either spelling. `name` is therefore reported from the live config and\n * kept OUT of `matches`: rewriting an alias to change its capitalisation is a cosmetic write to\n * the file every node recompiles its firewall from.\n * ⛔ AND TWO DECLARATIONS DIFFERING ONLY IN CASE ARE THE SAME OBJECT, which is the `acl.ts`\n * hazard again. Alchemy sees two resource ids, the cluster sees one alias, and deleting either\n * takes it away from both.\n *\n * ⚠️ A RENAME IS MODELLED AS A REPLACE, NOT AS AN UPDATE, AND THE REJECTED OPTION WAS REAL. PVE's\n * PUT does take a `rename` parameter and Alchemy's `reconcile` does receive `olds`, so an\n * in-place rename was available. It was rejected because using it means hand-writing `reconcile`\n * as well as `diff` and branching on four states — old present or absent, new present or absent —\n * each branch a fresh way to write the wrong object, and all of it to buy only the gap between\n * the create and the delete. What a rename must NOT be is silent, which is what the factory alone\n * would make it: the read at the NEW path answers absent, `diff` says update, reconcile POSTs a\n * SECOND alias, and the old one stays in `cluster.fw` with its old CIDR — still resolving in\n * every rule that names it, and invisible to every later plan. `diff` below says `replace`.\n * ⚠️ CREATE-FIRST, as Alchemy defaults and as `acl.ts` argues: the new alias exists before the\n * old one goes, so a rules change can be sequenced between the two generations.\n *\n * ⚠️ PRIVILEGES, AND FOR ONCE NOTHING NEEDS WIDENING. MEASURED 2026-09-13 from the cluster's own\n * schema and its live ACL: the item GET checks `[\"perm\",\"/\",[\"Sys.Audit\"]]`, POST/PUT/DELETE\n * check `[\"perm\",\"/\",[\"Sys.Modify\"]]`, `hf-read@pve` holds `PVEAuditor` at `/` with propagate and\n * `hf-provision@pve` holds the provision role (provision-baseline.ts) at `/` with propagate. Both privileges are already\n * held, so `readRole` stays the default `read` lane — unlike storage/sdn-zone/sdn-vnet, whose\n * ITEM reads are gated on an allocate privilege the auditor cannot have.\n * ⚠️ `Sys.Modify` ON `/` IS STILL A BIG HAMMER — it is the same grant `metric-server.ts` warns\n * about, and there is no `/firewall` object to scope a narrower role to.\n *\n * ⚠️ DELETION IS FULLY IMPLEMENTED AND THE DEFAULT POLICY IS DELIBERATELY NOT `retain`. The ★ in\n * `resource.ts` reserves `retain` for objects whose CONTENTS cannot be rebuilt from a line of\n * TypeScript; an alias is a name, a CIDR and a comment, all three of them in the declaration, so\n * recreating one is exact and free. The real hazard is referential — PVE checks nothing before\n * removing an alias, and a rule naming a removed one fails to compile — and `retain` would not\n * fix that, it would only leave an undeclared alias on the cluster forever. Sequence the rules,\n * or pipe `RemovalPolicy.retain()` at the declaration site where the reason is visible.\n *\n * ⚠️ `local_network` IS THE ONE ALIAS NAME WITH CLUSTER-WIDE MEANING. `compile_ipsets` reads\n * `aliases->{local_network}` to decide what the `management` ipset covers, and SYNTHESISES one\n * from the node's own subnet when it is missing — in memory, never written back to the file.\n * Declaring it is stable, because PVE leaves a present one alone. DELETING it hands that decision\n * silently back to autodetection, which is drift no plan will ever show.\n *\n * ⚠️ NO SECRET LIVES IN THIS FAMILY, so nothing here has to be typed `never` to keep it out of\n * Alchemy's unencrypted state the way `metric-server.ts` does with its `token`. A name, a CIDR and\n * a free-text comment are the whole object, and all three are the declaration's own values read\n * back — not a credential held by the cluster.\n *\n * ⚠️ ACCEPTANCE, STATED HONESTLY: `GET /cluster/firewall/aliases` ANSWERS `[]` ON THIS CLUSTER and\n * the cluster firewall is disabled, so there was no live alias to declare and NO create/plan/noop\n * round trip was run. What is measured is the published schema, the API module's Perl, and the\n * cluster's own `parse_alias` exercised on sample lines. Whoever declares the first alias should\n * confirm the SECOND plan says noop before trusting this file.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { body, cidr, comment, fold } from './firewall-alias-form.ts';\nimport { type PveRequirements, type WithTarget, pveHandlers } from './resource.ts';\nimport { int, text } from './values.ts';\n\nexport interface FirewallAliasProps extends WithTarget {\n /**\n * PVE's `pve-fw-alias`: a letter, then at least one more of letter/digit/`-`/`_`, to 64 chars.\n * ⚠️ IDENTITY, CASE-INSENSITIVELY — see the ⚠️ on folding in the header. A two-character minimum\n * is real: a one-letter name is refused by the pattern, not silently accepted.\n */\n name: string;\n /**\n * An IP or a network, e.g. `10.1.0.0/16`, `10.1.1.5`, `2001:db8::/32`.\n * ⚠️ A `/32` (or `/128`) SUFFIX IS DROPPED BY PVE AND BY `cidr()` ALIKE, so declaring one is\n * harmless — it simply is not what comes back. Anything `parse_ip_or_cidr` refuses is a 400.\n */\n cidr: string;\n /**\n * Free text, stored as a trailing `#` comment on the alias's line in `cluster.fw`.\n * ⚠️ TRIMMED, AND A LINE FEED IS REFUSED. A comment of exactly `0` cannot be stored at all — the\n * ⛔ in `firewall-alias-form.ts` measures why, and why declaring one plans as noop.\n */\n comment?: string;\n}\n\nexport interface FirewallAliasAttributes {\n /** The spelling held in `cluster.fw`, which need not be the declared one. Never compared. */\n name: string;\n /** Normalised the way PVE normalises it, so it is comparable with a declaration. */\n cidr: string;\n comment: string;\n /**\n * 4 or 6, derived by PVE from the address. Reported so a plan can show which stack an alias\n * covers; never compared, because no write accepts it.\n */\n ipversion: number;\n}\n\nexport interface ProxmoxFirewallAlias extends Resource<\n 'Proxmox.FirewallAlias',\n FirewallAliasProps,\n FirewallAliasAttributes,\n never,\n PveRequirements\n> {}\n\nexport const ProxmoxFirewallAlias = Resource<ProxmoxFirewallAlias>('Proxmox.FirewallAlias');\n\nconst handlers = pveHandlers<FirewallAliasProps, FirewallAliasAttributes>({\n /**\n * ⚠️ AN ENTRY WITH NO CIDR IS NOT AN ALIAS. `read_alias` raises for a name it does not hold, so\n * absence normally arrives as a failed call the factory folds into `undefined`; this guard\n * covers the other shape — a 200 carrying something that is not an alias — rather than\n * recording state for an object with an empty address. The next reconcile then POSTs and PVE\n * answers \"alias already exists\", which is loud and points at the read.\n */\n attributes: (live, props) => {\n const address = cidr(live['cidr']);\n return address === ''\n ? undefined\n : {\n cidr: address,\n comment: comment(live['comment']),\n ipversion: int(live['ipversion'], 0),\n /** ⚠️ FROM THE CLUSTER, falling back to props: the stored spelling is the interesting one. */\n name: text(live['name'], props.name),\n };\n },\n collection: () => 'cluster/firewall/aliases',\n createForm: (props) => ({ ...body(props), name: props.name }),\n /**\n * ⚠️ EXACTLY THE TWO FIELDS A PUT CAN PUT BACK, both sides through the same normalisers. `name`\n * is identity and case-only drift (see the header); `ipversion` is derived and unwritable.\n * Comparing either would report an update that no update can settle.\n */\n /** The vendor rules these forms are checked against at plan time — resource-spec.ts. */\n endpoint: {\n create: 'pve:POST /cluster/firewall/aliases',\n update: 'pve:PUT /cluster/firewall/aliases/{name}',\n },\n matches: (attributes, props) =>\n attributes.cidr === cidr(props.cidr) && attributes.comment === comment(props.comment),\n /**\n * ⚠️ UNESCAPED ON PURPOSE: `pve-fw-alias` admits only `[A-Za-z][A-Za-z0-9\\-\\_]+`, so there is no\n * character here that a URL would need to encode, and PVE lowercases the segment on arrival.\n */\n path: (props) => `cluster/firewall/aliases/${props.name}`,\n updateForm: body,\n});\n\n/**\n * ⛔ ONE HANDLER IS OVERRIDDEN AND THE REST COME FROM THE FACTORY, for the reason `acl.ts` spells\n * out at length: the factory answers `replace` only for an object with no update path, and this\n * one has a PUT. Left to delegate, a changed `name` would read absent at the new path, plan as an\n * update, and quietly leave the old alias behind. Everything else — the empty `list`, the read,\n * the read-back-guarded reconcile, the delete — is the factory's, unchanged.\n */\nexport const ProxmoxFirewallAliasProvider = () =>\n Provider.effect(\n ProxmoxFirewallAlias,\n Effect.succeed(\n ProxmoxFirewallAlias.Provider.of({\n ...handlers,\n diff: Effect.fn(function* ({ news, output }) {\n // ⚠️ `isResolved` FIRST: at plan time `news.name` can still be an unresolved Output, and\n // folding a placeholder would report a replace nobody asked for — the worst possible\n // false positive on this family, since a replace here DELETES an alias.\n if (output !== undefined && isResolved(news) && fold(news.name) !== fold(output.name)) {\n return { action: 'replace' } as const;\n }\n return yield* handlers.diff({ news, output });\n }),\n }),\n ),\n );\n",
|
|
58
58
|
"/**\n * A firewall alias on the wire: what PVE stores, and what it quietly changes on the way.\n *\n * ★ SPLIT OUT OF firewall-alias.ts TO KEEP BOTH FILES UNDER THE 250-LINE CAP, and the seam is the\n * same one metric-server.ts and node-network.ts cut: this file answers \"what does the cluster do\n * to a value\", firewall-alias.ts answers \"what is an alias and when has it changed\". Nothing here\n * reads the cluster and nothing here decides a diff.\n *\n * ⛔ THE PUT IS A FULL REPLACE, WHICH IS THE EXACT INVERSE OF metric-server.ts — DO NOT COPY THAT\n * FILE'S RULE OVER HERE. A metric server is a SectionConfig section and a PUT merges into it, so\n * an omitted field SURVIVES and a managed optional needs a matching `delete=` or it can never be\n * cleared. An alias is not: `update_alias` builds `$data = { name, cidr }`, adds `comment` only\n * when it is truthy, and assigns the whole hash over the old one. So an omitted `comment` is\n * CLEARED here, there is no `delete` parameter on this endpoint at all, and sending\n * `comment=''` would be a second spelling of the same thing.\n *\n * ⚠️ THE SAME REPLACE MAKES `cidr` REQUIRED ON EVERY UPDATE. PVE's PUT schema does not mark it\n * optional, and the Perl would build an entry with an undefined cidr if it could — so `body`\n * below sends it on update as well as on create, rather than treating it as \"only send what\n * changed\".\n */\nimport type { FirewallAliasProps } from './firewall-alias.ts';\nimport { text } from './values.ts';\n\n/**\n * The alias key, as PVE computes it.\n *\n * ⚠️ EVERY ENTRY POINT LOWERS THE NAME AND NOTHING LOWERS THE STORED ONE: create, read, update and\n * delete all start `my $name = lc($param->{name})`, while the entry keeps `name => $param->{name}`\n * as written. So this is identity, and the stored spelling is decoration. Used by `diff` to tell\n * an edit from a different alias — a comparison of the raw names would call a re-capitalisation a\n * replace, and delete an alias to put back the same one.\n */\nexport const fold = (name: string) => name.trim().toLowerCase();\n\n/**\n * A CIDR reduced to the one form PVE will hand back.\n *\n * ⛔ MEASURED by running the cluster's own `PVE::Firewall::parse_alias` on node-b (pve-manager 9.2.11,\n * 2026-09-13) — a pure function over a string, no config read and none written:\n * `10.1.1.5/32` -> `10.1.1.5` a /32 host suffix is STRIPPED\n * `2001:0DB8::1/128`-> `2001:0DB8::1` a /128 is stripped, and the case is NOT folded\n * `2001:db8::/32` -> `2001:db8::/32` a /32 on IPv6 is a real prefix and SURVIVES\n * `parse_ip_or_cidr` is where it happens: `s|/32$||` under the IPv4 branch and `s|/128$||` under\n * the IPv6 one. Unmatched, a declared `10.1.1.5/32` reads back as `10.1.1.5` and reports an\n * update on every plan for the rest of time, each deploy writing back a value it already holds.\n *\n * ⛔ SO THE STRIP IS VERSION-AWARE, AND AN UNCONDITIONAL `/32` WOULD CORRUPT THE COMPARISON. A\n * colon cannot appear in an IPv4 address and must appear in an IPv6 one, which is the whole\n * discriminator PVE's own two regexes come down to here. Reading `2001:db8::/32` as\n * `2001:db8::` would make a /32 prefix compare equal to a single host.\n *\n * ⚠️ AND IT STOPS THERE, ON PURPOSE. PVE does not lowercase, zero-pad or compress an IPv6 literal,\n * so neither may this: it stores what it was handed and gives that back, which means any spelling\n * is stable once written. Canonicalising further would make `matches` call two DIFFERENT stored\n * strings equal and report noop over real drift — the same lie as missing a rewrite, pointed the\n * other way.\n */\nexport const cidr = (value: unknown) => {\n const raw = text(value).trim();\n const host = raw.includes(':') ? '/128' : '/32';\n return raw.endsWith(host) ? raw.slice(0, -host.length) : raw;\n};\n\n/**\n * A comment reduced to the one form PVE will hand back.\n *\n * ⚠️ AN ALIAS COMMENT IS A TRAILING `#` ON ITS LINE IN `cluster.fw`, AND THE ROUND TRIP TRIMS IT.\n * MEASURED with the same parser run: `Cmt 10.2.0.0/16 # spaced comment ` comes back as\n * `spaced comment`. `parse_alias` strips the surrounding whitespace (`s/\\s*#\\s*(.*?)\\s*$//`) and\n * `format_aliases` refuses to write a blank one at all, so an untrimmed declaration would diff\n * against its own stored form forever.\n *\n * ⛔ A COMMENT OF EXACTLY `0` CANNOT BE STORED, AND READING THAT AS DRIFT WOULD LOOP FOREVER.\n * MEASURED: `Zero 10.3.0.0/16 # 0` parses to an entry with NO comment key. Both the create and\n * the update guard with Perl's `if $param->{comment}`, and `'0'` is false in Perl — so the string\n * is dropped before it ever reaches the file, on write as well as on read. Folded to `''` here\n * because that is what the cluster will do with it: a declaration asking for something PVE will\n * not keep should plan as noop and be documented, not diff on every plan and be unfixable by the\n * very PUT the diff asks for.\n *\n * ⚠️ A LINE FEED IS A 400, NOT A TRUNCATION. `pve_fw_verify_comment_spec` dies with \"comment must\n * not contain a line feed\", which is the honest answer and is left to PVE rather than silently\n * flattened here — flattening would store something the declaration did not say.\n */\nexport const comment = (value: unknown) => {\n const trimmed = text(value).trim();\n return trimmed === '0' ? '' : trimmed;\n};\n\n/**\n * Everything mutable, in the form PVE wants. Create adds `name`; update sends exactly this.\n *\n * ⚠️ `name` IS NOT SENT ON UPDATE BECAUSE IT IS ALREADY THE LAST SEGMENT OF THE PATH BEING PUT TO,\n * and a second copy can only disagree with it — the same reasoning metric-server.ts gives for\n * omitting its `id`. PVE takes the path segment as `$param->{name}` and writes it back as the\n * stored spelling, so a PUT for any other reason also re-capitalises the entry to match the\n * declaration. That is a side effect worth knowing about and not worth causing on its own.\n *\n * ⚠️ THE NORMALISED CIDR IS WHAT GETS WRITTEN, NOT THE DECLARED SPELLING. PVE stores the parameter\n * verbatim into `cluster.fw` and only strips the host suffix when it reads the file back, so\n * sending `10.1.1.5` rather than `10.1.1.5/32` leaves the file saying exactly what the next read\n * will answer. Both settle; this one leaves no pair of values that merely happen to agree.\n *\n * ⚠️ `rename` IS DELIBERATELY ABSENT — see the ⚠️ on renames in firewall-alias.ts. A `rename` in\n * this form would be a second, invisible identity for the object, set from a field the resource\n * does not have.\n */\nexport const body = (props: FirewallAliasProps): Record<string, string> => {\n const note = comment(props.comment);\n return { cidr: cidr(props.cidr), ...(note === '' ? {} : { comment: note }) };\n};\n",
|
|
59
59
|
"/**\n * `Proxmox.Group` — a PVE group: a name, a comment, and the set of users PVE hangs off it.\n *\n * ★ DECLARING `hf-mint` IS THE WHOLE POINT OF THIS FAMILY. `mint@pve` holds the `MintTokens` role\n * ON THE PATH `/access/groups/hf-mint` — measured from `GET /access/acl`, 2026-09-13 — which is\n * what confines the OpenBao proxmox engine to minting inside that one group. The group is the\n * fence around the credential every other resource in this package runs on, and until now it was\n * something a human typed on a node once. `user.ts` calls that account the branch it sits on;\n * this is the branch's other end.\n *\n * ⛔ MEMBERSHIP IS NOT SETTABLE HERE, SO IT IS REPORTED AND NEVER DIFFED. Measured from the\n * cluster's own schema: `POST /access/groups` and `PUT /access/groups/{groupid}` each accept\n * EXACTLY `groupid` and `comment`, both with `additionalProperties: 0`. There is no members\n * parameter to send. Membership is written from the other side — the `groups` field on each\n * USER, which `user.ts` already owns — so `members` below is an attribute, out of `matches`,\n * exactly like `pool.members` and `user.tokens`. Declared here it would be a diff that no write\n * in this file could ever settle.\n *\n * ⛔ THE INDEX AND THE ITEM DISAGREE ABOUT BOTH THE NAME AND THE TYPE, and this file reads only the\n * item. MEASURED against node-b, 2026-09-13:\n * GET /access/groups -> [{\"groupid\":\"hf-mint\",\"comment\":\"…\",\n * \"users\":\"hf-provision@pve,hf-read@pve\"}, …]\n * GET /access/groups/hf-mint -> {\"comment\":\"…\",\"members\":[\"hf-provision@pve\",\"hf-read@pve\"]}\n * The index says `users` and hands back a COMMA STRING; the item says `members` and hands back an\n * ARRAY. distilled's generator reflects the SAME split (`GetAccessGroupResponse.members: string[]`\n * vs `ListAccessGroupsResponseBodyItem.users?: string`), so reading the item is what keeps this\n * file on the array shape it already normalises.\n *\n * ⛔ AND THE ITEM'S ORDER IS NOT STABLE BETWEEN TWO CONSECUTIVE CALLS. MEASURED, seconds apart, on\n * the same endpoint:\n * [\"root@pam\",\"alice@pve\",\"alice@pam\",\"alice@example.com@corp\"]\n * [\"alice@pam\",\"alice@pve\",\"alice@example.com@corp\",\"root@pam\"]\n * `read_group` builds it as `[keys %{ $data->{users} }]` — a bare Perl hash key list, whose order\n * is randomised per process — while the INDEX sorts (`join(',', sort keys …)`). So the array is\n * sorted on the way into `attributes` as well as being kept out of `matches`: unsorted, Alchemy's\n * stored state would churn on every read even with nothing to diff.\n *\n * ⚠️ `groupid` IS NOT ECHOED BY THE ITEM READ. Its return schema is `additionalProperties: 0` over\n * exactly `comment` and `members`, so the id comes from props — the same arrangement, and the\n * same reason, as `user.ts`.\n *\n * ★ PRIVILEGES: NOTHING HAD TO BE WIDENED. Measured with `pveum user permissions`, 2026-09-13:\n * · item GET checks `['perm','/access/groups',['Sys.Audit','Group.Allocate'], any => 1]`, and\n * `hf-read@pve` already holds `Sys.Audit` there. So `readAttributes` below reads with the\n * default `read` role — unlike acl.ts, user.ts and api-token.ts, whose item/list reads PVE\n * gates on an allocate privilege the 3600s read lease does not hold.\n * · POST, PUT and DELETE each check `Group.Allocate` on `/access/groups`, and\n * `hf-provision@pve` holds it via the provision role (`PROVISION_PRIVILEGES`).\n *\n * ⛔ `retain` BY DEFAULT, BECAUSE DELETING A GROUP DESTROYS TWO THINGS THIS FILE CANNOT PUT BACK.\n * Measured in `PVE::AccessControl` on the node:\n * · The member list IS the group. `user.cfg` stores it on the GROUP line and DERIVES each\n * user's `groups` map from it at parse time. Deleting the group deletes the list, and this\n * resource has no `members` prop to restore it from.\n * · `delete_group_acl` then walks the whole ACL tree and drops every grant where the group is\n * the SUBJECT. On this cluster that is `admins -> Administrator on /` and\n * `automation -> PVEAuditor on /`: whole populations of access, gone in one call, with no\n * confirmation and nothing in the plan to suggest it.\n * `delete` is FULLY IMPLEMENTED — `DELETE /access/groups/{groupid}` exists — so\n * `.pipe(RemovalPolicy.destroy())` really removes the group.\n *\n * ★ MIGRATED OFF `client.ts`'s generic `pve()`/`pveHandlers` ONTO `@distilled.cloud/proxmox`'s\n * typed `access.getAccessGroup`/`createAccessGroup`/`putAccessGroup`/`deleteAccessGroup`\n * (2026-09-24, decision 43's proxmox walk-down, access sub-area, second resource after Acl).\n * `distilled-pve.ts`'s `runPve` replaces `pve()` as in acl.ts; the CRIES-WOLF FIX\n * (unreadable-read.ts) is wired the same way: a refused `provision` mint on the WRITE-side\n * guard, or a refused `read` mint on the plain read, reports `noop` with a warning rather than\n * forcing `update` with nothing compared.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as access from '@distilled.cloud/proxmox/access';\nimport * as Effect from 'effect/Effect';\nimport { guardWrite } from './distilled-guard.ts';\nimport {\n GROUP_CREATE,\n GROUP_UPDATE,\n createForm,\n dropUnreadable,\n matches,\n readGroup,\n readGroupOrFail,\n updateForm,\n} from './group-wire.ts';\nimport type { PveRequirements, WithTarget } from './resource-spec.ts';\nimport { runPve } from './distilled-pve.ts';\nimport { UNREADABLE, unreadableWarning } from './unreadable-read.ts';\n\nexport interface GroupProps extends WithTarget {\n /**\n * PVE's primary key for a group.\n *\n * ⚠️ THERE IS NO RENAME, AND THE FAILURE IS WORSE HERE THAN FOR A ROLE. Editing this makes `path`\n * point at a different group, which reads as absent and is created empty — while the old group\n * keeps its members and its ACL grants with nobody managing it. Two groups then both look\n * right in the UI and only one of them grants anything.\n */\n groupid: string;\n /** Free text shown in the UI — the only mutable field a group has. See `storedComment` below. */\n comment?: string;\n}\n\nexport interface GroupAttributes {\n groupid: string;\n comment: string;\n /**\n * Who is in the group, sorted — reported so a plan can say what a delete would strip, never\n * compared, because this endpoint cannot set it. See the two ⛔s in the header.\n */\n members: string[];\n}\n\nexport interface ProxmoxGroup extends Resource<\n 'Proxmox.Group',\n GroupProps,\n GroupAttributes,\n never,\n PveRequirements\n> {}\n\n/** ★ `retain` by default — a delete takes the membership and the group's grants. See the header. */\nexport const ProxmoxGroup = Resource<ProxmoxGroup>('Proxmox.Group', {\n defaultRemovalPolicy: 'retain',\n});\n\nexport const ProxmoxGroupProvider = () =>\n Provider.effect(\n ProxmoxGroup,\n Effect.succeed(\n ProxmoxGroup.Provider.of({\n /**\n * ⛔ THE EMPTY `list` MATTERS HERE. `GET /access/groups` answers every group on the\n * cluster, `admins` (grants `Administrator` on `/`) included. Adoption stays explicit.\n */\n list: () => Effect.succeed([]),\n // ⚠️ FOLDS ONLY WHEN `output` IS `undefined` — MEASURED 2026-09-24, an adversarial review\n // of this very fix caught the gap. The engine calls this ONE hook from FOUR places\n // (alchemy/src/{Plan,Apply,Drift}.ts), and only `output` tells them apart: Plan.ts's\n // cold-start adoption probe and interrupted-create recovery, and Apply.ts's\n // delete-recovery, all pass `output: undefined` — nothing is confirmed to exist yet, so\n // `readGroup`'s fold is still needed there or a brand-new group could never be adopted\n // or created. `Drift.ts` (`alchemy drift`/`sync`/`deploy --detect-drift`) is different:\n // it calls this on an ALREADY-CONFIRMED row (`output: old.attr`, defined), exactly\n // `diff`'s own situation below — a transient failure folded to `undefined` there is\n // reported as `{action: 'missing'}` with NO error at all, the cries-wolf bug again, one\n // command over. `readGroupOrFail` on that branch propagates it instead.\n read: Effect.fn(function* ({ olds, output }) {\n return dropUnreadable(\n yield* output === undefined ? readGroup(olds) : readGroupOrFail(olds),\n );\n }),\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n yield* guardWrite(GROUP_CREATE, createForm(news), output === undefined);\n yield* guardWrite(GROUP_UPDATE, updateForm(news), false);\n if (output === undefined) return undefined;\n // ⚠️ `readGroupOrFail`, NOT `readGroup` — see that function's own ⛔. A genuine\n // TRANSIENT failure here propagates and fails the whole plan loudly instead of\n // folding to \"absent\" and forcing a false update, the cries-wolf class of bug.\n const live = yield* readGroupOrFail(news);\n // ⛔ THE CRIES-WOLF FIX: a refused read used to fall into `undefined` below and force\n // `update` on a group that was plainly there — see unreadable-read.ts.\n if (live === UNREADABLE) {\n yield* unreadableWarning('Proxmox.Group', news.groupid);\n return { action: 'noop' } as const;\n }\n if (live === undefined) {\n // Drift: state says this group exists, the cluster disagrees. reconcile recreates it.\n yield* guardWrite(GROUP_CREATE, createForm(news), true);\n return { action: 'update' } as const;\n }\n return matches(live, news)\n ? ({ action: 'noop' } as const)\n : ({ action: 'update' } as const);\n }),\n reconcile: Effect.fn(function* ({ news }) {\n // ⚠️ `dropUnreadable`: reconcile only runs once `provision` already minted for the\n // write below (same lease-cache key), so `UNREADABLE` here is a narrow race, not the\n // routine case `diff` handles. ⛔ UNLIKE acl.ts's PUT-only bind, a group's create is\n // NOT idempotent the same way: if this narrow race DOES land as `undefined` while the\n // group is genuinely already there, PVE answers \"group already exists\" rather than\n // silently converging — a loud failure, not a silent duplicate.\n const before = dropUnreadable(yield* readGroup(news));\n yield* guardWrite(GROUP_CREATE, createForm(news), before === undefined);\n yield* guardWrite(GROUP_UPDATE, updateForm(news), false);\n if (before === undefined) {\n yield* runPve(\n news.target,\n 'provision',\n true,\n access.createAccessGroup(createForm(news)),\n );\n } else if (!matches(before, news)) {\n yield* runPve(news.target, 'provision', true, access.putAccessGroup(updateForm(news)));\n }\n const after = dropUnreadable(yield* readGroup(news));\n if (after === undefined) {\n return yield* Effect.die(\n new Error(\n `access/groups/${news.groupid}: the write returned no error but the group is ` +\n 'still absent. PVE wraps every answer in {\"data\":...} and can report success ' +\n 'on a call that did nothing -- read back rather than trusting the status code.',\n ),\n );\n }\n return after;\n }),\n delete: Effect.fn(function* ({ olds }) {\n yield* runPve(\n olds.target,\n 'provision',\n true,\n access.deleteAccessGroup({ groupid: olds.groupid }),\n );\n }),\n }),\n ),\n );\n",
|
|
60
|
-
"/**\n * `Proxmox.Group`'s wire shape: PVE's create/update forms, how a live item becomes attributes,\n * and the read itself. Split out of group.ts (2026-09-24) to keep that file under the 250-line\n * cap — the api-token.ts/api-token-form.ts seam, same reasoning as acl.ts/acl-wire.ts.\n */\nimport * as access from '@distilled.cloud/proxmox/access';\nimport * as Effect from 'effect/Effect';\nimport { runPve } from './distilled-pve.ts';\nimport type { GroupAttributes, GroupProps } from './group.ts';\nimport { UNREADABLE, type Unreadable, readOrUnreadable } from './unreadable-read.ts';\nimport { csv, text } from './values.ts';\n\nexport const GROUP_CREATE = 'pve:POST /access/groups';\nexport const GROUP_UPDATE = 'pve:PUT /access/groups/{groupid}';\n\n/**\n * The comment PVE will actually END UP HOLDING for a given declaration.\n *\n * ⛔ PVE CANNOT STORE THE COMMENT `'0'`, AND A PROVIDER THAT DOES NOT MODEL THAT DIFFS FOREVER.\n * `create_group`/`write_user_config`/the config parser all test the comment for TRUTH, and in\n * Perl the one-character string `'0'` is false. So a declared `comment: '0'` is accepted by the\n * API, dropped on the way to `user.cfg`, and read back as absent. Normalising BOTH sides is how\n * `values.ts` already treats `''` as the absence of a boolean rather than as `false`.\n */\nexport const storedComment = (comment: string | undefined) => {\n const value = comment ?? '';\n return value === '0' ? '' : value;\n};\n\n/** The item read's `members` array, sorted into something two plans can agree on — group.ts's header. */\nconst memberList = (live: readonly string[]): string[] => {\n const joined = csv(live.map((member) => text(member)));\n return joined === '' ? [] : joined.split(',');\n};\n\nexport const createForm = (props: GroupProps): access.CreateAccessGroupRequest => ({\n comment: storedComment(props.comment),\n groupid: props.groupid,\n});\n\n/** ⚠️ ALWAYS SENT, EVEN EMPTY — that is how a comment is CLEARED (see group.ts's own header). */\nexport const updateForm = (props: GroupProps): access.PutAccessGroupRequest => ({\n comment: storedComment(props.comment),\n groupid: props.groupid,\n});\n\nconst attributesOf = (live: access.GetAccessGroupResponse, props: GroupProps): GroupAttributes => ({\n /**\n * ⚠️ ABSENT IS EMPTY, NOT MISSING — `read_group` sets `comment` only `if defined(…)`. distilled\n * types it `comment?: string`, so `text()`'s `''` fallback meets the same normalisation.\n */\n comment: text(live.comment),\n /** ⚠️ FROM PROPS — the item read never echoes the id back. */\n groupid: props.groupid,\n members: memberList(live.members),\n});\n\n/**\n * ⚠️ `members` IS NOT COMPARED, AND NOTHING ELSE IS LEFT TO COMPARE. `comment` is the only field\n * a PUT here accepts, so it is the only field whose drift this provider can repair.\n */\nexport const matches = (attributes: GroupAttributes, props: GroupProps) =>\n attributes.comment === storedComment(props.comment);\n\n/**\n * ★ Default `read` role — nothing widened for this family, see group.ts's header privileges note.\n * ⛔ `{ groupid: props.groupid }`, NEVER THE WHOLE `props` — MEASURED 2026-09-24, the regression\n * in kit 0.31.1. `GetAccessGroupRequest`'s schema declares only `groupid` (a path label); any\n * OTHER key on the object passed to `access.getAccessGroup` — `target`, `comment`, every field\n * this family's own props carry — is treated by distilled's `buildRequest` as an \"unknown key\"\n * and JSON-encoded onto the request as a BODY, on every one of these bodyless GETs. A stricter\n * fetch client than a bare `bun run` of this file refuses a GET carrying any body at all\n * (`TypeError [ERR_INVALID_ARG_VALUE]: fetch() request with GET/HEAD method cannot have body`),\n * which `runPveWith` retries across every member and exhausts identically —\n * `PveClusterExhausted`, then silently folded to \"absent\" by the old `orElseSucceed`, forcing a\n * false `update` on every group. `role.ts`'s list call and acl.ts's `listAccessAcl({})` were\n * never at risk: both are always called with a literal `{}`.\n * ⛔ `live.members === undefined` IS DEFENSIVE, NOT THE ABSENCE SIGNAL — CORRECTED 2026-09-24.\n * This file previously claimed a missing group answers 200 with `{\"data\":null}`, unwrapped to\n * `{}`. MEASURED against the live cluster: `GET /access/groups/{missing}` answers a genuine 500\n * (\"group '…' does not exist\"), the SAME shape as user.ts's own measured 500 — there is no\n * success-path absence signal here at all. The check stays as insurance against a future PVE\n * release that does answer `{}`, but this function is what actually carries the \"not found\"\n * case, as a thrown error — `readGroup` below is the one that folds it.\n */\nexport const readGroupOrFail = (props: GroupProps) =>\n readOrUnreadable(\n runPve(props.target, 'read', false, access.getAccessGroup({ groupid: props.groupid })),\n ).pipe(\n Effect.map((live) =>\n live === UNREADABLE\n ? UNREADABLE\n : live.members === undefined\n ? undefined\n : attributesOf(live, props),\n ),\n );\n\n/**\n * ⛔
|
|
60
|
+
"/**\n * `Proxmox.Group`'s wire shape: PVE's create/update forms, how a live item becomes attributes,\n * and the read itself. Split out of group.ts (2026-09-24) to keep that file under the 250-line\n * cap — the api-token.ts/api-token-form.ts seam, same reasoning as acl.ts/acl-wire.ts.\n */\nimport * as access from '@distilled.cloud/proxmox/access';\nimport * as Effect from 'effect/Effect';\nimport { runPve } from './distilled-pve.ts';\nimport type { GroupAttributes, GroupProps } from './group.ts';\nimport { UNREADABLE, type Unreadable, readOrUnreadable } from './unreadable-read.ts';\nimport { csv, text } from './values.ts';\n\nexport const GROUP_CREATE = 'pve:POST /access/groups';\nexport const GROUP_UPDATE = 'pve:PUT /access/groups/{groupid}';\n\n/**\n * The comment PVE will actually END UP HOLDING for a given declaration.\n *\n * ⛔ PVE CANNOT STORE THE COMMENT `'0'`, AND A PROVIDER THAT DOES NOT MODEL THAT DIFFS FOREVER.\n * `create_group`/`write_user_config`/the config parser all test the comment for TRUTH, and in\n * Perl the one-character string `'0'` is false. So a declared `comment: '0'` is accepted by the\n * API, dropped on the way to `user.cfg`, and read back as absent. Normalising BOTH sides is how\n * `values.ts` already treats `''` as the absence of a boolean rather than as `false`.\n */\nexport const storedComment = (comment: string | undefined) => {\n const value = comment ?? '';\n return value === '0' ? '' : value;\n};\n\n/** The item read's `members` array, sorted into something two plans can agree on — group.ts's header. */\nconst memberList = (live: readonly string[]): string[] => {\n const joined = csv(live.map((member) => text(member)));\n return joined === '' ? [] : joined.split(',');\n};\n\nexport const createForm = (props: GroupProps): access.CreateAccessGroupRequest => ({\n comment: storedComment(props.comment),\n groupid: props.groupid,\n});\n\n/** ⚠️ ALWAYS SENT, EVEN EMPTY — that is how a comment is CLEARED (see group.ts's own header). */\nexport const updateForm = (props: GroupProps): access.PutAccessGroupRequest => ({\n comment: storedComment(props.comment),\n groupid: props.groupid,\n});\n\nconst attributesOf = (live: access.GetAccessGroupResponse, props: GroupProps): GroupAttributes => ({\n /**\n * ⚠️ ABSENT IS EMPTY, NOT MISSING — `read_group` sets `comment` only `if defined(…)`. distilled\n * types it `comment?: string`, so `text()`'s `''` fallback meets the same normalisation.\n */\n comment: text(live.comment),\n /** ⚠️ FROM PROPS — the item read never echoes the id back. */\n groupid: props.groupid,\n members: memberList(live.members),\n});\n\n/**\n * ⚠️ `members` IS NOT COMPARED, AND NOTHING ELSE IS LEFT TO COMPARE. `comment` is the only field\n * a PUT here accepts, so it is the only field whose drift this provider can repair.\n */\nexport const matches = (attributes: GroupAttributes, props: GroupProps) =>\n attributes.comment === storedComment(props.comment);\n\n/**\n * ★ Default `read` role — nothing widened for this family, see group.ts's header privileges note.\n * ⛔ `{ groupid: props.groupid }`, NEVER THE WHOLE `props` — MEASURED 2026-09-24, the regression\n * in kit 0.31.1. `GetAccessGroupRequest`'s schema declares only `groupid` (a path label); any\n * OTHER key on the object passed to `access.getAccessGroup` — `target`, `comment`, every field\n * this family's own props carry — is treated by distilled's `buildRequest` as an \"unknown key\"\n * and JSON-encoded onto the request as a BODY, on every one of these bodyless GETs. A stricter\n * fetch client than a bare `bun run` of this file refuses a GET carrying any body at all\n * (`TypeError [ERR_INVALID_ARG_VALUE]: fetch() request with GET/HEAD method cannot have body`),\n * which `runPveWith` retries across every member and exhausts identically —\n * `PveClusterExhausted`, then silently folded to \"absent\" by the old `orElseSucceed`, forcing a\n * false `update` on every group. `role.ts`'s list call and acl.ts's `listAccessAcl({})` were\n * never at risk: both are always called with a literal `{}`.\n * ⛔ `live.members === undefined` IS DEFENSIVE, NOT THE ABSENCE SIGNAL — CORRECTED 2026-09-24.\n * This file previously claimed a missing group answers 200 with `{\"data\":null}`, unwrapped to\n * `{}`. MEASURED against the live cluster: `GET /access/groups/{missing}` answers a genuine 500\n * (\"group '…' does not exist\"), the SAME shape as user.ts's own measured 500 — there is no\n * success-path absence signal here at all. The check stays as insurance against a future PVE\n * release that does answer `{}`, but this function is what actually carries the \"not found\"\n * case, as a thrown error — `readGroup` below is the one that folds it.\n */\nexport const readGroupOrFail = (props: GroupProps) =>\n readOrUnreadable(\n runPve(props.target, 'read', false, access.getAccessGroup({ groupid: props.groupid })),\n ).pipe(\n Effect.map((live) =>\n live === UNREADABLE\n ? UNREADABLE\n : live.members === undefined\n ? undefined\n : attributesOf(live, props),\n ),\n );\n\n/**\n * ⛔ ONLY `GroupNotFound` MEANS ABSENT. The initial distilled transport swap preserved a\n * catch-all fold because PVE reports missing objects as HTTP 500. SDK PR 265 now types that\n * measured message, so permission errors, unrelated 500s and exhausted transports propagate\n * instead of triggering a speculative create (decision 49 follow-up, 2026-09-24).\n * ★ `readGroupOrFail` remains the strict path used for an already-confirmed state row. This\n * change narrows cold reads/reconcile without changing that existing drift/diff contract.\n */\nexport const readGroup = (props: GroupProps) =>\n readGroupOrFail(props).pipe(Effect.catchTag('GroupNotFound', () => Effect.succeed(undefined)));\n\n/** `read`/`reconcile` return `Attributes | undefined`; only `diff` tells `UNREADABLE` apart. */\nexport const dropUnreadable = (live: GroupAttributes | Unreadable | undefined) =>\n live === UNREADABLE ? undefined : live;\n",
|
|
61
61
|
"/**\n * `Proxmox.HaResource` — a guest's HA membership, declared.\n *\n * ★ WITHOUT ONE OF THESE, EVERY GUEST THIS PACKAGE DECLARES IS PINNED TO THE NODE THE LINE NAMED\n * AND DIES WITH IT. The target is a three-node quorate cluster holding zero HA resources, so\n * `node` in `LxcProps` is the whole of a container's availability story: lose that node and the\n * container is simply gone until a person notices. Declaring a guest without declaring its HA\n * membership is half a declaration, which is why this lives beside `lxc.ts` rather than in a\n * runbook somebody reads after an outage.\n *\n * ⚠️ `state` READS LIKE STATUS AND IS CONFIGURATION. `started | stopped | disabled | ignored` is\n * the state the CRM is ASKED for; a line in the HA config file, not a reading off the cluster,\n * so it is a prop and it is compared. `LxcAttributes.status` is the opposite case — reported,\n * never declared — and confusing the two inverts the meaning: `state: 'stopped'` here says \"HA\n * should hold this guest stopped and still relocate it on node failure\", not \"it is stopped\".\n *\n * ⛔ AND YET IT MOVES POWER, WHICH IS THE ONE PLACE THIS PACKAGE'S \"PLANS DO NOT START THINGS\" RULE\n * BENDS. `lxc.ts` and `qemu.ts` refuse to own power state precisely so a deploy is not a\n * maintenance window — but the CRM acts on whatever this file says. The default `started` will\n * BOOT a stopped guest within seconds of the write, and `stopped` will SHUT DOWN a running one.\n * There is no way to declare HA membership without declaring intent, so the intent is at least\n * explicit and diffable here; read a plan that touches `state` as a plan that touches uptime.\n *\n * ⛔ `sid` CARRIES ITS TYPE PREFIX — `ct:101`, `vm:100` — AND READ ANSWERS IN THE PREFIXED FORM.\n * POST also takes the bare `101` shortcut; taking it would leave a resource keyed on a spelling\n * PVE never returns, and every plan comparing `101` against `ct:101`. So the prefixed form is\n * required here and it is what goes into the path.\n * ⚠️ EDITING `sid` IN PLACE ORPHANS THE OLD MEMBERSHIP. `diff` reads the NEW path, finds nothing\n * and calls that drift, so reconcile creates the new entry and the old one stays under HA with\n * nothing declaring it. Retire the declaration and add a second one instead of renaming.\n *\n * ⛔ MEASURED ON PVE 9.2: `/cluster/ha/groups` ANSWERS HTTP 500 — groups were removed in PVE 9,\n * even though the published API schema still documents the endpoint AND a `group` parameter on\n * this very resource. Nothing here sends `group`. The successor is `/cluster/ha/rules`\n * (node-affinity and resource-affinity) and that is the next family to add; do not port the old\n * groups endpoint back just because the docs still describe it.\n *\n * ⚠️ RECONCILE NEEDS `Sys.Console` ON `/`, WHICH THE PROVISION ROLE LACKED WHEN THIS WAS WRITTEN\n * (`PROVISION_PRIVILEGES` carries it now — ha-rule.ts has the measurement). Read and diff are\n * fine — `GET /cluster/ha/resources/{sid}` checks `Sys.Audit`, which the role already has — while\n * POST, PUT and DELETE all check `Sys.Console` on `/` and will answer \"Permission check failed\n * (/, Sys.Console)\" on a role without it. Widen it knowingly: `Sys.Console` is also what\n * opens a root shell on every node (`/nodes/{node}/vncshell`, `termproxy`), so granting it to the\n * provision credential buys HA membership at the price of node console access. A separate role\n * for HA writes is the narrower answer if that trade is not wanted.\n */\nimport { Resource } from 'alchemy';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { type PveRequirements, type WithTarget, pveHandlers } from './resource.ts';\nimport { num } from './values.ts';\n\n/**\n * The requested states this provider admits.\n *\n * ⚠️ `enabled` IS DELIBERATELY ABSENT. PVE accepts it and documents it as an alias for `started`,\n * which means a resource declared as `enabled` can be read back as `started` — and `matches`\n * would then report an update on every plan, forever, over a difference in spelling. One spelling\n * per state is the only version of this that settles.\n */\nexport type HaState = 'started' | 'stopped' | 'disabled' | 'ignored';\n\nexport interface HaResourceProps extends WithTarget {\n /** ⛔ PREFIXED AND CLUSTER-WIDE: `ct:101`, `vm:100`. Changing it is a different object. */\n sid: string;\n /** What the CRM should aim for. Defaults to `started`, PVE's own default. */\n state?: HaState;\n /** Free text shown in the HA panel. Max 4096 characters. */\n comment?: string;\n /** Restart tries on the SAME node before the manager gives up and relocates. Default 1. */\n max_restart?: number;\n /** Relocation tries before the resource is left in `error`. Default 1. */\n max_relocate?: number;\n}\n\nexport interface HaResourceAttributes {\n /** As PVE returns it, prefix included. */\n sid: string;\n /** `ct` | `vm`. Implied by the prefix, reported so a plan can say what is being protected. */\n type: string;\n /**\n * ⚠️ TYPED `string`, NOT `HaState`, because this is whatever the config file holds — including an\n * `enabled` a person wrote in the UI. Narrowing it here would be a claim about someone else's\n * edit rather than a report of it.\n */\n state: string;\n comment: string;\n max_restart: number;\n max_relocate: number;\n}\n\nexport interface ProxmoxHaResource extends Resource<\n 'Proxmox.HaResource',\n HaResourceProps,\n HaResourceAttributes,\n never,\n PveRequirements\n> {}\n\nexport const ProxmoxHaResource = Resource<ProxmoxHaResource>('Proxmox.HaResource');\n\n/** `ct:101` -> `ct`. ⚠️ `?? ''` because noUncheckedIndexedAccess types `split()[0]` as optional. */\nconst kind = (sid: string) => sid.split(':')[0] ?? '';\n\n/**\n * ⚠️ NO `type` IN EITHER FORM, ON PURPOSE. The prefix in `sid` already names it on create, and PUT\n * does not accept `type` at all — sending it on create only would make the two shapes diverge for\n * no gain, and sending it on update is a parameter-verification failure.\n */\nconst shape = (props: HaResourceProps) => ({\n comment: props.comment ?? '',\n max_relocate: String(props.max_relocate ?? 1),\n max_restart: String(props.max_restart ?? 1),\n state: props.state ?? 'started',\n});\n\nconst handlers = pveHandlers<HaResourceProps, HaResourceAttributes>({\n attributes: (live, props) => ({\n comment: typeof live['comment'] === 'string' ? live['comment'] : '',\n max_relocate: num(live['max_relocate'], 1),\n max_restart: num(live['max_restart'], 1),\n sid: typeof live['sid'] === 'string' ? live['sid'] : props.sid,\n state: typeof live['state'] === 'string' ? live['state'] : 'started',\n type: typeof live['type'] === 'string' ? live['type'] : kind(props.sid),\n }),\n /**\n * ⚠️ CLUSTER-SCOPED, SO THERE IS NO NODE IN THE PATH — and that is the point of the object. The\n * guest's node is where it happens to run now; this resource is the statement that it may run\n * somewhere else tomorrow.\n */\n collection: () => 'cluster/ha/resources',\n createForm: (props) => ({ ...shape(props), sid: props.sid }),\n /**\n * ⚠️ `digest` IS NOT COMPARED AND IS NOT AN ATTRIBUTE. It changes whenever ANY line of the HA\n * config changes, including one written for a different guest, so diffing it would report an\n * update on this resource because somebody else edited theirs.\n * ⚠️ `sid` AND `type` ARE NOT COMPARED EITHER: sid is the path, so a change there is a different\n * object, and type is create-only — it is read back from the prefix, never edited.\n */\n /** The vendor rules these forms are checked against at plan time — resource-spec.ts. */\n endpoint: {\n create: 'pve:POST /cluster/ha/resources',\n update: 'pve:PUT /cluster/ha/resources/{sid}',\n },\n matches: (attributes, props) =>\n attributes.state === (props.state ?? 'started') &&\n attributes.comment === (props.comment ?? '') &&\n attributes.max_restart === (props.max_restart ?? 1) &&\n attributes.max_relocate === (props.max_relocate ?? 1),\n /**\n * ⚠️ THE COLON GOES INTO THE URL RAW. RFC 3986 allows `:` inside a path segment and PVE matches\n * the sid as one segment, so no `encodeURIComponent` here; percent-encoding it would make the\n * request depend on a proxy normalising `%3A` back before the dispatcher sees it.\n */\n path: (props) => `cluster/ha/resources/${props.sid}`,\n updateForm: shape,\n});\n\n/**\n* ⛔ Empty for the same reason as every other resource here: adoption must be explicit.\n* `GET /cluster/ha/resources` would hand back every guest an operator has ever put under\n* HA, and adopting those means one day deleting them.\n \n *\n* ⛔ DELETE DEFAULTS TO `purge=1` AND THE FACTORY SENDS NO FORM, SO THAT DEFAULT APPLIES:\n* PVE strips the sid out of every HA rule referencing it and DELETES a rule that had no\n* other member. Destroying an HA membership can therefore take an affinity rule with it,\n* which matters once the rules family lands.\n* ⚠️ It does NOT stop or remove the guest. The container keeps running exactly where it is,\n* only unmanaged — so removing this resource is how a guest is handed back to its node,\n* not how it is decommissioned.\n \n */\nexport const ProxmoxHaResourceProvider = () =>\n Provider.effect(ProxmoxHaResource, Effect.succeed(ProxmoxHaResource.Provider.of(handlers)));\n",
|
|
62
62
|
"/**\n * `Proxmox.HaRule` — where the CRM may place a guest, and which guests must not share a node.\n *\n * ★ THIS IS THE PVE 9 SUCCESSOR TO HA GROUPS, AND THE GROUPS ENDPOINT IS GONE. MEASURED on node-b\n * (pve-manager/9.2.11, 2026-09-13): `pvesh get /cluster/ha/groups` answers `cannot index groups:\n * ha groups have been migrated to rules`, and `/etc/pve/ha/` holds `rules.cfg` with no\n * `groups.cfg` beside it. The published schema still documents groups and still offers a `group`\n * parameter on `Proxmox.HaResource`; both are dead. Do not port them back.\n *\n * ★ ONE RESOURCE FOR BOTH RULE TYPES, ON THE ceph-daemon.ts ARGUMENT AND AFTER READING BOTH\n * PLUGINS. `PVE::HA::Rules::NodeAffinity` and `::ResourceAffinity` share `resources`, `affinity`,\n * `disable` and `comment`; node-affinity adds `nodes` and `strict` and nothing else diverges. The\n * endpoint, the path, the create/update/delete calls, the `order` and `digest` traps below and\n * the list normalisation are identical for both. Two files would have carried every one of those\n * traps twice and let them drift.\n * ⛔ `type` IS CREATE-ONLY. MEASURED in `/usr/share/perl5/PVE/API2/HA/Rules.pm`: `update_rule`\n * takes the plugin from the STORED rule (`my $type = $rule->{type};`) and never rewrites it. So\n * `attributes` reports a rule of the other type as ABSENT, which sends reconcile down the\n * create branch and makes PVE refuse with `HA rule '<id>' already defined` — a loud, accurate\n * error rather than a PUT pushing node-affinity fields at a resource-affinity rule.\n * ⛔ AND YET IT IS SENT ON THE UPDATE ANYWAY, because the PUT is validated against a `oneOf`\n * keyed on it and refuses the whole body without it. That one is worth reading in full: it\n * is the ⛔ on `required` in ha-rule-form.ts.\n *\n * ⛔ THREE FIELDS PVE RETURNS AND NO WRITE ACCEPTS, EACH ONE A FOREVER-UPDATE IF COMPARED.\n * `order` is an ORDINAL PVE ASSIGNS ITSELF (`$rules->{order}->{$ruleid} =\n * PVE::HA::Rules::get_next_ordinal($rules)`) and it appears in no create or update schema at all;\n * it is reported in attributes and never compared. `digest` is the digest of the WHOLE rules\n * file, so it moves when a rule written for somebody else's guests moves — it is not even an\n * attribute, for the reason ha-resource.ts gives. `errors` is PVE's own feasibility verdict,\n * recomputed across every rule on every read; reported, never compared. See `problems` in\n * ha-rule-form.ts.\n *\n * ⚠️ IT COMPOSES WITH `Proxmox.HaResource`, AND THE EDGE IS REAL RATHER THAN TIDY. MEASURED:\n * `create_rule` runs `$assert_valid_resources_param`, which calls\n * `PVE::HA::Config::service_is_configured($resource)` for every sid and dies `cannot use\n * unmanaged resource(s) <sid>` if one is not already an HA resource. A rule naming a sid nothing\n * has put under HA is a HARD 400, not a warning — so `resources` should be written as the\n * HaResource's own attribute (`resources: [web.sid, db.sid]`) and let Alchemy order the deploy,\n * not as a bare string that happens to match. `$assert_valid_nodes_param` refuses a non-existent\n * node the same way.\n * ⛔ AND THE EDGE RUNS BACK THE OTHER WAY, WHERE ALCHEMY CANNOT SEE IT. Destroying an\n * `HaResource` deletes with PVE's default `purge=1`, which strips that sid out of every rule\n * and DELETES any rule left with no members. So a plan that only removes a guest can remove\n * this resource's object from under it; the next plan then reads absent and recreates it, or\n * fails on the `unmanaged resource` check if the guest is gone for good.\n *\n * ⚠️ BOTH LANES ALREADY HAVE THE PRIVILEGES, WHICH IS NEW. MEASURED 2026-09-13:\n * GET (collection and item) checks `Sys.Audit` on `/` and the built-in `PVEAuditor` holds it, so\n * `readRole` stays the default `read` lease — unlike storage.ts and the SDN families. POST, PUT\n * and DELETE all check `Sys.Console` on `/`, and the provision role now returns `Sys.Console` among\n * its 27 privileges (`PROVISION_PRIVILEGES`, provision-baseline.ts). The warning in ha-resource.ts's header — that\n * `Sys.Console` is missing — is stale; the role was widened, and the price it named still stands:\n * `Sys.Console` is also what opens a root shell on every node.\n *\n * ⚠️ REMOVAL IS THE PLAIN DEFAULT, DELIBERATELY, AND `delete` IS THE FACTORY'S. An HA rule is\n * exactly a line of TypeScript — nothing in it is irreplaceable the way a Ceph pool or a ZFS\n * vdev is — so the `retain` default that resource.ts explains does not apply. Read the plan for\n * what it is, though: while a negative resource-affinity rule is absent, nothing stops the CRM\n * putting both halves of a pair on one node.\n *\n * ⚠️ A READ GOES THROUGH THE GROUPS MIGRATION. Every GET calls `migrate_groups_to_rules`, so on a\n * cluster that still has `groups.cfg` the answer includes SYNTHETIC rules nobody declared. This\n * cluster has none, so nothing is injected here; a rule id colliding with an old group name on a\n * cluster that does would read back something this provider never wrote.\n *\n * ⚠️ A CHANGED `type` READS AS `update` IN THE PLAN AND FAILS AS \"already defined\" ON THE APPLY,\n * AND THOSE TWO WORDS POINT AWAY FROM THE CAUSE. `attributes` answers undefined when the live\n * rule's type disagrees, so `diff` takes resource.ts's `live === undefined` branch and says\n * update; reconcile then reads undefined, POSTs, and PVE refuses because the rule is plainly\n * there. The cause is that `type` is create-only. metric-server.ts has the same shape, so this\n * is the package's consistent behaviour rather than a quirk of this file — but it is worth\n * knowing before reading the error. Delete the declaration and write a new one to change a type.\n */\nimport { Resource } from 'alchemy';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { body, clearList, commentText, nodeList, problems } from './ha-rule-form.ts';\nimport { type PveRequirements, type WithTarget, pveHandlers } from './resource.ts';\nimport { bool, csv, int, text, withClears } from './values.ts';\n\nexport type HaRuleType = 'node-affinity' | 'resource-affinity';\n\n/**\n * ⛔ REQUIRED ON BOTH TYPES, AND THAT IS A DELIBERATE NARROWING OF PVE'S SCHEMA. PVE makes it\n * optional for node-affinity (defaulting to `positive`) and mandatory for resource-affinity. A\n * provider that mirrored that has two bad options when a declaration omits it: guess `positive`,\n * which silently flips a live `negative` rule — the one keeping two guests APART — into one that\n * pins them together; or leave it out of the write, which makes `matches` disagree with a live\n * `negative` rule forever while every PUT changes nothing. Requiring one word from the caller\n * removes both.\n */\nexport type HaAffinity = 'positive' | 'negative';\n\ninterface HaRuleBase extends WithTarget {\n /** A `pve-configid`: a letter, then letters, digits, `-` and `_`. Identity — renaming is a new\n * rule, and the old one stays behind exactly as `sid` does in ha-resource.ts. */\n rule: string;\n /**\n * The HA resources this rule constrains, as prefixed sids — `ct:101`, `vm:100`.\n * ⚠️ EVERY ONE MUST ALREADY BE UNDER HA. See the composition ⚠️ in the header: this is an\n * ordering edge, and the honest way to express it is the HaResource's own `sid` attribute.\n */\n resources: readonly string[] | string;\n affinity: HaAffinity;\n /** Keep the rule in the file but stop the CRM applying it. ⛔ Clearing it needs `delete=disable`\n * — see the ⛔ in `optional` in ha-rule-form.ts. */\n disable?: boolean;\n /** Free text shown in the HA panel. Max 4096 characters. */\n comment?: string;\n}\n\nexport interface NodeAffinityRuleProps extends HaRuleBase {\n type: 'node-affinity';\n /**\n * Cluster nodes, each optionally `<node>:<priority>`. Higher priority wins; the numbers are\n * relative and nothing else. ⚠️ REQUIRED BY THE TYPE, not merely by PVE — an optional `nodes`\n * would let a declaration that cannot describe any live rule sit in a permanent update loop.\n */\n nodes: readonly string[] | string;\n /** `false` (PVE's default) makes the nodes a PREFERENCE; `true` makes them the only nodes the\n * resources may run on, and the resources STOP when none of them is available. */\n strict?: boolean;\n}\n\nexport interface ResourceAffinityRuleProps extends HaRuleBase {\n type: 'resource-affinity';\n}\n\n/**\n * ⚠️ A UNION, NOT ONE FLAT INTERFACE WITH OPTIONAL EXTRAS, because `nodes` and `strict` are not\n * merely unused on a resource-affinity rule — PVE's oneOf declares `additionalProperties: 0`, so\n * sending either is a 400, and comparing either would be a diff no write could ever settle. The\n * union makes both unwritable rather than ignored.\n */\nexport type HaRuleProps = NodeAffinityRuleProps | ResourceAffinityRuleProps;\n\nexport interface HaRuleAttributes {\n rule: string;\n type: HaRuleType;\n /** ⚠️ NORMALISED, NOT RAW. PVE returns `join(',', sort keys %$hash)` — a re-sorted SET. */\n resources: string;\n /** ⚠️ Normalised by `nodeList`; always `''` on a resource-affinity rule, which has no nodes. */\n nodes: string;\n affinity: string;\n strict: boolean;\n disable: boolean;\n comment: string;\n /** ⛔ PVE-ASSIGNED AND UNWRITABLE. Reported so a plan can show it; never compared. */\n order: number;\n /** ⛔ PVE's feasibility verdict for this rule. Reported; never compared. */\n errors: string;\n}\n\nexport interface ProxmoxHaRule extends Resource<\n 'Proxmox.HaRule',\n HaRuleProps,\n HaRuleAttributes,\n never,\n PveRequirements\n> {}\n\nexport const ProxmoxHaRule = Resource<ProxmoxHaRule>('Proxmox.HaRule');\n\nconst handlers = pveHandlers<HaRuleProps, HaRuleAttributes>({\n attributes: (live, props) => {\n /**\n * ⛔ A RULE OF THE OTHER TYPE IS ANOTHER OBJECT, AND \"ABSENT\" IS THE HONEST ANSWER — the same\n * move metric-server.ts makes, for the same reason: `type` cannot be changed by a PUT, so\n * reporting the foreign rule as missing makes reconcile POST and PVE refuse because the id\n * is taken. An older PVE that omitted `type` from the read would fall through and be trusted.\n */\n const liveType = text(live['type']);\n if (liveType !== '' && liveType !== props.type) return undefined;\n return {\n affinity: text(live['affinity']),\n comment: text(live['comment']),\n /**\n * ⚠️ ABSENT WHEN OFF, AND THAT IS NOT THE SAME AS `false` BY ACCIDENT. MEASURED in\n * `PVE::HA::Rules::set_rule_defaults`: a default is materialised into the read only when it\n * is TRUTHY, so `disable` (no default) and `strict` (default 0) are simply missing from an\n * enabled, non-strict rule while `affinity` (default `positive`) is always present.\n */\n disable: bool(live['disable'], false),\n errors: problems(live['errors']),\n nodes: nodeList(typeof live['nodes'] === 'string' ? live['nodes'] : undefined),\n order: int(live['order'], 0),\n resources: csv(typeof live['resources'] === 'string' ? live['resources'] : undefined),\n rule: text(live['rule'], props.rule),\n strict: bool(live['strict'], false),\n type: props.type,\n };\n },\n collection: () => 'cluster/ha/rules',\n /** ⚠️ ONLY `rule` IS ADDED HERE: the POST is to the collection, so the id is not in the path.\n * `type` is already in `body` — the PUT needs it too, for the reason ha-rule-form.ts gives. */\n createForm: (props) => ({ ...body(props), rule: props.rule }),\n /**\n * ⛔ ONLY FIELDS A WRITE CAN ACTUALLY SET ARE COMPARED. `order`, `errors` and `digest` are out\n * for the reason the header gives at length — each would report an update that the PUT it\n * triggers cannot satisfy, on every plan, forever. `rule` and `type` are out too: one is the\n * key the object was read by, the other is refused rather than updated.\n * ⚠️ `nodes` AND `strict` ARE COMPARED ONLY ON A NODE-AFFINITY RULE. They do not exist on the\n * other plugin, so `attributes.nodes` is `''` and `attributes.strict` is `false` there by\n * construction — comparing them would be comparing a declaration against nothing.\n * ⚠️ THE COMMENT IS COMPARED AS PVE WILL STORE IT, not as it was declared — `commentText` and\n * its ⛔ explain why a `%XX` in a comment does not survive the round trip.\n */\n /** The vendor rules these forms are checked against at plan time — resource-spec.ts. */\n endpoint: { create: 'pve:POST /cluster/ha/rules', update: 'pve:PUT /cluster/ha/rules/{rule}' },\n matches: (attributes, props) =>\n attributes.resources === csv(props.resources) &&\n attributes.affinity === props.affinity &&\n attributes.comment === commentText(props.comment ?? '') &&\n attributes.disable === (props.disable === true) &&\n (props.type !== 'node-affinity' ||\n (attributes.nodes === nodeList(props.nodes) &&\n attributes.strict === (props.strict === true))),\n /** ⚠️ A `pve-configid` has no `/` or `:` in it, so there is nothing here to encode. */\n path: (props) => `cluster/ha/rules/${props.rule}`,\n /**\n * ⛔ THE `delete=` HALF IS WHAT MAKES THIS SETTLE. A PUT merges into the stored rule and a\n * `disable=0` is thrown away before the plugin sees it, so without the clear list a rule\n * disabled by hand could never be re-enabled by a declaration and every plan would report the\n * same update. `clearList` and `body` come off one table — see ha-rule-form.ts.\n */\n updateForm: (props) => {\n const clear = clearList(props);\n const fields = body(props);\n return withClears(fields, clear);\n },\n});\n\n/**\n * ⛔ THE EMPTY `list` FROM `pveHandlers` STANDS, AND IT COSTS NOTHING HERE TODAY.\n * `GET /cluster/ha/rules` MEASURED `[]` on this cluster on 2026-09-13 — but the same call on a\n * cluster somebody has used returns every rule an operator ever clicked, plus the synthetic ones\n * the groups migration invents on read. Adopting either is how a later `alchemy destroy` removes\n * a separation rule nobody declared. Adoption stays an explicit act.\n */\nexport const ProxmoxHaRuleProvider = () =>\n Provider.effect(ProxmoxHaRule, Effect.succeed(ProxmoxHaRule.Provider.of(handlers)));\n",
|
|
63
63
|
"/**\n * An HA rule's props as the form PVE wants, and the two lists PVE re-spells on the way back.\n *\n * ★ SPLIT OUT OF ha-rule.ts TO KEEP BOTH FILES UNDER THE 250-LINE CAP, and the seam is the same\n * one metric-server-form.ts and node-network-form.ts cut: this file answers \"how does a\n * declaration become a PVE form, and what shape does PVE hand back\", ha-rule.ts answers \"what is\n * an HA rule and when has it changed\". Nothing here reads the cluster or decides a diff.\n *\n * ⚠️ THE `import type` BACK TO ha-rule.ts IS A CYCLE ON PAPER ONLY. It is type-only, so it is\n * erased before anything runs, and `HaRuleProps` stays public in the file declaring the resource.\n */\nimport type { HaRuleProps } from './ha-rule.ts';\nimport { csv } from './values.ts';\n\n/**\n * A `<node>[:<pri>]` list, spelled the way PVE gives it back.\n *\n * ⛔ THIS IS NOT `csv`, AND THE DIFFERENCE IS A FOREVER-DIFF. MEASURED by reading\n * `/usr/share/perl5/PVE/HA/Rules/NodeAffinity.pm` on node-b (2026-09-13): `decode_plugin_value`\n * turns the list into a HASH keyed by node name, and `encode_plugin_value` rebuilds it with\n * `for my $node (sort keys %$value)` — sorted by NODE NAME, never by the token — emitting the\n * bare name whenever the priority is falsy, because `PVE::HA::Tools::parse_node_priority` reads\n * a missing priority as 0. So a declared `node-c:1,node-b:0` is handed back as `node-b,node-c:1`: re-ordered AND\n * re-spelled. Compare the raw strings and every plan reports an update, forever.\n *\n * ⚠️ SORTED BY NAME, NOT BY TOKEN, AND THE TWO GENUINELY DIVERGE. `csv` sorts whole tokens. Node\n * names may contain `-` — `parse_node_priority`'s own regex is\n * `[a-zA-Z0-9]([a-zA-Z0-9\\-]*[a-zA-Z0-9])?` — and `-` (0x2D) sorts before `:` (0x3A), so `node-b-a`\n * and `node-b:5` come out in one order by token and the other by name. PVE sorts by the name, so\n * this does too.\n *\n * ⚠️ LAST ENTRY WINS FOR A REPEATED NODE, because PVE's decode is a hash assignment and a hash\n * keeps one value per key. A declaration saying `node-b:1,node-b:5` is stored as `node-b:5`; matching that\n * is what a Map gives for free.\n */\nexport const nodeList = (value: readonly string[] | string | undefined) => {\n const ranked = new Map<string, number>();\n for (const entry of typeof value === 'string' ? value.split(',') : (value ?? [])) {\n const [node, priority] = entry.trim().split(':');\n if (node === undefined || node === '') continue;\n const rank = Number.parseInt(priority ?? '0', 10);\n ranked.set(node, Number.isNaN(rank) ? 0 : rank);\n }\n return [...ranked.keys()]\n .sort()\n .map((node) => {\n const rank = ranked.get(node) ?? 0;\n return rank === 0 ? node : `${node}:${String(rank)}`;\n })\n .join(',');\n};\n\n/**\n * PVE's own verdict on whether the rule can be satisfied, flattened to one reportable string.\n *\n * ⚠️ COMPUTED, NEVER DECLARED, AND NEVER COMPARED. `PVE::API2::HA::Rules` runs `check_feasibility`\n * over the WHOLE rule set on every read and attaches whatever it finds to each rule as\n * `errors => { <option> => \"<message>, <message>\" }`. It therefore changes when somebody else's\n * rule changes, and none of it is a parameter any write accepts. It belongs in attributes so a\n * plan can show that PVE considers this rule unsatisfiable, and nowhere near `matches`.\n */\nexport const problems = (value: unknown) =>\n typeof value === 'object' && value !== null\n ? Object.entries(value)\n .map(([option, message]) => `${option}: ${String(message)}`)\n .sort()\n .join('; ')\n : '';\n\n/**\n * A comment as PVE will actually STORE it, which is not always the string it was handed.\n *\n * ⛔ PVE DECODES `%XX` OUT OF EVERY COMMENT ON THE WAY IN AND NEVER PUTS IT BACK. MEASURED:\n * `PVE::SectionConfig::check_config` runs `decode_value` over each submitted field (line 1625 on\n * this node), the base rule plugin's `decode_value` sends `comment` through\n * `PVE::ParseUtils::decode_text` — `uri_unescape` then a utf8 decode — and `$get_api_ha_rule`\n * hands the comment straight back WITHOUT re-encoding it (only `resources` and `nodes` are\n * re-encoded there). So a declared `deploy%20window` is stored and returned as `deploy window`,\n * and a `matches` comparing the declared string would report an update on every plan forever\n * while every PUT wrote exactly what was already there.\n *\n * ★ SO THE COMPARISON MIRRORS THE DECODE RATHER THAN FIGHTING IT. Both sides then say what the\n * cluster will really hold, which is the same move `nodeList` above makes for a re-sorted list.\n * ⚠️ GROUPS OF `%XX` ARE DECODED TOGETHER so a multi-byte utf8 sequence survives; a lone `%` or a\n * malformed sequence is left alone, as `uri_unescape` leaves it. The one place this differs from\n * Perl is a sequence that is valid percent-encoding but invalid utf8: Perl substitutes U+FFFD,\n * this leaves the escape. Nothing in a comment should be reaching for that.\n */\nexport const commentText = (raw: string) =>\n raw.replace(/(?:%[0-9a-fA-F]{2})+/g, (escaped) => {\n try {\n return decodeURIComponent(escaped);\n } catch {\n return escaped;\n }\n });\n\n/**\n * Every managed optional, per type: the value to send, or undefined for \"clear it\".\n *\n * ⛔ `disable=0` DOES NOT CLEAR A DISABLED RULE, AND THAT IS THE WORST TRAP IN THIS FAMILY.\n * MEASURED in `/usr/share/perl5/PVE/API2/HA/Rules.pm`: both `create_rule` and `update_rule` run\n * `delete $param->{disable} if !$param->{disable};` BEFORE the plugin sees the form. A PUT\n * carrying `disable=0` is therefore a PUT carrying nothing — PVE answers 200, the rule stays\n * disabled, `matches` reports an update on the next plan, and the loop never settles. The only\n * way back on is `delete=disable`, which is why `disable` is in this table rather than in\n * `required` below.\n *\n * ⛔ AND THE BRANCHES CANNOT BE ONE SHARED MAP. `PVE::SectionConfig::delete_from_config` dies\n * `no such option '<k>'` for an option the plugin does not declare and `unable to delete\n * required option '<k>'` for one it requires — so `delete=strict` against a resource-affinity\n * rule is a hard failure, and `delete=nodes` or `delete=resources` would be one against either.\n * Only `comment`, `disable` and (node-affinity only) `strict` are clearable at all.\n *\n * ⚠️ AN EMPTY `comment` IS A CLEARED ONE. PVE stores whatever string it is given, so writing `''`\n * would leave the option present and empty rather than absent; `matches` reads both as `''`, but\n * only the delete actually removes the line.\n */\nexport const optional = (props: HaRuleProps): Record<string, string | undefined> => ({\n comment: props.comment === undefined || props.comment === '' ? undefined : props.comment,\n disable: props.disable === true ? '1' : undefined,\n ...(props.type === 'node-affinity' ? { strict: props.strict === true ? '1' : undefined } : {}),\n});\n\n/**\n * The fields sent on EVERY write, create and update alike.\n *\n * ⛔ `type` GOES OUT ON THE UPDATE TOO, AND LEAVING IT OFF BREAKS EVERY PUT. It reads like a\n * create-only discriminant — the handler certainly treats it as one, taking the plugin from the\n * STORED rule — but the PUT is still validated against a `oneOf` keyed on it. MEASURED in\n * `PVE::JSONSchema::check_one_of` on this node: when the type property is absent the validator\n * marks EVERY other key unknown and, unless the whole `oneOf` is itself optional, errors on the\n * type property; its own comment says \"Its type property is otherwise never optional\", and\n * `SectionConfig::updateSchema` builds that `oneOf` through `combine_schemas` without an\n * `optional` flag. So an update that omitted it would fail parameter verification with a pile of\n * \"unexpected property\" errors pointing at the fields it did send. It is safe to send because a\n * rule of the other type is reported ABSENT by `attributes` and never reaches a PUT.\n *\n * ⚠️ `affinity` IS SENT UNCONDITIONALLY FOR BOTH TYPES. PVE requires it on a resource-affinity\n * create and defaults it to `positive` on a node-affinity one; sending it either way means the\n * read-back matches on the first plan after the create rather than relying on PVE materialising\n * its own default into the file.\n *\n * ⚠️ THE LISTS GO OUT IN THEIR NORMALISED FORM, which is not required but is free: PVE re-sorts\n * them anyway, so writing what it will hand back keeps the config file readable next to the\n * declaration that produced it.\n *\n * ⚠️ NO `digest`. PVE accepts one on PUT as an optimistic lock, but the only digest this provider\n * could send is the one from its own read moments earlier — and it is a digest of the WHOLE\n * rules file, so any unrelated rule written in between would turn a correct update into a\n * spurious failure. The factory's read-back guard is the check that stays.\n */\nconst required = (props: HaRuleProps): Record<string, string> => ({\n affinity: props.affinity,\n resources: csv(props.resources),\n type: props.type,\n ...(props.type === 'node-affinity' ? { nodes: nodeList(props.nodes) } : {}),\n});\n\nexport const body = (props: HaRuleProps) => {\n const fields = required(props);\n for (const [option, value] of Object.entries(optional(props))) {\n if (value !== undefined) fields[option] = value;\n }\n return fields;\n};\n\n/**\n * The options an update must explicitly remove.\n *\n * ⛔ A PUT THAT OMITS A FIELD DOES NOT CLEAR IT — `update_rule` merges the form into the stored\n * rule (`$rule->{$_} = $opts->{$_} for keys $opts->%*`) — so a managed optional needs a matching\n * `delete=` the moment its prop goes away. Both halves come off the one table above, which makes\n * \"managed but not clearable\" impossible to write here.\n * ⚠️ NEVER BOTH AT ONCE: `delete_from_config` dies `cannot set and delete property '<k>' at the\n * same time!`. The table answers a value or `undefined`, never both, so the two lists are\n * disjoint by construction.\n * ⚠️ THE CREATE FORM CANNOT USE THIS. `POST /cluster/ha/rules` has no `delete` parameter at all\n * (MEASURED from the cluster's own schema), and it needs none: an omitted optional on a brand\n * new rule is simply absent.\n */\nexport const clearList = (props: HaRuleProps) =>\n Object.entries(optional(props))\n .filter(([, value]) => value === undefined)\n .map(([option]) => option);\n",
|
|
@@ -114,8 +114,8 @@
|
|
|
114
114
|
"/**\n * `declareProvisionBaseline` — the provisioning baseline (provision-baseline.ts) as resources, so a\n * stack adopts what the bootstrap made and keeps it: the role, the mint group, one user per lane\n * (its group membership included) and the grant binding each user to its role on `/`.\n *\n * const lane = yield* declareProvisionBaseline('pve', target);\n * // names are generic by default; a site passes its own:\n * const lane = yield* declareProvisionBaseline('pve', target, { role: 'Provisioner' });\n *\n * Provide `ProxmoxRoleProvider()`, `ProxmoxGroupProvider()`, `ProxmoxUserProvider()` and\n * `ProxmoxAclProvider()` with `FetchHttpClient.layer`.\n *\n * ⛔ EVERY RESOURCE HERE RETAINS. This is the branch the whole package sits on (user.ts): dropping\n * the call from a stack must drop state, never the role, the users or their grants — deleting the\n * provision user revokes every lease at once, the plan that would recreate it included.\n * ⛔ ADOPTION IS THE OPERATOR'S TO STATE, AS EVERYWHERE IN THE KIT (docs/ownership.md). The first\n * deploy after the bootstrap finds all of this live with no state: run it with `--adopt`, or pass\n * `{ adopt: true }`, which pipes `adopt(true)` onto each resource. `{ adopt: false }` pins them\n * refused under a deploy-wide `--adopt`. Left out, the deploy's own policy decides.\n * ⚠️ TODAY THE FOUR FAMILIES STILL READ A LIVE OBJECT WITH NO STATE AS OURS (the `pveHandlers`\n * limit in ownership.md), so the flag is not yet what stops a claim. It is stated here so that\n * when they follow the rule, a stack built on this helper already says what it means.\n * ★ THE BOOTSTRAP MAKES EXACTLY THIS, so a clean adoption writes nothing: the same privileges, the\n * same comment, the same single group per user (provision-bootstrap.ts reads the same baseline).\n * ★ PLAIN NAMES, NOT ONE RESOURCE'S OUTPUT IN ANOTHER'S PROPS. An Output would order the creates,\n * but Alchemy skips the adoption probe while any prop is one (Plan.ts), so the first deploy after\n * the bootstrap would plan `create` for objects that are all there. Order never matters here:\n * nothing in this package can run before the bootstrap, and after it everything exists.\n */\nimport { adopt } from 'alchemy/AdoptPolicy';\nimport * as RemovalPolicy from 'alchemy/RemovalPolicy';\nimport * as Effect from 'effect/Effect';\nimport { ProxmoxAcl } from './acl.ts';\nimport type { PveTarget } from './credentials.ts';\nimport { ProxmoxGroup } from './group.ts';\nimport { type ProvisionNames, provisionBaseline } from './provision-baseline.ts';\nimport { ProxmoxRole } from './role.ts';\nimport { ProxmoxUser } from './user.ts';\n\nexport interface DeclareProvisionOptions {\n /** `true`/`false` pipe `adopt(…)` onto every resource; omitted, the deploy's policy decides. */\n readonly adopt?: boolean;\n}\n\n/**\n * The baseline for one cluster. `id` prefixes every logical id (`<id>-role`, `<id>-mint-group`,\n * `<id>-provision-user`, `<id>-provision-grant`, and the `read` pair), so one stack can declare a\n * baseline per cluster. `users` and `grants` come back in `baseline.users` / `baseline.grants`\n * order: provision, then read. Fails, before declaring anything, on a name the baseline refuses.\n */\nexport const declareProvisionBaseline = (\n id: string,\n target: PveTarget,\n names: ProvisionNames = {},\n options: DeclareProvisionOptions = {},\n) =>\n Effect.gen(function* () {\n const baseline = yield* Effect.try({\n catch: (cause) => (cause instanceof Error ? cause : new Error(String(cause))),\n try: () => provisionBaseline(names),\n });\n const owned = <A, R>(resource: Effect.Effect<A, never, R>) => {\n const kept = resource.pipe(RemovalPolicy.retain());\n return options.adopt === undefined ? kept : kept.pipe(adopt(options.adopt));\n };\n const role = yield* owned(\n ProxmoxRole(`${id}-role`, {\n privs: [...baseline.role.privs],\n roleid: baseline.role.roleid,\n target,\n }),\n );\n const group = yield* owned(ProxmoxGroup(`${id}-mint-group`, { ...baseline.group, target }));\n // ★ `Effect.all` over mapped declarations (sequential), as cloudflare-permission-groups.ts does:\n // oxlint's unicorn/no-array-for-each cannot tell `Effect.forEach` from `Array#forEach`.\n const users = yield* Effect.all(\n baseline.users.map((user) =>\n owned(\n ProxmoxUser(`${id}-${user.lane}-user`, {\n comment: user.comment,\n groups: [...user.groups],\n target,\n userid: user.userid,\n }),\n ),\n ),\n );\n const grants = yield* Effect.all(\n baseline.grants.map((grant) =>\n owned(\n ProxmoxAcl(`${id}-${grant.lane}-grant`, {\n path: '/',\n propagate: true,\n roleid: grant.roleid,\n target,\n type: 'user',\n ugid: grant.userid,\n }),\n ),\n ),\n );\n return { baseline, grants, group, role, users };\n });\n",
|
|
115
115
|
"/**\n * `Proxmox.Role` — a PVE role: one name, one set of privileges. The object every other resource\n * in this package stands on, because a role is what the provision credential actually holds.\n *\n * ★ THIS IS WHERE pool.ts's ⚠️ STOPS BEING A MEMORY. Declared here, a hand edit shows up as\n * `1 to update` rather than as a 403 six weeks later in the middle of something else.\n *\n * ⚠️ A DECLARATION REPLACES THE PRIVILEGE SET; IT DOES NOT ADD TO IT. `PUT /access/roles/{roleid}`\n * accepts an `append` flag and this resource deliberately never sends it (role-wire.ts) — with\n * append a role could only ever grow, the same perpetual diff by a different road. The\n * consequence: anything a human added by hand is REVOKED on the next deploy unless it is in\n * `privs`. Copy the live set out of `pveum role list` before declaring a role that already\n * exists; do not type it from memory.\n *\n * ⛔ A ROLE CAN LOCK ITS OWN PROVIDER OUT, AND NOTHING IN THIS PACKAGE CAN UNDO IT. Reconcile runs\n * as the provision credential, and that credential holds a role. Declare THAT role without the\n * privileges the provider needs — `Sys.Modify` on `/access` above all — and the write succeeds,\n * after which every later plan reads 403 and the repair has to happen out of band as `root@pam`\n * over SSH.\n *\n * ⚠️ PVE REFUSES TO EDIT ITS OWN BUILT-IN ROLES (`Administrator`, `NoAccess`, the `PVE*` set), and\n * the LIST read (below) DOES carry the `special` flag that marks them, unlike the item endpoint\n * this file used before the distilled migration — `role-wire.ts`'s `attributesOf` does not use\n * it, but a caller reading `list`'s own answer could. A declaration aimed at a built-in role\n * still reads back cleanly and fails at write time. Declare roles you own.\n *\n * ★ PRIVILEGES A RECONCILE NEEDS: `Sys.Audit` on `/access` to read and diff, `Sys.Modify` on\n * `/access` to create, update or delete. Not `Permissions.Modify` — that is a different object.\n *\n * ★ READ VIA THE LIST, NOT THE ITEM — A DELIBERATE CHANGE FROM THE PRE-MIGRATION CODE, AND THE\n * REASON IS THE ITEM'S OWN GENERATED SCHEMA. `access.getAccessRole`'s response\n * (`GetAccessRoleResponse`) enumerates a FIXED list of ~47 known privilege field names\n * (`Sys_Modify`, `VM_Allocate`, …), each its own optional property — MEASURED in\n * `@distilled.cloud/proxmox`'s generated `access.ts`. A privilege this package's generator did\n * not know about would silently not appear as a field at all, and this file's old `privs: []`\n * reconstruction would drop it from state without a diff ever seeing the loss. The LIST read\n * (`access.listAccessRoles`) answers `privs` as the SAME plain comma string PVE's item read\n * also disagreed with the index about pre-migration — a shape with no fixed enumeration to fall\n * behind. `find` below (role-wire.ts) does the item-read's old job client-side.\n * ⚠️ REASONED, NOT MEASURED, THAT THE LIST READ NEEDS NO MORE THAN `read`'s AUDITOR SHAPE. The\n * item read's own privilege check (`Sys.Audit` on `/access`) was measured; the list's was not\n * separately checked, but PVE's own convention is that an index read is never MORE restrictive\n * than its item. `readRole` stays at the default `read` on that basis, same as before.\n *\n * ★ MIGRATED OFF `client.ts`'s generic `pve()`/`pveHandlers` ONTO `@distilled.cloud/proxmox`'s\n * typed `access.listAccessRoles`/`createAccessRole`/`putAccessRole`/`deleteAccessRole`\n * (2026-09-24, decision 43's proxmox walk-down). `distilled-pve.ts`'s `runPve` replaces\n * `pve()`; the cries-wolf fix is wired the same way as acl.ts, group.ts and user.ts.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as access from '@distilled.cloud/proxmox/access';\nimport * as Effect from 'effect/Effect';\nimport { guardWrite } from './distilled-guard.ts';\nimport {\n ROLE_CREATE,\n ROLE_UPDATE,\n attributesOf,\n createForm,\n find,\n matches,\n updateForm,\n} from './role-wire.ts';\nimport type { PveRequirements, WithTarget } from './resource-spec.ts';\nimport { runPve } from './distilled-pve.ts';\nimport {\n UNREADABLE,\n type Unreadable,\n readOrUnreadable,\n unreadableWarning,\n} from './unreadable-read.ts';\n\nexport interface RoleProps extends WithTarget {\n /**\n * PVE's primary key for a role.\n *\n * ⚠️ THERE IS NO RENAME. `path` is built from this, so changing it makes the factory read\n * nothing live, create a role under the new name, and leave the old one on the cluster with\n * nobody managing it. Delete the resource and declare a new one rather than editing this.\n */\n roleid: string;\n /**\n * The COMPLETE privilege set, e.g. `['VM.Allocate', 'VM.Audit', 'Sys.Audit']`. Order and\n * duplicates do not matter — see the header — but completeness does: this list is the\n * role, not an addition to it.\n *\n * ⚠️ DECLARE AT LEAST ONE. A role with no privileges grants nothing and reads back as an empty\n * document, which reconcile cannot tell apart from an object that is not there.\n */\n privs: string[];\n}\n\nexport interface RoleAttributes {\n roleid: string;\n /** Sorted and de-duplicated on the way in, so persisted state is identical across plans. */\n privs: string[];\n}\n\nexport interface ProxmoxRole extends Resource<\n 'Proxmox.Role',\n RoleProps,\n RoleAttributes,\n never,\n PveRequirements\n> {}\n\nexport const ProxmoxRole = Resource<ProxmoxRole>('Proxmox.Role');\n\n/**\n * ★ Default `read` role — see the header's ⚠️ on the list read's privilege requirement.\n * ⛔ NO `orElseSucceed` — found 2026-09-24, the same bug class as the credential denial fix. A\n * role's absence is ALWAYS a SUCCESSFUL read (the list comes back and the role is not in it —\n * `access.listAccessRoles` never 404s/500s per-role the way `getAccessUser`/`getAccessGroup`\n * do, MEASURED), so this family never needed a folding/non-folding split the way user.ts and\n * group.ts do: any THROWN failure here is genuinely unexpected and must propagate and fail the\n * whole plan loudly, in `diff`, `read` and `reconcile` alike — never fold to \"absent → update\".\n */\nconst readRole = (props: RoleProps) =>\n readOrUnreadable(runPve(props.target, 'read', false, access.listAccessRoles({}))).pipe(\n Effect.map((rows) => {\n if (rows === UNREADABLE) return UNREADABLE;\n const row = find(rows, props.roleid);\n return row === undefined ? undefined : attributesOf(row, props);\n }),\n );\n\n/** `read`/`reconcile` return `Attributes | undefined`; only `diff` tells `UNREADABLE` apart. */\nconst dropUnreadable = (live: RoleAttributes | Unreadable | undefined) =>\n live === UNREADABLE ? undefined : live;\n\nexport const ProxmoxRoleProvider = () =>\n Provider.effect(\n ProxmoxRole,\n Effect.succeed(\n ProxmoxRole.Provider.of({\n /**\n * ⛔ AN EMPTY LIST, AND NOWHERE DOES IT MATTER MORE. `GET /access/roles` returns every\n * role on the cluster, PVE's own built-ins included. Adoption is an explicit act.\n */\n list: () => Effect.succeed([]),\n read: Effect.fn(function* ({ olds }) {\n return dropUnreadable(yield* readRole(olds));\n }),\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n yield* guardWrite(ROLE_CREATE, createForm(news), output === undefined);\n yield* guardWrite(ROLE_UPDATE, updateForm(news), false);\n if (output === undefined) return undefined;\n const live = yield* readRole(news);\n // ⛔ THE CRIES-WOLF FIX: a refused read used to fall into `undefined` below and force\n // `update` on a role that was plainly there — see unreadable-read.ts.\n if (live === UNREADABLE) {\n yield* unreadableWarning('Proxmox.Role', news.roleid);\n return { action: 'noop' } as const;\n }\n if (live === undefined) {\n yield* guardWrite(ROLE_CREATE, createForm(news), true);\n return { action: 'update' } as const;\n }\n return matches(live, news)\n ? ({ action: 'noop' } as const)\n : ({ action: 'update' } as const);\n }),\n reconcile: Effect.fn(function* ({ news }) {\n // ⚠️ `dropUnreadable`: reconcile only runs once `provision` already minted for the\n // write below, so `UNREADABLE` here is a narrow race, not the routine case `diff`\n // handles — and a wrongful create in that race fails loudly (\"already exists\")\n // rather than silently duplicating, group.ts's reconcile has the same note.\n const before = dropUnreadable(yield* readRole(news));\n yield* guardWrite(ROLE_CREATE, createForm(news), before === undefined);\n yield* guardWrite(ROLE_UPDATE, updateForm(news), false);\n if (before === undefined) {\n yield* runPve(\n news.target,\n 'provision',\n true,\n access.createAccessRole(createForm(news)),\n );\n } else if (!matches(before, news)) {\n yield* runPve(news.target, 'provision', true, access.putAccessRole(updateForm(news)));\n }\n const after = dropUnreadable(yield* readRole(news));\n if (after === undefined) {\n return yield* Effect.die(\n new Error(\n `access/roles/${news.roleid}: the write returned no error but the role is ` +\n 'still absent. PVE wraps every answer in {\"data\":...} and can report success ' +\n 'on a call that did nothing -- read back rather than trusting the status code.',\n ),\n );\n }\n return after;\n }),\n /**\n * ⛔ DO NOT CARRY resource.ts's DESTROY REASSURANCE OVER TO THIS ONE. PVE does not refuse\n * to delete a role still in use — whoever is bound to it loses those privileges the\n * moment it goes, and the credential THIS PROVIDER runs with is bound through exactly\n * such a binding. Checking who holds a role before removing it is an operator's job.\n */\n delete: Effect.fn(function* ({ olds }) {\n yield* runPve(\n olds.target,\n 'provision',\n true,\n access.deleteAccessRole({ roleid: olds.roleid }),\n );\n }),\n }),\n ),\n );\n",
|
|
116
116
|
"/**\n * `Proxmox.Role`'s wire shape: PVE's create/update forms and how a live list row becomes\n * attributes. Split out of role.ts (2026-09-24, the distilled migration) to keep that file\n * under the 250-line cap — the api-token.ts/api-token-form.ts seam.\n */\nimport type * as access from '@distilled.cloud/proxmox/access';\nimport type { RoleAttributes, RoleProps } from './role.ts';\n\nexport const ROLE_CREATE = 'pve:POST /access/roles';\nexport const ROLE_UPDATE = 'pve:PUT /access/roles/{roleid}';\n\n/**\n * The only shape two privilege sets may be compared in: sorted, de-duplicated, blanks dropped.\n *\n * ⚠️ THE TRIM AND THE EMPTY FILTER ARE NOT DECORATION. `'A,B,'.split(',')` yields a trailing `''`,\n * and a hand-written list is quite likely to carry a stray space after a comma. Either one turns\n * into a phantom member that no live answer can contain, so `matches` would be false on every\n * plan and the deploy would rewrite the role to exactly what it already was.\n */\nexport const canonical = (privs: readonly string[]): string[] =>\n [...new Set(privs.map((priv) => priv.trim()).filter((priv) => priv.length > 0))].sort();\n\nexport const createForm = (props: RoleProps): access.CreateAccessRoleRequest => ({\n privs: canonical(props.privs).join(','),\n roleid: props.roleid,\n});\n\n/**\n * ⚠️ NO `append` FIELD, DELIBERATELY. Sending `append=1` would make every update additive, so a\n * privilege could be granted from here but never taken away — see role.ts's own header.\n */\nexport const updateForm = (props: RoleProps): access.PutAccessRoleRequest => ({\n privs: canonical(props.privs).join(','),\n roleid: props.roleid,\n});\n\nexport const find = (rows: readonly access.ListAccessRolesResponseBodyItem[], roleid: string) =>\n rows.find((row) => row.roleid === roleid);\n\nexport const attributesOf = (\n row: access.ListAccessRolesResponseBodyItem,\n props: RoleProps,\n): RoleAttributes => ({\n privs: canonical(row.privs === undefined ? [] : row.privs.split(',')),\n roleid: props.roleid,\n});\n\nexport const matches = (attributes: RoleAttributes, props: RoleProps) =>\n canonical(attributes.privs).join(',') === canonical(props.privs).join(',');\n",
|
|
117
|
-
"/**\n * `Proxmox.User` — a PVE account. The identity every other resource in this package borrows.\n *\n * ★ THIS IS THE ONE OBJECT THAT CAN CUT THE BRANCH IT SITS ON. The user the credential mount vends\n * tokens for, and the group whose members are allowed to mint, are what `credentials.ts`\n * ultimately asks OpenBao for. A cluster rebuilt without them cannot plan ANY resource here —\n * including the plan that would recreate them, which needs a credential to run. So this resource\n * is drift repair for an account that already exists (comment, email, enable, expire, groups),\n * not a bootstrap: the first mint user is made on a node with `pveum user add`, by a human, once.\n *\n * ⛔ THERE IS NO `password` PROP, AND ADDING ONE WOULD BE A LEAK RATHER THAN A FEATURE. Alchemy\n * writes resource state WITHOUT encryption — see the ⛔ in `credentials.ts` — so a password prop\n * would sit in clear in whatever database the stack points `state` at, and in every backup of it.\n * It is also unnecessary: `password` is accepted only by the CREATE call, changing one afterwards\n * is `PUT /access/password` (a different endpoint, a different privilege), and an account in a\n * realm such as `@pam`, `@ldap` or `@openid` has no PVE-side password at all — the realm holds\n * it. Out of scope by design. `keys` (TFA) is omitted for the same reason.\n *\n * ⚠️ `groups` COMES BACK AS AN ARRAY AND GOES OUT AS A COMMA STRING, and the asymmetry is the whole\n * trap. GET answers `[\"a\",\"b\"]`, POST/PUT want `a,b`, and PVE returns the list in ITS order, not\n * the declared one. Both sides are normalised to a sorted, deduplicated set — see user-wire.ts.\n *\n * ⚠️ `tokens` IS NESTED AND IS NOT SETTABLE THROUGH THIS ENDPOINT. The read hands back a map of the\n * account's API tokens; `PUT /access/users/{userid}` has no parameter for them, because they are\n * their own objects under `.../token/{tokenid}` (api-token.ts). So they are reported as an\n * attribute and kept OUT of `matches`, exactly like `pool.members`. Reported, never declared.\n *\n * ⚠️ RECONCILE NEEDS PRIVILEGES A GUEST-ONLY ROLE DOES NOT HOLD, so they are stated rather than met\n * as a 403 in the middle of a deploy. `PROVISION_PRIVILEGES` (provision-baseline.ts) carries:\n * · `Realm.AllocateUser` on `/access/realm/<realm>` — create and delete.\n * · `User.Modify` on `/access/groups`, and on `/access/groups/<group>` for EVERY group named in\n * `groups` — create, update and delete. PVE checks the groups you are granting, not just the\n * user, so a role wide enough to edit the account can still be refused for one group.\n * · `Sys.Audit` (or `User.Modify`) for the read, which the `read` role's auditor already has.\n *\n * ⚠️ A MISSING USER IS A 500, NOT A 404 — MEASURED against the live cluster, \"no such user\n * ('x@pve')\". distilled turns that into an `InternalServerError`, with no distinct \"not found\"\n * tag to catch. `user-wire.ts`'s `readUser` (used by `read`/`reconcile`, where the create\n * workflow needs \"absent\" from exactly this failure) still folds it; `readUserOrFail` (used by\n * `diff` below) does not — see that function's own header for why folding it there was the\n * cries-wolf bug all over again, just for a genuine PVE quirk instead of a permission denial.\n *\n * ⚠️ THE WIRE URL FOR THIS FAMILY CHANGED, THOUGH NOTHING A CALLER SEES DID. MEASURED\n * (user.test.ts): distilled's `{userid}` label substitution percent-encodes it —\n * `iac@pve` -> `.../access/users/iac%40pve` — where `client.ts`'s plain string concatenation\n * sent the `@` literally. A real PVE (any HTTP server) decodes both the same way, so this is\n * not a behaviour change a stack observes; a fake in a test has to decode it, `client.ts`'s\n * own fixtures never had to.\n *\n * ★ MIGRATED OFF `client.ts`'s generic `pve()`/`pveHandlers` ONTO `@distilled.cloud/proxmox`'s\n * typed `access.getAccessUser`/`createAccessUser`/`putAccessUser`/`deleteAccessUser`\n * (2026-09-24, decision 43's proxmox walk-down, access sub-area). `distilled-pve.ts`'s `runPve`\n * replaces `pve()` as in acl.ts and group.ts; the cries-wolf fix is wired the same way.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as access from '@distilled.cloud/proxmox/access';\nimport * as Effect from 'effect/Effect';\nimport { guardWrite } from './distilled-guard.ts';\nimport type { PveRequirements, WithTarget } from './resource-spec.ts';\nimport { runPve } from './distilled-pve.ts';\nimport { UNREADABLE, unreadableWarning } from './unreadable-read.ts';\nimport {\n USER_CREATE,\n USER_UPDATE,\n createForm,\n dropUnreadable,\n matches,\n readUser,\n readUserOrFail,\n updateForm,\n} from './user-wire.ts';\n\nexport interface UserProps extends WithTarget {\n /**\n * ⛔ REALM-QUALIFIED, ALWAYS: `someone@pve`, `someone@pam`. The realm is part of PVE's primary\n * key, and a bare name is refused with \"value does not look like a valid user id\".\n *\n * ⚠️ PVE HAS NO RENAME. Editing this prop makes the path point at a DIFFERENT account, which\n * reads as absent and is then created — while the old one stays on the cluster with its tokens\n * and its ACL entries. Renaming is a delete and a create, and should be declared as one.\n */\n userid: string;\n /** Free text shown in the UI. */\n comment?: string;\n /** PVE accepts the empty string here; that is how an address is cleared. */\n email?: string;\n /** Default true, matching PVE's own `enable=1`. False disables login without deleting anything. */\n enable?: boolean;\n /** Seconds since the epoch. 0 — the default — means the account never expires. */\n expire?: number;\n /** Group memberships. Order and duplicates carry no meaning — see the ⚠️ in the header. */\n groups?: string[];\n firstname?: string;\n lastname?: string;\n}\n\nexport interface UserAttributes {\n userid: string;\n comment: string;\n email: string;\n enable: boolean;\n expire: number;\n /** Normalised: sorted, deduplicated, whatever shape the cluster used on the wire. */\n groups: string[];\n firstname: string;\n lastname: string;\n /**\n * API token names this account owns. Reported so a plan can show what a delete would revoke;\n * never compared, because this endpoint cannot set them.\n */\n tokens: string[];\n}\n\nexport interface ProxmoxUser extends Resource<\n 'Proxmox.User',\n UserProps,\n UserAttributes,\n never,\n PveRequirements\n> {}\n\nexport const ProxmoxUser = Resource<ProxmoxUser>('Proxmox.User');\n\nexport const ProxmoxUserProvider = () =>\n Provider.effect(\n ProxmoxUser,\n Effect.succeed(\n ProxmoxUser.Provider.of({\n /**\n * ⛔ EMPTY, AND MORE POINTEDLY SO HERE THAN ANYWHERE ELSE. `GET /access/users` answers\n * with every account on the cluster: `root@pam`, every human who logs in, every service\n * identity someone made years ago. Adoption is an explicit act.\n */\n list: () => Effect.succeed([]),\n // ⚠️ FOLDS ONLY WHEN `output` IS `undefined` — MEASURED 2026-09-24, an adversarial review\n // of this very fix caught the gap. The engine calls this ONE hook from FOUR places\n // (alchemy/src/{Plan,Apply,Drift}.ts), and only `output` tells them apart: Plan.ts's\n // cold-start adoption probe and interrupted-create recovery, and Apply.ts's\n // delete-recovery, all pass `output: undefined` — nothing is confirmed to exist yet, so\n // `readUser`'s fold is still needed there or a brand-new account could never be adopted\n // or created. `Drift.ts` (`alchemy drift`/`sync`/`deploy --detect-drift`) is different:\n // it calls this on an ALREADY-CONFIRMED row (`output: old.attr`, defined), exactly\n // `diff`'s own situation below — a transient failure folded to `undefined` there is\n // reported as `{action: 'missing'}` with NO error at all, the cries-wolf bug again, one\n // command over. `readUserOrFail` on that branch propagates it instead.\n read: Effect.fn(function* ({ olds, output }) {\n return dropUnreadable(\n yield* output === undefined ? readUser(olds) : readUserOrFail(olds),\n );\n }),\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n yield* guardWrite(USER_CREATE, createForm(news), output === undefined);\n yield* guardWrite(USER_UPDATE, updateForm(news), false);\n if (output === undefined) return undefined;\n // ⚠️ `readUserOrFail`, NOT `readUser` — see that function's own header (user-wire.ts).\n // A genuine failure here propagates and fails the whole plan loudly instead of\n // folding to \"absent\" and forcing a false update, the cries-wolf class of bug.\n const live = yield* readUserOrFail(news);\n // ⛔ THE CRIES-WOLF FIX: a refused read used to fall into `undefined` below and force\n // `update` on an account that was plainly there — see unreadable-read.ts.\n if (live === UNREADABLE) {\n yield* unreadableWarning('Proxmox.User', news.userid);\n return { action: 'noop' } as const;\n }\n if (live === undefined) {\n yield* guardWrite(USER_CREATE, createForm(news), true);\n return { action: 'update' } as const;\n }\n return matches(live, news)\n ? ({ action: 'noop' } as const)\n : ({ action: 'update' } as const);\n }),\n reconcile: Effect.fn(function* ({ news }) {\n // ⚠️ `dropUnreadable`: reconcile only runs once `provision` already minted for the\n // write below, so `UNREADABLE` here is a narrow race, not the routine case `diff`\n // handles — and a wrongful create in that race fails loudly (\"already exists\")\n // rather than silently duplicating, group.ts's reconcile has the same note.\n const before = dropUnreadable(yield* readUser(news));\n yield* guardWrite(USER_CREATE, createForm(news), before === undefined);\n yield* guardWrite(USER_UPDATE, updateForm(news), false);\n if (before === undefined) {\n yield* runPve(\n news.target,\n 'provision',\n true,\n access.createAccessUser(createForm(news)),\n );\n } else if (!matches(before, news)) {\n yield* runPve(news.target, 'provision', true, access.putAccessUser(updateForm(news)));\n }\n const after = dropUnreadable(yield* readUser(news));\n if (after === undefined) {\n return yield* Effect.die(\n new Error(\n `access/users/${news.userid}: the write returned no error but the account is ` +\n 'still absent. PVE wraps every answer in {\"data\":...} and can report success ' +\n 'on a call that did nothing -- read back rather than trusting the status code.',\n ),\n );\n }\n return after;\n }),\n /**\n * ⛔ DELETING A USER TAKES ITS API TOKENS AND ITS ACL ENTRIES WITH IT, in one call and\n * without a confirmation. For the identity a credential mount vends from, that revokes\n * every outstanding lease at once and every plan in this package stops working — this\n * one included. PVE refuses only for `root@pam`; for everyone else it simply obeys.\n */\n delete: Effect.fn(function* ({ olds }) {\n yield* runPve(\n olds.target,\n 'provision',\n true,\n access.deleteAccessUser({ userid: olds.userid }),\n );\n }),\n }),\n ),\n );\n",
|
|
118
|
-
"/**\n * `Proxmox.User`'s wire shape: PVE's create/update forms, how a live item becomes attributes,\n * and the read itself. Split out of user.ts (2026-09-24, the distilled migration) to keep that\n * file under the 250-line cap — the api-token.ts/api-token-form.ts seam.\n */\nimport * as access from '@distilled.cloud/proxmox/access';\nimport * as Effect from 'effect/Effect';\nimport { runPve } from './distilled-pve.ts';\nimport type { UserAttributes, UserProps } from './user.ts';\nimport { UNREADABLE, type Unreadable, readOrUnreadable } from './unreadable-read.ts';\nimport { bool, text } from './values.ts';\n\nexport const USER_CREATE = 'pve:POST /access/users';\nexport const USER_UPDATE = 'pve:PUT /access/users/{userid}';\n\n/**\n * ⚠️ MORE FORGIVING THAN `lxc.ts`'s `num`, ON PURPOSE, AND DELIBERATELY NOT `values.ts`'s\n * `int` (a different function of the same name, `Number.parseInt` on a STRING with a\n * caller-given fallback). PVE's JSON is generated from a Perl schema and an integer field can\n * arrive as `0` or `\"0\"` depending on the release and the endpoint; `Number(value ?? 0)`\n * accepts either without a strict `typeof === 'number'` that would silently fall back for the\n * string form and report an update `matches` can never settle.\n */\nconst int = (value: unknown) => {\n const parsed = typeof value === 'number' ? value : Number(value ?? 0);\n return Number.isFinite(parsed) ? parsed : 0;\n};\n\n/**\n * An array (what the read returns), a comma string (what older releases and the write side use), or\n * nothing — in; a sorted, deduplicated list out. Both sides of `matches` go through this, which is\n * the only reason the diff ever settles.\n */\nconst groupSet = (value: unknown): string[] => {\n const raw: unknown[] = Array.isArray(value)\n ? value\n : typeof value === 'string'\n ? value.split(',')\n : [];\n const names = raw.map((group) => text(group).trim()).filter((group) => group !== '');\n return [...new Set(names)].sort();\n};\n\n/**\n * ⚠️ THE SHAPE DEPENDS ON WHICH ENDPOINT YOU ASKED. Reading ONE user gives an object keyed by\n * token name; distilled types it `tokens?: unknown` for the same reason (the item and index\n * responses disagree, and this provider only ever reads the item). Anything but that shape is\n * reported as \"no tokens\" rather than guessed at.\n */\nconst tokenNames = (value: unknown): string[] =>\n typeof value === 'object' && value !== null && !Array.isArray(value)\n ? Object.keys(value).sort()\n : [];\n\n/** Everything mutable, in the form PVE wants. Create adds `userid`; update sends exactly this. */\nconst shape = (props: UserProps) => ({\n comment: props.comment ?? '',\n email: props.email ?? '',\n enable: props.enable === false ? '0' : '1',\n expire: String(props.expire ?? 0),\n firstname: props.firstname ?? '',\n /**\n * ⚠️ ALWAYS SENT, EVEN EMPTY. Omitting `groups` on a PUT leaves the existing memberships in\n * place, so a group removed from the declaration would never actually be removed. Same for\n * `email` and `comment`: the empty string is how PVE is told to clear a field.\n * ⚠️ AND `append` IS DELIBERATELY NOT SET. Its default (0) REPLACES the list; setting it to 1\n * would turn every reconcile into an add-only merge, which is the same non-settling diff.\n */\n groups: groupSet(props.groups).join(','),\n lastname: props.lastname ?? '',\n});\n\nexport const createForm = (props: UserProps): access.CreateAccessUserRequest => ({\n ...shape(props),\n userid: props.userid,\n});\n\nexport const updateForm = (props: UserProps): access.PutAccessUserRequest => ({\n ...shape(props),\n userid: props.userid,\n});\n\nconst attributesOf = (live: access.GetAccessUserResponse, props: UserProps): UserAttributes => ({\n comment: text(live.comment),\n email: text(live.email),\n /**\n * ⚠️ ABSENT MEANS ENABLED. PVE's schema defaults `enable` to 1 and does not always write the\n * key back for an enabled account. Reading absence as `false` would report an update on\n * every plan and then DISABLE the account on the deploy that \"fixed\" it.\n */\n enable: bool(live.enable, true),\n expire: int(live.expire),\n firstname: text(live.firstname),\n groups: groupSet(live.groups),\n lastname: text(live.lastname),\n tokens: tokenNames(live.tokens),\n /** ⚠️ FROM PROPS: `GET /access/users/{userid}` does not echo the userid back in its data. */\n userid: props.userid,\n});\n\n/**\n * ⚠️ `tokens` IS NOT COMPARED, and neither is anything create-only. What is compared is exactly\n * what a PUT can put back; a field PVE reports but will not accept is drift nobody can fix.\n */\nexport const matches = (attributes: UserAttributes, props: UserProps) =>\n attributes.comment === (props.comment ?? '') &&\n attributes.email === (props.email ?? '') &&\n attributes.enable === (props.enable !== false) &&\n attributes.expire === (props.expire ?? 0) &&\n attributes.firstname === (props.firstname ?? '') &&\n attributes.lastname === (props.lastname ?? '') &&\n attributes.groups.join(',') === groupSet(props.groups).join(',');\n\n/**\n * ★ Default `read` role for this family — only the write side needs `provision`.\n * ⛔ `{ userid: props.userid }`, NEVER THE WHOLE `props` — MEASURED 2026-09-24, the regression in\n * kit 0.31.1. `GetAccessUserRequest`'s schema declares only `userid` (a path label); any OTHER\n * key on the object passed to `access.getAccessUser` — `target`, `comment`, every field this\n * family's own props carry — is treated by distilled's `buildRequest` as an \"unknown key\" and\n * JSON-encoded onto the request as a BODY, on every one of these bodyless GETs. A stricter\n * fetch client than a bare `bun run` of this file refuses a GET carrying any body at all\n * (`TypeError [ERR_INVALID_ARG_VALUE]: fetch() request with GET/HEAD method cannot have body`),\n * which `runPveWith` retries across every member and exhausts identically —\n * `PveClusterExhausted`, then silently folded to \"absent\" by the old `orElseSucceed`, forcing a\n * false `update` on every account.\n */\nexport const readUserOrFail = (props: UserProps) =>\n readOrUnreadable(\n runPve(props.target, 'read', false, access.getAccessUser({ userid: props.userid })),\n ).pipe(Effect.map((live) => (live === UNREADABLE ? UNREADABLE : attributesOf(live, props))));\n\n/**\n * ⛔
|
|
117
|
+
"/**\n * `Proxmox.User` — a PVE account. The identity every other resource in this package borrows.\n *\n * ★ THIS IS THE ONE OBJECT THAT CAN CUT THE BRANCH IT SITS ON. The user the credential mount vends\n * tokens for, and the group whose members are allowed to mint, are what `credentials.ts`\n * ultimately asks OpenBao for. A cluster rebuilt without them cannot plan ANY resource here —\n * including the plan that would recreate them, which needs a credential to run. So this resource\n * is drift repair for an account that already exists (comment, email, enable, expire, groups),\n * not a bootstrap: the first mint user is made on a node with `pveum user add`, by a human, once.\n *\n * ⛔ THERE IS NO `password` PROP, AND ADDING ONE WOULD BE A LEAK RATHER THAN A FEATURE. Alchemy\n * writes resource state WITHOUT encryption — see the ⛔ in `credentials.ts` — so a password prop\n * would sit in clear in whatever database the stack points `state` at, and in every backup of it.\n * It is also unnecessary: `password` is accepted only by the CREATE call, changing one afterwards\n * is `PUT /access/password` (a different endpoint, a different privilege), and an account in a\n * realm such as `@pam`, `@ldap` or `@openid` has no PVE-side password at all — the realm holds\n * it. Out of scope by design. `keys` (TFA) is omitted for the same reason.\n *\n * ⚠️ `groups` COMES BACK AS AN ARRAY AND GOES OUT AS A COMMA STRING, and the asymmetry is the whole\n * trap. GET answers `[\"a\",\"b\"]`, POST/PUT want `a,b`, and PVE returns the list in ITS order, not\n * the declared one. Both sides are normalised to a sorted, deduplicated set — see user-wire.ts.\n *\n * ⚠️ `tokens` IS NESTED AND IS NOT SETTABLE THROUGH THIS ENDPOINT. The read hands back a map of the\n * account's API tokens; `PUT /access/users/{userid}` has no parameter for them, because they are\n * their own objects under `.../token/{tokenid}` (api-token.ts). So they are reported as an\n * attribute and kept OUT of `matches`, exactly like `pool.members`. Reported, never declared.\n *\n * ⚠️ RECONCILE NEEDS PRIVILEGES A GUEST-ONLY ROLE DOES NOT HOLD, so they are stated rather than met\n * as a 403 in the middle of a deploy. `PROVISION_PRIVILEGES` (provision-baseline.ts) carries:\n * · `Realm.AllocateUser` on `/access/realm/<realm>` — create and delete.\n * · `User.Modify` on `/access/groups`, and on `/access/groups/<group>` for EVERY group named in\n * `groups` — create, update and delete. PVE checks the groups you are granting, not just the\n * user, so a role wide enough to edit the account can still be refused for one group.\n * · `Sys.Audit` (or `User.Modify`) for the read, which the `read` role's auditor already has.\n *\n * ⚠️ A MISSING USER IS A 500, NOT A 404 — MEASURED against the live cluster, \"no such user\n * ('x@pve')\". The first SDK migration exposed it as `InternalServerError`, so its create\n * workflow needed a catch-all fold. SDK PR #265 now recognizes `UserNotFound`; `readUser`\n * catches only that tag, letting other cold-read/reconcile failures propagate. The strict\n * `readUserOrFail` path for confirmed rows remains unchanged: its original transient-failure\n * fix stopped the cries-wolf update with nothing compared (user-wire.ts).\n *\n * ⚠️ THE WIRE URL FOR THIS FAMILY CHANGED, THOUGH NOTHING A CALLER SEES DID. MEASURED\n * (user.test.ts): distilled's `{userid}` label substitution percent-encodes it —\n * `iac@pve` -> `.../access/users/iac%40pve` — where `client.ts`'s plain string concatenation\n * sent the `@` literally. A real PVE (any HTTP server) decodes both the same way, so this is\n * not a behaviour change a stack observes; a fake in a test has to decode it, `client.ts`'s\n * own fixtures never had to.\n *\n * ★ MIGRATED OFF `client.ts`'s generic `pve()`/`pveHandlers` ONTO `@distilled.cloud/proxmox`'s\n * typed `access.getAccessUser`/`createAccessUser`/`putAccessUser`/`deleteAccessUser`\n * (2026-09-24, decision 43's proxmox walk-down, access sub-area). `distilled-pve.ts`'s `runPve`\n * replaces `pve()` as in acl.ts and group.ts; the cries-wolf fix is wired the same way.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as access from '@distilled.cloud/proxmox/access';\nimport * as Effect from 'effect/Effect';\nimport { guardWrite } from './distilled-guard.ts';\nimport type { PveRequirements, WithTarget } from './resource-spec.ts';\nimport { runPve } from './distilled-pve.ts';\nimport { UNREADABLE, unreadableWarning } from './unreadable-read.ts';\nimport {\n USER_CREATE,\n USER_UPDATE,\n createForm,\n dropUnreadable,\n matches,\n readUser,\n readUserOrFail,\n updateForm,\n} from './user-wire.ts';\n\nexport interface UserProps extends WithTarget {\n /**\n * ⛔ REALM-QUALIFIED, ALWAYS: `someone@pve`, `someone@pam`. The realm is part of PVE's primary\n * key, and a bare name is refused with \"value does not look like a valid user id\".\n *\n * ⚠️ PVE HAS NO RENAME. Editing this prop makes the path point at a DIFFERENT account, which\n * reads as absent and is then created — while the old one stays on the cluster with its tokens\n * and its ACL entries. Renaming is a delete and a create, and should be declared as one.\n */\n userid: string;\n /** Free text shown in the UI. */\n comment?: string;\n /** PVE accepts the empty string here; that is how an address is cleared. */\n email?: string;\n /** Default true, matching PVE's own `enable=1`. False disables login without deleting anything. */\n enable?: boolean;\n /** Seconds since the epoch. 0 — the default — means the account never expires. */\n expire?: number;\n /** Group memberships. Order and duplicates carry no meaning — see the ⚠️ in the header. */\n groups?: string[];\n firstname?: string;\n lastname?: string;\n}\n\nexport interface UserAttributes {\n userid: string;\n comment: string;\n email: string;\n enable: boolean;\n expire: number;\n /** Normalised: sorted, deduplicated, whatever shape the cluster used on the wire. */\n groups: string[];\n firstname: string;\n lastname: string;\n /**\n * API token names this account owns. Reported so a plan can show what a delete would revoke;\n * never compared, because this endpoint cannot set them.\n */\n tokens: string[];\n}\n\nexport interface ProxmoxUser extends Resource<\n 'Proxmox.User',\n UserProps,\n UserAttributes,\n never,\n PveRequirements\n> {}\n\nexport const ProxmoxUser = Resource<ProxmoxUser>('Proxmox.User');\n\nexport const ProxmoxUserProvider = () =>\n Provider.effect(\n ProxmoxUser,\n Effect.succeed(\n ProxmoxUser.Provider.of({\n /**\n * ⛔ EMPTY, AND MORE POINTEDLY SO HERE THAN ANYWHERE ELSE. `GET /access/users` answers\n * with every account on the cluster: `root@pam`, every human who logs in, every service\n * identity someone made years ago. Adoption is an explicit act.\n */\n list: () => Effect.succeed([]),\n // ⚠️ FOLDS ONLY WHEN `output` IS `undefined` — MEASURED 2026-09-24, an adversarial review\n // of this very fix caught the gap. The engine calls this ONE hook from FOUR places\n // (alchemy/src/{Plan,Apply,Drift}.ts), and only `output` tells them apart: Plan.ts's\n // cold-start adoption probe and interrupted-create recovery, and Apply.ts's\n // delete-recovery, all pass `output: undefined` — nothing is confirmed to exist yet, so\n // `readUser`'s fold is still needed there or a brand-new account could never be adopted\n // or created. `Drift.ts` (`alchemy drift`/`sync`/`deploy --detect-drift`) is different:\n // it calls this on an ALREADY-CONFIRMED row (`output: old.attr`, defined), exactly\n // `diff`'s own situation below — a transient failure folded to `undefined` there is\n // reported as `{action: 'missing'}` with NO error at all, the cries-wolf bug again, one\n // command over. `readUserOrFail` on that branch propagates it instead.\n read: Effect.fn(function* ({ olds, output }) {\n return dropUnreadable(\n yield* output === undefined ? readUser(olds) : readUserOrFail(olds),\n );\n }),\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n yield* guardWrite(USER_CREATE, createForm(news), output === undefined);\n yield* guardWrite(USER_UPDATE, updateForm(news), false);\n if (output === undefined) return undefined;\n // ⚠️ `readUserOrFail`, NOT `readUser` — see that function's own header (user-wire.ts).\n // A genuine failure here propagates and fails the whole plan loudly instead of\n // folding to \"absent\" and forcing a false update, the cries-wolf class of bug.\n const live = yield* readUserOrFail(news);\n // ⛔ THE CRIES-WOLF FIX: a refused read used to fall into `undefined` below and force\n // `update` on an account that was plainly there — see unreadable-read.ts.\n if (live === UNREADABLE) {\n yield* unreadableWarning('Proxmox.User', news.userid);\n return { action: 'noop' } as const;\n }\n if (live === undefined) {\n yield* guardWrite(USER_CREATE, createForm(news), true);\n return { action: 'update' } as const;\n }\n return matches(live, news)\n ? ({ action: 'noop' } as const)\n : ({ action: 'update' } as const);\n }),\n reconcile: Effect.fn(function* ({ news }) {\n // ⚠️ `dropUnreadable`: reconcile only runs once `provision` already minted for the\n // write below, so `UNREADABLE` here is a narrow race, not the routine case `diff`\n // handles — and a wrongful create in that race fails loudly (\"already exists\")\n // rather than silently duplicating, group.ts's reconcile has the same note.\n const before = dropUnreadable(yield* readUser(news));\n yield* guardWrite(USER_CREATE, createForm(news), before === undefined);\n yield* guardWrite(USER_UPDATE, updateForm(news), false);\n if (before === undefined) {\n yield* runPve(\n news.target,\n 'provision',\n true,\n access.createAccessUser(createForm(news)),\n );\n } else if (!matches(before, news)) {\n yield* runPve(news.target, 'provision', true, access.putAccessUser(updateForm(news)));\n }\n const after = dropUnreadable(yield* readUser(news));\n if (after === undefined) {\n return yield* Effect.die(\n new Error(\n `access/users/${news.userid}: the write returned no error but the account is ` +\n 'still absent. PVE wraps every answer in {\"data\":...} and can report success ' +\n 'on a call that did nothing -- read back rather than trusting the status code.',\n ),\n );\n }\n return after;\n }),\n /**\n * ⛔ DELETING A USER TAKES ITS API TOKENS AND ITS ACL ENTRIES WITH IT, in one call and\n * without a confirmation. For the identity a credential mount vends from, that revokes\n * every outstanding lease at once and every plan in this package stops working — this\n * one included. PVE refuses only for `root@pam`; for everyone else it simply obeys.\n */\n delete: Effect.fn(function* ({ olds }) {\n yield* runPve(\n olds.target,\n 'provision',\n true,\n access.deleteAccessUser({ userid: olds.userid }),\n );\n }),\n }),\n ),\n );\n",
|
|
118
|
+
"/**\n * `Proxmox.User`'s wire shape: PVE's create/update forms, how a live item becomes attributes,\n * and the read itself. Split out of user.ts (2026-09-24, the distilled migration) to keep that\n * file under the 250-line cap — the api-token.ts/api-token-form.ts seam.\n */\nimport * as access from '@distilled.cloud/proxmox/access';\nimport * as Effect from 'effect/Effect';\nimport { runPve } from './distilled-pve.ts';\nimport type { UserAttributes, UserProps } from './user.ts';\nimport { UNREADABLE, type Unreadable, readOrUnreadable } from './unreadable-read.ts';\nimport { bool, text } from './values.ts';\n\nexport const USER_CREATE = 'pve:POST /access/users';\nexport const USER_UPDATE = 'pve:PUT /access/users/{userid}';\n\n/**\n * ⚠️ MORE FORGIVING THAN `lxc.ts`'s `num`, ON PURPOSE, AND DELIBERATELY NOT `values.ts`'s\n * `int` (a different function of the same name, `Number.parseInt` on a STRING with a\n * caller-given fallback). PVE's JSON is generated from a Perl schema and an integer field can\n * arrive as `0` or `\"0\"` depending on the release and the endpoint; `Number(value ?? 0)`\n * accepts either without a strict `typeof === 'number'` that would silently fall back for the\n * string form and report an update `matches` can never settle.\n */\nconst int = (value: unknown) => {\n const parsed = typeof value === 'number' ? value : Number(value ?? 0);\n return Number.isFinite(parsed) ? parsed : 0;\n};\n\n/**\n * An array (what the read returns), a comma string (what older releases and the write side use), or\n * nothing — in; a sorted, deduplicated list out. Both sides of `matches` go through this, which is\n * the only reason the diff ever settles.\n */\nconst groupSet = (value: unknown): string[] => {\n const raw: unknown[] = Array.isArray(value)\n ? value\n : typeof value === 'string'\n ? value.split(',')\n : [];\n const names = raw.map((group) => text(group).trim()).filter((group) => group !== '');\n return [...new Set(names)].sort();\n};\n\n/**\n * ⚠️ THE SHAPE DEPENDS ON WHICH ENDPOINT YOU ASKED. Reading ONE user gives an object keyed by\n * token name; distilled types it `tokens?: unknown` for the same reason (the item and index\n * responses disagree, and this provider only ever reads the item). Anything but that shape is\n * reported as \"no tokens\" rather than guessed at.\n */\nconst tokenNames = (value: unknown): string[] =>\n typeof value === 'object' && value !== null && !Array.isArray(value)\n ? Object.keys(value).sort()\n : [];\n\n/** Everything mutable, in the form PVE wants. Create adds `userid`; update sends exactly this. */\nconst shape = (props: UserProps) => ({\n comment: props.comment ?? '',\n email: props.email ?? '',\n enable: props.enable === false ? '0' : '1',\n expire: String(props.expire ?? 0),\n firstname: props.firstname ?? '',\n /**\n * ⚠️ ALWAYS SENT, EVEN EMPTY. Omitting `groups` on a PUT leaves the existing memberships in\n * place, so a group removed from the declaration would never actually be removed. Same for\n * `email` and `comment`: the empty string is how PVE is told to clear a field.\n * ⚠️ AND `append` IS DELIBERATELY NOT SET. Its default (0) REPLACES the list; setting it to 1\n * would turn every reconcile into an add-only merge, which is the same non-settling diff.\n */\n groups: groupSet(props.groups).join(','),\n lastname: props.lastname ?? '',\n});\n\nexport const createForm = (props: UserProps): access.CreateAccessUserRequest => ({\n ...shape(props),\n userid: props.userid,\n});\n\nexport const updateForm = (props: UserProps): access.PutAccessUserRequest => ({\n ...shape(props),\n userid: props.userid,\n});\n\nconst attributesOf = (live: access.GetAccessUserResponse, props: UserProps): UserAttributes => ({\n comment: text(live.comment),\n email: text(live.email),\n /**\n * ⚠️ ABSENT MEANS ENABLED. PVE's schema defaults `enable` to 1 and does not always write the\n * key back for an enabled account. Reading absence as `false` would report an update on\n * every plan and then DISABLE the account on the deploy that \"fixed\" it.\n */\n enable: bool(live.enable, true),\n expire: int(live.expire),\n firstname: text(live.firstname),\n groups: groupSet(live.groups),\n lastname: text(live.lastname),\n tokens: tokenNames(live.tokens),\n /** ⚠️ FROM PROPS: `GET /access/users/{userid}` does not echo the userid back in its data. */\n userid: props.userid,\n});\n\n/**\n * ⚠️ `tokens` IS NOT COMPARED, and neither is anything create-only. What is compared is exactly\n * what a PUT can put back; a field PVE reports but will not accept is drift nobody can fix.\n */\nexport const matches = (attributes: UserAttributes, props: UserProps) =>\n attributes.comment === (props.comment ?? '') &&\n attributes.email === (props.email ?? '') &&\n attributes.enable === (props.enable !== false) &&\n attributes.expire === (props.expire ?? 0) &&\n attributes.firstname === (props.firstname ?? '') &&\n attributes.lastname === (props.lastname ?? '') &&\n attributes.groups.join(',') === groupSet(props.groups).join(',');\n\n/**\n * ★ Default `read` role for this family — only the write side needs `provision`.\n * ⛔ `{ userid: props.userid }`, NEVER THE WHOLE `props` — MEASURED 2026-09-24, the regression in\n * kit 0.31.1. `GetAccessUserRequest`'s schema declares only `userid` (a path label); any OTHER\n * key on the object passed to `access.getAccessUser` — `target`, `comment`, every field this\n * family's own props carry — is treated by distilled's `buildRequest` as an \"unknown key\" and\n * JSON-encoded onto the request as a BODY, on every one of these bodyless GETs. A stricter\n * fetch client than a bare `bun run` of this file refuses a GET carrying any body at all\n * (`TypeError [ERR_INVALID_ARG_VALUE]: fetch() request with GET/HEAD method cannot have body`),\n * which `runPveWith` retries across every member and exhausts identically —\n * `PveClusterExhausted`, then silently folded to \"absent\" by the old `orElseSucceed`, forcing a\n * false `update` on every account.\n */\nexport const readUserOrFail = (props: UserProps) =>\n readOrUnreadable(\n runPve(props.target, 'read', false, access.getAccessUser({ userid: props.userid })),\n ).pipe(Effect.map((live) => (live === UNREADABLE ? UNREADABLE : attributesOf(live, props))));\n\n/**\n * ⛔ ONLY `UserNotFound` MEANS ABSENT. The initial distilled transport swap preserved a\n * catch-all fold because PVE reports missing objects as HTTP 500. SDK PR 265 now types that\n * measured message, so permission errors, unrelated 500s and exhausted transports propagate\n * instead of triggering a speculative create (decision 49 follow-up, 2026-09-24).\n * ★ `readUserOrFail` remains the strict path used for an already-confirmed state row. This\n * change narrows cold reads/reconcile without changing that existing drift/diff contract.\n */\nexport const readUser = (props: UserProps) =>\n readUserOrFail(props).pipe(Effect.catchTag('UserNotFound', () => Effect.succeed(undefined)));\n\n/** `read`/`reconcile` return `Attributes | undefined`; only `diff` tells `UNREADABLE` apart. */\nexport const dropUnreadable = (live: UserAttributes | Unreadable | undefined) =>\n live === UNREADABLE ? undefined : live;\n",
|
|
119
119
|
"/**\n * `Proxmox.Vm` — a QEMU virtual machine, declared.\n *\n * ⚠️ THE SAME FOUR OPERATIONS AS AN LXC OVER A DIFFERENT PATH, which is the point of the factory:\n * `nodes/{node}/qemu` to create, `nodes/{node}/qemu/{vmid}/config` to read and update. A VM and a\n * container differ in what they carry, not in how they are reconciled.\n *\n * ⛔ `vmid` IS CLUSTER-WIDE AND SHARED WITH CONTAINERS. A VM and an LXC cannot hold the same id, so\n * these two resources compete for one number space. Declaring both with vmid 101 is not a\n * collision Alchemy can see -- they are different resource types -- and PVE refuses the second\n * with \"already exists\". Pick ids per cluster, not per kind.\n *\n * ⚠️ POWER STATE IS REPORTED, NEVER DECLARED. `status` is an attribute so a plan can show it; there\n * is no `running` prop. Starting and stopping a VM from a plan would make a deploy a maintenance\n * window, and the estate has one of those already.\n */\nimport { Resource } from 'alchemy';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { type PveRequirements, type WithTarget, pveHandlers } from './resource.ts';\nimport { num } from './values.ts';\n\nexport interface VmProps extends WithTarget {\n node: string;\n /** ⛔ Cluster-wide, and shared with LXC. See the ⛔ above. */\n vmid: number;\n name?: string;\n /** MiB. */\n memory?: number;\n cores?: number;\n sockets?: number;\n /** e.g. `virtio=<mac>,bridge=vmbr0`. */\n net0?: string;\n onboot?: boolean;\n}\n\nexport interface VmAttributes {\n vmid: number;\n node: string;\n name: string;\n memory: number;\n cores: number;\n sockets: number;\n onboot: boolean;\n}\n\nexport interface ProxmoxVm extends Resource<\n 'Proxmox.Vm',\n VmProps,\n VmAttributes,\n never,\n PveRequirements\n> {}\n\nexport const ProxmoxVm = Resource<ProxmoxVm>('Proxmox.Vm');\n\n/** ★ Exported so the constraint proof can run the REAL create form, not a retyped copy of it. */\nexport const createForm = (props: VmProps) => ({ ...shape(props), vmid: String(props.vmid) });\n\nconst shape = (props: VmProps) => ({\n cores: String(props.cores ?? 1),\n memory: String(props.memory ?? 512),\n name: props.name ?? `vm${String(props.vmid)}`,\n onboot: props.onboot === true ? '1' : '0',\n sockets: String(props.sockets ?? 1),\n ...(props.net0 === undefined ? {} : { net0: props.net0 }),\n});\n\nconst handlers = pveHandlers<VmProps, VmAttributes>({\n attributes: (live, props) => ({\n cores: num(live['cores'], 1),\n memory: num(live['memory'], 512),\n name: typeof live['name'] === 'string' ? live['name'] : '',\n node: props.node,\n onboot: live['onboot'] === 1 || live['onboot'] === true,\n sockets: num(live['sockets'], 1),\n vmid: props.vmid,\n }),\n collection: (props) => `nodes/${props.node}/qemu`,\n createForm,\n /** The vendor rules both forms are checked against at plan time — resource-spec.ts. */\n endpoint: {\n create: 'pve:POST /nodes/{node}/qemu',\n update: 'pve:PUT /nodes/{node}/qemu/{vmid}/config',\n },\n matches: (attributes, props) =>\n attributes.name === (props.name ?? `vm${String(props.vmid)}`) &&\n attributes.memory === (props.memory ?? 512) &&\n attributes.cores === (props.cores ?? 1) &&\n attributes.sockets === (props.sockets ?? 1) &&\n attributes.onboot === (props.onboot === true),\n path: (props) => `nodes/${props.node}/qemu/${String(props.vmid)}/config`,\n updateForm: shape,\n});\n\nexport const ProxmoxVmProvider = () =>\n Provider.effect(ProxmoxVm, Effect.succeed(ProxmoxVm.Provider.of(handlers)));\n",
|
|
120
120
|
"/**\n * `Proxmox.ReplicationJob` — a guest's ZFS storage replication to a second node, declared.\n *\n * ⛔ NOTHING ON C1 CAN USE THIS FAMILY, AND THAT IS SAID HERE RATHER THAN FOUND OUT LATER. PVE\n * storage replication is ZFS-only: `POST /cluster/replication` calls `get_replicatable_volumes`\n * and refuses a guest whose disks are anywhere else with \"No replicatable volumes found\". C1 is\n * Ceph/RBD-backed — shared storage, where replication means nothing because every node already\n * sees the volume — so `GET /cluster/replication` answers `[]` (MEASURED on node-b, 2026-09-13) and\n * on this cluster always will. The file is written for a ZFS cluster; against C1 a declaration\n * is a create that fails with PVE's own sentence, not a plan that quietly does nothing.\n *\n * ★ WHAT IS MEASURED HERE AND WHAT IS REASONED. Measured on node-b (pve-manager 9.2.11), read-only:\n * the published schema for all five methods; `PVE/ReplicationConfig.pm` and\n * `PVE/API2/ReplicationConfig.pm` line by line; `GET /cluster/replication` -> `[]`; and the ACL\n * row `{\"path\":\"/\",\"propagate\":1,\"roleid\":\"PVEAuditor\",\"ugid\":\"hf-read@pve\"}`. NOT measured: any\n * round trip. There is no live job to adopt and none can be created on this cluster, so the\n * argument that a matching declaration plans as `noop` rests on the schema and on PVE's own\n * source — not on a plan anybody ran. Nobody should claim otherwise until a ZFS cluster exists.\n *\n * ⛔ THE ID IS STRUCTURED AND PVE RE-SPELLS IT, so this resource is keyed on the two numbers rather\n * than on the string — a deliberate break from `backup-job.ts`'s \"props are PVE's own key names\".\n * MEASURED: `parse_replication_job_id` matches `^(\\d+)-(\\d+)$`, runs BOTH halves through `int()`\n * and returns \"$guest-$jobnum\", and `parse_section_header` does the same when reading\n * replication.cfg. So a declared `100-007` is read back as `100-7`, and a provider holding the\n * raw string would compare two spellings of one id forever. Two numbers cannot be spelled two\n * ways. PVE also refuses `guest < 100` (\"guest IDs < 100 are reserved\") and the API pattern\n * `[1-9][0-9]{2,8}-\\d{1,9}` caps both halves at nine digits.\n * ⛔ BOTH HALVES ARE REQUIRED AND NEITHER IS DEFAULTED, for `backup-job.ts`'s reason: a provider\n * that picks a job number picks a DIFFERENT job from the one a person meant, and then adopts or\n * creates beside the real one. Declare the numbers of the job you mean.\n *\n * ⛔ PVE'S `target` AND THIS PACKAGE'S `target` ARE DIFFERENT THINGS, AND THE COMPILER SAID SO\n * BEFORE A REVIEWER DID. Every resource here extends `WithTarget`, whose `target` is the CLUSTER\n * a call goes to (`PveTarget`, carrying the API base and the credential mount). PVE's replication\n * `target` is a NODE NAME. They cannot both be called `target` in one props interface — tsc:\n * \"Interface 'ReplicationJobProps' incorrectly extends interface 'WithTarget'\" — so the prop and\n * the attribute are `targetNode`, and PVE's spelling appears exactly once, in `createBody`, where\n * it is the wire key. That is the only safe shape: had the collision been resolvable by silence,\n * `createForm` would have serialised a whole `PveTarget` object into a form field called `target`\n * and PVE would have answered that the node does not exist.\n *\n * ⛔ ONE JOB PER (GUEST, TARGET), ENFORCED BY PVE AND NOT BY THIS FILE. MEASURED: `write_config`\n * dies \"replication job for guest '$vmid' to target '$tid' already exists\" where `$tid` is\n * `local/<target>`, and `parse_config` DELETES the loser on read if two ever reach the file. Two\n * declarations differing only in `jobnum` but naming the same target are not two jobs; the second\n * is a create that fails.\n *\n * ⚠️ RECONCILE NEEDS `VM.Replicate` ON `/vms/<guest>`, WHICH THE PROVISION ROLE DOES NOT HOLD. All\n * three writes check it (MEASURED in API2/ReplicationConfig.pm: create, update and delete each\n * call `$rpcenv->check($authuser, \"/vms/$vmid\", ['VM.Replicate'])`), and the role's 27 privileges\n * include `VM.Allocate`, `VM.Audit`, `VM.Backup`, `VM.Config.*` and `VM.PowerMgmt` but not\n * `VM.Replicate` (`PROVISION_PRIVILEGES`). Do NOT widen it by hand: the baseline declares the\n * role's exact set, so a hand-added privilege is removed on the next deploy. Grant a second role\n * holding `VM.Replicate` on `/vms/<guest>` instead.\n * ★ THE READ LANE NEEDS NOTHING EXTRA, which is why there is no `readRole` below. The ITEM read\n * checks `VM.Audit` on `/vms/<guest>`, `hf-read@pve` holds the built-in `PVEAuditor` at `/`\n * with propagate — both MEASURED — and `PVEAuditor` carries `VM.Audit`. This family is not a\n * fourth one that must borrow the provision lease.\n * ⚠️ A MISSING JOB IS A 500, NOT A 404 — \"no such replication job '100-0'\" — and the factory\n * folds any failed read into \"absent\", so a 403 reads as absent too. A plan insisting on\n * creating a job that plainly exists is a credential problem; the honest error arrives one step\n * later, from the create.\n *\n * ⛔ DELETE DOES NOT DELETE, AND A DESTROY IS NOT FREE. MEASURED: with neither `force` nor `keep` —\n * and the factory's `destroy` sends no form at all — the handler only sets `remove_job = 'full'`\n * on the job and writes the config back. The job stays in replication.cfg until the SOURCE node's\n * `pvesr` timer next runs it, at which point it removes the local replication snapshots, removes\n * the replicated volumes on the target, and finally removes itself. So a destroy costs the\n * standby copy and the incremental base: re-declaring the job afterwards is a FULL send, not a\n * resume. The guest's own disks are untouched, which is exactly why this family does NOT carry\n * `defaultRemovalPolicy: 'retain'` the way `ZfsPool` and `Storage` do — what it destroys is a\n * copy a re-sync rebuilds, expensively, rather than something irreplaceable.\n * ⚠️ AND IF THE SOURCE NODE IS DOWN THE REMOVAL NEVER RUNS. Alchemy drops the state row on a\n * DELETE that returned no error, so a destroy against a dead source leaves a marked job on the\n * cluster that nothing declares any more. `GET /cluster/replication` is where it shows up.\n *\n * ⚠️ THE RUNTIME STATUS IS NOT HERE, AND NOT BECAUSE IT WAS FORGOTTEN. `last_sync`, `last_try`,\n * `fail_count`, `error`, `duration` and `pid` come from the per-node replication STATE file and\n * are merged in by `GET /nodes/{node}/replication` (MEASURED: API2/Replication.pm line 179,\n * `foreach my $k (qw(last_sync last_try fail_count error duration))`). `GET\n * /cluster/replication/{id}` — the only endpoint this resource reads — returns not one of them.\n * Reporting them would mean a second, per-node call on the read path answering a different value\n * every fifteen minutes, and a plan whose output changes when nothing changed is a plan people\n * stop reading. Ask the node for status; ask the cluster for configuration.\n */\nimport { Resource } from 'alchemy';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { DEFAULT_SCHEDULE, createBody, jobId, updateBody } from './replication-job-form.ts';\nimport { type PveRequirements, type WithTarget, pveHandlers } from './resource.ts';\nimport { bool, int, text } from './values.ts';\n\nexport interface ReplicationJobProps extends WithTarget {\n /** ⛔ The guest being replicated. 100 or above — PVE reserves everything below. Identity. */\n guest: number;\n /** ⛔ The job number within that guest, 0 upwards. Identity. Never generated — see the header. */\n jobnum: number;\n /**\n * ⛔ THE NODE THE COPY LANDS ON — PVE's `target`, RENAMED; see the ⛔ in the header — AND IT IS\n * CREATE-ONLY. MEASURED: the plugin declares `target => { fixed => 1, optional => 0 }`, so\n * `updateSchema()` omits it entirely — `PUT` has no `target` parameter at all, and\n * `delete=target` answers \"unable to delete fixed option\". It is therefore NOT compared; see\n * the ⚠️ on `matches`. Changing it in a declaration plans as NOOP. Retire the declaration and\n * add another, exactly as `user.ts` says for `userid`.\n * ⚠️ PVE refuses a target equal to the guest's current node (\"Source and target must not be\n * identical\") and one that is not a cluster member. Neither is checkable from here.\n */\n targetNode: string;\n /**\n * A subset of systemd calendar events. Unset means PVE's own default — `DEFAULT_SCHEDULE`,\n * every fifteen minutes — and that default is what gets SENT and compared, not silence.\n * ⚠️ THIS COMPARES STRINGS, NOT MEANINGS. A calendar event has many equivalent spellings and\n * PVE stores the one it was handed, verbatim, so declare the spelling the cluster echoes.\n */\n schedule?: string;\n /** Rate limit in mbps as a float, 1 or above. Unset sends nothing and compares nothing. */\n rate?: number;\n /** Keep the job but stop replicating. Unset is an ACTIVE job, and that is what is compared. */\n disable?: boolean;\n /** Free text shown in the UI. Round-trips through PVE's `encode_text`/`decode_text`. */\n comment?: string;\n}\n\nexport interface ReplicationJobAttributes {\n /** `100-0`, in PVE's own int-parsed spelling. */\n id: string;\n /**\n * ⚠️ REPORTED AS INTEGERS, NEVER COMPARED, AND THIS IS THE \"id written as a name\" TRAP. MEASURED:\n * `parse_config` sets both from the section header via `int()`, so they are the id re-spelled\n * as numbers and no write accepts either. Compared against anything they would be an update\n * forever; reported, they let a plan say which guest is about to lose a replica.\n */\n guest: number;\n jobnum: number;\n /** Always `local` — the only section type PVE registers. Create-only, reported, not compared. */\n type: string;\n /**\n * ⚠️ REPORTED, NEVER COMPARED. Create-only AND rewritten by PVE — see `matches`. Named for the\n * prop rather than for PVE's wire key `target`, so that one file never means two things by one\n * word; the header says why the wire name could not be kept.\n */\n targetNode: string;\n /** ⚠️ REPORTED, NEVER SENT. PVE's own bookkeeping — see the ⛔ in replication-job-form.ts. */\n source: string;\n schedule: string;\n /** 0 when unset. See `rateOf`. */\n rate: number;\n disable: boolean;\n comment: string;\n /**\n * `''`, `local` or `full`. ⛔ NOT COSMETIC: a non-empty value is a job that is deleting itself,\n * so `matches` refuses it and `updateBody` clears it. See both.\n */\n remove_job: string;\n}\n\nexport interface ProxmoxReplicationJob extends Resource<\n 'Proxmox.ReplicationJob',\n ReplicationJobProps,\n ReplicationJobAttributes,\n never,\n PveRequirements\n> {}\n\nexport const ProxmoxReplicationJob = Resource<ProxmoxReplicationJob>('Proxmox.ReplicationJob');\n\n/**\n * ⚠️ `rate` IS THE ONLY FLOAT IN THIS PACKAGE, so it gets a coercion of its own rather than a sixth\n * entry in `values.ts` — the rule that module states for itself: a coercion only one PVE object\n * needs belongs in that object's file, next to the field it serves. `int` cannot serve it, since\n * `Number.parseInt('10.5')` is 10 and a rate silently rounded down is both a limit nobody chose\n * and a comparison that never settles. It accepts a string for the reason `int` does: these are\n * SectionConfig sections, and whether `10` arrives as a number is a property of the release.\n * ⚠️ 0 MEANS UNSET, and is safe as the marker because PVE's schema gives `rate` a minimum of 1 —\n * the same trick as `metric-server.ts`'s `UNSET = -1`, for the same reason.\n */\nconst rateOf = (value: unknown): number => {\n if (typeof value === 'number') return value;\n const parsed = Number.parseFloat(text(value));\n return Number.isFinite(parsed) ? parsed : 0;\n};\n\nconst handlers = pveHandlers<ReplicationJobProps, ReplicationJobAttributes>({\n /**\n * ⚠️ EVERY FALLBACK IS PVE'S DOCUMENTED DEFAULT, NOT `false`/`''` PICKED FOR CONVENIENCE, so the\n * answer does not depend on whether a given release echoes back a key it never wrote.\n * SectionConfig stores what it was handed; a job created in the UI without a schedule has no\n * schedule line, and reading that absence as anything but `DEFAULT_SCHEDULE` would report\n * drift on a job nobody touched and then WRITE the reading back.\n * ⛔ NO \"IS IT REALLY THERE\" GUARD, for `backup-job.ts`'s reason: absence is the API declining to\n * answer, which `pveOperations.read` already handles, not a key missing from an answer that did\n * arrive. `digest` is deliberately absent too — it changes when ANY job in the file changes,\n * including one somebody else declared (`ha-resource.ts` hit exactly that).\n */\n attributes: (live, props) => ({\n comment: text(live['comment'], ''),\n disable: bool(live['disable'], false),\n guest: int(live['guest'], props.guest),\n id: text(live['id'], jobId(props)),\n jobnum: int(live['jobnum'], props.jobnum),\n rate: rateOf(live['rate']),\n remove_job: text(live['remove_job'], ''),\n schedule: text(live['schedule'], DEFAULT_SCHEDULE),\n source: text(live['source'], ''),\n targetNode: text(live['target'], props.targetNode),\n type: text(live['type'], 'local'),\n }),\n collection: () => 'cluster/replication',\n createForm: createBody,\n /**\n * ⚠️ `targetNode` AND `source` ARE OUT OF THIS COMPARISON FOR TWO REASONS EACH, AND EITHER ALONE\n * WOULD BE ENOUGH. They are create-only — `target` is a `fixed` option, `source` has no honest\n * declared value — AND PVE REWRITES BOTH BEHIND YOUR BACK. MEASURED in\n * `switch_replication_job_target_nolock`: when a guest migrates, PVE sets\n * `$jobcfg->{target} = $new_target` and `$jobcfg->{source} = $old_target`, so the job follows\n * the guest. Compared, a single migration would make every later plan report an update that the\n * PUT cannot perform, forever. The cost of leaving them out is stated on the `targetNode` prop:\n * a changed target plans as noop, and a migrated job is not dragged back.\n * ⚠️ `guest`, `jobnum`, `type` AND `id` ARE NOT COMPARED EITHER: the first two are the id in\n * integer form, `type` has one legal value, and `id` is the path — a change there is a\n * different object, which reads as absent and is created.\n * ⛔ `remove_job` IS COMPARED, AND IT IS THE ONE FIELD HERE THAT LOOKS LIKE A FOREVER-UPDATE AND\n * IS NOT. A DELETE marks the job rather than removing it, so a re-declared id can name a job\n * that is busy deleting itself, and matching that would be a noop over a vanishing object. It\n * settles because `updateBody` actually clears the marker — see there.\n */\n /** The vendor rules these forms are checked against at plan time — resource-spec.ts. */\n endpoint: {\n create: 'pve:POST /cluster/replication',\n update: 'pve:PUT /cluster/replication/{id}',\n },\n matches: (attributes, props) =>\n attributes.remove_job === '' &&\n attributes.schedule === (props.schedule ?? DEFAULT_SCHEDULE) &&\n attributes.disable === (props.disable === true) &&\n attributes.comment === (props.comment ?? '') &&\n (props.rate === undefined || attributes.rate === props.rate),\n path: (props) => `cluster/replication/${jobId(props)}`,\n updateForm: updateBody,\n});\n\n/**\n * ⛔ Empty `list` like every other resource here: `GET /cluster/replication` hands back every job an\n * operator ever made, and adopting one is how a later `alchemy destroy` takes away a standby copy\n * nobody declared. Adoption is an explicit act — declare the `guest` and `jobnum` you mean.\n * ⚠️ NOTHING BRAKES THIS DESTROY. PVE refuses to delete a pool that still holds guests; it accepts\n * this without a word, because nothing depends on a replication job. Re-read the DELETE ⛔ at the\n * top of this file before approving a plan line that removes one.\n */\nexport const ProxmoxReplicationJobProvider = () =>\n Provider.effect(\n ProxmoxReplicationJob,\n Effect.succeed(ProxmoxReplicationJob.Provider.of(handlers)),\n );\n",
|
|
121
121
|
"/**\n * A replication job's props, as the id and the forms PVE wants.\n *\n * ★ SPLIT OUT OF replication-job.ts TO KEEP BOTH FILES UNDER THE 250-LINE CAP, on the same seam\n * metric-server-form.ts uses and for the same reason: this file answers \"how does a declaration\n * become a PVE write\", and replication-job.ts answers \"what is a replication job and when has it\n * changed\". Nothing here reads the cluster and nothing here decides a diff.\n *\n * ⚠️ THE `import type` BACK TO replication-job.ts IS A CYCLE ON PAPER ONLY. It is type-only, so it\n * is erased before anything runs, and `ReplicationJobProps` stays the resource's public shape in\n * the file that declares the resource rather than being moved somewhere odd to dodge the arrow.\n */\nimport type { ReplicationJobProps } from './replication-job.ts';\n\n/**\n * PVE's own documented default for `schedule`, applied on BOTH sides of the comparison.\n *\n * ⚠️ IT LIVES HERE BECAUSE BOTH HALVES NEED THE SAME STRING. `shape` sends it and `attributes`\n * falls back to it; two copies of that literal in two files is exactly the drift that makes a\n * plan report an update over a value nobody set.\n * ⚠️ AND IT IS NEVER SPELLED OUT IN A COMMENT, because the string PVE chose ENDS A BLOCK COMMENT:\n * the two characters before the `15` are the comment terminator, and tsc says so loudly. It is\n * referred to by name everywhere else in these two files for that reason, not for style.\n */\nexport const DEFAULT_SCHEDULE = '*/15';\n\n/**\n * `{guest, jobnum}` -> `100-0`, the id in the only spelling PVE ever answers with.\n *\n * ⚠️ NUMBERS IN, SO CANONICAL OUT. PVE runs both halves of a job id through `int()` on parse — see\n * the ⛔ in replication-job.ts — and a JavaScript number has no leading-zero spelling to lose.\n * That is the whole reason this resource is keyed on two numbers instead of one string.\n */\nexport const jobId = (props: ReplicationJobProps) =>\n `${String(props.guest)}-${String(props.jobnum)}`;\n\n/**\n * The mutable half, shared by create and update.\n *\n * ⚠️ `schedule`, `disable` AND `comment` ARE ALWAYS SENT, EVEN AT THEIR DEFAULTS, because they are\n * always compared — and a field compared against a default but not SENT as that default is an\n * update reported on every plan that the PUT never performs (backup-job.ts records the same\n * trade). The empty string is how PVE is told to clear a comment. `rate` is the opposite case:\n * not declared, not sent, not compared, so a rate limit set by hand survives adoption untouched.\n * ⛔ `source` IS NEVER SENT, AND SENDING IT WOULD BE WORSE THAN REDUNDANT. MEASURED in\n * API2/ReplicationConfig.pm: create does `$param->{source} //= $guest_info->{node}` — PVE fills\n * it from wherever the guest actually is — and DIES with \"Source '<x>' does not match current\n * node of guest\" when a declaration disagrees. There is no correct value to hold here.\n */\nconst shape = (props: ReplicationJobProps) => ({\n comment: props.comment ?? '',\n disable: props.disable === true ? '1' : '0',\n schedule: props.schedule ?? DEFAULT_SCHEDULE,\n ...(props.rate === undefined ? {} : { rate: String(props.rate) }),\n});\n\n/**\n * ⚠️ `type` IS A CONSTANT RATHER THAN A PROP: `local` is the only section type PVE registers, and\n * an enum of one value is a prop that can only ever be wrong. `id` and `target` are both required\n * by the create schema and neither belongs in `shape` — `target` because PUT will not take it.\n * ⛔ THIS LINE IS THE ONLY PLACE PVE'S KEY `target` IS SPELLED, and the value beside it comes from\n * `targetNode`. The two words are different objects — a node name here, the whole cluster in\n * `WithTarget.target` — and the ⛔ in replication-job.ts explains why the rename was forced.\n */\nexport const createBody = (props: ReplicationJobProps) => ({\n ...shape(props),\n id: jobId(props),\n target: props.targetNode,\n type: 'local',\n});\n\n/**\n * ⛔ `delete=remove_job` ON EVERY UPDATE IS THE DELIBERATE PART. PVE's PUT merges the form into the\n * section and cannot unset anything, so without this the removal marker a DELETE wrote would\n * survive every reconcile and `matches` would report an update that never lands. MEASURED as\n * legal: the update handler refuses `delete` only for required or `fixed` options, and\n * `remove_job => { optional => 1 }` is neither; deleting a key that is not set is a no-op, so\n * this is safe to send unconditionally.\n * ⛔ AND THE DELETE LIST IS THIS ONE CONSTANT KEY, NEVER A COMPUTED \"everything you did not\n * declare\". backup-job.ts spells out why the computed form is dangerous — it strips settings the\n * resource does not even model off a job adopted from the UI. `remove_job` cannot be declared\n * here at all, so clearing it can only ever undo a removal this stack did not ask for.\n * ⚠️ IT CANCELS A REMOVAL SOMEBODY STARTED, WHICH IS THE POINT AND IS STILL WORTH KNOWING. If the\n * removal pass already ran its local-snapshot half, the revived job re-sends in full.\n */\nexport const updateBody = (props: ReplicationJobProps) => ({\n ...shape(props),\n delete: 'remove_job',\n});\n",
|
|
@@ -127,12 +127,12 @@
|
|
|
127
127
|
"/**\n * `Proxmox.SdnZone` — the network a declared guest sits on, finally declared too.\n *\n * ★ WHY THIS ONE MATTERS MORE THAN IT LOOKS. Every guest NIC here names a bridge —\n * `net0=name=eth0,bridge=vmbr0` — that nothing in this package declares: a hand-built interface,\n * repeated per node, that a container silently depends on. A zone is the first piece of that\n * dependency PVE will let a plan own.\n *\n * ⛔ SDN WRITES ARE STAGED, NOT APPLIED, AND THAT DEFEATS THE FACTORY'S READ-BACK GUARANTEE.\n * POST and PUT under `cluster/sdn/zones` edit `/etc/pve/sdn/zones.cfg` and change NOTHING on any\n * node. The plain GET reads that same staged file back, so `pveOperations` sees its own write,\n * finds the object present, and reports a success in which no node gained an interface. The\n * applied state is a different document — `.running-config` beside it — and `?pending=1` is the\n * read that tells them apart: it returns a merged view with a `state` of new/changed/deleted.\n *\n * ⛔ THE APPLY CANNOT LIVE IN THIS RECONCILE, so it is absent rather than forgotten.\n * `PUT /cluster/sdn` is the atomic pending-to-apply and it applies the WHOLE staged config —\n * every zone, vnet and subnet, on every node. Called from a per-resource reconcile it would push\n * some OTHER resource's half-written zone out to the cluster at whatever point the plan ordering\n * reached this one, and PVE has no pre-apply hook to veto that. The apply belongs to ONE object\n * that depends on all of them — a sibling `Proxmox.SdnApply` over `cluster/sdn`, or a stack-level\n * hook that runs last — so that \"declared\" and \"live on the nodes\" stay two visible steps.\n *\n * ⚠️ SO THESE ATTRIBUTES DESCRIBE THE STAGED ZONE, and there is deliberately no `applied` flag:\n * the factory uses ONE path for GET, PUT and DELETE, and PVE's parameter schemas are closed, so\n * an unexpected `pending` on the PUT is a 400 rather than an ignored hint. Reading `?pending=1`\n * means re-implementing the operations this file exists to share, and an `applied: true` that\n * was never measured is worse than an absent one. Deploying this resource does not change the\n * network; it changes what the next apply will do.\n *\n * ⛔ THE READ THIS RESOURCE PERFORMS NEEDS SDN.Allocate, NOT SDN.Audit, AND AN EARLIER DRAFT OF\n * THIS COMMENT SAID OTHERWISE. Read off the cluster's own schema on 2026-09-13:\n *\n * GET /cluster/sdn/zones -> \"list entries where you have SDN.Audit or SDN.Allocate\"\n * GET /cluster/sdn/zones/{zone} -> {\"check\": [\"perm\", \"/sdn/zones/{zone}\", [\"SDN.Allocate\"]]}\n *\n * `pveOperations.read` calls the ITEM endpoint, so an auditor-shaped `read` lease is REFUSED —\n * and the refusal does not surface as a 403. `read` folds every failure into `undefined`, which\n * the factory reads as \"absent\", so the plan says create, the POST goes out, and PVE answers\n * that the zone already exists. This is the same class as Proxmox.Storage; see\n * docs/privileges.md, \"The failure that does not look like a permission problem\".\n *\n * ⚠️ THE REST OF THE PRIVILEGES. Writes need SDN.Allocate (`/sdn/zones` to create,\n * `/sdn/zones/{zone}` to update or delete); the apply — `Proxmox.SdnApply`, which is what\n * actually publishes any of this — needs SDN.Allocate on `/sdn` itself. SDN.Use is NOT among\n * them: it permits attaching a guest to an existing vnet and nothing else.\n */\nimport { Resource } from 'alchemy';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { type PveRequirements, type WithTarget, pveHandlers } from './resource.ts';\nimport { csv, int, text, withClears } from './values.ts';\n\n/** PVE's zone plugins. Which one a zone is decides which fields below it will even accept. */\nexport type SdnZoneType = 'evpn' | 'qinq' | 'simple' | 'vlan' | 'vxlan';\n\nexport interface SdnZoneProps extends WithTarget {\n /**\n * PVE's primary key. ⚠️ AT MOST EIGHT LOWERCASE ALPHANUMERICS, first one a letter: the id lands\n * in generated interface names, so PVE enforces it with a regex whose rejection reads as\n * \"value does not match the regex pattern\" rather than as \"your name is too long\".\n */\n zone: string;\n /**\n * ⛔ CREATE-TIME ONLY. `PUT /cluster/sdn/zones/{zone}` has no `type` parameter at all — a\n * section's type is fixed when it is written. Changing it here is not an update PVE can\n * perform; the ⛔ in `attributes` turns that edit into a refusal instead of a silent no-op.\n */\n type: SdnZoneType;\n /** Accepted by every zone type. Unset means the zone inherits the underlying bridge's MTU. */\n mtu?: number;\n /** ⚠️ WHICH NODES THE ZONE IS DEPLOYED TO. Unset means EVERY node, not none. */\n nodes?: string[];\n /** IPAM plugin id. Unset is the built-in `pve` one — the two are one zone, see `sameIpam`. */\n ipam?: string;\n /** DNS plugin id used to register guest records. */\n dns?: string;\n /** The domain those records are registered under, e.g. `example.internal`. */\n dnszone?: string;\n /** vxlan only, and REQUIRED there: the peer addresses the tunnel mesh is built from. */\n peers?: string[];\n /** evpn only, and required there. PVE's own hyphenated name, so no mapping to get wrong. */\n 'vrf-vxlan'?: number;\n /** qinq only, and required there: the service VLAN tag the zone's vnets are stacked inside. */\n tag?: number;\n /** vlan and qinq only, and required in both: the existing bridge the zone is carved out of. */\n bridge?: string;\n}\n\n/**\n * ⛔ NO `digest` HERE, ON PURPOSE. PVE returns one, but it is the digest of the WHOLE zones.cfg\n * file rather than of this section — declaring a SECOND zone would rewrite this one's stored\n * attributes, and comparing it would report an update on a zone nobody touched.\n */\nexport interface SdnZoneAttributes {\n zone: string;\n type: SdnZoneType;\n /** 0 when unset, which is PVE's \"inherit from the bridge\" rather than an MTU of zero. */\n mtu: number;\n /** Normalised: split, sorted, rejoined. Never compare a raw PVE string to it — see `csv`. */\n nodes: string;\n /** The EFFECTIVE ipam: an absent one is reported as `pve`, because that is what will be used. */\n ipam: string;\n dns: string;\n dnszone: string;\n peers: string;\n 'vrf-vxlan': number;\n tag: number;\n bridge: string;\n /** ⚠️ THE REMINDER IN THE STATE ITSELF: staged config. No value here says a node has the zone. */\n readonly staged: true;\n}\n\nexport interface ProxmoxSdnZone extends Resource<\n 'Proxmox.SdnZone',\n SdnZoneProps,\n SdnZoneAttributes,\n never,\n PveRequirements\n> {}\n\nexport const ProxmoxSdnZone = Resource<ProxmoxSdnZone>('Proxmox.SdnZone');\n\n/**\n * ⚠️ AN ABSENT `ipam` AND `ipam pve` ARE THE SAME ZONE. `pve` is the built-in default, and whether\n * PVE materialises that word into zones.cfg on create is version-dependent — so comparing the\n * raw values reports an update on the plan immediately AFTER the create, on a zone this provider\n * just wrote itself. Normalising both sides is loop-proof under either behaviour.\n */\nconst sameIpam = (live: string, declared: string | undefined) =>\n (live === '' ? 'pve' : live) === (declared === undefined || declared === '' ? 'pve' : declared);\n\n/**\n * The mutable fields, spread in only when defined.\n *\n * ⚠️ AN EMPTY STRING IS NOT \"UNSET\" FOR AN INTEGER FIELD. `mtu=` fails PVE's parameter check\n * outright instead of clearing the value, so the pool.ts habit of sending `''` for an absent\n * optional does not carry over here. Clearing is a separate verb — see `clearable`.\n */\nconst body = (props: SdnZoneProps): Record<string, string> => ({\n ...(props.bridge === undefined ? {} : { bridge: props.bridge }),\n ...(props.dns === undefined ? {} : { dns: props.dns }),\n ...(props.dnszone === undefined ? {} : { dnszone: props.dnszone }),\n ...(props.ipam === undefined ? {} : { ipam: props.ipam }),\n ...(props.mtu === undefined ? {} : { mtu: String(props.mtu) }),\n ...(props.nodes === undefined ? {} : { nodes: csv(props.nodes) }),\n ...(props.peers === undefined ? {} : { peers: csv(props.peers) }),\n ...(props.tag === undefined ? {} : { tag: String(props.tag) }),\n ...(props['vrf-vxlan'] === undefined ? {} : { 'vrf-vxlan': String(props['vrf-vxlan']) }),\n});\n\n/**\n * Which managed fields PVE will let `delete=` clear, per zone type.\n *\n * ⛔ A PUT THAT SIMPLY OMITS A FIELD DOES NOT CLEAR IT. PVE merges the form into the existing\n * section, so dropping `mtu` from a declaration leaves the old MTU in place and `matches`\n * reports an update on every plan forever — the exact bug this table exists to prevent.\n * ⛔ AND THE LIST CANNOT BE THE SAME FOR EVERY TYPE. `delete=<opt>` dies with \"no such option\"\n * when the option is not in that plugin's schema (`peers` on a simple zone) and with \"unable to\n * delete required option\" when it is required there. `bridge`, `tag`, `peers` and `vrf-vxlan`\n * are required by the only types that accept them, so none of the four is ever clearable: a\n * zone that lost one is a replace, not an update.\n * ⚠️ `ipam` IS OMITTED FOR evpn DELIBERATELY. It is optional on the other four; on evpn its\n * optionality has moved between releases, and a wrong entry here is a hard 400 on EVERY update\n * rather than a cosmetic diff. Dropping `ipam` from an evpn declaration therefore reports an\n * update that does not converge — visible, unlike a wrong delete that breaks the zone.\n */\nconst clearable: Record<SdnZoneType, readonly string[]> = {\n evpn: ['dns', 'dnszone', 'mtu', 'nodes'],\n qinq: ['dns', 'dnszone', 'ipam', 'mtu', 'nodes'],\n simple: ['dns', 'dnszone', 'ipam', 'mtu', 'nodes'],\n vlan: ['dns', 'dnszone', 'ipam', 'mtu', 'nodes'],\n vxlan: ['dns', 'dnszone', 'ipam', 'mtu', 'nodes'],\n};\n\nconst handlers = pveHandlers<SdnZoneProps, SdnZoneAttributes>({\n // ⛔ PVE gates this family's ITEM read on the allocate privilege, not the audit one — see\n // `readRole` in resource.ts. The auditor-shaped lease reads 403, which `read` turns into\n // \"absent\", and the plan then says create for an object that is plainly there.\n readRole: 'provision',\n attributes: (live, props) => {\n /**\n * ⛔ A ZONE OF ANOTHER TYPE IS ANOTHER OBJECT, AND \"ABSENT\" IS THE HONEST ANSWER. A PUT cannot\n * change `type`, and the factory only calls a change `replace` for a resource with no update\n * path — which this is not. Reporting the foreign zone as missing makes reconcile POST, and\n * PVE refuses with \"sdn zone ID 'x' already defined\": a loud, accurate error instead of a\n * silent noop over somebody else's zone. An older PVE that omits `type` falls through.\n */\n const liveType = text(live['type']);\n if (liveType !== '' && liveType !== props.type) return undefined;\n return {\n bridge: text(live['bridge']),\n dns: text(live['dns']),\n dnszone: text(live['dnszone']),\n ipam: text(live['ipam']) === '' ? 'pve' : text(live['ipam']),\n mtu: int(live['mtu'], 0),\n nodes: csv(text(live['nodes'])),\n peers: csv(text(live['peers'])),\n staged: true,\n tag: int(live['tag'], 0),\n type: props.type,\n 'vrf-vxlan': int(live['vrf-vxlan'], 0),\n zone: props.zone,\n };\n },\n collection: () => 'cluster/sdn/zones',\n createForm: (props) => ({ ...body(props), type: props.type, zone: props.zone }),\n /**\n * ⚠️ `type` AND `zone` ARE NOT COMPARED. `zone` is the key the object was read by, and `type` is\n * handled above by refusing to recognise a zone of the wrong one. Comparing either here would\n * produce a diff whose update can never satisfy it.\n */\n /** The vendor rules these forms are checked against at plan time — resource-spec.ts. */\n endpoint: { create: 'pve:POST /cluster/sdn/zones', update: 'pve:PUT /cluster/sdn/zones/{zone}' },\n matches: (attributes, props) =>\n attributes.mtu === (props.mtu ?? 0) &&\n attributes.nodes === csv(props.nodes) &&\n sameIpam(attributes.ipam, props.ipam) &&\n attributes.dns === (props.dns ?? '') &&\n attributes.dnszone === (props.dnszone ?? '') &&\n attributes.peers === csv(props.peers) &&\n attributes['vrf-vxlan'] === (props['vrf-vxlan'] ?? 0) &&\n attributes.tag === (props.tag ?? 0) &&\n attributes.bridge === (props.bridge ?? ''),\n path: (props) => `cluster/sdn/zones/${props.zone}`,\n updateForm: (props) => {\n const fields = body(props);\n const clear = clearable[props.type].filter((option) => fields[option] === undefined);\n return withClears(fields, clear);\n },\n});\n\n/**\n* ⛔ Empty for the same reason as every other resource here, and with extra force for SDN:\n* `GET /cluster/sdn/zones` answers with the zones the cluster's whole network already\n* runs on. Adopting those would make a later `alchemy destroy` a cluster-wide outage.\n \n *\n* ⛔ A DELETE IS STAGED TOO, AND THAT IS THE HALF PEOPLE FORGET. The section leaves\n* zones.cfg and Alchemy drops the resource, but the zone KEEPS RUNNING on every node\n* until something applies `PUT /cluster/sdn`: a destroy nobody applies reads as complete\n* in the plan and has not happened on the cluster.\n* ⚠️ PVE also refuses to remove a zone that still holds vnets. That refusal is kept — it is\n* the cluster declining to orphan a network because a line left a file.\n \n */\nexport const ProxmoxSdnZoneProvider = () =>\n Provider.effect(ProxmoxSdnZone, Effect.succeed(ProxmoxSdnZone.Provider.of(handlers)));\n",
|
|
128
128
|
"/**\n * `Proxmox.Storage` — one entry in `/etc/pve/storage.cfg`, declared. Cluster-scoped like a pool,\n * which is why `path` and `collection` carry no node segment though a storage is used per node.\n *\n * ★ THIS IS THE OBJECT EVERY CONTAINER ALREADY DEPENDS ON AND NOTHING DECLARES. `LxcProps.storage`\n * and the prefix of `LxcProps.ostemplate` (`local:vztmpl/...`) are bare strings, so a container's\n * rootfs points at something outside the graph: rebuild a node and the plan still reads `noop`\n * right up to the create that fails because the storage is not there. Passing this resource's\n * `storage` attribute into `LxcProps.storage` makes the dependency real — Alchemy orders by data\n * flow, so the storage reconciles first because the container reads a value out of it.\n *\n * ⛔ ONE PRIVILEGE COVERS THIS WHOLE FAMILY AND IT IS `Datastore.Allocate` ON `/storage`. Create,\n * update, delete AND the single-object read all check it — `Datastore.Audit` is not enough for\n * any of them. MEASURED: `GET /storage/local` under the auditor-scoped `read` lease answers 403\n * \"Permission check failed (/storage/local, Datastore.Allocate)\". So this family reads with\n * `provision`, same as acl.ts and unlike group.ts/user.ts — `provision-baseline.ts` carries\n * `Datastore.Allocate`.\n *\n * ⛔ ON A LANE WHOSE CREDENTIAL CANNOT MINT `provision` (the agent's `read`-role lane), THIS\n * FAMILY SHIPPED WITH THE ORIGINAL CRIES-WOLF BUG — measured live, 2026-09-24: `bun run plan`\n * showed all 5 storages (`cephfs-tb4`, `cephtb4`, `local`, `local-zfs`, `pbs`) as `update`, with\n * no warning, because `client.ts`'s `pveOperations.read` folded the REFUSED mint into `undefined`\n * the same way it folds a genuine absence — `unreadable-read.ts`'s own header names this family\n * by name as one of the two the fix was written for. Migrated here the way acl.ts/group.ts/\n * user.ts were (kit 0.31.1/0.31.2): a refused `provision` mint now reports `noop` with a logged\n * warning instead of forcing `update` with nothing compared.\n *\n * ⛔ A MISSING STORAGE IS A 500, NOT A 404 — MEASURED against the live cluster (TB4, 2026-09-24,\n * admin lane, read-only `GET /storage/hf-measure-nonexistent-probe`): `{\"message\":\"storage\n * '...' does not exist\\n\"}` at HTTP 500. `storage-wire.ts`'s `readStorageOrFail`/`readStorage`\n * carry the same dual-path split as user.ts/group.ts for exactly this reason — see that file.\n *\n * ⛔ `maxfiles` IS GONE — A MEASURED `@distilled.cloud/proxmox` SDK GAP, NOT A SCOPE TRIM. The\n * vendor's generated `CreateStorageRequest`/`PutStorageRequest` (storage-wire.ts's `mutable`)\n * have no `maxfiles` field at all — grepped across the whole package, not just this endpoint —\n * where `prune-backups`, its documented replacement, is present and correctly wired\n * (`T.Body(\"prune-backups\")` on the generated `prune_backups` property). Silently dropping a\n * declared `maxfiles` value would have been the same class of bug this whole migration exists to\n * close: a write that looks like it landed and did not. So `maxfiles?: never` below, the same\n * COMPILE-ERROR treatment `StorageLocator`'s `password`/`keyring`/`encryption-key` already get —\n * a declaration that sets it is refused before a plan ever runs, not silently ignored by one.\n * None of this cluster's 5 live storages set it (measured, live response bodies below). If a\n * consumer genuinely needs it, the fix belongs in `@distilled.cloud/proxmox`'s generator, not a\n * hand-rolled bypass here — see the provider-walk-down doctrine on vendor gaps.\n *\n * ⛔ EVERY HYPHENATED PVE FIELD NAME BECOMES AN UNDERSCORE IN DISTILLED'S GENERATED TYPESCRIPT —\n * MEASURED across the WHOLE generated `CreateStorageRequest`/`PutStorageRequest`, not one field:\n * `prune-backups` -> `prune_backups`, `fs-name` -> `fs_name`, `max-protected-backups` ->\n * `max_protected_backups`, and so on for every plugin field `StorageLocator`'s free-form bag can\n * carry (`cephfs-tb4`'s own live locator uses `fs-name`, measured below). No other family\n * migrated so far has a hyphenated field at all, so this is new here. `storage-wire.ts`'s\n * `underscored` translates a form BUILT with PVE's own names into distilled's shape, but ONLY\n * for the actual SDK call (`toDistilledCreate`/`toDistilledUpdate`) — never for the form\n * `guardWrite` checks (`createForm`/`updateForm`), which the generated vendor-constraint tables\n * key by PVE's own hyphenated names. Running the translation before that check would make it\n * silently stop inspecting the very fields it exists to catch.\n *\n * ⛔ THERE IS NO `password` PROP AND THERE MUST NEVER BE ONE. PBS and CIFS storages take one at\n * create time, and Alchemy persists attributes UNENCRYPTED — a secret in props is one careless\n * line away from being an attribute, and from there it is in the state store's nightly dump. So\n * `StorageLocator` types `password`, `keyring` and `encryption-key` as `never`: declaring one is\n * a COMPILE ERROR rather than a leak somebody finds in a backup months later. Set it once out of\n * band (`pvesm set <id> --password`); PVE never returns it on read, so nothing here could diff it\n * anyway.\n *\n * ★ MIGRATED OFF `client.ts`'s generic `pve()`/`pveHandlers` (`resource.ts`) ONTO\n * `@distilled.cloud/proxmox`'s typed `storage.getStorage`/`createStorage`/`putStorage`/\n * `deleteStorage` (2026-09-24, decision 43's proxmox walk-down, nodes/storage sub-area, first\n * resource). `distilled-pve.ts`'s `runPve` replaces `pve()`; the cries-wolf fix is wired the\n * same way as acl.ts/group.ts/user.ts.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as storage from '@distilled.cloud/proxmox/storage';\nimport * as Effect from 'effect/Effect';\nimport { guardWrite } from './distilled-guard.ts';\nimport type { PveRequirements, WithTarget } from './resource-spec.ts';\nimport { runPve } from './distilled-pve.ts';\nimport {\n STORAGE_CREATE,\n STORAGE_UPDATE,\n createForm,\n toDistilledCreate,\n toDistilledUpdate,\n updateForm,\n} from './storage-form.ts';\nimport { dropUnreadable, matches, readStorage, readStorageOrFail } from './storage-wire.ts';\nimport { UNREADABLE, unreadableWarning } from './unreadable-read.ts';\nimport type { StorageAttributes } from './storage-wire.ts';\nimport type { StorageLocator } from './storage-form.ts';\n\n/** Re-exported so a caller of this file still finds them here, unchanged by the split below. */\nexport type { StorageAttributes, StorageLocator };\n\nexport interface StorageProps extends WithTarget {\n /** PVE's primary key, cluster-wide — the string an LXC's `storage` and `ostemplate` name. */\n storage: string;\n /**\n * `dir` | `nfs` | `cifs` | `pbs` | `zfspool` | `lvmthin` | `rbd` | … ⚠️ CREATE-ONLY, so a changed\n * `type` plans as `noop` (see `matches`). PVE cannot retype a storage: remove and redeclare.\n */\n type: string;\n /** ⚠️ Create-only, one shape per plugin. See `StorageLocator`. */\n locator?: StorageLocator;\n /** `images,rootdir,vztmpl,iso,backup,snippets`. PVE reports `none` for an empty set. */\n content?: string;\n /**\n * Node restriction, e.g. `node-a,node-b`. ⚠️ A STORAGE WITH A `nodes` LIST DOES NOT EXIST ANYWHERE ELSE:\n * an LXC declared on a node outside it fails at create with \"storage not available on node\".\n */\n nodes?: string;\n /** Keeps the definition but stops PVE using it. */\n disable?: boolean;\n /** Tells PVE the same volumes are visible from every node — a claim, not a mechanism. */\n shared?: boolean;\n /** `off` | `metadata` | `falloc` | `full`. File-based plugins only. */\n preallocation?: string;\n /**\n * `keep-last=3,keep-daily=7,…`. ⚠️ THE WIRE NAME IS KEPT, HYPHEN AND ALL: a `pruneBackups` that\n * quietly becomes `prune-backups` in the form body is a second name for one thing.\n */\n 'prune-backups'?: string;\n comment?: string;\n /** ⛔ REMOVED — a measured `@distilled.cloud/proxmox` gap, not a scope trim. See the header. */\n maxfiles?: never;\n}\n\nexport interface ProxmoxStorage extends Resource<\n 'Proxmox.Storage',\n StorageProps,\n StorageAttributes,\n never,\n PveRequirements\n> {}\n\n/** ★ `retain` by default — a storage holding volumes cannot be rebuilt. See the ★ in resource.ts. */\nexport const ProxmoxStorage = Resource<ProxmoxStorage>('Proxmox.Storage', {\n defaultRemovalPolicy: 'retain',\n});\n\nexport const ProxmoxStorageProvider = () =>\n Provider.effect(\n ProxmoxStorage,\n Effect.succeed(\n ProxmoxStorage.Provider.of({\n /**\n * ⛔ EMPTY, AND HERE IT MATTERS MORE THAN ANYWHERE ELSE IN THIS PACKAGE. `GET /storage`\n * returns every definition on the cluster, `local` and `local-lvm`/`local-zfs` included:\n * the installer's own, that every guest's rootfs sits on. Adopting those would put\n * Alchemy one `delete` away from the cluster's disks. Adoption is explicit, always.\n */\n list: () => Effect.succeed([]),\n // ⚠️ FOLDS ONLY WHEN `output` IS `undefined` — user.ts's/group.ts's own ⚠️, applied here\n // from the start rather than found by a later review: the engine calls this hook from\n // Plan.ts's adoption probe and interrupted-create recovery and Apply.ts's delete\n // recovery (all `output: undefined`, nothing confirmed exists yet — `readStorage`'s fold\n // is still needed) as well as Drift.ts (`output: old.attr`, an ALREADY-CONFIRMED row,\n // `diff`'s own situation — `readStorageOrFail` there instead, or a transient failure\n // reports a silent `{action: 'missing'}` with no error at all).\n read: Effect.fn(function* ({ olds, output }) {\n return dropUnreadable(\n yield* output === undefined ? readStorage(olds) : readStorageOrFail(olds),\n );\n }),\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n yield* guardWrite(STORAGE_CREATE, createForm(news), output === undefined);\n yield* guardWrite(STORAGE_UPDATE, updateForm(news), false);\n if (output === undefined) return undefined;\n // ⚠️ `readStorageOrFail`, NOT `readStorage` — see that function's own ⛔ in\n // storage-wire.ts. A genuine TRANSIENT failure here propagates and fails the whole\n // plan loudly instead of folding to \"absent\" and forcing a false update.\n const live = yield* readStorageOrFail(news);\n // ⛔ THE CRIES-WOLF FIX: a refused read used to fall into `undefined` below and force\n // `update` on a storage that was plainly there — see unreadable-read.ts.\n if (live === UNREADABLE) {\n yield* unreadableWarning('Proxmox.Storage', news.storage);\n return { action: 'noop' } as const;\n }\n if (live === undefined) {\n yield* guardWrite(STORAGE_CREATE, createForm(news), true);\n return { action: 'update' } as const;\n }\n return matches(live, news)\n ? ({ action: 'noop' } as const)\n : ({ action: 'update' } as const);\n }),\n reconcile: Effect.fn(function* ({ news }) {\n // ⚠️ `dropUnreadable`: reconcile only runs once `provision` already minted for the\n // write below, so `UNREADABLE` here is a narrow race, not the routine case `diff`\n // handles — group.ts's/user.ts's reconcile have the same note.\n const before = dropUnreadable(yield* readStorage(news));\n yield* guardWrite(STORAGE_CREATE, createForm(news), before === undefined);\n yield* guardWrite(STORAGE_UPDATE, updateForm(news), false);\n if (before === undefined) {\n yield* runPve(\n news.target,\n 'provision',\n true,\n storage.createStorage(toDistilledCreate(news)),\n );\n } else if (!matches(before, news)) {\n yield* runPve(\n news.target,\n 'provision',\n true,\n storage.putStorage(toDistilledUpdate(news)),\n );\n }\n const after = dropUnreadable(yield* readStorage(news));\n if (after === undefined) {\n return yield* Effect.die(\n new Error(\n `storage/${news.storage}: the write returned no error but the storage is still ` +\n 'absent. PVE wraps every answer in {\"data\":...} and can report success on a ' +\n 'call that did nothing -- read back rather than trusting the status code.',\n ),\n );\n }\n return after;\n }),\n /**\n * ⚠️ THIS REMOVES THE DEFINITION, NOT THE DATA. PVE drops the section from storage.cfg and\n * leaves the volumes on disk untouched — so the loss is not the bytes, it is that guests\n * whose config still names this storage can no longer resolve their own disks.\n */\n delete: Effect.fn(function* ({ olds }) {\n yield* runPve(\n olds.target,\n 'provision',\n true,\n storage.deleteStorage({ storage: olds.storage }),\n );\n }),\n }),\n ),\n );\n",
|
|
129
129
|
"/**\n * `Proxmox.Storage`'s WRITE side: the locator bag, the create/update forms, and the translation\n * into distilled's own typed request shape. Split out of storage-wire.ts (2026-09-24) to keep\n * both files under the 250-line cap — the api-token.ts/api-token-form.ts seam, same reasoning.\n */\nimport type * as storage from '@distilled.cloud/proxmox/storage';\nimport type { StorageProps } from './storage.ts';\nimport { flag } from './values.ts';\n\nexport const STORAGE_CREATE = 'pve:POST /storage';\nexport const STORAGE_UPDATE = 'pve:PUT /storage/{storage}';\n\n/**\n * The create-time, plugin-specific half of a storage: `dir` wants `path`, `nfs` `server`+`export`,\n * `cifs` `server`+`share`, `pbs` `server`+`datastore`, `rbd` `pool`+`monhost`, `lvmthin`\n * `vgname`+`thinpool`, `zfspool` `pool`. A bag rather than two dozen named fields, because PVE\n * ships about that many plugins and each brings its own locator. ⚠️ Never diffed — see `matches`\n * (storage-wire.ts).\n *\n * ⛔ `password`, `keyring` AND `encryption-key` ARE `never` ON PURPOSE — see the ⛔ in storage.ts's\n * header. POSITIVE-CONTROLLED rather than assumed: all three are a compile error, `TS2322: Type\n * 'string' is not assignable to type 'undefined'`.\n * ⚠️ EVERY KEY IN THIS BAG GOES THROUGH `underscored` (below) BEFORE IT REACHES DISTILLED — see\n * that function's own header. A caller writes PVE's own field names here (`fs-name`, matching\n * `pvesm`/pve-docs), never distilled's renamed ones.\n */\nexport type StorageLocator = Record<string, string> & {\n password?: never;\n keyring?: never;\n 'encryption-key'?: never;\n};\n\nconst field = (name: string, value: string | undefined): Record<string, string> =>\n value === undefined ? {} : { [name]: value };\n\n/**\n * ⚠️ THE CAST DROPS THE THREE `never` GUARDS AND NOTHING ELSE, and it is load-bearing rather than\n * lazy: an intersection carrying OPTIONAL properties is not assignable to `Record<string,string>`\n * at all, so the guards and the form body cannot both exist without one conversion. At runtime a\n * locator is a plain string map; the guards only ever existed to fail a declaration.\n */\nconst locatorForm = (locator: StorageLocator | undefined) =>\n ({ ...locator }) as Record<string, string>;\n\n/**\n * ★ ROUTES EVERY OUTGOING FIELD THROUGH DISTILLED'S OWN TYPED PROPERTY, RATHER THAN THROUGH ITS\n * \"UNKNOWN KEY\" FALLBACK — NOT BECAUSE THE WIRE NEEDS THE UNDERSCORED SPELLING. MEASURED both\n * ways (`storage-read-failure.test.ts`'s create test, run once with this function and once\n * without it): PVE's own hyphenated name (`content-dirs=…`) reaches the wire either way —\n * `@distilled.cloud/proxmox`'s generated `T.Body(\"content-dirs\")` annotation re-hyphenates its\n * underscored `content_dirs` property on the way out, AND an untranslated hyphenated key also\n * passes through unchanged as an \"unknown key\", form-encoded alongside the recognized ones (the\n * GET-request version of that same passthrough is what caused kit 0.31.1's regression — see\n * user.ts/group.ts — but a POST/PUT is already body-bearing, so the failure mode there doesn't\n * apply). So EITHER path is wire-correct for a plain rename. What `underscored` buys instead:\n * distilled's own schema only runs its declared per-field logic (a `T.Body()` rename, but also\n * whatever type coercion or list-joining a FUTURE plugin field might carry) for a property it\n * recognizes — an unrecognized key gets none of that, silently. `StorageLocator` is free-form\n * on purpose (the header's own reasoning), so this file cannot enumerate every field a plugin\n * might need; routing through the recognized property is the one way to get distilled's own\n * per-field handling for a field this package's author never tried, rather than a bare rename.\n * Renamed against every hyphenated field on the generated `CreateStorageRequest`/\n * `PutStorageRequest` today (`prune-backups` -> `prune_backups`, `fs-name` -> `fs_name`,\n * `max-protected-backups` -> `max_protected_backups`, `zfs-base-path` -> `zfs_base_path`,\n * `content-dirs` -> `content_dirs`, `saferemove-stepsize` -> `saferemove_stepsize`, and so on) —\n * a generic transform, not a lookup table, for the same free-form reason. No other migrated\n * family (acl/group/role/user/api-token) hit any of this: none of their fields are hyphenated.\n * ⛔ NEVER APPLIED TO THE FORM `guardWrite` CHECKS, REGARDLESS. The generated vendor-constraint\n * tables (`generated/constraints/pve-storage.ts`) are keyed by PVE's OWN hyphenated names —\n * running this first would make every constraint on `prune-backups`, `fs-name`, etc. silently\n * never match, the vendor check passing over a value it never actually inspected. `createForm`/\n * `updateForm` stay hyphenated for exactly that reason; only `toDistilledCreate`/\n * `toDistilledUpdate` (the actual SDK call, storage.ts's `reconcile`) apply this.\n */\nconst underscored = (form: Record<string, string>): Record<string, string> =>\n Object.fromEntries(Object.entries(form).map(([key, value]) => [key.replaceAll('-', '_'), value]));\n\n/**\n * The mutable half, for create and update alike.\n *\n * ⚠️ AN UNDECLARED FIELD IS NEITHER SENT NOR COMPARED: undeclared means UNMANAGED here, unlike\n * `Proxmox.Pool` where an absent comment means `''`. A storage has no single default to fall back\n * on — `content` defaults per plugin, and clearing a field needs an explicit `delete=` parameter\n * rather than an empty value — so a guessed default would rewrite a storage somebody tuned by\n * hand, and comparing one would report drift nobody declared.\n *\n * ⚠️ RECONCILE PUTs UNCONDITIONALLY whenever the object exists (group.ts's own reconcile has the\n * same note), so this form must be safe to re-apply to a storage that already matches. It is:\n * the declared set and nothing else, and PVE leaves absent parameters alone.\n *\n * ★ KEPT HYPHENATED (`'prune-backups'`, PVE's own wire name), NOT DISTILLED'S UNDERSCORED\n * `prune_backups` — this form is what `guardWrite` checks (storage.ts), and the generated\n * vendor-constraint table is keyed by PVE's own names (`underscored`'s own header has the\n * measured evidence). `toDistilledCreate`/`toDistilledUpdate` translate a COPY for the actual\n * SDK call; this function and its callers never see the underscored form.\n */\nconst mutable = (props: StorageProps) => ({\n ...field('comment', props.comment),\n ...field('content', props.content),\n ...field('disable', flag(props.disable)),\n ...field('nodes', props.nodes),\n ...field('preallocation', props.preallocation),\n ...field('prune-backups', props['prune-backups']),\n ...field('shared', flag(props.shared)),\n});\n\n/**\n * ⚠️ THE BAG IS SPREAD FIRST SO NOTHING IN IT CAN SHADOW A FIELD THIS RESOURCE MANAGES. A stray\n * `storage` or `type` in a locator would otherwise rename the object being created, and PVE\n * would build the wrong thing under a name Alchemy then records as the declared one.\n * ★ HYPHENATED, THE WIRE SHAPE — `guardWrite` (storage.ts) checks this form directly; see\n * `underscored`'s header for why translating it here would blind that check.\n */\nexport const createForm = (props: StorageProps): Record<string, string> => ({\n ...locatorForm(props.locator),\n ...mutable(props),\n storage: props.storage,\n type: props.type,\n});\n\n/**\n * ⚠️ `type` AND THE LOCATOR ARE NEVER SENT ON UPDATE — PVE's PUT refuses the create-only fields\n * (`PutStorageRequest` has no `type`, and the plugin locator fields it does carry are for a\n * different purpose: moving an existing volume, not re-pointing the definition), and comparing\n * either could only plan an update that no write can apply: a plan that reports work forever.\n */\nexport const updateForm = (props: StorageProps): Record<string, string> => ({\n ...mutable(props),\n storage: props.storage,\n});\n\n/**\n * The actual `createStorage` call body — `createForm`, translated once. See `underscored`.\n * ⚠️ `as unknown as` — same load-bearing cast as `locatorForm`'s own ⚠️: a plain\n * `Record<string,string>` does not structurally overlap a named-field interface enough for\n * TypeScript to accept a direct cast, even though every field it carries fits one of the\n * interface's own (all-optional-but-two) properties.\n */\nexport const toDistilledCreate = (props: StorageProps): storage.CreateStorageRequest =>\n underscored(createForm(props)) as unknown as storage.CreateStorageRequest;\n\n/** The actual `putStorage` call body — `updateForm`, translated once. See `toDistilledCreate`. */\nexport const toDistilledUpdate = (props: StorageProps): storage.PutStorageRequest =>\n underscored(updateForm(props)) as unknown as storage.PutStorageRequest;\n",
|
|
130
|
-
"/**\n * `Proxmox.Storage`'s READ side: how a live item becomes attributes, the read itself, and\n * `matches`. Split out of storage.ts (2026-09-24, the distilled migration); the write side is\n * storage-form.ts (that file's own header has the reasoning) — both stay under the 250-line cap,\n * the api-token.ts/api-token-form.ts seam.\n */\nimport * as storage from '@distilled.cloud/proxmox/storage';\nimport * as Effect from 'effect/Effect';\nimport { runPve } from './distilled-pve.ts';\nimport type { StorageProps } from './storage.ts';\nimport { UNREADABLE, type Unreadable, readOrUnreadable } from './unreadable-read.ts';\nimport { bool } from './values.ts';\n\nexport interface StorageAttributes {\n storage: string;\n /** Reported so a plan can show what it points at; never diffed — storage.ts's `type` doc. */\n type: string;\n content: string;\n nodes: string;\n disable: boolean;\n shared: boolean;\n preallocation: string;\n 'prune-backups': string;\n comment: string;\n}\n\nconst str = (value: unknown, fallback = '') => (typeof value === 'string' ? value : fallback);\n\n/**\n * ⚠️ PVE RE-SERIALISES ITS LIST FIELDS IN ITS OWN ORDER — `content` and `nodes` are parsed into a\n * set and written back sorted, `prune-backups` is a property string that comes back in schema\n * order. Comparing raw strings would report an update for `iso,backup` against `backup,iso` on\n * every plan, and the PUT would \"fix\" it into the identical string. Trimming matters too: a\n * declared `iso, backup` would otherwise never equal what PVE stores.\n */\nconst tokens = (value: string) =>\n value\n .split(',')\n .map((part) => part.trim())\n .filter((part) => part !== '')\n .sort()\n .join(',');\n\nexport const sameList = (declared: string | undefined, live: string) =>\n declared === undefined || tokens(declared) === tokens(live);\n\nexport const same = <T>(declared: T | undefined, live: T) =>\n declared === undefined || declared === live;\n\n/**\n * ⚠️ `digest` IS DELIBERATELY NOT AN ATTRIBUTE. PVE returns one on every storage read and it\n * covers storage.cfg as a FILE, not this section of it, so keeping it would rewrite this\n * resource's state whenever an unrelated storage was edited — churn that reads like drift.\n * ⛔ `maxfiles` IS NOT REPORTED, AND `StorageProps.maxfiles` NO LONGER EXISTS — see storage.ts's\n * header for the measured SDK gap this reflects.\n */\nconst attributesOf = (live: unknown, props: StorageProps): StorageAttributes => {\n const data = live as Record<string, unknown>;\n return {\n comment: str(data['comment']),\n content: str(data['content']),\n disable: bool(data['disable']),\n nodes: str(data['nodes']),\n preallocation: str(data['preallocation']),\n 'prune-backups': str(data['prune-backups']),\n shared: bool(data['shared']),\n storage: props.storage,\n type: str(data['type'], props.type),\n };\n};\n\n/**\n * ★ Default `read` role WOULD READ 403 — see storage.ts's header on why this family reads with\n * `provision`, the same as acl.ts and unlike group.ts/user.ts.\n * ⛔ `{ storage: props.storage }`, NEVER THE WHOLE `props` — user.ts/group.ts's own ⛔, the\n * kit 0.31.1 regression: `GetStorageRequest`'s schema declares only `storage` (a path label);\n * any OTHER key on the object passed to `storage.getStorage` is treated by distilled's\n * `buildRequest` as an \"unknown key\" and JSON-encoded onto this bodyless GET, which a stricter\n * fetch client refuses outright.\n * ⛔ A MISSING STORAGE IS A 500, NOT A 404 — MEASURED against the live cluster (TB4, 2026-09-24,\n * admin lane, read-only probe): `GET /storage/hf-measure-nonexistent-probe` answers\n * `{\"message\":\"storage 'hf-measure-nonexistent-probe' does not exist\\n\",\"data\":null}` at HTTP\n * 500 — the SAME shape as user.ts's and group.ts's own measured 500, not the clean\n * `{\"data\":null}` at 200 this file's pre-migration comment assumed for every read failure\n * (client.ts's `pveOperations.read` could not tell the two apart either way, folding both into\n * \"absent\"). `readStorage` below (used by `read`/`reconcile`) still folds it, exactly as\n * `readUser`/`readGroup` do, so a brand-new declaration can still be created; `readStorageOrFail`\n * (used by `diff`) does not.\n */\nexport const readStorageOrFail = (props: StorageProps) =>\n readOrUnreadable(\n runPve(props.target, 'provision', false, storage.getStorage({ storage: props.storage })),\n ).pipe(Effect.map((live) => (live === UNREADABLE ? UNREADABLE : attributesOf(live, props))));\n\n/**\n * ⛔
|
|
130
|
+
"/**\n * `Proxmox.Storage`'s READ side: how a live item becomes attributes, the read itself, and\n * `matches`. Split out of storage.ts (2026-09-24, the distilled migration); the write side is\n * storage-form.ts (that file's own header has the reasoning) — both stay under the 250-line cap,\n * the api-token.ts/api-token-form.ts seam.\n */\nimport * as storage from '@distilled.cloud/proxmox/storage';\nimport * as Effect from 'effect/Effect';\nimport { runPve } from './distilled-pve.ts';\nimport type { StorageProps } from './storage.ts';\nimport { UNREADABLE, type Unreadable, readOrUnreadable } from './unreadable-read.ts';\nimport { bool } from './values.ts';\n\nexport interface StorageAttributes {\n storage: string;\n /** Reported so a plan can show what it points at; never diffed — storage.ts's `type` doc. */\n type: string;\n content: string;\n nodes: string;\n disable: boolean;\n shared: boolean;\n preallocation: string;\n 'prune-backups': string;\n comment: string;\n}\n\nconst str = (value: unknown, fallback = '') => (typeof value === 'string' ? value : fallback);\n\n/**\n * ⚠️ PVE RE-SERIALISES ITS LIST FIELDS IN ITS OWN ORDER — `content` and `nodes` are parsed into a\n * set and written back sorted, `prune-backups` is a property string that comes back in schema\n * order. Comparing raw strings would report an update for `iso,backup` against `backup,iso` on\n * every plan, and the PUT would \"fix\" it into the identical string. Trimming matters too: a\n * declared `iso, backup` would otherwise never equal what PVE stores.\n */\nconst tokens = (value: string) =>\n value\n .split(',')\n .map((part) => part.trim())\n .filter((part) => part !== '')\n .sort()\n .join(',');\n\nexport const sameList = (declared: string | undefined, live: string) =>\n declared === undefined || tokens(declared) === tokens(live);\n\nexport const same = <T>(declared: T | undefined, live: T) =>\n declared === undefined || declared === live;\n\n/**\n * ⚠️ `digest` IS DELIBERATELY NOT AN ATTRIBUTE. PVE returns one on every storage read and it\n * covers storage.cfg as a FILE, not this section of it, so keeping it would rewrite this\n * resource's state whenever an unrelated storage was edited — churn that reads like drift.\n * ⛔ `maxfiles` IS NOT REPORTED, AND `StorageProps.maxfiles` NO LONGER EXISTS — see storage.ts's\n * header for the measured SDK gap this reflects.\n */\nconst attributesOf = (live: unknown, props: StorageProps): StorageAttributes => {\n const data = live as Record<string, unknown>;\n return {\n comment: str(data['comment']),\n content: str(data['content']),\n disable: bool(data['disable']),\n nodes: str(data['nodes']),\n preallocation: str(data['preallocation']),\n 'prune-backups': str(data['prune-backups']),\n shared: bool(data['shared']),\n storage: props.storage,\n type: str(data['type'], props.type),\n };\n};\n\n/**\n * ★ Default `read` role WOULD READ 403 — see storage.ts's header on why this family reads with\n * `provision`, the same as acl.ts and unlike group.ts/user.ts.\n * ⛔ `{ storage: props.storage }`, NEVER THE WHOLE `props` — user.ts/group.ts's own ⛔, the\n * kit 0.31.1 regression: `GetStorageRequest`'s schema declares only `storage` (a path label);\n * any OTHER key on the object passed to `storage.getStorage` is treated by distilled's\n * `buildRequest` as an \"unknown key\" and JSON-encoded onto this bodyless GET, which a stricter\n * fetch client refuses outright.\n * ⛔ A MISSING STORAGE IS A 500, NOT A 404 — MEASURED against the live cluster (TB4, 2026-09-24,\n * admin lane, read-only probe): `GET /storage/hf-measure-nonexistent-probe` answers\n * `{\"message\":\"storage 'hf-measure-nonexistent-probe' does not exist\\n\",\"data\":null}` at HTTP\n * 500 — the SAME shape as user.ts's and group.ts's own measured 500, not the clean\n * `{\"data\":null}` at 200 this file's pre-migration comment assumed for every read failure\n * (client.ts's `pveOperations.read` could not tell the two apart either way, folding both into\n * \"absent\"). `readStorage` below (used by `read`/`reconcile`) still folds it, exactly as\n * `readUser`/`readGroup` do, so a brand-new declaration can still be created; `readStorageOrFail`\n * (used by `diff`) does not.\n */\nexport const readStorageOrFail = (props: StorageProps) =>\n readOrUnreadable(\n runPve(props.target, 'provision', false, storage.getStorage({ storage: props.storage })),\n ).pipe(Effect.map((live) => (live === UNREADABLE ? UNREADABLE : attributesOf(live, props))));\n\n/**\n * ⛔ ONLY `StorageNotFound` MEANS ABSENT. The initial distilled transport swap preserved a\n * catch-all fold because PVE reports missing objects as HTTP 500. SDK PR 265 now types that\n * measured message, so permission errors, unrelated 500s and exhausted transports propagate\n * instead of triggering a speculative create (decision 49 follow-up, 2026-09-24).\n * ★ `readStorageOrFail` remains the strict path used for an already-confirmed state row. This\n * change narrows cold reads/reconcile without changing that existing drift/diff contract.\n */\nexport const readStorage = (props: StorageProps) =>\n readStorageOrFail(props).pipe(\n Effect.catchTag('StorageNotFound', () => Effect.succeed(undefined)),\n );\n\n/** `read`/`reconcile` return `Attributes | undefined`; only `diff` tells `UNREADABLE` apart. */\nexport const dropUnreadable = (live: StorageAttributes | Unreadable | undefined) =>\n live === UNREADABLE ? undefined : live;\n\n/**\n * ⚠️ `type` IS NEVER COMPARED — CREATE-ONLY (`storage.ts`'s own `StorageProps.type` doc), so a\n * changed declaration plans `noop` on it, same as before the migration.\n */\nexport const matches = (attributes: StorageAttributes, props: StorageProps) =>\n sameList(props.content, attributes.content) &&\n sameList(props.nodes, attributes.nodes) &&\n sameList(props['prune-backups'], attributes['prune-backups']) &&\n same(props.disable, attributes.disable) &&\n same(props.shared, attributes.shared) &&\n same(props.preallocation, attributes.preallocation) &&\n same(props.comment, attributes.comment);\n",
|
|
131
131
|
"/**\n * `Proxmox.ZfsPool` — a zpool built on one node's physical disks, declared.\n *\n * ⛔ A CREATE HERE WIPES THE DISKS IT IS GIVEN AND THERE IS NO UNDO. `POST /nodes/{node}/disks/zfs`\n * runs `zpool create` on the block devices named in `devices`; whatever was on them is gone the\n * moment the worker runs. Every other decision in this file follows from that one sentence, and\n * each of them is written out below rather than left to be inferred.\n *\n * ⛔ ★ CORRECTED 2026-09-23 — THIS PARAGRAPH PREVIOUSLY SAID \"DESTROY IS REFUSED\" AND \"`delete`\n * MAKES NO API CALL\". THAT WAS FALSE: MEASURED against this file's own `handlers.delete` below,\n * which calls `destroyPool`, which sends `DELETE /nodes/{node}/disks/zfs/{name}` — the node's\n * own source forks `zfsremove`, which runs `zpool destroy <name>` unconditionally, and with\n * `cleanup-disks` then calls `wipe_blockdev` on every member (neither flag is offered as a prop,\n * because there is no call here for them to reach). `delete` is FULLY IMPLEMENTED, per S14\n * (alchemy-provider-standard): a `delete` that silently does nothing lies to whoever reads the\n * plan. What actually keeps an ordinary removed declaration from reaching it is\n * `defaultRemovalPolicy: 'retain'` below — Alchemy SKIPS `provider.delete` entirely for an\n * orphaned or destroyed resource under `retain`, so the state row drops and the zpool and its\n * data are left exactly where they are. The asymmetry is still the whole argument: an ORPHANED\n * pool is recoverable (declare it again, or destroy it by hand once a human has looked at which\n * disks are in it), a DESTROYED pool is not — which is why `retain` is the default rather than a\n * documented caution, and why `delete` runs only for a caller who opts in by name with\n * `.pipe(RemovalPolicy.destroy())`. See the ★ on `defaultRemovalPolicy` in resource-spec.ts, and\n * zfs-pool-adopt.test.ts's mutation row, which pins exactly one DELETE reaching the fake cluster.\n *\n * ⛔ THERE IS NO PUT ON THIS FAMILY AT ALL. MEASURED from the cluster's own published schema\n * (`/usr/share/pve-docs/api-viewer/apidoc.js`, read on node-b 2026-09-13): `/nodes/{node}/disks/zfs`\n * has GET and POST, `/nodes/{node}/disks/zfs/{name}` has GET and DELETE, and that is the whole\n * surface — CONFIRMED again in `@distilled.cloud/proxmox`'s generated `nodes.ts`, which declares\n * no `putNodeDiskZfs` at all. So `matches` (zfs-pool-wire.ts) always answers `true`: there is\n * nothing to plan a replace over, and the family's one write is the create below.\n *\n * ⛔ NOT ONE CREATE PARAMETER COMES BACK ON READ, SO `matches` COMPARES NOTHING. MEASURED against\n * the live cluster: `GET /nodes/n2/disks/zfs/rpool` answers exactly\n * `{action?, children, errors, name, scan?, state, status?}` — no `ashift`, no `compression`, no\n * `raidlevel`, no `devices`, no `add_storage`. Every create parameter is write-only. There is\n * therefore no field a declaration and a live pool can both be asked about, and a `matches` that\n * invented one would plan a replace — i.e. a `zpool destroy` — over a difference it could never\n * verify in the first place.\n *\n * ⚠️ AND WHAT THE INDEX RETURNS IS LIVE TELEMETRY, NOT CONFIGURATION. `GET /nodes/node-b/disks/zfs`\n * gives `alloc`, `free`, `frag`, `dedup`, `size`, `health`. MEASURED: two reads of node-b seconds\n * apart returned `alloc` 14474944512 then 14472740864 — it moves on its own, with no declaration\n * anywhere near it. `scan` in the detail read moves the same way (it carries the last scrub), and\n * `status`/`action` appear and vanish as ZFS feature flags and faults come and go. None of them\n * is compared, and the three churning strings are kept out of the state store entirely rather\n * than rewriting this resource's row every time somebody writes a file.\n *\n * ⛔ A MISSING POOL IS A 500, NOT A 404 — MEASURED against the live cluster (TB4 n2, 2026-09-24,\n * read-role, read-only probe): `GET /nodes/n2/disks/zfs/hf-measure-nonexistent-pool` answers a\n * generic shelled-out command failure at HTTP 500, the same shape as every other family this\n * package has migrated. `zfs-pool-wire.ts` carries the same dual-path read PR 239/243\n * established: `readPoolOrFail` (non-folding, used by `diff`) and `readPool` (folding, used by\n * `createPool`'s settle-poll and by `read`/`reconcile`).\n *\n * ★ MIGRATED OFF `client.ts`'s generic `pve()`/`pveOperations` ONTO `@distilled.cloud/proxmox`'s\n * typed `nodes.getNodeDiskZfs`/`createNodeDiskZfs`/`deleteNodeDiskZfs` (2026-09-24, decision\n * 43's proxmox walk-down, nodes/storage sub-area). `distilled-pve.ts`'s `runPve` replaces\n * `pve()`; the cries-wolf fix is wired the same way as every other migrated family. `reconcile`\n * and `delete` are still hand-written (never the factory) for the SAME two reasons as before the\n * migration — the forked-worker settle-poll, and a DELETE that destroys data — now calling\n * `zfs-pool-form.ts`'s `createPool`/`destroyPool` directly instead of through `pveHandlers`.\n *\n * ⚠️ PRIVILEGES, FROM THE SCHEMA. Read and diff need `Sys.Audit` on `/` — both GETs check it.\n * Reconcile needs `Sys.Modify` on `/` for the POST. `Datastore.Allocate` on `/storage` is NOT\n * needed, because `add_storage` is not offered — see the ⛔ on `ZfsPoolProps`.\n * ★ CORRECTED 2026-09-23, ALONGSIDE THE HEADER ABOVE: `delete` needs `Sys.Modify` on `/` too,\n * for the DELETE it now sends under `.pipe(RemovalPolicy.destroy())` — the whole `disks/zfs`\n * family checks it, not only the POST. MEASURED the same day as the rest of this paragraph:\n * `ceph-osd.ts`'s own privilege comparison names `disks/zfs` as one of the sibling families\n * whose write verbs DO carry a `Sys.Modify` check, unlike `ceph/osd`'s create and delete, which\n * carry no permissions block at all and 403 for any identity but `root@pam`.\n */\nimport { Resource } from 'alchemy';\nimport { isResolved } from 'alchemy/Diff';\nimport * as Provider from 'alchemy/Provider';\nimport * as Effect from 'effect/Effect';\nimport { asForm } from './distilled-guard.ts';\nimport { guardForm } from './constraint-guard.ts';\nimport type { PveRequirements, WithTarget } from './resource-spec.ts';\nimport { UNREADABLE, unreadableWarning } from './unreadable-read.ts';\nimport { dropUnreadable, readPool, readPoolOrFail } from './zfs-pool-wire.ts';\nimport type { ZfsPoolAttributes } from './zfs-pool-wire.ts';\nimport { createForm, createPool, destroyPool, zfsPoolCreateEndpoint } from './zfs-pool-form.ts';\nimport type { ZfsCompression, ZfsRaidLevel } from './zfs-pool-form.ts';\n\nexport type { ZfsPoolAttributes } from './zfs-pool-wire.ts';\nexport type { ZfsCompression, ZfsRaidLevel } from './zfs-pool-form.ts';\n\n/**\n * ⛔ THERE IS NO `add_storage`, `cleanup-config` OR `cleanup-disks` PROP, AND THAT IS NOT AN\n * OVERSIGHT. The last two belong to the DELETE this resource refuses to make. `add_storage=1`\n * would have the POST build a `Proxmox.Storage`-shaped object this resource does not own, cannot\n * see on any later read, and cannot remove — invisible to every diff forever, and a collision\n * waiting for the day somebody also declares the storage properly. Declare a `Proxmox.Storage`\n * with `type: 'zfspool'` and `locator: { pool: <this pool's name> }` instead, reading the `name`\n * attribute below so Alchemy orders the storage after the pool.\n */\nexport interface ZfsPoolProps extends WithTarget {\n /**\n * ⛔ A ZPOOL IS NODE-LOCAL AND THIS IS HALF ITS IDENTITY. Changing it moves nothing: `path` then\n * points at a different node, the read answers absent, and reconcile tries to CREATE the pool\n * over there — on whatever `/dev/...` happens to answer to those names on that machine.\n * Declare a separate resource per node instead.\n */\n node: string;\n /** The zpool name, and PVE's key for it on this node. ⚠️ Changing it creates a SECOND pool. */\n name: string;\n /**\n * The block devices to build it on.\n *\n * ⛔ NAME THEM BY `/dev/disk/by-id/...`, NOT `/dev/sdb`. Kernel names are not stable across\n * reboots; a by-id link is. MEASURED in the node's source: PVE resolves what it is handed to a\n * by-id link only AFTER it has decided the device is free, so a stale `/dev/sdb` in a stack\n * file is checked against, and then wiped, whichever disk currently answers to that name.\n * ⚠️ ORDER IS MEANING FOR `raid10` AND IS PRESERVED — PVE walks the list two at a time and makes\n * each pair a mirror. This is why the form uses a plain join and NOT `csv()` from values.ts:\n * `csv` sorts, and sorting this list silently re-pairs the mirrors into a different pool.\n * ⚠️ PVE's only guard is `assert_disk_unused`, i.e. its own `disk_is_used` over the same `used`\n * column the Disks view shows. A blank disk it considers free is wiped with no confirmation.\n *\n * ⛔ OPTIONAL SINCE DECISION 9 (2026-09-23), AND OMITTING IT MEANS SOMETHING SPECIFIC: leaving\n * both this and `raidlevel` undeclared declares an ADOPT-ONLY pool — one this resource may\n * read and report but never build. That is the only shape available for a pool PVE's own POST\n * schema cannot fully describe, such as n1's `speed`, whose layout is a stripe and whose\n * `raidlevel` enum (above) has no stripe to declare. `createForm` (zfs-pool-form.ts) omits\n * both keys when they are absent, and `createPool` refuses before any POST if the pool it\n * would need to build is not already there — an adopt-only declaration never creates. Declare\n * both fields together for a pool this resource should build from scratch; declaring only one\n * of the two is refused the same way, since PVE's POST requires both.\n */\n devices?: readonly string[];\n raidlevel?: ZfsRaidLevel;\n /**\n * Sector size exponent, 9–16, PVE default 12.\n *\n * ⛔ WRITE-ONLY AND IMMUTABLE FOR THE LIFE OF THE POOL. It is consumed by `zpool create -o\n * ashift=` and never returned by any read on this family, so changing it later plans as `noop`\n * and changes nothing. A different ashift means destroying and rebuilding the pool, by hand,\n * with the data moved off first.\n */\n ashift?: number;\n /**\n * ⚠️ Write-only in the same way as `ashift`: applied by `zfs set compression=` at create time and\n * never read back, so a later change plans `noop`. Change it with `zfs set` on the node.\n */\n compression?: ZfsCompression;\n /**\n * `data=<integer>,spares=<integer>`. ⚠️ THE WIRE NAME IS KEPT, HYPHEN AND ALL, for the reason\n * `storage.ts` keeps `prune-backups`: a second spelling is a second name for one thing.\n * ⚠️ PVE refuses it outright unless `raidlevel` is one of the `draid*` levels.\n */\n 'draid-config'?: string;\n}\n\nexport interface ProxmoxZfsPool extends Resource<\n 'Proxmox.ZfsPool',\n ZfsPoolProps,\n ZfsPoolAttributes,\n never,\n PveRequirements\n> {}\n\n/** ★ `retain` by default — a pool holding datasets cannot be rebuilt. See the ★ in resource.ts. */\nexport const ProxmoxZfsPool = Resource<ProxmoxZfsPool>('Proxmox.ZfsPool', {\n defaultRemovalPolicy: 'retain',\n});\n\nexport const ProxmoxZfsPoolProvider = () =>\n Provider.effect(\n ProxmoxZfsPool,\n Effect.succeed(\n ProxmoxZfsPool.Provider.of({\n /** ⛔ EMPTY — `GET /nodes/{node}/disks/zfs` returns telemetry for every pool on the node,\n * `rpool` included. Adoption stays explicit. */\n list: () => Effect.succeed([]),\n // ⚠️ FOLDS ONLY WHEN `output` IS `undefined` — storage.ts's own ⚠️, applied here from the\n // start: `output === undefined` (Plan.ts's adoption probe, Apply.ts's delete recovery)\n // keeps `readPool`'s fold; `output !== undefined` (Drift.ts's already-confirmed row)\n // uses `readPoolOrFail` instead, so `alchemy drift` never reports a transient failure as\n // a silent `{action: 'missing'}`.\n read: Effect.fn(function* ({ olds, output }) {\n return dropUnreadable(\n yield* output === undefined ? readPool(olds) : readPoolOrFail(olds),\n );\n }),\n diff: Effect.fn(function* ({ news, output }) {\n if (!isResolved(news)) return undefined;\n // ⚠️ `guardForm`, NOT `guardWrite` — the only migrated family whose create-guard is\n // CONDITIONAL. `guardWrite`'s own signature requires a real `EndpointKey`, but decision\n // 9's adopt-only mode needs `undefined` some of the time (`zfsPoolCreateEndpoint`'s own\n // header) — `guardForm` (constraint-guard.ts) is the one `distilled-guard.ts`'s\n // `guardWrite` itself calls, and it already accepts `EndpointKey | undefined`.\n yield* guardForm(\n zfsPoolCreateEndpoint(news),\n asForm(createForm(news)),\n output === undefined,\n );\n if (output === undefined) return undefined;\n // ⚠️ `readPoolOrFail`, NOT `readPool` — a genuine TRANSIENT failure here propagates and\n // fails the whole plan loudly instead of folding to \"absent\" and forcing a false\n // update, the cries-wolf class of bug.\n const live = yield* readPoolOrFail(news);\n if (live === UNREADABLE) {\n yield* unreadableWarning('Proxmox.ZfsPool', `${news.node}/${news.name}`);\n return { action: 'noop' } as const;\n }\n // ⛔ FOUND WRITING THIS FILE, 2026-09-24 — an earlier edit that removed the dead\n // `matches()` call (zfs-pool-wire.ts's own ⛔) took this whole branch out with it,\n // leaving a genuinely-absent pool planning `noop` unconditionally instead of `update`\n // — a silent no-op on a state row Alchemy still holds, caught by\n // zfs-pool-adopt.test.ts's own \"an adopted pool that vanishes\" case rejecting the plan\n // loudly rather than resolving. Restored before this PR opened.\n if (live === undefined) {\n yield* guardForm(zfsPoolCreateEndpoint(news), asForm(createForm(news)), true);\n return { action: 'update' } as const;\n }\n // A live pool means `noop`, unconditionally — `matches` (zfs-pool-wire.ts's own ⛔)\n // always answers `true`, since every create parameter is write-only: there is nothing a\n // declaration and a live pool can be compared on, so nothing here can ever be a replace.\n return { action: 'noop' } as const;\n }),\n /**\n * ⛔ THE ONLY WRITE THIS FAMILY EVER MAKES IS `createPool`'s create — see zfs-pool-form.ts.\n * An existing pool is returned exactly as read, unwritten.\n * ⚠️ `readPool` PIPED THROUGH `dropUnreadable` — `createPool`'s settle-poll treats a\n * refused mid-poll credential exactly like \"not found yet\" (its own header), so its own\n * `read` parameter is typed `Attributes | undefined`, never `Unreadable`; folding here is\n * what keeps that true rather than leaking the sentinel into `reconcile`'s own return\n * value, which the engine expects to be real attributes or nothing.\n */\n reconcile: Effect.fn(function* ({ news }) {\n return yield* createPool(news, (props) =>\n readPool(props).pipe(Effect.map(dropUnreadable)),\n );\n }),\n delete: Effect.fn(function* ({ olds }) {\n yield* destroyPool(olds);\n }),\n }),\n ),\n );\n",
|
|
132
132
|
"/**\n * `Proxmox.ZfsPool`'s READ side: the live-to-attributes shape, the read itself, and `matches`.\n * Split out of zfs-pool.ts (2026-09-24, the distilled migration) — the storage.ts/storage-wire.ts\n * seam; the write side is zfs-pool-form.ts.\n */\nimport * as nodes from '@distilled.cloud/proxmox/nodes';\nimport * as Effect from 'effect/Effect';\nimport { runPve } from './distilled-pve.ts';\nimport type { ZfsPoolProps } from './zfs-pool.ts';\nimport { UNREADABLE, type Unreadable, readOrUnreadable } from './unreadable-read.ts';\nimport { text } from './values.ts';\n\n/**\n * ⚠️ EVERYTHING HERE IS REPORTED, NOTHING HERE IS COMPARED — see the ⛔ on `matches` below. These\n * exist so a plan and the state store can say what the pool actually is, on a family where the\n * declaration and the live object share no comparable field at all.\n */\nexport interface ZfsPoolAttributes {\n /** ★ The value a `Proxmox.Storage` should read to order itself after this pool. */\n name: string;\n node: string;\n /** `ONLINE` | `DEGRADED` | `FAULTED` | … Health, not configuration. */\n state: string;\n /** ZFS's own error summary, e.g. `No known data errors`. */\n errors: string;\n /**\n * The leaf devices ZFS reports, in vdev order, comma-joined.\n *\n * ⚠️ THIS IS WHAT ZFS RESOLVED, NOT WHAT WAS DECLARED, and the two normally differ: PVE rewrites\n * a `/dev/sdb` into a by-id link before creating, and ZFS reports partition paths (`…-part3`)\n * for a pool built on partitions — MEASURED, that is exactly what node-b's `rpool` reports.\n * Never compare it with `props.devices`.\n */\n devices: string;\n}\n\n/**\n * The device paths at the bottom of PVE's vdev tree, in the order ZFS reports them.\n *\n * ⚠️ \"NO CHILDREN\" IS THE LEAF TEST, AND IT IS NOT A GUESS — MEASURED in the node's `preparetree`,\n * which sets `leaf` to 0 when there are children and 1 otherwise. Reading the flag would work\n * equally well; recursing on `children` needs no second field to be present and is what makes\n * nested sections (mirrors inside a raid10, `spares`, `cache`) flatten correctly.\n */\nexport const leafDevices = (children: unknown): string[] =>\n Array.isArray(children)\n ? children.flatMap((entry: unknown) => {\n const vdev = entry as { children?: unknown; name?: unknown };\n const nested = leafDevices(vdev.children);\n return nested.length > 0 ? nested : [text(vdev.name)].filter((name) => name !== '');\n })\n : [];\n\n/**\n * ⚠️ `scan`, `status` AND `action` ARE DELIBERATELY NOT ATTRIBUTES. All three are advisory strings\n * ZFS rewrites on its own — `scan` on every scrub, the other two as feature flags and faults come\n * and go — so keeping them would rewrite this resource's state row for reasons no declaration\n * caused. Same reasoning as `digest` in storage.ts.\n */\nconst attributesOf = (\n live: nodes.GetNodeDiskZfsResponse,\n props: ZfsPoolProps,\n): ZfsPoolAttributes => ({\n devices: leafDevices(live.children).join(','),\n errors: text(live.errors, 'unknown'),\n name: props.name,\n node: props.node,\n state: text(live.state, 'unknown'),\n});\n\n/**\n * ★ Default `read` role — `Sys.Audit` on `/` is all this GET checks (zfs-pool.ts's header).\n * ⛔ `{ node: props.node, name: props.name }`, NEVER THE WHOLE `props` — storage.ts's/user.ts's own\n * ⛔, the kit 0.31.1 regression: `GetNodeDiskZfsRequest`'s schema declares only `node` and `name`\n * (both path labels); any OTHER key on the object passed to `nodes.getNodeDiskZfs` is treated by\n * distilled's `buildRequest` as an \"unknown key\" and JSON-encoded onto this bodyless GET, which a\n * stricter fetch client refuses outright.\n * ⛔ A MISSING POOL IS A 500, NOT A 404 — MEASURED against the live cluster (TB4 n2, 2026-09-24,\n * read-role, read-only probe): `GET /nodes/n2/disks/zfs/hf-measure-nonexistent-pool` answers\n * `{\"message\":\"command '/sbin/zpool status -P hf-measure-nonexistent-pool' failed: exit code\n * 1\\n\",\"data\":null}` at HTTP 500 — PVE shells out to `zpool status` and reports its exit code\n * as a generic command failure, not a typed \"not found\". The same shape as user.ts's/group.ts's/\n * storage.ts's own measured 500s. `readPool` below (used by `createPool`'s settle-poll and by\n * `reconcile`/`read`) still folds it, exactly as `readUser`/`readGroup`/`readStorage` do — the\n * whole reason `createPool` can tell \"not built yet\" from \"forbidden\" only by giving up after\n * `SETTLE_ATTEMPTS` (zfs-pool-form.ts's own ⚠️ on that); `readPoolOrFail` (used by `diff`) does\n * not fold it, so a genuine transient failure there propagates and fails the plan loudly instead.\n */\nexport const readPoolOrFail = (props: ZfsPoolProps) =>\n readOrUnreadable(\n runPve(\n props.target,\n 'read',\n false,\n nodes.getNodeDiskZfs({ name: props.name, node: props.node }),\n ),\n ).pipe(\n Effect.map((live) => {\n if (live === UNREADABLE) return UNREADABLE;\n // ⚠️ A detail answer with no `name` is not a pool — same shape check zfs-pool-spec.ts made,\n // kept as a defensive fallback now that the 500 above is the measured absence signal.\n return text(live.name) === '' ? undefined : attributesOf(live, props);\n }),\n );\n\n/**\n * ⛔ FOLDS A GENUINE READ FAILURE TO `undefined` TOO, AND ONLY `createPool`'s settle-poll AND\n * `read`/`reconcile` MAY USE IT — user.ts's `readUser` has the full reasoning. Safe here because\n * a wrongful fold during create costs at most a redundant `createNodeDiskZfs` POST, which PVE\n * refuses loudly (\"pool already exists\") rather than silently corrupting anything — zfs-pool.ts's\n * own header, measured.\n * ⛔ `zfs-pool.ts`'s `diff` does **NOT** use this — the same bug class as the credential denial fix:\n * folding a TRANSIENT failure into \"absent\" at PLAN TIME would force a false `update` with\n * nothing compared. `diff` calls `readPoolOrFail` directly, so a genuine failure there propagates\n * and fails the whole plan loudly instead.\n */\nexport const readPool = (props: ZfsPoolProps) =>\n readPoolOrFail(props).pipe(Effect.orElseSucceed(() => undefined));\n\n/** `read`/`reconcile`/`createPool` return `Attributes | undefined`; only `diff` sees `UNREADABLE`. */\nexport const dropUnreadable = (live: ZfsPoolAttributes | Unreadable | undefined) =>\n live === UNREADABLE ? undefined : live;\n\n/**\n * ⛔ THERE IS NO `matches` FUNCTION HERE — UNLIKE EVERY OTHER MIGRATED FAMILY, AND DELIBERATELY.\n * Every create parameter on this family is write-only (this file's own `attributesOf`), so\n * there is nothing a declaration and a live pool can ever be compared on — a `matches` that\n * invented one would plan a replace (`zpool destroy`, since this family has no PUT) over a\n * difference it could never verify. `zfs-pool.ts`'s `diff` returns `noop` unconditionally once a\n * pool is found, rather than calling a function that would only ever return `true` — found by\n * adversarial review that an earlier draft exported one here anyway, unused by anything.\n */\n",
|
|
133
133
|
"/**\n * The create lane for `Proxmox.ZfsPool`: the form PVE wants, and the wait for the worker it forks.\n * Split out of zfs-pool.ts (2026-09-24, the distilled migration) — same seam as before, now naming\n * the write side the way storage.ts/storage-form.ts does.\n *\n * ⚠️ `createPool` TAKES THE READ AS A PARAMETER, GENERIC IN ITS ERROR AND REQUIREMENT CHANNELS,\n * rather than importing the read module and coupling to its exact effect shape here. This file\n * answers \"how does a declaration become a pool on disks\"; zfs-pool-wire.ts answers \"what is a\n * zpool, and when has it changed\" — the caller (zfs-pool.ts) is what ties the two together, so\n * this file cannot accidentally read the cluster differently from `diff`.\n */\nimport * as Effect from 'effect/Effect';\nimport * as nodes from '@distilled.cloud/proxmox/nodes';\nimport { asForm } from './distilled-guard.ts';\nimport { guardForm } from './constraint-guard.ts';\nimport { runPve } from './distilled-pve.ts';\nimport { text } from './values.ts';\nimport type { ZfsPoolAttributes, ZfsPoolProps } from './zfs-pool.ts';\nimport type { NodesNodeDisksZfsPostParams } from './generated/pve.ts';\n\nexport const ZFS_POOL_CREATE = 'pve:POST /nodes/{node}/disks/zfs';\n\n/**\n * PVE's layouts, generated (2026-09-23) from `NodesNodeDisksZfsPostParams['raidlevel']`\n * (`generated/pve.ts`, manifest `pve-apidoc` pve-manager 9.2.11 sha256 9def8f13…) rather than\n * hand-typed, per decision 9. ⚠️ Each has a minimum disk count PVE enforces, and `raid10` needs an\n * even one. ⛔ THERE IS NO `stripe` IN THIS ENUM. n1's `speed` pool is one (decision 14 accepts it\n * as-is): `ZfsPoolProps` (zfs-pool.ts) is why a stripe pool is declarable at all — as an\n * ADOPT-ONLY declaration with no `raidlevel`, never as a full one.\n */\nexport type ZfsRaidLevel = NonNullable<NodesNodeDisksZfsPostParams['raidlevel']>;\n\n/** Generated the same way, from `NodesNodeDisksZfsPostParams['compression']`. */\nexport type ZfsCompression = NonNullable<NodesNodeDisksZfsPostParams['compression']>;\n\n/**\n * ★ CHECKED AGAINST THE VENDOR TABLE ONLY FOR A FULL DECLARATION — decision 9's adopt-only mode.\n * `guardCreate` (distilled-guard.ts's `guardWrite`) runs on the FIRST plan of ANY declaration and\n * checks the create form's REQUIRED fields whenever this resolves to the real endpoint key — and\n * PVE marks both `devices` and `raidlevel` required (codegen/constraints's `pve-nodes-disks`\n * row). An adopt-only declaration deliberately omits both, so checking it would refuse a MATCHING\n * adoption at plan time, before `read` ever ran. Returning `undefined` (no key) makes the guard a\n * no-op for an adopt-only declaration, while a FULL one (`devices` and `raidlevel` both present)\n * is checked exactly as before — zfs-pool.ts's `diff` passes this as the `guardWrite` endpoint.\n * ⚠️ THE RUNTIME BACKSTOP IS `createPool` BELOW, NOT THIS FUNCTION. Skipping the plan-time guard\n * for an adopt-only declaration does not skip the check that the pool is actually there —\n * `createPool` refuses before any POST when the read comes back absent and either field is\n * undefined, which is what a genuinely absent adopt-only declaration hits at apply time.\n */\nexport const zfsPoolCreateEndpoint = (props: ZfsPoolProps) =>\n props.devices === undefined || props.raidlevel === undefined ? undefined : ZFS_POOL_CREATE;\n\n/**\n * The wire form, PVE's own field names — what `guardWrite` (zfs-pool.ts) checks.\n *\n * ⚠️ `devices` IS JOINED IN DECLARED ORDER AND NOT PUT THROUGH `csv()` FROM values.ts. `csv` sorts,\n * and PVE walks this list two at a time to pair `raid10` mirrors — MEASURED in the node's own\n * `PVE::API2::Disks::ZFS` — so sorting it builds a different pool from the one declared. The list\n * is never compared against anything, so it needs no normalisation, only faithful order.\n * ⚠️ AN OMITTED OPTIONAL IS NOT SENT. PVE's own defaults (ashift 12, compression on) are then\n * applied by the node. Sending a guessed default would be indistinguishable here — the values\n * are unreadable afterwards either way — but it would put a number in the request that no\n * declaration asked for, and this is the one call that writes to physical disks.\n * ⚠️ `node` IS NOT IN THE FORM: it is the `nodes/{node}` path label, and a second copy could only\n * disagree with it.\n * ⚠️ EVERY KEY IS OMITTED WHEN ABSENT, `devices` AND `raidlevel` INCLUDED — not just the optional\n * ones. An adopt-only declaration (both undefined, decision 9) must produce a form `createPool`'s\n * own guard can inspect for their absence, and one this function itself does not throw building.\n */\nexport const createForm = (props: ZfsPoolProps): Record<string, string> => ({\n ...(props.devices === undefined ? {} : { devices: props.devices.join(',') }),\n name: props.name,\n ...(props.raidlevel === undefined ? {} : { raidlevel: props.raidlevel }),\n ...(props.ashift === undefined ? {} : { ashift: String(props.ashift) }),\n ...(props.compression === undefined ? {} : { compression: props.compression }),\n ...(props['draid-config'] === undefined ? {} : { 'draid-config': props['draid-config'] }),\n});\n\n/**\n * The actual `createNodeDiskZfs` call body — `createForm` plus the `node` label, `draid-config`\n * renamed to distilled's `draid_config` (`T.Body(\"draid-config\")` on the generated schema; the\n * ONE hyphenated field this family's create form carries — storage-form.ts's `underscored` has\n * the fuller measurement, not repeated here for one field).\n *\n * ⚠️ `as unknown as` — `devices`/`raidlevel` are REQUIRED in distilled's generated\n * `CreateNodeDiskZfsRequest`, so an adopt-only form (both omitted) cannot satisfy it structurally\n * even though it is a valid PVE request for `guardWrite`'s purposes. `createPool` below refuses\n * before ever reaching this cast when either is genuinely missing, so the cast never carries a\n * request distilled's OWN required fields would reject in practice.\n */\nconst toDistilledCreate = (props: ZfsPoolProps): nodes.CreateNodeDiskZfsRequest => {\n const form = createForm(props);\n return {\n ...form,\n draid_config: form['draid-config'],\n node: props.node,\n } as unknown as nodes.CreateNodeDiskZfsRequest;\n};\n\n/** 30 reads, 2s apart. A create that has not landed in a minute has gone wrong, not gone slow. */\nconst SETTLE_ATTEMPTS = 30;\n\n/**\n * Create the pool if it is absent, and otherwise leave it completely alone.\n *\n * ⛔ THE POST ONLY FORKS A WORKER. MEASURED in `/usr/share/perl5/PVE/API2/Disks/ZFS.pm` on node-b:\n * the create handler ends in `$rpcenv->fork_worker('zfscreate', ...)` and its HTTP answer is a\n * UPID returned the instant the worker is forked — before `zpool create` has run, let alone\n * finished. A read-back taken immediately would report a successful create as the failure \"the\n * write returned no error but the object is still absent\". THAT is why this function polls.\n *\n * ⚠️ THERE IS NO UPDATE BRANCH BECAUSE PVE HAS NO PUT HERE. An existing pool is returned exactly as\n * read, unwritten: the only write this resource ever makes is the create of a pool that is not\n * there. Do not add a \"repair\" write; there is no field it could set.\n *\n * ⛔ AND IF THE READ IS WRONG, THE POST IS STILL SAFE — measured, not hoped for. `readPool` folds a\n * 403 or an unreachable node into \"absent\", so a too-narrow lease would send this down the create\n * path over a live pool. PVE's handler calls `get_pool_data()` before it forks anything and dies\n * with \"pool '<name>' already exists on node '<node>'\", and `assert_disk_unused` refuses every\n * device that pool is holding. A create aimed at a pool that is really there fails loudly rather\n * than wiping it.\n *\n * ⚠️ SHORT POLLS WITH A HARD CAP, NOT ONE LONG WAIT, NOT `@distilled.cloud/proxmox`'s `awaitTask`.\n * `readPool` cannot tell \"not yet\" from \"forbidden\" — both fold to `undefined` — so the loop\n * gives up with the UPID rather than retrying forever, and the UPID is the only thing that leads\n * to the worker's real error. Distilled's own task-status poller exists (`Task.ts`) and would\n * remove this ambiguity, but swapping to it changes this resource's OBSERVABLE behaviour (what a\n * caller sees on a slow create) beyond a transport swap — left as a follow-up, not folded into a\n * migration PR silently.\n *\n * ⛔ THE SAME AMBIGUITY MAKES A RE-RUN AFTER THE GIVE-UP DIE GENUINELY UNSAFE, NOT MERELY SLOW TO\n * CONFIRM — FOUND BY ADVERSARIAL REVIEW, 2026-09-24, of THIS migration, though the shape is\n * unchanged from before it (`git blame` shows the same settle-poll pre-dates this PR). \"If the\n * read is wrong, the POST is still safe\" above is true for the FIRST call into this function —\n * PVE's own `get_pool_data()` refuses a create over a pool it can already see. It is NOT true\n * for a SECOND deploy attempt started while the FIRST worker is still mid-`zpool create`: that\n * worker has not yet made the pool visible to a read, so `existing = yield* read(props)` at the\n * top of THIS call can also fold to `undefined` — not because the pool is gone, but because the\n * first attempt has not finished — and this function would POST a SECOND `zpool create` at the\n * SAME devices while the first is still writing them. There is no lock or marker anywhere in\n * this package that would stop it. The give-up message below says so explicitly and names the\n * task log to check FIRST; that message, and an operator reading it, are the only safeguard.\n *\n * ⛔ THE ADOPT-ONLY GUARD, RIGHT AFTER THE READ AND BEFORE ANYTHING ELSE. Decision 9 (2026-09-23):\n * omitting `devices` and `raidlevel` declares a pool this resource may only ADOPT, for a pool\n * PVE's own schema cannot fully describe — n1's `speed` is a stripe, and `raidlevel`'s enum has\n * no stripe (zfs-pool.ts). `zfsPoolCreateEndpoint` above already keeps the vendor constraint\n * guard from refusing such a declaration at PLAN time; this is the matching refusal at APPLY\n * time, for the one case that guard cannot see — the pool genuinely is not there.\n */\nexport const createPool = <E, R>(\n props: ZfsPoolProps,\n read: (props: ZfsPoolProps) => Effect.Effect<ZfsPoolAttributes | undefined, E, R>,\n) =>\n Effect.gen(function* () {\n const existing = yield* read(props);\n if (existing !== undefined) return existing;\n\n if (props.devices === undefined || props.raidlevel === undefined) {\n return yield* Effect.die(\n new Error(\n `${props.node}/${props.name}: this is an adopt-only declaration (no \\`devices\\` or ` +\n '`raidlevel`) and the pool is not there to adopt. An adopt-only Proxmox.ZfsPool never ' +\n 'creates -- declare both fields for a pool this resource should build, or point this ' +\n 'declaration at a pool that already exists on this node.',\n ),\n );\n }\n\n /**\n * ⛔ FOUND BY ADVERSARIAL REVIEW, 2026-09-24 — `diff` NEVER RUNS FOR A GENUINELY FIRST-EVER\n * DECLARATION. Upstream `Plan.ts` routes a brand-new resource (`oldState === undefined`)\n * straight to `action: 'create'` without ever calling `provider.diff` — so `zfs-pool.ts`'s\n * own `guardForm` call (which checks THIS SAME form) never runs for that plan, and this was\n * THE ONLY WRITE PATH IN THE FAMILY WITH NO VENDOR CHECK AT ALL, before or after this\n * migration. `ceph-pool.ts`'s own hand-written `reconcile` already re-runs its create guard\n * for exactly this reason (an ADOPTED row's `diff` answer is discarded by Plan.ts too); this\n * is the same fix for this family. A malformed `ashift` or `draid-config` is now refused\n * here, before the POST, rather than reaching the wire and refused only by PVE itself.\n */\n yield* guardForm(zfsPoolCreateEndpoint(props), asForm(createForm(props)), true);\n\n const upid = yield* runPve(\n props.target,\n 'provision',\n true,\n nodes.createNodeDiskZfs(toDistilledCreate(props)),\n );\n\n const settle = (attempts: number): Effect.Effect<ZfsPoolAttributes | undefined, E, R> =>\n Effect.gen(function* () {\n const live = yield* read(props);\n if (live !== undefined || attempts <= 0) return live;\n yield* Effect.sleep('2 seconds');\n return yield* settle(attempts - 1);\n });\n\n const after = yield* settle(SETTLE_ATTEMPTS);\n if (after === undefined) {\n return yield* Effect.die(\n new Error(\n `nodes/${props.node}/disks/zfs/${props.name}: POST returned ${text(upid, '(no UPID)')} ` +\n 'but the pool has not appeared. That POST only forks a `zfscreate` worker, so the task ' +\n `holds the real error -- read it with \\`pvesh get /nodes/${props.node}/tasks/<upid>/log\\`. ` +\n 'NOTHING WAS RETRIED AND NOTHING WAS CLEANED UP: if the worker reached `zpool create`, ' +\n 'the declared devices have already been written to. DO NOT RE-RUN THIS DEPLOY BEFORE ' +\n 'READING THAT LOG: `read` cannot tell \"the worker is still running\" from \"the pool is ' +\n 'genuinely gone\", so a re-run this soon can POST a SECOND `zpool create` at the SAME ' +\n 'devices while the first one is still mid-write -- confirm the task finished (one way ' +\n 'or the other) before trying again.',\n ),\n );\n }\n return after;\n });\n\n/**\n * ⛔ `DELETE /nodes/{node}/disks/zfs/{name}` RUNS `zpool destroy` AND THE DATASETS GO WITH IT. Per\n * S14 (alchemy-provider-standard), it is implemented rather than stubbed — a `delete` that\n * silently does nothing lies to whoever reads the plan — and what keeps an ordinary removed\n * declaration from reaching it is the resource's `defaultRemovalPolicy: 'retain'` (zfs-pool.ts):\n * an orphaned pool is forgotten, not destroyed, unless a caller opts in with\n * `.pipe(RemovalPolicy.destroy())`. See the corrected header in zfs-pool.ts.\n *\n * ⚠️ `cleanup-config`/`cleanup-disks` ARE NOT SENT. The first would additionally remove the PVE\n * storage entry pointing at this pool, which is a different object with its own resource\n * (`Proxmox.Storage`); one resource reaching over to delete another's is how a stack ends up with\n * state describing something that is gone. Neither is offered as a prop, for the same reason.\n */\nexport const destroyPool = (props: ZfsPoolProps) =>\n runPve(\n props.target,\n 'provision',\n true,\n nodes.deleteNodeDiskZfs({ name: props.name, node: props.node }),\n );\n"
|
|
134
134
|
],
|
|
135
|
-
"mappings": ";AA4CA;AACA;AACA;AACA;AACA;;;ACpCA;;;AC4EA,IAAM,WAAW,CAAC,UAA0B,CAAC,GAAG,KAAK,EAAE;AAQvD,IAAM,aAAa,CAAC,MAAc,OAAe,SAAoC;AAAA,EACnF,MAAM,MAAgB,CAAC;AAAA,EACvB,IAAI,KAAK,cAAc,aAAa,SAAS,KAAK,IAAI,KAAK,WAAW;AAAA,IACpE,IAAI,KAAK,GAAG,iBAAiB,KAAK,sBAAsB;AAAA,EAC1D;AAAA,EACA,IAAI,KAAK,cAAc,aAAa,SAAS,KAAK,IAAI,KAAK,WAAW;AAAA,IACpE,IAAI,KAAK,GAAG,kBAAkB,KAAK,sBAAsB;AAAA,EAC3D;AAAA,EACA,IAAI,KAAK,SAAS,aAAa,CAAC,KAAK,KAAK,SAAS,KAAK,GAAG;AAAA,IACzD,IAAI,KAAK,GAAG,wBAAwB,KAAK,KAAK,KAAK,IAAI,GAAG;AAAA,EAC5D;AAAA,EAGA,IAAI,KAAK,YAAY,aAAa,CAAC,IAAI,OAAO,KAAK,SAAS,KAAK,YAAY,EAAE,KAAK,KAAK,GAAG;AAAA,IAC1F,IAAI,KAAK,GAAG,oBAAoB,KAAK,iBAAiB,KAAK,SAAS;AAAA,EACtE;AAAA,EAIA,MAAM,UAAU,OAAO,KAAK;AAAA,EAC5B,MAAM,UAAU,KAAK,YAAY,aAAa,KAAK,YAAY;AAAA,EAC/D,IAAI,WAAW,UAAU,MAAM,OAAO,SAAS,OAAO,GAAG;AAAA,IACvD,IAAI,KAAK,YAAY,aAAa,UAAU,KAAK,SAAS;AAAA,MACxD,IAAI,KAAK,GAAG,kBAAkB,KAAK,SAAS;AAAA,IAC9C;AAAA,IACA,IAAI,KAAK,YAAY,aAAa,UAAU,KAAK,SAAS;AAAA,MACxD,IAAI,KAAK,GAAG,iBAAiB,KAAK,SAAS;AAAA,IAC7C;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAUF,IAAM,aAAa,CACxB,OACA,MACA,UAA4B,CAAC,MACP;AAAA,EACtB,MAAM,MAAgB,CAAC;AAAA,EACvB,YAAY,MAAM,SAAS,OAAO,QAAQ,KAAK,GAAG;AAAA,IAChD,MAAM,QAAQ,KAAK;AAAA,IACnB,IAAI,UAAU,WAAW;AAAA,MACvB,IAAI,QAAQ,aAAa,QAAQ,KAAK,aAAa;AAAA,QAAM,IAAI,KAAK,GAAG,gBAAgB;AAAA,MACrF;AAAA,IACF;AAAA,IAEA,WAAW,QAAQ,OAAO,UAAU,WAAW,CAAC,KAAK,IAAI,OAAO;AAAA,MAC9D,IAAI,KAAK,GAAG,WAAW,MAAM,MAAM,IAAI,CAAC;AAAA,IAC1C;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAIF,IAAM,UAAU,CAAC,UAAuB,UAC7C,GAAG;AAAA,MAAkD,MAAM,KAAK;AAAA,KAAQ;AAAA,IACxE,uEACA;;;ACzIK,IAAM,yBAAwE;AAAA,EACnF,2BAA2B;AAAA,IACzB,SAAW,EAAC,QAAS,eAAc,UAAW,MAAK,MAAO,SAAQ;AAAA,EACpE;AAAA,EACA,0BAA0B;AAAA,IACxB,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAClD,QAAU,EAAC,QAAS,cAAa,UAAW,MAAK,MAAO,SAAQ;AAAA,EAClE;AAAA,EACA,0BAA0B;AAAA,IACxB,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,OAAS,EAAC,QAAS,aAAY,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC9D,QAAU,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACvC,WAAa,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,MAAQ,EAAC,SAAU,+BAA8B,eAAgB,yBAAwB,MAAO,SAAQ;AAAA,IACxG,UAAY,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC7C,UAAY,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACzD,QAAU,EAAC,QAAS,cAAa,WAAY,IAAG,UAAW,MAAK,MAAO,SAAQ;AAAA,EACjF;AAAA,EACA,uBAAuB;AAAA,IACrB,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,MAAQ,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IACxC,OAAS,EAAC,QAAS,mBAAkB,UAAW,MAAK,MAAO,SAAQ;AAAA,IACpE,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,OAAS,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,EACtD;AAAA,EACA,oCAAoC,CAAC;AAAA,EACrC,kCAAkC;AAAA,IAChC,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,EACpD;AAAA,EACA,kCAAkC;AAAA,IAChC,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,OAAS,EAAC,QAAS,aAAY,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC9D,QAAU,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACvC,WAAa,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,MAAQ,EAAC,SAAU,+BAA8B,eAAgB,yBAAwB,MAAO,SAAQ;AAAA,IACxG,UAAY,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,EAC/C;AAAA,EACA,kDAAkD;AAAA,IAChD,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,QAAU,EAAC,SAAU,gBAAe,SAAU,GAAE,MAAO,UAAS;AAAA,EAClE;AACF;;;AC3CO,IAAM,iCAAgF;AAAA,EAC3F,4BAA4B;AAAA,IAC1B,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,SAAW,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,SAAU,KAAI,MAAO,CAAC,KAAI,KAAI,QAAO,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC/E,KAAO,EAAC,SAAU,+BAA8B,QAAS,wBAAuB,MAAO,SAAQ;AAAA,IAC/F,SAAW,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACpD,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,IAAM,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACjE,UAAY,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACzD,kBAAoB,EAAC,SAAU,UAAS,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IACnF,QAAU,EAAC,QAAS,0BAAyB,MAAO,SAAQ;AAAA,IAC5D,MAAQ,EAAC,SAAU,YAAW,MAAO,CAAC,YAAW,WAAU,MAAM,GAAE,MAAO,SAAQ;AAAA,IAClF,MAAQ,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC5C,kBAAkB,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IACnD,qBAAqB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,mBAAkB,qBAAqB,GAAE,MAAO,SAAQ;AAAA,IAC9G,6BAA6B,EAAC,MAAO,CAAC,UAAS,QAAO,UAAU,GAAE,MAAO,SAAQ;AAAA,IACjF,aAAe,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IAC7D,iBAAiB,EAAC,SAAU,cAAa,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACjF,UAAY,EAAC,QAAS,sBAAqB,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC1E,WAAa,EAAC,SAAU,2BAA0B,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IACrG,UAAY,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACxD,SAAW,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACrD,MAAQ,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,EACnD;AAAA,EACA,gCAAgC;AAAA,IAC9B,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,SAAW,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,SAAU,KAAI,MAAO,CAAC,KAAI,KAAI,QAAO,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC/E,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,KAAO,EAAC,QAAS,wBAAuB,MAAO,SAAQ;AAAA,IACvD,SAAW,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACpD,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,QAAU,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACjE,UAAY,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACzD,kBAAoB,EAAC,SAAU,UAAS,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IACnF,QAAU,EAAC,QAAS,0BAAyB,MAAO,SAAQ;AAAA,IAC5D,MAAQ,EAAC,SAAU,YAAW,MAAO,CAAC,YAAW,WAAU,MAAM,GAAE,MAAO,SAAQ;AAAA,IAClF,MAAQ,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC5C,kBAAkB,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IACnD,qBAAqB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,mBAAkB,qBAAqB,GAAE,MAAO,SAAQ;AAAA,IAC9G,6BAA6B,EAAC,MAAO,CAAC,UAAS,QAAO,UAAU,GAAE,MAAO,SAAQ;AAAA,IACjF,aAAe,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IAC7D,iBAAiB,EAAC,SAAU,cAAa,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACjF,UAAY,EAAC,QAAS,sBAAqB,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC1E,WAAa,EAAC,SAAU,2BAA0B,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IACrG,UAAY,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACxD,SAAW,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACrD,MAAQ,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,EACnD;AACF;;;ACnDO,IAAM,+BAA8E;AAAA,EACzF,sCAAsC;AAAA,IACpC,OAAS,EAAC,UAAW,MAAK,MAAO,UAAS;AAAA,EAC5C;AACF;;;ACJO,IAAM,mCAAkF;AAAA,EAC7F,sCAAsC;AAAA,IACpC,MAAQ,EAAC,QAAS,YAAW,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC5D,SAAW,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC1D,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,oCAAmC,eAAgB,8BAA6B,UAAW,MAAK,MAAO,SAAQ;AAAA,EACjK;AAAA,EACA,4CAA4C;AAAA,IAC1C,MAAQ,EAAC,QAAS,YAAW,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC5D,SAAW,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC1D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,oCAAmC,eAAgB,8BAA6B,MAAO,SAAQ;AAAA,EACnJ;AACF;;;ACZO,IAAM,6BAA4E;AAAA,EACvF,kCAAkC;AAAA,IAChC,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,OAAS,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACjD,cAAgB,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3D,aAAe,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1D,KAAO,EAAC,QAAS,4BAA2B,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3E,OAAS,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,WAAU,WAAU,YAAW,SAAS,GAAE,MAAO,SAAQ;AAAA,IACzG,MAAQ,EAAC,MAAO,CAAC,MAAK,IAAI,GAAE,MAAO,SAAQ;AAAA,EAC7C;AAAA,EACA,8BAA8B;AAAA,IAC5B,UAAY,EAAC,MAAO,CAAC,YAAW,UAAU,GAAE,MAAO,SAAQ;AAAA,IAC3D,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,WAAa,EAAC,QAAS,2BAA0B,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChF,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,EAClE;AAAA,EACA,uCAAuC;AAAA,IACrC,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,OAAS,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACjD,cAAgB,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3D,aAAe,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1D,OAAS,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,WAAU,WAAU,YAAW,SAAS,GAAE,MAAO,SAAQ;AAAA,EAC3G;AAAA,EACA,oCAAoC;AAAA,IAClC,UAAY,EAAC,MAAO,CAAC,YAAW,UAAU,GAAE,MAAO,SAAQ;AAAA,IAC3D,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,WAAa,EAAC,QAAS,2BAA0B,MAAO,SAAQ;AAAA,EAClE;AACF;;;AChCO,IAAM,kCAAiF;AAAA,EAC5F,yCAAyC;AAAA,IACvC,eAAiB,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,QAAO,OAAO,GAAE,MAAO,SAAQ;AAAA,IAC/E,iBAAiB,EAAC,SAAU,YAAW,SAAU,GAAE,MAAO,UAAS;AAAA,IACnE,KAAO,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,KAAI,MAAO,UAAS;AAAA,IACvE,oBAAoB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC5E,gBAAgB,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IACjD,sBAAsB,EAAC,SAAU,YAAW,SAAU,MAAK,MAAO,UAAS;AAAA,IAC3E,iBAAiB,EAAC,SAAU,SAAQ,MAAO,CAAC,QAAO,OAAO,GAAE,MAAO,SAAQ;AAAA,IAC3E,4BAA4B,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC7D,gBAAgB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,MAAQ,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACjD,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,UAAW,MAAK,MAAO,UAAS;AAAA,IACrE,OAAS,EAAC,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,QAAS,WAAU,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7D,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,MAAQ,EAAC,MAAO,CAAC,YAAW,YAAW,eAAe,GAAE,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,EACjH;AAAA,EACA,wCAAwC;AAAA,IACtC,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,eAAiB,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,QAAO,OAAO,GAAE,MAAO,SAAQ;AAAA,IAC/E,iBAAiB,EAAC,SAAU,YAAW,SAAU,GAAE,MAAO,UAAS;AAAA,IACnE,KAAO,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,KAAI,MAAO,UAAS;AAAA,IACvE,oBAAoB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC5E,gBAAgB,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IACjD,sBAAsB,EAAC,SAAU,YAAW,SAAU,MAAK,MAAO,UAAS;AAAA,IAC3E,iBAAiB,EAAC,SAAU,SAAQ,MAAO,CAAC,QAAO,OAAO,GAAE,MAAO,SAAQ;AAAA,IAC3E,4BAA4B,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC7D,gBAAgB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,MAAQ,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACjD,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,UAAW,MAAK,MAAO,UAAS;AAAA,IACrE,OAAS,EAAC,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,QAAS,WAAU,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7D,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,EACxD;AACF;;;ACpCO,IAAM,wCAAuF;AAAA,EAClG,oDAAoD;AAAA,IAClD,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChE,QAAU,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC1C,OAAS,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC3C;AAAA,EACA,sDAAsD;AAAA,IACpD,QAAU,EAAC,MAAO,MAAK,QAAS,qBAAoB,MAAO,QAAO;AAAA,IAClE,eAAe,EAAC,MAAO,MAAK,QAAS,cAAa,MAAO,QAAO;AAAA,IAChE,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,EAClE;AAAA,EACA,kDAAkD;AAAA,IAChD,gBAAgB,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChD,QAAU,EAAC,MAAO,MAAK,QAAS,qBAAoB,MAAO,QAAO;AAAA,IAClE,eAAe,EAAC,MAAO,MAAK,QAAS,cAAa,MAAO,QAAO;AAAA,IAChE,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,YAAW,YAAW,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7E,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChE,QAAU,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC5C;AAAA,EACA,qDAAqD;AAAA,IACnD,QAAU,EAAC,MAAO,CAAC,QAAO,OAAM,KAAK,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IACtE,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChE,KAAO,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,EACzC;AAAA,EACA,4CAA4C;AAAA,IAC1C,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7D,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChE,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,EAC/D;AAAA,EACA,0DAA0D;AAAA,IACxD,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,IAC7D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,EAC3C;AAAA,EACA,4DAA4D;AAAA,IAC1D,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,IAC7D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,MAAO,MAAK,QAAS,qBAAoB,MAAO,QAAO;AAAA,IAClE,eAAe,EAAC,MAAO,MAAK,QAAS,cAAa,MAAO,QAAO;AAAA,EAClE;AAAA,EACA,wDAAwD;AAAA,IACtD,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,IAC7D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,MAAO,MAAK,QAAS,qBAAoB,MAAO,QAAO;AAAA,IAClE,eAAe,EAAC,MAAO,MAAK,QAAS,cAAa,MAAO,QAAO;AAAA,IAChE,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,YAAW,YAAW,KAAK,GAAE,MAAO,SAAQ;AAAA,EAC/E;AAAA,EACA,2DAA2D;AAAA,IACzD,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,IAC7D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,MAAO,CAAC,QAAO,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,EACxD;AAAA,EACA,kDAAkD;AAAA,IAChD,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,IAC7D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7D,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,EAC/D;AACF;;;ACzDO,IAAM,sCAAqF;AAAA,EAChG,iCAAiC;AAAA,IAC/B,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,IAAM,EAAC,QAAS,0BAAyB,SAAU,kCAAiC,eAAgB,4BAA2B,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9J,MAAQ,EAAC,SAAU,GAAE,MAAO,SAAQ;AAAA,IACpC,YAAc,EAAC,MAAO,CAAC,SAAQ,MAAM,GAAE,MAAO,SAAQ;AAAA,IACtD,UAAY,EAAC,SAAU,QAAO,QAAS,sBAAqB,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC3F,QAAU,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,QAAS,YAAW,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9D,MAAQ,EAAC,MAAO,CAAC,OAAO,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC3D;AAAA,EACA,qCAAqC;AAAA,IACnC,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,MAAQ,EAAC,SAAU,GAAE,MAAO,SAAQ;AAAA,IACpC,YAAc,EAAC,MAAO,CAAC,SAAQ,MAAM,GAAE,MAAO,SAAQ;AAAA,IACtD,UAAY,EAAC,SAAU,QAAO,QAAS,sBAAqB,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC3F,QAAU,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,EAChD;AACF;;;ACpBO,IAAM,8BAA6E;AAAA,EACxF,+BAA+B;AAAA,IAC7B,OAAS,EAAC,WAAY,KAAI,eAAgB,qCAAoC,MAAO,SAAQ;AAAA,IAC7F,KAAO,EAAC,SAAU,UAAS,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,MAAQ,EAAC,MAAO,CAAC,MAAM,GAAE,MAAO,SAAQ;AAAA,IACxC,MAAQ,EAAC,WAAY,GAAE,WAAY,GAAE,SAAU,yCAAwC,eAAgB,mCAAkC,UAAW,MAAK,MAAO,SAAQ;AAAA,IACxK,MAAQ,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC1C;AAAA,EACA,8CAA8C;AAAA,IAC5C,mBAAmB,EAAC,QAAS,MAAK,MAAO,SAAQ;AAAA,IACjD,cAAc,EAAC,MAAO,MAAK,QAAS,sBAAqB,MAAO,QAAO;AAAA,IACvE,eAAiB,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IACrD,SAAW,EAAC,QAAS,MAAK,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,QAAS,qBAAoB,UAAW,MAAK,MAAO,SAAQ;AAAA,IACvE,MAAQ,EAAC,MAAO,CAAC,QAAQ,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC5D;AAAA,EACA,+BAA+B;AAAA,IAC7B,MAAQ,EAAC,MAAO,CAAC,SAAS,GAAE,MAAO,SAAQ;AAAA,IAC3C,SAAW,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC/C,WAAa,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACtD,qBAAqB,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IACzD,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,KAAO,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC3C,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAClD,OAAS,EAAC,QAAS,WAAU,MAAO,SAAQ;AAAA,IAC5C,aAAa,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC5D,yBAAyB,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,2CAA0C,eAAgB,qCAAoC,MAAO,QAAO;AAAA,IACzL,KAAO,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACpC,MAAQ,EAAC,MAAO,CAAC,QAAO,UAAS,QAAO,UAAS,QAAO,OAAO,GAAE,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,IACxH,iBAAiB,EAAC,SAAU,UAAS,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IAChF,aAAa,EAAC,SAAU,UAAS,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7D,cAAc,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5E,MAAQ,EAAC,WAAY,GAAE,WAAY,GAAE,SAAU,yCAAwC,eAAgB,mCAAkC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC1K;AAAA,EACA,wBAAwB,CAAC;AAAA,EACzB,qCAAqC;AAAA,IACnC,OAAS,EAAC,WAAY,KAAI,eAAgB,qCAAoC,MAAO,SAAQ;AAAA,IAC7F,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,KAAO,EAAC,SAAU,UAAS,SAAU,GAAE,MAAO,UAAS;AAAA,EACzD;AAAA,EACA,sDAAsD;AAAA,IACpD,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,mBAAmB,EAAC,QAAS,MAAK,MAAO,SAAQ;AAAA,IACjD,cAAc,EAAC,MAAO,MAAK,QAAS,sBAAqB,MAAO,QAAO;AAAA,IACvE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,eAAiB,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IACrD,SAAW,EAAC,QAAS,MAAK,MAAO,SAAQ;AAAA,EAC3C;AAAA,EACA,qCAAqC;AAAA,IACnC,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,MAAQ,EAAC,MAAO,CAAC,SAAS,GAAE,MAAO,SAAQ;AAAA,IAC3C,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,SAAW,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC/C,WAAa,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACtD,qBAAqB,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IACzD,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,KAAO,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC3C,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAClD,OAAS,EAAC,QAAS,WAAU,MAAO,SAAQ;AAAA,IAC5C,aAAa,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC5D,yBAAyB,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,2CAA0C,eAAgB,qCAAoC,MAAO,QAAO;AAAA,IACzL,KAAO,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACpC,iBAAiB,EAAC,SAAU,UAAS,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IAChF,aAAa,EAAC,SAAU,UAAS,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7D,cAAc,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,EAC9E;AACF;;;ACnEO,IAAM,6BAA4E;AAAA,EACvF,yCAAyC;AAAA,IACvC,QAAU,EAAC,SAAU,OAAM,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,EACzE;AAAA,EACA,0CAA0C,CAAC;AAAA,EAC3C,wCAAwC,CAAC;AAAA,EACzC,2CAA2C;AAAA,IACzC,eAAe,EAAC,QAAS,WAAU,MAAO,SAAQ;AAAA,EACpD;AAAA,EACA,mCAAmC;AAAA,IACjC,aAAe,EAAC,SAAU,GAAE,MAAO,SAAQ;AAAA,IAC3C,KAAO,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IACvC,mBAAmB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAChD,cAAgB,EAAC,SAAU,KAAI,MAAO,SAAQ;AAAA,EAChD;AAAA,EACA,oCAAoC;AAAA,IAClC,aAAe,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,UAAS,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7E,UAAY,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACnE,MAAQ,EAAC,eAAgB,oBAAmB,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3E,mBAAqB,EAAC,SAAU,QAAO,MAAO,CAAC,MAAK,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IACjF,QAAU,EAAC,SAAU,OAAM,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACvE,YAAc,EAAC,SAAU,OAAM,MAAO,UAAS;AAAA,IAC/C,MAAQ,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IAC/D,aAAe,EAAC,SAAU,qCAAoC,eAAgB,+BAA8B,MAAO,SAAQ;AAAA,EAC7H;AAAA,EACA,0CAA0C;AAAA,IACxC,aAAe,EAAC,MAAO,CAAC,OAAM,UAAS,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7D,UAAY,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,mBAAqB,EAAC,MAAO,CAAC,MAAK,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IAChE,QAAU,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,YAAc,EAAC,SAAU,OAAM,MAAO,UAAS;AAAA,IAC/C,MAAQ,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACjD,aAAe,EAAC,SAAU,qCAAoC,eAAgB,+BAA8B,MAAO,SAAQ;AAAA,EAC7H;AACF;;;AClCO,IAAM,8BAA6E;AAAA,EACxF,oCAAoC;AAAA,IAClC,QAAU,EAAC,SAAU,MAAK,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,IACnE,aAAe,EAAC,SAAU,MAAK,MAAO,CAAC,MAAK,OAAM,QAAO,OAAM,QAAO,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IACnG,SAAW,EAAC,QAAS,eAAc,UAAW,MAAK,MAAO,SAAQ;AAAA,IAClE,MAAQ,EAAC,QAAS,kBAAiB,UAAW,MAAK,MAAO,SAAQ;AAAA,IAClE,WAAa,EAAC,MAAO,CAAC,UAAS,UAAS,UAAS,SAAQ,UAAS,UAAS,SAAQ,UAAS,QAAQ,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,EACvI;AACF;;;ACRO,IAAM,4BAA2E;AAAA,EACtF,8BAA8B;AAAA,IAC5B,MAAQ,EAAC,SAAU,SAAQ,MAAO,CAAC,SAAQ,QAAO,SAAQ,SAAQ,WAAU,SAAS,GAAE,MAAO,SAAQ;AAAA,IACtG,SAAW,EAAC,SAAU,mDAAkD,SAAU,GAAE,MAAO,SAAQ;AAAA,IACnG,OAAS,EAAC,SAAU,OAAM,MAAO,CAAC,SAAQ,WAAU,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC1E,OAAS,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,UAAY,EAAC,SAAU,KAAI,SAAU,MAAK,SAAU,GAAE,MAAO,SAAQ;AAAA,IACrE,UAAY,EAAC,SAAU,mCAAkC,SAAU,QAAO,SAAU,GAAE,MAAO,UAAS;AAAA,IACtG,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,YAAc,EAAC,SAAU,cAAa,eAAgB,wCAAuC,MAAO,SAAQ;AAAA,IAC5G,KAAO,EAAC,eAAgB,6FAA4F,MAAO,SAAQ;AAAA,IACnI,YAAc,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACvD,UAAY,EAAC,QAAS,YAAW,WAAY,KAAI,MAAO,SAAQ;AAAA,IAChE,MAAQ,EAAC,MAAO,CAAC,UAAS,UAAS,aAAY,QAAO,UAAS,WAAU,WAAU,YAAW,YAAW,iBAAiB,GAAE,MAAO,SAAQ;AAAA,IAC3I,QAAU,EAAC,SAAU,OAAM,SAAU,IAAG,MAAO,UAAS;AAAA,IACxD,YAAc,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IACnE,YAAc,EAAC,WAAY,KAAI,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9D,QAAU,EAAC,MAAO,CAAC,UAAS,UAAS,UAAS,UAAS,UAAS,YAAW,aAAY,UAAS,UAAS,SAAQ,WAAW,GAAE,MAAO,SAAQ;AAAA,IAC7I,UAAY,EAAC,WAAY,GAAE,MAAO,SAAQ;AAAA,IAC1C,MAAQ,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC9C,cAAgB,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACzD,SAAW,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACxD,SAAW,EAAC,SAAU,SAAQ,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACvE,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,MAAQ,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IAChD,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,KAAO,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IAC9D,MAAQ,EAAC,QAAS,YAAW,SAAU,WAAU,SAAU,KAAI,UAAW,MAAK,MAAO,UAAS;AAAA,EACjG;AAAA,EACA,2CAA2C;AAAA,IACzC,MAAQ,EAAC,SAAU,SAAQ,MAAO,CAAC,SAAQ,QAAO,SAAQ,SAAQ,WAAU,SAAS,GAAE,MAAO,SAAQ;AAAA,IACtG,OAAS,EAAC,SAAU,OAAM,MAAO,CAAC,SAAQ,WAAU,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC1E,OAAS,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,UAAY,EAAC,SAAU,KAAI,SAAU,MAAK,SAAU,GAAE,MAAO,SAAQ;AAAA,IACrE,UAAY,EAAC,SAAU,mCAAkC,SAAU,QAAO,SAAU,GAAE,MAAO,UAAS;AAAA,IACtG,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,YAAc,EAAC,SAAU,cAAa,eAAgB,wCAAuC,MAAO,SAAQ;AAAA,IAC5G,KAAO,EAAC,eAAgB,6FAA4F,MAAO,SAAQ;AAAA,IACnI,YAAc,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACvD,UAAY,EAAC,QAAS,YAAW,WAAY,KAAI,MAAO,SAAQ;AAAA,IAChE,MAAQ,EAAC,MAAO,CAAC,UAAS,UAAS,aAAY,QAAO,UAAS,WAAU,WAAU,YAAW,YAAW,iBAAiB,GAAE,MAAO,SAAQ;AAAA,IAC3I,QAAU,EAAC,SAAU,OAAM,SAAU,IAAG,MAAO,UAAS;AAAA,IACxD,YAAc,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IACnE,QAAU,EAAC,MAAO,CAAC,UAAS,UAAS,UAAS,UAAS,UAAS,YAAW,aAAY,UAAS,UAAS,SAAQ,WAAW,GAAE,MAAO,SAAQ;AAAA,IAC7I,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,cAAgB,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACzD,SAAW,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACxD,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,MAAQ,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IAChD,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,KAAO,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,EAChE;AAAA,EACA,2CAA2C;AAAA,IACzC,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,MAAQ,EAAC,MAAO,CAAC,UAAS,OAAM,OAAM,OAAM,OAAM,OAAM,OAAM,OAAM,OAAM,OAAM,OAAM,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,OAAO,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC58D,MAAQ,EAAC,SAAU,mCAAkC,eAAgB,6BAA4B,UAAW,MAAK,MAAO,SAAQ;AAAA,EAClI;AACF;;;AC3DO,IAAM,gCAA+E;AAAA,EAC1F,kCAAkC;AAAA,IAChC,SAAW,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC5C,gBAAgB,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,IACrD,WAAa,EAAC,MAAO,CAAC,cAAa,iBAAgB,eAAc,aAAY,WAAU,eAAc,eAAc,eAAc,oBAAmB,kBAAkB,GAAE,MAAO,SAAQ;AAAA,IACvL,uBAAyB,EAAC,MAAO,CAAC,UAAS,YAAW,UAAU,GAAE,MAAO,SAAQ;AAAA,IACjF,cAAgB,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IAC1D,aAAe,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IACpE,MAAQ,EAAC,QAAS,UAAS,MAAO,SAAQ;AAAA,IAC1C,OAAS,EAAC,QAAS,UAAS,MAAO,SAAQ;AAAA,IAC3C,SAAW,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC5C,OAAS,EAAC,QAAS,aAAY,WAAY,IAAG,WAAY,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3F,KAAO,EAAC,SAAU,OAAM,SAAU,MAAK,MAAO,UAAS;AAAA,IACvD,SAAW,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,WAAa,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACvD,YAAc,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,IACnD,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,WAAa,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACvD,SAAW,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,QAAU,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACpD,MAAQ,EAAC,MAAO,CAAC,UAAS,QAAO,OAAM,SAAQ,QAAO,UAAS,aAAY,WAAU,WAAU,cAAa,QAAO,SAAS,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7J,WAAW,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,mBAAmB,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,EAC1D;AAAA,EACA,iCAAiC,CAAC;AAAA,EAClC,yCAAyC;AAAA,IACvC,SAAW,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC5C,gBAAgB,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,IACrD,WAAa,EAAC,MAAO,CAAC,cAAa,iBAAgB,eAAc,aAAY,WAAU,eAAc,eAAc,eAAc,oBAAmB,kBAAkB,GAAE,MAAO,SAAQ;AAAA,IACvL,uBAAyB,EAAC,MAAO,CAAC,UAAS,YAAW,UAAU,GAAE,MAAO,SAAQ;AAAA,IACjF,cAAgB,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IAC1D,aAAe,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IACpE,MAAQ,EAAC,QAAS,UAAS,MAAO,SAAQ;AAAA,IAC1C,OAAS,EAAC,QAAS,UAAS,MAAO,SAAQ;AAAA,IAC3C,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,SAAW,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC5C,KAAO,EAAC,SAAU,OAAM,SAAU,MAAK,MAAO,UAAS;AAAA,IACvD,SAAW,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,WAAa,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACvD,YAAc,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,IACnD,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,WAAa,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACvD,SAAW,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,QAAU,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACpD,MAAQ,EAAC,MAAO,CAAC,UAAS,QAAO,OAAM,SAAQ,QAAO,UAAS,aAAY,WAAU,WAAU,cAAa,QAAO,SAAS,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7J,WAAW,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,mBAAmB,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,EAC1D;AACF;;;ACtDO,IAAM,6BAA4E;AAAA,EACvF,+BAA+B;AAAA,IAC7B,UAAY,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAClD,WAAW,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACvD,MAAQ,EAAC,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IACpD,SAAW,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC3C,SAAW,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACxC,MAAQ,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,MAAM,GAAE,MAAO,SAAQ;AAAA,IACtE,MAAQ,EAAC,QAAS,eAAc,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,QAAS,mBAAkB,SAAU,oCAAmC,eAAgB,8BAA6B,MAAO,SAAQ;AAAA,IACjJ,SAAW,EAAC,SAAU,mDAAkD,SAAU,GAAE,MAAO,UAAS;AAAA,IACpG,OAAS,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,YAAY,GAAE,MAAO,SAAQ;AAAA,IACzE,OAAS,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACpD,KAAO,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IAClD,UAAY,EAAC,SAAU,KAAI,SAAU,KAAI,SAAU,GAAE,MAAO,SAAQ;AAAA,IACpE,UAAY,EAAC,SAAU,mCAAkC,SAAU,QAAO,SAAU,GAAE,MAAO,UAAS;AAAA,IACtG,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,YAAc,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACvD,cAAc,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACxD,SAAW,EAAC,SAAU,oBAAmB,QAAS,wBAAuB,MAAO,SAAQ;AAAA,IACxF,WAAa,EAAC,MAAO,CAAC,OAAM,KAAI,MAAM,GAAE,MAAO,SAAQ;AAAA,IACvD,0BAA0B,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACpE,aAAa,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACzD,eAAe,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IAC1D,UAAY,EAAC,MAAO,CAAC,MAAK,SAAQ,MAAK,SAAQ,SAAQ,MAAK,MAAK,MAAK,SAAQ,SAAQ,SAAQ,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,SAAQ,MAAK,MAAK,IAAI,GAAE,MAAO,SAAQ;AAAA,IACvL,MAAQ,EAAC,MAAO,CAAC,UAAS,SAAQ,UAAS,WAAU,YAAW,YAAW,mBAAkB,cAAa,WAAW,GAAE,MAAO,SAAQ;AAAA,IACtI,kBAAoB,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,SAAQ;AAAA,IAChE,eAAiB,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5D,MAAQ,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC5C,YAAc,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACtD,QAAU,EAAC,SAAU,SAAQ,MAAO,CAAC,SAAQ,OAAM,OAAM,QAAO,QAAO,UAAS,QAAO,QAAO,SAAQ,SAAQ,OAAM,OAAM,SAAS,GAAE,MAAO,SAAQ;AAAA,IACpJ,eAAe,EAAC,SAAU,0CAAyC,eAAgB,oCAAmC,MAAO,SAAQ;AAAA,IACrI,MAAQ,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC9C,MAAQ,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,aAAY,mBAAkB,sBAAqB,WAAU,QAAQ,GAAE,MAAO,SAAQ;AAAA,IAC/H,aAAa,EAAC,SAAU,6BAA4B,eAAgB,uBAAsB,MAAO,SAAQ;AAAA,IACzG,QAAU,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,SAAW,EAAC,QAAS,kBAAiB,WAAY,KAAI,MAAO,SAAQ;AAAA,IACrE,KAAO,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAClD,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,SAAW,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IACjD,WAAa,EAAC,SAAU,OAAM,SAAU,sEAAqE,eAAgB,gEAA+D,MAAO,SAAQ;AAAA,IAC3M,SAAW,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACxD,SAAW,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACrD,MAAQ,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IAChD,OAAS,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACpD,SAAW,EAAC,SAAU,qBAAoB,SAAU,uEAAsE,eAAgB,iEAAgE,MAAO,SAAQ;AAAA,IACzN,MAAQ,EAAC,QAAS,YAAW,SAAU,WAAU,SAAU,KAAI,UAAW,MAAK,MAAO,UAAS;AAAA,IAC/F,gBAAkB,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IAC5D,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,EACzD;AAAA,EACA,4CAA4C;AAAA,IAC1C,UAAY,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAClD,WAAW,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACvD,MAAQ,EAAC,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IACpD,SAAW,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACxC,MAAQ,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,MAAM,GAAE,MAAO,SAAQ;AAAA,IACtE,MAAQ,EAAC,QAAS,eAAc,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,QAAS,mBAAkB,SAAU,oCAAmC,eAAgB,8BAA6B,MAAO,SAAQ;AAAA,IACjJ,OAAS,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,YAAY,GAAE,MAAO,SAAQ;AAAA,IACzE,OAAS,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACpD,KAAO,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IAClD,UAAY,EAAC,SAAU,KAAI,SAAU,KAAI,SAAU,GAAE,MAAO,SAAQ;AAAA,IACpE,UAAY,EAAC,SAAU,mCAAkC,SAAU,QAAO,SAAU,GAAE,MAAO,UAAS;AAAA,IACtG,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,YAAc,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACvD,cAAc,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACxD,SAAW,EAAC,SAAU,oBAAmB,QAAS,wBAAuB,MAAO,SAAQ;AAAA,IACxF,WAAa,EAAC,MAAO,CAAC,OAAM,KAAI,MAAM,GAAE,MAAO,SAAQ;AAAA,IACvD,aAAa,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACzD,eAAe,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IAC1D,UAAY,EAAC,MAAO,CAAC,MAAK,SAAQ,MAAK,SAAQ,SAAQ,MAAK,MAAK,MAAK,SAAQ,SAAQ,SAAQ,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,SAAQ,MAAK,MAAK,IAAI,GAAE,MAAO,SAAQ;AAAA,IACvL,MAAQ,EAAC,MAAO,CAAC,UAAS,SAAQ,UAAS,WAAU,YAAW,YAAW,mBAAkB,cAAa,WAAW,GAAE,MAAO,SAAQ;AAAA,IACtI,kBAAoB,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,SAAQ;AAAA,IAChE,eAAiB,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5D,MAAQ,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC5C,YAAc,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACtD,QAAU,EAAC,SAAU,SAAQ,MAAO,CAAC,SAAQ,OAAM,OAAM,QAAO,QAAO,UAAS,QAAO,QAAO,SAAQ,SAAQ,OAAM,OAAM,SAAS,GAAE,MAAO,SAAQ;AAAA,IACpJ,eAAe,EAAC,SAAU,0CAAyC,eAAgB,oCAAmC,MAAO,SAAQ;AAAA,IACrI,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,MAAQ,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,aAAY,mBAAkB,sBAAqB,WAAU,QAAQ,GAAE,MAAO,SAAQ;AAAA,IAC/H,aAAa,EAAC,SAAU,6BAA4B,eAAgB,uBAAsB,MAAO,SAAQ;AAAA,IACzG,QAAU,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,SAAW,EAAC,QAAS,kBAAiB,WAAY,KAAI,MAAO,SAAQ;AAAA,IACrE,KAAO,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAClD,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,SAAW,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IACjD,WAAa,EAAC,SAAU,OAAM,SAAU,sEAAqE,eAAgB,gEAA+D,MAAO,SAAQ;AAAA,IAC3M,SAAW,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACxD,MAAQ,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IAChD,OAAS,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACpD,SAAW,EAAC,SAAU,qBAAoB,SAAU,uEAAsE,eAAgB,iEAAgE,MAAO,SAAQ;AAAA,IACzN,gBAAkB,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IAC5D,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,EACzD;AACF;;;ACtGO,IAAM,wBAAuE;AAAA,EAClF,mBAAmB;AAAA,IACjB,QAAU,EAAC,QAAS,cAAa,UAAW,MAAK,MAAO,SAAQ;AAAA,EAClE;AAAA,EACA,2BAA2B;AAAA,IACzB,SAAW,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC1D,KAAO,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,EAClD;AACF;;;ACRO,IAAM,0BAAyE;AAAA,EACpF,qBAAqB;AAAA,IACnB,MAAQ,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACjD,WAAa,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IAClE,SAAW,EAAC,QAAS,4BAA2B,MAAO,SAAQ;AAAA,IAC/D,gBAAgB,EAAC,QAAS,yBAAwB,MAAO,SAAQ;AAAA,IACjE,QAAU,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC1C,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,aAAe,EAAC,SAAU,6CAA4C,eAAgB,uCAAsC,MAAO,SAAQ;AAAA,IAC3I,QAAU,EAAC,MAAO,CAAC,OAAM,SAAQ,UAAS,MAAM,GAAE,MAAO,SAAQ;AAAA,IACjE,WAAW,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACnD,yBAAyB,EAAC,SAAU,4EAA2E,SAAU,IAAG,MAAO,UAAS;AAAA,IAC5I,SAAW,EAAC,QAAS,+BAA8B,MAAO,SAAQ;AAAA,IAClE,YAAc,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IAC1D,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAClD,SAAW,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC1D,UAAY,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC5C,MAAQ,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACpD,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,QAAU,EAAC,QAAS,0BAAyB,MAAO,SAAQ;AAAA,IAC5D,eAAiB,EAAC,SAAU,YAAW,MAAO,CAAC,OAAM,YAAW,UAAS,MAAM,GAAE,MAAO,SAAQ;AAAA,IAChG,iBAAiB,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAC1D,uBAAuB,EAAC,SAAU,MAAK,MAAO,CAAC,KAAI,KAAI,KAAI,KAAI,MAAK,IAAI,GAAE,MAAO,UAAS;AAAA,IAC1F,QAAU,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IACxD,YAAc,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,OAAM,OAAM,KAAI,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IAClG,SAAW,EAAC,QAAS,kBAAiB,UAAW,MAAK,MAAO,SAAQ;AAAA,IACrE,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,UAAY,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IAC1D,MAAQ,EAAC,MAAO,CAAC,SAAQ,UAAS,QAAO,OAAM,QAAO,SAAQ,eAAc,OAAM,WAAU,OAAM,OAAM,OAAM,OAAM,SAAS,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9J,QAAU,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IACxD,iBAAiB,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,EAC/D;AAAA,EACA,8BAA8B;AAAA,IAC5B,WAAa,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IAClE,SAAW,EAAC,QAAS,4BAA2B,MAAO,SAAQ;AAAA,IAC/D,gBAAgB,EAAC,QAAS,yBAAwB,MAAO,SAAQ;AAAA,IACjE,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC1C,aAAe,EAAC,SAAU,6CAA4C,eAAgB,uCAAsC,MAAO,SAAQ;AAAA,IAC3I,QAAU,EAAC,MAAO,CAAC,OAAM,SAAQ,UAAS,MAAM,GAAE,MAAO,SAAQ;AAAA,IACjE,WAAW,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACnD,yBAAyB,EAAC,SAAU,4EAA2E,SAAU,IAAG,MAAO,UAAS;AAAA,IAC5I,SAAW,EAAC,QAAS,+BAA8B,MAAO,SAAQ;AAAA,IAClE,YAAc,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IAC1D,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAClD,SAAW,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC1D,UAAY,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC5C,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,eAAiB,EAAC,SAAU,YAAW,MAAO,CAAC,OAAM,YAAW,UAAS,MAAM,GAAE,MAAO,SAAQ;AAAA,IAChG,iBAAiB,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAC1D,uBAAuB,EAAC,SAAU,MAAK,MAAO,CAAC,KAAI,KAAI,KAAI,KAAI,MAAK,IAAI,GAAE,MAAO,UAAS;AAAA,IAC1F,QAAU,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IACxD,YAAc,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,OAAM,OAAM,KAAI,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IAClG,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,iBAAiB,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,EAC/D;AACF;;;ACzDO,IAAM,yBAAwE;AAAA,EACnF,8BAA8B;AAAA,IAC5B,kBAAkB,EAAC,SAAU,iDAAgD,eAAgB,mDAAkD,MAAO,SAAQ;AAAA,IAC9J,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,cAAc,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1C,gBAAgB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7K,qBAAqB,EAAC,SAAU,uBAAsB,MAAO,CAAC,mBAAkB,qBAAqB,GAAE,MAAO,SAAQ;AAAA,IACtH,eAAe,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,qEAAoE,eAAgB,gEAA+D,MAAO,SAAQ;AAAA,IACzN,MAAQ,EAAC,WAAY,MAAK,WAAY,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,EACzE;AAAA,EACA,qDAAqD;AAAA,IACnD,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IACzI,eAAe,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IAC9I,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7K,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,kBAAkB,GAAE,MAAO,SAAQ;AAAA,EACjF;AAAA,EACA,iDAAiD;AAAA,IAC/C,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,gBAAgB,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChD,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IACzI,eAAe,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IAC9I,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,YAAW,YAAW,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7E,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7K,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,kBAAkB,GAAE,MAAO,SAAQ;AAAA,IAC/E,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,QAAU,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC5C;AAAA,EACA,oDAAoD;AAAA,IAClD,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,OAAM,KAAK,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IACvF,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7K,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,kBAAkB,GAAE,MAAO,SAAQ;AAAA,IAC/E,KAAO,EAAC,SAAU,mmHAAsmH,eAAgB,qmHAAwmH,UAAW,MAAK,MAAO,SAAQ;AAAA,EACjxO;AAAA,EACA,2CAA2C;AAAA,IACzC,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7D,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7K,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,kBAAkB,GAAE,MAAO,SAAQ;AAAA,IAC/E,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,QAAO;AAAA,EAC5K;AAAA,EACA,0BAA0B;AAAA,IACxB,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,IAAM,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3K,cAAc,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1C,gBAAgB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,UAAY,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC5C,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAChL;AAAA,EACA,yBAAyB;AAAA,IACvB,yBAAyB,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC9K,kBAAkB,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,QAAO;AAAA,IAClL,YAAY,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACzD,aAAa,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IAC1D,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,IAAM,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3K,aAAa,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,2KAA0K,eAAgB,+JAA8J,MAAO,SAAQ;AAAA,IACxZ,WAAW,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACxD,YAAY,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACzD,QAAU,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC/J,aAAa,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IACrP,gBAAgB,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IACrL,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9K,kBAAkB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC1E,iBAAiB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC9C,kBAAkB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,EAC5E;AAAA,EACA,2BAA2B;AAAA,IACzB,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,IAAM,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3K,aAAa,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACpE,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,kBAAkB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC/C,gBAAgB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9K,kBAAkB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,EAC5E;AAAA,EACA,oCAAoC;AAAA,IAClC,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,WAAU,eAAc,iBAAgB,kBAAiB,aAAY,eAAc,cAAa,eAAc,gBAAe,eAAc,cAAa,eAAc,UAAS,qBAAoB,UAAS,oBAAmB,2BAA0B,wBAAwB,GAAE,MAAO,QAAO;AAAA,IAChU,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,cAAc,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1C,gBAAgB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,qBAAqB,EAAC,SAAU,uBAAsB,MAAO,CAAC,mBAAkB,qBAAqB,GAAE,MAAO,SAAQ;AAAA,IACtH,eAAe,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,qEAAoE,eAAgB,gEAA+D,MAAO,SAAQ;AAAA,EAC3N;AAAA,EACA,2DAA2D;AAAA,IACzD,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,UAAS,WAAU,WAAU,gBAAe,UAAS,aAAa,GAAE,MAAO,QAAO;AAAA,IACjH,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IACzI,eAAe,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,EAChJ;AAAA,EACA,uDAAuD;AAAA,IACrD,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,UAAS,WAAU,WAAU,UAAS,eAAc,YAAW,QAAO,UAAU,GAAE,MAAO,QAAO;AAAA,IAC/H,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IACzI,eAAe,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IAC9I,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,YAAW,YAAW,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7E,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,EACvD;AAAA,EACA,0DAA0D;AAAA,IACxD,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,WAAU,WAAU,UAAS,QAAO,QAAQ,GAAE,MAAO,QAAO;AAAA,IAC3F,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,QAAU,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IACvE,KAAO,EAAC,SAAU,mmHAAsmH,eAAgB,qmHAAwmH,MAAO,SAAQ;AAAA,EACjwO;AAAA,EACA,iDAAiD;AAAA,IAC/C,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,WAAU,WAAU,gBAAe,kBAAiB,eAAc,kBAAiB,QAAO,QAAQ,GAAE,MAAO,QAAO;AAAA,IACjJ,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7D,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,QAAO;AAAA,EAC5K;AAAA,EACA,8BAA8B;AAAA,IAC5B,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,WAAU,WAAU,MAAK,aAAY,aAAY,eAAc,cAAa,eAAc,gBAAe,aAAa,GAAE,MAAO,QAAO;AAAA,IACrK,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,cAAc,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1C,gBAAgB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,EAChK;AAAA,EACA,6BAA6B;AAAA,IAC3B,yBAAyB,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC9K,kBAAkB,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,QAAO;AAAA,IAClL,YAAY,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACzD,aAAa,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IAC1D,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,UAAS,SAAQ,WAAU,YAAW,mBAAkB,gBAAe,WAAU,YAAW,YAAW,aAAY,MAAK,aAAY,aAAY,iBAAgB,kBAAiB,iBAAgB,gBAAe,mBAAkB,kBAAiB,kBAAiB,yBAAwB,gBAAgB,GAAE,MAAO,QAAO;AAAA,IAC3V,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,aAAa,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,2KAA0K,eAAgB,+JAA8J,MAAO,SAAQ;AAAA,IACxZ,WAAW,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACxD,YAAY,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACzD,QAAU,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC/J,aAAa,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IACrP,gBAAgB,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IACrK,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC9J,kBAAkB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC1E,iBAAiB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC9C,kBAAkB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,EAC5E;AAAA,EACA,+BAA+B;AAAA,IAC7B,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,mBAAkB,WAAU,YAAW,kBAAiB,MAAK,aAAY,gBAAe,gBAAgB,GAAE,MAAO,QAAO;AAAA,IACvJ,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,aAAa,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACpE,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,kBAAkB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC/C,gBAAgB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC9J,kBAAkB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,EAC5E;AACF;;;AC9KO,IAAM,sBAAqE;AAAA,KAC7E;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AACL;;;AnB3BO,IAAM,iBAAiB,CAAC,QAA0C;AAAA,EACvE,MAAM,QAAQ,oBAAoB;AAAA,EAClC,IAAI,UAAU,WAAW;AAAA,IACvB,MAAM,IAAI,MACR,mCAAmC,0DACjC,2DACJ;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAIF,IAAM,iBAAiB,CAC5B,KACA,MACA,aACsB,WAAW,eAAe,GAAG,GAAG,MAAM,EAAE,SAAS,CAAC;AAQnE,IAAM,YAAY,CACvB,KACA,MACA,aAEO,eAAQ,MAAM;AAAA,EACnB,IAAI,QAAQ;AAAA,IAAW,OAAc;AAAA,EACrC,MAAM,QAAQ,eAAe,KAAK,MAAM,QAAQ;AAAA,EAChD,OAAO,MAAM,WAAW,IAAW,cAAc,WAAI,IAAI,MAAM,QAAQ,KAAK,KAAK,CAAC,CAAC;AAAA,CACpF;;;AoBzCI,IAAM,YAAY,CAAC,QAAgB,IAAI,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO,EAAE,KAAK,GAAG;AAGrF,IAAM,gBAAgB,EAAE,OAAO,UAAU,OAAO,UAAU,MAAM,QAAQ;AAGxE,IAAM,WAAW;AAGV,IAAM,QAAQ,CAAC,WAAiD;AAAA,EACrE,MAAM,UAAU,MAAM,IAAI;AAAA,EAC1B,OAAO,MAAM;AAAA,GACZ,cAAc,MAAM,QAAQ,MAAM;AACrC;AAGO,IAAM,OAAO,CAAC,WAAiD;AAAA,KACjE,MAAM,KAAK;AAAA,EACd,WAAW,MAAM,cAAc,QAAQ,MAAM;AAC/C;AAGA,IAAM,SAAS,CAAC,SACd,OAAO,YAAY,OAAO,QAAQ,IAAI,EAAE,OAAO,CAAC,MAA6B,EAAE,OAAO,SAAS,CAAC;AAQ3F,IAAM,aAAa,CAAC,UAAoB,UAAU,UAAU,OAAO,KAAK,KAAK,CAAC,GAAG,IAAI;AAGrF,IAAM,WAAW,CAAC,UACvB,CAAC,UAAU,MAAM,IAAI,GAAG,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,EAAE,KAAK,GAAG;AAExE,IAAM,OAAO,CAAC,MAAuD,UACnE,KAAK,KACH,CAAC,QACC,IAAI,SAAS,UAAU,MAAM,IAAI,KACjC,IAAI,SAAS,MAAM,QACnB,IAAI,SAAS,MAAM,QACnB,IAAI,WAAW,MAAM,MACzB;AAMF,IAAM,aAAa,CAAC,QAA8C;AAAA,EAChE,MAAM,QAAQ,IAAI;AAAA,EAClB,OAAO,UAAU,aAAa,UAAU,KAAK,UAAU,QAAQ,UAAU;AAAA;AAGpE,IAAM,eAAe,CAC1B,MACA,UACkB;AAAA,EAClB,MAAM,MAAM,KAAK,MAAM,KAAK;AAAA,EAC5B,OAAO;AAAA,IACL,OAAO,QAAQ;AAAA,IACf,MAAM,UAAU,MAAM,IAAI;AAAA,IAC1B,WAAW,QAAQ,aAAa,WAAW,GAAG;AAAA,IAC9C,QAAQ,MAAM;AAAA,IACd,MAAM,MAAM;AAAA,IACZ,MAAM,MAAM;AAAA,EACd;AAAA;AAGK,IAAM,UAAU,CAAC,YAA2B,UACjD,WAAW,SAAS,WAAW,eAAe,MAAM,cAAc;;;AC5BpE;AACA;AAEA,wBAAS;AAET;;;ACdA;AACA;AACA;AACA;;;ACvCA;AACA;AACA;AACA;AACA;AACA;;;ACVA;AAAA;AAiBO,MAAM,4BAAiC,iBAAY,qBAAqB,EAI5E;AAAA,MACY,OAAO,GAAW;AAAA,IAC7B,OACE,mBAAmB,KAAK,eAAe,KAAK,gBAAgB,KAAK,6BACjE;AAAA;AAGN;;;ADbA,IAAM,cAAc,CAAC,KAAqB,SACxC,IAAI,OAAO,WAAW,IAAI,SAAS,WAAW;AA0BzC,IAAM,OAAO,CAAC,QAAmB,MAAe,MAAsB,QAAQ,QAC5E,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,GAAG,OAAO,eAAe;AAAA,EAGtC,MAAM,SAAS,CAAC,SAAgB,WAC9B,IAAI,MAAM,mBAAmB,WAAW,YAAW,IAAI,gBAAgB,YAAW,QAAQ;AAAA,EAC5F,MAAM,UACJ,YAAY,KAAK,YAAY,KAAK,YAAY,KAAK,MAAM,KAAK;AAAA,EAChE,MAAM,SAAS,QAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,UAAU,MAAM,IAAI;AAAA,EACjF,MAAM,OAAO,WAAW,YAAY,QAAQ,QAAQ,QAAQ,EAAE,IAAI;AAAA,EAClE,MAAM,UAAkC,EAAE,mBAAmB,OAAO;AAAA,EACpE,MAAM,YAAY,YAAY,KAAK,WAAW;AAAA,EAC9C,IAAI,cAAc;AAAA,IAAI,QAAQ,uBAAuB;AAAA,EACrD,MAAM,QAAQ,YAAY,KAAK,OAAO;AAAA,EACtC,IAAI,UAAU;AAAA,IAAI,QAAQ,mBAAmB;AAAA,EAC7C,IAAI,WAAW,aAAa,EAAE,SAAS,aAAa;AAAA,IAClD,OAAO,OAAc,aAAK,OAAO,GAAG,oDAAoD,CAAC;AAAA,EAC3F;AAAA,EAEA,MAAM,SAAS,OAAkB;AAAA,EAGjC,MAAM,WAAW,OAAe;AAAA,EAChC,MAAM,WAAkB,iBACtB,OAAc,sBAA8B,2BAAW,GACvD,OAAO,CAAC,EACV;AAAA,EACA,MAAM,UAA4B,sBAAI,GAAG,WAAW,MAAM,EAAE,KACxC,6BAAW,OAAO,CACtC;AAAA,EACA,MAAM,WAAW,OAAO,QAAQ,OAAO,EAAE,KAChC,gBAAQ,CAAC,aACP,YAAI,SAAS,MAAM,CAAC,WAAU,EAAE,QAAQ,SAAS,QAAQ,YAAK,EAAE,CACzE,GAEO,gBAAQ,YAAY,GACpB,uBAAuB,8BAAsB,CAAC,GAAG,UAAU,eAAe,CAAC,CACpF;AAAA,EAKA,MAAM,OAAoD,KAAK,UAAU,MAAM,OAAO;AAAA,EACtF,QAAQ,QAAQ,SAAS,QACvB,WAAW,YACP,WACO,uBAAe,UAA0B,6BAAa,IAAI,GACrE,KAEO,iBAAS,CAAC,UAAU,OAAO,GAAG,MAAM,OAAO,CAAC,CACrD;AAAA,EAEA,IAAI;AAAA,EAOJ,IAAI;AAAA,IACF,SAAS,KAAK,MAAM,IAAI;AAAA,IACxB,MAAM;AAAA,IACN,SAAS;AAAA;AAAA,EAEX,IAAI,SAAS,OAAO,UAAU,KAAK;AAAA,IACjC,MAAM,SAAS,QAAQ;AAAA,IACvB,MAAM,gBAAgB,MAAM,QAAQ,MAAM;AAAA,IAC1C,MAAM,SAAS,gBAAgB,OAAO,IAAI,MAAM,EAAE,KAAK,IAAI,IAAI;AAAA,IAY/D,IAAI,WAAW,OAAO,eAAe;AAAA,MACnC,OAAO,OAAc,aAAK,IAAI,oBAAoB,EAAE,QAAQ,OAAO,OAAO,OAAO,KAAK,CAAC,CAAC;AAAA,IAC1F;AAAA,IACA,OAAO,OAAc,aAAK,OAAO,QAAQ,UAAU,mBAAmB,CAAC;AAAA,EACzE;AAAA,EACA,MAAM,UAAU,QAAQ,MAAM;AAAA,EAC9B,MAAM,SAAS,QAAQ,MAAM;AAAA,EAC7B,IAAI,OAAO,YAAY,YAAY,OAAO,WAAW,UAAU;AAAA,IAE7D,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,OAAO,eAAe,iEACvB,kCAAkC,OAAO,gDACzC,kFACJ,CACF;AAAA,EACF;AAAA,EACA,MAAM,QAAQ,QAAQ;AAAA,EACtB,MAAM,eAAe,OAAO,UAAU,WAAW,QAAQ;AAAA,EACzD,OAAO,EAAE,cAAc,QAAQ,QAAQ;AAAA,CACxC;AAQI,IAAM,gBAAgB,CAAC,YAA2B,WACvD,OAAO,WAAW,QACd,eAAe,WAAW,WAAW,WAAW,WAChD,eAAe,WAAW,WAAW,WAAW;;;AD9FtD,IAAM,wBAAwB;AAmB9B,IAAM,QAAQ,CAAC,QAAmB,UAA6B;AAAA,EAC7D,OAAO,OAAO;AAAA,EACd;AAAA,EACA,QAAQ,OAAO;AACjB;AAWO,IAAM,aAAa,CAAC,SACpB,eAAU,IAAI,KAAK,KAAK,MAAM,eAAe,wBACrC,iBAAQ,KAAK,MAAM,eAAe,qBAAqB,IACvD;AAcR,IAAM,aAAa,CAAO,YACzB,eAAS,SAAS,EAAE,UAAU,IAAI,mBAAmB,UAAU,WAAW,CAAC;AAEnF,IAAM,eAAe,CAAC,QACpB,IAAI,WAAW,QACX,EAAE,KAAK,iCAAiC,OAAO,IAAI,OAAO,QAAQ,MAAM,IACxE,EAAE,SAAS,CAAC,GAAG,OAAO,IAAI,OAAO,QAAQ,MAAM;AAErD,IAAM,SAAgB,gBAAQ,WAAW,CAAC,QAAQ,KAAK,aAAa,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;AAS7E,IAAM,SAAS,CAAC,QAAmB,SAAwB,UAAI,QAAQ,MAAM,QAAQ,IAAI,CAAC;;;AG3HjG;AAEA;AACA;AACA;AACA;AAKO,IAAM,eAAe;AAGrB,IAAM,aAAa,CAAC,WAAmB,WAAW,UAAU,OAAO,YAAY;AAgB/E,IAAM,iBAAiC;AAG9C,IAAM,kBAAkB,IAAI;AAKrB,IAAM,iBAAiB,CAAC,QAAmB,WAAmB;AAAA,EACnE,gBAAgB,IAAI,OAAO,OAAO,MAAM;AAAA;AAInC,IAAM,iBAAiB,CAAC,WAAyC;AAAA,EACtE,MAAM,YAAY,gBAAgB,IAAI,OAAO,KAAK;AAAA,EAClD,IAAI,cAAc,aAAa,CAAC,OAAO,QAAQ,SAAS,SAAS;AAAA,IAAG,OAAO,OAAO;AAAA,EAClF,OAAO,CAAC,WAAW,GAAG,OAAO,QAAQ,OAAO,CAAC,WAAW,WAAW,SAAS,CAAC;AAAA;AAG/E,IAAM,YAAY,CAAC,UAAuC;AAAA,EACxD,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAAA,IAC/C,IAAI,UAAU,SAAS,OAAO,MAAM,SAAS;AAAA,MAAU,OAAO,MAAM;AAAA,IACpE,IAAI,WAAW;AAAA,MAAO,OAAO,UAAW,MAA6B,KAAK;AAAA,EAC5E;AAAA,EACA;AAAA;AAGF,IAAM,iBAAiB,CAAC,UAA4B;AAAA,EAClD,MAAM,OAAO,UAAU,KAAK;AAAA,EAC5B,IAAI,SAAS,gBAAgB,SAAS,eAAe,SAAS,2BAA2B;AAAA,IACvF,OAAO;AAAA,EACT;AAAA,EACA,OAAO,iBAAiB,SAAS,qBAAqB,KAAK,MAAM,OAAO;AAAA;AAkB1E,IAAM,iBAAiB,IAAI,IAAI,CAAC,qBAAqB,gBAAgB,aAAa,WAAW,CAAC;AAE9F,IAAM,oBAAoB,CAAC,SACzB,mFAAmF,KAAK,IAAI;AAE9F,IAAM,iBAAiB,CAAC,UAA4B;AAAA,EAClD,MAAM,OAAO,UAAU,KAAK;AAAA,EAC5B,OAAO,SAAS,cAAc,eAAe,IAAI,IAAI,KAAK,kBAAkB,IAAI;AAAA;AAW3E,IAAM,qBAAqB,CAAC,UAA4B;AAAA,EAC7D,IAAU,qBAAe,KAAK;AAAA,IAAG,OAAO;AAAA,EACxC,IAAI,CAAiB,kCAAkB,KAAK;AAAA,IAAG,OAAO;AAAA,EACtD,MAAM,MAAM,MAAM,OAAO;AAAA,EACzB,OAAO,QAAQ,oBAAoB,QAAQ,qBAAqB,QAAQ;AAAA;AASnE,IAAM,qBAAqB,CAAC,UAA4B;AAAA,EAC7D,IAAI,CAAiB,kCAAkB,KAAK;AAAA,IAAG,OAAO;AAAA,EACtD,QAAQ,WAAW;AAAA,EACnB,IAAI,OAAO,SAAS,qBAAqB,OAAO,SAAS;AAAA,IAAe,OAAO;AAAA,EAC/E,IAAI,OAAO,SAAS,kBAAkB;AAAA,IACpC,IAAI,eAAe,OAAO,KAAK;AAAA,MAAG,OAAO;AAAA,IACzC,OAAO,eAAe,OAAO,KAAK;AAAA,EACpC;AAAA,EACA,OAAO;AAAA;AAGF,IAAM,oBAAoB,CAAC,UAA2B;AAAA,EAC3D,IAAU,qBAAe,KAAK;AAAA,IAAG,OAAO,mBAAmB,OAAO,cAAc;AAAA,EAChF,IAAoB,kCAAkB,KAAK;AAAA,IAAG,OAAO,MAAM;AAAA,EAC3D,OAAO,OAAO,KAAK;AAAA;AAwBd,IAAM,mBAAmB,CAC9B,QACA,QACA,MACA,OACA,WAA0B,mBAWnB,YAAI,UAAU,GAAG;AAAA,EActB,MAAM,SAAS,OAAkB;AAAA,EACjC,MAAM,UAAU,WAAW;AAAA,EAC3B,MAAM,WAA4B,CAAC;AAAA,EACnC,WAAW,UAAU,eAAe,MAAM,GAAG;AAAA,IAC3C,MAAM,UAAU,OAAO,OACpB,QAAQ,MAAM,WAAW,MAAM,CAAC,CAAC,EACjC,KAAY,gBAAQ,QAAO,GAAU,cAAM;AAAA,IAC9C,IAAW,iBAAU,OAAO,GAAG;AAAA,MAC7B,eAAe,QAAQ,MAAM;AAAA,MAC7B,OAAO,QAAQ;AAAA,IACjB;AAAA,IACA,MAAM,MAAM,kBAAkB,QAAQ,OAAO;AAAA,IAC7C,SAAS,KAAK,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7B,MAAM,WAAW,UACb,mBAAmB,QAAQ,OAAO,IAClC,mBAAmB,QAAQ,OAAO;AAAA,IACtC,IAAI,CAAC,UAAU;AAAA,MACb,OAAO,OAAc,aAAK,EAAE,UAAU,QAAQ,MAAM,KAAK,UAAmB,CAAC;AAAA,IAC/E;AAAA,EACF;AAAA,EACA,OAAO,OAAc,aAAK,EAAE,UAAU,QAAQ,MAAM,KAAK,UAAmB,CAAC;AAAA,CAC9E;;;AJpII,MAAM,4BAA4B,MAAM;AAAA,EACxB;AAAA,EAArB,WAAW,CAAU,UAAoC;AAAA,IACvD,MAAM,uBAAuB,SAAS,IAAI,CAAC,MAAM,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,IAAI,GAAG;AAAA,IADpE;AAAA,IAEnB,KAAK,OAAO;AAAA;AAEhB;AAeO,IAAM,aAAa,CACxB,QACA,YACA,SACA,IACA,WAA0B,mBAEnB,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WAA4B,CAAC;AAAA,EACnC,WAAW,UAAU,eAAe,MAAM,GAAG;AAAA,IAC3C,MAAM,YAAY,wBAAwB;AAAA,MACxC,SAAS,WAAW,MAAM;AAAA,MAC1B,QAAQ,WAAW;AAAA,MACnB,SAAS,WAAW;AAAA,IACtB,CAAC;AAAA,IACD,MAAM,UAAU,OAAO,GAAG,KACX,mBACN,gBAAQ,SAAS,GACjB,gBAAQ,QAAO,GACf,cACT;AAAA,IACA,IAAW,kBAAU,OAAO,GAAG;AAAA,MAC7B,eAAe,QAAQ,MAAM;AAAA,MAC7B,OAAO,QAAQ;AAAA,IACjB;AAAA,IACA,MAAM,WAAW,UACb,mBAAmB,QAAQ,OAAO,IAClC,mBAAmB,QAAQ,OAAO;AAAA,IACtC,IAAI,CAAC;AAAA,MAAU,OAAO,OAAc,aAAK,QAAQ,OAAO;AAAA,IACxD,SAAS,KAAK,EAAE,QAAQ,KAAK,kBAAkB,QAAQ,OAAO,EAAE,CAAC;AAAA,EACnE;AAAA,EACA,OAAO,OAAc,aAAK,IAAI,oBAAoB,QAAQ,CAAC;AAAA,CAC5D;AAiBI,IAAM,SAAS,CACpB,QACA,MACA,SACA,OAMO,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,aAAa,OAAO,OAAO,QAAQ,IAAI;AAAA,EAC7C,OAAO,OAAO,WAAW,QAAQ,YAAY,SAAS,EAAE;AAAA,CACzD;;;AKpIH;AAIO,IAAM,aAAa,OAAO,gBAAgB;AAc1C,IAAM,mBAAmB,CAC9B,WAEA,OAAO,KAAY,iBAAS,uBAAuB,MAAa,gBAAQ,UAAU,CAAC,CAAC;AAQ/E,IAAM,oBAAoB,CAAC,MAAc,cACvC,mBACL,GAAG,QAAQ,8EACT,2FACA,qDACJ;;;A3BsCK,IAAM,aAAa,SAAqB,aAAa;AAgB5D,IAAM,iBAAiB,CAAC,UACtB,iBAAiB,OAAO,MAAM,QAAQ,aAAa,OAAc,qBAAc,CAAC,CAAC,CAAC,CAAC,EAAE,KAC5E,YAAI,CAAC,SAAU,SAAS,aAAa,aAAa,aAAa,MAAM,KAAK,CAAE,CACrF;AAGF,IAAM,iBAAiB,CAAC,SACtB,SAAS,aAAa,YAAY;AAE7B,IAAM,qBAAqB,MACvB,gBACP,YACO,gBACL,WAAW,SAAS,GAAG;AAAA,EAErB,MAAM,MAAa,gBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAa,WAAG,UAAU,GAAG,QAAQ;AAAA,IACnC,OAAO,eAAe,OAAO,eAAe,IAAI,CAAC;AAAA,GAClD;AAAA,EAQD,MAAa,WAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,WAAW,aAAa,WAAW,IAAI,KAAK,SAAS,IAAI,MAAM,SAAS,MAAM,GAAG;AAAA,MACnF,OAAO,EAAE,QAAQ,UAAU;AAAA,IAC7B;AAAA,IACA,IAAI,CAAC,WAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,WAAW,IAAI;AAAA,IACtB,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,eAAe,IAAI;AAAA,IAGvC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,eAAe,SAAS,IAAI,CAAC;AAAA,MACtD,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,OAAO,SAAS,aAAa,QAAQ,MAAM,IAAI,IAC1C,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EAOD,WAAkB,WAAG,UAAU,GAAG,QAAQ;AAAA,IAIxC,MAAM,SAAS,eAAe,OAAO,eAAe,IAAI,CAAC;AAAA,IACzD,OAAO,WAAW,IAAI;AAAA,IACtB,IAAI,WAAW,aAAa,CAAC,QAAQ,QAAQ,IAAI,GAAG;AAAA,MAClD,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,oBAAa,KAAK,IAAI,CAAC,CAAC;AAAA,IAC/E;AAAA,IACA,MAAM,QAAQ,eAAe,OAAO,eAAe,IAAI,CAAC;AAAA,IACxD,IAAI,UAAU,aAAa,CAAC,MAAM,OAAO;AAAA,MACvC,OAAO,OAAc,YACnB,IAAI,MACF,+CAA+C,SAAS,IAAI,oBAC1D,8EACA,kFACA,qDACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EASD,QAAe,WAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,MAAM,UAAsC,KAAK,MAAM,IAAI,GAAG,QAAQ,IAAI;AAAA,IAC1E,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,oBAAa,OAAO,CAAC;AAAA,GAC3E;AACH,CAAC,CACH,CACF;;A4BzJF,IAAM,UAAU,CAAC,OAAe,UAA0B;AAAA,EACxD,IAAI,SAAS,KAAK,KAAK,KAAK,UAAU,IAAI;AAAA,IACxC,MAAM,IAAI,MACR,0BAA0B,sDAC5B;AAAA,EACF;AAAA,EACA,OAAO,KAAK,UAAU,KAAK;AAAA;AAQ7B,IAAM,cAAc,CAAC,UAA0B;AAAA,EAC7C,MAAM,OAAO,QAAQ,gBAAgB,KAAK;AAAA,EAC1C,IAAI,WAAW;AAAA,EACf,IAAI;AAAA,IACF,WAAW,IAAI,IAAI,KAAK,EAAE;AAAA,IAC1B,MAAM;AAAA,EAGR,IAAI,aAAa,YAAY,aAAa,SAAS;AAAA,IACjD,MAAM,IAAI,MAAM,qEAAqE;AAAA,EACvF;AAAA,EACA,OAAO;AAAA;AAIT,IAAM,eAAqE;AAAA,EACzE,CAAC,YAAY,MAAM;AAAA,EACnB,CAAC,UAAU,QAAQ;AAAA,EACnB,CAAC,aAAa,WAAW;AAAA,EACzB,CAAC,YAAY,UAAU;AACzB;AAeO,IAAM,wBAAwB,CAAC,UAAmC,CAAC,MAAc;AAAA,EACtF,MAAM,YAAY,QAAQ,aAAa,QAAQ,aAAa,iBAAiB;AAAA,EAC7E,MAAM,SAAS,QAAQ,UAAU,QAAQ,UAAU,KAAK;AAAA,EACxD,MAAM,SAAS,aAAa,IAC1B,EAAE,OAAO,WACP,sBAAsB,WAAW,0BAA0B,kBAC/D;AAAA,EACA,MAAM,OACJ,QAAQ,iBAAiB,YACrB,KACA;AAAA,sBAA0B,YAAY,QAAQ,YAAY;AAAA,EAChE,OAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK;AAAA,CAAI;AAAA;;AC3Eb,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;AC7BO,IAAM,MAAM,CAAC,OAAgB,aAClC,OAAO,UAAU,WAAW,QAAQ;AAE/B,IAAM,OAAO,CAAC,OAAgB,WAAW,OAC9C,OAAO,UAAU,WAAW,QAAQ;AA2B/B,IAAM,OAAO,CAAC,OAAgB,WAAW,UAC9C,UAAU,aAAa,UAAU,QAAQ,UAAU,KAC/C,WACA,UAAU,KAAK,UAAU,QAAQ,UAAU;AAS1C,IAAM,OAAO,CAAC,UAAqB,UAAU,YAAY,YAAY,QAAQ,MAAM;AAUnF,IAAM,MAAM,CAAC,WACjB,OAAO,UAAU,WAAW,MAAM,MAAM,GAAG,IAAK,SAAS,CAAC,GACxD,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,EACL,KAAK,GAAG;AAYN,IAAM,YAAY,CAAC,UAA2B;AAAA,EACnD,MAAM,QACJ,OAAO,UAAU,WACb,MAAM,MAAM,GAAG,IACf,MAAM,QAAQ,KAAK,IACjB,MAAM,IAAI,CAAC,UAAmB,OAAO,KAAK,CAAC,IAC3C,CAAC;AAAA,EACT,OAAO,MACJ,IAAI,CAAC,SAAS,OAAO,KAAK,KAAK,CAAC,CAAC,EACjC,OAAO,CAAC,OAAO,OAAO,SAAS,EAAE,CAAC,EAClC,KAAK,CAAC,MAAM,UAAU,OAAO,KAAK,EAClC,IAAI,CAAC,OAAO,OAAO,EAAE,CAAC,EACtB,KAAK,GAAG;AAAA;AAIN,IAAM,iBAAiB,CAAC,QAAgB;AAAA,EAC7C,MAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AAAA,EACvC,IAAI,CAAC,KAAK,OAAO,QAAQ,IAAI,EAAE,SAAS,OAAO;AAAA,IAAG,OAAO;AAAA,EACzD,IAAI,CAAC,KAAK,MAAM,SAAS,KAAK,EAAE,SAAS,OAAO;AAAA,IAAG,OAAO;AAAA,EAC1D,OAAO;AAAA;AAmBF,IAAM,iBAAiB,CAAC,OAAgB,eAAgC;AAAA,EAC7E,MAAM,QACJ,OAAO,UAAU,WACb,MAAM,MAAM,GAAG,EAAE,IAAI,CAAC,SAAS;AAAA,IAC7B,OAAO,QAAQ,QAAQ,KAAK,MAAM,GAAG;AAAA,IACrC,OAAO,KAAK,WAAW,KAAK,eAAe,YACvC,CAAC,YAAY,OAAO,EAAE,IACtB,CAAC,OAAO,IAAI,KAAK,KAAK,GAAG,CAAC;AAAA,GAC/B,IACD,OAAO,UAAU,YAAY,UAAU,OACrC,OAAO,QAAQ,KAAK,EAAE,IAAI,EAAE,KAAK,WAAW,CAAC,KAAK,OAAO,KAAK,CAAC,CAAC,IAChE,CAAC;AAAA,EACT,OAAO,MACJ,IAAI,EAAE,KAAK,WAAW,CAAC,IAAI,KAAK,GAAG,eAAe,KAAK,CAAC,CAAU,EAClE,OAAO,EAAE,SAAS,QAAQ,EAAE,EAC5B,IAAI,EAAE,KAAK,WAAW,GAAG,OAAO,OAAO,EACvC,KAAK,EACL,KAAK,GAAG;AAAA;AAWN,IAAM,MAAM,CAAC,OAAgB,aAAqB;AAAA,EACvD,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,MAAM,SAAS,OAAO,SAAS,KAAK,KAAK,GAAG,EAAE;AAAA,EAC9C,OAAO,OAAO,MAAM,MAAM,IAAI,WAAW;AAAA;AA6BpC,IAAM,aAAa,CACxB,QACA,UAC2B;AAAA,EAC3B,MAAM,UAAU,IAAI,IAAI,KAAK;AAAA,EAC7B,MAAM,OAA+B,CAAC;AAAA,EACtC,YAAY,KAAK,UAAU,OAAO,QAAQ,MAAM,GAAG;AAAA,IACjD,IAAI,UAAU,aAAa,CAAC,QAAQ,IAAI,GAAG;AAAA,MAAG,KAAK,OAAO;AAAA,EAC5D;AAAA,EACA,OAAO,QAAQ,SAAS,IAAI,OAAO,KAAK,MAAM,QAAQ,CAAC,GAAG,OAAO,EAAE,KAAK,GAAG,EAAE;AAAA;;;AC/KxE,IAAM,mBAAmB;AAczB,IAAM,cAAc,CAAC,UAAyB,GAAG,MAAM,UAAU,MAAM;AAgBvE,IAAM,QAAQ,CAAC,WAA4D;AAAA,EAChF,SAAS,MAAM,WAAW;AAAA,EAC1B,QAAQ,OAAO,MAAM,MAAM;AAAA,EAC3B,SAAS,MAAM,UAAU,MAAM;AAAA,EAC/B,SAAS,MAAM;AAAA,EACf,QAAQ,MAAM;AAChB;AAaO,IAAM,gBAAe,CAC1B,MACA,UACmC;AAAA,EACnC,IAAI,KAAK,WAAW,aAAa,KAAK,YAAY;AAAA,IAAW;AAAA,EAC7D,OAAO;AAAA,IACL,SAAS,KAAK,KAAK,OAAO;AAAA,IAC1B,QAAQ,IAAI,KAAK,QAAQ,CAAC;AAAA,IAC1B,aAAa,YAAY,KAAK;AAAA,IAG9B,SAAS,KAAK,KAAK,SAAS,IAAI;AAAA,IAChC,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,EAChB;AAAA;AAQK,IAAM,WAAU,CAAC,YAAgC,UACtD,WAAW,aAAa,MAAM,WAAW,OACzC,WAAW,WAAW,MAAM,UAC5B,WAAW,YAAY,MAAM;;;AC3ExB,IAAM,UAAS,CAAC,SACrB,OAAO,YACL,OAAO,QAAQ,IAA+B,EAAE,OAC9C,CAAC,MAA6B,OAAO,EAAE,OAAO,QAChD,CACF;AAOK,IAAM,cAAa,CACxB,UACA,MACA,aACwB,UAAU,UAAU,QAAO,IAAI,GAAG,QAAQ;;;AHkG7D,IAAM,kBAAkB,UAA0B,oBAAoB;AAAA,EAC3E,sBAAsB;AACxB,CAAC;AAYD,IAAM,YAAY,CAAC,UAAyB;AAAA,EAC1C,MAAM,QAAQ,EAAE,SAAS,MAAM,SAAS,QAAQ,MAAM,OAAO;AAAA,EAC7D,OAAO,iBACL,OAAO,MAAM,QAAQ,aAAa,OAAc,2BAAmB,KAAK,CAAC,CAC3E,EAAE,KAAY,YAAI,CAAC,SAAU,SAAS,aAAa,aAAa,cAAa,MAAM,KAAK,CAAE,CAAC;AAAA;AAI7F,IAAM,kBAAiB,CAAC,SACtB,SAAS,aAAa,YAAY;AAQ7B,IAAM,0BAA0B,MAC5B,iBACP,iBACO,gBACL,gBAAgB,SAAS,GAAG;AAAA,EAM1B,MAAM,MAAa,gBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAa,WAAG,UAAU,GAAG,QAAQ;AAAA,IACnC,OAAO,gBAAe,OAAO,UAAU,IAAI,CAAC;AAAA,GAC7C;AAAA,EACD,MAAa,WAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,kBAAkB,MAAM,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,UAAU,IAAI;AAAA,IAGlC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,oBAAoB,GAAG,KAAK,UAAU,KAAK,SAAS;AAAA,MAC7E,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IAKA,OAAO,SAAS,aAAa,SAAQ,MAAM,IAAI,IAC1C,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACD,WAAkB,WAAG,UAAU,GAAG,QAAQ;AAAA,IAMxC,MAAM,SAAS,gBAAe,OAAO,UAAU,IAAI,CAAC;AAAA,IACpD,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OAAc,YACnB,IAAI,MACF,GAAG,KAAK,UAAU,KAAK,4DACrB,kFACA,6EACA,kFACA,oFACA,uBACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO,YAAW,kBAAkB,MAAM,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MAC1B,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,2BAAmB,MAAM,IAAI,CAAC,CAAC;AAAA,IACtF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,UAAU,IAAI,CAAC;AAAA,IACnD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,YACnB,IAAI,MACF,GAAG,KAAK,UAAU,KAAK,2DACrB,iFACA,+EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EACD,QAAe,WAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACO,8BAAsB,EAAE,SAAS,KAAK,SAAS,QAAQ,KAAK,OAAO,CAAC,CAC7E;AAAA,GACD;AACH,CAAC,CACH,CACF;;AIzNF,qBAAS;AACT;AACA;;;ACrBA,uBAAS;AAET;;;ACAA;AACA;AACA;AAMO,MAAM,iBAAiB,MAAM;AAAA,EAEvB;AAAA,EACA;AAAA,EACA;AAAA,EAHX,WAAW,CACA,QACA,QACA,MACT,QACA;AAAA,IACA,MAAM,OAAO,UAAU,WAAW,OAAO,MAAM,MAAM,QAAQ;AAAA,IALpD;AAAA,IACA;AAAA,IACA;AAAA,IAIT,KAAK,OAAO;AAAA;AAEhB;AAEA,IAAM,mBAAmB,CACvB,QACA,MACA,aAEA,IAAI,SACF,GACA,QACA,MACA,uBAAuB,SAAS,IAAI,CAAC,MAAM,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,IAAI,GAChF;AAgBF,IAAM,SAAS,CAAC,SAA0B;AAAA,EACxC,MAAM,SAAS,IAAI;AAAA,EACnB,YAAY,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;AAAA,IAC/C,IAAI,OAAO,UAAU;AAAA,MAAU,OAAO,OAAO,KAAK,KAAK;AAAA,IAClD;AAAA,iBAAW,QAAQ;AAAA,QAAO,OAAO,OAAO,KAAK,IAAI;AAAA,EACxD;AAAA,EACA,OAAO,OAAO,SAAS;AAAA;AAGzB,IAAM,eAAe,CACnB,QACA,SACA,MACA,YACA,QACA,SACG;AAAA,EACH,MAAM,MAAM,GAAG,WAAW;AAAA,EAsB1B,OAAyB,wBAAK,MAAM,EAAE,GAAG,EAAE,KACvB,8BAAW,EAAE,eAAe,cAAc,YAAY,MAAM,EAAE,CAAC,GACjF,SAAS,YACL,CAAC,SAAS,OACQ,4BAAS,OAAO,IAAI,GAAG,mCAAmC,CAClF;AAAA;AAGF,IAAM,aAAa,CACjB,QACA,YACA,QACA,MACA,MACA,YAEO,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,SAAS,OAAkB;AAAA,EACjC,MAAM,UAAU,aAAa,QAAQ,SAAS,MAAM,YAAY,QAAQ,IAAI;AAAA,EAC5E,OAAO,OAAO,OACX,QAAQ,OAAO,EACf,KAAY,iBAAS,CAAC,UAAU,IAAI,SAAS,GAAG,QAAQ,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC;AAAA,CACjF;AAEH,IAAM,eAAe,CACnB,UAKA,QACA,SAEO,YAAI,UAAU,GAAG;AAAA,EAOtB,IAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAAK;AAAA,IAGnD,MAAM,SAAS,OAAO,SAAS,KAAK,KAAY,sBAAc,MAAM,EAAE,CAAC;AAAA,IACvE,OAAO,OAAc,aAAK,IAAI,SAAS,SAAS,QAAQ,QAAQ,MAAM,OAAO,MAAM,GAAG,GAAG,CAAC,CAAC;AAAA,EAC7F;AAAA,EACA,MAAM,OAAQ,OAAO,SAAS,KAAK,KAC1B,iBAAS,CAAC,UAAU,IAAI,SAAS,GAAG,QAAQ,MAAM,OAAO,KAAK,CAAC,CAAC,CACzE;AAAA,EACA,OAAO,KAAK;AAAA,CACb;AAGI,IAAM,UAAU,CACrB,QACA,YACA,QACA,MACA,SAEO,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WACJ,OAAO,WAAW,QACd,OAAO,iBAAiB,QAAQ,QAAQ,MAAM,CAAC,YAC7C,aAAa,QAAQ,SAAS,MAAM,YAAY,QAAQ,IAAI,CAC9D,EAAE,KACO,iBAAS,CAAC,YACf,QAAQ,QAAQ,YACZ,iBAAiB,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,IAC/D,IAAI,SAAS,GAAG,QAAQ,MAAM,OAAO,OAAO,CAAC,CACnD,CACF,IACA,OAAO,WAAW,QAAQ,YAAY,QAAQ,MAAM,MAAM,OAAO,GAAG;AAAA,EAC1E,OAAO,OAAO,aAAgB,UAAU,QAAQ,IAAI;AAAA,CACrD;AAQI,IAAM,kBAAkB,CAC7B,QACA,YACA,QACA,SAEO,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WAAW,OAAO,iBAAiB,QAAQ,QAAQ,MAAM,CAAC,YAC9D,aAAa,QAAQ,SAAS,MAAM,YAAY,MAAM,CACxD,EAAE,KACO,iBAAS,CAAC,YACf,QAAQ,QAAQ,YACZ,iBAAiB,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,IAC/D,IAAI,SAAS,GAAG,QAAQ,MAAM,OAAO,OAAO,CAAC,CACnD,CACF;AAAA,EACA,IAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAAK;AAAA,IACnD,MAAM,SAAS,OAAO,SAAS,KAAK,KAAY,sBAAc,MAAM,EAAE,CAAC;AAAA,IACvE,OAAO,OAAc,aAAK,IAAI,SAAS,SAAS,QAAQ,QAAQ,MAAM,OAAO,MAAM,GAAG,GAAG,CAAC,CAAC;AAAA,EAC7F;AAAA,EACA,OAAQ,OAAO,SAAS,KAAK,KACpB,iBAAS,CAAC,UAAU,IAAI,SAAS,GAAG,QAAQ,MAAM,OAAO,KAAK,CAAC,CAAC,CACzE;AAAA,CACD;AAoBI,IAAM,MAAM,CACjB,QACA,MACA,QACA,MACA,SAEO,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,aAAa,OAAO,OAAO,QAAQ,IAAI;AAAA,EAC7C,OAAO,OAAO,QAAW,QAAQ,YAAY,QAAQ,MAAM,IAAI;AAAA,CAChE;;;AClOH;AAIO,IAAM,aAAa,CACxB,SACG;AAAA,EAEH,MAAM,cAAc,CAAC,UACnB,OAAO,KAAK,aAAa,aAAa,KAAK,SAAS,KAAK,IAAI,KAAK;AAAA,EAqBpE,MAAM,cAAc,CAAC,OAAc,aAC1B,iBAAQ,MAAM;AAAA,IACnB,MAAM,SAAS,YAAY,KAAK,GAAG;AAAA,IACnC,OAAO,WAAW,YACP,gBACP,UAAU,QAAQ,KAAK,WAAW,KAAK,GAAG,QAAQ;AAAA,GACvD;AAAA,EAOH,MAAM,cAAc,CAAC,UACZ,iBAAQ,MAAM;AAAA,IACnB,MAAM,SAAS,YAAY,KAAK,GAAG;AAAA,IACnC,IAAI,WAAW;AAAA,MAAW,OAAc;AAAA,IACxC,MAAM,OAAO,KAAK,aAAa,KAAK;AAAA,IACpC,OAAO,SAAS,YAAmB,gBAAO,UAAU,QAAQ,MAAM,KAAK;AAAA,GACxE;AAAA,EAEH,OAAO,EAAE,aAAa,YAAY;AAAA;;;AClC7B,IAAM,aAAa,CACxB,UACA,MACA,OACA,SACsB,SAAQ,MAAM,KAAK,KAAK,OAAO,KAAK,IAAI,EAAE,WAAW,IAAI,YAAY;;;AHFtF,IAAM,gBAAgB,CAC3B,SACG;AAAA,EACH,QAAQ,aAAa,gBAAgB,WAAW,IAAI;AAAA,EAGpD,MAAM,OAAO,CAAC,UACZ,IACE,MAAM,QACN,KAAK,YAAY,QACjB,OACA,KAAK,KAAK,KAAK,CACjB,EAAE,KACO,aAAI,CAAC,SAAU,QAAQ,OAAO,YAAY,KAAK,WAAW,MAAM,KAAK,CAAE,GACvE,uBAAc,MAAG;AAAA,IAAG;AAAA,GAAS,CACtC;AAAA,EAEF,OAAO;AAAA,IAOL;AAAA,IACA;AAAA,IAEA;AAAA,IAKA,MAAM,CAAC,MAAoB,WAClB,aAAI,UAAU,GAAG;AAAA,MAItB,IAAI,CAAC,YAAW,IAAI;AAAA,QAAG;AAAA,MAOvB,OAAO,YAAY,MAAM,WAAW,SAAS;AAAA,MAC7C,OAAO,YAAY,IAAI;AAAA,MACvB,IAAI,WAAW;AAAA,QAAW;AAAA,MAC1B,MAAM,OAAO,OAAO,KAAK,IAAI;AAAA,MAG7B,IAAI,SAAS,WAAW;AAAA,QAMtB,OAAO,YAAY,MAAM,IAAI;AAAA,QAC7B,OAAO,EAAE,QAAQ,SAAS;AAAA,MAC5B;AAAA,MACA,IAAI,KAAK,QAAQ,MAAM,IAAI;AAAA,QAAG,OAAO,EAAE,QAAQ,OAAO;AAAA,MAEtD,OAAO,KAAK,eAAe,YACtB,EAAE,QAAQ,UAAU,IACpB,EAAE,QAAQ,SAAS;AAAA,KACzB;AAAA,IAEH,WAAW,CAAC,SACH,aAAI,UAAU,GAAG;AAAA,MACtB,MAAM,OAAO,OAAO,KAAK,IAAI;AAAA,MAM7B,OAAO,YAAY,MAAM,SAAS,SAAS;AAAA,MAC3C,OAAO,YAAY,IAAI;AAAA,MACvB,IAAI,SAAS,WAAW;AAAA,QACtB,OAAO,IACL,KAAK,QACL,aACA,QACA,KAAK,WAAW,IAAI,GACpB,KAAK,WAAW,IAAI,CACtB;AAAA,MACF,EAAO,SAAI,KAAK,eAAe,WAAW;AAAA,QAyBxC,MAAM,OAAO,WAAW,KAAK,SAAS,MAAM,MAAM,KAAK,WAAW,IAAI,CAAC;AAAA,QACvE,IAAI,SAAS,WAAW;AAAA,UACtB,OAAO,IAAI,KAAK,QAAQ,aAAa,OAAO,KAAK,KAAK,IAAI,GAAG,IAAI;AAAA,QACnE;AAAA,MACF;AAAA,MACA,MAAM,QAAQ,OAAO,KAAK,IAAI;AAAA,MAC9B,IAAI,UAAU,WAAW;AAAA,QAOvB,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,KAAK,KAAK,IAAI,oEACf,sFACA,4DACJ,CACF;AAAA,MACF;AAAA,MACA,OAAO;AAAA,KACR;AAAA,IAOH,SAAS,CAAC,SAAgB,IAAI,KAAK,QAAQ,aAAa,UAAU,KAAK,KAAK,IAAI,CAAC;AAAA,EACnF;AAAA;AAoCK,IAAM,cAAc,CACzB,SACG;AAAA,EACH,MAAM,MAAM,cAAc,IAAI;AAAA,EAC9B,OAAO;AAAA,IACL,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,IAC7B,MAAM,GAAG,WAA4B,IAAI,KAAK,IAAI;AAAA,IAClD,MAAM,GAAG,MAAM,aACb,IAAI,KAAK,MAAM,MAAM;AAAA,IACvB,WAAW,GAAG,WAA4B,IAAI,UAAU,IAAI;AAAA,IAC5D,QAAQ,GAAG,WAA4B,IAAI,QAAQ,IAAI;AAAA,EACzD;AAAA;;;AD5GK,IAAM,mBAAmB,UAA2B,mBAAmB;AAsB9E,IAAM,SAAQ,CAAC,WAA2B;AAAA,EACxC,KAAK,MAAM,QAAQ,OAAO,MAAM;AAAA,EAChC,SAAS,MAAM,YAAY,QAAQ,MAAM;AAAA,EACzC,MAAM,MAAM,QAAQ;AAAA,EACpB,qBAAqB,MAAM,wBAAwB;AAAA,EACnD,iBAAiB,MAAM,qBAAqB,OAAO,MAAM;AAAA,EACzD,UAAU,MAAM;AAAA,KACZ,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,KAC5D,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,UAAU,MAAM,OAAO,EAAE;AAAA,KACvE,MAAM,aAAa,YAAY,CAAC,IAAI,EAAE,UAAU,MAAM,SAAS;AAAA,KAC/D,MAAM,sBAAsB,YAAY,CAAC,IAAI,EAAE,kBAAkB,MAAM,kBAAkB;AAAA,KACzF,MAAM,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;AAAA,KACnD,MAAM,qBAAqB,YAAY,CAAC,IAAI,EAAE,iBAAiB,MAAM,iBAAiB;AAAA,KACtF,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,KAC5D,MAAM,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,UAAU,MAAM,IAAI,EAAE;AACpE;AAEA,IAAM,WAAW,YAAiD;AAAA,EAQhE,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,KAAK,KAAK,KAAK,QAAQ,KAAK;AAAA,IAC5B,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,IACjC,SAAS,KAAK,KAAK,YAAY,IAAI;AAAA,IACnC,SAAS,UAAU,KAAK,UAAU;AAAA,IAClC,UAAU,eAAe,KAAK,aAAa,SAAS;AAAA,IACpD,IAAI,MAAM;AAAA,IACV,MAAM,KAAK,KAAK,SAAS,UAAU;AAAA,IACnC,YAAY,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;AAAA,IACtE,kBAAkB,KAAK,KAAK,mBAAmB,EAAE;AAAA,IACjD,qBAAqB,KAAK,KAAK,sBAAsB,MAAM;AAAA,IAC3D,MAAM,KAAK,KAAK,SAAS,EAAE;AAAA,IAC3B,iBAAiB,eAAe,KAAK,gBAAgB;AAAA,IACrD,iBAAiB,KAAK,KAAK,kBAAkB,KAAK;AAAA,IAClD,UAAU,KAAK,KAAK,aAAa,EAAE;AAAA,IACnC,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,IACjC,MAAM,UAAU,KAAK,OAAO;AAAA,EAC9B;AAAA,EACA,YAAY,MAAM;AAAA,EAElB,YAAY,CAAC,WAAW,KAAK,OAAM,KAAK,GAAG,IAAI,MAAM,GAAG;AAAA,EAGxD,UAAU,EAAE,QAAQ,4BAA4B,QAAQ,+BAA+B;AAAA,EACvF,SAAS,CAAC,YAAY,UACpB,WAAW,aAAa,MAAM,YAC9B,WAAW,aAAa,MAAM,YAAY,UAC1C,WAAW,SAAS,MAAM,QAAQ,SAClC,WAAW,UAAU,MAAM,QAAQ,eACnC,WAAW,0BAA0B,MAAM,wBAAwB,WACnE,WAAW,sBAAsB,MAAM,qBAAqB,UAC3D,MAAM,YAAY,aAAa,WAAW,YAAY,MAAM,aAC5D,MAAM,SAAS,aAAa,WAAW,SAAS,MAAM,UACtD,MAAM,YAAY,aAAa,WAAW,YAAY,MAAM,aAC5D,MAAM,SAAS,aAAa,WAAW,SAAS,UAAU,MAAM,IAAI,OACpE,MAAM,YAAY,aAAa,WAAW,YAAY,UAAU,MAAM,OAAO,OAC7E,MAAM,sBAAsB,aAC3B,WAAW,sBAAsB,MAAM,uBACxC,MAAM,qBAAqB,aAC1B,WAAW,qBAAqB,eAAe,MAAM,gBAAgB,OACtE,MAAM,aAAa,aAClB,WAAW,aAAa,eAAe,MAAM,UAAU,SAAS;AAAA,EACpE,MAAM,CAAC,UAAU,kBAAkB,MAAM;AAAA,EACzC,YAAY;AACd,CAAC;AAgBM,IAAM,2BAA2B,MAC7B,iBAAO,kBAAyB,iBAAQ,iBAAiB,SAAS,GAAG,QAAQ,CAAC,CAAC;;AKlK1F,qBAAS;AACT,uBAAS;AACT;AACA;;;ACPO,IAAM,mBAAkE;AAAA,EAC7E,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AACP;AAQO,IAAM,WAAW,CAAC,UAA2B,MAAM,QAAQ,MAAM;AAQjE,IAAM,iBAAiB,CAAC,UAA2B,SAAS,MAAM,aAAa,MAAM;AAGrF,IAAM,aAAa,CAAC,UAA2B,GAAG,eAAe,KAAK,KAAK,SAAS,KAAK;AAezF,IAAM,aAAa,CAAC,UAAmD;AAAA,EAC5E,IAAI,MAAM,SAAS,SAAS,MAAM,mBAAmB,WAAW;AAAA,IAC9D,OAAO,EAAE,eAAe,MAAM,eAAe;AAAA,EAC/C;AAAA,EACA,MAAM,aAAa,MAAM,SAAS,QAAQ,KAAK,MAAM,UAAU,IAAI;AAAA,EACnE,OAAO,eAAe,YAAY,CAAC,IAAI,EAAE,WAAW;AAAA;AAU/C,IAAM,UAAU,CAAC,MAAe,WACpC,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,GAC5B,OAAO,CAAC,QAAwC,OAAO,QAAQ,YAAY,QAAQ,IAAI,EACvF,KAAK,CAAC,QAAQ,IAAI,YAAY,SAAS,KAAK,CAAC;AAY3C,IAAM,mBAAmB,CAC9B,MACA,UACqC;AAAA,EACrC,MAAM,MAAM,QAAQ,MAAM,KAAK;AAAA,EAC/B,IAAI,QAAQ;AAAA,IAAW;AAAA,EACvB,OAAO;AAAA,IACL,MAAM,KAAK,IAAI,OAAO;AAAA,IACtB,QAAQ,KAAK,IAAI,UAAU;AAAA,IAC3B,MAAM,KAAK,IAAI,OAAO;AAAA,IACtB,MAAM,MAAM;AAAA,IACZ,MAAM,SAAS,KAAK;AAAA,IACpB,MAAM,MAAM;AAAA,IACZ,QAAQ,KAAK,IAAI,SAAS;AAAA,IAC1B,MAAM,IAAI,IAAI,SAAS,EAAE;AAAA,IACzB,SAAS,KAAK,IAAI,UAAU;AAAA,IAC5B,eAAe,KAAK,IAAI,iBAAiB;AAAA,IACzC,OAAO,KAAK,IAAI,QAAQ;AAAA,IACxB,SAAS,KAAK,IAAI,qBAAqB;AAAA,EACzC;AAAA;;;ACtHF;AACA;AAcA,IAAM,WAAW,CAAC,UAA2B;AAAA,EAC3C,MAAM,OAAO,MAAM;AAAA,EACnB,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,QAAQ,OAAa,sBAAgB,EAAE,KAAK,CAAC,CAAC,EAAE,KACnE,aAAI,CAAC,SAAoB,IAAI,CACtC;AAAA,SACG;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,QAAQ,OAAa,sBAAgB,EAAE,KAAK,CAAC,CAAC,EAAE,KACnE,aAAI,CAAC,SAAoB,IAAI,CACtC;AAAA,SACG;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,QAAQ,OAAa,sBAAgB,EAAE,KAAK,CAAC,CAAC,EAAE,KACnE,aAAI,CAAC,SAAoB,IAAI,CACtC;AAAA;AAAA;AAKC,IAAM,aAAa,CAAC,UACzB,SAAS,KAAK,EAAE,KACP,aAAI,CAAC,SAAS,iBAAiB,MAA4C,KAAK,CAAC,GACjF,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CACtC;AAGK,IAAM,eAAe,CAAC,UAA2B;AAAA,EACtD,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,KAAK,SAAS,KAAK;AAAA,EACzB,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,OACL,MAAM,QACN,aACA,MACM,wBAAkB;AAAA,WAClB,MAAM,mBAAmB,YAAY,CAAC,IAAI,EAAE,aAAa,MAAM,eAAe;AAAA,QAClF,OAAO;AAAA,QACP;AAAA,MACF,CAAC,CACH;AAAA,SACG;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,aAAa,MAAY,wBAAkB,EAAE,IAAI,KAAK,CAAC,CAAC;AAAA,SACjF;AAAA,MACH,OAAO,OACL,MAAM,QACN,aACA,MACM,wBAAkB;AAAA,WAClB,MAAM,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,MAAM,aAAa,MAAM,IAAI;AAAA,QACrF,MAAM;AAAA,QACN;AAAA,MACF,CAAC,CACH;AAAA;AAAA;AAMC,IAAM,eAAe,CAAC,UAA2B;AAAA,EACtD,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,KAAK,SAAS,KAAK;AAAA,EACzB,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,aAAa,MAAY,wBAAkB,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC;AAAA,SACxF;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,aAAa,MAAY,wBAAkB,EAAE,IAAI,KAAK,CAAC,CAAC;AAAA,SACjF;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,aAAa,MAAY,wBAAkB,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC;AAAA;AAAA;AASzF,IAAM,aAAa,CAAC,UACzB,IAAI,MACF,GAAG,WAAW,KAAK,SAAS,MAAM,cAAc,SAAS,KAAK,oBAC5D,GAAG,MAAM,aAAa,MAAM,+DAC5B,qEACJ;;;AFgEK,IAAM,oBAAoB,UAA4B,sBAAsB;AAAA,EACjF,sBAAsB;AACxB,CAAC;AA6BM,IAAM,kBAAyB,YAAG,UAAU,GAAG,QAAmC;AAAA,EACvF,MAAM,OAAO,OAAO,WAAW,IAAI;AAAA,EACnC,OAAO,YAAW,iBAAiB,KAAK,OAAO,WAAW,IAAI,GAAG,SAAS,SAAS;AAAA,EACnF,IAAI,SAAS;AAAA,IAAW,OAAO;AAAA,EAC/B,OAAO,aAAa,IAAI;AAAA,EACxB,MAAM,QAAQ,OAAO,WAAW,IAAI;AAAA,EACpC,IAAI,UAAU;AAAA,IAAW,OAAO,OAAc,aAAI,WAAW,IAAI,CAAC;AAAA,EAClE,OAAO;AAAA,CACR;AAEM,IAAM,4BAA4B,MAC9B,iBACP,mBACO,iBACL,kBAAkB,SAAS,GAAG;AAAA,EAG5B,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAM,GAAG,WAAW,WAAW,IAAI;AAAA,EAEnC,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,iBAAiB,KAAK,OAAO,WAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACrF,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,WAAW,IAAI;AAAA,IACnC,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,iBAAiB,KAAK,OAAO,WAAW,IAAI,GAAG,IAAI;AAAA,MACrE,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,EAAE,QAAQ,OAAO;AAAA,GACzB;AAAA,EACD,WAAW,GAAG,WAAW,gBAAgB,EAAE,KAAK,CAAC;AAAA,EAMjD,QAAQ,GAAG,WAAW,aAAa,IAAI;AACzC,CAAC,CACH,CACF;;AG/KF,qBAAS;AACT;AACA;AA2EO,IAAM,kBAAkB,UAA0B,kBAAkB;AAE3E,IAAM,YAAW,YAA+C;AAAA,EAsB9D,YAAY,CAAC,MAAM,WAAW,EAAE,MAAM,MAAM,MAAM,OAAO,KAAK,IAAI,EAAE;AAAA,EACpE,YAAY,MAAM;AAAA,EAMlB,YAAY,CAAC,WAAW,GAAG,MAAM,OAAO,KAAK,MAAM,KAAK,KAAK,IAAI;AAAA,EACjE,UAAU,EAAE,QAAQ,qCAAqC;AAAA,EAUzD,SAAS,CAAC,YAAY,UAAU,WAAW,UAAU,MAAM;AAAA,EAC3D,MAAM,CAAC,UAAU,sBAAsB,MAAM;AAAA,EAQ7C,YAAY,CAAC,WAAW,EAAE,OAAO,KAAK,MAAM,KAAK,KAAK,IAAI;AAC5D,CAAC;AAEM,IAAM,0BAA0B,MAC5B,iBACP,iBACO,iBACL,gBAAgB,SAAS,GAAG;AAAA,KASvB;AAAA,EAEH,QAAQ,MAAa;AAAA,EAWrB,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IACxC,MAAM,QAAQ,OAAO,UAAS,UAAU,EAAE,KAAK,CAAC;AAAA,IAChD,IAAI,MAAM,UAAU,KAAK,OAAO;AAAA,MAC9B,OAAO,OAAc,aACnB,IAAI,MACF,sBAAsB,KAAK,oDACzB,oBAAoB,MAAM,QAAQ,QAAQ,yBAC1C,GAAG,KAAK,QAAQ,QAAQ,yDACxB,4EACA,gFACA,yBACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AACH,CAAC,CACH,CACF;;ACvLF,qBAAS;AACT,uBAAS;AACT;AACA;;;AClDA;AACA;;;AC0CA;AAiBO,IAAM,UAAU,CACrB,MACA,UACiC;AAAA,EACjC,MAAM,OAAO,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,GACxC,OACC,CAAC,UAA4C,OAAO,UAAU,YAAY,UAAU,IACtF,EACC,KAAK,CAAC,UAAU,MAAM,YAAY,MAAM,IAAI;AAAA,EAC/C,IAAI,QAAQ;AAAA,IAAW;AAAA,EACvB,OAAO;AAAA,IACL,WAAW,KAAK,IAAI,YAAY;AAAA,IAChC,YAAY,IACV,MAAM,QAAQ,IAAI,aAAa,IAC3B,IAAI,cAAc,IAAI,CAAC,UAAmB,OAAO,KAAK,CAAC,IACvD,CAAC,CACP;AAAA,IACA,eAAe,KAAK,IAAI,gBAAgB;AAAA,IACxC,kBAAkB,IAAI,IAAI,qBAAqB,EAAE;AAAA,IACjD,MAAM,MAAM;AAAA,EACd;AAAA;AAYK,IAAM,eAAe;AACrB,IAAM,gBAAgB;AAGtB,IAAM,aAAa,CAAC,UAAuB,SAAS,MAAM,gBAAgB,MAAM;AAGhF,IAAM,iBAAiB;AAG9B,IAAM,QAAQ,CAAC,MAAc,UAC3B,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,MAAM;AAMtC,IAAM,cAAa,CAAC,WAAgD;AAAA,KACtE,MAAM,eAAe,KAAK,MAAM,cAAc,CAAC;AAAA,KAC/C,MAAM,UAAU,MAAM,WAAW,YAAY,YAAY,OAAO,MAAM,MAAM,CAAC;AAClF;AAGA,IAAM,cAAc,CAAC,UAAuB;AAAA,EAC1C,MAAM,QAAQ;AAAA,IACZ,MAAM,oBAAoB,OAAO,mBAAmB;AAAA,IACpD,MAAM,uBAAuB,OAAO,sBAAsB;AAAA,EAC5D,EAAE,OAAO,CAAC,SAAS,SAAS,SAAS;AAAA,EACrC,OAAO,MAAM,WAAW,IAAI,WAAW,KAAK,IAAI,GAAG,WAAW,KAAK,KAAK,MAAM,KAAK,GAAG;AAAA;AAWxF,IAAM,SAAS,CAAC,QAAmB,MAAc,MAAc,SACtD,aAAI,UAAU,GAAG;AAAA,EACtB,SAAS,UAAU,EAAG,UAAU,eAAe,WAAW,GAAG;AAAA,IAC3D,MAAM,SAAS,OAAO,IACpB,QACA,QACA,OACA,SAAS,cAAc,mBAAmB,IAAI,UAChD,EAAE,KAIO,uBAAc,MAAG;AAAA,MAAG;AAAA,KAAS,CACtC;AAAA,IACA,IAAI,QAAQ,WAAW,WAAW;AAAA,MAChC,MAAM,OAAO,KAAK,OAAO,UAAU;AAAA,MACnC,IAAI,SAAS;AAAA,QAAM;AAAA,MACnB,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,kBAAkB,uBAAuB,SAAS,KAAK,mBAAmB,YAC3E,wFACA,yBAAyB,cAAc,aAC3C,CACF;AAAA,IACF;AAAA,IAGA,OAAc,eAAM,eAAe,IAAI;AAAA,EACzC;AAAA,EACA,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,kBAAkB,kCACnB,GAAG,OAAO,gBAAgB,YAAY,gBACtC,wFACA,uBAAuB,qEACvB,0DACJ,CACF;AAAA,CACD;AAYI,IAAM,YAAY,CAAC,UACjB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,KAAK,OAAO,IAAY,MAAM,QAAQ,aAAa,UAAU,YAAY,KAAK,CAAC,CAAC;AAAA,EAK7F,IAAI,SAAS;AAAA,IAAI,OAAO,OAAO,MAAM,QAAQ,MAAM,MAAM,MAAM,YAAY,KAAK,CAAC;AAAA,CAClF;AAWI,IAAM,cAAa,CAAC,UACzB,IAAI,MACF,GAAG,WAAW,KAAK,8DACjB,aAAa,MAAM,sEACnB,yCACJ;AAEK,IAAM,eAAe,CAAC,UAC3B,IAAI,MACF,GAAG,WAAW,KAAK,iEACjB,aAAa,MAAM,6EACnB,yDACJ;;;ADtMK,IAAM,SAAS,CAAC,UACrB,OAAO,MAAM,QAAQ,QAAQ,OAAa,sBAAe,EAAE,MAAM,MAAM,KAAK,CAAC,CAAC,EAAE,KACvE,aAAI,CAAC,SAAS,QAAQ,MAA4C,KAAK,CAAC,GACxE,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CACtC;AAGF,IAAM,oBAAoB,CAAC,WACxB;AAAA,KACI,YAAW,KAAK;AAAA,EACnB,MAAM,MAAM;AAAA,EACZ,MAAM,MAAM;AACd;AAGF,IAAM,eAAe,CAAC,OAAoB,SACjC,aAAI,UAAU,GAAG;AAAA,EACtB,SAAS,UAAU,EAAG,UAAU,eAAe,WAAW,GAAG;AAAA,IAC3D,MAAM,SAAS,OAAO,OACpB,MAAM,QACN,QACA,OACM,yBAAkB,EAAE,MAAM,MAAM,MAAM,KAAK,CAAC,CACpD,EAAE,KAAY,uBAAc,MAAG;AAAA,MAAG;AAAA,KAAS,CAAC;AAAA,IAC5C,IAAI,QAAQ,WAAW,WAAW;AAAA,MAChC,IAAI,OAAO,eAAe;AAAA,QAAM;AAAA,MAChC,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,WAAW,KAAK,eAAe,uBAAuB,OAAO,cAAc,wBAC5E,wFACA,yBAAyB,MAAM,cAAc,aACjD,CACF;AAAA,IACF;AAAA,IACA,OAAc,eAAM,eAAe,IAAI;AAAA,EACzC;AAAA,EACA,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,WAAW,KAAK,eAAe,kCAChC,GAAG,OAAO,gBAAgB,YAAY,oDACtC,iEACA,UAAU,MAAM,0EAChB,qDACJ,CACF;AAAA,CACD;AAGI,IAAM,WAAW,CAAC,UAChB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,OAAO,OAClB,MAAM,QACN,aACA,MACM,wBAAiB,kBAAkB,KAAK,CAAC,CACjD;AAAA,EAIA,IAAI,SAAS,IAAI;AAAA,IACf,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,WAAW,KAAK,4DACjB,iEACJ,CACF;AAAA,EACF;AAAA,EACA,OAAO,aAAa,OAAO,IAAI;AAAA,CAChC;;;AD2CI,IAAM,gBAAgB,UAAwB,kBAAkB;AAAA,EACrE,sBAAsB;AACxB,CAAC;AAkBM,IAAM,wBAAwB,MAC1B,iBACP,eACO,iBACL,cAAc,SAAS,GAAG;AAAA,EAMxB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAa,YAAG,UAAU,GAAG,QAAQ;AAAA,IACnC,OAAO,OAAO,OAAO,IAAI;AAAA,GAC1B;AAAA,EAaD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,gBAAgB,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACxE,IAAI,WAAW,aAAa,KAAK,SAAS,OAAO,MAAM;AAAA,MACrD,OAAO,EAAE,QAAQ,UAAU;AAAA,IAC7B;AAAA,IACA,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,OAAO,IAAI;AAAA,IAC/B,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,gBAAgB,YAAW,IAAI,GAAG,IAAI;AAAA,MACxD,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IAEA,OAAO,EAAE,QAAQ,OAAO;AAAA,GACzB;AAAA,EASD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IACxC,MAAM,OAAO,OAAO,OAAO,IAAI;AAAA,IAC/B,IAAI,SAAS;AAAA,MAAW,OAAO;AAAA,IAC/B,OAAO,SAAS,IAAI;AAAA,IACpB,MAAM,QAAQ,OAAO,OAAO,IAAI;AAAA,IAChC,IAAI,UAAU;AAAA,MAAW,OAAO,OAAc,aAAI,YAAW,IAAI,CAAC;AAAA,IAClE,OAAO;AAAA,GACR;AAAA,EAQD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IAWrC,KAAK,OAAO,OAAO,IAAI,OAAO;AAAA,MAAW;AAAA,IACzC,OAAO,UAAU,IAAI;AAAA,IACrB,MAAM,QAAQ,OAAO,OAAO,IAAI;AAAA,IAChC,IAAI,UAAU;AAAA,MAAW,OAAO,OAAc,aAAI,aAAa,IAAI,CAAC;AAAA,GACrE;AACH,CAAC,CACH,CACF;;AG5MF,qBAAS;AACT,uBAAS;AAET;AACA;;;ACYA;AACA;AAQA,IAAM,WAAW,CAAC,UACf,MAAM,QAAQ,KAAK,WAAW,IAAI,KAAK,cAAc,CAAC,GAAG,OACxD,CAAC,UAA8B,OAAO,UAAU,YAAY,UAAU,IACxE;AAeK,IAAM,YAAY,CAAC,SAAiC;AAAA,EACzD,MAAM,OAAO,KAAK;AAAA,EAClB,MAAM,QAAmB,OAAO,SAAS,YAAY,SAAS,OAAQ,OAAqB,CAAC;AAAA,EAC5F,MAAM,OAAO,CAAC,SAAiC;AAAA,IAC7C,GAAI,KAAK,YAAY,QAAQ,CAAC,IAAI,IAAI,CAAC;AAAA,IACvC,GAAG,SAAS,IAAI,EAAE,QAAQ,IAAI;AAAA,EAChC;AAAA,EACA,OAAO,KAAK,KAAK;AAAA;AAoBZ,IAAM,UAAU,CAAC,MAAiB,UACvC,UAAU,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,OAAO,OAAO,GAAG,MAAM,KAAK;AAkD/D,IAAM,gBAAgB,CAAC,MAAiB,WAA4C;AAAA,EACzF,cAAc,KAAK,KAAK,qBAAqB;AAAA,EAC7C,cAAc,IAAI,KAAK,iBAAiB,CAAC;AAAA,EACzC,cAAc,KAAK,KAAK,eAAe;AAAA,EACvC,MAAM,KAAK,KAAK,OAAO;AAAA,EACvB,IAAI,KAAK,KAAK,KAAK;AAAA,EACnB,MAAM,KAAK,KAAK,SAAS,OAAO,OAAO,MAAM,KAAK,GAAG;AAAA,EACrD,OAAO,IAAI,KAAK,OAAO,MAAM,KAAK;AAAA,EAClC,SAAS,KAAK,KAAK,UAAU;AAAA,EAC7B,KAAK,IAAI,KAAK,QAAQ,CAAC;AAAA,EACvB,UAAU,IAAI,KAAK,aAAa,CAAC;AAAA,EACjC,QAAQ,KAAK,KAAK,SAAS;AAAA,EAC3B,aAAa,IAAI,KAAK,gBAAgB,CAAC;AACzC;AAmBO,IAAM,UAAU,CAAC,UACtB,OAAO,MAAM,QAAQ,QAAQ,OAAa,sBAAe,EAAE,MAAM,MAAM,KAAK,CAAC,CAAC,EAAE,KACvE,aAAI,CAAC,MAAM;AAAA,EAChB,MAAM,OAAO,QAAQ,GAA2B,MAAM,KAAK;AAAA,EAC3D,OAAO,SAAS,YAAY,YAAY,cAAc,MAAM,KAAK;AAAA,CAClE,CACH;;;AC5LF;AACA;AAmBO,IAAM,sBAAmC;AAEhD,IAAM,WAAW,CAAC,UAAwB,OAAO,OAAO,MAAM,KAAK,QAAQ,MAAM;AAM1E,IAAM,gBAAgB,CAAC,OAAqB,SAAyC;AAAA,EAC1F;AAAA,KACI,MAAM,iBAAiB,YAAY,CAAC,IAAI,EAAE,sBAAsB,MAAM,aAAa;AACzF;AAEO,IAAM,YAAmB,YAAG,UAAU,CAAC,MAAoB;AAAA,EAChE,IAAI,KAAK,QAAQ,WAAW;AAAA,IAC1B,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,SAAS,IAAI,oEACd,kFACA,oFACA,qFACA,cACJ,CACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,cAAc,MAAM,KAAK,GAAG;AAAA,EAGzC,OAAO,UAAU,qBAAqB,MAAM,IAAI;AAAA,EAChD,OAAO,OACL,KAAK,QACL,aACA,MACM,yBAAkB;AAAA,IACtB,KAAK,KAAK;AAAA,IACV,MAAM,KAAK;AAAA,OACP,KAAK,iBAAiB,YAAY,CAAC,IAAI,EAAE,oBAAoB,KAAK,aAAa;AAAA,EACrF,CAAC,CACH;AAAA,EACA,MAAM,UAAU,OAAO,QAAQ,IAAI;AAAA,EACnC,IAAI,YAAY,WAAW;AAAA,IACzB,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,SAAS,IAAI,2CAA2C,OAAO,KAAK,KAAK,UAC1E,sFACA,wFACA,uDACJ,CACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,CACR;AAkCM,IAAM,aAAa,CAAC,SACzB,OACE,KAAK,QACL,aACA,MACM,yBAAkB;AAAA,EACtB,MAAM,KAAK;AAAA,EACX,OAAO,OAAO,KAAK,KAAK;AAAA,KACpB,KAAK,YAAY,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;AAClD,CAAC,CACH;;;AFTK,IAAM,iBAAiB,UAAyB,mBAAmB;AAAA,EACxE,sBAAsB;AACxB,CAAC;AAuBD,IAAM,UAAU,CAAC,MAAyB,WACvC,MAAM,SAAS,aAAa,MAAM,SAAS,KAAK,UAChD,MAAM,iBAAiB,aAAa,MAAM,iBAAiB,KAAK;AAEnE,IAAM,YAAW,CAAC,UAChB,OAAO,OAAO,MAAM,KAAK,qBAAqB,MAAM;AAetD,IAAM,YAAW;AAAA,EAOf,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAE7B,MAAa,YAAG,UAAU,GAAG,QAAgC;AAAA,IAC3D,OAAO,OAAO,QAAQ,IAAI;AAAA,GAC3B;AAAA,EAUD,MAAa,YAAG,UAAU;AAAA,IACxB;AAAA,IACA;AAAA,KAIC;AAAA,IACD,IAAI,WAAW,aAAa,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IAC/C,MAAM,OAAO,OAAO,QAAQ,IAAI;AAAA,IAChC,IAAI,SAAS;AAAA,MAAW,OAAO,EAAE,QAAQ,SAAS;AAAA,IAQlD,IAAI,OAAO,UAAU,KAAK;AAAA,MAAO,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC3D,OAAO,QAAQ,MAAM,IAAI,IAAK,EAAE,QAAQ,OAAO,IAAe,EAAE,QAAQ,SAAS;AAAA,GAClF;AAAA,EAOD,WAAkB,YAAG,UAAU,GAAG,QAAgC;AAAA,IAChE,MAAM,OAAO,OAAO,QAAQ,IAAI;AAAA,IAChC,IAAI,SAAS,WAAW;AAAA,MAUtB,OAAO,OAAO,UAAU,IAAI;AAAA,IAC9B;AAAA,IACA,IAAI,CAAC,QAAQ,MAAM,IAAI,GAAG;AAAA,MACxB,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,UAAS,IAAI,8CAA8C,KAAK,UACjE,gBAAgB,KAAK,8DACrB,wFACA,6DACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAOD,QAAe,YAAG,UAAU,GAAG,QAAgC;AAAA,IAC7D,OAAO,WAAW,IAAI;AAAA,GACvB;AACH;AAEO,IAAM,yBAAyB,MAC3B,iBAAO,gBAAuB,iBAAQ,eAAe,SAAS,GAAG,SAAQ,CAAC,CAAC;;AG/MtF,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;ACkGO,IAAM,SAAS,CAAC,UAAyB,SAAS,MAAM,kBAAkB,MAAM;AAShF,IAAM,QAAQ;AAGd,IAAM,eAAe,CAAC,UAC3B,IAAI,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,CAAC,UAAmB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AAQvE,IAAM,OAAO,CAAI,UAAyB,MAAS,SAAS,UACjE,aAAa,aAAa,UAAU,aAAa;AAc5C,IAAM,OAAO,CAAC,UAA+B,UAAU,IAAI,YAAY;AAG9E,IAAM,SAAQ,CAAC,MAAc,UAC3B,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,MAAM;AAG7C,IAAM,UAAU,CAAC,UAA+B,UAAU,YAAY,YAAY,OAAO,KAAK;AAmCvF,IAAM,aAAa,CAAC,WAAkD;AAAA,KACxE,OAAM,cAAc,MAAM,UAAU;AAAA,KACpC,OAAM,YAAY,QAAQ,MAAM,QAAQ,CAAC;AAAA,KACzC,OAAM,qBAAqB,MAAM,iBAAiB;AAAA,KAClD,OAAM,cAAc,QAAQ,MAAM,UAAU,CAAC;AAAA,KAC7C,OAAM,QAAQ,QAAQ,MAAM,IAAI,CAAC;AAAA,KACjC,OAAM,eAAe,QAAQ,MAAM,WAAW,CAAC;AAAA,KAC/C,OAAM,qBAAqB,QAAQ,MAAM,iBAAiB,CAAC;AAChE;AAYO,IAAM,aAAa,CAAC,WAAkD;AAAA,KACxE,WAAW,KAAK;AAAA,KAChB,OAAM,eAAe,MAAM,WAAW;AAAA,KACtC,OAAM,UAAU,QAAQ,MAAM,MAAM,CAAC;AAAA,EACxC,cAAc;AAAA,EACd,MAAM,MAAM;AACd;;;AChPA;AACA;AA4BO,IAAM,gBAAgB,CAAC,OAAsB,cAClD,OAAO,MAAM,QAAQ,QAAQ,OAAa,wBAAiB,EAAE,MAAM,MAAM,KAAK,CAAC,CAAC,EAAE,KACzE,iBAAQ,CAAC,SACd,KAAK,KAAK,CAAC,QAAQ,IAAI,cAAc,MAAM,IAAI,IACpC,aACL,IAAI,MACF,GAAG,8EACD,oFACA,oFACA,6CACJ,CACF,IACO,aACb,CACF;AAYK,IAAM,UAAS,CACpB,OACA,MACA,SAEO,aAAI,UAAU,GAAG;AAAA,EACtB,SAAS,UAAU,EAAG,UAAU,IAAI,WAAW,GAAG;AAAA,IAChD,MAAM,OAAO,OAAO,KAAK,KAAK;AAAA,IAC9B,IAAI,KAAK,IAAI;AAAA,MAAG,OAAO;AAAA,IACvB,OAAc,eAAM,WAAW;AAAA,EACjC;AAAA,EACA,OAAO,OAAO,KAAK,KAAK;AAAA,CACzB;;;ACjDH;AACA;AAwBA,IAAM,gBAAe,CAAC,MAAe,UAAyD;AAAA,EAC5F,MAAM,MAAM;AAAA,EACZ,IAAI,OAAO,IAAI,YAAY;AAAA,IAAU;AAAA,EACrC,OAAO;AAAA,IACL,cAAc,aAAa,IAAI,mBAAmB;AAAA,IAClD,YAAY,KAAK,IAAI,aAAa;AAAA,IAClC,IAAI,IAAI,IAAI,OAAO,KAAK;AAAA,IACxB,UAAU,IAAI,IAAI,aAAa,KAAK;AAAA,IACpC,MAAM,MAAM;AAAA,IACZ,MAAM,MAAM;AAAA,IACZ,UAAU,KAAK,IAAI,WAAW;AAAA,IAC9B,YAAY,KAAK,IAAI,aAAa;AAAA,IAClC,cAAc,KAAK,IAAI,eAAe;AAAA,IACtC,mBAAmB,KAAK,IAAI,oBAAoB;AAAA,IAChD,QAAQ,IAAI,IAAI,WAAW,KAAK;AAAA,IAChC,YAAY,IAAI,IAAI,eAAe,KAAK;AAAA,IACxC,MAAM,IAAI,IAAI,SAAS,KAAK;AAAA,IAC5B,aAAa,IAAI,IAAI,gBAAgB,KAAK;AAAA,IAC1C,mBAAmB,IAAI,IAAI,sBAAsB,KAAK;AAAA,EACxD;AAAA;AAWK,IAAM,iBAAiB,CAAC,UAC7B,OACE,MAAM,QACN,QACA,OACM,6BAAsB,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,SAAS,IAAI,CAAC,CAClF,EAAE,KACO,aAAI,CAAC,SAAS,cAAa,MAAM,KAAK,CAAC,GACvC,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CACtC;AAGK,IAAM,mBAAmB;AACzB,IAAM,mBAAmB;AAGzB,IAAM,qBAAoB,CAAC,WAC/B;AAAA,KACI,WAAW,KAAK;AAAA,EACnB,MAAM,MAAM;AACd;AAGK,IAAM,oBAAoB,CAAC,WAC/B;AAAA,KACI,WAAW,KAAK;AAAA,EACnB,MAAM,MAAM;AAAA,EACZ,MAAM,MAAM;AACd;;;AH7BK,IAAM,kBAAkB,UAA0B,oBAAoB;AAAA,EAC3E,sBAAsB;AACxB,CAAC;AAaD,IAAM,WAAU,CAAC,YAAgC,UAC/C,KAAK,MAAM,MAAM,WAAW,MAAM,WAAW,YAAY,KACzD,KAAK,MAAM,UAAU,WAAW,UAAU,WAAW,YAAY,KACjE,KAAK,MAAM,mBAAmB,WAAW,iBAAiB,KAC1D,KAAK,KAAK,MAAM,UAAU,GAAG,WAAW,YAAY,WAAW,UAAU,KACzE,KAAK,MAAM,YAAY,WAAW,YAAY,WAAW,eAAe,EAAE,KAC1E,KAAK,KAAK,MAAM,WAAW,GAAG,WAAW,WAAW;AAE/C,IAAM,0BAA0B,MAC5B,iBACP,iBACO,iBACL,gBAAgB,SAAS,GAAG;AAAA,EAE1B,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAM,GAAG,WAAW,eAAe,IAAI;AAAA,EAMvC,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,kBAAkB,WAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IAC1E,OAAO,YAAW,kBAAkB,WAAW,IAAI,GAAG,KAAK;AAAA,IAC3D,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,eAAe,IAAI;AAAA,IACvC,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,kBAAkB,WAAW,IAAI,GAAG,IAAI;AAAA,MAC1D,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EAMD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IACxC,MAAM,OAAO,OAAO,eAAe,IAAI;AAAA,IACvC,IAAI;AAAA,IACJ,IAAI,SAAS,WAAW;AAAA,MAItB,OAAO,YAAW,kBAAkB,WAAW,IAAI,GAAG,IAAI;AAAA,MAC1D,OAAO,cAAc,MAAM,OAAO,IAAI,CAAC;AAAA,MACvC,OAAO,OAAO,OACZ,KAAK,QACL,aACA,MACM,0BAAmB,mBAAkB,IAAI,CAAC,CAClD;AAAA,IACF,EAAO;AAAA,MAQL,MAAM,OAAO,WAAW,UAAS,MAAM,MAAM,WAAW,IAAI,CAAC;AAAA,MAC7D,IAAI,SAAS,WAAW;AAAA,QACtB,OAAO,YAAW,kBAAkB,WAAW,IAAI,GAAG,KAAK;AAAA,QAC3D,OAAO,OAAO,OACZ,KAAK,QACL,aACA,MACM,uBAAgB,kBAAkB,IAAI,CAAC,CAC/C;AAAA,MACF;AAAA;AAAA,IAEF,MAAM,QAAQ,OAAO,QACnB,MACA,gBACA,CAAC,QAAQ,QAAQ,aAAa,SAAQ,KAAK,IAAI,CACjD;AAAA,IACA,IAAI,UAAU,aAAa,CAAC,SAAQ,OAAO,IAAI,GAAG;AAAA,MAChD,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,OAAO,IAAI,sEACZ,qDAAqD,QAAQ,sBAC7D,8EACA,UACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAYD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACM,0BAAmB,EAAE,MAAM,KAAK,MAAM,MAAM,KAAK,KAAK,CAAC,CAC/D;AAAA,IACA,MAAM,OAAO,OAAO,QAAO,MAAM,gBAAgB,CAAC,QAAQ,QAAQ,SAAS;AAAA,IAC3E,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,OAAO,IAAI,uEACZ,iFACA,mCACJ,CACF;AAAA,IACF;AAAA,GACD;AACH,CAAC,CACH,CACF;;AI3HF,qBAAS;AACT,uBAAS;AACT;AACA;;;AChEO,IAAM,OAAO,CAAC,SAAiB,KAAK,KAAK,EAAE,YAAY;AAyBvD,IAAM,OAAO,CAAC,UAAmB;AAAA,EACtC,MAAM,MAAM,KAAK,KAAK,EAAE,KAAK;AAAA,EAC7B,MAAM,OAAO,IAAI,SAAS,GAAG,IAAI,SAAS;AAAA,EAC1C,OAAO,IAAI,SAAS,IAAI,IAAI,IAAI,MAAM,GAAG,CAAC,KAAK,MAAM,IAAI;AAAA;AAwBpD,IAAM,UAAU,CAAC,UAAmB;AAAA,EACzC,MAAM,UAAU,KAAK,KAAK,EAAE,KAAK;AAAA,EACjC,OAAO,YAAY,MAAM,KAAK;AAAA;AAqBzB,IAAM,OAAO,CAAC,UAAsD;AAAA,EACzE,MAAM,OAAO,QAAQ,MAAM,OAAO;AAAA,EAClC,OAAO,EAAE,MAAM,KAAK,MAAM,IAAI,MAAO,SAAS,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK,EAAG;AAAA;;;ADkCtE,IAAM,uBAAuB,UAA+B,uBAAuB;AAE1F,IAAM,YAAW,YAAyD;AAAA,EAQxE,YAAY,CAAC,MAAM,UAAU;AAAA,IAC3B,MAAM,UAAU,KAAK,KAAK,OAAO;AAAA,IACjC,OAAO,YAAY,KACf,YACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS,QAAQ,KAAK,UAAU;AAAA,MAChC,WAAW,IAAI,KAAK,cAAc,CAAC;AAAA,MAEnC,MAAM,KAAK,KAAK,SAAS,MAAM,IAAI;AAAA,IACrC;AAAA;AAAA,EAEN,YAAY,MAAM;AAAA,EAClB,YAAY,CAAC,WAAW,KAAK,KAAK,KAAK,GAAG,MAAM,MAAM,KAAK;AAAA,EAO3D,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS,CAAC,YAAY,UACpB,WAAW,SAAS,KAAK,MAAM,IAAI,KAAK,WAAW,YAAY,QAAQ,MAAM,OAAO;AAAA,EAKtF,MAAM,CAAC,UAAU,4BAA4B,MAAM;AAAA,EACnD,YAAY;AACd,CAAC;AASM,IAAM,+BAA+B,MACjC,iBACP,sBACO,iBACL,qBAAqB,SAAS,GAAG;AAAA,KAC5B;AAAA,EACH,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAI3C,IAAI,WAAW,aAAa,YAAW,IAAI,KAAK,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,IAAI,GAAG;AAAA,MACrF,OAAO,EAAE,QAAQ,UAAU;AAAA,IAC7B;AAAA,IACA,OAAO,OAAO,UAAS,KAAK,EAAE,MAAM,OAAO,CAAC;AAAA,GAC7C;AACH,CAAC,CACH,CACF;;AE/IF,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;ACpEA;AACA;AAMO,IAAM,eAAe;AACrB,IAAM,eAAe;AAWrB,IAAM,gBAAgB,CAAC,aAAgC;AAAA,EAC5D,MAAM,QAAQ,YAAW;AAAA,EACzB,OAAO,UAAU,MAAM,KAAK;AAAA;AAI9B,IAAM,aAAa,CAAC,SAAsC;AAAA,EACxD,MAAM,SAAS,IAAI,KAAK,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC;AAAA,EACrD,OAAO,WAAW,KAAK,CAAC,IAAI,OAAO,MAAM,GAAG;AAAA;AAGvC,IAAM,cAAa,CAAC,WAAwD;AAAA,EACjF,SAAS,cAAc,MAAM,OAAO;AAAA,EACpC,SAAS,MAAM;AACjB;AAGO,IAAM,aAAa,CAAC,WAAqD;AAAA,EAC9E,SAAS,cAAc,MAAM,OAAO;AAAA,EACpC,SAAS,MAAM;AACjB;AAEA,IAAM,gBAAe,CAAC,MAAqC,WAAwC;AAAA,EAKjG,SAAS,KAAK,KAAK,OAAO;AAAA,EAE1B,SAAS,MAAM;AAAA,EACf,SAAS,WAAW,KAAK,OAAO;AAClC;AAMO,IAAM,WAAU,CAAC,YAA6B,UACnD,WAAW,YAAY,cAAc,MAAM,OAAO;AAuB7C,IAAM,kBAAkB,CAAC,UAC9B,iBACE,OAAO,MAAM,QAAQ,QAAQ,OAAc,uBAAe,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CACvF,EAAE,KACO,aAAI,CAAC,SACV,SAAS,aACL,aACA,KAAK,YAAY,YACf,YACA,cAAa,MAAM,KAAK,CAChC,CACF;AAeK,IAAM,YAAY,CAAC,UACxB,gBAAgB,KAAK,EAAE,KAAY,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CAAC;AAG5D,IAAM,kBAAiB,CAAC,SAC7B,SAAS,aAAa,YAAY;;;ADM7B,IAAM,eAAe,WAAuB,iBAAiB;AAAA,EAClE,sBAAsB;AACxB,CAAC;AAEM,IAAM,uBAAuB,MACzB,kBACP,cACO,iBACL,aAAa,SAAS,GAAG;AAAA,EAKvB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAY7B,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,OAAO,gBACL,OAAO,WAAW,YAAY,UAAU,IAAI,IAAI,gBAAgB,IAAI,CACtE;AAAA,GACD;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,cAAc,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACtE,OAAO,YAAW,cAAc,WAAW,IAAI,GAAG,KAAK;AAAA,IACvD,IAAI,WAAW;AAAA,MAAW;AAAA,IAI1B,MAAM,OAAO,OAAO,gBAAgB,IAAI;AAAA,IAGxC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,iBAAiB,KAAK,OAAO;AAAA,MACtD,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,IAAI,SAAS,WAAW;AAAA,MAEtB,OAAO,YAAW,cAAc,YAAW,IAAI,GAAG,IAAI;AAAA,MACtD,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAOxC,MAAM,SAAS,gBAAe,OAAO,UAAU,IAAI,CAAC;AAAA,IACpD,OAAO,YAAW,cAAc,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACtE,OAAO,YAAW,cAAc,WAAW,IAAI,GAAG,KAAK;AAAA,IACvD,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OACL,KAAK,QACL,aACA,MACO,0BAAkB,YAAW,IAAI,CAAC,CAC3C;AAAA,IACF,EAAO,SAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MACjC,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,uBAAe,WAAW,IAAI,CAAC,CAAC;AAAA,IACvF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,UAAU,IAAI,CAAC;AAAA,IACnD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,iBAAiB,KAAK,2DACpB,iFACA,+EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EACD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACO,0BAAkB,EAAE,SAAS,KAAK,QAAQ,CAAC,CACpD;AAAA,GACD;AACH,CAAC,CACH,CACF;;AE5KF,qBAAS;AACT;AACA;AAmDO,IAAM,oBAAoB,WAA4B,oBAAoB;AAGjF,IAAM,OAAO,CAAC,QAAgB,IAAI,MAAM,GAAG,EAAE,MAAM;AAOnD,IAAM,SAAQ,CAAC,WAA4B;AAAA,EACzC,SAAS,MAAM,WAAW;AAAA,EAC1B,cAAc,OAAO,MAAM,gBAAgB,CAAC;AAAA,EAC5C,aAAa,OAAO,MAAM,eAAe,CAAC;AAAA,EAC1C,OAAO,MAAM,SAAS;AACxB;AAEA,IAAM,YAAW,YAAmD;AAAA,EAClE,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,SAAS,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAAA,IACjE,cAAc,IAAI,KAAK,iBAAiB,CAAC;AAAA,IACzC,aAAa,IAAI,KAAK,gBAAgB,CAAC;AAAA,IACvC,KAAK,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS,MAAM;AAAA,IAC3D,OAAO,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AAAA,IAC3D,MAAM,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK,MAAM,GAAG;AAAA,EACxE;AAAA,EAMA,YAAY,MAAM;AAAA,EAClB,YAAY,CAAC,WAAW,KAAK,OAAM,KAAK,GAAG,KAAK,MAAM,IAAI;AAAA,EAS1D,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS,CAAC,YAAY,UACpB,WAAW,WAAW,MAAM,SAAS,cACrC,WAAW,aAAa,MAAM,WAAW,OACzC,WAAW,iBAAiB,MAAM,eAAe,MACjD,WAAW,kBAAkB,MAAM,gBAAgB;AAAA,EAMrD,MAAM,CAAC,UAAU,wBAAwB,MAAM;AAAA,EAC/C,YAAY;AACd,CAAC;AAiBM,IAAM,4BAA4B,MAC9B,kBAAO,mBAA0B,iBAAQ,kBAAkB,SAAS,GAAG,SAAQ,CAAC,CAAC;;ACpG5F,qBAAS;AACT;AACA;;;ACzCO,IAAM,WAAW,CAAC,UAAkD;AAAA,EACzE,MAAM,SAAS,IAAI;AAAA,EACnB,WAAW,SAAS,OAAO,UAAU,WAAW,MAAM,MAAM,GAAG,IAAK,SAAS,CAAC,GAAI;AAAA,IAChF,OAAO,MAAM,YAAY,MAAM,KAAK,EAAE,MAAM,GAAG;AAAA,IAC/C,IAAI,SAAS,aAAa,SAAS;AAAA,MAAI;AAAA,IACvC,MAAM,OAAO,OAAO,SAAS,YAAY,KAAK,EAAE;AAAA,IAChD,OAAO,IAAI,MAAM,OAAO,MAAM,IAAI,IAAI,IAAI,IAAI;AAAA,EAChD;AAAA,EACA,OAAO,CAAC,GAAG,OAAO,KAAK,CAAC,EACrB,KAAK,EACL,IAAI,CAAC,SAAS;AAAA,IACb,MAAM,OAAO,OAAO,IAAI,IAAI,KAAK;AAAA,IACjC,OAAO,SAAS,IAAI,OAAO,GAAG,QAAQ,OAAO,IAAI;AAAA,GAClD,EACA,KAAK,GAAG;AAAA;AAYN,IAAM,WAAW,CAAC,UACvB,OAAO,UAAU,YAAY,UAAU,OACnC,OAAO,QAAQ,KAAK,EACjB,IAAI,EAAE,QAAQ,aAAa,GAAG,WAAW,OAAO,OAAO,GAAG,EAC1D,KAAK,EACL,KAAK,IAAI,IACZ;AAqBC,IAAM,cAAc,CAAC,QAC1B,IAAI,QAAQ,yBAAyB,CAAC,YAAY;AAAA,EAChD,IAAI;AAAA,IACF,OAAO,mBAAmB,OAAO;AAAA,IACjC,MAAM;AAAA,IACN,OAAO;AAAA;AAAA,CAEV;AAuBI,IAAM,WAAW,CAAC,WAA4D;AAAA,EACnF,SAAS,MAAM,YAAY,aAAa,MAAM,YAAY,KAAK,YAAY,MAAM;AAAA,EACjF,SAAS,MAAM,YAAY,OAAO,MAAM;AAAA,KACpC,MAAM,SAAS,kBAAkB,EAAE,QAAQ,MAAM,WAAW,OAAO,MAAM,UAAU,IAAI,CAAC;AAC9F;AA8BA,IAAM,WAAW,CAAC,WAAgD;AAAA,EAChE,UAAU,MAAM;AAAA,EAChB,WAAW,IAAI,MAAM,SAAS;AAAA,EAC9B,MAAM,MAAM;AAAA,KACR,MAAM,SAAS,kBAAkB,EAAE,OAAO,SAAS,MAAM,KAAK,EAAE,IAAI,CAAC;AAC3E;AAEO,IAAM,QAAO,CAAC,UAAuB;AAAA,EAC1C,MAAM,SAAS,SAAS,KAAK;AAAA,EAC7B,YAAY,QAAQ,UAAU,OAAO,QAAQ,SAAS,KAAK,CAAC,GAAG;AAAA,IAC7D,IAAI,UAAU;AAAA,MAAW,OAAO,UAAU;AAAA,EAC5C;AAAA,EACA,OAAO;AAAA;AAiBF,IAAM,YAAY,CAAC,UACxB,OAAO,QAAQ,SAAS,KAAK,CAAC,EAC3B,OAAO,IAAI,WAAW,UAAU,SAAS,EACzC,IAAI,EAAE,YAAY,MAAM;;;ADtBtB,IAAM,gBAAgB,WAAwB,gBAAgB;AAErE,IAAM,YAAW,YAA2C;AAAA,EAC1D,YAAY,CAAC,MAAM,UAAU;AAAA,IAO3B,MAAM,WAAW,KAAK,KAAK,OAAO;AAAA,IAClC,IAAI,aAAa,MAAM,aAAa,MAAM;AAAA,MAAM;AAAA,IAChD,OAAO;AAAA,MACL,UAAU,KAAK,KAAK,WAAW;AAAA,MAC/B,SAAS,KAAK,KAAK,UAAU;AAAA,MAO7B,SAAS,KAAK,KAAK,YAAY,KAAK;AAAA,MACpC,QAAQ,SAAS,KAAK,SAAS;AAAA,MAC/B,OAAO,SAAS,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,SAAS;AAAA,MAC7E,OAAO,IAAI,KAAK,UAAU,CAAC;AAAA,MAC3B,WAAW,IAAI,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe,SAAS;AAAA,MACpF,MAAM,KAAK,KAAK,SAAS,MAAM,IAAI;AAAA,MACnC,QAAQ,KAAK,KAAK,WAAW,KAAK;AAAA,MAClC,MAAM,MAAM;AAAA,IACd;AAAA;AAAA,EAEF,YAAY,MAAM;AAAA,EAGlB,YAAY,CAAC,WAAW,KAAK,MAAK,KAAK,GAAG,MAAM,MAAM,KAAK;AAAA,EAa3D,UAAU,EAAE,QAAQ,8BAA8B,QAAQ,mCAAmC;AAAA,EAC7F,SAAS,CAAC,YAAY,UACpB,WAAW,cAAc,IAAI,MAAM,SAAS,KAC5C,WAAW,aAAa,MAAM,YAC9B,WAAW,YAAY,YAAY,MAAM,WAAW,EAAE,KACtD,WAAW,aAAa,MAAM,YAAY,UACzC,MAAM,SAAS,mBACb,WAAW,UAAU,SAAS,MAAM,KAAK,KACxC,WAAW,YAAY,MAAM,WAAW;AAAA,EAE9C,MAAM,CAAC,UAAU,oBAAoB,MAAM;AAAA,EAO3C,YAAY,CAAC,UAAU;AAAA,IACrB,MAAM,QAAQ,UAAU,KAAK;AAAA,IAC7B,MAAM,SAAS,MAAK,KAAK;AAAA,IACzB,OAAO,WAAW,QAAQ,KAAK;AAAA;AAEnC,CAAC;AASM,IAAM,wBAAwB,MAC1B,kBAAO,eAAsB,iBAAQ,cAAc,SAAS,GAAG,SAAQ,CAAC,CAAC;;AErNpF,qBAAS;AACT,uBAAS;AAET;AACA;;;ACvBA;AACA;AACA,kBAAS;AACT;AACA;;;ACiBA;AACA;AACA;AACA;AAEA,IAAM,SAAS;AACf,IAAM,aAAa;AAEnB,IAAM,OAAO,CAAC,KAAa,eAClB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,MAAM,OAAc,uBAAc,SAAS;AAAA,EACjD,IAAW,eAAO,GAAG;AAAA,IAAG,OAAO,IAAI,MAAM,IAAI,KAAK,UAAU;AAAA,CAC7D;AAEH,IAAM,QAAQ,CAAC,KAAa,eACnB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,MAAM,OAAc,uBAAc,SAAS;AAAA,EACjD,IAAW,eAAO,GAAG;AAAA,IAAG,OAAO;AAAA,EAC/B,QAAQ,OAAO,IAAI,MAAM,IAAY,GAAG,OAAO;AAAA,CAChD;AAOI,IAAM,iBAAiB,CAAC,eACtB,YAAG,KAAK,YAAY,UAAU,GAAG,SAAS;AAQ5C,IAAM,aAAa,CACxB,YACA,cAEO,aAAI,UAAU,GAAG;AAAA,EACtB,OAAO,eAAe,UAAU;AAAA,EAChC,MAAM,WAAW,MAAa,iBAAQ,SAAS;AAAA,EAC/C,MAAM,QAAQ,OAAO,UAAU,KAAY,eAAM,QAAQ,GAAU,qBAAY,QAAQ,CAAC;AAAA,EACxF,IAAI,UAAU,aAAa,UAAU,QAAQ,QAAQ,GAAG,KAAK;AAAA,IAAG;AAAA,EAChE,OAAO,KAAK,QAAQ,UAAU;AAAA,CAC/B;AAGI,IAAM,UAAU,CAAC,eAA+C,MAAM,QAAQ,UAAU;AAGxF,IAAM,aAAa,CAAC,eACzB,MAAM,YAAY,UAAU;AAuBvB,IAAM,iBAAiB,CAAsB,YAAkB;AAAA,EACpE,QAAQ,MAAM,SAAS;AAAA,EACvB,IAAI,SAAS,aAAa,SAAS;AAAA,IAAW,OAAO;AAAA,EACrD,MAAM,UAA6B,CAAC,UAC3B,aAAI,UAAU,GAAG;AAAA,IACtB,IAAI,MAAM,WAAW,WAAW;AAAA,MAC9B,OAAO,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO,QAAQ,UAAU,CAAC,CAAC;AAAA,IAC3E;AAAA,IACA,OAAO,OAAO,KAAK,KAAK;AAAA,GACzB;AAAA,EAEH,OAAO,KAAK,SAAS,MAAM,QAAQ;AAAA;;;ACxGrC,kBAAS;AACT;AACA;AACA;;;ACIA;AACA;AACA;AAEA,IAAM,SAAS,CAAC,UAA4B,UAAU,aAAa,UAAU;AAE7E,IAAM,gBAAgB,CAAC,UAAqD;AAAA,EAC1E,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO;AAAA,EAChF,MAAM,QAAiB,OAAO,eAAe,KAAK;AAAA,EAClD,OAAO,UAAU,OAAO,aAAa,UAAU;AAAA;AAO1C,IAAM,UAAU,CAAC,UAAmB,aAA+B;AAAA,EACxE,IAAI,OAAO,QAAQ;AAAA,IAAG,OAAO;AAAA,EAC7B,IAAI,OAAO,QAAQ;AAAA,IAAG,OAAO;AAAA,EAC7B,IAAI,MAAM,QAAQ,QAAQ,GAAG;AAAA,IAC3B,IAAI,CAAC,MAAM,QAAQ,QAAQ;AAAA,MAAG,OAAO;AAAA,IACrC,OAAO,SAAS,MAAM,CAAC,MAAM,UAAU,QAAQ,MAAM,SAAS,MAAM,CAAC;AAAA,EACvE;AAAA,EACA,IAAI,cAAc,QAAQ,GAAG;AAAA,IAC3B,IAAI,CAAC,cAAc,QAAQ;AAAA,MAAG,OAAO;AAAA,IACrC,OAAO,OAAO,QAAQ,QAAQ,EAAE,MAAM,EAAE,KAAK,UAAU,QAAQ,MAAM,SAAS,IAAI,CAAC;AAAA,EACrF;AAAA,EACA,OAAO;AAAA;AASF,IAAM,mBAAmB,CAAC,KAAa,UACrC,aAAW,uBAAc,KAAK,GAAG,CAAC,UAAU;AAAA,EACjD,MAAM,WAAkB,eAAO,KAAK,IAAI,MAAM,MAAM,UAAU,OAAO;AAAA,EACrE,OAAO,aAAa,aAAa,QAAQ,SAAS,OAAO,KAAK;AAAA,CAC/D;;;ADtCH,IAAM,UAAiB,aAAI,UAAU,GAAG;AAAA,EACtC,MAAM,QAAQ,OAAc,uBAAc,MAAK;AAAA,EAC/C,MAAM,QAAQ,OAAc,uBAAc,KAAK;AAAA,EAC/C,IAAW,eAAO,KAAK,KAAY,eAAO,KAAK;AAAA,IAAG;AAAA,EAClD,MAAM,QAAsB,OAAO,MAAM;AAAA,EACzC,MAAM,QAAe,EAAE,OAAO,MAAM,MAAM,MAAM,OAAO,MAAM,MAAM,MAAM;AAAA,EACzE,OAAO,EAAE,WAAW,MAAM,MAAM,WAAW,OAAO,MAAM;AAAA,CACzD;AAED,IAAM,QAAQ,CAAC,OAAqB,OAAc,QAChD,MAAM,IAAI,KAAK,OAAO,IAAI,CAAC,EAAE,KAAY,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CAAC;AAczE,IAAM,eAAe,CAAC,KAAc,eAA+C;AAAA,EACjF,IAAI,KAAK;AAAA,EACT,OAAO,OAAO,OAAO,YAAY,OAAO,QAAQ,CAAC,cAAc,EAAW,GAAG;AAAA,IAC3E,MAAM,aAAa;AAAA,IACnB,IAAI,WAAW,eAAe;AAAA,MAAY,OAAO;AAAA,IACjD,KAAK,WAAW;AAAA,EAClB;AAAA,EACA;AAAA;AAIK,IAAM,qBAAqB,CAChC,KACA,eAEO,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,QAAQ,OAAO;AAAA,EACrB,IAAI,UAAU;AAAA,IAAW;AAAA,EACzB,WAAW,MAAM,CAAC,KAAK,GAAI,MAAM,UAAU,MAAM,cAAc,CAAC,CAAE,GAAG;AAAA,IACnE,MAAM,aAAa,aAAa,OAAO,MAAM,MAAM,OAAO,MAAM,OAAO,EAAE,GAAG,UAAU;AAAA,IACtF,IAAI,eAAe;AAAA,MAAW,OAAO;AAAA,EACvC;AAAA,EACA;AAAA,CACD;AAcI,IAAM,mBAAmB,CAAC,KAAa,eACrC,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,aAAa,OAAO,mBAAmB,KAAK,UAAU;AAAA,EAC5D,IAAI,eAAe;AAAA,IAAW,OAAO;AAAA,EACrC,QAAQ,OAAO,iBAAiB,KAAK,WAAW,KAAK,KAAK,UAAU;AAAA,CACrE;AAQI,IAAM,WAAW,CAAC,KAAa,eAC7B,aACL,mBAAmB,KAAK,UAAU,GAClC,CAAC,eAAe,YAAY,WAAW,UACzC;AAaK,IAAM,sBAAsB,CAAC,KAAa,eACxC,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,QAAQ,OAAO;AAAA,EACrB,IAAI,UAAU;AAAA,IAAW;AAAA,EACzB,MAAM,MAAM,OAAO,MAAM,MAAM,OAAO,MAAM,OAAO,GAAG;AAAA,EACtD,MAAM,OAAO;AAAA,EACb,IAAI,MAAM,WAAW,cAAc,KAAK,eAAe,cAAc,KAAK,SAAS,WAAW;AAAA,IAC5F;AAAA,EACF;AAAA,EACA,OAAO,MAAM,MAAM,OAAO,KAAK,MAAM,OAAO,IAAI,CAAC,EAAE,KAAY,eAAM;AAAA,CACtE;;;AFxFI,IAAM,eAAe,CAAC,QACpB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,QAAQ,OAAc,uBAAc,MAAK;AAAA,EAC/C,MAAM,SAAgB,eAAO,KAAK,IAAI,MAAM,MAAM,UAAU,MAAM,QAAQ;AAAA,EAC1E,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,MAAM,SAAS,OAAc,uBAAc,WAAW;AAAA,EACtD,IAAW,eAAO,MAAM;AAAA,IAAG,OAAO,OAAO;AAAA,EACzC,MAAM,UAAU,OAAc,uBAAc,cAAc;AAAA,EAC1D,OAAc,eAAO,OAAO,IAAI,QAAQ,MAAM,QAAQ;AAAA,CACvD;AAqBH,IAAM,YAAY,CAAC,UACV,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,OAAO,SAAS,MAAM,KAAK,MAAM,UAAU;AAAA,IAAG,OAAO;AAAA,EACzD,OAAO,OAAO,WAAW,MAAM,UAAU;AAAA,CAC1C;AAGI,IAAM,gBAAgB,CAAC,UACrB,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,EAAE,OAAO,aAAa,MAAM,GAAG;AAAA,IAAI,OAAO;AAAA,EAC9C,OAAO,OAAO,UAAU,KAAK;AAAA,CAC9B;AAuBI,IAAM,iBAAiB,CAAC,OAAc,SACpC,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,MAAM,WAAW;AAAA,IAAW;AAAA,EAChC,IAAI,OAAO,QAAQ,MAAM,UAAU;AAAA,IAAG;AAAA,EACtC,MAAM,MAAM,OAAO,UAAU,KAAK;AAAA,EAClC,IAAI,QAAQ,OAAO,aAAa,MAAM,GAAG;AAAA,IAAI;AAAA,EAC7C,OAAO,oBAAoB,MAAM,KAAK,MAAM,UAAU;AAAA,EACtD,MAAM,SAAS,MACX,mGACA;AAAA,EACJ,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,yFACD,0FACA,+BAA+B,QACnC,CACF;AAAA,CACD;AAGI,IAAM,WACX,CAAC,UACD,CAAC,SACC,eAAe,OAAO,IAAI;;;AIjG9B,oBAAS;AACT;AAcO,IAAM,aAAa,CACxB,KACA,aAEO,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WAAW,OAAO,iBAAiB,IAAI,KAAK,IAAI,UAAU;AAAA,EAChE,IAAI,aAAa;AAAA,IAAU,OAAO;AAAA,EAClC,IAAI,aAAa,WAAW;AAAA,IAC1B,OAAc,oBACZ,GAAG,IAAI,mFACL,iFACJ;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,MAAM,WAAW,CAAC,WACT,YACE,oBACL,GAAG,IAAI,+EACL,IAAI,kBAAkB,QAAQ,OAAO,UAAU,OAAO,MAAM,kCAChE,GACA,KACF;AAAA,EACF,OAAO,OAAO,SAAQ,KAAY,eAAM,QAAQ,GAAU,qBAAY,QAAQ,CAAC;AAAA,CAChF;AAOI,IAAM,YAAY,CACvB,KACA,OACA,aAEO,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,UAAU,aAAa,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EAC5D,QAAQ,OAAO,WAAW,KAAK,QAAO,KAAK,QAAQ,SAAQ,KAAK;AAAA,CACjE;;;AC3DI,IAAM,QAAQ,CAAC,OAAe,eACnC,MACG,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,IAAI,CAAC,SAA2B;AAAA,EAC/B,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,EAC3B,IAAI,OAAO;AAAA,IAAI,OAAO,CAAC,cAAc,MAAM,eAAe,YAAY,KAAK,IAAI;AAAA,EAC/E,OAAO,CAAC,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK,CAAC;AAAA,CAC5D;AAOL,IAAM,WAAuE;AAAA,EAC3E,KAAK,EAAE,cAAc,IAAI;AAAA,EACzB,UAAU,EAAE,cAAc,KAAK,MAAM,KAAK,QAAQ,KAAK,OAAO,KAAK,SAAS,IAAI;AAAA,EAChF,KAAK,EAAE,UAAU,KAAK,gBAAgB,KAAK,WAAW,KAAK,MAAM,OAAO;AAAA,EACxE,QAAQ,EAAE,QAAQ,KAAK,WAAW,KAAK,OAAO,KAAK,WAAW,KAAK,IAAI,KAAK,QAAQ,IAAI;AAC1F;AAGA,IAAM,QAAQ,IAAI,IAAI;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,IAAM,OAAO,IAAI,IAAI,CAAC,SAAS,cAAc,CAAC;AAG9C,IAAM,iBAAiB,CAAC,KAAa,UAAkB;AAAA,EACrD,IAAI,MAAM,IAAI,GAAG;AAAA,IAAG,OAAO,eAAe,KAAK;AAAA,EAC/C,IAAI,KAAK,IAAI,GAAG;AAAA,IACd,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG;AAAA,EAClF,IAAI,QAAQ;AAAA,IAAU,OAAO,MAAM,YAAY;AAAA,EAC/C,OAAO;AAAA;AAIF,IAAM,YAAY,CACvB,OACA,QACA,eACwB;AAAA,EACxB,MAAM,WAAW,SAAS,WAAW,CAAC;AAAA,EACtC,MAAM,MAAM,IAAI;AAAA,EAChB,YAAY,KAAK,QAAQ,MAAM,OAAO,UAAU,GAAG;AAAA,IACjD,MAAM,YAAY,eAAe,KAAK,GAAG;AAAA,IACzC,IAAI,SAAS,SAAS;AAAA,MAAW,IAAI,IAAI,KAAK,SAAS;AAAA,EACzD;AAAA,EACA,OAAO;AAAA;AAGF,IAAM,UAAU,CAAC,MAA2B,UACjD,KAAK,SAAS,MAAM,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,WAAW,MAAM,IAAI,GAAG,MAAM,KAAK;AAGjF,IAAM,aAAa,CAAC,UACzB,CAAC,GAAG,KAAG,EACJ,IAAI,EAAE,KAAK,WAAW,GAAG,OAAO,OAAO,EACvC,KAAK,EACL,KAAK,GAAG;AAGN,IAAM,WAAW,CAAC,OAA0B,OAA0B,CAAC,MAC5E,CAAC,GAAG,KAAK,OAAO,CAAC,QAAQ,MAAI,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,MAAI,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EACxF,IAAI,CAAC,QAAQ,GAAG,OAAO,MAAI,IAAI,GAAG,KAAK,IAAI,EAC3C,KAAK,GAAG;AAMN,IAAM,UAAU,CAAC,UAAkB,SAAiB;AAAA,EACzD,MAAM,OAAO,UAAU,UAAU,KAAK;AAAA,EACtC,MAAM,OAAO,UAAU,MAAM,KAAK;AAAA,EAClC,IAAI,CAAC,KAAK,IAAI,QAAQ;AAAA,IAAG,KAAK,OAAO,QAAQ;AAAA,EAC7C,OAAO,EAAE,MAAM,KAAK;AAAA;AAQf,IAAM,WAAW,CAAC,UAAkB,SAA6B;AAAA,EACtE,MAAM,OAAO,IAAI,IAAI,MAAM,QAAQ,CAAC;AAAA,EACpC,MAAM,MAAM,SAAS,YAAY,YAAY,IAAI,IAAI,MAAM,IAAI,CAAC,EAAE,IAAI,QAAQ;AAAA,EAC9E,IAAI,CAAC,KAAK,IAAI,QAAQ,KAAK,QAAQ;AAAA,IAAW,KAAK,IAAI,UAAU,GAAG;AAAA,EACpE,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC;AAAA;AAIzB,IAAM,SAAS,CAAC,UACrB,CAAC,GAAG,IAAI,IAAI,MAAM,MAAM,SAAS,EAAE,OAAO,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,EAC5D,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,EAC9B,KAAK,EACL,KAAK,GAAG;AAGN,IAAM,cAAc,CAAC,UAC1B,MACG,MAAM,SAAS,EACf,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,GAAG;AAMN,IAAM,kBAAkB,CAAC,UAAkB,MAAM,QAAQ,QAAQ,EAAE;AAGnE,IAAM,eAA8E;AAAA,EACzF,MAAM;AAAA,EACN,OAAO;AAAA,EACP,SAAS;AAAA,EACT,OAAO;AAAA,EACP,UAAU;AAAA,EACV,UAAU;AAAA,EACV,aAAa;AAAA,EACb,UAAU;AAAA,EACV,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,SAAS;AAAA,EACT,MAAM;AAAA,EACN,MAAM;AAAA,EACN,UAAU;AAAA,EACV,KAAK;AACP;AAGO,IAAM,YAAiC,IAAI,IAAI;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,IAAM,kBAAoD;AAAA,EAC/D,MAAM;AAAA,EACN,OAAO;AAAA,EACP,SAAS;AAAA,EACT,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,KAAK;AACP;AAGO,IAAM,aAAa,CAAC,KAAa,UAA0B;AAAA,EAChE,MAAM,QAAO,aAAa;AAAA,EAC1B,IAAI,UAAS;AAAA,IAAU,OAAO,OAAO,OAAO,KAAK,CAAC;AAAA,EAClD,IAAI,UAAS;AAAA,IAAQ,OAAO,eAAe,KAAK;AAAA,EAChD,IAAI,QAAQ;AAAA,IAAe,OAAO,gBAAgB,KAAK;AAAA,EACvD,IAAI,QAAQ;AAAA,IAAY,OAAO,WAAW,UAAU,OAAO,UAAU,CAAC;AAAA,EACtE,IAAI,QAAQ,gBAAgB,QAAQ;AAAA,IAAgB,OAAO,YAAY,KAAK;AAAA,EAC5E,IAAI,QAAQ;AAAA,IAAW,OAAO,eAAe,OAAO,OAAO;AAAA,EAC3D,IAAI,QAAQ;AAAA,IAAQ,OAAO,OAAO,KAAK;AAAA,EACvC,OAAO;AAAA;;;ACrFF,IAAM,WAAgC,IAAI,IAAI;AAAA,EACnD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,UAAU;AAAA,EACrB,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AACP;AAKO,IAAM,aAAa,CAAC,QAA8D;AAAA,EACvF,MAAM,QAAQ,6BAA6B,KAAK,GAAG;AAAA,EACnD,IAAI,UAAU;AAAA,IAAM;AAAA,EACpB,MAAM,SAAS,MAAM;AAAA,EACrB,MAAM,QAAQ,OAAO,MAAM,EAAE;AAAA,EAC7B,OAAO,QAAQ,QAAQ,UAAU,CAAC,QAAQ,KAAK,IAAI;AAAA;AAI9C,IAAM,aAAkC,IAAI,IAAI;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,IAAM,gBAAgB,CAAC,OAAiB,QAC5C,MAA6C;AAGzC,IAAM,eAAe,CAAC,UAC3B,OAAO,KAAK,KAAK,EACd,OAAO,CAAC,QAAQ,CAAC,WAAW,IAAI,GAAG,KAAK,cAAc,OAAO,GAAG,MAAM,SAAS,EAC/E,KAAK;AAGH,IAAM,YAAY,CAAC,UACxB,UAAU,OAAO,MAAM,UAAU,QAAQ,MAAM,OAAO,KAAK;AAStD,IAAM,eAAe,CAAC,QAC3B,aAAa,SAAS,aACtB,QAAQ,kBACR,QAAQ,YACR,WAAW,GAAG,MAAM;AAUf,IAAM,eAAe,CAAC,SAA0D;AAAA,EACrF,MAAM,MAA8B,CAAC;AAAA,EACrC,YAAY,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;AAAA,IAC/C,IAAI,CAAC,aAAa,GAAG,KAAK,SAAS,IAAI,GAAG;AAAA,MAAG;AAAA,IAC7C,IAAI,UAAU,QAAQ,UAAU,aAAa,OAAO,UAAU;AAAA,MAAU;AAAA,IACxE,IAAI,OAAO,UAAU,KAAK;AAAA,EAC5B;AAAA,EACA,OAAO;AAAA;AAIF,IAAM,YAAY,CAAC,SAA4C;AAAA,EACpE,MAAM,MAAM,KAAK;AAAA,EACjB,IAAI,CAAC,MAAM,QAAQ,GAAG;AAAA,IAAG,OAAO,CAAC;AAAA,EACjC,OAAO,IACJ,IAAI,CAAC,SAAmB,MAAM,QAAQ,IAAI,IAAI,OAAO,KAAK,EAAE,IAAI,EAAG,EACnE,OAAO,CAAC,QAAQ,QAAQ,EAAE;AAAA;;;AC9L/B,IAAM,WAAW;AAEjB,IAAM,QAA0C;AAAA,EAC9C,GAAG,QAAQ;AAAA,EACX,GAAG;AAAA,EACH,GAAG,QAAQ;AAAA,EACX,GAAG,QAAQ;AACb;AAGO,IAAM,YAAY,CAAC,UAAqC;AAAA,EAC7D,MAAM,QAAQ,6BAA6B,KAAK,MAAK,KAAK,CAAC;AAAA,EAC3D,IAAI,UAAU;AAAA,IAAM;AAAA,EACpB,OAAO,KAAK,MAAM,OAAO,MAAM,EAAE,KAAK,MAAM,OAAO,YAAY,IAAK,MAAM,MAAM,OAAO,EAAG;AAAA;AAkBrF,IAAM,cAAc,CAAC,UAAyB;AAAA,EACnD,OAAO,SAAS,MAAM,OAAM,QAAQ;AAAA,EACpC,MAAM,OAAO,QAAQ,OAAO,WAAW,MAAM,KAAK;AAAA,EAClD,MAAM,UAAU,UAAU,OAAM,UAAU,QAAQ;AAAA,EAClD,QAAQ,OAAO,QAAQ;AAAA,EACvB,MAAM,WAAW,QAAQ,IAAI,MAAM;AAAA,EACnC,QAAQ,OAAO,MAAM;AAAA,EACrB,MAAM,QAAQ,SAAS,KAAK,IAAI;AAAA,EAChC,IAAI,UAAU,MAAM;AAAA,IAClB,MAAM,MAAM,GAAG,MAAM,MAAM;AAAA,IAC3B,OAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA,MAAM,UAAU,GAAG;AAAA,MACnB,UAAU;AAAA,MACV,QAAQ,MAAM,MAAM;AAAA,MACpB,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EACA,MAAM,OAAO,aAAa,YAAY,YAAY,UAAU,QAAQ;AAAA,EACpE,IAAI,KAAK,WAAW,GAAG,GAAG;AAAA,IACxB,MAAM,QAAO,KAAK,WAAW,OAAO,IAAI,WAAW;AAAA,IACnD,OAAO,EAAE,aAAM,SAAS,MAAM,UAAU,QAAQ,MAAM,SAAS,GAAG;AAAA,EACpE;AAAA,EACA,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,EAC3B,OAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,KAAK,OAAO,KAAK,MAAM,GAAG,EAAE;AAAA,IAC3C,SAAS,OAAO,KAAK,KAAK,KAAK,MAAM,KAAK,CAAC;AAAA,EAC7C;AAAA;AAaK,IAAM,aAAa,CAAC,WAAmB,OAAO,SAAS,UAAU,OAAO,SAAS;AAOxF,IAAM,UAAU,CAAC,MAAc,aAAqB;AAAA,EAClD,MAAM,QAAQ,CAAC,GAAG,KAAK,UAAU,KAAK,SAAS;AAAA,EAC/C,YAAY,KAAK,UAAU,SAAS;AAAA,IAAS,MAAM,KAAK,GAAG,OAAO,OAAO;AAAA,EACzE,IAAI,KAAK,aAAa;AAAA,IAAW,MAAM,KAAK,QAAQ,KAAK,UAAU;AAAA,EACnE,OAAO,MAAM,KAAK,GAAG;AAAA;AAGhB,IAAM,cAAc,CAAC,KAAa,UAAkB,SAAgC;AAAA,EACzF,MAAM,OAAO,YAAY,QAAQ;AAAA,EACjC,MAAM,OAAO,YAAY,IAAI;AAAA,EAC7B,IAAI,WAAW,IAAI,KAAK,WAAW,IAAI,GAAG;AAAA,IACxC,MAAM,QACJ,KAAK,SAAS,KAAK,QAAQ,KAAK,WAAW,KAAK,UAAU,QAAQ,KAAK,SAAS,KAAK,OAAO;AAAA,IAC9F,OAAO,QAAO,CAAC,IAAI,EAAE,UAAU,KAAK;AAAA,EACtC;AAAA,EACA,IAAI,KAAK,WAAW,KAAK,QAAQ;AAAA,IAC/B,OAAO;AAAA,MACL,QACE,GAAG,yBAAyB,KAAK,uBAAuB,KAAK,0BAC7D;AAAA,IACJ;AAAA,EACF;AAAA,EACA,IAAI,KAAK,SAAS,YAAY,KAAK,YAAY,KAAK,SAAS;AAAA,IAC3D,OAAO;AAAA,MACL,QACE,GAAG,wBAAwB,KAAK,2BAA2B,KAAK,+BAChE;AAAA,IACJ;AAAA,EACF;AAAA,EACA,IAAI;AAAA,EACJ,IAAI,KAAK,SAAS,aAAa,KAAK,SAAS,aAAa,KAAK,SAAS,KAAK,MAAM;AAAA,IACjF,IAAI,KAAK,OAAO,KAAK,MAAM;AAAA,MACzB,OAAO;AAAA,QACL,QACE,GAAG,iBAAiB,KAAK,YAAY,kCACrC,GAAG,KAAK,YAAY,uEACpB;AAAA,MACJ;AAAA,IACF;AAAA,IACA,SAAS,KAAK;AAAA,EAChB;AAAA,EACA,MAAM,MAAM,QAAQ,KAAK,SAAS,KAAK,OAAO,IAAI,YAAY,QAAQ,MAAM,IAAI;AAAA,EAChF,OAAO;AAAA,OACD,QAAQ,YAAY,CAAC,IAAI,EAAE,IAAI;AAAA,OAC/B,WAAW,YAAY,CAAC,IAAI,EAAE,OAAO;AAAA,EAC3C;AAAA;;;ACnGF,IAAM,QAAO,CAAC,UACZ,UAAU,aAAa,UAAU,OAAO,YAAY,UAAU,KAAK;AAG9D,IAAM,WAAW,CAAC,MAAc,KAAa,OAAe,QACjE,GAAG,QAAQ,kFACX,aAAa,OAAO,IAAI,KAAK,UAAU,KAAK,YAAY,QAAQ,KAAK,QAAQ,gBAC7E;AAGF,IAAM,cAAc,CAAC,UACnB,IAAI,IACF,MAAM,KAAK,EAAE,IAAI,EAAE,KAAK,WAAW,CAAC,KAAK,QAAQ,UAAU,QAAQ,eAAe,KAAK,CAAC,CAAC,CAC3F;AASK,IAAM,mBAAmB,CAC9B,MACA,MACA,iBACY;AAAA,EACZ,IAAI,CAAC;AAAA,IAAc,OAAO;AAAA,EAC1B,MAAM,OAAO,YAAY,IAAI;AAAA,EAC7B,IAAI,SAAS;AAAA,IAAW,OAAO,EAAE,KAAK,SAAS,KAAM,KAAK,SAAS,KAAK,KAAK,IAAI,SAAS;AAAA,EAC1F,MAAM,OAAO,YAAY,IAAI;AAAA,EAC7B,MAAM,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC;AAAA,EACrD,OAAO,CAAC,GAAG,IAAI,EAAE,KACf,CAAC,QAAQ,QAAQ,cAAc,KAAK,IAAI,GAAG,KAAK,SAAS,KAAK,IAAI,GAAG,KAAK,GAC5E;AAAA;AAGK,IAAM,aAAa,CAAC,iBACzB,eAAe,kCAAkC;AAE5C,IAAM,QAAQ,CAAC,OAAiB,SAA6C;AAAA,EAClF,MAAM,MAA8B,CAAC;AAAA,EACrC,MAAM,QAAkB,CAAC;AAAA,EACzB,MAAM,SAA2C,CAAC;AAAA,EAClD,MAAM,SAAmB,CAAC;AAAA,EAC1B,MAAM,QAAQ,IAAI;AAAA,EAClB,MAAM,eAAe,KAAK,KAAK,iBAAiB,KAAK;AAAA,EAErD,WAAW,OAAO,aAAa,KAAK,GAAG;AAAA,IACrC,MAAM,OAAO,UAAU,cAAc,OAAO,GAAG,CAAC;AAAA,IAChD,MAAM,OAAO,MAAK,KAAK,IAAI;AAAA,IAC3B,MAAM,UAAU,WAAW,GAAG;AAAA,IAE9B,IAAI,QAAQ,gBAAgB;AAAA,MAC1B,IAAI,eAAe,IAAI,MAAM,eAAe,QAAQ,GAAG,GAAG;AAAA,QACxD,MAAM,IAAI,GAAG;AAAA,QACb,OAAO,KACL,sBAAsB,QAAQ,iBAAiB,6CAC7C,uFACJ;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,IAEA,IAAI,QAAQ,YAAY,UAAU,OAAO,MAAM;AAAA,MAC7C,IAAI,SAAS,IAAI;AAAA,QACf,IAAI,SAAS;AAAA,UAAW;AAAA,QACxB,MAAM,IAAI,GAAG;AAAA,QACb,OAAO,KACL,GAAG,4EACL;AAAA,MACF,EAAO,SAAI,SAAS,WAAW;AAAA,QAC7B,MAAM,IAAI,GAAG;AAAA,QACb,IAAI,WAAW,YAAY,IAAI,CAAC,GAAG;AAAA,UACjC,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,+BAA+B,CAAC;AAAA,QAC9E,EAAO;AAAA,cAAI,OAAO;AAAA,MACpB,EAAO;AAAA,QACL,MAAM,UAAU,YAAY,KAAK,MAAM,IAAI;AAAA,QAC3C,IAAI,QAAQ,WAAW;AAAA,UAAW,OAAO,KAAK,QAAQ,MAAM;AAAA,QAC5D,IAAI,QAAQ,aAAa,MAAM;AAAA,UAC7B,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,+BAA+B,CAAC;AAAA,QAC9E;AAAA,QACA,IAAI,QAAQ,QAAQ;AAAA,UAAW,IAAI,OAAO,QAAQ;AAAA,QAClD,IAAI,QAAQ,WAAW;AAAA,UAAW,OAAO,KAAK,EAAE,MAAM,KAAK,MAAM,QAAQ,OAAO,CAAC;AAAA,QACjF,IAAI,OAAO,KAAK,OAAO,EAAE,SAAS;AAAA,UAAG,MAAM,IAAI,GAAG;AAAA;AAAA,MAEpD;AAAA,IACF;AAAA,IAEA,IAAI,UAAU,OAAO,OAAO;AAAA,MAC1B,MAAM,QAAO,SAAS,KAAK,SAAS,YAAY,SAAS,aAAa,QAAQ,MAAM,IAAI;AAAA,MACxF,IAAI,CAAC,OAAM;AAAA,QACT,MAAM,IAAI,GAAG;AAAA,QACb,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,qBAAqB,CAAC;AAAA,MACpE;AAAA,MACA;AAAA,IACF;AAAA,IAEA,IAAI,UAAU,OAAO,OAAO;AAAA,MAC1B,IAAI,SAAS,IAAI;AAAA,QACf,IAAI,SAAS,WAAW;AAAA,UACtB,MAAM,IAAI,GAAG;AAAA,UACb,MAAM,KAAK,GAAG;AAAA,QAChB;AAAA,MACF,EAAO,SAAI,SAAS,WAAW;AAAA,QAC7B,MAAM,IAAI,GAAG;AAAA,QACb,IAAI,OAAO;AAAA,MACb,EAAO;AAAA,QACL,MAAM,OAAO,QAAQ,MAAM,IAAI;AAAA,QAC/B,IAAI,CAAC,QAAQ,KAAK,MAAM,KAAK,IAAI,GAAG;AAAA,UAClC,MAAM,IAAI,GAAG;AAAA,UACb,IAAI,OAAO,SAAS,MAAM,IAAI;AAAA,QAChC;AAAA;AAAA,MAEF;AAAA,IACF;AAAA,IAEA,IAAI,CAAC,aAAa,GAAG,GAAG;AAAA,MACtB,MAAM,IAAI,GAAG;AAAA,MACb,OAAO,KAAK,GAAG,8CAA8C;AAAA,MAC7D;AAAA,IACF;AAAA,IAEA,MAAM,SAAS,SAAS,KAAK,KAAK,WAAW,KAAK,IAAI;AAAA,IACtD,MAAM,UAAU,QAAQ,gBAAgB;AAAA,IACxC,MAAM,MAAM,YAAY,YAAY,KAAK,WAAW,KAAK,OAAO;AAAA,IAChE,IAAI,WAAW;AAAA,MAAK;AAAA,IACpB,MAAM,IAAI,GAAG;AAAA,IAEb,MAAM,OAAO,QAAQ,aAAa,SAAS;AAAA,IAC3C,IAAI,QAAQ,cAAc,iBAAiB,QAAQ,IAAI,QAAQ,WAAW,YAAY,GAAG;AAAA,MACvF,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,WAAW,YAAY,CAAC,CAAC;AAAA,IACvE,EAAO,SAAI,SAAS,MAAM,UAAU,IAAI,GAAG,GAAG;AAAA,MAC5C,MAAM,KAAK,GAAG;AAAA,IAChB,EAAO,SAAI,SAAS,IAAI;AAAA,MACtB,OAAO,KAAK,GAAG,2DAA2D;AAAA,IAC5E,EAAO;AAAA,UAAI,OAAO;AAAA,EACpB;AAAA,EACA,OAAO,EAAE,OAAO,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,GAAG,KAAK,QAAQ,OAAO;AAAA;AAIhE,IAAM,UAAU,CAAC,MAAc,SAC7B,WAAW,UAAU,MAAM,OAAO,MAAM,CAAC,MAAM,WAAW,UAAU,MAAM,OAAO,MAAM,CAAC;;;ACtK1F,IAAM,iBAAiB,CAAC,KAAa,UACnC,GAAG,QAAQ,kFACX,gGACA;AAGK,IAAM,iBAAiB,CAAC,UAA8B;AAAA,EAC3D,MAAM,SAAmB,CAAC;AAAA,EAC1B,IAAI,MAAM,eAAe,aAAa,MAAM,eAAe,IAAI;AAAA,IAC7D,OAAO,KACL,MAAM,OAAO,MAAM,IAAI,uBAAuB,MAAM,sCAClD,kFACJ;AAAA,EACF;AAAA,EACA,MAAM,eAAe,MAAM,iBAAiB,YAAY,OAAO,KAAK,MAAM,YAAY;AAAA,EACtF,WAAW,OAAO,aAAa,KAAK,GAAG;AAAA,IACrC,MAAM,QAAQ,UAAU,cAAc,OAAO,GAAG,CAAC;AAAA,IACjD,MAAM,SAAS,WAAW,GAAG,IAAI;AAAA,IAGjC,IAAI,CAAC,aAAa,GAAG;AAAA,MAAG,OAAO,KAAK,GAAG,8CAA8C;AAAA,IACrF,IAAI,UAAU;AAAA,MAAI;AAAA,IAClB,IAAI,WAAW;AAAA,MAAO,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,OAAO,qBAAqB,CAAC;AAAA,IACzF,MAAM,SAAS,WAAW,QAAQ,QAAQ,WAAW,YAAY,KAAK,IAAI;AAAA,IAC1E,IAAI,WAAW,aAAa,WAAW,MAAM,GAAG;AAAA,MAC9C,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,OAAO,+BAA+B,CAAC;AAAA,IAC/E;AAAA,IACA,IAAI,QAAQ,SAAS;AAAA,MAAU,OAAO,KAAK,eAAe,KAAK,KAAK,CAAC;AAAA,IACrE,IAAI,QAAQ,cAAc,iBAAiB,IAAI,OAAO,YAAY,GAAG;AAAA,MACnE,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,OAAO,WAAW,YAAY,CAAC,CAAC;AAAA,IACxE;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAIF,IAAM,cAAa,CAAC,UAA4C;AAAA,EACrE,MAAM,OAA+B,EAAE,MAAM,OAAO,MAAM,IAAI,EAAE;AAAA,EAChE,IAAI,MAAM,eAAe;AAAA,IAAW,KAAK,gBAAgB,MAAM;AAAA,EAC/D,IAAI,MAAM,UAAU;AAAA,IAAW,KAAK,WAAW,UAAU,MAAM,KAAK;AAAA,EACpE,WAAW,OAAO,aAAa,KAAK,GAAG;AAAA,IACrC,MAAM,QAAQ,UAAU,cAAc,OAAO,GAAG,CAAC;AAAA,IACjD,IAAI,UAAU;AAAA,MAAI;AAAA,IAClB,KAAK,OAAO,QAAQ,aAAa,WAAW,KAAK,KAAK,IAAI;AAAA,EAC5D;AAAA,EACA,OAAO;AAAA;;;ACnET,IAAM,QAAQ,CAAC,MAAe,QAAyB;AAAA,EACrD,MAAM,QAAkB,KAAiC;AAAA,EACzD,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,QAAQ;AAAA;AAcnE,IAAM,mBAAmB,CAC9B,MACA,MACA,WACa;AAAA,EACb,MAAM,MAAM,QAAQ,QAAQ,KAAK;AAAA,EACjC,MAAM,OAAO,MAAM,MAAM,MAAM;AAAA,EAC/B,MAAM,WAAW,MAAM,MAAM,YAAY;AAAA,EACzC,MAAM,UAAoB,CAAC;AAAA,EAC3B,IAAI,SAAS,aAAa,SAAS,KAAK;AAAA,IACtC,QAAQ,KACN,SAAS,OAAO,GAAG,QAAQ,OAAO,IAAI,iDACpC,2DACJ;AAAA,EACF;AAAA,EACA,IAAI,aAAa,aAAa,KAAK,eAAe,aAAa,aAAa,KAAK,YAAY;AAAA,IAC3F,QAAQ,KAAK,2EAA2E;AAAA,EAC1F;AAAA,EACA,OAAO;AAAA;;;ACtBT;;;ACKA;AAWO,IAAM,WAAW,CACtB,OACA,aAEO,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,MAAM,WAAW;AAAA,IAAW,OAAO;AAAA,EACvC,MAAM,aAAa,OAAO,mBAAmB,MAAM,KAAK,MAAM,UAAU;AAAA,EACxE,IAAI,eAAe,aAAa,WAAW,aAAa;AAAA,IAAM,OAAO;AAAA,EACrE,IAAI,WAAW,SAAS,aAAa,WAAW,SAAS;AAAA,IAAM,OAAO;AAAA,EACtE,OAAO,EAAE,OAAO,WAAW,OAAO,SAAQ,WAAW,KAAK,CAAC;AAAA,CAC5D;;;ACpBH;;;ACkBA;AA2BA,IAAM,aAAa,CAAC,QAAmB,SAC9B,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,SAAS;AAAA,EAQtB,MAAM,aAAa,OAAO,OAAO,QAAQ,MAAM;AAAA,EAC/C,MAAM,WAAY,OAAO,gBAAgB,QAAQ,YAAY,OAAO,IAAI;AAAA,EACxE,OAAO,KAAK,SAAS,OAAO;AAAA,CAC7B;AAYI,IAAM,eAAe,CAAC,SAAiB;AAAA,EAC5C,IAAI,SAAS;AAAA,IAAI,OAAO;AAAA,EACxB,MAAM,UAAU,KACb,MAAM;AAAA,CAAI,EACV,OACC,CAAC,UACE,KAAK,WAAW,GAAG,KAAK,KAAK,WAAW,GAAG,MAC5C,CAAC,KAAK,WAAW,KAAK,KACtB,CAAC,KAAK,WAAW,KAAK,CAC1B,EAAE;AAAA,EACJ,OAAO,KAAK,IAAI,SAAS,CAAC;AAAA;AAIrB,IAAM,eAAe,CAAC,QAAmB,SAC9C,WAAW,QAAQ,IAAI,EAAE,KAAY,aAAI,YAAY,CAAC;AAmBxD,IAAM,gBAAgB,CAAC,WACrB,IAAiB,QAAQ,QAAQ,OAAO,gBAAgB,EAAE,KACjD,aAAI,CAAC,SAAS;AAAA,EACnB,MAAM,MAAM,QAAQ,CAAC;AAAA,EACrB,MAAM,UAAU,IAAI,KAAK,CAAC,QAAQ,IAAI,SAAS,SAAS;AAAA,EACxD,OAAO;AAAA,IACL,SAAS,IACN,OAAO,CAAC,QAAQ,IAAI,SAAS,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,EACxD,IAAI,CAAC,QAAQ,KAAK,IAAI,MAAM,WAAW,CAAC;AAAA,IAC3C,SAAS,YAAY,YAAY,OAAO,KAAK,QAAQ,OAAO;AAAA,EAC9D;AAAA,CACD,CACH;AAgBK,IAAM,iBAAiB,CAAC,WAC7B,cAAc,MAAM,EAAE,KACb,aAAI,CAAC,WACV,OAAO,WAAW,OAAO,QAAQ,WAAW,IACxC,YACA,WAAW,OAAO,OAAO,OAAO,cAAc,OAAO,QAAQ,KAAK,IAAI,IAC5E,CACF;AAMK,IAAM,cACX;AACF,IAAM,gBAAgB;AAStB,IAAM,WAAW;AAsBV,IAAM,YAAY,CACvB,QACA,YACA,MACA,MAEA,WAAmB,aAEZ,aAAI,UAAU,GAAG;AAAA,EAUtB,MAAM,OAAO,SAAS,cAAc;AAAA,EACpC,SAAS,UAAU,EAAG,UAAU,UAAU,WAAW,GAAG;AAAA,IAWtD,MAAM,SAAS,OAAO,QAAoB,QAAQ,YAAY,OAAO,IAAI,EAAE,KAClE,uBAAc,MAAG;AAAA,MAAG;AAAA,KAAS,CACtC;AAAA,IACA,IAAI,WAAW;AAAA,MAAW,OAAO;AAAA,IACjC,IAAI,OAAO,WAAW;AAAA,MAAW,OAAO,KAAK,OAAO,YAAY,4BAA4B;AAAA,IAC5F,OAAc,eAAM,UAAU;AAAA,EAChC;AAAA,EACA,OAAO;AAAA,CACR;;;AD1MI,MAAM,wBAAwB,MAAM;AAAA,EACvB,OAAO;AAC3B;AAKO,IAAM,YAAY,CAAC,UAAoB,SAAS,MAAM,YAAY,OAAO,MAAM,IAAI;AAgB1F,IAAM,gBAAgB;AAAA,EACpB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAGA,IAAM,eAAe;AACrB,IAAM,aAAa;AAEnB,IAAM,gBAAgB,CAAC,UACrB,iBAAiB,YAAY,MAAM,WAAW;AAMzC,IAAM,WAAW,CAAC,UAChB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,SAAS,OAAO,IACpB,MAAM,QACN,QACA,OACA,GAAG,UAAU,KAAK,UACpB,EAAE,KACO,aAAI,CAAC,UAAU,EAAE,MAAM,OAAO,UAAU,EAAE,GAC1C,iBAAQ,eAAe,CAAC,UAAiB,iBAAQ,EAAE,MAAM,WAAW,MAAM,CAAC,CAAC,CACrF;AAAA,EACA,IAAI,OAAO,SAAS,aAAa,OAAO,SAAS;AAAA,IAAM,OAAO,OAAO;AAAA,EACrE,MAAM,OAAO,OAAO,IAClB,MAAM,QACN,QACA,OACA,2BACF;AAAA,EAGA,MAAM,SAAS,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,OAAO,IAAI,IAAI,MAAM,MAAM,IAAI;AAAA,EACxE,IAAI,UAAU,aAAa,MAAM,SAAS,MAAM,QAAQ,MAAM,SAAS,OAAO;AAAA,IAC5E,OAAO,OAAc,cACnB,OAAO,SACL,IAAI,gBAAgB,MAAM,OAAO,MAAM,IAAI,wCAAwC,CACvF;AAAA,EACF;AAAA,EACA,IAAI,UAAU,WAAW;AAAA,IACvB,OAAO,OAAc,cACnB,IAAI,gBACF,QAAQ,OAAO,MAAM,IAAI,UAAU,KAAK,MAAM,MAAM,OAAO,UACzD,GAAG,KAAK,MAAM,MAAM,GAAG,yBAAyB,MAAM,iCACtD,oFACJ,CACF;AAAA,EACF;AAAA,EACA;AAAA,CACD;AAEI,IAAM,gBAAe,CAAC,OAAiB,UAAkD;AAAA,EAC9F,QAAQ,aAAa,IAAI;AAAA,EACzB,MAAM,MAAM;AAAA,EACZ,SAAS,UAAU,IAAI;AAAA,EACvB,MAAM,MAAM;AACd;AAGA,IAAM,OAAO,CACX,OACA,QACA,MACA,MACA,OACA,SAEO,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,aAAa,OAAO,KAAK,MAAM,QAAQ,WAAW;AAAA,EACxD,MAAM,OAAO,KAAK,OAAO,QAAgB,MAAM,QAAQ,YAAY,QAAQ,MAAM,IAAI,CAAC;AAAA,EACtF,IAAI,SAAS,IAAI;AAAA,IACf,OAAO,OAAc,cACnB,IAAI,gBACF,GAAG,qFACL,CACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,OAAO,UAAU,MAAM,QAAQ,YAAY,MAAM,MAAM,MAAM,KAAK;AAAA,EAC/E,IAAI,SAAS,MAAM;AAAA,IACjB,OAAO,OAAc,cACnB,IAAI,gBACF,GAAG,cAAc,eAAe,kCAAkC,MAAM,gBACtE,GAAG,6CACP,CACF;AAAA,EACF;AAAA,CACD;AAGI,IAAM,cAAc,CAAC,UACnB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,YAAW,KAAK;AAAA,EAQ7B,OAAO,UAAU,cAAc,QAAQ,MAAM,IAAI;AAAA,EACjD,OAAO,OAAO,KACZ,OACA,QACA,SAAS,MAAM,YACf,aAAa,OAAO,MAAM,IAAI,KAC9B,cACA,IACF;AAAA,CACD;AAYI,IAAM,cAAc,CAAC,OAAiB,QAAmB,WACvD,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,OAAO,KAAK,OAAO,GAAG,EAAE,SAAS,KAAK,OAAO,MAAM,SAAS,GAAG;AAAA,IACjE,MAAM,OAAO,WACX,KAAK,OAAO,QAAS,WAAW,KAAK,CAAC,IAAI,EAAE,OAAO,EAAG,GACtD,OAAO,KACT;AAAA,IAEA,OAAO,UAAU,cAAc,QAAQ,MAAM,KAAK;AAAA,IAClD,OAAO,IAAI,MAAM,QAAQ,aAAa,OAAO,GAAG,UAAU,KAAK,YAAY,IAAI;AAAA,EACjF;AAAA,EACA,WAAW,QAAQ,OAAO,QAAQ;AAAA,IAChC,MAAM,QAAQ,EAAE,MAAM,KAAK,MAAM,MAAM,KAAK,KAAK;AAAA,IAGjD,OAAO,UAAU,cAAc,QAAQ,OAAO,IAAI;AAAA,IAClD,OAAO,KACL,OACA,OACA,GAAG,UAAU,KAAK,YAClB,QAAQ,KAAK,cAAc,OAAO,MAAM,IAAI,QAAQ,KAAK,QACzD,YACA,KACF;AAAA,EACF;AAAA,CACD;AAYI,IAAM,eAAe,CAAC,OAAiB,aACrC,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,OAAO,SAAS,KAAK;AAAA,EAClC,IAAI,SAAS;AAAA,IAAW;AAAA,EACxB,MAAM,QAAQ,MAAM,UAAU,IAAI,EAAE;AAAA,EACpC,IAAI,MAAM,SAAS,GAAG;AAAA,IACpB,OAAO,OAAc,cACnB,IAAI,gBACF,cAAc,OAAO,MAAM,IAAI,mBAAmB,MAAM,qCACtD,gBAAgB,MAAM,KAAK,IAAI,qDAC/B,8EACJ,CACF;AAAA,EACF;AAAA,EACA,OAAO,KAAK,OAAO,UAAU,UAAU,KAAK,GAAG,cAAc,OAAO,MAAM,IAAI,KAAK,UAAU;AAAA,CAC9F;;;AFpNI,IAAM,kBAAkB,CAAC,OAAiB,UAC/C,MAAM,OAAO,MAAM,IAAI,QAAQ,MAAM,kCAAkC,MAAM,KAAK,IAAI,WACtF,gGACA,+FACA;AAMK,IAAM,qBAAqB,CAChC,OACA,OACA,MACA,WAEO,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,OAAO,MAAM,WAAW;AAAA,IAAG;AAAA,EAC/B,MAAM,WAAU,CAAC,aACR,cAAK,MAAM,MAAM,UAAsB,IAAI,EAAE,MAAM,WAAW,CAAC;AAAA,EACxE,IAAI,EAAE,OAAO,SAAS,OAAO,QAAO;AAAA,IAAI;AAAA,EACxC,OAAO,OAAc,cAAK,IAAI,gBAAgB,gBAAgB,OAAO,OAAO,KAAK,CAAC,CAAC;AAAA,CACpF;;;AZeI,IAAM,aAAa,WAAqB,eAAe,EAAE,sBAAsB,SAAS,CAAC;AAKhG,IAAM,UAAU,CAAC,YACR,cAAK,IAAI,gBAAgB,QAAQ,KAAK;AAAA,CAAI,CAAC,CAAC;AAQrD,IAAM,OAAO,CAAC,OAAiB,MAAuB,SAC7C,aAAI,UAAU,GAAG;AAAA,EACtB,QAAQ,WAAW;AAAA,EACnB,MAAM,YAAW,iBAAiB,MAAM,MAAM,MAAM;AAAA,EACpD,IAAI,UAAS,SAAS;AAAA,IAAG,OAAO,OAAO,QAAQ,SAAQ;AAAA,EACvD,IAAI,WAAW;AAAA,IAAW;AAAA,EAC1B,IAAI,CAAC,aAAW,IAAI;AAAA,IAAG;AAAA,EACvB,MAAM,OAAO,OAAO,SAAS,IAAI;AAAA,EAKjC,IAAI,SAAS,WAAW;AAAA,IACtB,MAAM,WAAW,eAAe,IAAI;AAAA,IACpC,IAAI,SAAS,SAAS;AAAA,MAAG,OAAO,OAAO,QAAQ,QAAQ;AAAA,IACvD,OAAc,oBACZ,eAAe,KAAK,QAAQ,OAAO,KAAK,IAAI,6CAC1C,6EACJ;AAAA,IACA,OAAO,EAAE,QAAQ,SAAS;AAAA,EAC5B;AAAA,EACA,MAAM,SAAS,MAAM,MAAM,IAAI;AAAA,EAC/B,OAAO,mBAAmB,OAAO,MAAM,MAAM,MAAM;AAAA,EACnD,IAAI,OAAO,OAAO,SAAS;AAAA,IAAG,OAAO,OAAO,QAAQ,OAAO,MAAM;AAAA,EACjE,MAAM,QAAQ,KAAK,SAAS,OAAO;AAAA,EACnC,IAAI,OAAO,MAAM,WAAW,KAAK,CAAC;AAAA,IAAO,OAAO,EAAE,QAAQ,OAAO;AAAA,EACjE,MAAM,OACJ,OAAO,MAAM,WAAW,IACpB,mBAAmB,KAAK,iBAAiB,OAAO,qCAChD,qBACA,+CAA+C,OAAO,MAAM,KAAK,IAAI,YACrE;AAAA,EACN,OAAc,oBAAW,eAAe,KAAK,QAAQ,OAAO,KAAK,IAAI,MAAM,MAAM;AAAA,EACjF,OAAO,EAAE,QAAQ,SAAS;AAAA,CAC3B;AAoBH,IAAM,YAAY,CAAC,OAAiB,SAC3B,aAAI,UAAU,GAAG;AAAA,EACtB,QAAQ,WAAW;AAAA,EACnB,MAAM,YAAW,iBAAiB,MAAM,MAAM,MAAM;AAAA,EACpD,IAAI,UAAS,SAAS;AAAA,IAAG,OAAO,OAAO,QAAQ,SAAQ;AAAA,EACvD,MAAM,OAAO,OAAO,SAAS,IAAI;AAAA,EACjC,IAAI,SAAS,WAAW;AAAA,IACtB,MAAM,WAAW,eAAe,IAAI;AAAA,IACpC,IAAI,SAAS,SAAS;AAAA,MAAG,OAAO,OAAO,QAAQ,QAAQ;AAAA,IACvD,OAAO,YAAY,IAAI;AAAA,EACzB,EAAO;AAAA,IACL,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,eAAe,OAAO,kBAAkB,OAAO,KAAK,IAAI,QAAQ,KAAK,MAAM;AAAA,IACpF;AAAA,IACA,MAAM,SAAS,MAAM,MAAM,IAAI;AAAA,IAC/B,IAAI,WAAW,aAAa,OAAO,MAAM,SAAS,GAAG;AAAA,MACnD,OAAO,OAAO,QAAQ;AAAA,QACpB,MAAM,OAAO,KAAK,IAAI,uBAAuB,KAAK,yBAChD,GAAG,OAAO,MAAM,KAAK,IAAI,gEACzB;AAAA,MACJ,CAAC;AAAA,IACH;AAAA,IACA,OAAO,mBAAmB,OAAO,MAAM,MAAM,MAAM;AAAA,IACnD,IAAI,OAAO,OAAO,SAAS;AAAA,MAAG,OAAO,OAAO,QAAQ,OAAO,MAAM;AAAA,IACjE,IAAI,OAAO,MAAM,SAAS;AAAA,MAAG,OAAO,YAAY,MAAM,QAAQ,KAAK,KAAK,SAAS,CAAC;AAAA;AAAA,EAEpF,MAAM,QAAQ,OAAO,SAAS,IAAI;AAAA,EAClC,IAAI,UAAU,WAAW;AAAA,IACvB,OAAO,OAAO,QAAQ;AAAA,MACpB,MAAM,OAAO,KAAK,IAAI;AAAA,IACxB,CAAC;AAAA,EACH;AAAA,EACA,MAAM,OAAO,MAAM,MAAM,KAAK,EAAE;AAAA,EAChC,IAAI,KAAK,SAAS,GAAG;AAAA,IACnB,OAAO,OAAO,QAAQ;AAAA,MACpB,MAAM,OAAO,KAAK,IAAI,uBAAuB,KAAK,KAAK,IAAI,6BACzD,yFACA;AAAA,IACJ,CAAC;AAAA,EACH;AAAA,EACA,OAAO,cAAa,MAAM,KAAK;AAAA,CAChC;AAEH,IAAM,UAAU,CAAC,MAAgB,YAAiD;AAAA,EAChF,MAAM,QAAQ,QAAQ,KAAK;AAAA,EAC3B,QAAQ,KAAK;AAAA,EACb,MAAM,QAAQ,QAAQ,KAAK;AAC7B;AAeA,IAAM,OAAO,CAAC,OAAiB,SACtB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,QAAQ,QAAQ,MAAM,MAAM,MAAM;AAAA,EACxC,MAAM,OAAO,OAAO,SAAS,KAAK;AAAA,EAClC,IAAI,SAAS;AAAA,IAAW;AAAA,EACxB,MAAM,WAAiB,cAAK,MAAM,MAAM,MAAM,IAAI,EAAE,MAAM,WAAW,CAAC;AAAA,EACtE,OAAO,OAAO,UAAU,OAAO,cAAa,OAAO,IAAI,GAAG,QAAO;AAAA,CAClE;AAUH,IAAM,YAAW;AAAA,EACf,QAAQ,GAAG,MAAM,aACf,aAAa,QAAQ,MAAM,MAAM,GAAG,IAAI;AAAA,EAC1C,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,QAEA,KAAK,EAAE,KAAK,YAAY,OAAO,GAAG,MAAM,IAAI;AAAA,EAC9C,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,QAEA,KAAK,EAAE,KAAK,YAAY,OAAO,GAAG,IAAI;AAAA,EACxC,WAAW;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,QAEA,UAAU,EAAE,KAAK,YAAY,OAAO,GAAG,IAAI;AAC/C;AAEO,IAAM,qBAAqB,MACvB,kBACP,YACO,iBAAQ,WAAW,SAAS,GAAG,SAAQ,CAAC,EAAE,KAAY,aAAI,cAAc,CAAC,CAClF;;AgBrNF,qBAAS;AACT;AACA;;;ACVO,IAAM,SAAQ;AAErB,IAAM,MAAM,CAAC,UAA+B,UAAU,YAAY,YAAY,OAAO,KAAK;AAuBnF,IAAM,YAAW,CAAC,UAAiE;AAAA,EACxF,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,EAAE,KAAK,IAAI,MAAM,GAAG,GAAG,MAAM,MAAM,MAAM,SAAS,IAAI,MAAM,OAAO,EAAE;AAAA,SACzE;AAAA,MACH,OAAO;AAAA,QACL,mBAAmB,MAAM;AAAA,QACzB,QAAQ,MAAM;AAAA,QACd,eAAe,MAAM;AAAA,QACrB,iBAAiB,IAAI,MAAM,gBAAgB;AAAA,QAC3C,KAAK,IAAI,MAAM,GAAG;AAAA,QAClB,cAAc,MAAM;AAAA,QACpB,SAAS,IAAI,MAAM,OAAO;AAAA,MAC5B;AAAA,SACG;AAAA,MACH,OAAO;AAAA,QACL,oBAAoB,MAAM;AAAA,QAC1B,sBAAsB,IAAI,MAAM,qBAAqB;AAAA,QACrD,aAAa,MAAM;AAAA,QACnB,iBAAiB,MAAM;AAAA,QACvB,gBAAgB,IAAI,MAAM,eAAe;AAAA,MAC3C;AAAA;AAAA;AAWN,IAAM,eAAe,CAAC,UAAqD;AAAA,EACzE,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,CAAC;AAAA,SACL;AAAA,MACH,OAAO,EAAE,sBAAsB,MAAM,0BAA0B,QAAQ,MAAM,IAAI;AAAA,SAC9E;AAAA,MACH,OAAO,EAAE,mBAAmB,MAAM,uBAAuB,QAAQ,MAAM,IAAI;AAAA;AAAA;AAcjF,IAAM,YAAW,CAAC,WAAsD;AAAA,EACtE,SAAS,MAAM,YAAY,OAAO,MAAM;AAAA,EACxC,MAAM,OAAO,MAAM,IAAI;AAAA,EACvB,QAAQ,MAAM;AAAA,KACX,aAAa,KAAK;AACvB;AAEO,IAAM,QAAO,CAAC,UAA6B;AAAA,EAChD,MAAM,SAAS,UAAS,KAAK;AAAA,EAC7B,YAAY,QAAQ,UAAU,OAAO,QAAQ,UAAS,KAAK,CAAC,GAAG;AAAA,IAC7D,IAAI,UAAU;AAAA,MAAW,OAAO,UAAU;AAAA,EAC5C;AAAA,EACA,OAAO;AAAA;AAUF,IAAM,SAAS,CAAC,UAA6B;AAAA,EAClD,MAAM,QAAQ,OAAO,QAAQ,UAAS,KAAK,CAAC,EACzC,OAAO,IAAI,WAAW,UAAU,SAAS,EACzC,IAAI,EAAE,YAAY,MAAM;AAAA,EAC3B,OAAO,WAAW,MAAK,KAAK,GAAG,KAAK;AAAA;AAW/B,IAAM,cAAa,CAAC,WAA8B,KAAK,MAAK,KAAK,GAAG,MAAM,MAAM,KAAK;;;AChErF,IAAM,iBAAiB,CAAC,UAA+D;AAAA,EAC5F,oBAAoB,KAAK,KAAK,mBAAmB;AAAA,EACjD,sBAAsB,IAAI,KAAK,uBAAuB,MAAK;AAAA,EAC3D,aAAa,KAAK,KAAK,YAAY;AAAA,EACnC,iBAAiB,KAAK,KAAK,gBAAgB;AAAA,EAC3C,gBAAgB,IAAI,KAAK,iBAAiB,MAAK;AAAA,EAC/C,mBAAmB,KAAK,KAAK,oBAAoB,IAAI;AACvD;AASO,IAAM,cAAc,CACzB,YACA,UAEA,WAAW,yBAAyB,MAAM,uBAAuB,OACjE,WAAW,2BAA2B,MAAM,yBAAyB,WACrE,WAAW,kBAAkB,MAAM,gBAAgB,OACnD,WAAW,sBAAsB,MAAM,oBAAoB,OAC3D,WAAW,qBAAqB,MAAM,mBAAmB,WACzD,WAAW,wBAAwB,MAAM,uBAAuB;;;AF+B3D,IAAM,sBAAsB,WAA8B,sBAAsB;AAWvF,IAAM,cAAc,CAAC,YAAoC,UAAsC;AAAA,EAC7F,IAAI,MAAM,SAAS;AAAA,IAAiB,OAAO,YAAY,YAAY,KAAK;AAAA,EACxE,MAAM,SACJ,WAAW,SAAS,MAAM,OAAO,WAAU,WAAW,aAAa,MAAM,WAAW;AAAA,EACtF,IAAI,MAAM,SAAS;AAAA,IAAY,OAAO,UAAU,WAAW,UAAU,MAAM,QAAQ;AAAA,EACnF,OACE,UACA,WAAW,mBAAmB,MAAM,iBAAiB,OACrD,WAAW,kBAAkB,MAAM,gBAAgB,OACnD,WAAW,YAAY,MAAM,UAAU,OACvC,WAAW,wBAAwB,MAAM,sBAAsB,OAC/D,WAAW,sBAAsB,MAAM,oBAAoB,WAC3D,WAAW,2BAA2B,MAAM,0BAA0B;AAAA;AAI1E,IAAM,YAAW,YAAuD;AAAA,EACtE,YAAY,CAAC,MAAM,UAAU;AAAA,IAQ3B,MAAM,WAAW,KAAK,KAAK,OAAO;AAAA,IAClC,IAAI,aAAa,MAAM,aAAa,MAAM;AAAA,MAAM;AAAA,IAChD,OAAO;AAAA,SACF,eAAe,IAAI;AAAA,MACtB,mBAAmB,KAAK,KAAK,kBAAkB;AAAA,MAC/C,QAAQ,KAAK,KAAK,SAAS;AAAA,MAC3B,SAAS,KAAK,KAAK,YAAY,KAAK;AAAA,MACpC,IAAI,MAAM;AAAA,MACV,eAAe,KAAK,KAAK,gBAAgB;AAAA,MACzC,iBAAiB,IAAI,KAAK,kBAAkB,MAAK;AAAA,MACjD,KAAK,IAAI,KAAK,QAAQ,MAAK;AAAA,MAC3B,cAAc,KAAK,KAAK,eAAe;AAAA,MACvC,MAAM,KAAK,KAAK,OAAO;AAAA,MACvB,MAAM,IAAI,KAAK,SAAS,CAAC;AAAA,MACzB,QAAQ,KAAK,KAAK,SAAS;AAAA,MAC3B,SAAS,IAAI,KAAK,YAAY,MAAK;AAAA,MACnC,MAAM,MAAM;AAAA,MACZ,sBAAsB,KAAK,KAAK,uBAAuB,IAAI;AAAA,IAC7D;AAAA;AAAA,EAGF,YAAY,CAAC,UAAU,0BAA0B,MAAM;AAAA,EAEvD,YAAY;AAAA,EAMZ,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EAKA,SAAS,CAAC,YAAY,UACpB,WAAW,WAAW,MAAM,UAC5B,WAAW,SAAS,MAAM,QAC1B,WAAW,aAAa,MAAM,YAAY,SAC1C,YAAY,YAAY,KAAK;AAAA,EAC/B,MAAM,CAAC,UAAU,0BAA0B,MAAM;AAAA,EAEjD,YAAY;AACd,CAAC;AAWM,IAAM,8BAA8B,MAChC,kBAAO,qBAA4B,iBAAQ,oBAAoB,SAAS,GAAG,SAAQ,CAAC,CAAC;;AG7KhG,qBAAS;AACT,uBAAS;AAET;AACA;;;AC9BO,IAAM,yBAAsC;AAM5C,IAAM,qBAAkC;AAExC,IAAM,oBAAyC,UAAU,wBAAwB,CAAC,GAAG,IAAI;AAEzF,IAAM,gBAAqC,UAAU,oBAAoB,CAAC,GAAG,IAAI;;;ADsFjF,IAAM,sBAAsB,WAA8B,sBAAsB;AAEvF,IAAM,QAAO,CAAC,UACZ,aAAa,MAAM,QAAQ,MAAM,IAAI,EAAE,KAC9B,aAAI,CAAC,aAAa,EAAE,MAAM,MAAM,MAAM,QAAQ,EAAE,CACzD;AAYF,IAAM,QAAO,CAAC,SACL,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,CAAC,aAAW,IAAI;AAAA,IAAG;AAAA,EACvB,QAAQ,YAAY,OAAO,MAAK,IAAI;AAAA,EACpC,OAAO,YAAY,IAAK,EAAE,QAAQ,OAAO,IAAe,EAAE,QAAQ,SAAS;AAAA,CAC5E;AAGH,IAAM,SAAS,CAAC,MAAc,QACrB,aAAI,IAAI,MAAM,wBAAwB,SAAS,KAAK,CAAC;AAE9D,IAAM,QAAQ,CAAC,UACN,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,SAAS,OAAO,aAAa,MAAM,QAAQ,IAAI;AAAA,EASrD,IAAI,WAAW;AAAA,IAAG,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,EAE5C,MAAM,SAAS,OAAO,eAAe,MAAM,MAAM;AAAA,EACjD,IAAI,WAAW,WAAW;AAAA,IACxB,OAAO,OAAO,OACZ,MACA,wEAAwE,cACtE,0EACJ;AAAA,EACF;AAAA,EAWA,OAAO;AAAA,EACP,MAAM,aAAa,OAAO,KAAK,MAAM,QAAQ,WAAW;AAAA,EACxD,MAAM,OAAO,OAAO,QAAgB,MAAM,QAAQ,YAAY,OAAO,SAAS,cAAc;AAAA,EAC5F,IAAI,SAAS,WAAW;AAAA,IACtB,OAAO,OAAO,OACZ,MACA,+FACE,qFACJ;AAAA,EACF;AAAA,EAUA,MAAM,aAAa,OAAO,UAAU,MAAM,QAAQ,YAAY,MAAM,IAAI;AAAA,EACxE,IAAI,eAAe,MAAM;AAAA,IACvB,OAAO,OAAO,OACZ,MACA,qBAAqB,gBAAgB,yCACnC,sBAAsB,cAAc,wDACpC,yBACJ;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,OAAO,eAAe,MAAM,MAAM;AAAA,EAChD,IAAI,UAAU,WAAW;AAAA,IACvB,OAAO,OAAO,OACZ,MACA,2DAA2D,sBACzD,2FACA,gEACJ;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,OAAO,aAAa,MAAM,QAAQ,IAAI;AAAA,EACnD,IAAI,SAAS,GAAG;AAAA,IACd,OAAO,OAAO,OACZ,MACA,8BAA8B,OAAO,IAAI,sDACvC,2FACJ;AAAA,EACF;AAAA,EACA,OAAO,EAAE,MAAM,SAAS,KAAK;AAAA,CAC9B;AAaH,IAAM,YAAW;AAAA,EACf,QAAQ,MAAa;AAAA,EACrB,MAAM,GAAG,WAA+C,MAAK,IAAI;AAAA,EACjE,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAM,GAAG,WAAwC,MAAK,IAAI;AAAA,EAC1D,WAAW,GAAG,WAAwC,MAAM,IAAI;AAClE;AAEO,IAAM,8BAA8B,MAChC,kBAAO,qBAA4B,iBAAQ,oBAAoB,SAAS,GAAG,SAAQ,CAAC,CAAC;;AE9KhG,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;AClBO,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAU5B,IAAM,SAAQ;AAuBd,IAAM,YAAY,CAAC,UACxB,KAAK,KAAK,EACP,MAAM,SAAS,EACf,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,EACL,KAAK,GAAG;AAYN,IAAM,WAAU,CAAC,UAAmB,KAAK,KAAK,EAAE,QAAQ,QAAQ,EAAE;AAGlE,IAAM,QAAO,CAAI,UAAyB,SAC/C,aAAa,aAAa,aAAa;AAElC,IAAM,WAAW,CAAC,UAA8B,SACrD,aAAa,aAAa,UAAU,QAAQ,MAAM;AAE7C,IAAM,cAAc,CAAC,UAA8B,SACxD,aAAa,aAAa,SAAQ,QAAQ,MAAM;AAElD,IAAM,SAAQ,CAAC,MAAc,UAC3B,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,MAAM;AAkCtC,IAAM,QAAO,CAAC,WAAqD;AAAA,KACrE,OAAM,aAAa,KAAK,MAAM,SAAS,CAAC;AAAA,KACxC,OAAM,gBAAgB,MAAM,eAAe;AAAA,KAC3C,OAAM,aAAa,MAAM,SAAS;AAAA,KAClC,OAAM,yBAAyB,MAAM,qBAAqB;AAAA,KAC1D,OAAM,gBAAgB,MAAM,YAAY;AAAA,KACxC,OAAM,eAAe,MAAM,WAAW;AAAA,KACtC,OAAM,qBAAqB,MAAM,sBAAsB,OAAO,MAAM,SAAS;AAAA,KAC7E,OAAM,QAAQ,MAAM,IAAI;AAAA,KACxB,OAAM,YAAY,MAAM,QAAQ;AAAA,KAChC,OAAM,WAAW,MAAM,OAAO;AAAA,KAC9B,OAAM,OAAO,MAAM,QAAQ,YAAY,YAAY,OAAO,MAAM,GAAG,CAAC;AAAA,KACpE,OAAM,UAAU,MAAM,MAAM;AAAA,KAC5B,OAAM,WAAW,MAAM,eAAe,YAAY,YAAY,OAAO,MAAM,UAAU,CAAC;AAAA,KACtF,OAAM,mBAAmB,MAAM,kBAAkB;AAAA,EACpD,MAAM,MAAM;AACd;AAgBO,IAAM,cAAa,CAAC,WAAqD;AAAA,KAC3E,MAAK,KAAK;AAAA,EACb,OAAO,MAAM;AACf;AAqBO,IAAM,cAAa,CAAC,UAAoD;AAAA,EAC7E,MAAM,QAAQ;AAAA,IACZ,GAAI,MAAM,SAAS,YAAY,CAAC,MAAM,IAAI,CAAC;AAAA,IAC3C,GAAI,MAAM,sBAAsB,QAAQ,CAAC,mBAAmB,IAAI,CAAC;AAAA,EACnE;AAAA,EACA,OAAO,WAAW,MAAK,KAAK,GAAG,KAAK;AAAA;;;AC1MtC;AACA;AAkFA,IAAM,gBAAe,CACnB,MACA,UACsC;AAAA,EACtC,MAAM,OAAO;AAAA,EASb,MAAM,WAAW,KAAK,KAAK,OAAO;AAAA,EAClC,IAAI,aAAa,MAAM,aAAa,MAAM;AAAA,IAAM;AAAA,EAChD,OAAO;AAAA,IACL,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,WAAW,KAAK,KAAK,YAAY;AAAA,IACjC,gBAAgB,KAAK,KAAK,eAAe;AAAA,IACzC,aAAa,KAAK,KAAK,cAAc;AAAA,IACrC,WAAW,KAAK,KAAK,YAAY;AAAA,IACjC,uBAAuB,KAAK,KAAK,wBAAwB;AAAA,IACzD,WAAW,KAAK,KAAK,YAAY;AAAA,IACjC,cAAc,UAAU,KAAK,eAAe;AAAA,IAC5C,YAAY,KAAK,KAAK,aAAa;AAAA,IACnC,aAAa,UAAU,KAAK,cAAc;AAAA,IAC1C,mBAAmB,KAAK,KAAK,oBAAoB;AAAA,IAEjD,MAAM,KAAK,KAAK,OAAO;AAAA,IACvB,UAAU,SAAQ,KAAK,WAAW;AAAA,IAClC,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,UAAU,MAAM,QAAQ,KAAK,WAAW,IAAI,KAAK,YAAY,KAAK,GAAG,IAAI;AAAA,IACzE,SAAS,KAAK,KAAK,UAAU;AAAA,IAC7B,OAAO,MAAM;AAAA,IACb,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,KAAK,IAAI,KAAK,QAAQ,MAAK;AAAA,IAC3B,MAAM,MAAM;AAAA,IACZ,UAAU,IAAI,KAAK,aAAa,MAAK;AAAA,IACrC,QAAQ,UAAU,KAAK,SAAS;AAAA,IAChC,MAAM,aAAa,KAAK,MAAM,OAAO;AAAA,IACrC,WAAW,IAAI,KAAK,YAAY,MAAK;AAAA,IACrC,mBAAmB,KAAK,KAAK,kBAAkB;AAAA,EACjD;AAAA;AAwBK,IAAM,sBAAsB,CAAC,UAClC,iBACE,OACE,MAAM,QACN,QACA,OACM,sBAAe,EAAE,OAAO,MAAM,OAAO,MAAM,MAAM,KAAK,CAAC,CAC/D,EAAE,KACO,kBAAS,+BAA+B,CAAC,UAC9C,MAAM,OAAO,aAAa,6BACf,iBAAQ,SAAS,IACjB,cAAK,KAAK,CACvB,CACF,CACF,EAAE,KACO,aAAI,CAAC,SAAS;AAAA,EACnB,IAAI,SAAS;AAAA,IAAY,OAAO;AAAA,EAChC,OAAO,SAAS,YAAY,YAAY,cAAa,MAAM,KAAK;AAAA,CACjE,CACH;AAmBK,IAAM,gBAAgB,CAAC,UAC5B,oBAAoB,KAAK,EAAE,KAAY,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CAAC;AAGhE,IAAM,kBAAiB,CAAC,SAC7B,SAAS,aAAa,YAAY;AAc7B,IAAM,WAAU,CAAC,YAAmC,UACzD,WAAW,UAAU,MAAM,QAAQ,OACnC,MAAK,MAAM,SAAS,WAAW,OAAO,KACtC,MAAK,MAAM,WAAW,WAAW,SAAS,KAC1C,MAAK,MAAM,KAAK,WAAW,GAAG,KAC9B,YAAY,MAAM,UAAU,WAAW,QAAQ,KAC/C,SAAS,MAAM,cAAc,WAAW,YAAY,KACpD,SAAS,MAAM,aAAa,WAAW,WAAW,KAClD,MAAK,MAAM,mBAAmB,WAAW,iBAAiB,KAC1D,SAAS,MAAM,QAAQ,WAAW,MAAM,KACxC,MAAK,MAAM,WAAW,WAAW,SAAS,KAC1C,MAAK,MAAM,uBAAuB,WAAW,qBAAqB,KAClE,MAAK,MAAM,iBAAiB,WAAW,eAAe,KACtD,MAAK,MAAM,YAAY,WAAW,UAAU,KAC5C,MAAK,MAAM,oBAAoB,WAAW,kBAAkB;;;AF5HvD,IAAM,qBAAqB,WAA6B,uBAAuB;AAAA,EACpF,sBAAsB;AACxB,CAAC;AASD,IAAM,UAA4C;AAAA,EAChD,gBAAgB;AAAA,EAChB,WAAW;AAAA,EACX,mBAAmB;AACrB;AAEA,IAAM,cAAc,CAAC,SACnB,OAAO,YAAY,OAAO,QAAQ,IAAI,EAAE,IAAI,EAAE,KAAK,WAAW,CAAC,QAAQ,QAAQ,KAAK,KAAK,CAAC,CAAC;AAG7F,IAAM,qBAAoB,CAAC,WACxB;AAAA,KACI,YAAY,YAAW,KAAK,CAAC;AAAA,EAChC,MAAM,MAAM;AACd;AAGF,IAAM,qBAAoB,CAAC,WACxB;AAAA,KACI,YAAY,YAAW,KAAK,CAAC;AAAA,EAChC,OAAO,MAAM;AAAA,EACb,MAAM,MAAM;AACd;AAEK,IAAM,6BAA6B,MAC/B,kBACP,oBACO,iBACL,mBAAmB,SAAS,GAAG;AAAA,EAK7B,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAG7B,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,OAAO,gBACL,OAAO,WAAW,YAAY,cAAc,IAAI,IAAI,oBAAoB,IAAI,CAC9E;AAAA,GACD;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,qBAAqB,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IAC7E,OAAO,YAAW,qBAAqB,YAAW,IAAI,GAAG,KAAK;AAAA,IAC9D,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,oBAAoB,IAAI;AAAA,IAG5C,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,uBAAuB,GAAG,KAAK,QAAQ,KAAK,OAAO;AAAA,MAC5E,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,qBAAqB,YAAW,IAAI,GAAG,IAAI;AAAA,MAC7D,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EAUD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IACxC,MAAM,SAAS,gBAAe,OAAO,cAAc,IAAI,CAAC;AAAA,IACxD,OAAO,YAAW,qBAAqB,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IAC7E,OAAO,YAAW,qBAAqB,YAAW,IAAI,GAAG,KAAK;AAAA,IAC9D,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OACL,KAAK,QACL,aACA,MACM,yBAAkB,mBAAkB,IAAI,CAAC,CACjD;AAAA,IACF,EAAO,SAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MACjC,OAAO,OACL,KAAK,QACL,aACA,MACM,uBAAgB,mBAAkB,IAAI,CAAC,CAC/C;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,cAAc,IAAI,CAAC;AAAA,IACvD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,SAAS,KAAK,gBAAgB,KAAK,yCACjC,iFACA,+EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EACD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACM,0BAAmB,EAAE,OAAO,KAAK,OAAO,MAAM,KAAK,KAAK,CAAC,CACjE;AAAA,GACD;AACH,CAAC,CACH,CACF;;AG9MF,qBAAS;AACT;AACA;;;AC0DA,IAAM,OAAO,CAAC,UACZ,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,CAAC,SAAkB,OAAO,IAAI,CAAC,IAAI,CAAC;AAGvE,IAAM,QAAQ,CAAC,QAA2B,cACxC,OAAO,IAAI,CAAC,SAAS,UAAU,KAAK,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,SAAS,EAAE;AAQ3E,IAAM,WAAW,CAAC,SAChB,KACG,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,EACL,KAAK,GAAG;AAEb,IAAM,SAAQ,CAAC,SAAyB;AAAA,EACtC,IAAI,CAAC,KAAK,WAAW,QAAQ;AAAA,IAAG,OAAO;AAAA,EACvC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,EAC3B,IAAI,KAAK;AAAA,IAAG,OAAO;AAAA,EACnB,MAAM,SAAS,KAAK,MAAM,KAAK,CAAC,EAAE,MAAM,GAAG;AAAA,EAC3C,OAAO,GAAG,KAAK,MAAM,GAAG,EAAE,KAAK,OAAO,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAAE,KAAK,GAAG;AAAA;AAG7E,IAAM,QAAO,CAAC,SAAyB;AAGhC,IAAM,iBAAiB,CAAC,YAAuC;AAAA,EACpE,kBAAkB,MAAM,OAAO,qBAAqB,CAAC,GAAG,KAAI,EAAE,KAAK;AAAA,EACnE,eAAe,MAAM,OAAO,kBAAkB,CAAC,GAAG,MAAK,EAAE,KAAK;AAAA,EAC9D,kBAAkB,MAAM,OAAO,qBAAqB,CAAC,GAAG,QAAQ,EAAE,KAAK;AAAA,EACvE,SAAS,MAAM,OAAO,SAAS,KAAI,EAAE,KAAK;AAC5C;AAEO,IAAM,oBAAoB,CAC/B,MACA,UACmC;AAAA,EACnC,SAAS,KAAK,KAAK,UAAU;AAAA,EAC7B,SAAS,KAAK,KAAK,UAAU;AAAA,EAC7B,gBAAgB,KAAK,KAAK,eAAe;AAAA,EACzC,kBAAkB,MAAM,KAAK,KAAK,iBAAiB,GAAG,KAAI,EAAE,KAAK;AAAA,EACjE,eAAe,MAAM,KAAK,KAAK,cAAc,GAAG,MAAK,EAAE,KAAK;AAAA,EAC5D,kBAAkB,MAAM,KAAK,KAAK,iBAAiB,GAAG,QAAQ,EAAE,KAAK;AAAA,EAErE,MAAM,KAAK,KAAK,SAAS,KAAK,KAAK;AAAA,EACnC;AAAA,EACA,QAAQ,KAAK,KAAK,SAAS;AAAA,EAC3B,SAAS,MAAM,KAAK,KAAK,SAAS,GAAG,KAAI,EAAE,KAAK;AAClD;AAEA,IAAM,QAAQ,CAAC,GAAsB,MACnC,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,UAAU,SAAS,EAAE,MAAM;AAE9D,IAAM,iBAAiB,CAC5B,YACA,WACY;AAAA,EACZ,MAAM,QAAQ,eAAe,MAAM;AAAA,EACnC,OACE,WAAW,aAAa,OAAO,YAAY,SAC3C,WAAW,qBAAqB,OAAO,oBAAoB,SAC3D,WAAW,UAAU,OAAO,QAAQ,UACpC,MAAM,WAAW,SAAS,MAAM,OAAO,KACvC,MAAM,WAAW,mBAAmB,MAAM,iBAAiB,KAC3D,MAAM,WAAW,gBAAgB,MAAM,cAAc,KACrD,MAAM,WAAW,mBAAmB,MAAM,iBAAiB,MAC1D,OAAO,YAAY,aAAa,WAAW,YAAY,OAAO;AAAA;AAYnE,IAAM,SAAS,CAAC,YAAuC;AAAA,EACrD,SAAS,OAAO,YAAY,OAAQ,MAAiB;AAAA,EACrD,gBAAgB,OAAO,oBAAoB,OAAQ,MAAiB;AAAA,EACpE,MAAM,OAAO,QAAS;AACxB;AAEA,IAAM,QAAQ,CAAC,WAAiF;AAAA,EAC9F,MAAM,QAAQ,eAAe,MAAM;AAAA,EACnC,MAAM,MAAiD,CAAC;AAAA,EACxD,IAAI,MAAM,kBAAkB,SAAS;AAAA,IAAG,IAAI,oBAAoB,MAAM;AAAA,EACtE,IAAI,MAAM,eAAe,SAAS;AAAA,IAAG,IAAI,iBAAiB,MAAM;AAAA,EAChE,IAAI,MAAM,kBAAkB,SAAS;AAAA,IAAG,IAAI,oBAAoB,MAAM;AAAA,EACtE,IAAI,MAAM,QAAQ,SAAS;AAAA,IAAG,IAAI,SAAS,MAAM;AAAA,EACjD,OAAO;AAAA;AASF,IAAM,oBAAoB,CAAC,YAA0D;AAAA,KACvF,OAAO,MAAM;AAAA,KACb,MAAM,MAAM;AAAA,KACX,OAAO,YAAY,aAAa,OAAO,YAAY,KAAK,CAAC,IAAI,EAAE,SAAS,OAAO,QAAQ;AAAA,EAC3F,MAAM,OAAO;AACf;AAOO,IAAM,oBAAoB,CAAC,WAAyD;AAAA,EACzF,MAAM,UAAU,MAAM,MAAM;AAAA,EAC5B,MAAM,UACJ,CAAC,kBAAkB,eAAe,kBAAkB,QAAQ,EAC5D,OAAO,CAAC,QAAQ,QAAQ,SAAS,SAAS;AAAA,EAC5C,IAAI,OAAO,YAAY;AAAA,IAAI,QAAQ,KAAK,SAAS;AAAA,EACjD,OAAO;AAAA,OACF,OAAO,MAAM;AAAA,OACb;AAAA,OACC,OAAO,YAAY,aAAa,OAAO,YAAY,KAAK,CAAC,IAAI,EAAE,SAAS,OAAO,QAAQ;AAAA,OACvF,QAAQ,WAAW,IAAI,CAAC,IAAI,EAAE,QAAQ,QAAQ;AAAA,EACpD;AAAA;;;ADjKK,IAAM,6BAA6B,WACxC,6BACF;AAEA,IAAM,aAAW,YAAqE;AAAA,EACpF,YAAY,CAAC,MAAM,UAAU,kBAAkB,MAAM,MAAM,IAAI;AAAA,EAC/D,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAEZ,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,EACT,MAAM,CAAC,UAAU,kCAAkC,MAAM;AAAA,EACzD,YAAY;AACd,CAAC;AAEM,IAAM,qCAAqC,MACvC,kBACP,4BACO,iBAAQ,2BAA2B,SAAS,GAAG,UAAQ,CAAC,CACjE;;AE5BF,qBAAS;AACT;AACA;;;AC9BA,IAAM,YAA6E;AAAA,EACjF,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACF;AAGO,IAAM,iBAAiB,CAAC,UAC7B,UAAU,MAAM;;;AClBlB,IAAM,eAAe;AAGd,IAAM,SAAS,CAAC,UAA2B;AAAA,EAChD,MAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,SAAS,OAAO,SAAS,EAAE,GAAG,EAAE;AAAA,EAC1F,OAAO,OAAO,MAAM,MAAM,IAAI,IAAI;AAAA;AAGpC,IAAM,SAAS,CAAC,UACd,MACG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,EACL,KAAK,GAAG;AAWN,IAAM,cAAc,CAAC,UAC1B,OACE,MAAM,QAAQ,KAAK,IACf,MAAM,IAAI,CAAC,SAAkB,OAAO,IAAI,CAAC,IACzC,OAAO,UAAU,WACf,MAAM,MAAM,SAAS,IACrB,CAAC,CACT;AAGK,IAAM,aAAa,CAAC,UACzB,OAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,CAAC,SAAkB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;AAE1F,IAAM,MAAM,CAAC,KAAa,UACxB,UAAU,YAAY,CAAC,IAAI,GAAG,MAAM,MAAM;AAoBrC,IAAM,SAAQ,CAAC,WAA4D;AAAA,EAChF,SAAS,MAAM,YAAY,OAAO,MAAM;AAAA,KACrC,IAAI,UAAU,MAAM,MAAM;AAAA,KAC1B,IAAI,QAAQ,MAAM,IAAI;AAAA,KACtB,IAAI,WAAW,MAAM,OAAO;AAAA,KAC5B,IAAI,gBAAgB,MAAM,eAAe;AAAA,KACzC,IAAI,UAAU,MAAM,WAAW,YAAY,YAAY,MAAM,OAAO,KAAK,YAAY,CAAC;AAAA,KACtF,IAAI,UAAU,MAAM,WAAW,YAAY,YAAY,YAAY,MAAM,MAAM,CAAC;AAAA,KAChF,IACD,eACA,MAAM,mBAAmB,YAAY,YAAY,YAAY,MAAM,cAAc,CACnF;AAAA,KACG,IAAI,UAAU,MAAM,MAAM;AAAA,KAC1B,IAAI,QAAQ,MAAM,IAAI;AAAA,KACtB,IAAI,QAAQ,MAAM,SAAS,YAAY,YAAY,OAAO,MAAM,IAAI,CAAC;AAAA,KACrE,IAAI,UAAU,MAAM,MAAM;AAAA,KAC1B,IAAI,OAAO,MAAM,GAAG;AAAA,KACpB,IAAI,YAAY,MAAM,QAAQ;AACnC;AAQO,IAAM,cAAc,CAAC,WAA4D;AAAA,KACnF,OAAM,KAAK;AAAA,EACd,MAAM,MAAM;AACd;;;AFsCO,IAAM,4BAA4B,WACvC,4BACF;AAEA,IAAM,aAAW,YAAmE;AAAA,EAOlF,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,KAAK,KAAK,OAAO;AAAA,IACvB,SAAS,KAAK,KAAK,UAAU;AAAA,IAC7B,SAAS,KAAK,eAAe,KAAK,KAAK,eAAe;AAAA,IACtD,gBAAgB,KAAK,KAAK,eAAe;AAAA,IACzC,QAAQ,WAAW,KAAK,SAAS;AAAA,IACjC,QAAQ,YAAY,KAAK,SAAS;AAAA,IAClC,eAAe,YAAY,KAAK,cAAc;AAAA,IAC9C,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,KAAK,KAAK,OAAO;AAAA,IACvB,MAAM,MAAM;AAAA,IACZ,MAAM,OAAO,KAAK,OAAO;AAAA,IACzB,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,MAAM;AAAA,IACZ,KAAK,KAAK,KAAK,MAAM;AAAA,IACrB,UAAU,KAAK,KAAK,WAAW;AAAA,EACjC;AAAA,EACA,YAAY,CAAC,UAAU,mCAAmC,MAAM;AAAA,EAEhE,YAAY;AAAA,EAEZ,UAAU;AAAA,EAUV,SAAS,CAAC,YAAY,UACpB,WAAW,aAAa,MAAM,YAAY,UACzC,MAAM,YAAY,aAAa,WAAW,YAAY,MAAM,aAC5D,MAAM,WAAW,aAAa,WAAW,WAAW,MAAM,YAC1D,MAAM,SAAS,aAAa,WAAW,SAAS,MAAM,UACtD,MAAM,SAAS,aAAa,WAAW,SAAS,MAAM,UACtD,MAAM,aAAa,aAAa,WAAW,aAAa,MAAM,cAC9D,MAAM,oBAAoB,aAAa,WAAW,oBAAoB,MAAM,qBAC5E,MAAM,WAAW,aAAa,WAAW,WAAW,MAAM,YAC1D,MAAM,QAAQ,aAAa,WAAW,QAAQ,MAAM,SACpD,MAAM,WAAW,aAAa,WAAW,WAAW,MAAM,YAC1D,MAAM,SAAS,aAAa,WAAW,SAAS,MAAM,UACtD,MAAM,WAAW,aAAa,WAAW,WAAW,YAAY,MAAM,MAAM,OAC5E,MAAM,mBAAmB,aACxB,WAAW,mBAAmB,YAAY,MAAM,cAAc,OAC/D,MAAM,WAAW,aAAa,WAAW,WAAW,WAAW,MAAM,MAAM;AAAA,EAC9E,MAAM,CAAC,UAAU,mCAAmC,MAAM,QAAQ,MAAM;AAAA,EACxE,YAAY;AACd,CAAC;AAQM,IAAM,oCAAoC,MACtC,kBACP,2BACO,iBAAQ,0BAA0B,SAAS,GAAG,UAAQ,CAAC,CAChE;;AG9KF,qBAAS;AACT,uBAAS;AACT;AACA;;;ACrCA;AAmEO,IAAM,aAAa,CACxB,MACA,WAC4B;AAAA,EAC5B,SAAS,eAAe,KAAK,UAAU;AAAA,EACvC,SAAS,KAAK,KAAK,UAAU;AAAA,EAC7B,0BAA0B,KAAK,KAAK,yBAAyB,EAAE,KAAK;AAAA,EACpE,eAAe,KAAK,KAAK,cAAc,EAAE,KAAK;AAAA,EAC9C,cAAc,IAAI,KAAK,eAAe,CAAC;AAAA,EACvC,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAAA,EACzC,aAAa,IAAI,KAAK,cAAc,CAAC;AAAA,EACrC,gBAAgB,IAAI,KAAK,iBAAiB,CAAC;AAAA,EAC3C,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAAA,EACzC,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAAA,EACzC,oBAAoB,eAAe,KAAK,qBAAqB,MAAM;AAAA,EACnE,MAAM,MAAM;AAAA,EACZ,2BAA2B,eAAe,KAAK,0BAA0B;AAAA,EACzE,QAAQ,eAAe,KAAK,SAAS;AAAA,EACrC,eAAe,KAAK,KAAK,cAAc;AAAA,EACvC,MAAM,KAAK,KAAK,OAAO;AAAA,EACvB,kBAAkB,KAAK,KAAK,iBAAiB,EAAE,KAAK;AAAA,EACpD,QAAQ,eAAe,KAAK,SAAS;AAAA,EACrC,cAAc,KAAK,KAAK,aAAa;AACvC;AAEA,IAAM,QAAO,CAAI,UAAyB,SAAY,aAAa,aAAa,aAAa;AAYtF,IAAM,WAAU,CAAC,MAA8B,UACpD,MAAK,MAAM,SAAS,KAAK,OAAO,KAChC,MAAK,MAAM,gBAAgB,KAAK,GAAG,KAAK,cAAc,KACtD,MAAK,MAAM,mBAAmB,KAAK,GAAG,KAAK,iBAAiB,KAC5D,MAAK,MAAM,cAAc,KAAK,YAAY,KAC1C,MAAK,MAAM,gBAAgB,KAAK,cAAc,KAC9C,MAAK,MAAM,eAAe,KAAK,aAAa,KAC5C,MAAK,MAAM,gBAAgB,KAAK,cAAc,KAC9C,MAAK,MAAM,iBAAiB,KAAK,eAAe,KAChD,MAAK,MAAM,gBAAgB,KAAK,cAAc,KAC9C,MAAK,MAAM,gBAAgB,KAAK,cAAc,KAC9C,MAAK,MAAM,2BAA2B,KAAK,GAAG,KAAK,yBAAyB,MAC3E,MAAM,+BAA+B,aACpC,eAAe,MAAM,0BAA0B,MAAM,KAAK,+BAC5D,MAAK,MAAM,eAAe,KAAK,aAAa,MAC3C,MAAM,WAAW,aAAa,eAAe,MAAM,MAAM,MAAM,KAAK,YACpE,MAAM,WAAW,aAAa,eAAe,MAAM,MAAM,MAAM,KAAK,YACpE,MAAM,wBAAwB,aAC7B,eAAe,MAAM,qBAAqB,MAAM,MAAM,KAAK;AAE/D,IAAM,OAAM,CAAC,KAAa,UACxB,UAAU,YAAY,CAAC,IAAI,GAAG,MAAM,MAAM;AAG5C,IAAM,QAAQ,CAAC,UAA+B,UAAU,YAAY,YAAY,OAAO,KAAK;AAY5F,IAAM,UAAU,CAAC,WAAsD;AAAA,KAClE,KAAI,WAAW,MAAM,OAAO;AAAA,KAC5B,KAAI,eAAe,MAAM,gBAAgB,KAAK,CAAC;AAAA,KAC/C,KAAI,cAAc,MAAM,MAAM,aAAa,CAAC;AAAA,KAC5C,KAAI,eAAe,MAAM,MAAM,cAAc,CAAC;AAAA,KAC9C,KAAI,aAAa,MAAM,MAAM,YAAY,CAAC;AAAA,KAC1C,KAAI,gBAAgB,MAAM,MAAM,eAAe,CAAC;AAAA,KAChD,KAAI,eAAe,MAAM,MAAM,cAAc,CAAC;AAAA,KAC9C,KAAI,eAAe,MAAM,MAAM,cAAc,CAAC;AAAA,KAC9C,KAAI,0BAA0B,MAAM,yBAAyB;AAAA,KAC7D,KAAI,oBAAoB,MAAM,mBAAmB;AAAA,KACjD,KAAI,2BAA2B,MAAM,0BAA0B;AAAA,KAC/D,KAAI,UAAU,MAAM,MAAM;AAAA,KAC1B,KAAI,eAAe,MAAM,cAAc;AAAA,KACvC,KAAI,kBAAkB,MAAM,mBAAmB,KAAK,CAAC;AAAA,KACrD,KAAI,UAAU,MAAM,MAAM;AAAA,KAC1B,KAAI,cAAc,KAAK,MAAM,aAAa,CAAC;AAChD;AAWO,IAAM,cAAa,CAAC,WAAuC;AAAA,KAC7D,QAAQ,KAAK;AAAA,EAChB,MAAM,MAAM;AAAA,EACZ,MAAM,MAAM;AAAA,KAKR,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAClE;AAqBO,IAAM,cAAa,CAAC,UAAsC,QAAQ,KAAK;AAEvE,IAAM,UAAS,CAAC,UAA6B,oBAAoB,MAAM;AAwBvE,IAAM,UAAU,CAAC,UACtB,IAA6B,MAAM,QAAQ,QAAQ,OAAO,QAAO,KAAK,CAAC,EAAE,KAChE,aAAI,CAAC,SACV,SAAS,aAAa,OAAO,KAAK,YAAY,WAAW,YAAY,WAAW,MAAM,KAAK,CAC7F,GACO,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CACtC;;;AC/OF;AAgBA,IAAM,WAAW,CAAC,MAAc,UAAkB;AAAA,EAChD,MAAM,OAAO,CAAC,UAAmB,MAAM,SAAS,IAAI,MAAM,QAAQ,QAAQ,EAAE,IAAI;AAAA,EAChF,OAAO,KAAK,IAAI,MAAM,KAAK,KAAK;AAAA;AAQ3B,IAAM,YAAY,CAAC,MAA8B,UACtD,KAAK,SAAS,MAAM,SAAS,KAAK,MAAM,MAAM,IAAI,IACvC,gBACA,aACL,IAAI,MACF,GAAG,QAAO,KAAK,oBAAoB,MAAM,sBAAsB,KAAK,oBAClE,sFACA,wFACA,0FACA,uCACJ,CACF;AAgBC,IAAM,eAAe,CAAC,MAA8B,UACzD,MAAM,YAAY,aAAa,eAAe,MAAM,OAAO,MAAM,KAAK,UAC3D,gBACA,aACL,IAAI,MACF,GAAG,QAAO,KAAK,uBAAuB,MAAM,2BAC1C,GAAG,KAAK,YAAY,KAAK,+BAA+B,KAAK,0BAC7D,yFACA,yFACA,iFACA,+BACJ,CACF;AAuBC,IAAM,UAAS,CAAU,OAA8B,SACrD,aAAI,UAAU,GAAG;AAAA,EACtB,SAAS,UAAU,EAAG,UAAU,IAAI,WAAW,GAAG;AAAA,IAChD,MAAM,OAAO,OAAO;AAAA,IACpB,IAAI,KAAK,IAAI;AAAA,MAAG,OAAO;AAAA,IACvB,OAAc,eAAM,WAAW;AAAA,EACjC;AAAA,EACA,OAAO,OAAO;AAAA,CACf;;;AC5FH;AAMO,IAAM,qBAAqF;AAAA,EAChG,QAAQ;AAAA,EACR,QAAQ;AACV;AAGO,IAAM,sBAAsB,CAAC,UAC3B,aAAI,UAAU,GAAG;AAAA,EACtB,OAAO,UAAU,mBAAmB,QAAQ,YAAW,KAAK,GAAG,IAAI;AAAA,EACnE,OAAO,UAAU,mBAAmB,QAAQ,YAAW,KAAK,GAAG,KAAK;AAAA,CACrE;;;AHoII,IAAM,eAAe,WAAuB,iBAAiB;AAAA,EAClE,sBAAsB;AACxB,CAAC;AAEM,IAAM,uBAAuB,MACzB,kBACP,cACO,iBACL,aAAa,SAAS,GAAG;AAAA,EAMvB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAM,GAAG,WAAW,QAAQ,IAAI;AAAA,EAOhC,MAAM,GAAG,MAAM,aACN,aAAI,UAAU,GAAG;AAAA,IACtB,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IAGvB,OAAO,oBAAoB,IAAI;AAAA,IAC/B,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,QAAQ,IAAI;AAAA,IAGhC,IAAI,SAAS;AAAA,MAAW,OAAO,EAAE,QAAQ,SAAS;AAAA,IAClD,OAAO,UAAU,MAAM,IAAI;AAAA,IAC3B,OAAO,aAAa,MAAM,IAAI;AAAA,IAC9B,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EAMH,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAExC,OAAO,oBAAoB,IAAI;AAAA,IAC/B,MAAM,OAAO,OAAO,QAAQ,IAAI;AAAA,IAChC,IAAI;AAAA,IACJ,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,OAAO,IACZ,KAAK,QACL,aACA,QACA,oBACA,YAAW,IAAI,CACjB;AAAA,IACF,EAAO;AAAA,MACL,OAAO,UAAU,MAAM,IAAI;AAAA,MAC3B,OAAO,aAAa,MAAM,IAAI;AAAA,MAE9B,MAAM,OAAO,WAAW,UAAS,MAAM,MAAM,YAAW,IAAI,CAAC;AAAA,MAC7D,IAAI,SAAS,WAAW;AAAA,QACtB,OAAO,IAAI,KAAK,QAAQ,aAAa,OAAO,QAAO,IAAI,GAAG,IAAI;AAAA,MAChE;AAAA;AAAA,IAEF,MAAM,QAAQ,OAAO,QACnB,QAAQ,IAAI,GACZ,CAAC,QAAQ,QAAQ,aAAa,SAAQ,KAAK,IAAI,CACjD;AAAA,IACA,IAAI,UAAU,aAAa,CAAC,SAAQ,OAAO,IAAI,GAAG;AAAA,MAKhD,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,QAAO,IAAI,qEACZ,4DAA4D,QAAQ,cACpE,gFACA,mFACA,2DACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAgBD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,IAAY,KAAK,QAAQ,aAAa,UAAU,QAAO,IAAI,CAAC;AAAA,IACnE,MAAM,OAAO,OAAO,QAAO,QAAQ,IAAI,GAAG,CAAC,QAAQ,QAAQ,SAAS;AAAA,IACpE,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,QAAO,IAAI,mEACZ,kFACA,kEACA,GAAG,KAAK,0EACZ,CACF;AAAA,IACF;AAAA,GACD;AACH,CAAC,CACH,CACF;;AI7OF,qBAAS;AACT;AACA;AAsBO,IAAM,yBAAyB,WAAiC,yBAAyB;AAEhG,IAAM,aAAW,YAAwE;AAAA,EACvF,YAAY,CAAC,MAAM,UAAU,kBAAkB,MAAM,MAAM,IAAI;AAAA,EAC/D,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAEZ,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,EACT,MAAM,CAAC,UAAU,iCAAiC,MAAM;AAAA,EACxD,YAAY;AACd,CAAC;AAEM,IAAM,iCAAiC,MACnC,kBACP,wBACO,iBAAQ,uBAAuB,SAAS,GAAG,UAAQ,CAAC,CAC7D;;ACzDF,qBAAS;AACT;AACA;;;ACjBA,uBAAS;AAET;;;ACYA,IAAM,aAAgF;AAAA,EACpF,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACF;AAGO,IAAM,oBAAoB,CAAC,UAChC,WAAU,MAAM;;;AChBlB,IAAM,eAAe;AAGrB,IAAM,kBACJ;AACF,IAAM,oBAAoB;AAEnB,IAAM,mBAAmB,CAAC,SAC/B,kBAAkB,KAAK,IAAI,KAAK,gBAAgB,KAAK,IAAI;AAE3D,IAAM,WAAU,CAAC,UAA2B,UAAU,MAAM,CAAC,aAAa,KAAK,KAAK;AAG7E,IAAM,2BAA2B,CACtC,WAEA,OAAO,QAAQ,UAAU,CAAC,CAAC,EACxB,OAAO,EAAE,MAAM,WAAW,OAAO,UAAU,YAAY,iBAAiB,IAAI,CAAC,EAC7E,OAAO,IAAI,WAAW,SAAQ,KAAe,CAAC,EAC9C,IAAI,EAAE,UAAU,IAAI,EACpB,KAAK;AAOH,IAAM,0BAA0B,CAAC,QAAsC;AAAA,EAC5E,IAAI,QAAQ;AAAA,IAAW,OAAO,CAAC;AAAA,EAC/B,MAAM,MAAgB,CAAC;AAAA,EACvB,MAAM,YAAY,oCAAoC,KAAK,GAAG,IAAI,MAAM;AAAA,EACxE,MAAM,KAAK,UAAU,YAAY,GAAG;AAAA,EACpC,IAAI,MAAM,GAAG;AAAA,IACX,MAAM,WAAW,UAAU,MAAM,GAAG,EAAE;AAAA,IACtC,MAAM,QAAQ,SAAS,QAAQ,GAAG;AAAA,IAClC,IAAI,SAAS,KAAK,SAAQ,SAAS,MAAM,QAAQ,CAAC,CAAC;AAAA,MAAG,IAAI,KAAK,UAAU;AAAA,EAC3E;AAAA,EAEA,MAAM,SAAS,IAAI,QAAQ,WAAW,EAAE;AAAA,EACxC,WAAW,QAAQ,OAAO,MAAM,OAAO,GAAG;AAAA,IACxC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,IAC3B,MAAM,OAAO,KAAK,IAAI,OAAO,KAAK,MAAM,GAAG,EAAE;AAAA,IAC7C,IAAI,MAAM,KAAK,iBAAiB,IAAI,KAAK,SAAQ,KAAK,MAAM,KAAK,CAAC,CAAC;AAAA,MAAG,IAAI,KAAK,IAAI,MAAM;AAAA,EAC3F;AAAA,EACA,OAAO;AAAA;;;ACtDT,mBAAS;;;ACYT;AACA;AAmBO,IAAM,aAAa,CACxB,MACA,MAAmB,QAAQ,QACoE;AAAA,EAC/F,MAAM,SAAiC,CAAC;AAAA,EACxC,MAAM,UAAoB,CAAC;AAAA,EAC3B,YAAY,KAAK,QAAQ,OAAO,QAAQ,IAAI,GAAG;AAAA,IAC7C,MAAM,QAAQ,IAAI,IAAI;AAAA,IACtB,IAAI,UAAU,aAAa,UAAU;AAAA,MAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,IAC5D;AAAA,aAAO,OAAO;AAAA,EACrB;AAAA,EACA,OAAO,EAAE,SAAS,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,EAAE,KAAK,GAAG,OAAO;AAAA;AAQzD,IAAM,OAAO,EAAE,GAAG,OAAQ,QAAQ,KAAK,OAAO,MAAM,GAAG,GAAG,GAAG,EAAE;AAC/D,IAAM,SAAS;AAGf,IAAM,YAAY,CAAC,WACjB,KAAK,UACH,OAAO,KAAK,MAAM,EACf,KAAK,EACL,IAAI,CAAC,QAAQ,CAAC,KAAK,OAAO,IAAI,CAAC,CACpC;AAEF,IAAM,SAAS,CAAC,MAAc,WAC5B,WAAW,UAAU,MAAM,GAAG,MAAM,IAAI,IAAI;AASvC,IAAM,OAAO,CAAC,QAA0C,SAA0B;AAAA,EACvF,IAAI,OAAO,KAAK,MAAM,EAAE,WAAW;AAAA,IAAG,OAAO;AAAA,EAC7C,MAAM,QAAQ,SAAS,YAAY,YAAY,EAAE,IAAI,OAAO,KAAK,MAAM,MAAM;AAAA,EAC7E,OAAO,GAAG,UAAU,MAAM,SAAS,WAAW,KAAK,OAAO,OAAO,MAAM,EAAE,SAAS,WAAW;AAAA;AASxF,IAAM,cAAc,CAAC,QAAgB,WAAsD;AAAA,EAChG,IAAI,WAAW;AAAA,IAAI,OAAO,OAAO,KAAK,MAAM,EAAE,WAAW;AAAA,EACzD,OAAO,QAAQ,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG;AAAA,EACtD,IAAI,WAAW,UAAU,SAAS,aAAa,WAAW,aAAa,UAAU,WAAW;AAAA,IAC1F,OAAO;AAAA,EACT;AAAA,EACA,MAAM,WAAW,OAAO,KAAK,QAAQ,WAAW;AAAA,EAChD,MAAM,SAAS,OAAO,OAAO,KAAK,MAAM,WAAW,GAAG,MAAM;AAAA,EAC5D,OAAO,SAAS,WAAW,OAAO,UAAU,gBAAgB,UAAU,MAAM;AAAA;;;ADnFvE,IAAM,SAAS,CAAC,UAA0B,QAAO,KAAK,OAAO,MAAM,EAAE,SAAS,QAAQ;AAGtF,IAAM,WAAW,CAAC,UAA0B,QAAO,KAAK,OAAO,QAAQ,EAAE,SAAS,MAAM;AAQxF,IAAM,cAAc,CAAC,SAAmD;AAAA,EAC7E,MAAM,QAAgC,CAAC;AAAA,EACvC,WAAW,QAAQ,KAAK,MAAM,GAAG,GAAG;AAAA,IAClC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,IAC3B,IAAI,KAAK;AAAA,MAAG,MAAM,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,KAAK,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,EACxE;AAAA,EACA,MAAM,QAAQ,MAAM;AAAA,EACpB,OAAO,UAAU,YAAY,EAAE,MAAM,MAAM,WAAW,GAAG,IAAI,EAAE,MAAM,MAAM,WAAW,IAAI,MAAM;AAAA;AAI3F,IAAM,WAAW,CAAC,MAAc,UACrC,QAAQ,cAAc,OAAO,KAAK;AAEpC,IAAM,QAAO,CAAC,UACZ,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,CAAC,SAAkB,OAAO,IAAI,CAAC,IAAI,CAAC;AAGhE,IAAM,QAAQ,CAAC,SACpB,CAAC,GAAG,IAAI,EACL,OAAO,CAAC,QAAQ,QAAQ,EAAE,EAC1B,KAAK,EACL,KAAK,GAAG;AAON,IAAM,eAAe,CAAC,QAAgB,WAC3C,KAAK,QAAO,8BAA8B,eAAe;AAMpD,IAAM,mBAAmB,CAC9B,MACA,UACoC;AAAA,EACpC,MAAM,UAAkC,CAAC;AAAA,EACzC,WAAW,QAAQ,MAAK,KAAK,SAAS,GAAG;AAAA,IACvC,QAAQ,MAAM,UAAU,YAAY,IAAI;AAAA,IACxC,IAAI,SAAS;AAAA,MAAI,QAAQ,QAAQ,SAAS,SAAS,EAAE;AAAA,EACvD;AAAA,EACA,MAAM,UAAU,MAAK,KAAK,SAAS,EAAE,IAAI,CAAC,SAAS,YAAY,IAAI,EAAE,IAAI;AAAA,EACzE,OAAO;AAAA,IACL,QAAQ,KAAK,KAAK,SAAS;AAAA,IAI3B,MAAM,SAAS,KAAK,KAAK,OAAO,CAAC;AAAA,IACjC,SAAS,KAAK,KAAK,UAAU;AAAA,IAC7B,SAAS,KAAK,KAAK,UAAU;AAAA,IAC7B,gBAAgB,KAAK,KAAK,eAAe;AAAA,IACzC,QAAQ,MAAM,OAAO,KAAK,OAAO,CAAC;AAAA,IAClC,cAAc,aAAa,MAAM,MAAM,OAAO;AAAA,IAC9C,QAAQ,YAAY,KAAK,SAAS;AAAA,IAClC,eAAe,YAAY,KAAK,cAAc;AAAA,IAC9C,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,KAAK,KAAK,OAAO;AAAA,IACvB,MAAM,MAAM;AAAA,IAGZ,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,OAAO,KAAK,OAAO;AAAA,IACzB,QAAQ,MAAM,OAAO;AAAA,IACrB,QAAQ;AAAA,IACR,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,MAAM;AAAA,IACZ,KAAK,KAAK,KAAK,MAAM;AAAA,IACrB,UAAU,KAAK,KAAK,WAAW;AAAA,EACjC;AAAA;;;AE7EF,IAAM,QAAoE;AAAA,EACxE,QAAQ,CAAC,YAAY,MAAM;AAAA,EAC3B,MAAM,CAAC,SAAS;AAAA,EAChB,gBAAgB,CAAC,YAAY,MAAM;AAAA,EACnC,QAAQ,CAAC,SAAS;AAAA,EAClB,QAAQ,CAAC,YAAY,MAAM;AAAA,EAC3B,eAAe,CAAC,YAAY,MAAM;AAAA,EAClC,QAAQ,CAAC,SAAS;AAAA,EAClB,MAAM,CAAC,MAAM;AAAA,EACb,UAAU,CAAC,MAAM;AAAA,EACjB,MAAM,CAAC,MAAM;AAAA,EACb,QAAQ,CAAC,SAAS;AAAA,EAClB,QAAQ,CAAC,MAAM;AAAA,EACf,KAAK,CAAC,SAAS;AAAA,EACf,UAAU,CAAC,MAAM;AACnB;AAEA,IAAM,WAA8D;AAAA,EAClE,UAAU,CAAC;AAAA,EACX,MAAM,CAAC,UAAU,cAAc;AAAA,EAC/B,SAAS,CAAC,OAAO,QAAQ;AAC3B;AAGA,IAAM,aAAa;AAGnB,IAAM,aACJ;AAQK,IAAM,WAAW,CAAC,UAA2B;AAAA,EAClD,MAAM,MAAgB,CAAC;AAAA,EACvB,YAAY,QAAO,UAAU,OAAO,QAAQ,KAAK,GAA0C;AAAA,IACzF,IAAI,MAAM,YAAW,aAAa,CAAC,MAAM,SAAS,MAAM,IAAI,GAAG;AAAA,MAC7D,IAAI,KAAK,IAAI,sBAAqB,MAAM,KAAK,GAAG,kBAAkB,MAAM,MAAM;AAAA,IAChF;AAAA,EACF;AAAA,EACA,WAAW,UAAS,SAAS,MAAM,OAAO;AAAA,IACxC,IAAI,MAAM,YAAW,aAAa,MAAM,YAAW;AAAA,MACjD,IAAI,KAAK,GAAG,MAAM,eAAe,SAAQ;AAAA,EAC7C;AAAA,EACA,WAAW,OAAO,CAAC,GAAG,OAAO,KAAK,MAAM,UAAU,CAAC,CAAC,GAAG,GAAG,OAAO,KAAK,MAAM,UAAU,CAAC,CAAC,CAAC,GAAG;AAAA,IAC1F,IAAI,CAAC,WAAW,KAAK,GAAG;AAAA,MAAG,IAAI,KAAK,IAAI,wCAAwC;AAAA,EAClF;AAAA,EAEA,WAAW,QAAQ,yBAAyB,MAAM,MAAM,GAAG;AAAA,IACzD,IAAI,KAAK,WAAW,qCAAqC,YAAY;AAAA,EACvE;AAAA,EACA,WAAW,SAAS,wBAAwB,MAAM,GAAG,GAAG;AAAA,IACtD,IAAI,KAAK,SAAS,qCAAqC,YAAY;AAAA,EACrE;AAAA,EACA,OAAO;AAAA;AAGT,IAAM,YAAY,CAAC,UAA8C,OAAO,UAAU;AAG3E,IAAM,gBAAgB,CAAC,OAAc,MAAmB,QAAQ,QAAQ;AAAA,EAC7E,MAAM,aAAsC,CAAC;AAAA,EAC7C,MAAM,UAAkC,CAAC;AAAA,EACzC,YAAY,MAAM,UAAU,OAAO,QAAQ,MAAM,UAAU,CAAC,CAAC,GAAG;AAAA,IAC9D,IAAI,UAAU,KAAK;AAAA,MAAG,WAAW,QAAQ;AAAA,IACpC;AAAA,cAAQ,QAAQ;AAAA,EACvB;AAAA,EACA,MAAM,SAAS,WAAW,YAAY,GAAG;AAAA,EACzC,MAAM,aAAsC,CAAC;AAAA,EAC7C,YAAY,MAAM,QAAQ,OAAO,QAAQ,MAAM,UAAU,CAAC,CAAC;AAAA,IAAG,WAAW,UAAU,UAAU;AAAA,EAC7F,IAAI,MAAM,aAAa;AAAA,IAAW,WAAW,cAAc,MAAM;AAAA,EACjE,MAAM,SAAS,WAAW,YAAY,GAAG;AAAA,EACzC,OAAO;AAAA,IACL,QAAQ,EAAE,SAAS,OAAO,SAAS,QAAQ,KAAK,YAAY,OAAO,OAAO,EAAE;AAAA,IAC5E;AAAA,EACF;AAAA;AAMF,IAAM,QAAO,CAAC,UAA8B,SAC1C,aAAa,aAAa,aAAa;AAGlC,IAAM,eAAe,CAAC,MAAuC,UAClE,KAAK,aAAa,MAAM,YAAY,SACpC,MAAK,MAAM,SAAS,KAAK,OAAO,KAChC,MAAK,MAAM,QAAQ,KAAK,MAAM,KAC9B,MAAK,MAAM,iBAAiB,KAAK,eAAe,KAChD,MAAK,MAAM,QAAQ,KAAK,MAAM,MAC7B,MAAM,SAAS,aAAa,MAAM,SAAS,KAAK,SACjD,MAAK,MAAM,MAAM,KAAK,IAAI,KAC1B,MAAK,MAAM,UAAU,KAAK,QAAQ,KAClC,MAAK,MAAM,KAAK,KAAK,GAAG,KACxB,MAAK,MAAM,QAAQ,KAAK,MAAM,KAC9B,MAAK,MAAM,MAAM,KAAK,IAAI,MACzB,MAAM,WAAW,aAAa,YAAY,MAAM,MAAM,MAAM,KAAK,YACjE,MAAM,mBAAmB,aAAa,YAAY,MAAM,cAAc,MAAM,KAAK;AAE7E,IAAM,cAAc,CACzB,MACA,OACA,WACe;AAAA,EACf,IAAI,MAAM,WAAW;AAAA,IAAW,OAAO;AAAA,EACvC,IAAI,MAAM,OAAO,KAAK,MAAM,MAAM,CAAC,MAAM,KAAK;AAAA,IAAQ,OAAO;AAAA,EAC7D,IAAI,OAAO,OAAO,QAAQ,SAAS;AAAA,IAAG,OAAO;AAAA,EAC7C,OAAO,aAAa,MAAM,MAAM,OAAO,OAAO,MAAM,MAAM,KAAK,eAAe,UAAU;AAAA;AAGnF,IAAM,cAAc,CACzB,MACA,OACA,QACA,WACe;AAAA,EACf,IAAI,MAAM,WAAW,aAAa,MAAM,aAAa;AAAA,IAAW,OAAO;AAAA,EACvE,IAAI,MAAM,WAAW,aAAa,MAAM,OAAO,KAAK,MAAM,MAAM,CAAC,MAAM,KAAK;AAAA,IAC1E,OAAO;AAAA,EACT,IAAI,OAAO,OAAO,QAAQ,SAAS,KAAK,WAAW;AAAA,IAAI,OAAO;AAAA,EAC9D,OAAO,YAAY,QAAQ,OAAO,OAAO,MAAM,IAAI,UAAU;AAAA;AAS/D,IAAM,cAAc,CAAC,OAAc,WACjC,OAAO,KAAK,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,SACnC,SAAS,MAAM,OAAO,OAAO,OAAO,UAAU,WAAW,EAAE,CAC7D;AAEF,IAAM,cAAc,CAAC,OAAc,WACjC,OAAO,KAAK,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,SAAS,MAAM,OAAO,OAAO,OAAO,SAAS,EAAE,CAAC;AAGhG,IAAM,aAAa,CAAC,UAAyD;AAAA,EAC3E,CAAC,UAAU,MAAM,UAAU,EAAE;AAAA,EAC7B,CAAC,QAAQ,MAAM,SAAS,YAAY,KAAK,OAAO,MAAM,IAAI,CAAC;AAAA,EAC3D,CAAC,WAAW,MAAM,WAAW,EAAE;AAAA,EAC/B,CAAC,gBAAgB,MAAM,mBAAmB,EAAE;AAAA,EAC5C,CAAC,UAAU,MAAM,UAAU,EAAE;AAAA,EAC7B,CAAC,QAAQ,MAAM,QAAQ,EAAE;AAAA,EACzB,CAAC,QAAQ,MAAM,SAAS,YAAY,KAAK,OAAO,MAAM,IAAI,CAAC;AAAA,EAC3D,CAAC,UAAU,MAAM,UAAU,EAAE;AAAA,EAC7B,CAAC,OAAO,MAAM,OAAO,EAAE;AAAA,EACvB,CAAC,YAAY,MAAM,YAAY,EAAE;AAAA,EACjC,CAAC,UAAU,MAAM,WAAW,YAAY,CAAC,IAAI,YAAY,MAAM,MAAM,EAAE,MAAM,GAAG,CAAC;AAAA,EACjF;AAAA,IACE;AAAA,IACA,MAAM,mBAAmB,YAAY,CAAC,IAAI,YAAY,MAAM,cAAc,EAAE,MAAM,GAAG;AAAA,EACvF;AACF;AAEA,IAAM,WAAW,CAAC,OAAc,QAC7B,MAA6C,SAAS;AAEzD,IAAM,QAAQ,CAAC,UACb,OAAO,UAAU,WAAW,UAAU,KAAK,MAAM,OAAO,CAAC,SAAS,SAAS,EAAE,EAAE,WAAW;AAQrF,IAAM,aAAa,CACxB,OACA,QACA,OACA,SACY;AAAA,EACZ,MAAM,OAAmD;AAAA,IACvD,SAAS,MAAM,YAAY,OAAO,MAAM;AAAA,EAC1C;AAAA,EACA,MAAM,UAAoB,CAAC;AAAA,EAC3B,MAAM,MAAM,CAAC,KAAa,UAAsC;AAAA,IAC9D,IAAI,CAAC,MAAM,KAAK;AAAA,MAAG,KAAK,OAAO;AAAA,IAC1B,SAAI,SAAS;AAAA,MAAU,QAAQ,KAAK,GAAG;AAAA;AAAA,EAE9C,YAAY,KAAK,UAAU,WAAW,KAAK;AAAA,IAAG,IAAI,SAAS,OAAO,GAAG;AAAA,MAAG,IAAI,KAAK,KAAK;AAAA,EACtF,IAAI,MAAM,UAAU,MAAM,WAAW;AAAA,IAAW,IAAI,UAAU,YAAY,OAAO,MAAM,CAAC;AAAA,EACxF,IAAI,MAAM,UAAU,MAAM,WAAW;AAAA,IAAW,IAAI,UAAU,YAAY,OAAO,MAAM,CAAC;AAAA,EACxF,IAAI,MAAM,UAAU,MAAM,aAAa,WAAW;AAAA,IAChD,KAAK,cAAc,OAAO,OAAO,OAAO,eAAe;AAAA,EACzD;AAAA,EACA,IAAI,SAAS;AAAA,IAAU,KAAK,UAAU,MAAM;AAAA,EAC5C,IAAI,QAAQ,SAAS;AAAA,IAAG,KAAK,YAAY;AAAA,EACzC,OAAO;AAAA;;;AL5LT,IAAM,OAAO,CAAC,UAAiB,kCAAkC,MAAM,QAAQ,MAAM;AAMrF,IAAM,YAAW,CAAC,UAChB,IAA6B,MAAM,QAAQ,QAAQ,OAAO,KAAK,KAAK,CAAC,EAAE,KAC9D,aAAI,CAAC,SAAU,QAAQ,OAAO,YAAY,iBAAiB,MAAM,KAAK,CAAE,GACxE,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CACtC;AAEF,IAAM,UAAS,CAAC,UAAiB;AAAA,EAC/B,MAAM,UAAU,SAAS,KAAK;AAAA,EAC9B,OAAO,QAAQ,WAAW,IACf,gBACA,aAAI,IAAI,MAAM,GAAG,KAAK,KAAK,MAAM,QAAQ,KAAK,IAAI,IAAI,CAAC;AAAA;AAIpE,IAAM,UAAU,CAAC,MAAkB,OAAc,QAAgB,WAAmB;AAAA,EAClF,MAAM,SAAS,YAAY,MAAM,OAAO,MAAM,MAAM;AAAA,EACpD,MAAM,cAAc,YAAY,MAAM,OAAO,QAAQ,MAAM,MAAM;AAAA,EACjE,OAAO,aAAa,MAAM,KAAK,KAAK,CAAC,UAAU,CAAC,cAC5C,YACC,EAAE,QAAQ,QAAQ,YAAY;AAAA;AAIrC,IAAM,gBAAgB,CAAC,OAAc,QAAgB,UAAiB;AAAA,EACpE,MAAM,UAAU;AAAA,IACd,GAAI,MAAM,SAAS,OAAO,OAAO,UAAU,CAAC;AAAA,IAC5C,GAAI,MAAM,SAAS,OAAO,OAAO,UAAU,CAAC;AAAA,EAC9C;AAAA,EACA,OAAO,QAAQ,WAAW,IACf,gBACA,aACL,IAAI,MACF,GAAG,KAAK,KAAK,kDAAkD,QAAQ,KAAK,IAAI,OAC9E,6EACJ,CACF;AAAA;AAGC,IAAM,aAAW;AAAA,EAEtB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAiB7B,MAAM,GAAG,MAAM,cACZ,WAAW,YAAY,QAAO,IAAI,IAAW,eAAM,KAC3C,iBAAQ,UAAS,IAAI,CAAC,GACtB,aAAI,CAAC,SACV,SAAS,YAAY,YAAY,KAAK,MAAM,QAAQ,QAAQ,UAAU,GAAG,CAC3E,CACF;AAAA,EAOF,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,QAMO,aAAI,UAAU,GAAG;AAAA,IACtB,IAAI,WAAW,aAAa,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IAC/C,IAAI,SAAS,cAAc,KAAK,SAAS,KAAK,QAAQ,KAAK,SAAS,KAAK,OAAO;AAAA,MAC9E,OAAO,EAAE,QAAQ,WAAW,aAAa,KAAK,SAAS,KAAK,KAAK;AAAA,IACnE;AAAA,IACA,OAAO,QAAO,IAAI;AAAA,IAClB,MAAM,OAAO,OAAO,UAAS,IAAI;AAAA,IACjC,IAAI,SAAS;AAAA,MAAW,OAAO,EAAE,QAAQ,SAAS;AAAA,IAClD,OAAO,QAAQ,MAAM,MAAM,cAAc,IAAI,GAAG,OAAO,MAAM,MAAM,YAC9D,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACH,WAAW,GAAG,MAAM,aACX,aAAI,UAAU,GAAG;AAAA,IACtB,OAAO,QAAO,IAAI;AAAA,IAClB,MAAM,SAAS,cAAc,IAAI;AAAA,IACjC,MAAM,OAAO,OAAO,UAAS,IAAI;AAAA,IACjC,IAAI,SAAS,QAAQ,UAAU;AAAA,IAC/B,IAAI,SAAS,WAAW;AAAA,MACtB,MAAM,QAAQ,EAAE,QAAQ,MAAM,QAAQ,KAAK;AAAA,MAC3C,OAAO,cAAc,MAAM,QAAQ,KAAK;AAAA,MACxC,MAAM,aAAa,kCAAkC,KAAK;AAAA,MAC1D,MAAM,OAAO,WAAW,MAAM,QAAQ,OAAO,QAAQ;AAAA,MAQrD,OAAO,UAAU,kBAAkB,IAAI,EAAE,QAAQ,MAAM,IAAI;AAAA,MAC3D,OAAO,IAAI,KAAK,QAAQ,aAAa,QAAQ,YAAY,IAAI;AAAA,MAC7D,SAAS,KAAK,OAAO,OAAO,MAAM;AAAA,IACpC,EAAO;AAAA,MACL,MAAM,QAAQ,QAAQ,MAAM,MAAM,QAAQ,MAAM;AAAA,MAChD,IAAI,UAAU,WAAW;AAAA,QACvB,OAAO,cAAc,MAAM,QAAQ,KAAK;AAAA,QACxC,MAAM,OAAO,WAAW,MAAM,QAAQ,OAAO,QAAQ;AAAA,QAErD,OAAO,UAAU,kBAAkB,IAAI,EAAE,QAAQ,MAAM,KAAK;AAAA,QAC5D,OAAO,IAAI,KAAK,QAAQ,aAAa,OAAO,KAAK,IAAI,GAAG,IAAI;AAAA,QAC5D,IAAI,MAAM;AAAA,UAAQ,SAAS,KAAK,OAAO,OAAO,MAAM;AAAA,MACtD;AAAA;AAAA,IAEF,MAAM,QAAQ,OAAO,UAAS,IAAI;AAAA,IAClC,IAAI,UAAU,WAAW;AAAA,MAEvB,OAAO,OAAc,aACnB,IAAI,MAAM,GAAG,KAAK,IAAI,gEAAgE,CACxF;AAAA,IACF;AAAA,IACA,OAAO,KAAK,OAAO,OAAO;AAAA,GAC3B;AAAA,EACH,QAAQ,GAAG,WAA4B,IAAI,KAAK,QAAQ,aAAa,UAAU,KAAK,IAAI,CAAC;AAC3F;;;ADlDO,IAAM,wBAAwB,WAAgC,wBAAwB;AAMtF,IAAM,gCAAgC,MAClC,kBACP,uBACO,iBAAQ,sBAAsB,SAAS,GAAG,UAAQ,CAAC,CAC5D;;AO5DF,qBAAS;AACT;AACA;;;ACzCO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,WAAW,CAAC,UAAiD;AAAA,EACjE,MAAM,OAA+B,CAAC;AAAA,EACtC,WAAW,OAAO,WAAW;AAAA,IAC3B,MAAM,QAAQ,MAAM;AAAA,IACpB,IAAI,UAAU;AAAA,MAAW,KAAK,OAAO,OAAO,KAAK;AAAA,EACnD;AAAA,EACA,OAAO;AAAA;AAYF,IAAM,iBAAiB,CAC5B,UACuC;AAAA,EACvC,cAAc,IAAI,KAAK,eAAe,CAAC;AAAA,EACvC,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAAA,EACzC,aAAa,IAAI,KAAK,cAAc,CAAC;AAAA,EACrC,gBAAgB,IAAI,KAAK,iBAAiB,CAAC;AAAA,EAC3C,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAAA,EACzC,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAC3C;AASO,IAAM,aAAa,CAAC,aAA+C,UACxE,UAAU,MAAM,CAAC,QAAQ,MAAM,SAAS,aAAa,MAAM,SAAS,YAAW,IAAI;AA2BrF,IAAM,iBAAiB,CAAC,UAAyB,UAAU,KAAK,CAAC,QAAQ,MAAM,SAAS,SAAS;AAEjG,IAAM,eAAe,CAAC,UAAyB;AAAA,EAC7C,IAAI,eAAe,KAAK;AAAA,IAAG;AAAA,EAC3B,MAAM,IAAI,MACR,gBAAgB,MAAM,uEACpB,cAAc,MAAM,wEACpB,gGACA,uFACJ;AAAA;AAIF,IAAM,SAAQ,CAAC,MAAc,UAC3B,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,MAAM;AAG7C,IAAM,UAAU,CAAC,UAA+B,UAAU,YAAY,YAAY,OAAO,KAAK;AAoB9F,IAAM,SAAQ,CAAC,WAAkD;AAAA,KAC5D,SAAS,KAAK;AAAA,KACd,OAAM,WAAW,MAAM,OAAO;AAAA,KAC9B,OAAM,WAAW,KAAK,MAAM,OAAO,CAAC;AAAA,KACpC,OAAM,aAAa,QAAQ,MAAM,YAAY,CAAC;AAAA,KAC9C,OAAM,MAAM,MAAM,EAAE;AAAA,EACvB,UAAU,MAAM;AAAA,EAChB,OAAO,MAAM;AACf;AAWO,IAAM,cAAa,CAAC,UAAiD;AAAA,EAC1E,aAAa,KAAK;AAAA,EAClB,OAAO,KAAK,OAAM,KAAK,GAAG,IAAI,MAAM,GAAG;AAAA;AA+BlC,IAAM,cAAa,CAAC,UAAiD;AAAA,EAC1E,aAAa,KAAK;AAAA,EAClB,OAAO,OAAM,KAAK;AAAA;;;AD9Cb,IAAM,cAAc,WAAsB,cAAc;AAG/D,IAAM,QAAO,CAAI,WAAyB,SAAY,cAAa,aAAa,cAAa;AAE7F,IAAM,aAAW,YAA+C;AAAA,EAU9D,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,IACjC,SAAS,KAAK,KAAK,YAAY,KAAK;AAAA,IACpC,IAAI,MAAM;AAAA,OACP,eAAe,IAAI;AAAA,IACtB,aAAa,IAAI,KAAK,cAAc,EAAE;AAAA,IACtC,IAAI,KAAK,KAAK,OAAO,EAAE;AAAA,IACvB,UAAU,KAAK,KAAK,aAAa,EAAE;AAAA,IACnC,OAAO,KAAK,KAAK,UAAU,MAAM,KAAK;AAAA,EACxC;AAAA,EACA,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAWZ,UAAU,EAAE,QAAQ,0BAA0B,QAAQ,6BAA6B;AAAA,EACnF,SAAS,CAAC,aAAY,UACpB,YAAW,aAAa,MAAM,YAC9B,YAAW,UAAU,MAAM,SAC3B,MAAK,MAAM,IAAI,YAAW,EAAE,KAC5B,MAAK,MAAM,cAAc,YAAW,YAAY,KAChD,MAAK,MAAM,SAAS,YAAW,OAAO,KACtC,MAAK,MAAM,SAAS,YAAW,OAAO,KACtC,WAAW,aAAY,KAAK;AAAA,EAC9B,MAAM,CAAC,UAAU,gBAAgB,MAAM;AAAA,EACvC,YAAY;AACd,CAAC;AAmBM,IAAM,sBAAsB,MACxB,kBAAO,aAAoB,iBAAQ,YAAY,SAAS,GAAG,UAAQ,CAAC,CAAC;;AE9KhF,qBAAS;AACT;AACA;;;ACvBO,IAAM,SAAQ;AAGrB,IAAM,SAAgC;AAAA,EACpC,IAAI;AAAA,EACJ,GAAG;AAAA,EACH,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AACP;AAkBO,IAAM,QAAQ,CAAC,UAA2B;AAAA,EAC/C,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,MAAM,MAAM,KAAK,KAAK,EAAE,KAAK;AAAA,EAC7B,MAAM,QAAQ,wCAAwC,KAAK,GAAG;AAAA,EAC9D,IAAI,UAAU;AAAA,IAAM,OAAO;AAAA,EAC3B,MAAM,OAAO,OAAM,MAAM,MAAM;AAAA,EAC/B,OAAO,SAAS,YAAY,SAAQ,KAAK,MAAM,OAAO,MAAM,MAAM,GAAG,IAAI,IAAI;AAAA;AAYxE,IAAM,UAAU,CAAC,UACtB,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,CAAC,UAAmB,OAAO,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,KAAK,KAAK;AAsB9F,IAAM,SAAQ,CAAC,WAAyB;AAAA,EACtC,gBAAgB,MAAM;AAAA,EACtB,mBAAmB,MAAM,uBAAuB,OAAO,MAAM;AAAA,EAC7D,OAAO,MAAM;AAAA,KACT,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,KAC5D,MAAM,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa,OAAO,MAAM,YAAY,EAAE;AAAA,KAClF,MAAM,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,MAAM,GAAG;AAAA,KAC7C,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;AAAA,KACtD,MAAM,eAAe,YAAY,CAAC,IAAI,EAAE,WAAW,OAAO,MAAM,UAAU,EAAE;AAAA,KAC5E,MAAM,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;AAAA,KACzD,MAAM,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa,MAAM,aAAa;AAAA,KAC1E,MAAM,aAAa,YAAY,CAAC,IAAI,EAAE,UAAU,MAAM,SAAS;AAAA,KAC/D,MAAM,qBAAqB,YAC3B,CAAC,IACD,EAAE,iBAAiB,MAAM,mBAAmB,MAAM,IAAI;AAAA,KACtD,MAAM,qBAAqB,YAC3B,CAAC,IACD,EAAE,iBAAiB,OAAO,MAAM,gBAAgB,EAAE;AACxD;AAYO,IAAM,cAAa,CAAC,WAAiD;AAAA,KACvE,OAAM,KAAK;AAAA,EACd,IAAI,MAAM;AAAA,KACN,MAAM,sBAAsB,YAAY,CAAC,IAAI,EAAE,kBAAkB,MAAM,kBAAkB;AAC/F;AAUO,IAAM,cAAa,CAAC,UAAgD,OAAM,KAAK;AAE/E,IAAM,aAAW,YAA6C;AAAA,EAiBnE,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,IACjC,gBAAgB,QAAQ,KAAK,eAAe;AAAA,IAC5C,IAAI,MAAM;AAAA,IACV,aAAa,IAAI,KAAK,cAAc,MAAK;AAAA,IACzC,IAAI,KAAK,KAAK,OAAO,EAAE;AAAA,IACvB,OAAO,KAAK,KAAK,UAAU,EAAE;AAAA,IAC7B,WAAW,MAAM,KAAK,UAAU;AAAA,IAChC,QAAQ,KAAK,KAAK,WAAW,EAAE;AAAA,IAC/B,aAAa,KAAK,KAAK,cAAc,EAAE;AAAA,IACvC,gBAAgB,KAAK,KAAK,iBAAiB,EAAE;AAAA,IAG7C,mBAAmB,KAAK,KAAK,oBAAoB,KAAK;AAAA,IACtD,UAAU,KAAK,KAAK,aAAa,EAAE;AAAA,IAGnC,iBAAiB,KAAK,KAAK,kBAAkB,KAAK;AAAA,IAClD,OAAO,KAAK,KAAK,UAAU,EAAE;AAAA,IAC7B,kBAAkB,KAAK,KAAK,mBAAmB,MAAM;AAAA,IACrD,iBAAiB,IAAI,KAAK,kBAAkB,MAAK;AAAA,EACnD;AAAA,EACA,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAoBZ,UAAU,EAAE,QAAQ,yBAAyB,QAAQ,4BAA4B;AAAA,EACjF,SAAS,CAAC,aAAY,UACpB,YAAW,wBAAwB,MAAM,uBAAuB,SAChE,YAAW,UAAU,MAAM,SAC3B,YAAW,oBAAoB,MAAM,oBACpC,MAAM,WAAW,aAAa,YAAW,WAAW,MAAM,YAC1D,MAAM,OAAO,aAAa,YAAW,OAAO,MAAM,QAClD,MAAM,iBAAiB,aAAa,YAAW,iBAAiB,MAAM,kBACtE,MAAM,aAAa,aAAa,YAAW,aAAa,MAAM,cAC9D,MAAM,YAAY,aAAa,YAAW,YAAY,MAAM,aAC5D,MAAM,UAAU,aAAa,YAAW,UAAU,MAAM,WAIxD,MAAM,qBAAqB,aAC1B,YAAW,qBAAqB,MAAM,sBACvC,MAAM,eAAe,aAAa,YAAW,eAAe,MAAM,gBAClE,MAAM,iBAAiB,aAAa,YAAW,iBAAiB,MAAM,kBACtE,MAAM,qBAAqB,aAC1B,YAAW,qBAAqB,MAAM;AAAA,EAE1C,MAAM,CAAC,UAAU,eAAe,MAAM;AAAA,EACtC,YAAY;AACd,CAAC;;;ADUM,IAAM,aAAa,WAAqB,aAAa;AAWrD,IAAM,qBAAqB,MACvB,kBAAO,YAAmB,iBAAQ,WAAW,SAAS,GAAG,UAAQ,CAAC,CAAC;;AEhO9E,qBAAS;AACT;AACA;;;AC6CO,IAAM,WAAW,CAAC,gBAAyB,kBAAkC;AAAA,EAClF,IAAI,CAAC;AAAA,IAAgB,OAAO;AAAA,EAG5B,IAAI,gBAAgB;AAAA,IAAG,OAAO;AAAA,EAC9B,OAAO,oCAAoC,OAAO,aAAa;AAAA;AAmC1D,IAAM,SAAQ,CAAC,WAAsD;AAAA,EAC1E,mBAAmB,MAAM,uBAAuB,QAAQ,MAAM;AAAA,EAC9D,OAAO,MAAM;AAAA,KACT,MAAM,aAAa,OAAO,CAAC,IAAI,EAAE,UAAU,MAAM,SAAS;AAAA,KAC1D,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,KAC5D,MAAM,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa,OAAO,MAAM,YAAY,EAAE;AAAA,KAClF,MAAM,OAAO,aAAa,MAAM,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,MAAM,GAAG;AAAA,KAChE,MAAM,sBAAsB,YAC5B,CAAC,IACD,EAAE,kBAAkB,OAAO,MAAM,iBAAiB,EAAE;AAC1D;;;ADUO,IAAM,eAAe,WAAuB,eAAe;AAalE,IAAM,aAAW,YAAuD;AAAA,EACtE,YAAY,CAAC,MAAM,UAAU;AAAA,IAC3B,MAAM,iBAAiB,KAAK,KAAK,oBAAoB,IAAI;AAAA,IACzD,MAAM,gBAAgB,IAAI,KAAK,mBAAmB,EAAE;AAAA,IACpD,OAAO;AAAA,MACL,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,MACjC,IAAI,MAAM;AAAA,MACV,mBAAmB;AAAA,MACnB,aAAa,IAAI,KAAK,cAAc,EAAE;AAAA,MACtC,IAAI,KAAK,KAAK,OAAO,EAAE;AAAA,MACvB,kBAAkB;AAAA,MAClB,UAAU,SAAS,gBAAgB,aAAa;AAAA,MAChD,UAAU,KAAK,KAAK,aAAa,EAAE;AAAA,MACnC,OAAO,KAAK,KAAK,UAAU,MAAM,KAAK;AAAA,IACxC;AAAA;AAAA,EAcF,YAAY,MAAM;AAAA,EAElB,YAAY,CAAC,WAAW,KAAK,OAAM,KAAK,GAAG,IAAI,MAAM,GAAG;AAAA,EAaxD,UAAU,EAAE,QAAQ,2BAA2B,QAAQ,8BAA8B;AAAA,EACrF,SAAS,CAAC,aAAY,UACpB,YAAW,UAAU,MAAM,SAI3B,YAAW,cAAc,MAAM,YAAY,OAC3C,YAAW,wBAAwB,MAAM,uBAAuB,WAC/D,MAAM,sBAAsB,aAC3B,YAAW,sBAAsB,MAAM,uBACxC,MAAM,iBAAiB,aAAa,YAAW,iBAAiB,MAAM,kBACtE,MAAM,OAAO,aAAa,YAAW,OAAO,MAAM,QAClD,MAAM,YAAY,aAAa,YAAW,YAAY,MAAM;AAAA,EAC/D,MAAM,CAAC,UAAU,iBAAiB,MAAM;AAAA,EACxC,YAAY;AACd,CAAC;AAgBM,IAAM,uBAAuB,MACzB,kBAAO,cAAqB,iBAAQ,aAAa,SAAS,GAAG,UAAQ,CAAC,CAAC;;AEnNlF,qBAAS;AACT;AACA;AA8BO,IAAM,cAAc,WAAsB,cAAc;AAGxD,IAAM,iBAAiB,CAAC,WAAuC;AAAA,EACpE,SAAS,MAAM,WAAW;AAAA,EAC1B,QAAQ,MAAM;AAChB;AAGO,IAAM,iBAAiB,CAAC,WAA6D;AAAA,EAC1F,SAAS,MAAM,WAAW;AAC5B;AAEA,IAAM,aAAW,YAAuC;AAAA,EACtD,YAAY,CAAC,MAAM,UAAU;AAAA,IAC3B,MAAM,MAAM;AAAA,IACZ,OAAO;AAAA,MACL,SAAS,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU;AAAA,MACzD,SAAS,MAAM,QAAQ,IAAI,OAAO,IAAI,IAAI,QAAQ,SAAS;AAAA,MAC3D,QAAQ,MAAM;AAAA,IAChB;AAAA;AAAA,EAEF,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAEZ,UAAU,EAAE,QAAQ,mBAAmB,QAAQ,0BAA0B;AAAA,EACzE,SAAS,CAAC,aAAY,UAAU,YAAW,aAAa,MAAM,WAAW;AAAA,EACzE,MAAM,CAAC,UAAU,SAAS,MAAM;AAAA,EAChC,YAAY;AACd,CAAC;AAEM,IAAM,sBAAsB,MACxB,kBAAO,aAAoB,iBAAQ,YAAY,SAAS,GAAG,UAAQ,CAAC,CAAC;;ACxDzE,IAAM,uBAA0C,OAAO,OAAO;AAAA,EACnE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAsDM,IAAM,qBAA6C,OAAO,OAAO;AAAA,EACtE,SACE;AAAA,EACF,WAAW;AAAA,EACX,eAAe;AAAA,EACf,UAAU;AAAA,EACV,UAAU;AAAA,EACV,MAAM;AACR,CAAC;AAyBD,IAAM,KAAK;AACX,IAAM,SAAS;AACf,IAAM,UAAU;AAEhB,IAAM,YAAW,CACf,QACA,UACA,UACa;AAAA,EACb,MAAM,QAAkB,CAAC;AAAA,EACzB,IAAI,CAAC,GAAG,KAAK,OAAM,IAAI;AAAA,IAAG,MAAM,KAAK,UAAU,OAAM,6BAA6B;AAAA,EAClF,IAAI,CAAC,GAAG,KAAK,OAAM,SAAS;AAAA,IAAG,MAAM,KAAK,eAAe,OAAM,+BAA+B;AAAA,EAC9F,IAAI,CAAC,GAAG,KAAK,OAAM,QAAQ;AAAA,IAAG,MAAM,KAAK,cAAc,OAAM,iCAAiC;AAAA,EAC9F,YAAY,QAAO,WAAW;AAAA,IAC5B,CAAC,iBAAiB,OAAM,aAAa;AAAA,IACrC,CAAC,YAAY,OAAM,QAAQ;AAAA,EAC7B,GAAY;AAAA,IACV,IAAI,WAAW,QAAQ,CAAC,OAAO,KAAK,MAAM,GAAG;AAAA,MAC3C,MAAM,KAAK,GAAG,YAAW,wDAAwD;AAAA,IACnF;AAAA,EACF;AAAA,EACA,IAAI,OAAM,aAAa,OAAM;AAAA,IAAe,MAAM,KAAK,yCAAyC;AAAA,EAMhG,MAAM,SAAS,CAAC,UAA8B,WAC5C,aAAa,YAAY,YAAY;AAAA,EACvC,MAAM,UAAyC;AAAA,IAC7C,CAAC,OAAO,MAAM,cAAc,cAAc,GAAG,SAAS,KAAK;AAAA,IAC3D,CAAC,OAAO,MAAM,kBAAkB,kBAAkB,GAAG,SAAS,SAAS;AAAA,EACzE;AAAA,EACA,IAAI,OAAM,aAAa,MAAM;AAAA,IAC3B,QAAQ,KAAK,CAAC,OAAO,MAAM,aAAa,aAAa,GAAG,SAAS,IAAI,CAAC;AAAA,EACxE;AAAA,EACA,MAAM,OAAO,IAAI;AAAA,EACjB,YAAY,QAAO,aAAY,SAAS;AAAA,IACtC,IAAI,QAAQ,KAAK,QAAO,KAAK,KAAK,IAAI,MAAK;AAAA,MAAG;AAAA,IAC9C,KAAK,IAAI,MAAK;AAAA,IACd,MAAM,KAAK,GAAG,uDAAsD;AAAA,EACtE;AAAA,EACA,OAAO;AAAA;AAIF,IAAM,oBAAoB,CAAC,SAAwB,CAAC,MAAyB;AAAA,EAGlF,QAAQ,cAAc,kBAAkB,gBAAgB,SAAS;AAAA,EAEjE,MAAM,QAAQ,OAAO,QAAQ,IAAI,EAAE,OAAO,IAAI,WAAW,UAAU,SAAS;AAAA,EAC5E,MAAM,WAAmC;AAAA,OACpC;AAAA,OACA,OAAO,YAAY,KAAK;AAAA,EAC7B;AAAA,EAGA,MAAM,WAA8B;AAAA,IAClC,OAAO,gBAAgB,SAAS;AAAA,IAChC,WAAW,oBAAoB,SAAS;AAAA,IACxC,MAAM,eAAe,SAAS;AAAA,EAChC;AAAA,EACA,MAAM,QAAQ,UAAS,UAAU,UAAU,MAAK;AAAA,EAChD,IAAI,MAAM,SAAS;AAAA,IAAG,MAAM,IAAI,MAAM,uBAAuB,MAAM,KAAK,IAAI,GAAG;AAAA,EAC/E,MAAM,QAA2C;AAAA,IAC/C,CAAC,aAAa,SAAS,eAAe,SAAS,IAAI;AAAA,EACrD;AAAA,EACA,IAAI,SAAS,aAAa;AAAA,IAAM,MAAM,KAAK,CAAC,QAAQ,SAAS,UAAU,SAAS,QAAQ,CAAC;AAAA,EACzF,OAAO;AAAA,IACL,QAAQ,MAAM,IAAI,EAAE,MAAM,QAAQ,aAAa,EAAE,MAAM,QAAQ,OAAO,EAAE;AAAA,IACxE,OAAO,EAAE,SAAS,SAAS,OAAO,SAAS,SAAS,UAAU;AAAA,IAC9D,MAAM,EAAE,OAAO,sBAAsB,QAAQ,SAAS,KAAK;AAAA,IAC3D,OAAO,MAAM,IAAI,EAAE,MAAM,aAAa;AAAA,MACpC,SAAS,SAAS;AAAA,MAClB,QAAQ,CAAC,SAAS,SAAS;AAAA,MAC3B;AAAA,MACA;AAAA,IACF,EAAE;AAAA,EACJ;AAAA;;AC3LF,IAAM,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBf,IAAM,WAAW,CAAC,UAAiB,KAAK;AAGxC,IAAM,aACJ,qEACA,iGACA,sEACA,mFACA;AAEF,IAAM,WAAW,GAAG,WAAsC;AAAA,EACxD,MAAM,QAAQ,CAAC,GAAG,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG;AAAA,EAC7C,OAAO;AAAA,SACA,KAAK;AAAA,QACN;AAAA,8BACsB,KAAK;AAAA,8CACW,KAAK;AAAA,oBAC/B,KAAK,+DAA+D,KAAK;AAAA;AAAA,eAE9E,KAAK,mCAAmC,KAAK;AAAA;AAAA;AAAA;AAK5D,IAAM,YAAY,GAAG,YAAuC;AAAA,UAClD,MAAM;AAAA,+BACe,MAAM;AAAA,oBACjB,MAAM,gCAAgC,MAAM;AAAA,qBAC3C,MAAM,qDAAqD,MAAM,sBAAsB,MAAM;AAAA;AAAA,gBAElG,MAAM,qCAAqC,MAAM,sBAAsB,MAAM;AAAA;AAAA;AAI7F,IAAM,WAAW,CAAC,SAAqD;AAAA,EACrE,MAAM,SAAS,CAAC,GAAG,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG;AAAA,EAC/C,MAAM,OAAO,UAAU,gEAAgE,KAAK;AAAA,EAC5F,MAAM,SAAS,YAAY,qBAAqB,KAAK;AAAA,EACrD,OAAO;AAAA,SACA,KAAK,eAAe,KAAK,kBAAkB;AAAA,8BACtB,KAAK,WAAW;AAAA,oBAC1B,4BAA4B,KAAK;AAAA,oBACjC,KAAK;AAAA,wBACD,KAAK,UAAU;AAAA;AAAA,eAExB,KAAK,mCAAmC,KAAK,UAAU;AAAA;AAAA;AAAA;AAKtE,IAAM,YAAY,CAAC,UAAuD;AAAA,EACxE,MAAM,QACJ,sEACA,iBAAiB,SAAS,MAAM,MAAM,wBAAwB,SAAS,MAAM,MAAM,UACnF;AAAA,EACF,OAAO;AAAA,WACE,MAAM,gBAAgB,MAAM,gCAAgC,MAAM;AAAA,2BAClD,oCAAoC,MAAM,UAAU,MAAM;AAAA,mBAClE,MAAM,UAAU,MAAM,iDAAiD,MAAM,kBAAkB,MAAM;AAAA;AAAA;AAKxH,IAAM,cAAc,CAAC,WAA2B;AAAA,oBAC5B,0DAA0D;AAAA;AAOvE,IAAM,qBAAqB,CAAC,SAAwB,CAAC,MAAc;AAAA,EACxE,MAAM,WAAW,kBAAkB,MAAK;AAAA,EACxC,MAAM,WAAW,SAAS,OACvB,IAAI,CAAC,UAAU,MAAM,MAAM,EAC3B,OAAO,CAAC,WAAW,WAAW,SAAS,KAAK,MAAM;AAAA,EACrD,OAAO;AAAA,IACL;AAAA,IACA,GAAG,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,IAAI,WAAW;AAAA,IACzC,SAAS,QAAQ;AAAA,IACjB,UAAU,QAAQ;AAAA,IAClB,GAAG,SAAS,MAAM,IAAI,QAAQ;AAAA,IAC9B,GAAG,SAAS,OAAO,IAAI,SAAS;AAAA,IAChC;AAAA;AAAA;AAAA,EACF,EAAE,KAAK,EAAE;AAAA;;ACxGX;AACA;AACA;;;ACkBA,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;AC7CO,IAAM,cAAc;AACpB,IAAM,cAAc;AAUpB,IAAM,aAAY,CAAC,UACxB,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK;AAEjF,IAAM,cAAa,CAAC,WAAsD;AAAA,EAC/E,OAAO,WAAU,MAAM,KAAK,EAAE,KAAK,GAAG;AAAA,EACtC,QAAQ,MAAM;AAChB;AAMO,IAAM,cAAa,CAAC,WAAmD;AAAA,EAC5E,OAAO,WAAU,MAAM,KAAK,EAAE,KAAK,GAAG;AAAA,EACtC,QAAQ,MAAM;AAChB;AAEO,IAAM,QAAO,CAAC,MAAyD,WAC5E,KAAK,KAAK,CAAC,QAAQ,IAAI,WAAW,MAAM;AAEnC,IAAM,gBAAe,CAC1B,KACA,WACoB;AAAA,EACpB,OAAO,WAAU,IAAI,UAAU,YAAY,CAAC,IAAI,IAAI,MAAM,MAAM,GAAG,CAAC;AAAA,EACpE,QAAQ,MAAM;AAChB;AAEO,IAAM,WAAU,CAAC,aAA4B,UAClD,WAAU,YAAW,KAAK,EAAE,KAAK,GAAG,MAAM,WAAU,MAAM,KAAK,EAAE,KAAK,GAAG;;;AD2DpE,IAAM,cAAc,WAAsB,cAAc;AAW/D,IAAM,WAAW,CAAC,UAChB,iBAAiB,OAAO,MAAM,QAAQ,QAAQ,OAAc,wBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,KACzE,aAAI,CAAC,SAAS;AAAA,EACnB,IAAI,SAAS;AAAA,IAAY,OAAO;AAAA,EAChC,MAAM,MAAM,MAAK,MAAM,MAAM,MAAM;AAAA,EACnC,OAAO,QAAQ,YAAY,YAAY,cAAa,KAAK,KAAK;AAAA,CAC/D,CACH;AAGF,IAAM,kBAAiB,CAAC,SACtB,SAAS,aAAa,YAAY;AAE7B,IAAM,sBAAsB,MACxB,kBACP,aACO,iBACL,YAAY,SAAS,GAAG;AAAA,EAKtB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAa,YAAG,UAAU,GAAG,QAAQ;AAAA,IACnC,OAAO,gBAAe,OAAO,SAAS,IAAI,CAAC;AAAA,GAC5C;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACrE,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,SAAS,IAAI;AAAA,IAGjC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,gBAAgB,KAAK,MAAM;AAAA,MACpD,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,IAAI;AAAA,MACrD,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAKxC,MAAM,SAAS,gBAAe,OAAO,SAAS,IAAI,CAAC;AAAA,IACnD,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACrE,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OACL,KAAK,QACL,aACA,MACO,yBAAiB,YAAW,IAAI,CAAC,CAC1C;AAAA,IACF,EAAO,SAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MACjC,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,sBAAc,YAAW,IAAI,CAAC,CAAC;AAAA,IACtF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,SAAS,IAAI,CAAC;AAAA,IAClD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,gBAAgB,KAAK,yDACnB,iFACA,+EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAOD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACO,yBAAiB,EAAE,QAAQ,KAAK,OAAO,CAAC,CACjD;AAAA,GACD;AACH,CAAC,CACH,CACF;;;AE5JF,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;ACrDA;AACA;AAMO,IAAM,cAAc;AACpB,IAAM,cAAc;AAU3B,IAAM,OAAM,CAAC,UAAmB;AAAA,EAC9B,MAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,SAAS,CAAC;AAAA,EACpE,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAAA;AAQ5C,IAAM,WAAW,CAAC,UAA6B;AAAA,EAC7C,MAAM,MAAiB,MAAM,QAAQ,KAAK,IACtC,QACA,OAAO,UAAU,WACf,MAAM,MAAM,GAAG,IACf,CAAC;AAAA,EACP,MAAM,SAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,UAAU,UAAU,EAAE;AAAA,EACnF,OAAO,CAAC,GAAG,IAAI,IAAI,MAAK,CAAC,EAAE,KAAK;AAAA;AASlC,IAAM,aAAa,CAAC,UAClB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAC/D,OAAO,KAAK,KAAK,EAAE,KAAK,IACxB,CAAC;AAGP,IAAM,SAAQ,CAAC,WAAsB;AAAA,EACnC,SAAS,MAAM,WAAW;AAAA,EAC1B,OAAO,MAAM,SAAS;AAAA,EACtB,QAAQ,MAAM,WAAW,QAAQ,MAAM;AAAA,EACvC,QAAQ,OAAO,MAAM,UAAU,CAAC;AAAA,EAChC,WAAW,MAAM,aAAa;AAAA,EAQ9B,QAAQ,SAAS,MAAM,MAAM,EAAE,KAAK,GAAG;AAAA,EACvC,UAAU,MAAM,YAAY;AAC9B;AAEO,IAAM,cAAa,CAAC,WAAsD;AAAA,KAC5E,OAAM,KAAK;AAAA,EACd,QAAQ,MAAM;AAChB;AAEO,IAAM,cAAa,CAAC,WAAmD;AAAA,KACzE,OAAM,KAAK;AAAA,EACd,QAAQ,MAAM;AAChB;AAEA,IAAM,gBAAe,CAAC,MAAoC,WAAsC;AAAA,EAC9F,SAAS,KAAK,KAAK,OAAO;AAAA,EAC1B,OAAO,KAAK,KAAK,KAAK;AAAA,EAMtB,QAAQ,KAAK,KAAK,QAAQ,IAAI;AAAA,EAC9B,QAAQ,KAAI,KAAK,MAAM;AAAA,EACvB,WAAW,KAAK,KAAK,SAAS;AAAA,EAC9B,QAAQ,SAAS,KAAK,MAAM;AAAA,EAC5B,UAAU,KAAK,KAAK,QAAQ;AAAA,EAC5B,QAAQ,WAAW,KAAK,MAAM;AAAA,EAE9B,QAAQ,MAAM;AAChB;AAMO,IAAM,WAAU,CAAC,aAA4B,UAClD,YAAW,aAAa,MAAM,WAAW,OACzC,YAAW,WAAW,MAAM,SAAS,OACrC,YAAW,YAAY,MAAM,WAAW,UACxC,YAAW,YAAY,MAAM,UAAU,MACvC,YAAW,eAAe,MAAM,aAAa,OAC7C,YAAW,cAAc,MAAM,YAAY,OAC3C,YAAW,OAAO,KAAK,GAAG,MAAM,SAAS,MAAM,MAAM,EAAE,KAAK,GAAG;AAe1D,IAAM,iBAAiB,CAAC,UAC7B,iBACE,OAAO,MAAM,QAAQ,QAAQ,OAAc,sBAAc,EAAE,QAAQ,MAAM,OAAO,CAAC,CAAC,CACpF,EAAE,KAAY,aAAI,CAAC,SAAU,SAAS,aAAa,aAAa,cAAa,MAAM,KAAK,CAAE,CAAC;AAatF,IAAM,WAAW,CAAC,UACvB,eAAe,KAAK,EAAE,KAAY,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CAAC;AAG3D,IAAM,kBAAiB,CAAC,SAC7B,SAAS,aAAa,YAAY;;;ADxB7B,IAAM,cAAc,WAAsB,cAAc;AAExD,IAAM,sBAAsB,MACxB,kBACP,aACO,iBACL,YAAY,SAAS,GAAG;AAAA,EAMtB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAY7B,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,OAAO,gBACL,OAAO,WAAW,YAAY,SAAS,IAAI,IAAI,eAAe,IAAI,CACpE;AAAA,GACD;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACrE,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,WAAW;AAAA,MAAW;AAAA,IAI1B,MAAM,OAAO,OAAO,eAAe,IAAI;AAAA,IAGvC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,gBAAgB,KAAK,MAAM;AAAA,MACpD,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,IAAI;AAAA,MACrD,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAKxC,MAAM,SAAS,gBAAe,OAAO,SAAS,IAAI,CAAC;AAAA,IACnD,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACrE,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OACL,KAAK,QACL,aACA,MACO,yBAAiB,YAAW,IAAI,CAAC,CAC1C;AAAA,IACF,EAAO,SAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MACjC,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,sBAAc,YAAW,IAAI,CAAC,CAAC;AAAA,IACtF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,SAAS,IAAI,CAAC;AAAA,IAClD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,gBAAgB,KAAK,4DACnB,iFACA,+EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAOD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACO,yBAAiB,EAAE,QAAQ,KAAK,OAAO,CAAC,CACjD;AAAA,GACD;AACH,CAAC,CACH,CACF;;;AH3KK,IAAM,2BAA2B,CACtC,IACA,QACA,SAAwB,CAAC,GACzB,UAAmC,CAAC,MAE7B,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WAAW,OAAc,aAAI;AAAA,IACjC,OAAO,CAAC,UAAW,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,IAC3E,KAAK,MAAM,kBAAkB,MAAK;AAAA,EACpC,CAAC;AAAA,EACD,MAAM,QAAQ,CAAO,aAAyC;AAAA,IAC5D,MAAM,OAAO,SAAS,KAAmB,qBAAO,CAAC;AAAA,IACjD,OAAO,QAAQ,UAAU,YAAY,OAAO,KAAK,KAAK,MAAM,QAAQ,KAAK,CAAC;AAAA;AAAA,EAE5E,MAAM,OAAO,OAAO,MAClB,YAAY,GAAG,WAAW;AAAA,IACxB,OAAO,CAAC,GAAG,SAAS,KAAK,KAAK;AAAA,IAC9B,QAAQ,SAAS,KAAK;AAAA,IACtB;AAAA,EACF,CAAC,CACH;AAAA,EACA,MAAM,QAAQ,OAAO,MAAM,aAAa,GAAG,iBAAiB,KAAK,SAAS,OAAO,OAAO,CAAC,CAAC;AAAA,EAG1F,MAAM,QAAQ,OAAc,aAC1B,SAAS,MAAM,IAAI,CAAC,SAClB,MACE,YAAY,GAAG,MAAM,KAAK,aAAa;AAAA,IACrC,SAAS,KAAK;AAAA,IACd,QAAQ,CAAC,GAAG,KAAK,MAAM;AAAA,IACvB;AAAA,IACA,QAAQ,KAAK;AAAA,EACf,CAAC,CACH,CACF,CACF;AAAA,EACA,MAAM,SAAS,OAAc,aAC3B,SAAS,OAAO,IAAI,CAAC,UACnB,MACE,WAAW,GAAG,MAAM,MAAM,cAAc;AAAA,IACtC,MAAM;AAAA,IACN,WAAW;AAAA,IACX,QAAQ,MAAM;AAAA,IACd;AAAA,IACA,MAAM;AAAA,IACN,MAAM,MAAM;AAAA,EACd,CAAC,CACH,CACF,CACF;AAAA,EACA,OAAO,EAAE,UAAU,QAAQ,OAAO,MAAM,MAAM;AAAA,CAC/C;;AKtFH,qBAAS;AACT;AACA;AAoCO,IAAM,YAAY,WAAoB,YAAY;AAGlD,IAAM,cAAa,CAAC,WAAoB,KAAK,OAAM,KAAK,GAAG,MAAM,OAAO,MAAM,IAAI,EAAE;AAE3F,IAAM,SAAQ,CAAC,WAAoB;AAAA,EACjC,OAAO,OAAO,MAAM,SAAS,CAAC;AAAA,EAC9B,QAAQ,OAAO,MAAM,UAAU,GAAG;AAAA,EAClC,MAAM,MAAM,QAAQ,KAAK,OAAO,MAAM,IAAI;AAAA,EAC1C,QAAQ,MAAM,WAAW,OAAO,MAAM;AAAA,EACtC,SAAS,OAAO,MAAM,WAAW,CAAC;AAAA,KAC9B,MAAM,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;AACzD;AAEA,IAAM,aAAW,YAAmC;AAAA,EAClD,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,OAAO,IAAI,KAAK,UAAU,CAAC;AAAA,IAC3B,QAAQ,IAAI,KAAK,WAAW,GAAG;AAAA,IAC/B,MAAM,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAAA,IACxD,MAAM,MAAM;AAAA,IACZ,QAAQ,KAAK,cAAc,KAAK,KAAK,cAAc;AAAA,IACnD,SAAS,IAAI,KAAK,YAAY,CAAC;AAAA,IAC/B,MAAM,MAAM;AAAA,EACd;AAAA,EACA,YAAY,CAAC,UAAU,SAAS,MAAM;AAAA,EACtC;AAAA,EAEA,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS,CAAC,aAAY,UACpB,YAAW,UAAU,MAAM,QAAQ,KAAK,OAAO,MAAM,IAAI,QACzD,YAAW,YAAY,MAAM,UAAU,QACvC,YAAW,WAAW,MAAM,SAAS,MACrC,YAAW,aAAa,MAAM,WAAW,MACzC,YAAW,YAAY,MAAM,WAAW;AAAA,EAC1C,MAAM,CAAC,UAAU,SAAS,MAAM,aAAa,OAAO,MAAM,IAAI;AAAA,EAC9D,YAAY;AACd,CAAC;AAEM,IAAM,oBAAoB,MACtB,kBAAO,WAAkB,iBAAQ,UAAU,SAAS,GAAG,UAAQ,CAAC,CAAC;;ACX5E,qBAAS;AACT;AACA;;;AC/DO,IAAM,mBAAmB;AASzB,IAAM,QAAQ,CAAC,UACpB,GAAG,OAAO,MAAM,KAAK,KAAK,OAAO,MAAM,MAAM;AAe/C,IAAM,UAAQ,CAAC,WAAgC;AAAA,EAC7C,SAAS,MAAM,WAAW;AAAA,EAC1B,SAAS,MAAM,YAAY,OAAO,MAAM;AAAA,EACxC,UAAU,MAAM,YAAY;AAAA,KACxB,MAAM,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,OAAO,MAAM,IAAI,EAAE;AACjE;AAUO,IAAM,cAAa,CAAC,WAAgC;AAAA,KACtD,QAAM,KAAK;AAAA,EACd,IAAI,MAAM,KAAK;AAAA,EACf,QAAQ,MAAM;AAAA,EACd,MAAM;AACR;AAgBO,IAAM,cAAa,CAAC,WAAgC;AAAA,KACtD,QAAM,KAAK;AAAA,EACd,QAAQ;AACV;;;AD4EO,IAAM,wBAAwB,WAAgC,wBAAwB;AAY7F,IAAM,SAAS,CAAC,UAA2B;AAAA,EACzC,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,MAAM,SAAS,OAAO,WAAW,KAAK,KAAK,CAAC;AAAA,EAC5C,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAAA;AAG5C,IAAM,aAAW,YAA2D;AAAA,EAY1E,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,IACjC,SAAS,KAAK,KAAK,YAAY,KAAK;AAAA,IACpC,OAAO,IAAI,KAAK,UAAU,MAAM,KAAK;AAAA,IACrC,IAAI,KAAK,KAAK,OAAO,MAAM,KAAK,CAAC;AAAA,IACjC,QAAQ,IAAI,KAAK,WAAW,MAAM,MAAM;AAAA,IACxC,MAAM,OAAO,KAAK,OAAO;AAAA,IACzB,YAAY,KAAK,KAAK,eAAe,EAAE;AAAA,IACvC,UAAU,KAAK,KAAK,aAAa,gBAAgB;AAAA,IACjD,QAAQ,KAAK,KAAK,WAAW,EAAE;AAAA,IAC/B,YAAY,KAAK,KAAK,WAAW,MAAM,UAAU;AAAA,IACjD,MAAM,KAAK,KAAK,SAAS,OAAO;AAAA,EAClC;AAAA,EACA,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAmBZ,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS,CAAC,aAAY,UACpB,YAAW,eAAe,MAC1B,YAAW,cAAc,MAAM,YAAY,qBAC3C,YAAW,aAAa,MAAM,YAAY,SAC1C,YAAW,aAAa,MAAM,WAAW,QACxC,MAAM,SAAS,aAAa,YAAW,SAAS,MAAM;AAAA,EACzD,MAAM,CAAC,UAAU,uBAAuB,MAAM,KAAK;AAAA,EACnD,YAAY;AACd,CAAC;AAUM,IAAM,gCAAgC,MAClC,kBACP,uBACO,iBAAQ,sBAAsB,SAAS,GAAG,UAAQ,CAAC,CAC5D;;AE7NF,qBAAS;AACT,uBAAS;AAET;AACA;;;ACHA;AAkBA,IAAM,SAAS;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA2BO,IAAM,kBAAkB,CAAC,UAC9B,iBAAiB,YAAY,MAAM,WAAW;AAGhD,IAAM,gBAAgB,CAAC,WACd,aACL,OAAO,IAAI,CAAC,eACV,IAAkB,QAAQ,QAAQ,OAAO,GAAG,sBAAsB,EAAE,KAC3D,aAAI,CAAC,UAAU,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,SAAS,EAAE,MAAM,GAQ1E,iBAAQ,iBAAiB,MAAa,iBAAQ,CAAC,CAAC,CACzD,CACF,GACA,EAAE,aAAa,YAAY,CAC7B,EAAE,KAAY,aAAI,CAAC,WAAW,OAAO,OAAO,CAAC,OAAO,WAAU,QAAQ,QAAO,CAAC,CAAC,CAAC;AAU3E,IAAM,eAAe,CAC1B,QACA,YAC4B;AAAA,EAC5B,IAAI,WAAW,aAAa,YAAY;AAAA,IAAW,OAAO;AAAA,EAC1D,IAAI,WAAW,aAAa,YAAY;AAAA,IAAW,OAAO;AAAA,EAC1D,OAAO,WAAW,UAAU,IAAI;AAAA;AAiBlC,IAAM,gBAAgB,CAAC,WACd,aACL,CAAC,WAAW,SAAS,EAAE,IAAI,CAAC,SAC1B,IAAa,QAAQ,QAAQ,OAAO,2BAA2B,QAAQ,EAAE,KAChE,aAAI,UAAS,GACb,iBAAQ,iBAAiB,MAAa,iBAAQ,SAAS,CAAC,CACjE,CACF,GACA,EAAE,aAAa,YAAY,CAC7B,EAAE,KACO,iBAAQ,EAAE,QAAQ,aAAa;AAAA,EACpC,MAAM,UAAU,aAAa,QAAQ,OAAO;AAAA,EAC5C,OAAO,YAAY,iBACR,aACL,IAAI,MACF,uFACE,6DACJ,CACF,IACO,iBAAQ,OAAO;AAAA,CAC3B,CACH;AAGK,IAAM,aAAY,CAAC,UAA2B,KAAK,UAAU,SAAS,KAAK,CAAC;AAEnF,IAAM,WAAW,CAAC,UAA4B;AAAA,EAC5C,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACxB,OAAO,MACJ,IAAI,QAAQ,EACZ,KAAK,CAAC,MAAM,UAAU,KAAK,UAAU,IAAI,EAAE,cAAc,KAAK,UAAU,KAAK,CAAC,CAAC;AAAA,EACpF;AAAA,EACA,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAAA,IAC/C,MAAM,UAAU,OAAO,QAAQ,KAAgC,EAC5D,OAAO,EAAE,SAAS,QAAQ,QAAQ,EAClC,KAAK,EAAE,QAAQ,WAAW,KAAK,cAAc,KAAK,CAAC;AAAA,IACtD,OAAO,OAAO,YAAY,QAAQ,IAAI,EAAE,KAAK,WAAW,CAAC,KAAK,SAAS,KAAK,CAAC,CAAC,CAAC;AAAA,EACjF;AAAA,EACA,OAAO;AAAA;AAUF,IAAM,kBAAkB,CAAC,WACvB,aAAI,CAAC,cAAc,MAAM,GAAG,cAAc,MAAM,CAAC,GAAG,EAAE,aAAa,YAAY,CAAC,EAAE,KAChF,aAAI,EAAE,QAAQ,YAAY,SAAS,MAAM,CAClD;;;ADjHK,IAAM,kBAAkB,WAA0B,kBAAkB;AAE3E,IAAM,QAAO,CAAC,UACZ,gBAAgB,MAAM,MAAM,EAAE,KAAY,aAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC;AAEpE,IAAM,0BAA0B,MAC5B,kBACP,iBACO,iBACL,gBAAgB,SAAS,GAAG;AAAA,EAE1B,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAE7B,MAAa,YAAG,UAAU,GAAG,QAAQ;AAAA,IACnC,OAAO,OAAO,MAAK,IAAI;AAAA,GACxB;AAAA,EAQD,MAAa,YAAG,UAAU,GAAG,QAAwC;AAAA,IACnE,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IACvB,QAAQ,YAAY,OAAO,MAAK,IAAI;AAAA,IACpC,OAAO,YAAY,IAAK,EAAE,QAAQ,OAAO,IAAe,EAAE,QAAQ,SAAS;AAAA,GAC5E;AAAA,EAED,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAiBxC,MAAM,SAAS,OAAO,MAAK,IAAI;AAAA,IAC/B,IAAI,OAAO,YAAY;AAAA,MAAG,OAAO;AAAA,IAIjC,OAAO;AAAA,IACP,OAAO,IAAI,KAAK,QAAQ,aAAa,OAAO,aAAa;AAAA,IAOzD,MAAM,QAAQ,OAAO,MAAK,IAAI;AAAA,IAC9B,IAAI,MAAM,YAAY,GAAG;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,0CAA0C,OAAO,MAAM,OAAO,qBAC5D,mFACA,yEACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EASD,QAAQ,MAAa;AACvB,CAAC,CACH,CACF;;AE/FF,qBAAS;AACT;AACA;;;ACjCO,IAAM,WAAW,CAAC,UACvB,GAAG,MAAM,QAAQ,MAAM,KAAK,QAAQ,KAAK,GAAG;AAG9C,IAAM,cAAc,CAAC,UAAqB,iBAAiB,MAAM,qBAAqB,MAAM;AAoBrF,IAAM,aAAa,CAAC,WACxB,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,GAC9B,IAAI,CAAC,UAAmB,eAAe,KAAK,CAAC,EAC7C,OAAO,CAAC,UAAU,UAAU,EAAE,EAC9B,KAAK,EACL,KAAK,GAAG;AAGN,IAAM,iBAAiB,CAAC,UAC7B,UAAU,YAAY,KAAK,WAAW,CAAC,YAAY,KAAK,CAAC,CAAC;AAO5D,IAAM,QAAQ,CAAC,UACb,UAAU,aAAa,UAAU,KAAK,YAAY;AA0B7C,IAAM,YAAW,CAAC,WAA+D;AAAA,EACtF,mBAAmB,MAAM,MAAM,aAAa;AAAA,EAC5C,cAAc,MAAM,cAAc,YAAY,YAAY,YAAY,MAAM,SAAS;AAAA,EACrF,eAAe,MAAM,MAAM,aAAa;AAAA,EACxC,SAAS,MAAM,MAAM,OAAO;AAC9B;AAUO,IAAM,QAAO,CAAC,WAAmD;AAAA,EACtE,MAAM,MAAM,SAAS,OAAO,MAAM;AAAA,EAClC,MAAM,MAAM;AAAA,KACT,OAAO,YACR,OAAO,QAAQ,UAAS,KAAK,CAAC,EAAE,OAC9B,CAAC,UAAqC,MAAM,OAAO,SACrD,CACF;AACF;AAOO,IAAM,eAAa,CAAC,WAAmD;AAAA,KACzE,MAAK,KAAK;AAAA,EACb,QAAQ,MAAM;AAAA,EACd,MAAM;AACR;AAkBO,IAAM,cAAa,CAAC,UAAkD;AAAA,EAC3E,MAAM,QAAQ,OAAO,QAAQ,UAAS,KAAK,CAAC,EACzC,OAAO,IAAI,WAAW,UAAU,SAAS,EACzC,IAAI,EAAE,SAAS,GAAG;AAAA,EACrB,OAAO,WAAW,MAAK,KAAK,GAAG,KAAK;AAAA;;;ADY/B,IAAM,mBAAmB,WAA2B,mBAAmB;AAE9E,IAAM,aAAW,YAAiD;AAAA,EAChE,YAAY,CAAC,MAAM,UAAU;AAAA,IAS3B,MAAM,WAAW,KAAK,KAAK,OAAO;AAAA,IAClC,IAAI,aAAa,MAAM,aAAa,MAAM;AAAA,MAAM;AAAA,IAChD,OAAO;AAAA,MACL,MAAM,KAAK,KAAK,OAAO;AAAA,MACvB,eAAe,KAAK,KAAK,kBAAkB;AAAA,MAC3C,WAAW,WAAW,KAAK,aAAa;AAAA,MACxC,eAAe,KAAK,KAAK,gBAAgB;AAAA,MACzC,SAAS,KAAK,KAAK,UAAU;AAAA,MAC7B,MAAM,IAAI,KAAK,SAAS,CAAC;AAAA,MACzB,MAAM,KAAK,KAAK,OAAO;AAAA,MACvB,QAAQ;AAAA,MACR,UAAU,SAAS,KAAK;AAAA,MACxB,MAAM,MAAM;AAAA,MACZ,MAAM,KAAK,KAAK,OAAO;AAAA,IACzB;AAAA;AAAA,EAEF,YAAY,CAAC,UAAU,qBAAqB,MAAM;AAAA,EAClD;AAAA,EAEA,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EAeA,SAAS,CAAC,aAAY,UACpB,YAAW,aAAa,MAAM,WAAW,OACzC,YAAW,UAAU,MAAM,SAAS,SACpC,YAAW,mBAAmB,MAAM,iBAAiB,OACrD,YAAW,mBAAmB,MAAM,iBAAiB,OACrD,YAAW,cAAc,eAAe,MAAM,SAAS;AAAA,EAOzD,MAAM,CAAC,UAAU,qBAAqB,MAAM,gBAAgB,SAAS,KAAK;AAAA,EAC1E;AACF,CAAC;AAYM,IAAM,2BAA2B,MAC7B,kBAAO,kBAAyB,iBAAQ,iBAAiB,SAAS,GAAG,UAAQ,CAAC,CAAC;;AEvM1F,qBAAS;AACT;AACA;AA6DO,IAAM,iBAAiB,WAAyB,iBAAiB;AAQxE,IAAM,QAAQ,CAAC,UAAoB,OAAO,UAAU,WAAW,QAAQ;AAUvE,IAAM,UAAQ,CAAC,UAAgD;AAAA,EAC7D,MAAM,QAAQ,MAAM,SAAS;AAAA,EAC7B,OAAO;AAAA,IAIL,iBAAiB,MAAM,iBAAiB,OAAO,MAAM;AAAA,IACrD,WAAW,MAAM,cAAc,OAAO,MAAM;AAAA,IAC5C,MAAM,MAAM;AAAA,OAIR,UAAU,KAAK,CAAC,IAAI,EAAE,MAAM;AAAA,OAC5B,MAAM,QAAQ,YAAY,CAAC,IAAI,EAAE,KAAK,OAAO,MAAM,GAAG,EAAE;AAAA,EAC9D;AAAA;AAoBF,IAAM,cAAa,CAAC,UAAgD;AAAA,EAClE,MAAM,SAAQ;AAAA,IACZ,IAAK,MAAM,SAAS,QAAQ,KAAK,CAAC,OAAO,IAAI,CAAC;AAAA,IAC9C,GAAI,MAAM,QAAQ,YAAY,CAAC,KAAK,IAAI,CAAC;AAAA,EAC3C;AAAA,EACA,OAAO,WAAW,QAAM,KAAK,GAAG,MAAK;AAAA;AAGvC,IAAM,aAAW,YAA6C;AAAA,EAI5D,UAAU;AAAA,EACV,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,OAAO,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AAAA,IAC3D,QAAQ,MAAM;AAAA,IACd,cAAc,KAAK,KAAK,gBAAgB;AAAA,IACxC,KAAK,MAAM,KAAK,MAAM;AAAA,IACtB,WAAW,KAAK,KAAK,YAAY;AAAA,IACjC,MAAM,MAAM;AAAA,IAOZ,MAAM,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAAA,EAC1D;AAAA,EACA,YAAY,MAAM;AAAA,EAClB,YAAY,CAAC,WAAW,KAAK,QAAM,KAAK,GAAG,MAAM,MAAM,KAAK;AAAA,EAS5D,UAAU,EAAE,QAAQ,+BAA+B,QAAQ,oCAAoC;AAAA,EAC/F,SAAS,CAAC,aAAY,UACpB,YAAW,SAAS,MAAM,QAC1B,YAAW,WAAW,MAAM,SAAS,OACrC,YAAW,QAAQ,MAAM,OACzB,YAAW,eAAe,MAAM,cAAc,SAC9C,YAAW,kBAAkB,MAAM,iBAAiB;AAAA,EAOtD,MAAM,CAAC,UAAU,qBAAqB,MAAM;AAAA,EAC5C;AACF,CAAC;AAgBM,IAAM,yBAAyB,MAC3B,kBAAO,gBAAuB,iBAAQ,eAAe,SAAS,GAAG,UAAQ,CAAC,CAAC;;ACrLtF,qBAAS;AACT;AACA;AAwEO,IAAM,iBAAiB,WAAyB,iBAAiB;AAQxE,IAAM,WAAW,CAAC,MAAc,eAC7B,SAAS,KAAK,QAAQ,WAAW,cAAa,aAAa,cAAa,KAAK,QAAQ;AASxF,IAAM,QAAO,CAAC,WAAiD;AAAA,KACzD,MAAM,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;AAAA,KACzD,MAAM,QAAQ,YAAY,CAAC,IAAI,EAAE,KAAK,MAAM,IAAI;AAAA,KAChD,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,KAC5D,MAAM,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;AAAA,KACnD,MAAM,QAAQ,YAAY,CAAC,IAAI,EAAE,KAAK,OAAO,MAAM,GAAG,EAAE;AAAA,KACxD,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,KAAK,EAAE;AAAA,KAC3D,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,KAAK,EAAE;AAAA,KAC3D,MAAM,QAAQ,YAAY,CAAC,IAAI,EAAE,KAAK,OAAO,MAAM,GAAG,EAAE;AAAA,KACxD,MAAM,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa,OAAO,MAAM,YAAY,EAAE;AACxF;AAkBA,IAAM,YAAoD;AAAA,EACxD,MAAM,CAAC,OAAO,WAAW,OAAO,OAAO;AAAA,EACvC,MAAM,CAAC,OAAO,WAAW,QAAQ,OAAO,OAAO;AAAA,EAC/C,QAAQ,CAAC,OAAO,WAAW,QAAQ,OAAO,OAAO;AAAA,EACjD,MAAM,CAAC,OAAO,WAAW,QAAQ,OAAO,OAAO;AAAA,EAC/C,OAAO,CAAC,OAAO,WAAW,QAAQ,OAAO,OAAO;AAClD;AAEA,IAAM,aAAW,YAA6C;AAAA,EAI5D,UAAU;AAAA,EACV,YAAY,CAAC,MAAM,UAAU;AAAA,IAQ3B,MAAM,WAAW,KAAK,KAAK,OAAO;AAAA,IAClC,IAAI,aAAa,MAAM,aAAa,MAAM;AAAA,MAAM;AAAA,IAChD,OAAO;AAAA,MACL,QAAQ,KAAK,KAAK,SAAS;AAAA,MAC3B,KAAK,KAAK,KAAK,MAAM;AAAA,MACrB,SAAS,KAAK,KAAK,UAAU;AAAA,MAC7B,MAAM,KAAK,KAAK,OAAO,MAAM,KAAK,QAAQ,KAAK,KAAK,OAAO;AAAA,MAC3D,KAAK,IAAI,KAAK,QAAQ,CAAC;AAAA,MACvB,OAAO,IAAI,KAAK,KAAK,QAAQ,CAAC;AAAA,MAC9B,OAAO,IAAI,KAAK,KAAK,QAAQ,CAAC;AAAA,MAC9B,QAAQ;AAAA,MACR,KAAK,IAAI,KAAK,QAAQ,CAAC;AAAA,MACvB,MAAM,MAAM;AAAA,MACZ,aAAa,IAAI,KAAK,cAAc,CAAC;AAAA,MACrC,MAAM,MAAM;AAAA,IACd;AAAA;AAAA,EAEF,YAAY,MAAM;AAAA,EAClB,YAAY,CAAC,WAAW,KAAK,MAAK,KAAK,GAAG,MAAM,MAAM,MAAM,MAAM,MAAM,KAAK;AAAA,EAO7E,UAAU,EAAE,QAAQ,+BAA+B,QAAQ,oCAAoC;AAAA,EAC/F,SAAS,CAAC,aAAY,UACpB,YAAW,SAAS,MAAM,OAAO,MACjC,YAAW,UAAU,IAAI,MAAM,KAAK,KACpC,SAAS,YAAW,MAAM,MAAM,IAAI,KACpC,YAAW,SAAS,MAAM,OAAO,OACjC,YAAW,aAAa,MAAM,WAAW,OACzC,YAAW,UAAU,IAAI,MAAM,KAAK,KACpC,YAAW,kBAAkB,MAAM,gBAAgB,MACnD,YAAW,SAAS,MAAM,OAAO,MACjC,YAAW,YAAY,MAAM,UAAU;AAAA,EACzC,MAAM,CAAC,UAAU,qBAAqB,MAAM;AAAA,EAC5C,YAAY,CAAC,UAAU;AAAA,IACrB,MAAM,SAAS,MAAK,KAAK;AAAA,IACzB,MAAM,QAAQ,UAAU,MAAM,MAAM,OAAO,CAAC,WAAW,OAAO,YAAY,SAAS;AAAA,IACnF,OAAO,WAAW,QAAQ,KAAK;AAAA;AAEnC,CAAC;AAgBM,IAAM,yBAAyB,MAC3B,kBAAO,gBAAuB,iBAAQ,eAAe,SAAS,GAAG,UAAQ,CAAC,CAAC;;AChLtF,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;AClEO,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AAsB9B,IAAM,SAAQ,CAAC,MAAc,UAC3B,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,MAAM;AAQ7C,IAAM,cAAc,CAAC,aAClB,KAAK,QAAQ;AAgChB,IAAM,cAAc,CAAC,SACnB,OAAO,YAAY,OAAO,QAAQ,IAAI,EAAE,IAAI,EAAE,KAAK,WAAW,CAAC,IAAI,WAAW,KAAK,GAAG,GAAG,KAAK,CAAC,CAAC;AAqBlG,IAAM,WAAU,CAAC,WAAyB;AAAA,KACrC,OAAM,WAAW,MAAM,OAAO;AAAA,KAC9B,OAAM,WAAW,MAAM,OAAO;AAAA,KAC9B,OAAM,WAAW,KAAK,MAAM,OAAO,CAAC;AAAA,KACpC,OAAM,SAAS,MAAM,KAAK;AAAA,KAC1B,OAAM,iBAAiB,MAAM,aAAa;AAAA,KAC1C,OAAM,iBAAiB,MAAM,gBAAgB;AAAA,KAC7C,OAAM,UAAU,KAAK,MAAM,MAAM,CAAC;AACvC;AASO,IAAM,eAAa,CAAC,WAAiD;AAAA,KACvE,YAAY,MAAM,OAAO;AAAA,KACzB,SAAQ,KAAK;AAAA,EAChB,SAAS,MAAM;AAAA,EACf,MAAM,MAAM;AACd;AAQO,IAAM,cAAa,CAAC,WAAiD;AAAA,KACvE,SAAQ,KAAK;AAAA,EAChB,SAAS,MAAM;AACjB;AASO,IAAM,qBAAoB,CAAC,UAChC,YAAY,aAAW,KAAK,CAAC;AAGxB,IAAM,qBAAoB,CAAC,UAChC,YAAY,YAAW,KAAK,CAAC;;;ACzI/B;AACA;AAmBA,IAAM,OAAM,CAAC,OAAgB,WAAW,OAAQ,OAAO,UAAU,WAAW,QAAQ;AASpF,IAAM,SAAS,CAAC,UACd,MACG,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,EACL,KAAK,GAAG;AAEN,IAAM,YAAW,CAAC,WAA8B,SACrD,cAAa,aAAa,OAAO,SAAQ,MAAM,OAAO,IAAI;AAErD,IAAM,QAAO,CAAI,WAAyB,SAC/C,cAAa,aAAa,cAAa;AASzC,IAAM,gBAAe,CAAC,MAAe,UAA2C;AAAA,EAC9E,MAAM,OAAO;AAAA,EACb,OAAO;AAAA,IACL,SAAS,KAAI,KAAK,UAAU;AAAA,IAC5B,SAAS,KAAI,KAAK,UAAU;AAAA,IAC5B,SAAS,KAAK,KAAK,UAAU;AAAA,IAC7B,OAAO,KAAI,KAAK,QAAQ;AAAA,IACxB,eAAe,KAAI,KAAK,gBAAgB;AAAA,IACxC,iBAAiB,KAAI,KAAK,gBAAgB;AAAA,IAC1C,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,SAAS,MAAM;AAAA,IACf,MAAM,KAAI,KAAK,SAAS,MAAM,IAAI;AAAA,EACpC;AAAA;AAqBK,IAAM,oBAAoB,CAAC,UAChC,iBACE,OAAO,MAAM,QAAQ,aAAa,OAAe,mBAAW,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CACzF,EAAE,KAAY,aAAI,CAAC,SAAU,SAAS,aAAa,aAAa,cAAa,MAAM,KAAK,CAAE,CAAC;AAatF,IAAM,cAAc,CAAC,UAC1B,kBAAkB,KAAK,EAAE,KAAY,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CAAC;AAG9D,IAAM,kBAAiB,CAAC,SAC7B,SAAS,aAAa,YAAY;AAM7B,IAAM,WAAU,CAAC,aAA+B,UACrD,UAAS,MAAM,SAAS,YAAW,OAAO,KAC1C,UAAS,MAAM,OAAO,YAAW,KAAK,KACtC,UAAS,MAAM,kBAAkB,YAAW,gBAAgB,KAC5D,MAAK,MAAM,SAAS,YAAW,OAAO,KACtC,MAAK,MAAM,QAAQ,YAAW,MAAM,KACpC,MAAK,MAAM,eAAe,YAAW,aAAa,KAClD,MAAK,MAAM,SAAS,YAAW,OAAO;;;AFcjC,IAAM,iBAAiB,WAAyB,mBAAmB;AAAA,EACxE,sBAAsB;AACxB,CAAC;AAEM,IAAM,yBAAyB,MAC3B,kBACP,gBACO,iBACL,eAAe,SAAS,GAAG;AAAA,EAOzB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAQ7B,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,OAAO,gBACL,OAAO,WAAW,YAAY,YAAY,IAAI,IAAI,kBAAkB,IAAI,CAC1E;AAAA,GACD;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,gBAAgB,aAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACxE,OAAO,YAAW,gBAAgB,YAAW,IAAI,GAAG,KAAK;AAAA,IACzD,IAAI,WAAW;AAAA,MAAW;AAAA,IAI1B,MAAM,OAAO,OAAO,kBAAkB,IAAI;AAAA,IAG1C,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,mBAAmB,KAAK,OAAO;AAAA,MACxD,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,gBAAgB,aAAW,IAAI,GAAG,IAAI;AAAA,MACxD,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAIxC,MAAM,SAAS,gBAAe,OAAO,YAAY,IAAI,CAAC;AAAA,IACtD,OAAO,YAAW,gBAAgB,aAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACxE,OAAO,YAAW,gBAAgB,YAAW,IAAI,GAAG,KAAK;AAAA,IACzD,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OACL,KAAK,QACL,aACA,MACQ,uBAAc,mBAAkB,IAAI,CAAC,CAC/C;AAAA,IACF,EAAO,SAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MACjC,OAAO,OACL,KAAK,QACL,aACA,MACQ,oBAAW,mBAAkB,IAAI,CAAC,CAC5C;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,YAAY,IAAI,CAAC;AAAA,IACrD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,WAAW,KAAK,mEACd,gFACA,0EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAMD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACQ,uBAAc,EAAE,SAAS,KAAK,QAAQ,CAAC,CACjD;AAAA,GACD;AACH,CAAC,CACH,CACF;;AGpKF,qBAAS;AACT,uBAAS;AACT;AACA;;;ACvEA;AACA;AAsCO,IAAM,cAAc,CAAC,aAC1B,MAAM,QAAQ,QAAQ,IAClB,SAAS,QAAQ,CAAC,UAAmB;AAAA,EACnC,MAAM,OAAO;AAAA,EACb,MAAM,SAAS,YAAY,KAAK,QAAQ;AAAA,EACxC,OAAO,OAAO,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,SAAS,EAAE;AAAA,CACnF,IACD,CAAC;AAQP,IAAM,iBAAe,CACnB,MACA,WACuB;AAAA,EACvB,SAAS,YAAY,KAAK,QAAQ,EAAE,KAAK,GAAG;AAAA,EAC5C,QAAQ,KAAK,KAAK,QAAQ,SAAS;AAAA,EACnC,MAAM,MAAM;AAAA,EACZ,MAAM,MAAM;AAAA,EACZ,OAAO,KAAK,KAAK,OAAO,SAAS;AACnC;AAoBO,IAAM,iBAAiB,CAAC,UAC7B,iBACE,OACE,MAAM,QACN,QACA,OACM,uBAAe,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,KAAK,CAAC,CAC7D,CACF,EAAE,KACO,aAAI,CAAC,SAAS;AAAA,EACnB,IAAI,SAAS;AAAA,IAAY,OAAO;AAAA,EAGhC,OAAO,KAAK,KAAK,IAAI,MAAM,KAAK,YAAY,eAAa,MAAM,KAAK;AAAA,CACrE,CACH;AAaK,IAAM,WAAW,CAAC,UACvB,eAAe,KAAK,EAAE,KAAY,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CAAC;AAG3D,IAAM,kBAAiB,CAAC,SAC7B,SAAS,aAAa,YAAY;;;AC9GpC;AACA;AAQO,IAAM,kBAAkB;AA6BxB,IAAM,wBAAwB,CAAC,UACpC,MAAM,YAAY,aAAa,MAAM,cAAc,YAAY,YAAY;AAmBtE,IAAM,eAAa,CAAC,WAAiD;AAAA,KACtE,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ,KAAK,GAAG,EAAE;AAAA,EAC1E,MAAM,MAAM;AAAA,KACR,MAAM,cAAc,YAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;AAAA,KAClE,MAAM,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,OAAO,MAAM,MAAM,EAAE;AAAA,KACjE,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,MAAM,YAAY;AAAA,KACxE,MAAM,oBAAoB,YAAY,CAAC,IAAI,EAAE,gBAAgB,MAAM,gBAAgB;AACzF;AAcA,IAAM,qBAAoB,CAAC,UAAwD;AAAA,EACjF,MAAM,OAAO,aAAW,KAAK;AAAA,EAC7B,OAAO;AAAA,OACF;AAAA,IACH,cAAc,KAAK;AAAA,IACnB,MAAM,MAAM;AAAA,EACd;AAAA;AAIF,IAAM,kBAAkB;AAkDjB,IAAM,aAAa,CACxB,OACA,UAEO,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WAAW,OAAO,MAAK,KAAK;AAAA,EAClC,IAAI,aAAa;AAAA,IAAW,OAAO;AAAA,EAEnC,IAAI,MAAM,YAAY,aAAa,MAAM,cAAc,WAAW;AAAA,IAChE,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,MAAM,QAAQ,MAAM,gEACrB,0FACA,yFACA,yDACJ,CACF;AAAA,EACF;AAAA,EAaA,OAAO,UAAU,sBAAsB,KAAK,GAAG,QAAO,aAAW,KAAK,CAAC,GAAG,IAAI;AAAA,EAE9E,MAAM,OAAO,OAAO,OAClB,MAAM,QACN,aACA,MACM,0BAAkB,mBAAkB,KAAK,CAAC,CAClD;AAAA,EAEA,MAAM,UAAS,CAAC,aACP,aAAI,UAAU,GAAG;AAAA,IACtB,MAAM,OAAO,OAAO,MAAK,KAAK;AAAA,IAC9B,IAAI,SAAS,aAAa,YAAY;AAAA,MAAG,OAAO;AAAA,IAChD,OAAc,eAAM,WAAW;AAAA,IAC/B,OAAO,OAAO,QAAO,WAAW,CAAC;AAAA,GAClC;AAAA,EAEH,MAAM,QAAQ,OAAO,QAAO,eAAe;AAAA,EAC3C,IAAI,UAAU,WAAW;AAAA,IACvB,OAAO,OAAc,aACnB,IAAI,MACF,SAAS,MAAM,kBAAkB,MAAM,uBAAuB,KAAK,MAAM,WAAW,OAClF,2FACA,2DAA2D,MAAM,8BACjE,2FACA,yFACA,0FACA,yFACA,0FACA,oCACJ,CACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,CACR;AAeI,IAAM,cAAc,CAAC,UAC1B,OACE,MAAM,QACN,aACA,MACM,0BAAkB,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,KAAK,CAAC,CAChE;;;AFvEK,IAAM,iBAAiB,WAAyB,mBAAmB;AAAA,EACxE,sBAAsB;AACxB,CAAC;AAEM,IAAM,yBAAyB,MAC3B,kBACP,gBACO,iBACL,eAAe,SAAS,GAAG;AAAA,EAGzB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAM7B,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,OAAO,gBACL,OAAO,WAAW,YAAY,SAAS,IAAI,IAAI,eAAe,IAAI,CACpE;AAAA,GACD;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IAMvB,OAAO,UACL,sBAAsB,IAAI,GAC1B,QAAO,aAAW,IAAI,CAAC,GACvB,WAAW,SACb;AAAA,IACA,IAAI,WAAW;AAAA,MAAW;AAAA,IAI1B,MAAM,OAAO,OAAO,eAAe,IAAI;AAAA,IACvC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,mBAAmB,GAAG,KAAK,QAAQ,KAAK,MAAM;AAAA,MACvE,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IAOA,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,UAAU,sBAAsB,IAAI,GAAG,QAAO,aAAW,IAAI,CAAC,GAAG,IAAI;AAAA,MAC5E,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IAIA,OAAO,EAAE,QAAQ,OAAO;AAAA,GACzB;AAAA,EAUD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IACxC,OAAO,OAAO,WAAW,MAAM,CAAC,UAC9B,SAAS,KAAK,EAAE,KAAY,aAAI,eAAc,CAAC,CACjD;AAAA,GACD;AAAA,EACD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,YAAY,IAAI;AAAA,GACxB;AACH,CAAC,CACH,CACF;",
|
|
136
|
-
"debugId": "
|
|
135
|
+
"mappings": ";AA4CA;AACA;AACA;AACA;AACA;;;ACpCA;;;AC4EA,IAAM,WAAW,CAAC,UAA0B,CAAC,GAAG,KAAK,EAAE;AAQvD,IAAM,aAAa,CAAC,MAAc,OAAe,SAAoC;AAAA,EACnF,MAAM,MAAgB,CAAC;AAAA,EACvB,IAAI,KAAK,cAAc,aAAa,SAAS,KAAK,IAAI,KAAK,WAAW;AAAA,IACpE,IAAI,KAAK,GAAG,iBAAiB,KAAK,sBAAsB;AAAA,EAC1D;AAAA,EACA,IAAI,KAAK,cAAc,aAAa,SAAS,KAAK,IAAI,KAAK,WAAW;AAAA,IACpE,IAAI,KAAK,GAAG,kBAAkB,KAAK,sBAAsB;AAAA,EAC3D;AAAA,EACA,IAAI,KAAK,SAAS,aAAa,CAAC,KAAK,KAAK,SAAS,KAAK,GAAG;AAAA,IACzD,IAAI,KAAK,GAAG,wBAAwB,KAAK,KAAK,KAAK,IAAI,GAAG;AAAA,EAC5D;AAAA,EAGA,IAAI,KAAK,YAAY,aAAa,CAAC,IAAI,OAAO,KAAK,SAAS,KAAK,YAAY,EAAE,KAAK,KAAK,GAAG;AAAA,IAC1F,IAAI,KAAK,GAAG,oBAAoB,KAAK,iBAAiB,KAAK,SAAS;AAAA,EACtE;AAAA,EAIA,MAAM,UAAU,OAAO,KAAK;AAAA,EAC5B,MAAM,UAAU,KAAK,YAAY,aAAa,KAAK,YAAY;AAAA,EAC/D,IAAI,WAAW,UAAU,MAAM,OAAO,SAAS,OAAO,GAAG;AAAA,IACvD,IAAI,KAAK,YAAY,aAAa,UAAU,KAAK,SAAS;AAAA,MACxD,IAAI,KAAK,GAAG,kBAAkB,KAAK,SAAS;AAAA,IAC9C;AAAA,IACA,IAAI,KAAK,YAAY,aAAa,UAAU,KAAK,SAAS;AAAA,MACxD,IAAI,KAAK,GAAG,iBAAiB,KAAK,SAAS;AAAA,IAC7C;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAUF,IAAM,aAAa,CACxB,OACA,MACA,UAA4B,CAAC,MACP;AAAA,EACtB,MAAM,MAAgB,CAAC;AAAA,EACvB,YAAY,MAAM,SAAS,OAAO,QAAQ,KAAK,GAAG;AAAA,IAChD,MAAM,QAAQ,KAAK;AAAA,IACnB,IAAI,UAAU,WAAW;AAAA,MACvB,IAAI,QAAQ,aAAa,QAAQ,KAAK,aAAa;AAAA,QAAM,IAAI,KAAK,GAAG,gBAAgB;AAAA,MACrF;AAAA,IACF;AAAA,IAEA,WAAW,QAAQ,OAAO,UAAU,WAAW,CAAC,KAAK,IAAI,OAAO;AAAA,MAC9D,IAAI,KAAK,GAAG,WAAW,MAAM,MAAM,IAAI,CAAC;AAAA,IAC1C;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAIF,IAAM,UAAU,CAAC,UAAuB,UAC7C,GAAG;AAAA,MAAkD,MAAM,KAAK;AAAA,KAAQ;AAAA,IACxE,uEACA;;;ACzIK,IAAM,yBAAwE;AAAA,EACnF,2BAA2B;AAAA,IACzB,SAAW,EAAC,QAAS,eAAc,UAAW,MAAK,MAAO,SAAQ;AAAA,EACpE;AAAA,EACA,0BAA0B;AAAA,IACxB,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAClD,QAAU,EAAC,QAAS,cAAa,UAAW,MAAK,MAAO,SAAQ;AAAA,EAClE;AAAA,EACA,0BAA0B;AAAA,IACxB,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,OAAS,EAAC,QAAS,aAAY,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC9D,QAAU,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACvC,WAAa,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,MAAQ,EAAC,SAAU,+BAA8B,eAAgB,yBAAwB,MAAO,SAAQ;AAAA,IACxG,UAAY,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC7C,UAAY,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACzD,QAAU,EAAC,QAAS,cAAa,WAAY,IAAG,UAAW,MAAK,MAAO,SAAQ;AAAA,EACjF;AAAA,EACA,uBAAuB;AAAA,IACrB,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,MAAQ,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IACxC,OAAS,EAAC,QAAS,mBAAkB,UAAW,MAAK,MAAO,SAAQ;AAAA,IACpE,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,OAAS,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,EACtD;AAAA,EACA,oCAAoC,CAAC;AAAA,EACrC,kCAAkC;AAAA,IAChC,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,EACpD;AAAA,EACA,kCAAkC;AAAA,IAChC,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,OAAS,EAAC,QAAS,aAAY,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC9D,QAAU,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACvC,WAAa,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,MAAQ,EAAC,SAAU,+BAA8B,eAAgB,yBAAwB,MAAO,SAAQ;AAAA,IACxG,UAAY,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,EAC/C;AAAA,EACA,kDAAkD;AAAA,IAChD,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,QAAU,EAAC,SAAU,gBAAe,SAAU,GAAE,MAAO,UAAS;AAAA,EAClE;AACF;;;AC3CO,IAAM,iCAAgF;AAAA,EAC3F,4BAA4B;AAAA,IAC1B,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,SAAW,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,SAAU,KAAI,MAAO,CAAC,KAAI,KAAI,QAAO,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC/E,KAAO,EAAC,SAAU,+BAA8B,QAAS,wBAAuB,MAAO,SAAQ;AAAA,IAC/F,SAAW,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACpD,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,IAAM,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACjE,UAAY,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACzD,kBAAoB,EAAC,SAAU,UAAS,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IACnF,QAAU,EAAC,QAAS,0BAAyB,MAAO,SAAQ;AAAA,IAC5D,MAAQ,EAAC,SAAU,YAAW,MAAO,CAAC,YAAW,WAAU,MAAM,GAAE,MAAO,SAAQ;AAAA,IAClF,MAAQ,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC5C,kBAAkB,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IACnD,qBAAqB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,mBAAkB,qBAAqB,GAAE,MAAO,SAAQ;AAAA,IAC9G,6BAA6B,EAAC,MAAO,CAAC,UAAS,QAAO,UAAU,GAAE,MAAO,SAAQ;AAAA,IACjF,aAAe,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IAC7D,iBAAiB,EAAC,SAAU,cAAa,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACjF,UAAY,EAAC,QAAS,sBAAqB,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC1E,WAAa,EAAC,SAAU,2BAA0B,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IACrG,UAAY,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACxD,SAAW,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACrD,MAAQ,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,EACnD;AAAA,EACA,gCAAgC;AAAA,IAC9B,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,SAAW,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,SAAU,KAAI,MAAO,CAAC,KAAI,KAAI,QAAO,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC/E,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,KAAO,EAAC,QAAS,wBAAuB,MAAO,SAAQ;AAAA,IACvD,SAAW,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACpD,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,QAAU,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACjE,UAAY,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACzD,kBAAoB,EAAC,SAAU,UAAS,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IACnF,QAAU,EAAC,QAAS,0BAAyB,MAAO,SAAQ;AAAA,IAC5D,MAAQ,EAAC,SAAU,YAAW,MAAO,CAAC,YAAW,WAAU,MAAM,GAAE,MAAO,SAAQ;AAAA,IAClF,MAAQ,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC5C,kBAAkB,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IACnD,qBAAqB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,mBAAkB,qBAAqB,GAAE,MAAO,SAAQ;AAAA,IAC9G,6BAA6B,EAAC,MAAO,CAAC,UAAS,QAAO,UAAU,GAAE,MAAO,SAAQ;AAAA,IACjF,aAAe,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IAC7D,iBAAiB,EAAC,SAAU,cAAa,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACjF,UAAY,EAAC,QAAS,sBAAqB,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC1E,WAAa,EAAC,SAAU,2BAA0B,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IACrG,UAAY,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACxD,SAAW,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACrD,MAAQ,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,EACnD;AACF;;;ACnDO,IAAM,+BAA8E;AAAA,EACzF,sCAAsC;AAAA,IACpC,OAAS,EAAC,UAAW,MAAK,MAAO,UAAS;AAAA,EAC5C;AACF;;;ACJO,IAAM,mCAAkF;AAAA,EAC7F,sCAAsC;AAAA,IACpC,MAAQ,EAAC,QAAS,YAAW,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC5D,SAAW,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC1D,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,oCAAmC,eAAgB,8BAA6B,UAAW,MAAK,MAAO,SAAQ;AAAA,EACjK;AAAA,EACA,4CAA4C;AAAA,IAC1C,MAAQ,EAAC,QAAS,YAAW,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC5D,SAAW,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC1D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,oCAAmC,eAAgB,8BAA6B,MAAO,SAAQ;AAAA,EACnJ;AACF;;;ACZO,IAAM,6BAA4E;AAAA,EACvF,kCAAkC;AAAA,IAChC,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,OAAS,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACjD,cAAgB,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3D,aAAe,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1D,KAAO,EAAC,QAAS,4BAA2B,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3E,OAAS,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,WAAU,WAAU,YAAW,SAAS,GAAE,MAAO,SAAQ;AAAA,IACzG,MAAQ,EAAC,MAAO,CAAC,MAAK,IAAI,GAAE,MAAO,SAAQ;AAAA,EAC7C;AAAA,EACA,8BAA8B;AAAA,IAC5B,UAAY,EAAC,MAAO,CAAC,YAAW,UAAU,GAAE,MAAO,SAAQ;AAAA,IAC3D,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,WAAa,EAAC,QAAS,2BAA0B,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChF,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,EAClE;AAAA,EACA,uCAAuC;AAAA,IACrC,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,OAAS,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACjD,cAAgB,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3D,aAAe,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1D,OAAS,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,WAAU,WAAU,YAAW,SAAS,GAAE,MAAO,SAAQ;AAAA,EAC3G;AAAA,EACA,oCAAoC;AAAA,IAClC,UAAY,EAAC,MAAO,CAAC,YAAW,UAAU,GAAE,MAAO,SAAQ;AAAA,IAC3D,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,WAAa,EAAC,QAAS,2BAA0B,MAAO,SAAQ;AAAA,EAClE;AACF;;;AChCO,IAAM,kCAAiF;AAAA,EAC5F,yCAAyC;AAAA,IACvC,eAAiB,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,QAAO,OAAO,GAAE,MAAO,SAAQ;AAAA,IAC/E,iBAAiB,EAAC,SAAU,YAAW,SAAU,GAAE,MAAO,UAAS;AAAA,IACnE,KAAO,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,KAAI,MAAO,UAAS;AAAA,IACvE,oBAAoB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC5E,gBAAgB,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IACjD,sBAAsB,EAAC,SAAU,YAAW,SAAU,MAAK,MAAO,UAAS;AAAA,IAC3E,iBAAiB,EAAC,SAAU,SAAQ,MAAO,CAAC,QAAO,OAAO,GAAE,MAAO,SAAQ;AAAA,IAC3E,4BAA4B,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC7D,gBAAgB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,MAAQ,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACjD,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,UAAW,MAAK,MAAO,UAAS;AAAA,IACrE,OAAS,EAAC,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,QAAS,WAAU,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7D,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,MAAQ,EAAC,MAAO,CAAC,YAAW,YAAW,eAAe,GAAE,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,EACjH;AAAA,EACA,wCAAwC;AAAA,IACtC,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,eAAiB,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,QAAO,OAAO,GAAE,MAAO,SAAQ;AAAA,IAC/E,iBAAiB,EAAC,SAAU,YAAW,SAAU,GAAE,MAAO,UAAS;AAAA,IACnE,KAAO,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,KAAI,MAAO,UAAS;AAAA,IACvE,oBAAoB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC5E,gBAAgB,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IACjD,sBAAsB,EAAC,SAAU,YAAW,SAAU,MAAK,MAAO,UAAS;AAAA,IAC3E,iBAAiB,EAAC,SAAU,SAAQ,MAAO,CAAC,QAAO,OAAO,GAAE,MAAO,SAAQ;AAAA,IAC3E,4BAA4B,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC7D,gBAAgB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,MAAQ,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACjD,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,UAAW,MAAK,MAAO,UAAS;AAAA,IACrE,OAAS,EAAC,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,QAAS,WAAU,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7D,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,EACxD;AACF;;;ACpCO,IAAM,wCAAuF;AAAA,EAClG,oDAAoD;AAAA,IAClD,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChE,QAAU,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC1C,OAAS,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC3C;AAAA,EACA,sDAAsD;AAAA,IACpD,QAAU,EAAC,MAAO,MAAK,QAAS,qBAAoB,MAAO,QAAO;AAAA,IAClE,eAAe,EAAC,MAAO,MAAK,QAAS,cAAa,MAAO,QAAO;AAAA,IAChE,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,EAClE;AAAA,EACA,kDAAkD;AAAA,IAChD,gBAAgB,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChD,QAAU,EAAC,MAAO,MAAK,QAAS,qBAAoB,MAAO,QAAO;AAAA,IAClE,eAAe,EAAC,MAAO,MAAK,QAAS,cAAa,MAAO,QAAO;AAAA,IAChE,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,YAAW,YAAW,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7E,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChE,QAAU,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC5C;AAAA,EACA,qDAAqD;AAAA,IACnD,QAAU,EAAC,MAAO,CAAC,QAAO,OAAM,KAAK,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IACtE,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChE,KAAO,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,EACzC;AAAA,EACA,4CAA4C;AAAA,IAC1C,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7D,MAAQ,EAAC,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChE,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,EAC/D;AAAA,EACA,0DAA0D;AAAA,IACxD,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,IAC7D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,EAC3C;AAAA,EACA,4DAA4D;AAAA,IAC1D,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,IAC7D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,MAAO,MAAK,QAAS,qBAAoB,MAAO,QAAO;AAAA,IAClE,eAAe,EAAC,MAAO,MAAK,QAAS,cAAa,MAAO,QAAO;AAAA,EAClE;AAAA,EACA,wDAAwD;AAAA,IACtD,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,IAC7D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,MAAO,MAAK,QAAS,qBAAoB,MAAO,QAAO;AAAA,IAClE,eAAe,EAAC,MAAO,MAAK,QAAS,cAAa,MAAO,QAAO;AAAA,IAChE,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,YAAW,YAAW,KAAK,GAAE,MAAO,SAAQ;AAAA,EAC/E;AAAA,EACA,2DAA2D;AAAA,IACzD,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,IAC7D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,MAAO,CAAC,QAAO,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,EACxD;AAAA,EACA,kDAAkD;AAAA,IAChD,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,IAC7D,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7D,QAAU,EAAC,MAAO,MAAK,QAAS,gBAAe,MAAO,QAAO;AAAA,EAC/D;AACF;;;ACzDO,IAAM,sCAAqF;AAAA,EAChG,iCAAiC;AAAA,IAC/B,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,IAAM,EAAC,QAAS,0BAAyB,SAAU,kCAAiC,eAAgB,4BAA2B,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9J,MAAQ,EAAC,SAAU,GAAE,MAAO,SAAQ;AAAA,IACpC,YAAc,EAAC,MAAO,CAAC,SAAQ,MAAM,GAAE,MAAO,SAAQ;AAAA,IACtD,UAAY,EAAC,SAAU,QAAO,QAAS,sBAAqB,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC3F,QAAU,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,QAAS,YAAW,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9D,MAAQ,EAAC,MAAO,CAAC,OAAO,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC3D;AAAA,EACA,qCAAqC;AAAA,IACnC,SAAW,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAC5C,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,MAAQ,EAAC,SAAU,GAAE,MAAO,SAAQ;AAAA,IACpC,YAAc,EAAC,MAAO,CAAC,SAAQ,MAAM,GAAE,MAAO,SAAQ;AAAA,IACtD,UAAY,EAAC,SAAU,QAAO,QAAS,sBAAqB,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC3F,QAAU,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,EAChD;AACF;;;ACpBO,IAAM,8BAA6E;AAAA,EACxF,+BAA+B;AAAA,IAC7B,OAAS,EAAC,WAAY,KAAI,eAAgB,qCAAoC,MAAO,SAAQ;AAAA,IAC7F,KAAO,EAAC,SAAU,UAAS,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,MAAQ,EAAC,MAAO,CAAC,MAAM,GAAE,MAAO,SAAQ;AAAA,IACxC,MAAQ,EAAC,WAAY,GAAE,WAAY,GAAE,SAAU,yCAAwC,eAAgB,mCAAkC,UAAW,MAAK,MAAO,SAAQ;AAAA,IACxK,MAAQ,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC1C;AAAA,EACA,8CAA8C;AAAA,IAC5C,mBAAmB,EAAC,QAAS,MAAK,MAAO,SAAQ;AAAA,IACjD,cAAc,EAAC,MAAO,MAAK,QAAS,sBAAqB,MAAO,QAAO;AAAA,IACvE,eAAiB,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IACrD,SAAW,EAAC,QAAS,MAAK,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,QAAS,qBAAoB,UAAW,MAAK,MAAO,SAAQ;AAAA,IACvE,MAAQ,EAAC,MAAO,CAAC,QAAQ,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC5D;AAAA,EACA,+BAA+B;AAAA,IAC7B,MAAQ,EAAC,MAAO,CAAC,SAAS,GAAE,MAAO,SAAQ;AAAA,IAC3C,SAAW,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC/C,WAAa,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACtD,qBAAqB,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IACzD,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,KAAO,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC3C,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAClD,OAAS,EAAC,QAAS,WAAU,MAAO,SAAQ;AAAA,IAC5C,aAAa,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC5D,yBAAyB,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,2CAA0C,eAAgB,qCAAoC,MAAO,QAAO;AAAA,IACzL,KAAO,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACpC,MAAQ,EAAC,MAAO,CAAC,QAAO,UAAS,QAAO,UAAS,QAAO,OAAO,GAAE,QAAS,gBAAe,UAAW,MAAK,MAAO,SAAQ;AAAA,IACxH,iBAAiB,EAAC,SAAU,UAAS,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IAChF,aAAa,EAAC,SAAU,UAAS,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7D,cAAc,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5E,MAAQ,EAAC,WAAY,GAAE,WAAY,GAAE,SAAU,yCAAwC,eAAgB,mCAAkC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC1K;AAAA,EACA,wBAAwB,CAAC;AAAA,EACzB,qCAAqC;AAAA,IACnC,OAAS,EAAC,WAAY,KAAI,eAAgB,qCAAoC,MAAO,SAAQ;AAAA,IAC7F,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,KAAO,EAAC,SAAU,UAAS,SAAU,GAAE,MAAO,UAAS;AAAA,EACzD;AAAA,EACA,sDAAsD;AAAA,IACpD,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,mBAAmB,EAAC,QAAS,MAAK,MAAO,SAAQ;AAAA,IACjD,cAAc,EAAC,MAAO,MAAK,QAAS,sBAAqB,MAAO,QAAO;AAAA,IACvE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,eAAiB,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IACrD,SAAW,EAAC,QAAS,MAAK,MAAO,SAAQ;AAAA,EAC3C;AAAA,EACA,qCAAqC;AAAA,IACnC,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,MAAQ,EAAC,MAAO,CAAC,SAAS,GAAE,MAAO,SAAQ;AAAA,IAC3C,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,SAAW,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC/C,WAAa,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACtD,qBAAqB,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IACzD,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,KAAO,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC3C,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAClD,OAAS,EAAC,QAAS,WAAU,MAAO,SAAQ;AAAA,IAC5C,aAAa,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC5D,yBAAyB,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,2CAA0C,eAAgB,qCAAoC,MAAO,QAAO;AAAA,IACzL,KAAO,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACpC,iBAAiB,EAAC,SAAU,UAAS,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IAChF,aAAa,EAAC,SAAU,UAAS,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7D,cAAc,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,EAC9E;AACF;;;ACnEO,IAAM,6BAA4E;AAAA,EACvF,yCAAyC;AAAA,IACvC,QAAU,EAAC,SAAU,OAAM,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,EACzE;AAAA,EACA,0CAA0C,CAAC;AAAA,EAC3C,wCAAwC,CAAC;AAAA,EACzC,2CAA2C;AAAA,IACzC,eAAe,EAAC,QAAS,WAAU,MAAO,SAAQ;AAAA,EACpD;AAAA,EACA,mCAAmC;AAAA,IACjC,aAAe,EAAC,SAAU,GAAE,MAAO,SAAQ;AAAA,IAC3C,KAAO,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IACvC,mBAAmB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAChD,cAAgB,EAAC,SAAU,KAAI,MAAO,SAAQ;AAAA,EAChD;AAAA,EACA,oCAAoC;AAAA,IAClC,aAAe,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,UAAS,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7E,UAAY,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACnE,MAAQ,EAAC,eAAgB,oBAAmB,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3E,mBAAqB,EAAC,SAAU,QAAO,MAAO,CAAC,MAAK,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IACjF,QAAU,EAAC,SAAU,OAAM,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACvE,YAAc,EAAC,SAAU,OAAM,MAAO,UAAS;AAAA,IAC/C,MAAQ,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IAC/D,aAAe,EAAC,SAAU,qCAAoC,eAAgB,+BAA8B,MAAO,SAAQ;AAAA,EAC7H;AAAA,EACA,0CAA0C;AAAA,IACxC,aAAe,EAAC,MAAO,CAAC,OAAM,UAAS,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7D,UAAY,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,mBAAqB,EAAC,MAAO,CAAC,MAAK,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IAChE,QAAU,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,YAAc,EAAC,SAAU,OAAM,MAAO,UAAS;AAAA,IAC/C,MAAQ,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACjD,aAAe,EAAC,SAAU,qCAAoC,eAAgB,+BAA8B,MAAO,SAAQ;AAAA,EAC7H;AACF;;;AClCO,IAAM,8BAA6E;AAAA,EACxF,oCAAoC;AAAA,IAClC,QAAU,EAAC,SAAU,MAAK,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,IACnE,aAAe,EAAC,SAAU,MAAK,MAAO,CAAC,MAAK,OAAM,QAAO,OAAM,QAAO,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IACnG,SAAW,EAAC,QAAS,eAAc,UAAW,MAAK,MAAO,SAAQ;AAAA,IAClE,MAAQ,EAAC,QAAS,kBAAiB,UAAW,MAAK,MAAO,SAAQ;AAAA,IAClE,WAAa,EAAC,MAAO,CAAC,UAAS,UAAS,UAAS,SAAQ,UAAS,UAAS,SAAQ,UAAS,QAAQ,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,EACvI;AACF;;;ACRO,IAAM,4BAA2E;AAAA,EACtF,8BAA8B;AAAA,IAC5B,MAAQ,EAAC,SAAU,SAAQ,MAAO,CAAC,SAAQ,QAAO,SAAQ,SAAQ,WAAU,SAAS,GAAE,MAAO,SAAQ;AAAA,IACtG,SAAW,EAAC,SAAU,mDAAkD,SAAU,GAAE,MAAO,SAAQ;AAAA,IACnG,OAAS,EAAC,SAAU,OAAM,MAAO,CAAC,SAAQ,WAAU,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC1E,OAAS,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,UAAY,EAAC,SAAU,KAAI,SAAU,MAAK,SAAU,GAAE,MAAO,SAAQ;AAAA,IACrE,UAAY,EAAC,SAAU,mCAAkC,SAAU,QAAO,SAAU,GAAE,MAAO,UAAS;AAAA,IACtG,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,YAAc,EAAC,SAAU,cAAa,eAAgB,wCAAuC,MAAO,SAAQ;AAAA,IAC5G,KAAO,EAAC,eAAgB,6FAA4F,MAAO,SAAQ;AAAA,IACnI,YAAc,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACvD,UAAY,EAAC,QAAS,YAAW,WAAY,KAAI,MAAO,SAAQ;AAAA,IAChE,MAAQ,EAAC,MAAO,CAAC,UAAS,UAAS,aAAY,QAAO,UAAS,WAAU,WAAU,YAAW,YAAW,iBAAiB,GAAE,MAAO,SAAQ;AAAA,IAC3I,QAAU,EAAC,SAAU,OAAM,SAAU,IAAG,MAAO,UAAS;AAAA,IACxD,YAAc,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IACnE,YAAc,EAAC,WAAY,KAAI,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9D,QAAU,EAAC,MAAO,CAAC,UAAS,UAAS,UAAS,UAAS,UAAS,YAAW,aAAY,UAAS,UAAS,SAAQ,WAAW,GAAE,MAAO,SAAQ;AAAA,IAC7I,UAAY,EAAC,WAAY,GAAE,MAAO,SAAQ;AAAA,IAC1C,MAAQ,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC9C,cAAgB,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACzD,SAAW,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACxD,SAAW,EAAC,SAAU,SAAQ,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACvE,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,MAAQ,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IAChD,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,KAAO,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IAC9D,MAAQ,EAAC,QAAS,YAAW,SAAU,WAAU,SAAU,KAAI,UAAW,MAAK,MAAO,UAAS;AAAA,EACjG;AAAA,EACA,2CAA2C;AAAA,IACzC,MAAQ,EAAC,SAAU,SAAQ,MAAO,CAAC,SAAQ,QAAO,SAAQ,SAAQ,WAAU,SAAS,GAAE,MAAO,SAAQ;AAAA,IACtG,OAAS,EAAC,SAAU,OAAM,MAAO,CAAC,SAAQ,WAAU,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC1E,OAAS,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,UAAY,EAAC,SAAU,KAAI,SAAU,MAAK,SAAU,GAAE,MAAO,SAAQ;AAAA,IACrE,UAAY,EAAC,SAAU,mCAAkC,SAAU,QAAO,SAAU,GAAE,MAAO,UAAS;AAAA,IACtG,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,YAAc,EAAC,SAAU,cAAa,eAAgB,wCAAuC,MAAO,SAAQ;AAAA,IAC5G,KAAO,EAAC,eAAgB,6FAA4F,MAAO,SAAQ;AAAA,IACnI,YAAc,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACvD,UAAY,EAAC,QAAS,YAAW,WAAY,KAAI,MAAO,SAAQ;AAAA,IAChE,MAAQ,EAAC,MAAO,CAAC,UAAS,UAAS,aAAY,QAAO,UAAS,WAAU,WAAU,YAAW,YAAW,iBAAiB,GAAE,MAAO,SAAQ;AAAA,IAC3I,QAAU,EAAC,SAAU,OAAM,SAAU,IAAG,MAAO,UAAS;AAAA,IACxD,YAAc,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IACnE,QAAU,EAAC,MAAO,CAAC,UAAS,UAAS,UAAS,UAAS,UAAS,YAAW,aAAY,UAAS,UAAS,SAAQ,WAAW,GAAE,MAAO,SAAQ;AAAA,IAC7I,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,cAAgB,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACzD,SAAW,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACxD,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,MAAQ,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IAChD,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,KAAO,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,EAChE;AAAA,EACA,2CAA2C;AAAA,IACzC,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,MAAQ,EAAC,MAAO,CAAC,UAAS,OAAM,OAAM,OAAM,OAAM,OAAM,OAAM,OAAM,OAAM,OAAM,OAAM,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,QAAO,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,SAAQ,OAAO,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC58D,MAAQ,EAAC,SAAU,mCAAkC,eAAgB,6BAA4B,UAAW,MAAK,MAAO,SAAQ;AAAA,EAClI;AACF;;;AC3DO,IAAM,gCAA+E;AAAA,EAC1F,kCAAkC;AAAA,IAChC,SAAW,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC5C,gBAAgB,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,IACrD,WAAa,EAAC,MAAO,CAAC,cAAa,iBAAgB,eAAc,aAAY,WAAU,eAAc,eAAc,eAAc,oBAAmB,kBAAkB,GAAE,MAAO,SAAQ;AAAA,IACvL,uBAAyB,EAAC,MAAO,CAAC,UAAS,YAAW,UAAU,GAAE,MAAO,SAAQ;AAAA,IACjF,cAAgB,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IAC1D,aAAe,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IACpE,MAAQ,EAAC,QAAS,UAAS,MAAO,SAAQ;AAAA,IAC1C,OAAS,EAAC,QAAS,UAAS,MAAO,SAAQ;AAAA,IAC3C,SAAW,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC5C,OAAS,EAAC,QAAS,aAAY,WAAY,IAAG,WAAY,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3F,KAAO,EAAC,SAAU,OAAM,SAAU,MAAK,MAAO,UAAS;AAAA,IACvD,SAAW,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,WAAa,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACvD,YAAc,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,IACnD,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,WAAa,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACvD,SAAW,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,QAAU,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACpD,MAAQ,EAAC,MAAO,CAAC,UAAS,QAAO,OAAM,SAAQ,QAAO,UAAS,aAAY,WAAU,WAAU,cAAa,QAAO,SAAS,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7J,WAAW,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,mBAAmB,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,EAC1D;AAAA,EACA,iCAAiC,CAAC;AAAA,EAClC,yCAAyC;AAAA,IACvC,SAAW,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC5C,gBAAgB,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,IACrD,WAAa,EAAC,MAAO,CAAC,cAAa,iBAAgB,eAAc,aAAY,WAAU,eAAc,eAAc,eAAc,oBAAmB,kBAAkB,GAAE,MAAO,SAAQ;AAAA,IACvL,uBAAyB,EAAC,MAAO,CAAC,UAAS,YAAW,UAAU,GAAE,MAAO,SAAQ;AAAA,IACjF,cAAgB,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IAC1D,aAAe,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IACpE,MAAQ,EAAC,QAAS,UAAS,MAAO,SAAQ;AAAA,IAC1C,OAAS,EAAC,QAAS,UAAS,MAAO,SAAQ;AAAA,IAC3C,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,SAAW,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC3C,UAAY,EAAC,QAAS,QAAO,MAAO,SAAQ;AAAA,IAC5C,KAAO,EAAC,SAAU,OAAM,SAAU,MAAK,MAAO,UAAS;AAAA,IACvD,SAAW,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,WAAa,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACvD,YAAc,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,IACnD,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,WAAa,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACvD,SAAW,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,QAAU,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACpD,MAAQ,EAAC,MAAO,CAAC,UAAS,QAAO,OAAM,SAAQ,QAAO,UAAS,aAAY,WAAU,WAAU,cAAa,QAAO,SAAS,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7J,WAAW,EAAC,SAAU,MAAK,SAAU,GAAE,MAAO,UAAS;AAAA,IACvD,mBAAmB,EAAC,QAAS,aAAY,MAAO,SAAQ;AAAA,EAC1D;AACF;;;ACtDO,IAAM,6BAA4E;AAAA,EACvF,+BAA+B;AAAA,IAC7B,UAAY,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAClD,WAAW,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACvD,MAAQ,EAAC,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IACpD,SAAW,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC3C,SAAW,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACxC,MAAQ,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,MAAM,GAAE,MAAO,SAAQ;AAAA,IACtE,MAAQ,EAAC,QAAS,eAAc,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,QAAS,mBAAkB,SAAU,oCAAmC,eAAgB,8BAA6B,MAAO,SAAQ;AAAA,IACjJ,SAAW,EAAC,SAAU,mDAAkD,SAAU,GAAE,MAAO,UAAS;AAAA,IACpG,OAAS,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,YAAY,GAAE,MAAO,SAAQ;AAAA,IACzE,OAAS,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACpD,KAAO,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IAClD,UAAY,EAAC,SAAU,KAAI,SAAU,KAAI,SAAU,GAAE,MAAO,SAAQ;AAAA,IACpE,UAAY,EAAC,SAAU,mCAAkC,SAAU,QAAO,SAAU,GAAE,MAAO,UAAS;AAAA,IACtG,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,YAAc,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACvD,cAAc,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACxD,SAAW,EAAC,SAAU,oBAAmB,QAAS,wBAAuB,MAAO,SAAQ;AAAA,IACxF,WAAa,EAAC,MAAO,CAAC,OAAM,KAAI,MAAM,GAAE,MAAO,SAAQ;AAAA,IACvD,0BAA0B,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACpE,aAAa,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACzD,eAAe,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IAC1D,UAAY,EAAC,MAAO,CAAC,MAAK,SAAQ,MAAK,SAAQ,SAAQ,MAAK,MAAK,MAAK,SAAQ,SAAQ,SAAQ,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,SAAQ,MAAK,MAAK,IAAI,GAAE,MAAO,SAAQ;AAAA,IACvL,MAAQ,EAAC,MAAO,CAAC,UAAS,SAAQ,UAAS,WAAU,YAAW,YAAW,mBAAkB,cAAa,WAAW,GAAE,MAAO,SAAQ;AAAA,IACtI,kBAAoB,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,SAAQ;AAAA,IAChE,eAAiB,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5D,MAAQ,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC5C,YAAc,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACtD,QAAU,EAAC,SAAU,SAAQ,MAAO,CAAC,SAAQ,OAAM,OAAM,QAAO,QAAO,UAAS,QAAO,QAAO,SAAQ,SAAQ,OAAM,OAAM,SAAS,GAAE,MAAO,SAAQ;AAAA,IACpJ,eAAe,EAAC,SAAU,0CAAyC,eAAgB,oCAAmC,MAAO,SAAQ;AAAA,IACrI,MAAQ,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC9C,MAAQ,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,aAAY,mBAAkB,sBAAqB,WAAU,QAAQ,GAAE,MAAO,SAAQ;AAAA,IAC/H,aAAa,EAAC,SAAU,6BAA4B,eAAgB,uBAAsB,MAAO,SAAQ;AAAA,IACzG,QAAU,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,SAAW,EAAC,QAAS,kBAAiB,WAAY,KAAI,MAAO,SAAQ;AAAA,IACrE,KAAO,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAClD,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,SAAW,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IACjD,WAAa,EAAC,SAAU,OAAM,SAAU,sEAAqE,eAAgB,gEAA+D,MAAO,SAAQ;AAAA,IAC3M,SAAW,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACxD,SAAW,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACrD,MAAQ,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IAChD,OAAS,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACpD,SAAW,EAAC,SAAU,qBAAoB,SAAU,uEAAsE,eAAgB,iEAAgE,MAAO,SAAQ;AAAA,IACzN,MAAQ,EAAC,QAAS,YAAW,SAAU,WAAU,SAAU,KAAI,UAAW,MAAK,MAAO,UAAS;AAAA,IAC/F,gBAAkB,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IAC5D,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,EACzD;AAAA,EACA,4CAA4C;AAAA,IAC1C,UAAY,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAClD,WAAW,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACvD,MAAQ,EAAC,MAAO,CAAC,UAAS,SAAS,GAAE,MAAO,SAAQ;AAAA,IACpD,SAAW,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IACxC,MAAQ,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,MAAM,GAAE,MAAO,SAAQ;AAAA,IACtE,MAAQ,EAAC,QAAS,eAAc,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,QAAS,mBAAkB,SAAU,oCAAmC,eAAgB,8BAA6B,MAAO,SAAQ;AAAA,IACjJ,OAAS,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC/C,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IACvD,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,YAAY,GAAE,MAAO,SAAQ;AAAA,IACzE,OAAS,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACpD,KAAO,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IAClD,UAAY,EAAC,SAAU,KAAI,SAAU,KAAI,SAAU,GAAE,MAAO,SAAQ;AAAA,IACpE,UAAY,EAAC,SAAU,mCAAkC,SAAU,QAAO,SAAU,GAAE,MAAO,UAAS;AAAA,IACtG,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,aAAe,EAAC,WAAY,MAAK,MAAO,SAAQ;AAAA,IAChD,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,YAAc,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACvD,cAAc,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IACxD,SAAW,EAAC,SAAU,oBAAmB,QAAS,wBAAuB,MAAO,SAAQ;AAAA,IACxF,WAAa,EAAC,MAAO,CAAC,OAAM,KAAI,MAAM,GAAE,MAAO,SAAQ;AAAA,IACvD,aAAa,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACzD,eAAe,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,IAC1D,UAAY,EAAC,MAAO,CAAC,MAAK,SAAQ,MAAK,SAAQ,SAAQ,MAAK,MAAK,MAAK,SAAQ,SAAQ,SAAQ,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,MAAK,SAAQ,MAAK,MAAK,IAAI,GAAE,MAAO,SAAQ;AAAA,IACvL,MAAQ,EAAC,MAAO,CAAC,UAAS,SAAQ,UAAS,WAAU,YAAW,YAAW,mBAAkB,cAAa,WAAW,GAAE,MAAO,SAAQ;AAAA,IACtI,kBAAoB,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,SAAQ;AAAA,IAChE,eAAiB,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5D,MAAQ,EAAC,QAAS,YAAW,MAAO,SAAQ;AAAA,IAC5C,YAAc,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACtD,QAAU,EAAC,SAAU,SAAQ,MAAO,CAAC,SAAQ,OAAM,OAAM,QAAO,QAAO,UAAS,QAAO,QAAO,SAAQ,SAAQ,OAAM,OAAM,SAAS,GAAE,MAAO,SAAQ;AAAA,IACpJ,eAAe,EAAC,SAAU,0CAAyC,eAAgB,oCAAmC,MAAO,SAAQ;AAAA,IACrI,QAAU,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACvD,MAAQ,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IAC9C,QAAU,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,aAAY,mBAAkB,sBAAqB,WAAU,QAAQ,GAAE,MAAO,SAAQ;AAAA,IAC/H,aAAa,EAAC,SAAU,6BAA4B,eAAgB,uBAAsB,MAAO,SAAQ;AAAA,IACzG,QAAU,EAAC,SAAU,QAAO,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,SAAW,EAAC,QAAS,kBAAiB,WAAY,KAAI,MAAO,SAAQ;AAAA,IACrE,KAAO,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IAClD,SAAW,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,SAAW,EAAC,QAAS,cAAa,MAAO,SAAQ;AAAA,IACjD,WAAa,EAAC,SAAU,OAAM,SAAU,sEAAqE,eAAgB,gEAA+D,MAAO,SAAQ;AAAA,IAC3M,SAAW,EAAC,QAAS,qBAAoB,MAAO,SAAQ;AAAA,IACxD,MAAQ,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IAChD,OAAS,EAAC,SAAU,KAAI,SAAU,GAAE,MAAO,UAAS;AAAA,IACpD,SAAW,EAAC,SAAU,qBAAoB,SAAU,uEAAsE,eAAgB,iEAAgE,MAAO,SAAQ;AAAA,IACzN,gBAAkB,EAAC,QAAS,kBAAiB,MAAO,SAAQ;AAAA,IAC5D,UAAY,EAAC,QAAS,mBAAkB,MAAO,SAAQ;AAAA,EACzD;AACF;;;ACtGO,IAAM,wBAAuE;AAAA,EAClF,mBAAmB;AAAA,IACjB,QAAU,EAAC,QAAS,cAAa,UAAW,MAAK,MAAO,SAAQ;AAAA,EAClE;AAAA,EACA,2BAA2B;AAAA,IACzB,SAAW,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC1D,KAAO,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,EAClD;AACF;;;ACRO,IAAM,0BAAyE;AAAA,EACpF,qBAAqB;AAAA,IACnB,MAAQ,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IACjD,WAAa,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IAClE,SAAW,EAAC,QAAS,4BAA2B,MAAO,SAAQ;AAAA,IAC/D,gBAAgB,EAAC,QAAS,yBAAwB,MAAO,SAAQ;AAAA,IACjE,QAAU,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC1C,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,aAAe,EAAC,SAAU,6CAA4C,eAAgB,uCAAsC,MAAO,SAAQ;AAAA,IAC3I,QAAU,EAAC,MAAO,CAAC,OAAM,SAAQ,UAAS,MAAM,GAAE,MAAO,SAAQ;AAAA,IACjE,WAAW,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACnD,yBAAyB,EAAC,SAAU,4EAA2E,SAAU,IAAG,MAAO,UAAS;AAAA,IAC5I,SAAW,EAAC,QAAS,+BAA8B,MAAO,SAAQ;AAAA,IAClE,YAAc,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IAC1D,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAClD,SAAW,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC1D,UAAY,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC5C,MAAQ,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACpD,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,QAAU,EAAC,QAAS,0BAAyB,MAAO,SAAQ;AAAA,IAC5D,eAAiB,EAAC,SAAU,YAAW,MAAO,CAAC,OAAM,YAAW,UAAS,MAAM,GAAE,MAAO,SAAQ;AAAA,IAChG,iBAAiB,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAC1D,uBAAuB,EAAC,SAAU,MAAK,MAAO,CAAC,KAAI,KAAI,KAAI,KAAI,MAAK,IAAI,GAAE,MAAO,UAAS;AAAA,IAC1F,QAAU,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IACxD,YAAc,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,OAAM,OAAM,KAAI,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IAClG,SAAW,EAAC,QAAS,kBAAiB,UAAW,MAAK,MAAO,SAAQ;AAAA,IACrE,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,UAAY,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IAC1D,MAAQ,EAAC,MAAO,CAAC,SAAQ,UAAS,QAAO,OAAM,QAAO,SAAQ,eAAc,OAAM,WAAU,OAAM,OAAM,OAAM,OAAM,SAAS,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9J,QAAU,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IACxD,iBAAiB,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,EAC/D;AAAA,EACA,8BAA8B;AAAA,IAC5B,WAAa,EAAC,QAAS,6BAA4B,MAAO,SAAQ;AAAA,IAClE,SAAW,EAAC,QAAS,4BAA2B,MAAO,SAAQ;AAAA,IAC/D,gBAAgB,EAAC,QAAS,yBAAwB,MAAO,SAAQ;AAAA,IACjE,QAAU,EAAC,QAAS,qBAAoB,WAAY,MAAK,MAAO,SAAQ;AAAA,IACxE,QAAU,EAAC,WAAY,IAAG,MAAO,SAAQ;AAAA,IACzC,QAAU,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC1C,aAAe,EAAC,SAAU,6CAA4C,eAAgB,uCAAsC,MAAO,SAAQ;AAAA,IAC3I,QAAU,EAAC,MAAO,CAAC,OAAM,SAAQ,UAAS,MAAM,GAAE,MAAO,SAAQ;AAAA,IACjE,WAAW,EAAC,QAAS,gBAAe,MAAO,SAAQ;AAAA,IACnD,yBAAyB,EAAC,SAAU,4EAA2E,SAAU,IAAG,MAAO,UAAS;AAAA,IAC5I,SAAW,EAAC,QAAS,+BAA8B,MAAO,SAAQ;AAAA,IAClE,YAAc,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IAC1D,OAAS,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAClD,SAAW,EAAC,QAAS,uBAAsB,MAAO,SAAQ;AAAA,IAC1D,UAAY,EAAC,WAAY,KAAI,MAAO,SAAQ;AAAA,IAC5C,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,eAAiB,EAAC,SAAU,YAAW,MAAO,CAAC,OAAM,YAAW,UAAS,MAAM,GAAE,MAAO,SAAQ;AAAA,IAChG,iBAAiB,EAAC,QAAS,iBAAgB,MAAO,SAAQ;AAAA,IAC1D,uBAAuB,EAAC,SAAU,MAAK,MAAO,CAAC,KAAI,KAAI,KAAI,KAAI,MAAK,IAAI,GAAE,MAAO,UAAS;AAAA,IAC1F,QAAU,EAAC,QAAS,sBAAqB,MAAO,SAAQ;AAAA,IACxD,YAAc,EAAC,SAAU,WAAU,MAAO,CAAC,WAAU,OAAM,OAAM,KAAI,OAAM,MAAM,GAAE,MAAO,SAAQ;AAAA,IAClG,QAAU,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,IACtD,iBAAiB,EAAC,QAAS,oBAAmB,MAAO,SAAQ;AAAA,EAC/D;AACF;;;ACzDO,IAAM,yBAAwE;AAAA,EACnF,8BAA8B;AAAA,IAC5B,kBAAkB,EAAC,SAAU,iDAAgD,eAAgB,mDAAkD,MAAO,SAAQ;AAAA,IAC9J,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,cAAc,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1C,gBAAgB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7K,qBAAqB,EAAC,SAAU,uBAAsB,MAAO,CAAC,mBAAkB,qBAAqB,GAAE,MAAO,SAAQ;AAAA,IACtH,eAAe,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,qEAAoE,eAAgB,gEAA+D,MAAO,SAAQ;AAAA,IACzN,MAAQ,EAAC,WAAY,MAAK,WAAY,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,EACzE;AAAA,EACA,qDAAqD;AAAA,IACnD,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IACzI,eAAe,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IAC9I,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7K,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,kBAAkB,GAAE,MAAO,SAAQ;AAAA,EACjF;AAAA,EACA,iDAAiD;AAAA,IAC/C,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,gBAAgB,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAChD,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IACzI,eAAe,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IAC9I,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,YAAW,YAAW,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7E,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7K,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,kBAAkB,GAAE,MAAO,SAAQ;AAAA,IAC/E,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,IACrD,QAAU,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAC5C;AAAA,EACA,oDAAoD;AAAA,IAClD,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,OAAM,KAAK,GAAE,UAAW,MAAK,MAAO,SAAQ;AAAA,IACvF,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7K,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,kBAAkB,GAAE,MAAO,SAAQ;AAAA,IAC/E,KAAO,EAAC,SAAU,mmHAAsmH,eAAgB,qmHAAwmH,UAAW,MAAK,MAAO,SAAQ;AAAA,EACjxO;AAAA,EACA,2CAA2C;AAAA,IACzC,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7D,MAAQ,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC7K,QAAU,EAAC,MAAO,CAAC,gBAAe,WAAU,kBAAkB,GAAE,MAAO,SAAQ;AAAA,IAC/E,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,QAAO;AAAA,EAC5K;AAAA,EACA,0BAA0B;AAAA,IACxB,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,IAAM,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3K,cAAc,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1C,gBAAgB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,UAAY,EAAC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC5C,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,EAChL;AAAA,EACA,yBAAyB;AAAA,IACvB,yBAAyB,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC9K,kBAAkB,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,QAAO;AAAA,IAClL,YAAY,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACzD,aAAa,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IAC1D,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,IAAM,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3K,aAAa,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,2KAA0K,eAAgB,+JAA8J,MAAO,SAAQ;AAAA,IACxZ,WAAW,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACxD,YAAY,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACzD,QAAU,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC/J,aAAa,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IACrP,gBAAgB,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IACrL,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9K,kBAAkB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC1E,iBAAiB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC9C,kBAAkB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,EAC5E;AAAA,EACA,2BAA2B;AAAA,IACzB,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,IAAM,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC3K,aAAa,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACpE,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,kBAAkB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC/C,gBAAgB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,UAAW,MAAK,MAAO,SAAQ;AAAA,IAC9K,kBAAkB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,EAC5E;AAAA,EACA,oCAAoC;AAAA,IAClC,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,WAAU,eAAc,iBAAgB,kBAAiB,aAAY,eAAc,cAAa,eAAc,gBAAe,eAAc,cAAa,eAAc,UAAS,qBAAoB,UAAS,oBAAmB,2BAA0B,wBAAwB,GAAE,MAAO,QAAO;AAAA,IAChU,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,cAAc,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1C,gBAAgB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,qBAAqB,EAAC,SAAU,uBAAsB,MAAO,CAAC,mBAAkB,qBAAqB,GAAE,MAAO,SAAQ;AAAA,IACtH,eAAe,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,qEAAoE,eAAgB,gEAA+D,MAAO,SAAQ;AAAA,EAC3N;AAAA,EACA,2DAA2D;AAAA,IACzD,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,UAAS,WAAU,WAAU,gBAAe,UAAS,aAAa,GAAE,MAAO,QAAO;AAAA,IACjH,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IACzI,eAAe,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,EAChJ;AAAA,EACA,uDAAuD;AAAA,IACrD,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,UAAS,WAAU,WAAU,UAAS,eAAc,YAAW,QAAO,UAAU,GAAE,MAAO,QAAO;AAAA,IAC/H,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IACzI,eAAe,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,QAAO;AAAA,IAC9I,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,YAAW,YAAW,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7E,MAAQ,EAAC,SAAU,OAAM,SAAU,GAAE,MAAO,UAAS;AAAA,EACvD;AAAA,EACA,0DAA0D;AAAA,IACxD,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,WAAU,WAAU,UAAS,QAAO,QAAQ,GAAE,MAAO,QAAO;AAAA,IAC3F,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,QAAU,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IACvE,KAAO,EAAC,SAAU,mmHAAsmH,eAAgB,qmHAAwmH,MAAO,SAAQ;AAAA,EACjwO;AAAA,EACA,iDAAiD;AAAA,IAC/C,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,WAAU,WAAU,gBAAe,kBAAiB,eAAc,kBAAiB,QAAO,QAAQ,GAAE,MAAO,QAAO;AAAA,IACjJ,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,MAAQ,EAAC,SAAU,OAAM,MAAO,CAAC,OAAM,KAAK,GAAE,MAAO,SAAQ;AAAA,IAC7D,QAAU,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,QAAO;AAAA,EAC5K;AAAA,EACA,8BAA8B;AAAA,IAC5B,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,WAAU,WAAU,MAAK,aAAY,aAAY,eAAc,cAAa,eAAc,gBAAe,aAAa,GAAE,MAAO,QAAO;AAAA,IACrK,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,cAAc,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC3C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC1C,gBAAgB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC7C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,eAAe,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC5C,aAAa,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,EAChK;AAAA,EACA,6BAA6B;AAAA,IAC3B,yBAAyB,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC9K,kBAAkB,EAAC,MAAO,MAAK,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,QAAO;AAAA,IAClL,YAAY,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACzD,aAAa,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IAC1D,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,UAAS,SAAQ,WAAU,YAAW,mBAAkB,gBAAe,WAAU,YAAW,YAAW,aAAY,MAAK,aAAY,aAAY,iBAAgB,kBAAiB,iBAAgB,gBAAe,mBAAkB,kBAAiB,kBAAiB,yBAAwB,gBAAgB,GAAE,MAAO,QAAO;AAAA,IAC3V,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,aAAa,EAAC,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACtD,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,2KAA0K,eAAgB,+JAA8J,MAAO,SAAQ;AAAA,IACxZ,WAAW,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACxD,YAAY,EAAC,WAAY,IAAG,WAAY,GAAE,MAAO,SAAQ;AAAA,IACzD,QAAU,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC/J,aAAa,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IACrP,gBAAgB,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IACrK,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC9J,kBAAkB,EAAC,SAAU,QAAO,MAAO,CAAC,QAAO,MAAM,GAAE,MAAO,SAAQ;AAAA,IAC1E,iBAAiB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC9C,kBAAkB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,EAC5E;AAAA,EACA,+BAA+B;AAAA,IAC7B,SAAW,EAAC,WAAY,KAAI,SAAU,0BAAyB,eAAgB,qBAAoB,MAAO,SAAQ;AAAA,IAClH,QAAU,EAAC,MAAO,MAAK,MAAO,CAAC,mBAAkB,WAAU,YAAW,kBAAiB,MAAK,aAAY,gBAAe,gBAAgB,GAAE,MAAO,QAAO;AAAA,IACvJ,QAAU,EAAC,SAAU,kBAAiB,eAAgB,oBAAmB,MAAO,SAAQ;AAAA,IACxF,aAAa,EAAC,SAAU,KAAI,SAAU,GAAE,SAAU,GAAE,MAAO,UAAS;AAAA,IACpE,IAAM,EAAC,WAAY,KAAI,SAAU,uFAAsF,eAAgB,yFAAwF,MAAO,SAAQ;AAAA,IAC9O,kBAAkB,EAAC,SAAU,GAAE,MAAO,UAAS;AAAA,IAC/C,gBAAgB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,IACxE,OAAS,EAAC,WAAY,IAAG,WAAY,GAAE,SAAU,uCAAsC,eAAgB,yCAAwC,MAAO,SAAQ;AAAA,IAC9J,kBAAkB,EAAC,SAAU,KAAI,SAAU,IAAG,SAAU,GAAE,MAAO,UAAS;AAAA,EAC5E;AACF;;;AC9KO,IAAM,sBAAqE;AAAA,KAC7E;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AAAA,KACA;AACL;;;AnB3BO,IAAM,iBAAiB,CAAC,QAA0C;AAAA,EACvE,MAAM,QAAQ,oBAAoB;AAAA,EAClC,IAAI,UAAU,WAAW;AAAA,IACvB,MAAM,IAAI,MACR,mCAAmC,0DACjC,2DACJ;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAIF,IAAM,iBAAiB,CAC5B,KACA,MACA,aACsB,WAAW,eAAe,GAAG,GAAG,MAAM,EAAE,SAAS,CAAC;AAQnE,IAAM,YAAY,CACvB,KACA,MACA,aAEO,eAAQ,MAAM;AAAA,EACnB,IAAI,QAAQ;AAAA,IAAW,OAAc;AAAA,EACrC,MAAM,QAAQ,eAAe,KAAK,MAAM,QAAQ;AAAA,EAChD,OAAO,MAAM,WAAW,IAAW,cAAc,WAAI,IAAI,MAAM,QAAQ,KAAK,KAAK,CAAC,CAAC;AAAA,CACpF;;;AoBzCI,IAAM,YAAY,CAAC,QAAgB,IAAI,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO,EAAE,KAAK,GAAG;AAGrF,IAAM,gBAAgB,EAAE,OAAO,UAAU,OAAO,UAAU,MAAM,QAAQ;AAGxE,IAAM,WAAW;AAGV,IAAM,QAAQ,CAAC,WAAiD;AAAA,EACrE,MAAM,UAAU,MAAM,IAAI;AAAA,EAC1B,OAAO,MAAM;AAAA,GACZ,cAAc,MAAM,QAAQ,MAAM;AACrC;AAGO,IAAM,OAAO,CAAC,WAAiD;AAAA,KACjE,MAAM,KAAK;AAAA,EACd,WAAW,MAAM,cAAc,QAAQ,MAAM;AAC/C;AAGA,IAAM,SAAS,CAAC,SACd,OAAO,YAAY,OAAO,QAAQ,IAAI,EAAE,OAAO,CAAC,MAA6B,EAAE,OAAO,SAAS,CAAC;AAQ3F,IAAM,aAAa,CAAC,UAAoB,UAAU,UAAU,OAAO,KAAK,KAAK,CAAC,GAAG,IAAI;AAGrF,IAAM,WAAW,CAAC,UACvB,CAAC,UAAU,MAAM,IAAI,GAAG,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,EAAE,KAAK,GAAG;AAExE,IAAM,OAAO,CAAC,MAAuD,UACnE,KAAK,KACH,CAAC,QACC,IAAI,SAAS,UAAU,MAAM,IAAI,KACjC,IAAI,SAAS,MAAM,QACnB,IAAI,SAAS,MAAM,QACnB,IAAI,WAAW,MAAM,MACzB;AAMF,IAAM,aAAa,CAAC,QAA8C;AAAA,EAChE,MAAM,QAAQ,IAAI;AAAA,EAClB,OAAO,UAAU,aAAa,UAAU,KAAK,UAAU,QAAQ,UAAU;AAAA;AAGpE,IAAM,eAAe,CAC1B,MACA,UACkB;AAAA,EAClB,MAAM,MAAM,KAAK,MAAM,KAAK;AAAA,EAC5B,OAAO;AAAA,IACL,OAAO,QAAQ;AAAA,IACf,MAAM,UAAU,MAAM,IAAI;AAAA,IAC1B,WAAW,QAAQ,aAAa,WAAW,GAAG;AAAA,IAC9C,QAAQ,MAAM;AAAA,IACd,MAAM,MAAM;AAAA,IACZ,MAAM,MAAM;AAAA,EACd;AAAA;AAGK,IAAM,UAAU,CAAC,YAA2B,UACjD,WAAW,SAAS,WAAW,eAAe,MAAM,cAAc;;;AC5BpE;AACA;AAEA,wBAAS;AAET;;;ACdA;AACA;AACA;AACA;;;ACvCA;AACA;AACA;AACA;AACA;AACA;;;ACVA;AAAA;AAiBO,MAAM,4BAAiC,iBAAY,qBAAqB,EAI5E;AAAA,MACY,OAAO,GAAW;AAAA,IAC7B,OACE,mBAAmB,KAAK,eAAe,KAAK,gBAAgB,KAAK,6BACjE;AAAA;AAGN;;;ADbA,IAAM,cAAc,CAAC,KAAqB,SACxC,IAAI,OAAO,WAAW,IAAI,SAAS,WAAW;AA0BzC,IAAM,OAAO,CAAC,QAAmB,MAAe,MAAsB,QAAQ,QAC5E,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,GAAG,OAAO,eAAe;AAAA,EAGtC,MAAM,SAAS,CAAC,SAAgB,WAC9B,IAAI,MAAM,mBAAmB,WAAW,YAAW,IAAI,gBAAgB,YAAW,QAAQ;AAAA,EAC5F,MAAM,UACJ,YAAY,KAAK,YAAY,KAAK,YAAY,KAAK,MAAM,KAAK;AAAA,EAChE,MAAM,SAAS,QAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,UAAU,MAAM,IAAI;AAAA,EACjF,MAAM,OAAO,WAAW,YAAY,QAAQ,QAAQ,QAAQ,EAAE,IAAI;AAAA,EAClE,MAAM,UAAkC,EAAE,mBAAmB,OAAO;AAAA,EACpE,MAAM,YAAY,YAAY,KAAK,WAAW;AAAA,EAC9C,IAAI,cAAc;AAAA,IAAI,QAAQ,uBAAuB;AAAA,EACrD,MAAM,QAAQ,YAAY,KAAK,OAAO;AAAA,EACtC,IAAI,UAAU;AAAA,IAAI,QAAQ,mBAAmB;AAAA,EAC7C,IAAI,WAAW,aAAa,EAAE,SAAS,aAAa;AAAA,IAClD,OAAO,OAAc,aAAK,OAAO,GAAG,oDAAoD,CAAC;AAAA,EAC3F;AAAA,EAEA,MAAM,SAAS,OAAkB;AAAA,EAGjC,MAAM,WAAW,OAAe;AAAA,EAChC,MAAM,WAAkB,iBACtB,OAAc,sBAA8B,2BAAW,GACvD,OAAO,CAAC,EACV;AAAA,EACA,MAAM,UAA4B,sBAAI,GAAG,WAAW,MAAM,EAAE,KACxC,6BAAW,OAAO,CACtC;AAAA,EACA,MAAM,WAAW,OAAO,QAAQ,OAAO,EAAE,KAChC,gBAAQ,CAAC,aACP,YAAI,SAAS,MAAM,CAAC,WAAU,EAAE,QAAQ,SAAS,QAAQ,YAAK,EAAE,CACzE,GAEO,gBAAQ,YAAY,GACpB,uBAAuB,8BAAsB,CAAC,GAAG,UAAU,eAAe,CAAC,CACpF;AAAA,EAKA,MAAM,OAAoD,KAAK,UAAU,MAAM,OAAO;AAAA,EACtF,QAAQ,QAAQ,SAAS,QACvB,WAAW,YACP,WACO,uBAAe,UAA0B,6BAAa,IAAI,GACrE,KAEO,iBAAS,CAAC,UAAU,OAAO,GAAG,MAAM,OAAO,CAAC,CACrD;AAAA,EAEA,IAAI;AAAA,EAOJ,IAAI;AAAA,IACF,SAAS,KAAK,MAAM,IAAI;AAAA,IACxB,MAAM;AAAA,IACN,SAAS;AAAA;AAAA,EAEX,IAAI,SAAS,OAAO,UAAU,KAAK;AAAA,IACjC,MAAM,SAAS,QAAQ;AAAA,IACvB,MAAM,gBAAgB,MAAM,QAAQ,MAAM;AAAA,IAC1C,MAAM,SAAS,gBAAgB,OAAO,IAAI,MAAM,EAAE,KAAK,IAAI,IAAI;AAAA,IAY/D,IAAI,WAAW,OAAO,eAAe;AAAA,MACnC,OAAO,OAAc,aAAK,IAAI,oBAAoB,EAAE,QAAQ,OAAO,OAAO,OAAO,KAAK,CAAC,CAAC;AAAA,IAC1F;AAAA,IACA,OAAO,OAAc,aAAK,OAAO,QAAQ,UAAU,mBAAmB,CAAC;AAAA,EACzE;AAAA,EACA,MAAM,UAAU,QAAQ,MAAM;AAAA,EAC9B,MAAM,SAAS,QAAQ,MAAM;AAAA,EAC7B,IAAI,OAAO,YAAY,YAAY,OAAO,WAAW,UAAU;AAAA,IAE7D,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,OAAO,eAAe,iEACvB,kCAAkC,OAAO,gDACzC,kFACJ,CACF;AAAA,EACF;AAAA,EACA,MAAM,QAAQ,QAAQ;AAAA,EACtB,MAAM,eAAe,OAAO,UAAU,WAAW,QAAQ;AAAA,EACzD,OAAO,EAAE,cAAc,QAAQ,QAAQ;AAAA,CACxC;AAQI,IAAM,gBAAgB,CAAC,YAA2B,WACvD,OAAO,WAAW,QACd,eAAe,WAAW,WAAW,WAAW,WAChD,eAAe,WAAW,WAAW,WAAW;;;AD9FtD,IAAM,wBAAwB;AAmB9B,IAAM,QAAQ,CAAC,QAAmB,UAA6B;AAAA,EAC7D,OAAO,OAAO;AAAA,EACd;AAAA,EACA,QAAQ,OAAO;AACjB;AAWO,IAAM,aAAa,CAAC,SACpB,eAAU,IAAI,KAAK,KAAK,MAAM,eAAe,wBACrC,iBAAQ,KAAK,MAAM,eAAe,qBAAqB,IACvD;AAcR,IAAM,aAAa,CAAO,YACzB,eAAS,SAAS,EAAE,UAAU,IAAI,mBAAmB,UAAU,WAAW,CAAC;AAEnF,IAAM,eAAe,CAAC,QACpB,IAAI,WAAW,QACX,EAAE,KAAK,iCAAiC,OAAO,IAAI,OAAO,QAAQ,MAAM,IACxE,EAAE,SAAS,CAAC,GAAG,OAAO,IAAI,OAAO,QAAQ,MAAM;AAErD,IAAM,SAAgB,gBAAQ,WAAW,CAAC,QAAQ,KAAK,aAAa,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;AAS7E,IAAM,SAAS,CAAC,QAAmB,SAAwB,UAAI,QAAQ,MAAM,QAAQ,IAAI,CAAC;;;AG3HjG;AAEA;AACA;AACA;AACA;AAKO,IAAM,eAAe;AAGrB,IAAM,aAAa,CAAC,WAAmB,WAAW,UAAU,OAAO,YAAY;AAgB/E,IAAM,iBAAiC;AAG9C,IAAM,kBAAkB,IAAI;AAKrB,IAAM,iBAAiB,CAAC,QAAmB,WAAmB;AAAA,EACnE,gBAAgB,IAAI,OAAO,OAAO,MAAM;AAAA;AAInC,IAAM,iBAAiB,CAAC,WAAyC;AAAA,EACtE,MAAM,YAAY,gBAAgB,IAAI,OAAO,KAAK;AAAA,EAClD,IAAI,cAAc,aAAa,CAAC,OAAO,QAAQ,SAAS,SAAS;AAAA,IAAG,OAAO,OAAO;AAAA,EAClF,OAAO,CAAC,WAAW,GAAG,OAAO,QAAQ,OAAO,CAAC,WAAW,WAAW,SAAS,CAAC;AAAA;AAG/E,IAAM,YAAY,CAAC,UAAuC;AAAA,EACxD,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAAA,IAC/C,IAAI,UAAU,SAAS,OAAO,MAAM,SAAS;AAAA,MAAU,OAAO,MAAM;AAAA,IACpE,IAAI,WAAW;AAAA,MAAO,OAAO,UAAW,MAA6B,KAAK;AAAA,EAC5E;AAAA,EACA;AAAA;AAGF,IAAM,iBAAiB,CAAC,UAA4B;AAAA,EAClD,MAAM,OAAO,UAAU,KAAK;AAAA,EAC5B,IAAI,SAAS,gBAAgB,SAAS,eAAe,SAAS,2BAA2B;AAAA,IACvF,OAAO;AAAA,EACT;AAAA,EACA,OAAO,iBAAiB,SAAS,qBAAqB,KAAK,MAAM,OAAO;AAAA;AAkB1E,IAAM,iBAAiB,IAAI,IAAI,CAAC,qBAAqB,gBAAgB,aAAa,WAAW,CAAC;AAE9F,IAAM,oBAAoB,CAAC,SACzB,mFAAmF,KAAK,IAAI;AAE9F,IAAM,iBAAiB,CAAC,UAA4B;AAAA,EAClD,MAAM,OAAO,UAAU,KAAK;AAAA,EAC5B,OAAO,SAAS,cAAc,eAAe,IAAI,IAAI,KAAK,kBAAkB,IAAI;AAAA;AAW3E,IAAM,qBAAqB,CAAC,UAA4B;AAAA,EAC7D,IAAU,qBAAe,KAAK;AAAA,IAAG,OAAO;AAAA,EACxC,IAAI,CAAiB,kCAAkB,KAAK;AAAA,IAAG,OAAO;AAAA,EACtD,MAAM,MAAM,MAAM,OAAO;AAAA,EACzB,OAAO,QAAQ,oBAAoB,QAAQ,qBAAqB,QAAQ;AAAA;AASnE,IAAM,qBAAqB,CAAC,UAA4B;AAAA,EAC7D,IAAI,CAAiB,kCAAkB,KAAK;AAAA,IAAG,OAAO;AAAA,EACtD,QAAQ,WAAW;AAAA,EACnB,IAAI,OAAO,SAAS,qBAAqB,OAAO,SAAS;AAAA,IAAe,OAAO;AAAA,EAC/E,IAAI,OAAO,SAAS,kBAAkB;AAAA,IACpC,IAAI,eAAe,OAAO,KAAK;AAAA,MAAG,OAAO;AAAA,IACzC,OAAO,eAAe,OAAO,KAAK;AAAA,EACpC;AAAA,EACA,OAAO;AAAA;AAGF,IAAM,oBAAoB,CAAC,UAA2B;AAAA,EAC3D,IAAU,qBAAe,KAAK;AAAA,IAAG,OAAO,mBAAmB,OAAO,cAAc;AAAA,EAChF,IAAoB,kCAAkB,KAAK;AAAA,IAAG,OAAO,MAAM;AAAA,EAC3D,OAAO,OAAO,KAAK;AAAA;AAwBd,IAAM,mBAAmB,CAC9B,QACA,QACA,MACA,OACA,WAA0B,mBAWnB,YAAI,UAAU,GAAG;AAAA,EActB,MAAM,SAAS,OAAkB;AAAA,EACjC,MAAM,UAAU,WAAW;AAAA,EAC3B,MAAM,WAA4B,CAAC;AAAA,EACnC,WAAW,UAAU,eAAe,MAAM,GAAG;AAAA,IAC3C,MAAM,UAAU,OAAO,OACpB,QAAQ,MAAM,WAAW,MAAM,CAAC,CAAC,EACjC,KAAY,gBAAQ,QAAO,GAAU,cAAM;AAAA,IAC9C,IAAW,iBAAU,OAAO,GAAG;AAAA,MAC7B,eAAe,QAAQ,MAAM;AAAA,MAC7B,OAAO,QAAQ;AAAA,IACjB;AAAA,IACA,MAAM,MAAM,kBAAkB,QAAQ,OAAO;AAAA,IAC7C,SAAS,KAAK,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7B,MAAM,WAAW,UACb,mBAAmB,QAAQ,OAAO,IAClC,mBAAmB,QAAQ,OAAO;AAAA,IACtC,IAAI,CAAC,UAAU;AAAA,MACb,OAAO,OAAc,aAAK,EAAE,UAAU,QAAQ,MAAM,KAAK,UAAmB,CAAC;AAAA,IAC/E;AAAA,EACF;AAAA,EACA,OAAO,OAAc,aAAK,EAAE,UAAU,QAAQ,MAAM,KAAK,UAAmB,CAAC;AAAA,CAC9E;;;AJpII,MAAM,4BAA4B,MAAM;AAAA,EACxB;AAAA,EAArB,WAAW,CAAU,UAAoC;AAAA,IACvD,MAAM,uBAAuB,SAAS,IAAI,CAAC,MAAM,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,IAAI,GAAG;AAAA,IADpE;AAAA,IAEnB,KAAK,OAAO;AAAA;AAEhB;AAeO,IAAM,aAAa,CACxB,QACA,YACA,SACA,IACA,WAA0B,mBAEnB,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WAA4B,CAAC;AAAA,EACnC,WAAW,UAAU,eAAe,MAAM,GAAG;AAAA,IAC3C,MAAM,YAAY,wBAAwB;AAAA,MACxC,SAAS,WAAW,MAAM;AAAA,MAC1B,QAAQ,WAAW;AAAA,MACnB,SAAS,WAAW;AAAA,IACtB,CAAC;AAAA,IACD,MAAM,UAAU,OAAO,GAAG,KACX,mBACN,gBAAQ,SAAS,GACjB,gBAAQ,QAAO,GACf,cACT;AAAA,IACA,IAAW,kBAAU,OAAO,GAAG;AAAA,MAC7B,eAAe,QAAQ,MAAM;AAAA,MAC7B,OAAO,QAAQ;AAAA,IACjB;AAAA,IACA,MAAM,WAAW,UACb,mBAAmB,QAAQ,OAAO,IAClC,mBAAmB,QAAQ,OAAO;AAAA,IACtC,IAAI,CAAC;AAAA,MAAU,OAAO,OAAc,aAAK,QAAQ,OAAO;AAAA,IACxD,SAAS,KAAK,EAAE,QAAQ,KAAK,kBAAkB,QAAQ,OAAO,EAAE,CAAC;AAAA,EACnE;AAAA,EACA,OAAO,OAAc,aAAK,IAAI,oBAAoB,QAAQ,CAAC;AAAA,CAC5D;AAiBI,IAAM,SAAS,CACpB,QACA,MACA,SACA,OAMO,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,aAAa,OAAO,OAAO,QAAQ,IAAI;AAAA,EAC7C,OAAO,OAAO,WAAW,QAAQ,YAAY,SAAS,EAAE;AAAA,CACzD;;;AKpIH;AAIO,IAAM,aAAa,OAAO,gBAAgB;AAc1C,IAAM,mBAAmB,CAC9B,WAEA,OAAO,KAAY,iBAAS,uBAAuB,MAAa,gBAAQ,UAAU,CAAC,CAAC;AAQ/E,IAAM,oBAAoB,CAAC,MAAc,cACvC,mBACL,GAAG,QAAQ,8EACT,2FACA,qDACJ;;;A3BsCK,IAAM,aAAa,SAAqB,aAAa;AAgB5D,IAAM,iBAAiB,CAAC,UACtB,iBAAiB,OAAO,MAAM,QAAQ,aAAa,OAAc,qBAAc,CAAC,CAAC,CAAC,CAAC,EAAE,KAC5E,YAAI,CAAC,SAAU,SAAS,aAAa,aAAa,aAAa,MAAM,KAAK,CAAE,CACrF;AAGF,IAAM,iBAAiB,CAAC,SACtB,SAAS,aAAa,YAAY;AAE7B,IAAM,qBAAqB,MACvB,gBACP,YACO,gBACL,WAAW,SAAS,GAAG;AAAA,EAErB,MAAM,MAAa,gBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAa,WAAG,UAAU,GAAG,QAAQ;AAAA,IACnC,OAAO,eAAe,OAAO,eAAe,IAAI,CAAC;AAAA,GAClD;AAAA,EAQD,MAAa,WAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,WAAW,aAAa,WAAW,IAAI,KAAK,SAAS,IAAI,MAAM,SAAS,MAAM,GAAG;AAAA,MACnF,OAAO,EAAE,QAAQ,UAAU;AAAA,IAC7B;AAAA,IACA,IAAI,CAAC,WAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,WAAW,IAAI;AAAA,IACtB,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,eAAe,IAAI;AAAA,IAGvC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,eAAe,SAAS,IAAI,CAAC;AAAA,MACtD,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,OAAO,SAAS,aAAa,QAAQ,MAAM,IAAI,IAC1C,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EAOD,WAAkB,WAAG,UAAU,GAAG,QAAQ;AAAA,IAIxC,MAAM,SAAS,eAAe,OAAO,eAAe,IAAI,CAAC;AAAA,IACzD,OAAO,WAAW,IAAI;AAAA,IACtB,IAAI,WAAW,aAAa,CAAC,QAAQ,QAAQ,IAAI,GAAG;AAAA,MAClD,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,oBAAa,KAAK,IAAI,CAAC,CAAC;AAAA,IAC/E;AAAA,IACA,MAAM,QAAQ,eAAe,OAAO,eAAe,IAAI,CAAC;AAAA,IACxD,IAAI,UAAU,aAAa,CAAC,MAAM,OAAO;AAAA,MACvC,OAAO,OAAc,YACnB,IAAI,MACF,+CAA+C,SAAS,IAAI,oBAC1D,8EACA,kFACA,qDACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EASD,QAAe,WAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,MAAM,UAAsC,KAAK,MAAM,IAAI,GAAG,QAAQ,IAAI;AAAA,IAC1E,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,oBAAa,OAAO,CAAC;AAAA,GAC3E;AACH,CAAC,CACH,CACF;;A4BzJF,IAAM,UAAU,CAAC,OAAe,UAA0B;AAAA,EACxD,IAAI,SAAS,KAAK,KAAK,KAAK,UAAU,IAAI;AAAA,IACxC,MAAM,IAAI,MACR,0BAA0B,sDAC5B;AAAA,EACF;AAAA,EACA,OAAO,KAAK,UAAU,KAAK;AAAA;AAQ7B,IAAM,cAAc,CAAC,UAA0B;AAAA,EAC7C,MAAM,OAAO,QAAQ,gBAAgB,KAAK;AAAA,EAC1C,IAAI,WAAW;AAAA,EACf,IAAI;AAAA,IACF,WAAW,IAAI,IAAI,KAAK,EAAE;AAAA,IAC1B,MAAM;AAAA,EAGR,IAAI,aAAa,YAAY,aAAa,SAAS;AAAA,IACjD,MAAM,IAAI,MAAM,qEAAqE;AAAA,EACvF;AAAA,EACA,OAAO;AAAA;AAIT,IAAM,eAAqE;AAAA,EACzE,CAAC,YAAY,MAAM;AAAA,EACnB,CAAC,UAAU,QAAQ;AAAA,EACnB,CAAC,aAAa,WAAW;AAAA,EACzB,CAAC,YAAY,UAAU;AACzB;AAeO,IAAM,wBAAwB,CAAC,UAAmC,CAAC,MAAc;AAAA,EACtF,MAAM,YAAY,QAAQ,aAAa,QAAQ,aAAa,iBAAiB;AAAA,EAC7E,MAAM,SAAS,QAAQ,UAAU,QAAQ,UAAU,KAAK;AAAA,EACxD,MAAM,SAAS,aAAa,IAC1B,EAAE,OAAO,WACP,sBAAsB,WAAW,0BAA0B,kBAC/D;AAAA,EACA,MAAM,OACJ,QAAQ,iBAAiB,YACrB,KACA;AAAA,sBAA0B,YAAY,QAAQ,YAAY;AAAA,EAChE,OAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK;AAAA,CAAI;AAAA;;AC3Eb,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;AC7BO,IAAM,MAAM,CAAC,OAAgB,aAClC,OAAO,UAAU,WAAW,QAAQ;AAE/B,IAAM,OAAO,CAAC,OAAgB,WAAW,OAC9C,OAAO,UAAU,WAAW,QAAQ;AA2B/B,IAAM,OAAO,CAAC,OAAgB,WAAW,UAC9C,UAAU,aAAa,UAAU,QAAQ,UAAU,KAC/C,WACA,UAAU,KAAK,UAAU,QAAQ,UAAU;AAS1C,IAAM,OAAO,CAAC,UAAqB,UAAU,YAAY,YAAY,QAAQ,MAAM;AAUnF,IAAM,MAAM,CAAC,WACjB,OAAO,UAAU,WAAW,MAAM,MAAM,GAAG,IAAK,SAAS,CAAC,GACxD,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,EACL,KAAK,GAAG;AAYN,IAAM,YAAY,CAAC,UAA2B;AAAA,EACnD,MAAM,QACJ,OAAO,UAAU,WACb,MAAM,MAAM,GAAG,IACf,MAAM,QAAQ,KAAK,IACjB,MAAM,IAAI,CAAC,UAAmB,OAAO,KAAK,CAAC,IAC3C,CAAC;AAAA,EACT,OAAO,MACJ,IAAI,CAAC,SAAS,OAAO,KAAK,KAAK,CAAC,CAAC,EACjC,OAAO,CAAC,OAAO,OAAO,SAAS,EAAE,CAAC,EAClC,KAAK,CAAC,MAAM,UAAU,OAAO,KAAK,EAClC,IAAI,CAAC,OAAO,OAAO,EAAE,CAAC,EACtB,KAAK,GAAG;AAAA;AAIN,IAAM,iBAAiB,CAAC,QAAgB;AAAA,EAC7C,MAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AAAA,EACvC,IAAI,CAAC,KAAK,OAAO,QAAQ,IAAI,EAAE,SAAS,OAAO;AAAA,IAAG,OAAO;AAAA,EACzD,IAAI,CAAC,KAAK,MAAM,SAAS,KAAK,EAAE,SAAS,OAAO;AAAA,IAAG,OAAO;AAAA,EAC1D,OAAO;AAAA;AAmBF,IAAM,iBAAiB,CAAC,OAAgB,eAAgC;AAAA,EAC7E,MAAM,QACJ,OAAO,UAAU,WACb,MAAM,MAAM,GAAG,EAAE,IAAI,CAAC,SAAS;AAAA,IAC7B,OAAO,QAAQ,QAAQ,KAAK,MAAM,GAAG;AAAA,IACrC,OAAO,KAAK,WAAW,KAAK,eAAe,YACvC,CAAC,YAAY,OAAO,EAAE,IACtB,CAAC,OAAO,IAAI,KAAK,KAAK,GAAG,CAAC;AAAA,GAC/B,IACD,OAAO,UAAU,YAAY,UAAU,OACrC,OAAO,QAAQ,KAAK,EAAE,IAAI,EAAE,KAAK,WAAW,CAAC,KAAK,OAAO,KAAK,CAAC,CAAC,IAChE,CAAC;AAAA,EACT,OAAO,MACJ,IAAI,EAAE,KAAK,WAAW,CAAC,IAAI,KAAK,GAAG,eAAe,KAAK,CAAC,CAAU,EAClE,OAAO,EAAE,SAAS,QAAQ,EAAE,EAC5B,IAAI,EAAE,KAAK,WAAW,GAAG,OAAO,OAAO,EACvC,KAAK,EACL,KAAK,GAAG;AAAA;AAWN,IAAM,MAAM,CAAC,OAAgB,aAAqB;AAAA,EACvD,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,MAAM,SAAS,OAAO,SAAS,KAAK,KAAK,GAAG,EAAE;AAAA,EAC9C,OAAO,OAAO,MAAM,MAAM,IAAI,WAAW;AAAA;AA6BpC,IAAM,aAAa,CACxB,QACA,UAC2B;AAAA,EAC3B,MAAM,UAAU,IAAI,IAAI,KAAK;AAAA,EAC7B,MAAM,OAA+B,CAAC;AAAA,EACtC,YAAY,KAAK,UAAU,OAAO,QAAQ,MAAM,GAAG;AAAA,IACjD,IAAI,UAAU,aAAa,CAAC,QAAQ,IAAI,GAAG;AAAA,MAAG,KAAK,OAAO;AAAA,EAC5D;AAAA,EACA,OAAO,QAAQ,SAAS,IAAI,OAAO,KAAK,MAAM,QAAQ,CAAC,GAAG,OAAO,EAAE,KAAK,GAAG,EAAE;AAAA;;;AC/KxE,IAAM,mBAAmB;AAczB,IAAM,cAAc,CAAC,UAAyB,GAAG,MAAM,UAAU,MAAM;AAgBvE,IAAM,QAAQ,CAAC,WAA4D;AAAA,EAChF,SAAS,MAAM,WAAW;AAAA,EAC1B,QAAQ,OAAO,MAAM,MAAM;AAAA,EAC3B,SAAS,MAAM,UAAU,MAAM;AAAA,EAC/B,SAAS,MAAM;AAAA,EACf,QAAQ,MAAM;AAChB;AAaO,IAAM,gBAAe,CAC1B,MACA,UACmC;AAAA,EACnC,IAAI,KAAK,WAAW,aAAa,KAAK,YAAY;AAAA,IAAW;AAAA,EAC7D,OAAO;AAAA,IACL,SAAS,KAAK,KAAK,OAAO;AAAA,IAC1B,QAAQ,IAAI,KAAK,QAAQ,CAAC;AAAA,IAC1B,aAAa,YAAY,KAAK;AAAA,IAG9B,SAAS,KAAK,KAAK,SAAS,IAAI;AAAA,IAChC,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,EAChB;AAAA;AAQK,IAAM,WAAU,CAAC,YAAgC,UACtD,WAAW,aAAa,MAAM,WAAW,OACzC,WAAW,WAAW,MAAM,UAC5B,WAAW,YAAY,MAAM;;;AC3ExB,IAAM,UAAS,CAAC,SACrB,OAAO,YACL,OAAO,QAAQ,IAA+B,EAAE,OAC9C,CAAC,MAA6B,OAAO,EAAE,OAAO,QAChD,CACF;AAOK,IAAM,cAAa,CACxB,UACA,MACA,aACwB,UAAU,UAAU,QAAO,IAAI,GAAG,QAAQ;;;AHkG7D,IAAM,kBAAkB,UAA0B,oBAAoB;AAAA,EAC3E,sBAAsB;AACxB,CAAC;AAYD,IAAM,YAAY,CAAC,UAAyB;AAAA,EAC1C,MAAM,QAAQ,EAAE,SAAS,MAAM,SAAS,QAAQ,MAAM,OAAO;AAAA,EAC7D,OAAO,iBACL,OAAO,MAAM,QAAQ,aAAa,OAAc,2BAAmB,KAAK,CAAC,CAC3E,EAAE,KAAY,YAAI,CAAC,SAAU,SAAS,aAAa,aAAa,cAAa,MAAM,KAAK,CAAE,CAAC;AAAA;AAI7F,IAAM,kBAAiB,CAAC,SACtB,SAAS,aAAa,YAAY;AAQ7B,IAAM,0BAA0B,MAC5B,iBACP,iBACO,gBACL,gBAAgB,SAAS,GAAG;AAAA,EAM1B,MAAM,MAAa,gBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAa,WAAG,UAAU,GAAG,QAAQ;AAAA,IACnC,OAAO,gBAAe,OAAO,UAAU,IAAI,CAAC;AAAA,GAC7C;AAAA,EACD,MAAa,WAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,kBAAkB,MAAM,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,UAAU,IAAI;AAAA,IAGlC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,oBAAoB,GAAG,KAAK,UAAU,KAAK,SAAS;AAAA,MAC7E,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IAKA,OAAO,SAAS,aAAa,SAAQ,MAAM,IAAI,IAC1C,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACD,WAAkB,WAAG,UAAU,GAAG,QAAQ;AAAA,IAMxC,MAAM,SAAS,gBAAe,OAAO,UAAU,IAAI,CAAC;AAAA,IACpD,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OAAc,YACnB,IAAI,MACF,GAAG,KAAK,UAAU,KAAK,4DACrB,kFACA,6EACA,kFACA,oFACA,uBACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO,YAAW,kBAAkB,MAAM,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MAC1B,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,2BAAmB,MAAM,IAAI,CAAC,CAAC;AAAA,IACtF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,UAAU,IAAI,CAAC;AAAA,IACnD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,YACnB,IAAI,MACF,GAAG,KAAK,UAAU,KAAK,2DACrB,iFACA,+EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EACD,QAAe,WAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACO,8BAAsB,EAAE,SAAS,KAAK,SAAS,QAAQ,KAAK,OAAO,CAAC,CAC7E;AAAA,GACD;AACH,CAAC,CACH,CACF;;AIzNF,qBAAS;AACT;AACA;;;ACrBA,uBAAS;AAET;;;ACAA;AACA;AACA;AAMO,MAAM,iBAAiB,MAAM;AAAA,EAEvB;AAAA,EACA;AAAA,EACA;AAAA,EAHX,WAAW,CACA,QACA,QACA,MACT,QACA;AAAA,IACA,MAAM,OAAO,UAAU,WAAW,OAAO,MAAM,MAAM,QAAQ;AAAA,IALpD;AAAA,IACA;AAAA,IACA;AAAA,IAIT,KAAK,OAAO;AAAA;AAEhB;AAEA,IAAM,mBAAmB,CACvB,QACA,MACA,aAEA,IAAI,SACF,GACA,QACA,MACA,uBAAuB,SAAS,IAAI,CAAC,MAAM,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,IAAI,GAChF;AAgBF,IAAM,SAAS,CAAC,SAA0B;AAAA,EACxC,MAAM,SAAS,IAAI;AAAA,EACnB,YAAY,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;AAAA,IAC/C,IAAI,OAAO,UAAU;AAAA,MAAU,OAAO,OAAO,KAAK,KAAK;AAAA,IAClD;AAAA,iBAAW,QAAQ;AAAA,QAAO,OAAO,OAAO,KAAK,IAAI;AAAA,EACxD;AAAA,EACA,OAAO,OAAO,SAAS;AAAA;AAGzB,IAAM,eAAe,CACnB,QACA,SACA,MACA,YACA,QACA,SACG;AAAA,EACH,MAAM,MAAM,GAAG,WAAW;AAAA,EAsB1B,OAAyB,wBAAK,MAAM,EAAE,GAAG,EAAE,KACvB,8BAAW,EAAE,eAAe,cAAc,YAAY,MAAM,EAAE,CAAC,GACjF,SAAS,YACL,CAAC,SAAS,OACQ,4BAAS,OAAO,IAAI,GAAG,mCAAmC,CAClF;AAAA;AAGF,IAAM,aAAa,CACjB,QACA,YACA,QACA,MACA,MACA,YAEO,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,SAAS,OAAkB;AAAA,EACjC,MAAM,UAAU,aAAa,QAAQ,SAAS,MAAM,YAAY,QAAQ,IAAI;AAAA,EAC5E,OAAO,OAAO,OACX,QAAQ,OAAO,EACf,KAAY,iBAAS,CAAC,UAAU,IAAI,SAAS,GAAG,QAAQ,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC;AAAA,CACjF;AAEH,IAAM,eAAe,CACnB,UAKA,QACA,SAEO,YAAI,UAAU,GAAG;AAAA,EAOtB,IAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAAK;AAAA,IAGnD,MAAM,SAAS,OAAO,SAAS,KAAK,KAAY,sBAAc,MAAM,EAAE,CAAC;AAAA,IACvE,OAAO,OAAc,aAAK,IAAI,SAAS,SAAS,QAAQ,QAAQ,MAAM,OAAO,MAAM,GAAG,GAAG,CAAC,CAAC;AAAA,EAC7F;AAAA,EACA,MAAM,OAAQ,OAAO,SAAS,KAAK,KAC1B,iBAAS,CAAC,UAAU,IAAI,SAAS,GAAG,QAAQ,MAAM,OAAO,KAAK,CAAC,CAAC,CACzE;AAAA,EACA,OAAO,KAAK;AAAA,CACb;AAGI,IAAM,UAAU,CACrB,QACA,YACA,QACA,MACA,SAEO,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WACJ,OAAO,WAAW,QACd,OAAO,iBAAiB,QAAQ,QAAQ,MAAM,CAAC,YAC7C,aAAa,QAAQ,SAAS,MAAM,YAAY,QAAQ,IAAI,CAC9D,EAAE,KACO,iBAAS,CAAC,YACf,QAAQ,QAAQ,YACZ,iBAAiB,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,IAC/D,IAAI,SAAS,GAAG,QAAQ,MAAM,OAAO,OAAO,CAAC,CACnD,CACF,IACA,OAAO,WAAW,QAAQ,YAAY,QAAQ,MAAM,MAAM,OAAO,GAAG;AAAA,EAC1E,OAAO,OAAO,aAAgB,UAAU,QAAQ,IAAI;AAAA,CACrD;AAQI,IAAM,kBAAkB,CAC7B,QACA,YACA,QACA,SAEO,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WAAW,OAAO,iBAAiB,QAAQ,QAAQ,MAAM,CAAC,YAC9D,aAAa,QAAQ,SAAS,MAAM,YAAY,MAAM,CACxD,EAAE,KACO,iBAAS,CAAC,YACf,QAAQ,QAAQ,YACZ,iBAAiB,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,QAAQ,IAC/D,IAAI,SAAS,GAAG,QAAQ,MAAM,OAAO,OAAO,CAAC,CACnD,CACF;AAAA,EACA,IAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAAK;AAAA,IACnD,MAAM,SAAS,OAAO,SAAS,KAAK,KAAY,sBAAc,MAAM,EAAE,CAAC;AAAA,IACvE,OAAO,OAAc,aAAK,IAAI,SAAS,SAAS,QAAQ,QAAQ,MAAM,OAAO,MAAM,GAAG,GAAG,CAAC,CAAC;AAAA,EAC7F;AAAA,EACA,OAAQ,OAAO,SAAS,KAAK,KACpB,iBAAS,CAAC,UAAU,IAAI,SAAS,GAAG,QAAQ,MAAM,OAAO,KAAK,CAAC,CAAC,CACzE;AAAA,CACD;AAoBI,IAAM,MAAM,CACjB,QACA,MACA,QACA,MACA,SAEO,YAAI,UAAU,GAAG;AAAA,EACtB,MAAM,aAAa,OAAO,OAAO,QAAQ,IAAI;AAAA,EAC7C,OAAO,OAAO,QAAW,QAAQ,YAAY,QAAQ,MAAM,IAAI;AAAA,CAChE;;;AClOH;AAIO,IAAM,aAAa,CACxB,SACG;AAAA,EAEH,MAAM,cAAc,CAAC,UACnB,OAAO,KAAK,aAAa,aAAa,KAAK,SAAS,KAAK,IAAI,KAAK;AAAA,EAqBpE,MAAM,cAAc,CAAC,OAAc,aAC1B,iBAAQ,MAAM;AAAA,IACnB,MAAM,SAAS,YAAY,KAAK,GAAG;AAAA,IACnC,OAAO,WAAW,YACP,gBACP,UAAU,QAAQ,KAAK,WAAW,KAAK,GAAG,QAAQ;AAAA,GACvD;AAAA,EAOH,MAAM,cAAc,CAAC,UACZ,iBAAQ,MAAM;AAAA,IACnB,MAAM,SAAS,YAAY,KAAK,GAAG;AAAA,IACnC,IAAI,WAAW;AAAA,MAAW,OAAc;AAAA,IACxC,MAAM,OAAO,KAAK,aAAa,KAAK;AAAA,IACpC,OAAO,SAAS,YAAmB,gBAAO,UAAU,QAAQ,MAAM,KAAK;AAAA,GACxE;AAAA,EAEH,OAAO,EAAE,aAAa,YAAY;AAAA;;;AClC7B,IAAM,aAAa,CACxB,UACA,MACA,OACA,SACsB,SAAQ,MAAM,KAAK,KAAK,OAAO,KAAK,IAAI,EAAE,WAAW,IAAI,YAAY;;;AHFtF,IAAM,gBAAgB,CAC3B,SACG;AAAA,EACH,QAAQ,aAAa,gBAAgB,WAAW,IAAI;AAAA,EAGpD,MAAM,OAAO,CAAC,UACZ,IACE,MAAM,QACN,KAAK,YAAY,QACjB,OACA,KAAK,KAAK,KAAK,CACjB,EAAE,KACO,aAAI,CAAC,SAAU,QAAQ,OAAO,YAAY,KAAK,WAAW,MAAM,KAAK,CAAE,GACvE,uBAAc,MAAG;AAAA,IAAG;AAAA,GAAS,CACtC;AAAA,EAEF,OAAO;AAAA,IAOL;AAAA,IACA;AAAA,IAEA;AAAA,IAKA,MAAM,CAAC,MAAoB,WAClB,aAAI,UAAU,GAAG;AAAA,MAItB,IAAI,CAAC,YAAW,IAAI;AAAA,QAAG;AAAA,MAOvB,OAAO,YAAY,MAAM,WAAW,SAAS;AAAA,MAC7C,OAAO,YAAY,IAAI;AAAA,MACvB,IAAI,WAAW;AAAA,QAAW;AAAA,MAC1B,MAAM,OAAO,OAAO,KAAK,IAAI;AAAA,MAG7B,IAAI,SAAS,WAAW;AAAA,QAMtB,OAAO,YAAY,MAAM,IAAI;AAAA,QAC7B,OAAO,EAAE,QAAQ,SAAS;AAAA,MAC5B;AAAA,MACA,IAAI,KAAK,QAAQ,MAAM,IAAI;AAAA,QAAG,OAAO,EAAE,QAAQ,OAAO;AAAA,MAEtD,OAAO,KAAK,eAAe,YACtB,EAAE,QAAQ,UAAU,IACpB,EAAE,QAAQ,SAAS;AAAA,KACzB;AAAA,IAEH,WAAW,CAAC,SACH,aAAI,UAAU,GAAG;AAAA,MACtB,MAAM,OAAO,OAAO,KAAK,IAAI;AAAA,MAM7B,OAAO,YAAY,MAAM,SAAS,SAAS;AAAA,MAC3C,OAAO,YAAY,IAAI;AAAA,MACvB,IAAI,SAAS,WAAW;AAAA,QACtB,OAAO,IACL,KAAK,QACL,aACA,QACA,KAAK,WAAW,IAAI,GACpB,KAAK,WAAW,IAAI,CACtB;AAAA,MACF,EAAO,SAAI,KAAK,eAAe,WAAW;AAAA,QAyBxC,MAAM,OAAO,WAAW,KAAK,SAAS,MAAM,MAAM,KAAK,WAAW,IAAI,CAAC;AAAA,QACvE,IAAI,SAAS,WAAW;AAAA,UACtB,OAAO,IAAI,KAAK,QAAQ,aAAa,OAAO,KAAK,KAAK,IAAI,GAAG,IAAI;AAAA,QACnE;AAAA,MACF;AAAA,MACA,MAAM,QAAQ,OAAO,KAAK,IAAI;AAAA,MAC9B,IAAI,UAAU,WAAW;AAAA,QAOvB,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,KAAK,KAAK,IAAI,oEACf,sFACA,4DACJ,CACF;AAAA,MACF;AAAA,MACA,OAAO;AAAA,KACR;AAAA,IAOH,SAAS,CAAC,SAAgB,IAAI,KAAK,QAAQ,aAAa,UAAU,KAAK,KAAK,IAAI,CAAC;AAAA,EACnF;AAAA;AAoCK,IAAM,cAAc,CACzB,SACG;AAAA,EACH,MAAM,MAAM,cAAc,IAAI;AAAA,EAC9B,OAAO;AAAA,IACL,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,IAC7B,MAAM,GAAG,WAA4B,IAAI,KAAK,IAAI;AAAA,IAClD,MAAM,GAAG,MAAM,aACb,IAAI,KAAK,MAAM,MAAM;AAAA,IACvB,WAAW,GAAG,WAA4B,IAAI,UAAU,IAAI;AAAA,IAC5D,QAAQ,GAAG,WAA4B,IAAI,QAAQ,IAAI;AAAA,EACzD;AAAA;;;AD5GK,IAAM,mBAAmB,UAA2B,mBAAmB;AAsB9E,IAAM,SAAQ,CAAC,WAA2B;AAAA,EACxC,KAAK,MAAM,QAAQ,OAAO,MAAM;AAAA,EAChC,SAAS,MAAM,YAAY,QAAQ,MAAM;AAAA,EACzC,MAAM,MAAM,QAAQ;AAAA,EACpB,qBAAqB,MAAM,wBAAwB;AAAA,EACnD,iBAAiB,MAAM,qBAAqB,OAAO,MAAM;AAAA,EACzD,UAAU,MAAM;AAAA,KACZ,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,KAC5D,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,UAAU,MAAM,OAAO,EAAE;AAAA,KACvE,MAAM,aAAa,YAAY,CAAC,IAAI,EAAE,UAAU,MAAM,SAAS;AAAA,KAC/D,MAAM,sBAAsB,YAAY,CAAC,IAAI,EAAE,kBAAkB,MAAM,kBAAkB;AAAA,KACzF,MAAM,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;AAAA,KACnD,MAAM,qBAAqB,YAAY,CAAC,IAAI,EAAE,iBAAiB,MAAM,iBAAiB;AAAA,KACtF,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,KAC5D,MAAM,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,UAAU,MAAM,IAAI,EAAE;AACpE;AAEA,IAAM,WAAW,YAAiD;AAAA,EAQhE,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,KAAK,KAAK,KAAK,QAAQ,KAAK;AAAA,IAC5B,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,IACjC,SAAS,KAAK,KAAK,YAAY,IAAI;AAAA,IACnC,SAAS,UAAU,KAAK,UAAU;AAAA,IAClC,UAAU,eAAe,KAAK,aAAa,SAAS;AAAA,IACpD,IAAI,MAAM;AAAA,IACV,MAAM,KAAK,KAAK,SAAS,UAAU;AAAA,IACnC,YAAY,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;AAAA,IACtE,kBAAkB,KAAK,KAAK,mBAAmB,EAAE;AAAA,IACjD,qBAAqB,KAAK,KAAK,sBAAsB,MAAM;AAAA,IAC3D,MAAM,KAAK,KAAK,SAAS,EAAE;AAAA,IAC3B,iBAAiB,eAAe,KAAK,gBAAgB;AAAA,IACrD,iBAAiB,KAAK,KAAK,kBAAkB,KAAK;AAAA,IAClD,UAAU,KAAK,KAAK,aAAa,EAAE;AAAA,IACnC,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,IACjC,MAAM,UAAU,KAAK,OAAO;AAAA,EAC9B;AAAA,EACA,YAAY,MAAM;AAAA,EAElB,YAAY,CAAC,WAAW,KAAK,OAAM,KAAK,GAAG,IAAI,MAAM,GAAG;AAAA,EAGxD,UAAU,EAAE,QAAQ,4BAA4B,QAAQ,+BAA+B;AAAA,EACvF,SAAS,CAAC,YAAY,UACpB,WAAW,aAAa,MAAM,YAC9B,WAAW,aAAa,MAAM,YAAY,UAC1C,WAAW,SAAS,MAAM,QAAQ,SAClC,WAAW,UAAU,MAAM,QAAQ,eACnC,WAAW,0BAA0B,MAAM,wBAAwB,WACnE,WAAW,sBAAsB,MAAM,qBAAqB,UAC3D,MAAM,YAAY,aAAa,WAAW,YAAY,MAAM,aAC5D,MAAM,SAAS,aAAa,WAAW,SAAS,MAAM,UACtD,MAAM,YAAY,aAAa,WAAW,YAAY,MAAM,aAC5D,MAAM,SAAS,aAAa,WAAW,SAAS,UAAU,MAAM,IAAI,OACpE,MAAM,YAAY,aAAa,WAAW,YAAY,UAAU,MAAM,OAAO,OAC7E,MAAM,sBAAsB,aAC3B,WAAW,sBAAsB,MAAM,uBACxC,MAAM,qBAAqB,aAC1B,WAAW,qBAAqB,eAAe,MAAM,gBAAgB,OACtE,MAAM,aAAa,aAClB,WAAW,aAAa,eAAe,MAAM,UAAU,SAAS;AAAA,EACpE,MAAM,CAAC,UAAU,kBAAkB,MAAM;AAAA,EACzC,YAAY;AACd,CAAC;AAgBM,IAAM,2BAA2B,MAC7B,iBAAO,kBAAyB,iBAAQ,iBAAiB,SAAS,GAAG,QAAQ,CAAC,CAAC;;AKlK1F,qBAAS;AACT,uBAAS;AACT;AACA;;;ACPO,IAAM,mBAAkE;AAAA,EAC7E,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AACP;AAQO,IAAM,WAAW,CAAC,UAA2B,MAAM,QAAQ,MAAM;AAQjE,IAAM,iBAAiB,CAAC,UAA2B,SAAS,MAAM,aAAa,MAAM;AAGrF,IAAM,aAAa,CAAC,UAA2B,GAAG,eAAe,KAAK,KAAK,SAAS,KAAK;AAezF,IAAM,aAAa,CAAC,UAAmD;AAAA,EAC5E,IAAI,MAAM,SAAS,SAAS,MAAM,mBAAmB,WAAW;AAAA,IAC9D,OAAO,EAAE,eAAe,MAAM,eAAe;AAAA,EAC/C;AAAA,EACA,MAAM,aAAa,MAAM,SAAS,QAAQ,KAAK,MAAM,UAAU,IAAI;AAAA,EACnE,OAAO,eAAe,YAAY,CAAC,IAAI,EAAE,WAAW;AAAA;AAU/C,IAAM,UAAU,CAAC,MAAe,WACpC,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,GAC5B,OAAO,CAAC,QAAwC,OAAO,QAAQ,YAAY,QAAQ,IAAI,EACvF,KAAK,CAAC,QAAQ,IAAI,YAAY,SAAS,KAAK,CAAC;AAY3C,IAAM,mBAAmB,CAC9B,MACA,UACqC;AAAA,EACrC,MAAM,MAAM,QAAQ,MAAM,KAAK;AAAA,EAC/B,IAAI,QAAQ;AAAA,IAAW;AAAA,EACvB,OAAO;AAAA,IACL,MAAM,KAAK,IAAI,OAAO;AAAA,IACtB,QAAQ,KAAK,IAAI,UAAU;AAAA,IAC3B,MAAM,KAAK,IAAI,OAAO;AAAA,IACtB,MAAM,MAAM;AAAA,IACZ,MAAM,SAAS,KAAK;AAAA,IACpB,MAAM,MAAM;AAAA,IACZ,QAAQ,KAAK,IAAI,SAAS;AAAA,IAC1B,MAAM,IAAI,IAAI,SAAS,EAAE;AAAA,IACzB,SAAS,KAAK,IAAI,UAAU;AAAA,IAC5B,eAAe,KAAK,IAAI,iBAAiB;AAAA,IACzC,OAAO,KAAK,IAAI,QAAQ;AAAA,IACxB,SAAS,KAAK,IAAI,qBAAqB;AAAA,EACzC;AAAA;;;ACxHF;AACA;AAcA,IAAM,WAAW,CAAC,UAA2B;AAAA,EAC3C,MAAM,OAAO,MAAM;AAAA,EACnB,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,QAAQ,OAAa,sBAAgB,EAAE,KAAK,CAAC,CAAC,EAAE,KACnE,aAAI,CAAC,SAAoB,IAAI,CACtC;AAAA,SACG;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,QAAQ,OAAa,sBAAgB,EAAE,KAAK,CAAC,CAAC,EAAE,KACnE,aAAI,CAAC,SAAoB,IAAI,CACtC;AAAA,SACG;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,QAAQ,OAAa,sBAAgB,EAAE,KAAK,CAAC,CAAC,EAAE,KACnE,aAAI,CAAC,SAAoB,IAAI,CACtC;AAAA;AAAA;AAKC,IAAM,aAAa,CAAC,UACzB,SAAS,KAAK,EAAE,KACP,aAAI,CAAC,SAAS,iBAAiB,MAA4C,KAAK,CAAC,CAC1F;AAGK,IAAM,eAAe,CAAC,UAA2B;AAAA,EACtD,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,KAAK,SAAS,KAAK;AAAA,EACzB,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,OACL,MAAM,QACN,aACA,MACM,wBAAkB;AAAA,WAClB,MAAM,mBAAmB,YAAY,CAAC,IAAI,EAAE,aAAa,MAAM,eAAe;AAAA,QAClF,OAAO;AAAA,QACP;AAAA,MACF,CAAC,CACH;AAAA,SACG;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,aAAa,MAAY,wBAAkB,EAAE,IAAI,KAAK,CAAC,CAAC;AAAA,SACjF;AAAA,MACH,OAAO,OACL,MAAM,QACN,aACA,MACM,wBAAkB;AAAA,WAClB,MAAM,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,MAAM,aAAa,MAAM,IAAI;AAAA,QACrF,MAAM;AAAA,QACN;AAAA,MACF,CAAC,CACH;AAAA;AAAA;AAMC,IAAM,eAAe,CAAC,UAA2B;AAAA,EACtD,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,KAAK,SAAS,KAAK;AAAA,EACzB,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,aAAa,MAAY,wBAAkB,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC;AAAA,SACxF;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,aAAa,MAAY,wBAAkB,EAAE,IAAI,KAAK,CAAC,CAAC;AAAA,SACjF;AAAA,MACH,OAAO,OAAO,MAAM,QAAQ,aAAa,MAAY,wBAAkB,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC;AAAA;AAAA;AASzF,IAAM,aAAa,CAAC,UACzB,IAAI,MACF,GAAG,WAAW,KAAK,SAAS,MAAM,cAAc,SAAS,KAAK,oBAC5D,GAAG,MAAM,aAAa,MAAM,+DAC5B,qEACJ;;;AFkEK,IAAM,oBAAoB,UAA4B,sBAAsB;AAAA,EACjF,sBAAsB;AACxB,CAAC;AA6BM,IAAM,kBAAyB,YAAG,UAAU,GAAG,QAAmC;AAAA,EACvF,MAAM,OAAO,OAAO,WAAW,IAAI;AAAA,EACnC,OAAO,YAAW,iBAAiB,KAAK,OAAO,WAAW,IAAI,GAAG,SAAS,SAAS;AAAA,EACnF,IAAI,SAAS;AAAA,IAAW,OAAO;AAAA,EAC/B,OAAO,aAAa,IAAI;AAAA,EACxB,MAAM,QAAQ,OAAO,WAAW,IAAI;AAAA,EACpC,IAAI,UAAU;AAAA,IAAW,OAAO,OAAc,aAAI,WAAW,IAAI,CAAC;AAAA,EAClE,OAAO;AAAA,CACR;AAEM,IAAM,4BAA4B,MAC9B,iBACP,mBACO,iBACL,kBAAkB,SAAS,GAAG;AAAA,EAG5B,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAM,GAAG,WAAW,WAAW,IAAI;AAAA,EAEnC,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,iBAAiB,KAAK,OAAO,WAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACrF,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,WAAW,IAAI;AAAA,IACnC,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,iBAAiB,KAAK,OAAO,WAAW,IAAI,GAAG,IAAI;AAAA,MACrE,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,EAAE,QAAQ,OAAO;AAAA,GACzB;AAAA,EACD,WAAW,GAAG,WAAW,gBAAgB,EAAE,KAAK,CAAC;AAAA,EAMjD,QAAQ,GAAG,WAAW,aAAa,IAAI;AACzC,CAAC,CACH,CACF;;AG9KF,qBAAS;AACT;AACA;AA2EO,IAAM,kBAAkB,UAA0B,kBAAkB;AAE3E,IAAM,YAAW,YAA+C;AAAA,EAsB9D,YAAY,CAAC,MAAM,WAAW,EAAE,MAAM,MAAM,MAAM,OAAO,KAAK,IAAI,EAAE;AAAA,EACpE,YAAY,MAAM;AAAA,EAMlB,YAAY,CAAC,WAAW,GAAG,MAAM,OAAO,KAAK,MAAM,KAAK,KAAK,IAAI;AAAA,EACjE,UAAU,EAAE,QAAQ,qCAAqC;AAAA,EAUzD,SAAS,CAAC,YAAY,UAAU,WAAW,UAAU,MAAM;AAAA,EAC3D,MAAM,CAAC,UAAU,sBAAsB,MAAM;AAAA,EAQ7C,YAAY,CAAC,WAAW,EAAE,OAAO,KAAK,MAAM,KAAK,KAAK,IAAI;AAC5D,CAAC;AAEM,IAAM,0BAA0B,MAC5B,iBACP,iBACO,iBACL,gBAAgB,SAAS,GAAG;AAAA,KASvB;AAAA,EAEH,QAAQ,MAAa;AAAA,EAWrB,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IACxC,MAAM,QAAQ,OAAO,UAAS,UAAU,EAAE,KAAK,CAAC;AAAA,IAChD,IAAI,MAAM,UAAU,KAAK,OAAO;AAAA,MAC9B,OAAO,OAAc,aACnB,IAAI,MACF,sBAAsB,KAAK,oDACzB,oBAAoB,MAAM,QAAQ,QAAQ,yBAC1C,GAAG,KAAK,QAAQ,QAAQ,yDACxB,4EACA,gFACA,yBACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AACH,CAAC,CACH,CACF;;ACxLF,qBAAS;AACT,uBAAS;AACT;AACA;;;ACtDA;AACA;;;ACwDO,IAAM,UAAU,CACrB,MACA,UACiC;AAAA,EACjC,MAAM,OAAO,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,GACxC,OACC,CAAC,UAA4C,OAAO,UAAU,YAAY,UAAU,IACtF,EACC,KAAK,CAAC,UAAU,MAAM,YAAY,MAAM,IAAI;AAAA,EAC/C,IAAI,QAAQ;AAAA,IAAW;AAAA,EACvB,OAAO;AAAA,IACL,WAAW,KAAK,IAAI,YAAY;AAAA,IAChC,YAAY,IACV,MAAM,QAAQ,IAAI,aAAa,IAC3B,IAAI,cAAc,IAAI,CAAC,UAAmB,OAAO,KAAK,CAAC,IACvD,CAAC,CACP;AAAA,IACA,eAAe,KAAK,IAAI,gBAAgB;AAAA,IACxC,kBAAkB,IAAI,IAAI,qBAAqB,EAAE;AAAA,IACjD,MAAM,MAAM;AAAA,EACd;AAAA;AASK,IAAM,eAAe;AACrB,IAAM,gBAAgB;AAGtB,IAAM,aAAa,CAAC,UAAuB,SAAS,MAAM,gBAAgB,MAAM;AAGhF,IAAM,iBAAiB;AAG9B,IAAM,QAAQ,CAAC,MAAc,UAC3B,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,MAAM;AAMtC,IAAM,cAAa,CAAC,WAAgD;AAAA,KACtE,MAAM,eAAe,KAAK,MAAM,cAAc,CAAC;AAAA,KAC/C,MAAM,UAAU,MAAM,WAAW,YAAY,YAAY,OAAO,MAAM,MAAM,CAAC;AAClF;AAWO,IAAM,cAAa,CAAC,UACzB,IAAI,MACF,GAAG,WAAW,KAAK,8DACjB,aAAa,MAAM,sEACnB,yCACJ;AAEK,IAAM,eAAe,CAAC,UAC3B,IAAI,MACF,GAAG,WAAW,KAAK,iEACjB,aAAa,MAAM,6EACnB,yDACJ;;;ADnHK,IAAM,SAAS,CAAC,UACrB,OAAO,MAAM,QAAQ,QAAQ,OAAa,sBAAe,EAAE,MAAM,MAAM,KAAK,CAAC,CAAC,EAAE,KACvE,aAAI,CAAC,SAAS,QAAQ,MAA4C,KAAK,CAAC,CACjF;AAGF,IAAM,oBAAoB,CAAC,WACxB;AAAA,KACI,YAAW,KAAK;AAAA,EACnB,MAAM,MAAM;AAAA,EACZ,MAAM,MAAM;AACd;AAMF,IAAM,aAAa,CAAC,OAAoB,SAC/B,aAAI,UAAU,GAAG;AAAA,EACtB,SAAS,UAAU,EAAG,UAAU,eAAe,WAAW,GAAG;AAAA,IAC3D,MAAM,SAAS,OAAO,OACpB,MAAM,QACN,QACA,OACM,yBAAkB,EAAE,MAAM,MAAM,MAAM,KAAK,CAAC,CACpD,EAAE,KAAY,uBAAc,MAAG;AAAA,MAAG;AAAA,KAAS,CAAC;AAAA,IAC5C,IAAI,QAAQ,WAAW,WAAW;AAAA,MAChC,IAAI,OAAO,eAAe;AAAA,QAAM;AAAA,MAChC,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,WAAW,KAAK,eAAe,uBAAuB,OAAO,cAAc,wBAC5E,wFACA,yBAAyB,MAAM,cAAc,aACjD,CACF;AAAA,IACF;AAAA,IACA,OAAc,eAAM,eAAe,IAAI;AAAA,EACzC;AAAA,EACA,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,WAAW,KAAK,eAAe,kCAChC,GAAG,OAAO,gBAAgB,YAAY,oDACtC,iEACA,UAAU,MAAM,0EAChB,qDACJ,CACF;AAAA,CACD;AAGI,IAAM,WAAW,CAAC,UAChB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,OAAO,OAClB,MAAM,QACN,aACA,MACM,wBAAiB,kBAAkB,KAAK,CAAC,CACjD;AAAA,EAIA,IAAI,SAAS,IAAI;AAAA,IACf,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,WAAW,KAAK,4DACjB,iEACJ,CACF;AAAA,EACF;AAAA,EACA,OAAO,WAAW,OAAO,IAAI;AAAA,CAC9B;AAYI,IAAM,YAAY,CAAC,UACjB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,OAAO,OAClB,MAAM,QACN,aACA,MACM,wBAAiB;AAAA,IACrB,MAAM,MAAM;AAAA,IACZ,MAAM,MAAM;AAAA,OAER,MAAM,oBAAoB,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC;AAAA,OAC1D,MAAM,uBAAuB,OAAO,EAAE,iBAAiB,IAAI,IAAI,CAAC;AAAA,EACtE,CAAC,CACH,EAAE,KAAY,kBAAS,kBAAkB,MAAa,iBAAQ,EAAE,CAAC,CAAC;AAAA,EAGlE,IAAI,SAAS;AAAA,IAAI,OAAO,WAAW,OAAO,IAAI;AAAA,CAC/C;;;ADgBI,IAAM,gBAAgB,UAAwB,kBAAkB;AAAA,EACrE,sBAAsB;AACxB,CAAC;AAkBM,IAAM,wBAAwB,MAC1B,iBACP,eACO,iBACL,cAAc,SAAS,GAAG;AAAA,EAMxB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAa,YAAG,UAAU,GAAG,QAAQ;AAAA,IACnC,OAAO,OAAO,OAAO,IAAI;AAAA,GAC1B;AAAA,EAaD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,gBAAgB,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACxE,IAAI,WAAW,aAAa,KAAK,SAAS,OAAO,MAAM;AAAA,MACrD,OAAO,EAAE,QAAQ,UAAU;AAAA,IAC7B;AAAA,IACA,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,OAAO,IAAI;AAAA,IAC/B,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,gBAAgB,YAAW,IAAI,GAAG,IAAI;AAAA,MACxD,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IAEA,OAAO,EAAE,QAAQ,OAAO;AAAA,GACzB;AAAA,EASD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IACxC,MAAM,OAAO,OAAO,OAAO,IAAI;AAAA,IAC/B,IAAI,SAAS;AAAA,MAAW,OAAO;AAAA,IAC/B,OAAO,SAAS,IAAI;AAAA,IACpB,MAAM,QAAQ,OAAO,OAAO,IAAI;AAAA,IAChC,IAAI,UAAU;AAAA,MAAW,OAAO,OAAc,aAAI,YAAW,IAAI,CAAC;AAAA,IAClE,OAAO;AAAA,GACR;AAAA,EAQD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IAUrC,KAAK,OAAO,OAAO,IAAI,OAAO;AAAA,MAAW;AAAA,IACzC,OAAO,UAAU,IAAI;AAAA,IACrB,MAAM,QAAQ,OAAO,OAAO,IAAI;AAAA,IAChC,IAAI,UAAU;AAAA,MAAW,OAAO,OAAc,aAAI,aAAa,IAAI,CAAC;AAAA,GACrE;AACH,CAAC,CACH,CACF;;AG1MF,qBAAS;AACT,uBAAS;AAET;AACA;;;ACYA;AACA;AAQA,IAAM,WAAW,CAAC,UACf,MAAM,QAAQ,KAAK,WAAW,IAAI,KAAK,cAAc,CAAC,GAAG,OACxD,CAAC,UAA8B,OAAO,UAAU,YAAY,UAAU,IACxE;AAeK,IAAM,YAAY,CAAC,SAAiC;AAAA,EACzD,MAAM,OAAO,KAAK;AAAA,EAClB,MAAM,QAAmB,OAAO,SAAS,YAAY,SAAS,OAAQ,OAAqB,CAAC;AAAA,EAC5F,MAAM,OAAO,CAAC,SAAiC;AAAA,IAC7C,GAAI,KAAK,YAAY,QAAQ,CAAC,IAAI,IAAI,CAAC;AAAA,IACvC,GAAG,SAAS,IAAI,EAAE,QAAQ,IAAI;AAAA,EAChC;AAAA,EACA,OAAO,KAAK,KAAK;AAAA;AAoBZ,IAAM,UAAU,CAAC,MAAiB,UACvC,UAAU,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,OAAO,OAAO,GAAG,MAAM,KAAK;AAkD/D,IAAM,gBAAgB,CAAC,MAAiB,WAA4C;AAAA,EACzF,cAAc,KAAK,KAAK,qBAAqB;AAAA,EAC7C,cAAc,IAAI,KAAK,iBAAiB,CAAC;AAAA,EACzC,cAAc,KAAK,KAAK,eAAe;AAAA,EACvC,MAAM,KAAK,KAAK,OAAO;AAAA,EACvB,IAAI,KAAK,KAAK,KAAK;AAAA,EACnB,MAAM,KAAK,KAAK,SAAS,OAAO,OAAO,MAAM,KAAK,GAAG;AAAA,EACrD,OAAO,IAAI,KAAK,OAAO,MAAM,KAAK;AAAA,EAClC,SAAS,KAAK,KAAK,UAAU;AAAA,EAC7B,KAAK,IAAI,KAAK,QAAQ,CAAC;AAAA,EACvB,UAAU,IAAI,KAAK,aAAa,CAAC;AAAA,EACjC,QAAQ,KAAK,KAAK,SAAS;AAAA,EAC3B,aAAa,IAAI,KAAK,gBAAgB,CAAC;AACzC;AAmBO,IAAM,UAAU,CAAC,UACtB,OAAO,MAAM,QAAQ,QAAQ,OAAa,sBAAe,EAAE,MAAM,MAAM,KAAK,CAAC,CAAC,EAAE,KACvE,aAAI,CAAC,MAAM;AAAA,EAChB,MAAM,OAAO,QAAQ,GAA2B,MAAM,KAAK;AAAA,EAC3D,OAAO,SAAS,YAAY,YAAY,cAAc,MAAM,KAAK;AAAA,CAClE,CACH;;;AC5LF;AACA;AAmBO,IAAM,sBAAmC;AAEhD,IAAM,WAAW,CAAC,UAAwB,OAAO,OAAO,MAAM,KAAK,QAAQ,MAAM;AAM1E,IAAM,gBAAgB,CAAC,OAAqB,SAAyC;AAAA,EAC1F;AAAA,KACI,MAAM,iBAAiB,YAAY,CAAC,IAAI,EAAE,sBAAsB,MAAM,aAAa;AACzF;AAEO,IAAM,YAAmB,YAAG,UAAU,CAAC,MAAoB;AAAA,EAChE,IAAI,KAAK,QAAQ,WAAW;AAAA,IAC1B,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,SAAS,IAAI,oEACd,kFACA,oFACA,qFACA,cACJ,CACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,cAAc,MAAM,KAAK,GAAG;AAAA,EAGzC,OAAO,UAAU,qBAAqB,MAAM,IAAI;AAAA,EAChD,OAAO,OACL,KAAK,QACL,aACA,MACM,yBAAkB;AAAA,IACtB,KAAK,KAAK;AAAA,IACV,MAAM,KAAK;AAAA,OACP,KAAK,iBAAiB,YAAY,CAAC,IAAI,EAAE,oBAAoB,KAAK,aAAa;AAAA,EACrF,CAAC,CACH;AAAA,EACA,MAAM,UAAU,OAAO,QAAQ,IAAI;AAAA,EACnC,IAAI,YAAY,WAAW;AAAA,IACzB,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,SAAS,IAAI,2CAA2C,OAAO,KAAK,KAAK,UAC1E,sFACA,wFACA,uDACJ,CACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,CACR;AAkCM,IAAM,aAAa,CAAC,SACzB,OACE,KAAK,QACL,aACA,MACM,yBAAkB;AAAA,EACtB,MAAM,KAAK;AAAA,EACX,OAAO,OAAO,KAAK,KAAK;AAAA,KACpB,KAAK,YAAY,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;AAClD,CAAC,CACH;;;AFTK,IAAM,iBAAiB,UAAyB,mBAAmB;AAAA,EACxE,sBAAsB;AACxB,CAAC;AAuBD,IAAM,UAAU,CAAC,MAAyB,WACvC,MAAM,SAAS,aAAa,MAAM,SAAS,KAAK,UAChD,MAAM,iBAAiB,aAAa,MAAM,iBAAiB,KAAK;AAEnE,IAAM,YAAW,CAAC,UAChB,OAAO,OAAO,MAAM,KAAK,qBAAqB,MAAM;AAetD,IAAM,YAAW;AAAA,EAOf,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAE7B,MAAa,YAAG,UAAU,GAAG,QAAgC;AAAA,IAC3D,OAAO,OAAO,QAAQ,IAAI;AAAA,GAC3B;AAAA,EAUD,MAAa,YAAG,UAAU;AAAA,IACxB;AAAA,IACA;AAAA,KAIC;AAAA,IACD,IAAI,WAAW,aAAa,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IAC/C,MAAM,OAAO,OAAO,QAAQ,IAAI;AAAA,IAChC,IAAI,SAAS;AAAA,MAAW,OAAO,EAAE,QAAQ,SAAS;AAAA,IAQlD,IAAI,OAAO,UAAU,KAAK;AAAA,MAAO,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC3D,OAAO,QAAQ,MAAM,IAAI,IAAK,EAAE,QAAQ,OAAO,IAAe,EAAE,QAAQ,SAAS;AAAA,GAClF;AAAA,EAOD,WAAkB,YAAG,UAAU,GAAG,QAAgC;AAAA,IAChE,MAAM,OAAO,OAAO,QAAQ,IAAI;AAAA,IAChC,IAAI,SAAS,WAAW;AAAA,MAUtB,OAAO,OAAO,UAAU,IAAI;AAAA,IAC9B;AAAA,IACA,IAAI,CAAC,QAAQ,MAAM,IAAI,GAAG;AAAA,MACxB,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,UAAS,IAAI,8CAA8C,KAAK,UACjE,gBAAgB,KAAK,8DACrB,wFACA,6DACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAOD,QAAe,YAAG,UAAU,GAAG,QAAgC;AAAA,IAC7D,OAAO,WAAW,IAAI;AAAA,GACvB;AACH;AAEO,IAAM,yBAAyB,MAC3B,iBAAO,gBAAuB,iBAAQ,eAAe,SAAS,GAAG,SAAQ,CAAC,CAAC;;AG/MtF,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;ACkGO,IAAM,SAAS,CAAC,UAAyB,SAAS,MAAM,kBAAkB,MAAM;AAShF,IAAM,QAAQ;AAGd,IAAM,eAAe,CAAC,UAC3B,IAAI,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,CAAC,UAAmB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AAQvE,IAAM,OAAO,CAAI,UAAyB,MAAS,SAAS,UACjE,aAAa,aAAa,UAAU,aAAa;AAc5C,IAAM,OAAO,CAAC,UAA+B,UAAU,IAAI,YAAY;AAG9E,IAAM,SAAQ,CAAC,MAAc,UAC3B,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,MAAM;AAG7C,IAAM,UAAU,CAAC,UAA+B,UAAU,YAAY,YAAY,OAAO,KAAK;AAmCvF,IAAM,aAAa,CAAC,WAAkD;AAAA,KACxE,OAAM,cAAc,MAAM,UAAU;AAAA,KACpC,OAAM,YAAY,QAAQ,MAAM,QAAQ,CAAC;AAAA,KACzC,OAAM,qBAAqB,MAAM,iBAAiB;AAAA,KAClD,OAAM,cAAc,QAAQ,MAAM,UAAU,CAAC;AAAA,KAC7C,OAAM,QAAQ,QAAQ,MAAM,IAAI,CAAC;AAAA,KACjC,OAAM,eAAe,QAAQ,MAAM,WAAW,CAAC;AAAA,KAC/C,OAAM,qBAAqB,QAAQ,MAAM,iBAAiB,CAAC;AAChE;AAYO,IAAM,aAAa,CAAC,WAAkD;AAAA,KACxE,WAAW,KAAK;AAAA,KAChB,OAAM,eAAe,MAAM,WAAW;AAAA,KACtC,OAAM,UAAU,QAAQ,MAAM,MAAM,CAAC;AAAA,EACxC,cAAc;AAAA,EACd,MAAM,MAAM;AACd;;;AChPA;AACA;AA6BO,IAAM,gBAAgB,CAAC,OAAsB,cAClD,OAAO,MAAM,QAAQ,QAAQ,OAAa,wBAAiB,EAAE,MAAM,MAAM,KAAK,CAAC,CAAC,EAAE,KACzE,iBAAQ,CAAC,SACd,KAAK,KAAK,CAAC,QAAQ,IAAI,cAAc,MAAM,IAAI,IACpC,aACL,IAAI,MACF,GAAG,8EACD,oFACA,oFACA,6CACJ,CACF,IACO,aACb,CACF;AAYK,IAAM,SAAS,CACpB,OACA,MACA,SAEO,aAAI,UAAU,GAAG;AAAA,EACtB,SAAS,UAAU,EAAG,UAAU,IAAI,WAAW,GAAG;AAAA,IAChD,MAAM,OAAO,OAAO,KAAK,KAAK;AAAA,IAC9B,IAAI,KAAK,IAAI;AAAA,MAAG,OAAO;AAAA,IACvB,OAAc,eAAM,WAAW;AAAA,EACjC;AAAA,EACA,OAAO,OAAO,KAAK,KAAK;AAAA,CACzB;;;AC3DH;AACA;AAwBA,IAAM,gBAAe,CAAC,MAAe,UAAyD;AAAA,EAC5F,MAAM,MAAM;AAAA,EACZ,IAAI,OAAO,IAAI,YAAY;AAAA,IAAU;AAAA,EACrC,OAAO;AAAA,IACL,cAAc,aAAa,IAAI,mBAAmB;AAAA,IAClD,YAAY,KAAK,IAAI,aAAa;AAAA,IAClC,IAAI,IAAI,IAAI,OAAO,KAAK;AAAA,IACxB,UAAU,IAAI,IAAI,aAAa,KAAK;AAAA,IACpC,MAAM,MAAM;AAAA,IACZ,MAAM,MAAM;AAAA,IACZ,UAAU,KAAK,IAAI,WAAW;AAAA,IAC9B,YAAY,KAAK,IAAI,aAAa;AAAA,IAClC,cAAc,KAAK,IAAI,eAAe;AAAA,IACtC,mBAAmB,KAAK,IAAI,oBAAoB;AAAA,IAChD,QAAQ,IAAI,IAAI,WAAW,KAAK;AAAA,IAChC,YAAY,IAAI,IAAI,eAAe,KAAK;AAAA,IACxC,MAAM,IAAI,IAAI,SAAS,KAAK;AAAA,IAC5B,aAAa,IAAI,IAAI,gBAAgB,KAAK;AAAA,IAC1C,mBAAmB,IAAI,IAAI,sBAAsB,KAAK;AAAA,EACxD;AAAA;AAWK,IAAM,iBAAiB,CAAC,UAC7B,OACE,MAAM,QACN,QACA,OACM,6BAAsB,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,SAAS,IAAI,CAAC,CAClF,EAAE,KACO,aAAI,CAAC,SAAS,cAAa,MAAM,KAAK,CAAC,GACvC,kBAAS,oBAAoB,MAAa,iBAAQ,SAAS,CAAC,CACrE;AAGK,IAAM,mBAAmB;AACzB,IAAM,mBAAmB;AAGzB,IAAM,qBAAoB,CAAC,WAC/B;AAAA,KACI,WAAW,KAAK;AAAA,EACnB,MAAM,MAAM;AACd;AAGK,IAAM,oBAAoB,CAAC,WAC/B;AAAA,KACI,WAAW,KAAK;AAAA,EACnB,MAAM,MAAM;AAAA,EACZ,MAAM,MAAM;AACd;;;AHpBK,IAAM,kBAAkB,UAA0B,oBAAoB;AAAA,EAC3E,sBAAsB;AACxB,CAAC;AAaD,IAAM,WAAU,CAAC,YAAgC,UAC/C,KAAK,MAAM,MAAM,WAAW,MAAM,WAAW,YAAY,KACzD,KAAK,MAAM,UAAU,WAAW,UAAU,WAAW,YAAY,KACjE,KAAK,MAAM,mBAAmB,WAAW,iBAAiB,KAC1D,KAAK,KAAK,MAAM,UAAU,GAAG,WAAW,YAAY,WAAW,UAAU,KACzE,KAAK,MAAM,YAAY,WAAW,YAAY,WAAW,eAAe,EAAE,KAC1E,KAAK,KAAK,MAAM,WAAW,GAAG,WAAW,WAAW;AAE/C,IAAM,0BAA0B,MAC5B,iBACP,iBACO,iBACL,gBAAgB,SAAS,GAAG;AAAA,EAE1B,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAM,GAAG,WAAW,eAAe,IAAI;AAAA,EAMvC,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,kBAAkB,WAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IAC1E,OAAO,YAAW,kBAAkB,WAAW,IAAI,GAAG,KAAK;AAAA,IAC3D,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,eAAe,IAAI;AAAA,IACvC,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,kBAAkB,WAAW,IAAI,GAAG,IAAI;AAAA,MAC1D,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EAMD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IACxC,MAAM,OAAO,OAAO,eAAe,IAAI;AAAA,IACvC,IAAI;AAAA,IACJ,IAAI,SAAS,WAAW;AAAA,MAItB,OAAO,YAAW,kBAAkB,WAAW,IAAI,GAAG,IAAI;AAAA,MAC1D,OAAO,cAAc,MAAM,OAAO,IAAI,CAAC;AAAA,MACvC,OAAO,OAAO,OACZ,KAAK,QACL,aACA,MACM,0BAAmB,mBAAkB,IAAI,CAAC,CAClD;AAAA,IACF,EAAO;AAAA,MAQL,MAAM,OAAO,WAAW,UAAS,MAAM,MAAM,WAAW,IAAI,CAAC;AAAA,MAC7D,IAAI,SAAS,WAAW;AAAA,QACtB,OAAO,YAAW,kBAAkB,WAAW,IAAI,GAAG,KAAK;AAAA,QAC3D,OAAO,OAAO,OACZ,KAAK,QACL,aACA,MACM,uBAAgB,kBAAkB,IAAI,CAAC,CAC/C;AAAA,MACF;AAAA;AAAA,IAEF,MAAM,QAAQ,OAAO,OACnB,MACA,gBACA,CAAC,QAAQ,QAAQ,aAAa,SAAQ,KAAK,IAAI,CACjD;AAAA,IACA,IAAI,UAAU,aAAa,CAAC,SAAQ,OAAO,IAAI,GAAG;AAAA,MAChD,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,OAAO,IAAI,sEACZ,qDAAqD,QAAQ,sBAC7D,8EACA,UACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAYD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACM,0BAAmB,EAAE,MAAM,KAAK,MAAM,MAAM,KAAK,KAAK,CAAC,CAC/D;AAAA,IACA,MAAM,OAAO,OAAO,OAAO,MAAM,gBAAgB,CAAC,QAAQ,QAAQ,SAAS;AAAA,IAC3E,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,OAAO,IAAI,uEACZ,iFACA,mCACJ,CACF;AAAA,IACF;AAAA,GACD;AACH,CAAC,CACH,CACF;;AI3HF,qBAAS;AACT,uBAAS;AACT;AACA;;;AChEO,IAAM,OAAO,CAAC,SAAiB,KAAK,KAAK,EAAE,YAAY;AAyBvD,IAAM,OAAO,CAAC,UAAmB;AAAA,EACtC,MAAM,MAAM,KAAK,KAAK,EAAE,KAAK;AAAA,EAC7B,MAAM,OAAO,IAAI,SAAS,GAAG,IAAI,SAAS;AAAA,EAC1C,OAAO,IAAI,SAAS,IAAI,IAAI,IAAI,MAAM,GAAG,CAAC,KAAK,MAAM,IAAI;AAAA;AAwBpD,IAAM,UAAU,CAAC,UAAmB;AAAA,EACzC,MAAM,UAAU,KAAK,KAAK,EAAE,KAAK;AAAA,EACjC,OAAO,YAAY,MAAM,KAAK;AAAA;AAqBzB,IAAM,OAAO,CAAC,UAAsD;AAAA,EACzE,MAAM,OAAO,QAAQ,MAAM,OAAO;AAAA,EAClC,OAAO,EAAE,MAAM,KAAK,MAAM,IAAI,MAAO,SAAS,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK,EAAG;AAAA;;;ADkCtE,IAAM,uBAAuB,UAA+B,uBAAuB;AAE1F,IAAM,YAAW,YAAyD;AAAA,EAQxE,YAAY,CAAC,MAAM,UAAU;AAAA,IAC3B,MAAM,UAAU,KAAK,KAAK,OAAO;AAAA,IACjC,OAAO,YAAY,KACf,YACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS,QAAQ,KAAK,UAAU;AAAA,MAChC,WAAW,IAAI,KAAK,cAAc,CAAC;AAAA,MAEnC,MAAM,KAAK,KAAK,SAAS,MAAM,IAAI;AAAA,IACrC;AAAA;AAAA,EAEN,YAAY,MAAM;AAAA,EAClB,YAAY,CAAC,WAAW,KAAK,KAAK,KAAK,GAAG,MAAM,MAAM,KAAK;AAAA,EAO3D,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS,CAAC,YAAY,UACpB,WAAW,SAAS,KAAK,MAAM,IAAI,KAAK,WAAW,YAAY,QAAQ,MAAM,OAAO;AAAA,EAKtF,MAAM,CAAC,UAAU,4BAA4B,MAAM;AAAA,EACnD,YAAY;AACd,CAAC;AASM,IAAM,+BAA+B,MACjC,iBACP,sBACO,iBACL,qBAAqB,SAAS,GAAG;AAAA,KAC5B;AAAA,EACH,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAI3C,IAAI,WAAW,aAAa,YAAW,IAAI,KAAK,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,IAAI,GAAG;AAAA,MACrF,OAAO,EAAE,QAAQ,UAAU;AAAA,IAC7B;AAAA,IACA,OAAO,OAAO,UAAS,KAAK,EAAE,MAAM,OAAO,CAAC;AAAA,GAC7C;AACH,CAAC,CACH,CACF;;AE/IF,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;ACpEA;AACA;AAMO,IAAM,eAAe;AACrB,IAAM,eAAe;AAWrB,IAAM,gBAAgB,CAAC,aAAgC;AAAA,EAC5D,MAAM,QAAQ,YAAW;AAAA,EACzB,OAAO,UAAU,MAAM,KAAK;AAAA;AAI9B,IAAM,aAAa,CAAC,SAAsC;AAAA,EACxD,MAAM,SAAS,IAAI,KAAK,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC;AAAA,EACrD,OAAO,WAAW,KAAK,CAAC,IAAI,OAAO,MAAM,GAAG;AAAA;AAGvC,IAAM,cAAa,CAAC,WAAwD;AAAA,EACjF,SAAS,cAAc,MAAM,OAAO;AAAA,EACpC,SAAS,MAAM;AACjB;AAGO,IAAM,aAAa,CAAC,WAAqD;AAAA,EAC9E,SAAS,cAAc,MAAM,OAAO;AAAA,EACpC,SAAS,MAAM;AACjB;AAEA,IAAM,gBAAe,CAAC,MAAqC,WAAwC;AAAA,EAKjG,SAAS,KAAK,KAAK,OAAO;AAAA,EAE1B,SAAS,MAAM;AAAA,EACf,SAAS,WAAW,KAAK,OAAO;AAClC;AAMO,IAAM,WAAU,CAAC,YAA6B,UACnD,WAAW,YAAY,cAAc,MAAM,OAAO;AAuB7C,IAAM,kBAAkB,CAAC,UAC9B,iBACE,OAAO,MAAM,QAAQ,QAAQ,OAAc,uBAAe,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CACvF,EAAE,KACO,aAAI,CAAC,SACV,SAAS,aACL,aACA,KAAK,YAAY,YACf,YACA,cAAa,MAAM,KAAK,CAChC,CACF;AAUK,IAAM,YAAY,CAAC,UACxB,gBAAgB,KAAK,EAAE,KAAY,kBAAS,iBAAiB,MAAa,iBAAQ,SAAS,CAAC,CAAC;AAGxF,IAAM,kBAAiB,CAAC,SAC7B,SAAS,aAAa,YAAY;;;ADW7B,IAAM,eAAe,WAAuB,iBAAiB;AAAA,EAClE,sBAAsB;AACxB,CAAC;AAEM,IAAM,uBAAuB,MACzB,kBACP,cACO,iBACL,aAAa,SAAS,GAAG;AAAA,EAKvB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAY7B,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,OAAO,gBACL,OAAO,WAAW,YAAY,UAAU,IAAI,IAAI,gBAAgB,IAAI,CACtE;AAAA,GACD;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,YAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,cAAc,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACtE,OAAO,YAAW,cAAc,WAAW,IAAI,GAAG,KAAK;AAAA,IACvD,IAAI,WAAW;AAAA,MAAW;AAAA,IAI1B,MAAM,OAAO,OAAO,gBAAgB,IAAI;AAAA,IAGxC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,iBAAiB,KAAK,OAAO;AAAA,MACtD,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,IAAI,SAAS,WAAW;AAAA,MAEtB,OAAO,YAAW,cAAc,YAAW,IAAI,GAAG,IAAI;AAAA,MACtD,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAOxC,MAAM,SAAS,gBAAe,OAAO,UAAU,IAAI,CAAC;AAAA,IACpD,OAAO,YAAW,cAAc,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACtE,OAAO,YAAW,cAAc,WAAW,IAAI,GAAG,KAAK;AAAA,IACvD,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OACL,KAAK,QACL,aACA,MACO,0BAAkB,YAAW,IAAI,CAAC,CAC3C;AAAA,IACF,EAAO,SAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MACjC,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,uBAAe,WAAW,IAAI,CAAC,CAAC;AAAA,IACvF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,UAAU,IAAI,CAAC;AAAA,IACnD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,iBAAiB,KAAK,2DACpB,iFACA,+EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EACD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACO,0BAAkB,EAAE,SAAS,KAAK,QAAQ,CAAC,CACpD;AAAA,GACD;AACH,CAAC,CACH,CACF;;AE5KF,qBAAS;AACT;AACA;AAmDO,IAAM,oBAAoB,WAA4B,oBAAoB;AAGjF,IAAM,OAAO,CAAC,QAAgB,IAAI,MAAM,GAAG,EAAE,MAAM;AAOnD,IAAM,SAAQ,CAAC,WAA4B;AAAA,EACzC,SAAS,MAAM,WAAW;AAAA,EAC1B,cAAc,OAAO,MAAM,gBAAgB,CAAC;AAAA,EAC5C,aAAa,OAAO,MAAM,eAAe,CAAC;AAAA,EAC1C,OAAO,MAAM,SAAS;AACxB;AAEA,IAAM,YAAW,YAAmD;AAAA,EAClE,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,SAAS,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAAA,IACjE,cAAc,IAAI,KAAK,iBAAiB,CAAC;AAAA,IACzC,aAAa,IAAI,KAAK,gBAAgB,CAAC;AAAA,IACvC,KAAK,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS,MAAM;AAAA,IAC3D,OAAO,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AAAA,IAC3D,MAAM,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK,MAAM,GAAG;AAAA,EACxE;AAAA,EAMA,YAAY,MAAM;AAAA,EAClB,YAAY,CAAC,WAAW,KAAK,OAAM,KAAK,GAAG,KAAK,MAAM,IAAI;AAAA,EAS1D,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS,CAAC,YAAY,UACpB,WAAW,WAAW,MAAM,SAAS,cACrC,WAAW,aAAa,MAAM,WAAW,OACzC,WAAW,iBAAiB,MAAM,eAAe,MACjD,WAAW,kBAAkB,MAAM,gBAAgB;AAAA,EAMrD,MAAM,CAAC,UAAU,wBAAwB,MAAM;AAAA,EAC/C,YAAY;AACd,CAAC;AAiBM,IAAM,4BAA4B,MAC9B,kBAAO,mBAA0B,iBAAQ,kBAAkB,SAAS,GAAG,SAAQ,CAAC,CAAC;;ACpG5F,qBAAS;AACT;AACA;;;ACzCO,IAAM,WAAW,CAAC,UAAkD;AAAA,EACzE,MAAM,SAAS,IAAI;AAAA,EACnB,WAAW,SAAS,OAAO,UAAU,WAAW,MAAM,MAAM,GAAG,IAAK,SAAS,CAAC,GAAI;AAAA,IAChF,OAAO,MAAM,YAAY,MAAM,KAAK,EAAE,MAAM,GAAG;AAAA,IAC/C,IAAI,SAAS,aAAa,SAAS;AAAA,MAAI;AAAA,IACvC,MAAM,OAAO,OAAO,SAAS,YAAY,KAAK,EAAE;AAAA,IAChD,OAAO,IAAI,MAAM,OAAO,MAAM,IAAI,IAAI,IAAI,IAAI;AAAA,EAChD;AAAA,EACA,OAAO,CAAC,GAAG,OAAO,KAAK,CAAC,EACrB,KAAK,EACL,IAAI,CAAC,SAAS;AAAA,IACb,MAAM,OAAO,OAAO,IAAI,IAAI,KAAK;AAAA,IACjC,OAAO,SAAS,IAAI,OAAO,GAAG,QAAQ,OAAO,IAAI;AAAA,GAClD,EACA,KAAK,GAAG;AAAA;AAYN,IAAM,WAAW,CAAC,UACvB,OAAO,UAAU,YAAY,UAAU,OACnC,OAAO,QAAQ,KAAK,EACjB,IAAI,EAAE,QAAQ,aAAa,GAAG,WAAW,OAAO,OAAO,GAAG,EAC1D,KAAK,EACL,KAAK,IAAI,IACZ;AAqBC,IAAM,cAAc,CAAC,QAC1B,IAAI,QAAQ,yBAAyB,CAAC,YAAY;AAAA,EAChD,IAAI;AAAA,IACF,OAAO,mBAAmB,OAAO;AAAA,IACjC,MAAM;AAAA,IACN,OAAO;AAAA;AAAA,CAEV;AAuBI,IAAM,WAAW,CAAC,WAA4D;AAAA,EACnF,SAAS,MAAM,YAAY,aAAa,MAAM,YAAY,KAAK,YAAY,MAAM;AAAA,EACjF,SAAS,MAAM,YAAY,OAAO,MAAM;AAAA,KACpC,MAAM,SAAS,kBAAkB,EAAE,QAAQ,MAAM,WAAW,OAAO,MAAM,UAAU,IAAI,CAAC;AAC9F;AA8BA,IAAM,WAAW,CAAC,WAAgD;AAAA,EAChE,UAAU,MAAM;AAAA,EAChB,WAAW,IAAI,MAAM,SAAS;AAAA,EAC9B,MAAM,MAAM;AAAA,KACR,MAAM,SAAS,kBAAkB,EAAE,OAAO,SAAS,MAAM,KAAK,EAAE,IAAI,CAAC;AAC3E;AAEO,IAAM,QAAO,CAAC,UAAuB;AAAA,EAC1C,MAAM,SAAS,SAAS,KAAK;AAAA,EAC7B,YAAY,QAAQ,UAAU,OAAO,QAAQ,SAAS,KAAK,CAAC,GAAG;AAAA,IAC7D,IAAI,UAAU;AAAA,MAAW,OAAO,UAAU;AAAA,EAC5C;AAAA,EACA,OAAO;AAAA;AAiBF,IAAM,YAAY,CAAC,UACxB,OAAO,QAAQ,SAAS,KAAK,CAAC,EAC3B,OAAO,IAAI,WAAW,UAAU,SAAS,EACzC,IAAI,EAAE,YAAY,MAAM;;;ADtBtB,IAAM,gBAAgB,WAAwB,gBAAgB;AAErE,IAAM,YAAW,YAA2C;AAAA,EAC1D,YAAY,CAAC,MAAM,UAAU;AAAA,IAO3B,MAAM,WAAW,KAAK,KAAK,OAAO;AAAA,IAClC,IAAI,aAAa,MAAM,aAAa,MAAM;AAAA,MAAM;AAAA,IAChD,OAAO;AAAA,MACL,UAAU,KAAK,KAAK,WAAW;AAAA,MAC/B,SAAS,KAAK,KAAK,UAAU;AAAA,MAO7B,SAAS,KAAK,KAAK,YAAY,KAAK;AAAA,MACpC,QAAQ,SAAS,KAAK,SAAS;AAAA,MAC/B,OAAO,SAAS,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,SAAS;AAAA,MAC7E,OAAO,IAAI,KAAK,UAAU,CAAC;AAAA,MAC3B,WAAW,IAAI,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe,SAAS;AAAA,MACpF,MAAM,KAAK,KAAK,SAAS,MAAM,IAAI;AAAA,MACnC,QAAQ,KAAK,KAAK,WAAW,KAAK;AAAA,MAClC,MAAM,MAAM;AAAA,IACd;AAAA;AAAA,EAEF,YAAY,MAAM;AAAA,EAGlB,YAAY,CAAC,WAAW,KAAK,MAAK,KAAK,GAAG,MAAM,MAAM,KAAK;AAAA,EAa3D,UAAU,EAAE,QAAQ,8BAA8B,QAAQ,mCAAmC;AAAA,EAC7F,SAAS,CAAC,YAAY,UACpB,WAAW,cAAc,IAAI,MAAM,SAAS,KAC5C,WAAW,aAAa,MAAM,YAC9B,WAAW,YAAY,YAAY,MAAM,WAAW,EAAE,KACtD,WAAW,aAAa,MAAM,YAAY,UACzC,MAAM,SAAS,mBACb,WAAW,UAAU,SAAS,MAAM,KAAK,KACxC,WAAW,YAAY,MAAM,WAAW;AAAA,EAE9C,MAAM,CAAC,UAAU,oBAAoB,MAAM;AAAA,EAO3C,YAAY,CAAC,UAAU;AAAA,IACrB,MAAM,QAAQ,UAAU,KAAK;AAAA,IAC7B,MAAM,SAAS,MAAK,KAAK;AAAA,IACzB,OAAO,WAAW,QAAQ,KAAK;AAAA;AAEnC,CAAC;AASM,IAAM,wBAAwB,MAC1B,kBAAO,eAAsB,iBAAQ,cAAc,SAAS,GAAG,SAAQ,CAAC,CAAC;;AErNpF,qBAAS;AACT,uBAAS;AAET;AACA;;;ACvBA;AACA;AACA,kBAAS;AACT;AACA;;;ACiBA;AACA;AACA;AACA;AAEA,IAAM,SAAS;AACf,IAAM,aAAa;AAEnB,IAAM,OAAO,CAAC,KAAa,eAClB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,MAAM,OAAc,uBAAc,SAAS;AAAA,EACjD,IAAW,eAAO,GAAG;AAAA,IAAG,OAAO,IAAI,MAAM,IAAI,KAAK,UAAU;AAAA,CAC7D;AAEH,IAAM,QAAQ,CAAC,KAAa,eACnB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,MAAM,OAAc,uBAAc,SAAS;AAAA,EACjD,IAAW,eAAO,GAAG;AAAA,IAAG,OAAO;AAAA,EAC/B,QAAQ,OAAO,IAAI,MAAM,IAAY,GAAG,OAAO;AAAA,CAChD;AAOI,IAAM,iBAAiB,CAAC,eACtB,YAAG,KAAK,YAAY,UAAU,GAAG,SAAS;AAQ5C,IAAM,aAAa,CACxB,YACA,cAEO,aAAI,UAAU,GAAG;AAAA,EACtB,OAAO,eAAe,UAAU;AAAA,EAChC,MAAM,WAAW,MAAa,iBAAQ,SAAS;AAAA,EAC/C,MAAM,QAAQ,OAAO,UAAU,KAAY,eAAM,QAAQ,GAAU,qBAAY,QAAQ,CAAC;AAAA,EACxF,IAAI,UAAU,aAAa,UAAU,QAAQ,QAAQ,GAAG,KAAK;AAAA,IAAG;AAAA,EAChE,OAAO,KAAK,QAAQ,UAAU;AAAA,CAC/B;AAGI,IAAM,UAAU,CAAC,eAA+C,MAAM,QAAQ,UAAU;AAGxF,IAAM,aAAa,CAAC,eACzB,MAAM,YAAY,UAAU;AAuBvB,IAAM,iBAAiB,CAAsB,YAAkB;AAAA,EACpE,QAAQ,MAAM,SAAS;AAAA,EACvB,IAAI,SAAS,aAAa,SAAS;AAAA,IAAW,OAAO;AAAA,EACrD,MAAM,UAA6B,CAAC,UAC3B,aAAI,UAAU,GAAG;AAAA,IACtB,IAAI,MAAM,WAAW,WAAW;AAAA,MAC9B,OAAO,WAAW,MAAM,YAAY,KAAK,KAAK,OAAO,QAAQ,UAAU,CAAC,CAAC;AAAA,IAC3E;AAAA,IACA,OAAO,OAAO,KAAK,KAAK;AAAA,GACzB;AAAA,EAEH,OAAO,KAAK,SAAS,MAAM,QAAQ;AAAA;;;ACxGrC,kBAAS;AACT;AACA;AACA;;;ACIA;AACA;AACA;AAEA,IAAM,SAAS,CAAC,UAA4B,UAAU,aAAa,UAAU;AAE7E,IAAM,gBAAgB,CAAC,UAAqD;AAAA,EAC1E,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO;AAAA,EAChF,MAAM,QAAiB,OAAO,eAAe,KAAK;AAAA,EAClD,OAAO,UAAU,OAAO,aAAa,UAAU;AAAA;AAO1C,IAAM,UAAU,CAAC,UAAmB,aAA+B;AAAA,EACxE,IAAI,OAAO,QAAQ;AAAA,IAAG,OAAO;AAAA,EAC7B,IAAI,OAAO,QAAQ;AAAA,IAAG,OAAO;AAAA,EAC7B,IAAI,MAAM,QAAQ,QAAQ,GAAG;AAAA,IAC3B,IAAI,CAAC,MAAM,QAAQ,QAAQ;AAAA,MAAG,OAAO;AAAA,IACrC,OAAO,SAAS,MAAM,CAAC,MAAM,UAAU,QAAQ,MAAM,SAAS,MAAM,CAAC;AAAA,EACvE;AAAA,EACA,IAAI,cAAc,QAAQ,GAAG;AAAA,IAC3B,IAAI,CAAC,cAAc,QAAQ;AAAA,MAAG,OAAO;AAAA,IACrC,OAAO,OAAO,QAAQ,QAAQ,EAAE,MAAM,EAAE,KAAK,UAAU,QAAQ,MAAM,SAAS,IAAI,CAAC;AAAA,EACrF;AAAA,EACA,OAAO;AAAA;AASF,IAAM,mBAAmB,CAAC,KAAa,UACrC,aAAW,uBAAc,KAAK,GAAG,CAAC,UAAU;AAAA,EACjD,MAAM,WAAkB,eAAO,KAAK,IAAI,MAAM,MAAM,UAAU,OAAO;AAAA,EACrE,OAAO,aAAa,aAAa,QAAQ,SAAS,OAAO,KAAK;AAAA,CAC/D;;;ADtCH,IAAM,UAAiB,aAAI,UAAU,GAAG;AAAA,EACtC,MAAM,QAAQ,OAAc,uBAAc,MAAK;AAAA,EAC/C,MAAM,QAAQ,OAAc,uBAAc,KAAK;AAAA,EAC/C,IAAW,eAAO,KAAK,KAAY,eAAO,KAAK;AAAA,IAAG;AAAA,EAClD,MAAM,QAAsB,OAAO,MAAM;AAAA,EACzC,MAAM,QAAe,EAAE,OAAO,MAAM,MAAM,MAAM,OAAO,MAAM,MAAM,MAAM;AAAA,EACzE,OAAO,EAAE,WAAW,MAAM,MAAM,WAAW,OAAO,MAAM;AAAA,CACzD;AAED,IAAM,QAAQ,CAAC,OAAqB,OAAc,QAChD,MAAM,IAAI,KAAK,OAAO,IAAI,CAAC,EAAE,KAAY,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CAAC;AAczE,IAAM,eAAe,CAAC,KAAc,eAA+C;AAAA,EACjF,IAAI,KAAK;AAAA,EACT,OAAO,OAAO,OAAO,YAAY,OAAO,QAAQ,CAAC,cAAc,EAAW,GAAG;AAAA,IAC3E,MAAM,aAAa;AAAA,IACnB,IAAI,WAAW,eAAe;AAAA,MAAY,OAAO;AAAA,IACjD,KAAK,WAAW;AAAA,EAClB;AAAA,EACA;AAAA;AAIK,IAAM,qBAAqB,CAChC,KACA,eAEO,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,QAAQ,OAAO;AAAA,EACrB,IAAI,UAAU;AAAA,IAAW;AAAA,EACzB,WAAW,MAAM,CAAC,KAAK,GAAI,MAAM,UAAU,MAAM,cAAc,CAAC,CAAE,GAAG;AAAA,IACnE,MAAM,aAAa,aAAa,OAAO,MAAM,MAAM,OAAO,MAAM,OAAO,EAAE,GAAG,UAAU;AAAA,IACtF,IAAI,eAAe;AAAA,MAAW,OAAO;AAAA,EACvC;AAAA,EACA;AAAA,CACD;AAcI,IAAM,mBAAmB,CAAC,KAAa,eACrC,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,aAAa,OAAO,mBAAmB,KAAK,UAAU;AAAA,EAC5D,IAAI,eAAe;AAAA,IAAW,OAAO;AAAA,EACrC,QAAQ,OAAO,iBAAiB,KAAK,WAAW,KAAK,KAAK,UAAU;AAAA,CACrE;AAQI,IAAM,WAAW,CAAC,KAAa,eAC7B,aACL,mBAAmB,KAAK,UAAU,GAClC,CAAC,eAAe,YAAY,WAAW,UACzC;AAaK,IAAM,sBAAsB,CAAC,KAAa,eACxC,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,QAAQ,OAAO;AAAA,EACrB,IAAI,UAAU;AAAA,IAAW;AAAA,EACzB,MAAM,MAAM,OAAO,MAAM,MAAM,OAAO,MAAM,OAAO,GAAG;AAAA,EACtD,MAAM,OAAO;AAAA,EACb,IAAI,MAAM,WAAW,cAAc,KAAK,eAAe,cAAc,KAAK,SAAS,WAAW;AAAA,IAC5F;AAAA,EACF;AAAA,EACA,OAAO,MAAM,MAAM,OAAO,KAAK,MAAM,OAAO,IAAI,CAAC,EAAE,KAAY,eAAM;AAAA,CACtE;;;AFxFI,IAAM,eAAe,CAAC,QACpB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,QAAQ,OAAc,uBAAc,MAAK;AAAA,EAC/C,MAAM,SAAgB,eAAO,KAAK,IAAI,MAAM,MAAM,UAAU,MAAM,QAAQ;AAAA,EAC1E,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EACjC,MAAM,SAAS,OAAc,uBAAc,WAAW;AAAA,EACtD,IAAW,eAAO,MAAM;AAAA,IAAG,OAAO,OAAO;AAAA,EACzC,MAAM,UAAU,OAAc,uBAAc,cAAc;AAAA,EAC1D,OAAc,eAAO,OAAO,IAAI,QAAQ,MAAM,QAAQ;AAAA,CACvD;AAqBH,IAAM,YAAY,CAAC,UACV,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,OAAO,SAAS,MAAM,KAAK,MAAM,UAAU;AAAA,IAAG,OAAO;AAAA,EACzD,OAAO,OAAO,WAAW,MAAM,UAAU;AAAA,CAC1C;AAGI,IAAM,gBAAgB,CAAC,UACrB,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,EAAE,OAAO,aAAa,MAAM,GAAG;AAAA,IAAI,OAAO;AAAA,EAC9C,OAAO,OAAO,UAAU,KAAK;AAAA,CAC9B;AAuBI,IAAM,iBAAiB,CAAC,OAAc,SACpC,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,MAAM,WAAW;AAAA,IAAW;AAAA,EAChC,IAAI,OAAO,QAAQ,MAAM,UAAU;AAAA,IAAG;AAAA,EACtC,MAAM,MAAM,OAAO,UAAU,KAAK;AAAA,EAClC,IAAI,QAAQ,OAAO,aAAa,MAAM,GAAG;AAAA,IAAI;AAAA,EAC7C,OAAO,oBAAoB,MAAM,KAAK,MAAM,UAAU;AAAA,EACtD,MAAM,SAAS,MACX,mGACA;AAAA,EACJ,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,yFACD,0FACA,+BAA+B,QACnC,CACF;AAAA,CACD;AAGI,IAAM,WACX,CAAC,UACD,CAAC,SACC,eAAe,OAAO,IAAI;;;AIjG9B,oBAAS;AACT;AAcO,IAAM,aAAa,CACxB,KACA,aAEO,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WAAW,OAAO,iBAAiB,IAAI,KAAK,IAAI,UAAU;AAAA,EAChE,IAAI,aAAa;AAAA,IAAU,OAAO;AAAA,EAClC,IAAI,aAAa,WAAW;AAAA,IAC1B,OAAc,oBACZ,GAAG,IAAI,mFACL,iFACJ;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,MAAM,WAAW,CAAC,WACT,YACE,oBACL,GAAG,IAAI,+EACL,IAAI,kBAAkB,QAAQ,OAAO,UAAU,OAAO,MAAM,kCAChE,GACA,KACF;AAAA,EACF,OAAO,OAAO,SAAQ,KAAY,eAAM,QAAQ,GAAU,qBAAY,QAAQ,CAAC;AAAA,CAChF;AAOI,IAAM,YAAY,CACvB,KACA,OACA,aAEO,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,UAAU,aAAa,IAAI,WAAW;AAAA,IAAW,OAAO;AAAA,EAC5D,QAAQ,OAAO,WAAW,KAAK,QAAO,KAAK,QAAQ,SAAQ,KAAK;AAAA,CACjE;;;AC3DI,IAAM,QAAQ,CAAC,OAAe,eACnC,MACG,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,IAAI,CAAC,SAA2B;AAAA,EAC/B,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,EAC3B,IAAI,OAAO;AAAA,IAAI,OAAO,CAAC,cAAc,MAAM,eAAe,YAAY,KAAK,IAAI;AAAA,EAC/E,OAAO,CAAC,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK,CAAC;AAAA,CAC5D;AAOL,IAAM,WAAuE;AAAA,EAC3E,KAAK,EAAE,cAAc,IAAI;AAAA,EACzB,UAAU,EAAE,cAAc,KAAK,MAAM,KAAK,QAAQ,KAAK,OAAO,KAAK,SAAS,IAAI;AAAA,EAChF,KAAK,EAAE,UAAU,KAAK,gBAAgB,KAAK,WAAW,KAAK,MAAM,OAAO;AAAA,EACxE,QAAQ,EAAE,QAAQ,KAAK,WAAW,KAAK,OAAO,KAAK,WAAW,KAAK,IAAI,KAAK,QAAQ,IAAI;AAC1F;AAGA,IAAM,QAAQ,IAAI,IAAI;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,IAAM,OAAO,IAAI,IAAI,CAAC,SAAS,cAAc,CAAC;AAG9C,IAAM,iBAAiB,CAAC,KAAa,UAAkB;AAAA,EACrD,IAAI,MAAM,IAAI,GAAG;AAAA,IAAG,OAAO,eAAe,KAAK;AAAA,EAC/C,IAAI,KAAK,IAAI,GAAG;AAAA,IACd,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG;AAAA,EAClF,IAAI,QAAQ;AAAA,IAAU,OAAO,MAAM,YAAY;AAAA,EAC/C,OAAO;AAAA;AAIF,IAAM,YAAY,CACvB,OACA,QACA,eACwB;AAAA,EACxB,MAAM,WAAW,SAAS,WAAW,CAAC;AAAA,EACtC,MAAM,MAAM,IAAI;AAAA,EAChB,YAAY,KAAK,QAAQ,MAAM,OAAO,UAAU,GAAG;AAAA,IACjD,MAAM,YAAY,eAAe,KAAK,GAAG;AAAA,IACzC,IAAI,SAAS,SAAS;AAAA,MAAW,IAAI,IAAI,KAAK,SAAS;AAAA,EACzD;AAAA,EACA,OAAO;AAAA;AAGF,IAAM,UAAU,CAAC,MAA2B,UACjD,KAAK,SAAS,MAAM,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,WAAW,MAAM,IAAI,GAAG,MAAM,KAAK;AAGjF,IAAM,aAAa,CAAC,UACzB,CAAC,GAAG,KAAG,EACJ,IAAI,EAAE,KAAK,WAAW,GAAG,OAAO,OAAO,EACvC,KAAK,EACL,KAAK,GAAG;AAGN,IAAM,WAAW,CAAC,OAA0B,OAA0B,CAAC,MAC5E,CAAC,GAAG,KAAK,OAAO,CAAC,QAAQ,MAAI,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,MAAI,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EACxF,IAAI,CAAC,QAAQ,GAAG,OAAO,MAAI,IAAI,GAAG,KAAK,IAAI,EAC3C,KAAK,GAAG;AAMN,IAAM,UAAU,CAAC,UAAkB,SAAiB;AAAA,EACzD,MAAM,OAAO,UAAU,UAAU,KAAK;AAAA,EACtC,MAAM,OAAO,UAAU,MAAM,KAAK;AAAA,EAClC,IAAI,CAAC,KAAK,IAAI,QAAQ;AAAA,IAAG,KAAK,OAAO,QAAQ;AAAA,EAC7C,OAAO,EAAE,MAAM,KAAK;AAAA;AAQf,IAAM,WAAW,CAAC,UAAkB,SAA6B;AAAA,EACtE,MAAM,OAAO,IAAI,IAAI,MAAM,QAAQ,CAAC;AAAA,EACpC,MAAM,MAAM,SAAS,YAAY,YAAY,IAAI,IAAI,MAAM,IAAI,CAAC,EAAE,IAAI,QAAQ;AAAA,EAC9E,IAAI,CAAC,KAAK,IAAI,QAAQ,KAAK,QAAQ;AAAA,IAAW,KAAK,IAAI,UAAU,GAAG;AAAA,EACpE,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC;AAAA;AAIzB,IAAM,SAAS,CAAC,UACrB,CAAC,GAAG,IAAI,IAAI,MAAM,MAAM,SAAS,EAAE,OAAO,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,EAC5D,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC,EAC9B,KAAK,EACL,KAAK,GAAG;AAGN,IAAM,cAAc,CAAC,UAC1B,MACG,MAAM,SAAS,EACf,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,GAAG;AAMN,IAAM,kBAAkB,CAAC,UAAkB,MAAM,QAAQ,QAAQ,EAAE;AAGnE,IAAM,eAA8E;AAAA,EACzF,MAAM;AAAA,EACN,OAAO;AAAA,EACP,SAAS;AAAA,EACT,OAAO;AAAA,EACP,UAAU;AAAA,EACV,UAAU;AAAA,EACV,aAAa;AAAA,EACb,UAAU;AAAA,EACV,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,SAAS;AAAA,EACT,MAAM;AAAA,EACN,MAAM;AAAA,EACN,UAAU;AAAA,EACV,KAAK;AACP;AAGO,IAAM,YAAiC,IAAI,IAAI;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,IAAM,kBAAoD;AAAA,EAC/D,MAAM;AAAA,EACN,OAAO;AAAA,EACP,SAAS;AAAA,EACT,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,KAAK;AACP;AAGO,IAAM,aAAa,CAAC,KAAa,UAA0B;AAAA,EAChE,MAAM,QAAO,aAAa;AAAA,EAC1B,IAAI,UAAS;AAAA,IAAU,OAAO,OAAO,OAAO,KAAK,CAAC;AAAA,EAClD,IAAI,UAAS;AAAA,IAAQ,OAAO,eAAe,KAAK;AAAA,EAChD,IAAI,QAAQ;AAAA,IAAe,OAAO,gBAAgB,KAAK;AAAA,EACvD,IAAI,QAAQ;AAAA,IAAY,OAAO,WAAW,UAAU,OAAO,UAAU,CAAC;AAAA,EACtE,IAAI,QAAQ,gBAAgB,QAAQ;AAAA,IAAgB,OAAO,YAAY,KAAK;AAAA,EAC5E,IAAI,QAAQ;AAAA,IAAW,OAAO,eAAe,OAAO,OAAO;AAAA,EAC3D,IAAI,QAAQ;AAAA,IAAQ,OAAO,OAAO,KAAK;AAAA,EACvC,OAAO;AAAA;;;ACrFF,IAAM,WAAgC,IAAI,IAAI;AAAA,EACnD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,UAAU;AAAA,EACrB,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AACP;AAKO,IAAM,aAAa,CAAC,QAA8D;AAAA,EACvF,MAAM,QAAQ,6BAA6B,KAAK,GAAG;AAAA,EACnD,IAAI,UAAU;AAAA,IAAM;AAAA,EACpB,MAAM,SAAS,MAAM;AAAA,EACrB,MAAM,QAAQ,OAAO,MAAM,EAAE;AAAA,EAC7B,OAAO,QAAQ,QAAQ,UAAU,CAAC,QAAQ,KAAK,IAAI;AAAA;AAI9C,IAAM,aAAkC,IAAI,IAAI;AAAA,EACrD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,IAAM,gBAAgB,CAAC,OAAiB,QAC5C,MAA6C;AAGzC,IAAM,eAAe,CAAC,UAC3B,OAAO,KAAK,KAAK,EACd,OAAO,CAAC,QAAQ,CAAC,WAAW,IAAI,GAAG,KAAK,cAAc,OAAO,GAAG,MAAM,SAAS,EAC/E,KAAK;AAGH,IAAM,YAAY,CAAC,UACxB,UAAU,OAAO,MAAM,UAAU,QAAQ,MAAM,OAAO,KAAK;AAStD,IAAM,eAAe,CAAC,QAC3B,aAAa,SAAS,aACtB,QAAQ,kBACR,QAAQ,YACR,WAAW,GAAG,MAAM;AAUf,IAAM,eAAe,CAAC,SAA0D;AAAA,EACrF,MAAM,MAA8B,CAAC;AAAA,EACrC,YAAY,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;AAAA,IAC/C,IAAI,CAAC,aAAa,GAAG,KAAK,SAAS,IAAI,GAAG;AAAA,MAAG;AAAA,IAC7C,IAAI,UAAU,QAAQ,UAAU,aAAa,OAAO,UAAU;AAAA,MAAU;AAAA,IACxE,IAAI,OAAO,UAAU,KAAK;AAAA,EAC5B;AAAA,EACA,OAAO;AAAA;AAIF,IAAM,YAAY,CAAC,SAA4C;AAAA,EACpE,MAAM,MAAM,KAAK;AAAA,EACjB,IAAI,CAAC,MAAM,QAAQ,GAAG;AAAA,IAAG,OAAO,CAAC;AAAA,EACjC,OAAO,IACJ,IAAI,CAAC,SAAmB,MAAM,QAAQ,IAAI,IAAI,OAAO,KAAK,EAAE,IAAI,EAAG,EACnE,OAAO,CAAC,QAAQ,QAAQ,EAAE;AAAA;;;AC9L/B,IAAM,WAAW;AAEjB,IAAM,QAA0C;AAAA,EAC9C,GAAG,QAAQ;AAAA,EACX,GAAG;AAAA,EACH,GAAG,QAAQ;AAAA,EACX,GAAG,QAAQ;AACb;AAGO,IAAM,YAAY,CAAC,UAAqC;AAAA,EAC7D,MAAM,QAAQ,6BAA6B,KAAK,MAAK,KAAK,CAAC;AAAA,EAC3D,IAAI,UAAU;AAAA,IAAM;AAAA,EACpB,OAAO,KAAK,MAAM,OAAO,MAAM,EAAE,KAAK,MAAM,OAAO,YAAY,IAAK,MAAM,MAAM,OAAO,EAAG;AAAA;AAkBrF,IAAM,cAAc,CAAC,UAAyB;AAAA,EACnD,OAAO,SAAS,MAAM,OAAM,QAAQ;AAAA,EACpC,MAAM,OAAO,QAAQ,OAAO,WAAW,MAAM,KAAK;AAAA,EAClD,MAAM,UAAU,UAAU,OAAM,UAAU,QAAQ;AAAA,EAClD,QAAQ,OAAO,QAAQ;AAAA,EACvB,MAAM,WAAW,QAAQ,IAAI,MAAM;AAAA,EACnC,QAAQ,OAAO,MAAM;AAAA,EACrB,MAAM,QAAQ,SAAS,KAAK,IAAI;AAAA,EAChC,IAAI,UAAU,MAAM;AAAA,IAClB,MAAM,MAAM,GAAG,MAAM,MAAM;AAAA,IAC3B,OAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA,MAAM,UAAU,GAAG;AAAA,MACnB,UAAU;AAAA,MACV,QAAQ,MAAM,MAAM;AAAA,MACpB,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EACA,MAAM,OAAO,aAAa,YAAY,YAAY,UAAU,QAAQ;AAAA,EACpE,IAAI,KAAK,WAAW,GAAG,GAAG;AAAA,IACxB,MAAM,QAAO,KAAK,WAAW,OAAO,IAAI,WAAW;AAAA,IACnD,OAAO,EAAE,aAAM,SAAS,MAAM,UAAU,QAAQ,MAAM,SAAS,GAAG;AAAA,EACpE;AAAA,EACA,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,EAC3B,OAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,KAAK,OAAO,KAAK,MAAM,GAAG,EAAE;AAAA,IAC3C,SAAS,OAAO,KAAK,KAAK,KAAK,MAAM,KAAK,CAAC;AAAA,EAC7C;AAAA;AAaK,IAAM,aAAa,CAAC,WAAmB,OAAO,SAAS,UAAU,OAAO,SAAS;AAOxF,IAAM,UAAU,CAAC,MAAc,aAAqB;AAAA,EAClD,MAAM,QAAQ,CAAC,GAAG,KAAK,UAAU,KAAK,SAAS;AAAA,EAC/C,YAAY,KAAK,UAAU,SAAS;AAAA,IAAS,MAAM,KAAK,GAAG,OAAO,OAAO;AAAA,EACzE,IAAI,KAAK,aAAa;AAAA,IAAW,MAAM,KAAK,QAAQ,KAAK,UAAU;AAAA,EACnE,OAAO,MAAM,KAAK,GAAG;AAAA;AAGhB,IAAM,cAAc,CAAC,KAAa,UAAkB,SAAgC;AAAA,EACzF,MAAM,OAAO,YAAY,QAAQ;AAAA,EACjC,MAAM,OAAO,YAAY,IAAI;AAAA,EAC7B,IAAI,WAAW,IAAI,KAAK,WAAW,IAAI,GAAG;AAAA,IACxC,MAAM,QACJ,KAAK,SAAS,KAAK,QAAQ,KAAK,WAAW,KAAK,UAAU,QAAQ,KAAK,SAAS,KAAK,OAAO;AAAA,IAC9F,OAAO,QAAO,CAAC,IAAI,EAAE,UAAU,KAAK;AAAA,EACtC;AAAA,EACA,IAAI,KAAK,WAAW,KAAK,QAAQ;AAAA,IAC/B,OAAO;AAAA,MACL,QACE,GAAG,yBAAyB,KAAK,uBAAuB,KAAK,0BAC7D;AAAA,IACJ;AAAA,EACF;AAAA,EACA,IAAI,KAAK,SAAS,YAAY,KAAK,YAAY,KAAK,SAAS;AAAA,IAC3D,OAAO;AAAA,MACL,QACE,GAAG,wBAAwB,KAAK,2BAA2B,KAAK,+BAChE;AAAA,IACJ;AAAA,EACF;AAAA,EACA,IAAI;AAAA,EACJ,IAAI,KAAK,SAAS,aAAa,KAAK,SAAS,aAAa,KAAK,SAAS,KAAK,MAAM;AAAA,IACjF,IAAI,KAAK,OAAO,KAAK,MAAM;AAAA,MACzB,OAAO;AAAA,QACL,QACE,GAAG,iBAAiB,KAAK,YAAY,kCACrC,GAAG,KAAK,YAAY,uEACpB;AAAA,MACJ;AAAA,IACF;AAAA,IACA,SAAS,KAAK;AAAA,EAChB;AAAA,EACA,MAAM,MAAM,QAAQ,KAAK,SAAS,KAAK,OAAO,IAAI,YAAY,QAAQ,MAAM,IAAI;AAAA,EAChF,OAAO;AAAA,OACD,QAAQ,YAAY,CAAC,IAAI,EAAE,IAAI;AAAA,OAC/B,WAAW,YAAY,CAAC,IAAI,EAAE,OAAO;AAAA,EAC3C;AAAA;;;ACnGF,IAAM,QAAO,CAAC,UACZ,UAAU,aAAa,UAAU,OAAO,YAAY,UAAU,KAAK;AAG9D,IAAM,WAAW,CAAC,MAAc,KAAa,OAAe,QACjE,GAAG,QAAQ,kFACX,aAAa,OAAO,IAAI,KAAK,UAAU,KAAK,YAAY,QAAQ,KAAK,QAAQ,gBAC7E;AAGF,IAAM,cAAc,CAAC,UACnB,IAAI,IACF,MAAM,KAAK,EAAE,IAAI,EAAE,KAAK,WAAW,CAAC,KAAK,QAAQ,UAAU,QAAQ,eAAe,KAAK,CAAC,CAAC,CAC3F;AASK,IAAM,mBAAmB,CAC9B,MACA,MACA,iBACY;AAAA,EACZ,IAAI,CAAC;AAAA,IAAc,OAAO;AAAA,EAC1B,MAAM,OAAO,YAAY,IAAI;AAAA,EAC7B,IAAI,SAAS;AAAA,IAAW,OAAO,EAAE,KAAK,SAAS,KAAM,KAAK,SAAS,KAAK,KAAK,IAAI,SAAS;AAAA,EAC1F,MAAM,OAAO,YAAY,IAAI;AAAA,EAC7B,MAAM,OAAO,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC;AAAA,EACrD,OAAO,CAAC,GAAG,IAAI,EAAE,KACf,CAAC,QAAQ,QAAQ,cAAc,KAAK,IAAI,GAAG,KAAK,SAAS,KAAK,IAAI,GAAG,KAAK,GAC5E;AAAA;AAGK,IAAM,aAAa,CAAC,iBACzB,eAAe,kCAAkC;AAE5C,IAAM,QAAQ,CAAC,OAAiB,SAA6C;AAAA,EAClF,MAAM,MAA8B,CAAC;AAAA,EACrC,MAAM,QAAkB,CAAC;AAAA,EACzB,MAAM,SAA2C,CAAC;AAAA,EAClD,MAAM,SAAmB,CAAC;AAAA,EAC1B,MAAM,QAAQ,IAAI;AAAA,EAClB,MAAM,eAAe,KAAK,KAAK,iBAAiB,KAAK;AAAA,EAErD,WAAW,OAAO,aAAa,KAAK,GAAG;AAAA,IACrC,MAAM,OAAO,UAAU,cAAc,OAAO,GAAG,CAAC;AAAA,IAChD,MAAM,OAAO,MAAK,KAAK,IAAI;AAAA,IAC3B,MAAM,UAAU,WAAW,GAAG;AAAA,IAE9B,IAAI,QAAQ,gBAAgB;AAAA,MAC1B,IAAI,eAAe,IAAI,MAAM,eAAe,QAAQ,GAAG,GAAG;AAAA,QACxD,MAAM,IAAI,GAAG;AAAA,QACb,OAAO,KACL,sBAAsB,QAAQ,iBAAiB,6CAC7C,uFACJ;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,IAEA,IAAI,QAAQ,YAAY,UAAU,OAAO,MAAM;AAAA,MAC7C,IAAI,SAAS,IAAI;AAAA,QACf,IAAI,SAAS;AAAA,UAAW;AAAA,QACxB,MAAM,IAAI,GAAG;AAAA,QACb,OAAO,KACL,GAAG,4EACL;AAAA,MACF,EAAO,SAAI,SAAS,WAAW;AAAA,QAC7B,MAAM,IAAI,GAAG;AAAA,QACb,IAAI,WAAW,YAAY,IAAI,CAAC,GAAG;AAAA,UACjC,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,+BAA+B,CAAC;AAAA,QAC9E,EAAO;AAAA,cAAI,OAAO;AAAA,MACpB,EAAO;AAAA,QACL,MAAM,UAAU,YAAY,KAAK,MAAM,IAAI;AAAA,QAC3C,IAAI,QAAQ,WAAW;AAAA,UAAW,OAAO,KAAK,QAAQ,MAAM;AAAA,QAC5D,IAAI,QAAQ,aAAa,MAAM;AAAA,UAC7B,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,+BAA+B,CAAC;AAAA,QAC9E;AAAA,QACA,IAAI,QAAQ,QAAQ;AAAA,UAAW,IAAI,OAAO,QAAQ;AAAA,QAClD,IAAI,QAAQ,WAAW;AAAA,UAAW,OAAO,KAAK,EAAE,MAAM,KAAK,MAAM,QAAQ,OAAO,CAAC;AAAA,QACjF,IAAI,OAAO,KAAK,OAAO,EAAE,SAAS;AAAA,UAAG,MAAM,IAAI,GAAG;AAAA;AAAA,MAEpD;AAAA,IACF;AAAA,IAEA,IAAI,UAAU,OAAO,OAAO;AAAA,MAC1B,MAAM,QAAO,SAAS,KAAK,SAAS,YAAY,SAAS,aAAa,QAAQ,MAAM,IAAI;AAAA,MACxF,IAAI,CAAC,OAAM;AAAA,QACT,MAAM,IAAI,GAAG;AAAA,QACb,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,qBAAqB,CAAC;AAAA,MACpE;AAAA,MACA;AAAA,IACF;AAAA,IAEA,IAAI,UAAU,OAAO,OAAO;AAAA,MAC1B,IAAI,SAAS,IAAI;AAAA,QACf,IAAI,SAAS,WAAW;AAAA,UACtB,MAAM,IAAI,GAAG;AAAA,UACb,MAAM,KAAK,GAAG;AAAA,QAChB;AAAA,MACF,EAAO,SAAI,SAAS,WAAW;AAAA,QAC7B,MAAM,IAAI,GAAG;AAAA,QACb,IAAI,OAAO;AAAA,MACb,EAAO;AAAA,QACL,MAAM,OAAO,QAAQ,MAAM,IAAI;AAAA,QAC/B,IAAI,CAAC,QAAQ,KAAK,MAAM,KAAK,IAAI,GAAG;AAAA,UAClC,MAAM,IAAI,GAAG;AAAA,UACb,IAAI,OAAO,SAAS,MAAM,IAAI;AAAA,QAChC;AAAA;AAAA,MAEF;AAAA,IACF;AAAA,IAEA,IAAI,CAAC,aAAa,GAAG,GAAG;AAAA,MACtB,MAAM,IAAI,GAAG;AAAA,MACb,OAAO,KAAK,GAAG,8CAA8C;AAAA,MAC7D;AAAA,IACF;AAAA,IAEA,MAAM,SAAS,SAAS,KAAK,KAAK,WAAW,KAAK,IAAI;AAAA,IACtD,MAAM,UAAU,QAAQ,gBAAgB;AAAA,IACxC,MAAM,MAAM,YAAY,YAAY,KAAK,WAAW,KAAK,OAAO;AAAA,IAChE,IAAI,WAAW;AAAA,MAAK;AAAA,IACpB,MAAM,IAAI,GAAG;AAAA,IAEb,MAAM,OAAO,QAAQ,aAAa,SAAS;AAAA,IAC3C,IAAI,QAAQ,cAAc,iBAAiB,QAAQ,IAAI,QAAQ,WAAW,YAAY,GAAG;AAAA,MACvF,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,MAAM,WAAW,YAAY,CAAC,CAAC;AAAA,IACvE,EAAO,SAAI,SAAS,MAAM,UAAU,IAAI,GAAG,GAAG;AAAA,MAC5C,MAAM,KAAK,GAAG;AAAA,IAChB,EAAO,SAAI,SAAS,IAAI;AAAA,MACtB,OAAO,KAAK,GAAG,2DAA2D;AAAA,IAC5E,EAAO;AAAA,UAAI,OAAO;AAAA,EACpB;AAAA,EACA,OAAO,EAAE,OAAO,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,GAAG,KAAK,QAAQ,OAAO;AAAA;AAIhE,IAAM,UAAU,CAAC,MAAc,SAC7B,WAAW,UAAU,MAAM,OAAO,MAAM,CAAC,MAAM,WAAW,UAAU,MAAM,OAAO,MAAM,CAAC;;;ACtK1F,IAAM,iBAAiB,CAAC,KAAa,UACnC,GAAG,QAAQ,kFACX,gGACA;AAGK,IAAM,iBAAiB,CAAC,UAA8B;AAAA,EAC3D,MAAM,SAAmB,CAAC;AAAA,EAC1B,IAAI,MAAM,eAAe,aAAa,MAAM,eAAe,IAAI;AAAA,IAC7D,OAAO,KACL,MAAM,OAAO,MAAM,IAAI,uBAAuB,MAAM,sCAClD,kFACJ;AAAA,EACF;AAAA,EACA,MAAM,eAAe,MAAM,iBAAiB,YAAY,OAAO,KAAK,MAAM,YAAY;AAAA,EACtF,WAAW,OAAO,aAAa,KAAK,GAAG;AAAA,IACrC,MAAM,QAAQ,UAAU,cAAc,OAAO,GAAG,CAAC;AAAA,IACjD,MAAM,SAAS,WAAW,GAAG,IAAI;AAAA,IAGjC,IAAI,CAAC,aAAa,GAAG;AAAA,MAAG,OAAO,KAAK,GAAG,8CAA8C;AAAA,IACrF,IAAI,UAAU;AAAA,MAAI;AAAA,IAClB,IAAI,WAAW;AAAA,MAAO,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,OAAO,qBAAqB,CAAC;AAAA,IACzF,MAAM,SAAS,WAAW,QAAQ,QAAQ,WAAW,YAAY,KAAK,IAAI;AAAA,IAC1E,IAAI,WAAW,aAAa,WAAW,MAAM,GAAG;AAAA,MAC9C,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,OAAO,+BAA+B,CAAC;AAAA,IAC/E;AAAA,IACA,IAAI,QAAQ,SAAS;AAAA,MAAU,OAAO,KAAK,eAAe,KAAK,KAAK,CAAC;AAAA,IACrE,IAAI,QAAQ,cAAc,iBAAiB,IAAI,OAAO,YAAY,GAAG;AAAA,MACnE,OAAO,KAAK,SAAS,MAAM,MAAM,KAAK,OAAO,WAAW,YAAY,CAAC,CAAC;AAAA,IACxE;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAIF,IAAM,cAAa,CAAC,UAA4C;AAAA,EACrE,MAAM,OAA+B,EAAE,MAAM,OAAO,MAAM,IAAI,EAAE;AAAA,EAChE,IAAI,MAAM,eAAe;AAAA,IAAW,KAAK,gBAAgB,MAAM;AAAA,EAC/D,IAAI,MAAM,UAAU;AAAA,IAAW,KAAK,WAAW,UAAU,MAAM,KAAK;AAAA,EACpE,WAAW,OAAO,aAAa,KAAK,GAAG;AAAA,IACrC,MAAM,QAAQ,UAAU,cAAc,OAAO,GAAG,CAAC;AAAA,IACjD,IAAI,UAAU;AAAA,MAAI;AAAA,IAClB,KAAK,OAAO,QAAQ,aAAa,WAAW,KAAK,KAAK,IAAI;AAAA,EAC5D;AAAA,EACA,OAAO;AAAA;;;ACnET,IAAM,QAAQ,CAAC,MAAe,QAAyB;AAAA,EACrD,MAAM,QAAkB,KAAiC;AAAA,EACzD,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,QAAQ;AAAA;AAcnE,IAAM,mBAAmB,CAC9B,MACA,MACA,WACa;AAAA,EACb,MAAM,MAAM,QAAQ,QAAQ,KAAK;AAAA,EACjC,MAAM,OAAO,MAAM,MAAM,MAAM;AAAA,EAC/B,MAAM,WAAW,MAAM,MAAM,YAAY;AAAA,EACzC,MAAM,UAAoB,CAAC;AAAA,EAC3B,IAAI,SAAS,aAAa,SAAS,KAAK;AAAA,IACtC,QAAQ,KACN,SAAS,OAAO,GAAG,QAAQ,OAAO,IAAI,iDACpC,2DACJ;AAAA,EACF;AAAA,EACA,IAAI,aAAa,aAAa,KAAK,eAAe,aAAa,aAAa,KAAK,YAAY;AAAA,IAC3F,QAAQ,KAAK,2EAA2E;AAAA,EAC1F;AAAA,EACA,OAAO;AAAA;;;ACtBT;;;ACKA;AAWO,IAAM,WAAW,CACtB,OACA,aAEO,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,MAAM,WAAW;AAAA,IAAW,OAAO;AAAA,EACvC,MAAM,aAAa,OAAO,mBAAmB,MAAM,KAAK,MAAM,UAAU;AAAA,EACxE,IAAI,eAAe,aAAa,WAAW,aAAa;AAAA,IAAM,OAAO;AAAA,EACrE,IAAI,WAAW,SAAS,aAAa,WAAW,SAAS;AAAA,IAAM,OAAO;AAAA,EACtE,OAAO,EAAE,OAAO,WAAW,OAAO,SAAQ,WAAW,KAAK,CAAC;AAAA,CAC5D;;;ACpBH;;;ACkBA;AA2BA,IAAM,aAAa,CAAC,QAAmB,SAC9B,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,SAAS;AAAA,EAQtB,MAAM,aAAa,OAAO,OAAO,QAAQ,MAAM;AAAA,EAC/C,MAAM,WAAY,OAAO,gBAAgB,QAAQ,YAAY,OAAO,IAAI;AAAA,EACxE,OAAO,KAAK,SAAS,OAAO;AAAA,CAC7B;AAYI,IAAM,eAAe,CAAC,SAAiB;AAAA,EAC5C,IAAI,SAAS;AAAA,IAAI,OAAO;AAAA,EACxB,MAAM,UAAU,KACb,MAAM;AAAA,CAAI,EACV,OACC,CAAC,UACE,KAAK,WAAW,GAAG,KAAK,KAAK,WAAW,GAAG,MAC5C,CAAC,KAAK,WAAW,KAAK,KACtB,CAAC,KAAK,WAAW,KAAK,CAC1B,EAAE;AAAA,EACJ,OAAO,KAAK,IAAI,SAAS,CAAC;AAAA;AAIrB,IAAM,eAAe,CAAC,QAAmB,SAC9C,WAAW,QAAQ,IAAI,EAAE,KAAY,aAAI,YAAY,CAAC;AAmBxD,IAAM,gBAAgB,CAAC,WACrB,IAAiB,QAAQ,QAAQ,OAAO,gBAAgB,EAAE,KACjD,aAAI,CAAC,SAAS;AAAA,EACnB,MAAM,MAAM,QAAQ,CAAC;AAAA,EACrB,MAAM,UAAU,IAAI,KAAK,CAAC,QAAQ,IAAI,SAAS,SAAS;AAAA,EACxD,OAAO;AAAA,IACL,SAAS,IACN,OAAO,CAAC,QAAQ,IAAI,SAAS,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,EACxD,IAAI,CAAC,QAAQ,KAAK,IAAI,MAAM,WAAW,CAAC;AAAA,IAC3C,SAAS,YAAY,YAAY,OAAO,KAAK,QAAQ,OAAO;AAAA,EAC9D;AAAA,CACD,CACH;AAgBK,IAAM,iBAAiB,CAAC,WAC7B,cAAc,MAAM,EAAE,KACb,aAAI,CAAC,WACV,OAAO,WAAW,OAAO,QAAQ,WAAW,IACxC,YACA,WAAW,OAAO,OAAO,OAAO,cAAc,OAAO,QAAQ,KAAK,IAAI,IAC5E,CACF;AAMK,IAAM,cACX;AACF,IAAM,gBAAgB;AAStB,IAAM,WAAW;AAsBV,IAAM,YAAY,CACvB,QACA,YACA,MACA,MAEA,WAAmB,aAEZ,aAAI,UAAU,GAAG;AAAA,EAUtB,MAAM,OAAO,SAAS,cAAc;AAAA,EACpC,SAAS,UAAU,EAAG,UAAU,UAAU,WAAW,GAAG;AAAA,IAWtD,MAAM,SAAS,OAAO,QAAoB,QAAQ,YAAY,OAAO,IAAI,EAAE,KAClE,uBAAc,MAAG;AAAA,MAAG;AAAA,KAAS,CACtC;AAAA,IACA,IAAI,WAAW;AAAA,MAAW,OAAO;AAAA,IACjC,IAAI,OAAO,WAAW;AAAA,MAAW,OAAO,KAAK,OAAO,YAAY,4BAA4B;AAAA,IAC5F,OAAc,eAAM,UAAU;AAAA,EAChC;AAAA,EACA,OAAO;AAAA,CACR;;;AD1MI,MAAM,wBAAwB,MAAM;AAAA,EACvB,OAAO;AAC3B;AAKO,IAAM,YAAY,CAAC,UAAoB,SAAS,MAAM,YAAY,OAAO,MAAM,IAAI;AAgB1F,IAAM,gBAAgB;AAAA,EACpB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAGA,IAAM,eAAe;AACrB,IAAM,aAAa;AAEnB,IAAM,gBAAgB,CAAC,UACrB,iBAAiB,YAAY,MAAM,WAAW;AAMzC,IAAM,WAAW,CAAC,UAChB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,SAAS,OAAO,IACpB,MAAM,QACN,QACA,OACA,GAAG,UAAU,KAAK,UACpB,EAAE,KACO,aAAI,CAAC,UAAU,EAAE,MAAM,OAAO,UAAU,EAAE,GAC1C,iBAAQ,eAAe,CAAC,UAAiB,iBAAQ,EAAE,MAAM,WAAW,MAAM,CAAC,CAAC,CACrF;AAAA,EACA,IAAI,OAAO,SAAS,aAAa,OAAO,SAAS;AAAA,IAAM,OAAO,OAAO;AAAA,EACrE,MAAM,OAAO,OAAO,IAClB,MAAM,QACN,QACA,OACA,2BACF;AAAA,EAGA,MAAM,SAAS,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,OAAO,IAAI,IAAI,MAAM,MAAM,IAAI;AAAA,EACxE,IAAI,UAAU,aAAa,MAAM,SAAS,MAAM,QAAQ,MAAM,SAAS,OAAO;AAAA,IAC5E,OAAO,OAAc,cACnB,OAAO,SACL,IAAI,gBAAgB,MAAM,OAAO,MAAM,IAAI,wCAAwC,CACvF;AAAA,EACF;AAAA,EACA,IAAI,UAAU,WAAW;AAAA,IACvB,OAAO,OAAc,cACnB,IAAI,gBACF,QAAQ,OAAO,MAAM,IAAI,UAAU,KAAK,MAAM,MAAM,OAAO,UACzD,GAAG,KAAK,MAAM,MAAM,GAAG,yBAAyB,MAAM,iCACtD,oFACJ,CACF;AAAA,EACF;AAAA,EACA;AAAA,CACD;AAEI,IAAM,gBAAe,CAAC,OAAiB,UAAkD;AAAA,EAC9F,QAAQ,aAAa,IAAI;AAAA,EACzB,MAAM,MAAM;AAAA,EACZ,SAAS,UAAU,IAAI;AAAA,EACvB,MAAM,MAAM;AACd;AAGA,IAAM,OAAO,CACX,OACA,QACA,MACA,MACA,OACA,SAEO,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,aAAa,OAAO,KAAK,MAAM,QAAQ,WAAW;AAAA,EACxD,MAAM,OAAO,KAAK,OAAO,QAAgB,MAAM,QAAQ,YAAY,QAAQ,MAAM,IAAI,CAAC;AAAA,EACtF,IAAI,SAAS,IAAI;AAAA,IACf,OAAO,OAAc,cACnB,IAAI,gBACF,GAAG,qFACL,CACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,OAAO,UAAU,MAAM,QAAQ,YAAY,MAAM,MAAM,MAAM,KAAK;AAAA,EAC/E,IAAI,SAAS,MAAM;AAAA,IACjB,OAAO,OAAc,cACnB,IAAI,gBACF,GAAG,cAAc,eAAe,kCAAkC,MAAM,gBACtE,GAAG,6CACP,CACF;AAAA,EACF;AAAA,CACD;AAGI,IAAM,cAAc,CAAC,UACnB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,YAAW,KAAK;AAAA,EAQ7B,OAAO,UAAU,cAAc,QAAQ,MAAM,IAAI;AAAA,EACjD,OAAO,OAAO,KACZ,OACA,QACA,SAAS,MAAM,YACf,aAAa,OAAO,MAAM,IAAI,KAC9B,cACA,IACF;AAAA,CACD;AAYI,IAAM,cAAc,CAAC,OAAiB,QAAmB,WACvD,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,OAAO,KAAK,OAAO,GAAG,EAAE,SAAS,KAAK,OAAO,MAAM,SAAS,GAAG;AAAA,IACjE,MAAM,OAAO,WACX,KAAK,OAAO,QAAS,WAAW,KAAK,CAAC,IAAI,EAAE,OAAO,EAAG,GACtD,OAAO,KACT;AAAA,IAEA,OAAO,UAAU,cAAc,QAAQ,MAAM,KAAK;AAAA,IAClD,OAAO,IAAI,MAAM,QAAQ,aAAa,OAAO,GAAG,UAAU,KAAK,YAAY,IAAI;AAAA,EACjF;AAAA,EACA,WAAW,QAAQ,OAAO,QAAQ;AAAA,IAChC,MAAM,QAAQ,EAAE,MAAM,KAAK,MAAM,MAAM,KAAK,KAAK;AAAA,IAGjD,OAAO,UAAU,cAAc,QAAQ,OAAO,IAAI;AAAA,IAClD,OAAO,KACL,OACA,OACA,GAAG,UAAU,KAAK,YAClB,QAAQ,KAAK,cAAc,OAAO,MAAM,IAAI,QAAQ,KAAK,QACzD,YACA,KACF;AAAA,EACF;AAAA,CACD;AAYI,IAAM,eAAe,CAAC,OAAiB,aACrC,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,OAAO,SAAS,KAAK;AAAA,EAClC,IAAI,SAAS;AAAA,IAAW;AAAA,EACxB,MAAM,QAAQ,MAAM,UAAU,IAAI,EAAE;AAAA,EACpC,IAAI,MAAM,SAAS,GAAG;AAAA,IACpB,OAAO,OAAc,cACnB,IAAI,gBACF,cAAc,OAAO,MAAM,IAAI,mBAAmB,MAAM,qCACtD,gBAAgB,MAAM,KAAK,IAAI,qDAC/B,8EACJ,CACF;AAAA,EACF;AAAA,EACA,OAAO,KAAK,OAAO,UAAU,UAAU,KAAK,GAAG,cAAc,OAAO,MAAM,IAAI,KAAK,UAAU;AAAA,CAC9F;;;AFpNI,IAAM,kBAAkB,CAAC,OAAiB,UAC/C,MAAM,OAAO,MAAM,IAAI,QAAQ,MAAM,kCAAkC,MAAM,KAAK,IAAI,WACtF,gGACA,+FACA;AAMK,IAAM,qBAAqB,CAChC,OACA,OACA,MACA,WAEO,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,OAAO,MAAM,WAAW;AAAA,IAAG;AAAA,EAC/B,MAAM,WAAU,CAAC,aACR,cAAK,MAAM,MAAM,UAAsB,IAAI,EAAE,MAAM,WAAW,CAAC;AAAA,EACxE,IAAI,EAAE,OAAO,SAAS,OAAO,QAAO;AAAA,IAAI;AAAA,EACxC,OAAO,OAAc,cAAK,IAAI,gBAAgB,gBAAgB,OAAO,OAAO,KAAK,CAAC,CAAC;AAAA,CACpF;;;AZeI,IAAM,aAAa,WAAqB,eAAe,EAAE,sBAAsB,SAAS,CAAC;AAKhG,IAAM,UAAU,CAAC,YACR,cAAK,IAAI,gBAAgB,QAAQ,KAAK;AAAA,CAAI,CAAC,CAAC;AAQrD,IAAM,OAAO,CAAC,OAAiB,MAAuB,SAC7C,aAAI,UAAU,GAAG;AAAA,EACtB,QAAQ,WAAW;AAAA,EACnB,MAAM,YAAW,iBAAiB,MAAM,MAAM,MAAM;AAAA,EACpD,IAAI,UAAS,SAAS;AAAA,IAAG,OAAO,OAAO,QAAQ,SAAQ;AAAA,EACvD,IAAI,WAAW;AAAA,IAAW;AAAA,EAC1B,IAAI,CAAC,aAAW,IAAI;AAAA,IAAG;AAAA,EACvB,MAAM,OAAO,OAAO,SAAS,IAAI;AAAA,EAKjC,IAAI,SAAS,WAAW;AAAA,IACtB,MAAM,WAAW,eAAe,IAAI;AAAA,IACpC,IAAI,SAAS,SAAS;AAAA,MAAG,OAAO,OAAO,QAAQ,QAAQ;AAAA,IACvD,OAAc,oBACZ,eAAe,KAAK,QAAQ,OAAO,KAAK,IAAI,6CAC1C,6EACJ;AAAA,IACA,OAAO,EAAE,QAAQ,SAAS;AAAA,EAC5B;AAAA,EACA,MAAM,SAAS,MAAM,MAAM,IAAI;AAAA,EAC/B,OAAO,mBAAmB,OAAO,MAAM,MAAM,MAAM;AAAA,EACnD,IAAI,OAAO,OAAO,SAAS;AAAA,IAAG,OAAO,OAAO,QAAQ,OAAO,MAAM;AAAA,EACjE,MAAM,QAAQ,KAAK,SAAS,OAAO;AAAA,EACnC,IAAI,OAAO,MAAM,WAAW,KAAK,CAAC;AAAA,IAAO,OAAO,EAAE,QAAQ,OAAO;AAAA,EACjE,MAAM,OACJ,OAAO,MAAM,WAAW,IACpB,mBAAmB,KAAK,iBAAiB,OAAO,qCAChD,qBACA,+CAA+C,OAAO,MAAM,KAAK,IAAI,YACrE;AAAA,EACN,OAAc,oBAAW,eAAe,KAAK,QAAQ,OAAO,KAAK,IAAI,MAAM,MAAM;AAAA,EACjF,OAAO,EAAE,QAAQ,SAAS;AAAA,CAC3B;AAoBH,IAAM,YAAY,CAAC,OAAiB,SAC3B,aAAI,UAAU,GAAG;AAAA,EACtB,QAAQ,WAAW;AAAA,EACnB,MAAM,YAAW,iBAAiB,MAAM,MAAM,MAAM;AAAA,EACpD,IAAI,UAAS,SAAS;AAAA,IAAG,OAAO,OAAO,QAAQ,SAAQ;AAAA,EACvD,MAAM,OAAO,OAAO,SAAS,IAAI;AAAA,EACjC,IAAI,SAAS,WAAW;AAAA,IACtB,MAAM,WAAW,eAAe,IAAI;AAAA,IACpC,IAAI,SAAS,SAAS;AAAA,MAAG,OAAO,OAAO,QAAQ,QAAQ;AAAA,IACvD,OAAO,YAAY,IAAI;AAAA,EACzB,EAAO;AAAA,IACL,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,eAAe,OAAO,kBAAkB,OAAO,KAAK,IAAI,QAAQ,KAAK,MAAM;AAAA,IACpF;AAAA,IACA,MAAM,SAAS,MAAM,MAAM,IAAI;AAAA,IAC/B,IAAI,WAAW,aAAa,OAAO,MAAM,SAAS,GAAG;AAAA,MACnD,OAAO,OAAO,QAAQ;AAAA,QACpB,MAAM,OAAO,KAAK,IAAI,uBAAuB,KAAK,yBAChD,GAAG,OAAO,MAAM,KAAK,IAAI,gEACzB;AAAA,MACJ,CAAC;AAAA,IACH;AAAA,IACA,OAAO,mBAAmB,OAAO,MAAM,MAAM,MAAM;AAAA,IACnD,IAAI,OAAO,OAAO,SAAS;AAAA,MAAG,OAAO,OAAO,QAAQ,OAAO,MAAM;AAAA,IACjE,IAAI,OAAO,MAAM,SAAS;AAAA,MAAG,OAAO,YAAY,MAAM,QAAQ,KAAK,KAAK,SAAS,CAAC;AAAA;AAAA,EAEpF,MAAM,QAAQ,OAAO,SAAS,IAAI;AAAA,EAClC,IAAI,UAAU,WAAW;AAAA,IACvB,OAAO,OAAO,QAAQ;AAAA,MACpB,MAAM,OAAO,KAAK,IAAI;AAAA,IACxB,CAAC;AAAA,EACH;AAAA,EACA,MAAM,OAAO,MAAM,MAAM,KAAK,EAAE;AAAA,EAChC,IAAI,KAAK,SAAS,GAAG;AAAA,IACnB,OAAO,OAAO,QAAQ;AAAA,MACpB,MAAM,OAAO,KAAK,IAAI,uBAAuB,KAAK,KAAK,IAAI,6BACzD,yFACA;AAAA,IACJ,CAAC;AAAA,EACH;AAAA,EACA,OAAO,cAAa,MAAM,KAAK;AAAA,CAChC;AAEH,IAAM,UAAU,CAAC,MAAgB,YAAiD;AAAA,EAChF,MAAM,QAAQ,QAAQ,KAAK;AAAA,EAC3B,QAAQ,KAAK;AAAA,EACb,MAAM,QAAQ,QAAQ,KAAK;AAC7B;AAeA,IAAM,OAAO,CAAC,OAAiB,SACtB,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,QAAQ,QAAQ,MAAM,MAAM,MAAM;AAAA,EACxC,MAAM,OAAO,OAAO,SAAS,KAAK;AAAA,EAClC,IAAI,SAAS;AAAA,IAAW;AAAA,EACxB,MAAM,WAAiB,cAAK,MAAM,MAAM,MAAM,IAAI,EAAE,MAAM,WAAW,CAAC;AAAA,EACtE,OAAO,OAAO,UAAU,OAAO,cAAa,OAAO,IAAI,GAAG,QAAO;AAAA,CAClE;AAUH,IAAM,YAAW;AAAA,EACf,QAAQ,GAAG,MAAM,aACf,aAAa,QAAQ,MAAM,MAAM,GAAG,IAAI;AAAA,EAC1C,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,QAEA,KAAK,EAAE,KAAK,YAAY,OAAO,GAAG,MAAM,IAAI;AAAA,EAC9C,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,QAEA,KAAK,EAAE,KAAK,YAAY,OAAO,GAAG,IAAI;AAAA,EACxC,WAAW;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,QAEA,UAAU,EAAE,KAAK,YAAY,OAAO,GAAG,IAAI;AAC/C;AAEO,IAAM,qBAAqB,MACvB,kBACP,YACO,iBAAQ,WAAW,SAAS,GAAG,SAAQ,CAAC,EAAE,KAAY,aAAI,cAAc,CAAC,CAClF;;AgBrNF,qBAAS;AACT;AACA;;;ACVO,IAAM,SAAQ;AAErB,IAAM,MAAM,CAAC,UAA+B,UAAU,YAAY,YAAY,OAAO,KAAK;AAuBnF,IAAM,YAAW,CAAC,UAAiE;AAAA,EACxF,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,EAAE,KAAK,IAAI,MAAM,GAAG,GAAG,MAAM,MAAM,MAAM,SAAS,IAAI,MAAM,OAAO,EAAE;AAAA,SACzE;AAAA,MACH,OAAO;AAAA,QACL,mBAAmB,MAAM;AAAA,QACzB,QAAQ,MAAM;AAAA,QACd,eAAe,MAAM;AAAA,QACrB,iBAAiB,IAAI,MAAM,gBAAgB;AAAA,QAC3C,KAAK,IAAI,MAAM,GAAG;AAAA,QAClB,cAAc,MAAM;AAAA,QACpB,SAAS,IAAI,MAAM,OAAO;AAAA,MAC5B;AAAA,SACG;AAAA,MACH,OAAO;AAAA,QACL,oBAAoB,MAAM;AAAA,QAC1B,sBAAsB,IAAI,MAAM,qBAAqB;AAAA,QACrD,aAAa,MAAM;AAAA,QACnB,iBAAiB,MAAM;AAAA,QACvB,gBAAgB,IAAI,MAAM,eAAe;AAAA,MAC3C;AAAA;AAAA;AAWN,IAAM,eAAe,CAAC,UAAqD;AAAA,EACzE,QAAQ,MAAM;AAAA,SACP;AAAA,MACH,OAAO,CAAC;AAAA,SACL;AAAA,MACH,OAAO,EAAE,sBAAsB,MAAM,0BAA0B,QAAQ,MAAM,IAAI;AAAA,SAC9E;AAAA,MACH,OAAO,EAAE,mBAAmB,MAAM,uBAAuB,QAAQ,MAAM,IAAI;AAAA;AAAA;AAcjF,IAAM,YAAW,CAAC,WAAsD;AAAA,EACtE,SAAS,MAAM,YAAY,OAAO,MAAM;AAAA,EACxC,MAAM,OAAO,MAAM,IAAI;AAAA,EACvB,QAAQ,MAAM;AAAA,KACX,aAAa,KAAK;AACvB;AAEO,IAAM,QAAO,CAAC,UAA6B;AAAA,EAChD,MAAM,SAAS,UAAS,KAAK;AAAA,EAC7B,YAAY,QAAQ,UAAU,OAAO,QAAQ,UAAS,KAAK,CAAC,GAAG;AAAA,IAC7D,IAAI,UAAU;AAAA,MAAW,OAAO,UAAU;AAAA,EAC5C;AAAA,EACA,OAAO;AAAA;AAUF,IAAM,SAAS,CAAC,UAA6B;AAAA,EAClD,MAAM,QAAQ,OAAO,QAAQ,UAAS,KAAK,CAAC,EACzC,OAAO,IAAI,WAAW,UAAU,SAAS,EACzC,IAAI,EAAE,YAAY,MAAM;AAAA,EAC3B,OAAO,WAAW,MAAK,KAAK,GAAG,KAAK;AAAA;AAW/B,IAAM,cAAa,CAAC,WAA8B,KAAK,MAAK,KAAK,GAAG,MAAM,MAAM,KAAK;;;AChErF,IAAM,iBAAiB,CAAC,UAA+D;AAAA,EAC5F,oBAAoB,KAAK,KAAK,mBAAmB;AAAA,EACjD,sBAAsB,IAAI,KAAK,uBAAuB,MAAK;AAAA,EAC3D,aAAa,KAAK,KAAK,YAAY;AAAA,EACnC,iBAAiB,KAAK,KAAK,gBAAgB;AAAA,EAC3C,gBAAgB,IAAI,KAAK,iBAAiB,MAAK;AAAA,EAC/C,mBAAmB,KAAK,KAAK,oBAAoB,IAAI;AACvD;AASO,IAAM,cAAc,CACzB,YACA,UAEA,WAAW,yBAAyB,MAAM,uBAAuB,OACjE,WAAW,2BAA2B,MAAM,yBAAyB,WACrE,WAAW,kBAAkB,MAAM,gBAAgB,OACnD,WAAW,sBAAsB,MAAM,oBAAoB,OAC3D,WAAW,qBAAqB,MAAM,mBAAmB,WACzD,WAAW,wBAAwB,MAAM,uBAAuB;;;AF+B3D,IAAM,sBAAsB,WAA8B,sBAAsB;AAWvF,IAAM,cAAc,CAAC,YAAoC,UAAsC;AAAA,EAC7F,IAAI,MAAM,SAAS;AAAA,IAAiB,OAAO,YAAY,YAAY,KAAK;AAAA,EACxE,MAAM,SACJ,WAAW,SAAS,MAAM,OAAO,WAAU,WAAW,aAAa,MAAM,WAAW;AAAA,EACtF,IAAI,MAAM,SAAS;AAAA,IAAY,OAAO,UAAU,WAAW,UAAU,MAAM,QAAQ;AAAA,EACnF,OACE,UACA,WAAW,mBAAmB,MAAM,iBAAiB,OACrD,WAAW,kBAAkB,MAAM,gBAAgB,OACnD,WAAW,YAAY,MAAM,UAAU,OACvC,WAAW,wBAAwB,MAAM,sBAAsB,OAC/D,WAAW,sBAAsB,MAAM,oBAAoB,WAC3D,WAAW,2BAA2B,MAAM,0BAA0B;AAAA;AAI1E,IAAM,YAAW,YAAuD;AAAA,EACtE,YAAY,CAAC,MAAM,UAAU;AAAA,IAQ3B,MAAM,WAAW,KAAK,KAAK,OAAO;AAAA,IAClC,IAAI,aAAa,MAAM,aAAa,MAAM;AAAA,MAAM;AAAA,IAChD,OAAO;AAAA,SACF,eAAe,IAAI;AAAA,MACtB,mBAAmB,KAAK,KAAK,kBAAkB;AAAA,MAC/C,QAAQ,KAAK,KAAK,SAAS;AAAA,MAC3B,SAAS,KAAK,KAAK,YAAY,KAAK;AAAA,MACpC,IAAI,MAAM;AAAA,MACV,eAAe,KAAK,KAAK,gBAAgB;AAAA,MACzC,iBAAiB,IAAI,KAAK,kBAAkB,MAAK;AAAA,MACjD,KAAK,IAAI,KAAK,QAAQ,MAAK;AAAA,MAC3B,cAAc,KAAK,KAAK,eAAe;AAAA,MACvC,MAAM,KAAK,KAAK,OAAO;AAAA,MACvB,MAAM,IAAI,KAAK,SAAS,CAAC;AAAA,MACzB,QAAQ,KAAK,KAAK,SAAS;AAAA,MAC3B,SAAS,IAAI,KAAK,YAAY,MAAK;AAAA,MACnC,MAAM,MAAM;AAAA,MACZ,sBAAsB,KAAK,KAAK,uBAAuB,IAAI;AAAA,IAC7D;AAAA;AAAA,EAGF,YAAY,CAAC,UAAU,0BAA0B,MAAM;AAAA,EAEvD,YAAY;AAAA,EAMZ,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EAKA,SAAS,CAAC,YAAY,UACpB,WAAW,WAAW,MAAM,UAC5B,WAAW,SAAS,MAAM,QAC1B,WAAW,aAAa,MAAM,YAAY,SAC1C,YAAY,YAAY,KAAK;AAAA,EAC/B,MAAM,CAAC,UAAU,0BAA0B,MAAM;AAAA,EAEjD,YAAY;AACd,CAAC;AAWM,IAAM,8BAA8B,MAChC,kBAAO,qBAA4B,iBAAQ,oBAAoB,SAAS,GAAG,SAAQ,CAAC,CAAC;;AG7KhG,qBAAS;AACT,uBAAS;AAET;AACA;;;AC9BO,IAAM,yBAAsC;AAM5C,IAAM,qBAAkC;AAExC,IAAM,oBAAyC,UAAU,wBAAwB,CAAC,GAAG,IAAI;AAEzF,IAAM,gBAAqC,UAAU,oBAAoB,CAAC,GAAG,IAAI;;;ADsFjF,IAAM,sBAAsB,WAA8B,sBAAsB;AAEvF,IAAM,QAAO,CAAC,UACZ,aAAa,MAAM,QAAQ,MAAM,IAAI,EAAE,KAC9B,aAAI,CAAC,aAAa,EAAE,MAAM,MAAM,MAAM,QAAQ,EAAE,CACzD;AAYF,IAAM,QAAO,CAAC,SACL,aAAI,UAAU,GAAG;AAAA,EACtB,IAAI,CAAC,aAAW,IAAI;AAAA,IAAG;AAAA,EACvB,QAAQ,YAAY,OAAO,MAAK,IAAI;AAAA,EACpC,OAAO,YAAY,IAAK,EAAE,QAAQ,OAAO,IAAe,EAAE,QAAQ,SAAS;AAAA,CAC5E;AAGH,IAAM,SAAS,CAAC,MAAc,QACrB,aAAI,IAAI,MAAM,wBAAwB,SAAS,KAAK,CAAC;AAE9D,IAAM,QAAQ,CAAC,UACN,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,OAAO,MAAM;AAAA,EACnB,MAAM,SAAS,OAAO,aAAa,MAAM,QAAQ,IAAI;AAAA,EASrD,IAAI,WAAW;AAAA,IAAG,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,EAE5C,MAAM,SAAS,OAAO,eAAe,MAAM,MAAM;AAAA,EACjD,IAAI,WAAW,WAAW;AAAA,IACxB,OAAO,OAAO,OACZ,MACA,wEAAwE,cACtE,0EACJ;AAAA,EACF;AAAA,EAWA,OAAO;AAAA,EACP,MAAM,aAAa,OAAO,KAAK,MAAM,QAAQ,WAAW;AAAA,EACxD,MAAM,OAAO,OAAO,QAAgB,MAAM,QAAQ,YAAY,OAAO,SAAS,cAAc;AAAA,EAC5F,IAAI,SAAS,WAAW;AAAA,IACtB,OAAO,OAAO,OACZ,MACA,+FACE,qFACJ;AAAA,EACF;AAAA,EAUA,MAAM,aAAa,OAAO,UAAU,MAAM,QAAQ,YAAY,MAAM,IAAI;AAAA,EACxE,IAAI,eAAe,MAAM;AAAA,IACvB,OAAO,OAAO,OACZ,MACA,qBAAqB,gBAAgB,yCACnC,sBAAsB,cAAc,wDACpC,yBACJ;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,OAAO,eAAe,MAAM,MAAM;AAAA,EAChD,IAAI,UAAU,WAAW;AAAA,IACvB,OAAO,OAAO,OACZ,MACA,2DAA2D,sBACzD,2FACA,gEACJ;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,OAAO,aAAa,MAAM,QAAQ,IAAI;AAAA,EACnD,IAAI,SAAS,GAAG;AAAA,IACd,OAAO,OAAO,OACZ,MACA,8BAA8B,OAAO,IAAI,sDACvC,2FACJ;AAAA,EACF;AAAA,EACA,OAAO,EAAE,MAAM,SAAS,KAAK;AAAA,CAC9B;AAaH,IAAM,YAAW;AAAA,EACf,QAAQ,MAAa;AAAA,EACrB,MAAM,GAAG,WAA+C,MAAK,IAAI;AAAA,EACjE,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAM,GAAG,WAAwC,MAAK,IAAI;AAAA,EAC1D,WAAW,GAAG,WAAwC,MAAM,IAAI;AAClE;AAEO,IAAM,8BAA8B,MAChC,kBAAO,qBAA4B,iBAAQ,oBAAoB,SAAS,GAAG,SAAQ,CAAC,CAAC;;AE9KhG,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;AClBO,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAU5B,IAAM,SAAQ;AAuBd,IAAM,YAAY,CAAC,UACxB,KAAK,KAAK,EACP,MAAM,SAAS,EACf,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,EACL,KAAK,GAAG;AAYN,IAAM,WAAU,CAAC,UAAmB,KAAK,KAAK,EAAE,QAAQ,QAAQ,EAAE;AAGlE,IAAM,QAAO,CAAI,UAAyB,SAC/C,aAAa,aAAa,aAAa;AAElC,IAAM,WAAW,CAAC,UAA8B,SACrD,aAAa,aAAa,UAAU,QAAQ,MAAM;AAE7C,IAAM,cAAc,CAAC,UAA8B,SACxD,aAAa,aAAa,SAAQ,QAAQ,MAAM;AAElD,IAAM,SAAQ,CAAC,MAAc,UAC3B,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,MAAM;AAkCtC,IAAM,QAAO,CAAC,WAAqD;AAAA,KACrE,OAAM,aAAa,KAAK,MAAM,SAAS,CAAC;AAAA,KACxC,OAAM,gBAAgB,MAAM,eAAe;AAAA,KAC3C,OAAM,aAAa,MAAM,SAAS;AAAA,KAClC,OAAM,yBAAyB,MAAM,qBAAqB;AAAA,KAC1D,OAAM,gBAAgB,MAAM,YAAY;AAAA,KACxC,OAAM,eAAe,MAAM,WAAW;AAAA,KACtC,OAAM,qBAAqB,MAAM,sBAAsB,OAAO,MAAM,SAAS;AAAA,KAC7E,OAAM,QAAQ,MAAM,IAAI;AAAA,KACxB,OAAM,YAAY,MAAM,QAAQ;AAAA,KAChC,OAAM,WAAW,MAAM,OAAO;AAAA,KAC9B,OAAM,OAAO,MAAM,QAAQ,YAAY,YAAY,OAAO,MAAM,GAAG,CAAC;AAAA,KACpE,OAAM,UAAU,MAAM,MAAM;AAAA,KAC5B,OAAM,WAAW,MAAM,eAAe,YAAY,YAAY,OAAO,MAAM,UAAU,CAAC;AAAA,KACtF,OAAM,mBAAmB,MAAM,kBAAkB;AAAA,EACpD,MAAM,MAAM;AACd;AAgBO,IAAM,cAAa,CAAC,WAAqD;AAAA,KAC3E,MAAK,KAAK;AAAA,EACb,OAAO,MAAM;AACf;AAqBO,IAAM,cAAa,CAAC,UAAoD;AAAA,EAC7E,MAAM,QAAQ;AAAA,IACZ,GAAI,MAAM,SAAS,YAAY,CAAC,MAAM,IAAI,CAAC;AAAA,IAC3C,GAAI,MAAM,sBAAsB,QAAQ,CAAC,mBAAmB,IAAI,CAAC;AAAA,EACnE;AAAA,EACA,OAAO,WAAW,MAAK,KAAK,GAAG,KAAK;AAAA;;;AC1MtC;AACA;AAkFA,IAAM,gBAAe,CACnB,MACA,UACsC;AAAA,EACtC,MAAM,OAAO;AAAA,EASb,MAAM,WAAW,KAAK,KAAK,OAAO;AAAA,EAClC,IAAI,aAAa,MAAM,aAAa,MAAM;AAAA,IAAM;AAAA,EAChD,OAAO;AAAA,IACL,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,WAAW,KAAK,KAAK,YAAY;AAAA,IACjC,gBAAgB,KAAK,KAAK,eAAe;AAAA,IACzC,aAAa,KAAK,KAAK,cAAc;AAAA,IACrC,WAAW,KAAK,KAAK,YAAY;AAAA,IACjC,uBAAuB,KAAK,KAAK,wBAAwB;AAAA,IACzD,WAAW,KAAK,KAAK,YAAY;AAAA,IACjC,cAAc,UAAU,KAAK,eAAe;AAAA,IAC5C,YAAY,KAAK,KAAK,aAAa;AAAA,IACnC,aAAa,UAAU,KAAK,cAAc;AAAA,IAC1C,mBAAmB,KAAK,KAAK,oBAAoB;AAAA,IAEjD,MAAM,KAAK,KAAK,OAAO;AAAA,IACvB,UAAU,SAAQ,KAAK,WAAW;AAAA,IAClC,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,UAAU,MAAM,QAAQ,KAAK,WAAW,IAAI,KAAK,YAAY,KAAK,GAAG,IAAI;AAAA,IACzE,SAAS,KAAK,KAAK,UAAU;AAAA,IAC7B,OAAO,MAAM;AAAA,IACb,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,KAAK,IAAI,KAAK,QAAQ,MAAK;AAAA,IAC3B,MAAM,MAAM;AAAA,IACZ,UAAU,IAAI,KAAK,aAAa,MAAK;AAAA,IACrC,QAAQ,UAAU,KAAK,SAAS;AAAA,IAChC,MAAM,aAAa,KAAK,MAAM,OAAO;AAAA,IACrC,WAAW,IAAI,KAAK,YAAY,MAAK;AAAA,IACrC,mBAAmB,KAAK,KAAK,kBAAkB;AAAA,EACjD;AAAA;AAwBK,IAAM,sBAAsB,CAAC,UAClC,iBACE,OACE,MAAM,QACN,QACA,OACM,sBAAe,EAAE,OAAO,MAAM,OAAO,MAAM,MAAM,KAAK,CAAC,CAC/D,EAAE,KACO,kBAAS,+BAA+B,CAAC,UAC9C,MAAM,OAAO,aAAa,6BACf,iBAAQ,SAAS,IACjB,cAAK,KAAK,CACvB,CACF,CACF,EAAE,KACO,aAAI,CAAC,SAAS;AAAA,EACnB,IAAI,SAAS;AAAA,IAAY,OAAO;AAAA,EAChC,OAAO,SAAS,YAAY,YAAY,cAAa,MAAM,KAAK;AAAA,CACjE,CACH;AAmBK,IAAM,gBAAgB,CAAC,UAC5B,oBAAoB,KAAK,EAAE,KAAY,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CAAC;AAGhE,IAAM,kBAAiB,CAAC,SAC7B,SAAS,aAAa,YAAY;AAc7B,IAAM,WAAU,CAAC,YAAmC,UACzD,WAAW,UAAU,MAAM,QAAQ,OACnC,MAAK,MAAM,SAAS,WAAW,OAAO,KACtC,MAAK,MAAM,WAAW,WAAW,SAAS,KAC1C,MAAK,MAAM,KAAK,WAAW,GAAG,KAC9B,YAAY,MAAM,UAAU,WAAW,QAAQ,KAC/C,SAAS,MAAM,cAAc,WAAW,YAAY,KACpD,SAAS,MAAM,aAAa,WAAW,WAAW,KAClD,MAAK,MAAM,mBAAmB,WAAW,iBAAiB,KAC1D,SAAS,MAAM,QAAQ,WAAW,MAAM,KACxC,MAAK,MAAM,WAAW,WAAW,SAAS,KAC1C,MAAK,MAAM,uBAAuB,WAAW,qBAAqB,KAClE,MAAK,MAAM,iBAAiB,WAAW,eAAe,KACtD,MAAK,MAAM,YAAY,WAAW,UAAU,KAC5C,MAAK,MAAM,oBAAoB,WAAW,kBAAkB;;;AF5HvD,IAAM,qBAAqB,WAA6B,uBAAuB;AAAA,EACpF,sBAAsB;AACxB,CAAC;AASD,IAAM,UAA4C;AAAA,EAChD,gBAAgB;AAAA,EAChB,WAAW;AAAA,EACX,mBAAmB;AACrB;AAEA,IAAM,cAAc,CAAC,SACnB,OAAO,YAAY,OAAO,QAAQ,IAAI,EAAE,IAAI,EAAE,KAAK,WAAW,CAAC,QAAQ,QAAQ,KAAK,KAAK,CAAC,CAAC;AAG7F,IAAM,qBAAoB,CAAC,WACxB;AAAA,KACI,YAAY,YAAW,KAAK,CAAC;AAAA,EAChC,MAAM,MAAM;AACd;AAGF,IAAM,qBAAoB,CAAC,WACxB;AAAA,KACI,YAAY,YAAW,KAAK,CAAC;AAAA,EAChC,OAAO,MAAM;AAAA,EACb,MAAM,MAAM;AACd;AAEK,IAAM,6BAA6B,MAC/B,kBACP,oBACO,iBACL,mBAAmB,SAAS,GAAG;AAAA,EAK7B,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAG7B,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,OAAO,gBACL,OAAO,WAAW,YAAY,cAAc,IAAI,IAAI,oBAAoB,IAAI,CAC9E;AAAA,GACD;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,qBAAqB,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IAC7E,OAAO,YAAW,qBAAqB,YAAW,IAAI,GAAG,KAAK;AAAA,IAC9D,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,oBAAoB,IAAI;AAAA,IAG5C,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,uBAAuB,GAAG,KAAK,QAAQ,KAAK,OAAO;AAAA,MAC5E,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,qBAAqB,YAAW,IAAI,GAAG,IAAI;AAAA,MAC7D,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EAUD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IACxC,MAAM,SAAS,gBAAe,OAAO,cAAc,IAAI,CAAC;AAAA,IACxD,OAAO,YAAW,qBAAqB,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IAC7E,OAAO,YAAW,qBAAqB,YAAW,IAAI,GAAG,KAAK;AAAA,IAC9D,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OACL,KAAK,QACL,aACA,MACM,yBAAkB,mBAAkB,IAAI,CAAC,CACjD;AAAA,IACF,EAAO,SAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MACjC,OAAO,OACL,KAAK,QACL,aACA,MACM,uBAAgB,mBAAkB,IAAI,CAAC,CAC/C;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,cAAc,IAAI,CAAC;AAAA,IACvD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,SAAS,KAAK,gBAAgB,KAAK,yCACjC,iFACA,+EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EACD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACM,0BAAmB,EAAE,OAAO,KAAK,OAAO,MAAM,KAAK,KAAK,CAAC,CACjE;AAAA,GACD;AACH,CAAC,CACH,CACF;;AG9MF,qBAAS;AACT;AACA;;;AC0DA,IAAM,OAAO,CAAC,UACZ,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,CAAC,SAAkB,OAAO,IAAI,CAAC,IAAI,CAAC;AAGvE,IAAM,QAAQ,CAAC,QAA2B,cACxC,OAAO,IAAI,CAAC,SAAS,UAAU,KAAK,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,SAAS,EAAE;AAQ3E,IAAM,WAAW,CAAC,SAChB,KACG,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,EACL,KAAK,GAAG;AAEb,IAAM,SAAQ,CAAC,SAAyB;AAAA,EACtC,IAAI,CAAC,KAAK,WAAW,QAAQ;AAAA,IAAG,OAAO;AAAA,EACvC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,EAC3B,IAAI,KAAK;AAAA,IAAG,OAAO;AAAA,EACnB,MAAM,SAAS,KAAK,MAAM,KAAK,CAAC,EAAE,MAAM,GAAG;AAAA,EAC3C,OAAO,GAAG,KAAK,MAAM,GAAG,EAAE,KAAK,OAAO,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAAE,KAAK,GAAG;AAAA;AAG7E,IAAM,QAAO,CAAC,SAAyB;AAGhC,IAAM,iBAAiB,CAAC,YAAuC;AAAA,EACpE,kBAAkB,MAAM,OAAO,qBAAqB,CAAC,GAAG,KAAI,EAAE,KAAK;AAAA,EACnE,eAAe,MAAM,OAAO,kBAAkB,CAAC,GAAG,MAAK,EAAE,KAAK;AAAA,EAC9D,kBAAkB,MAAM,OAAO,qBAAqB,CAAC,GAAG,QAAQ,EAAE,KAAK;AAAA,EACvE,SAAS,MAAM,OAAO,SAAS,KAAI,EAAE,KAAK;AAC5C;AAEO,IAAM,oBAAoB,CAC/B,MACA,UACmC;AAAA,EACnC,SAAS,KAAK,KAAK,UAAU;AAAA,EAC7B,SAAS,KAAK,KAAK,UAAU;AAAA,EAC7B,gBAAgB,KAAK,KAAK,eAAe;AAAA,EACzC,kBAAkB,MAAM,KAAK,KAAK,iBAAiB,GAAG,KAAI,EAAE,KAAK;AAAA,EACjE,eAAe,MAAM,KAAK,KAAK,cAAc,GAAG,MAAK,EAAE,KAAK;AAAA,EAC5D,kBAAkB,MAAM,KAAK,KAAK,iBAAiB,GAAG,QAAQ,EAAE,KAAK;AAAA,EAErE,MAAM,KAAK,KAAK,SAAS,KAAK,KAAK;AAAA,EACnC;AAAA,EACA,QAAQ,KAAK,KAAK,SAAS;AAAA,EAC3B,SAAS,MAAM,KAAK,KAAK,SAAS,GAAG,KAAI,EAAE,KAAK;AAClD;AAEA,IAAM,QAAQ,CAAC,GAAsB,MACnC,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,UAAU,SAAS,EAAE,MAAM;AAE9D,IAAM,iBAAiB,CAC5B,YACA,WACY;AAAA,EACZ,MAAM,QAAQ,eAAe,MAAM;AAAA,EACnC,OACE,WAAW,aAAa,OAAO,YAAY,SAC3C,WAAW,qBAAqB,OAAO,oBAAoB,SAC3D,WAAW,UAAU,OAAO,QAAQ,UACpC,MAAM,WAAW,SAAS,MAAM,OAAO,KACvC,MAAM,WAAW,mBAAmB,MAAM,iBAAiB,KAC3D,MAAM,WAAW,gBAAgB,MAAM,cAAc,KACrD,MAAM,WAAW,mBAAmB,MAAM,iBAAiB,MAC1D,OAAO,YAAY,aAAa,WAAW,YAAY,OAAO;AAAA;AAYnE,IAAM,SAAS,CAAC,YAAuC;AAAA,EACrD,SAAS,OAAO,YAAY,OAAQ,MAAiB;AAAA,EACrD,gBAAgB,OAAO,oBAAoB,OAAQ,MAAiB;AAAA,EACpE,MAAM,OAAO,QAAS;AACxB;AAEA,IAAM,QAAQ,CAAC,WAAiF;AAAA,EAC9F,MAAM,QAAQ,eAAe,MAAM;AAAA,EACnC,MAAM,MAAiD,CAAC;AAAA,EACxD,IAAI,MAAM,kBAAkB,SAAS;AAAA,IAAG,IAAI,oBAAoB,MAAM;AAAA,EACtE,IAAI,MAAM,eAAe,SAAS;AAAA,IAAG,IAAI,iBAAiB,MAAM;AAAA,EAChE,IAAI,MAAM,kBAAkB,SAAS;AAAA,IAAG,IAAI,oBAAoB,MAAM;AAAA,EACtE,IAAI,MAAM,QAAQ,SAAS;AAAA,IAAG,IAAI,SAAS,MAAM;AAAA,EACjD,OAAO;AAAA;AASF,IAAM,oBAAoB,CAAC,YAA0D;AAAA,KACvF,OAAO,MAAM;AAAA,KACb,MAAM,MAAM;AAAA,KACX,OAAO,YAAY,aAAa,OAAO,YAAY,KAAK,CAAC,IAAI,EAAE,SAAS,OAAO,QAAQ;AAAA,EAC3F,MAAM,OAAO;AACf;AAOO,IAAM,oBAAoB,CAAC,WAAyD;AAAA,EACzF,MAAM,UAAU,MAAM,MAAM;AAAA,EAC5B,MAAM,UACJ,CAAC,kBAAkB,eAAe,kBAAkB,QAAQ,EAC5D,OAAO,CAAC,QAAQ,QAAQ,SAAS,SAAS;AAAA,EAC5C,IAAI,OAAO,YAAY;AAAA,IAAI,QAAQ,KAAK,SAAS;AAAA,EACjD,OAAO;AAAA,OACF,OAAO,MAAM;AAAA,OACb;AAAA,OACC,OAAO,YAAY,aAAa,OAAO,YAAY,KAAK,CAAC,IAAI,EAAE,SAAS,OAAO,QAAQ;AAAA,OACvF,QAAQ,WAAW,IAAI,CAAC,IAAI,EAAE,QAAQ,QAAQ;AAAA,EACpD;AAAA;;;ADjKK,IAAM,6BAA6B,WACxC,6BACF;AAEA,IAAM,aAAW,YAAqE;AAAA,EACpF,YAAY,CAAC,MAAM,UAAU,kBAAkB,MAAM,MAAM,IAAI;AAAA,EAC/D,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAEZ,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,EACT,MAAM,CAAC,UAAU,kCAAkC,MAAM;AAAA,EACzD,YAAY;AACd,CAAC;AAEM,IAAM,qCAAqC,MACvC,kBACP,4BACO,iBAAQ,2BAA2B,SAAS,GAAG,UAAQ,CAAC,CACjE;;AE5BF,qBAAS;AACT;AACA;;;AC9BA,IAAM,YAA6E;AAAA,EACjF,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACF;AAGO,IAAM,iBAAiB,CAAC,UAC7B,UAAU,MAAM;;;AClBlB,IAAM,eAAe;AAGd,IAAM,SAAS,CAAC,UAA2B;AAAA,EAChD,MAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,SAAS,OAAO,SAAS,EAAE,GAAG,EAAE;AAAA,EAC1F,OAAO,OAAO,MAAM,MAAM,IAAI,IAAI;AAAA;AAGpC,IAAM,SAAS,CAAC,UACd,MACG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,EACL,KAAK,GAAG;AAWN,IAAM,cAAc,CAAC,UAC1B,OACE,MAAM,QAAQ,KAAK,IACf,MAAM,IAAI,CAAC,SAAkB,OAAO,IAAI,CAAC,IACzC,OAAO,UAAU,WACf,MAAM,MAAM,SAAS,IACrB,CAAC,CACT;AAGK,IAAM,aAAa,CAAC,UACzB,OAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,CAAC,SAAkB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;AAE1F,IAAM,MAAM,CAAC,KAAa,UACxB,UAAU,YAAY,CAAC,IAAI,GAAG,MAAM,MAAM;AAoBrC,IAAM,SAAQ,CAAC,WAA4D;AAAA,EAChF,SAAS,MAAM,YAAY,OAAO,MAAM;AAAA,KACrC,IAAI,UAAU,MAAM,MAAM;AAAA,KAC1B,IAAI,QAAQ,MAAM,IAAI;AAAA,KACtB,IAAI,WAAW,MAAM,OAAO;AAAA,KAC5B,IAAI,gBAAgB,MAAM,eAAe;AAAA,KACzC,IAAI,UAAU,MAAM,WAAW,YAAY,YAAY,MAAM,OAAO,KAAK,YAAY,CAAC;AAAA,KACtF,IAAI,UAAU,MAAM,WAAW,YAAY,YAAY,YAAY,MAAM,MAAM,CAAC;AAAA,KAChF,IACD,eACA,MAAM,mBAAmB,YAAY,YAAY,YAAY,MAAM,cAAc,CACnF;AAAA,KACG,IAAI,UAAU,MAAM,MAAM;AAAA,KAC1B,IAAI,QAAQ,MAAM,IAAI;AAAA,KACtB,IAAI,QAAQ,MAAM,SAAS,YAAY,YAAY,OAAO,MAAM,IAAI,CAAC;AAAA,KACrE,IAAI,UAAU,MAAM,MAAM;AAAA,KAC1B,IAAI,OAAO,MAAM,GAAG;AAAA,KACpB,IAAI,YAAY,MAAM,QAAQ;AACnC;AAQO,IAAM,cAAc,CAAC,WAA4D;AAAA,KACnF,OAAM,KAAK;AAAA,EACd,MAAM,MAAM;AACd;;;AFsCO,IAAM,4BAA4B,WACvC,4BACF;AAEA,IAAM,aAAW,YAAmE;AAAA,EAOlF,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,KAAK,KAAK,OAAO;AAAA,IACvB,SAAS,KAAK,KAAK,UAAU;AAAA,IAC7B,SAAS,KAAK,eAAe,KAAK,KAAK,eAAe;AAAA,IACtD,gBAAgB,KAAK,KAAK,eAAe;AAAA,IACzC,QAAQ,WAAW,KAAK,SAAS;AAAA,IACjC,QAAQ,YAAY,KAAK,SAAS;AAAA,IAClC,eAAe,YAAY,KAAK,cAAc;AAAA,IAC9C,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,KAAK,KAAK,OAAO;AAAA,IACvB,MAAM,MAAM;AAAA,IACZ,MAAM,OAAO,KAAK,OAAO;AAAA,IACzB,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,MAAM;AAAA,IACZ,KAAK,KAAK,KAAK,MAAM;AAAA,IACrB,UAAU,KAAK,KAAK,WAAW;AAAA,EACjC;AAAA,EACA,YAAY,CAAC,UAAU,mCAAmC,MAAM;AAAA,EAEhE,YAAY;AAAA,EAEZ,UAAU;AAAA,EAUV,SAAS,CAAC,YAAY,UACpB,WAAW,aAAa,MAAM,YAAY,UACzC,MAAM,YAAY,aAAa,WAAW,YAAY,MAAM,aAC5D,MAAM,WAAW,aAAa,WAAW,WAAW,MAAM,YAC1D,MAAM,SAAS,aAAa,WAAW,SAAS,MAAM,UACtD,MAAM,SAAS,aAAa,WAAW,SAAS,MAAM,UACtD,MAAM,aAAa,aAAa,WAAW,aAAa,MAAM,cAC9D,MAAM,oBAAoB,aAAa,WAAW,oBAAoB,MAAM,qBAC5E,MAAM,WAAW,aAAa,WAAW,WAAW,MAAM,YAC1D,MAAM,QAAQ,aAAa,WAAW,QAAQ,MAAM,SACpD,MAAM,WAAW,aAAa,WAAW,WAAW,MAAM,YAC1D,MAAM,SAAS,aAAa,WAAW,SAAS,MAAM,UACtD,MAAM,WAAW,aAAa,WAAW,WAAW,YAAY,MAAM,MAAM,OAC5E,MAAM,mBAAmB,aACxB,WAAW,mBAAmB,YAAY,MAAM,cAAc,OAC/D,MAAM,WAAW,aAAa,WAAW,WAAW,WAAW,MAAM,MAAM;AAAA,EAC9E,MAAM,CAAC,UAAU,mCAAmC,MAAM,QAAQ,MAAM;AAAA,EACxE,YAAY;AACd,CAAC;AAQM,IAAM,oCAAoC,MACtC,kBACP,2BACO,iBAAQ,0BAA0B,SAAS,GAAG,UAAQ,CAAC,CAChE;;AG9KF,qBAAS;AACT,uBAAS;AACT;AACA;;;ACrCA;AAmEO,IAAM,aAAa,CACxB,MACA,WAC4B;AAAA,EAC5B,SAAS,eAAe,KAAK,UAAU;AAAA,EACvC,SAAS,KAAK,KAAK,UAAU;AAAA,EAC7B,0BAA0B,KAAK,KAAK,yBAAyB,EAAE,KAAK;AAAA,EACpE,eAAe,KAAK,KAAK,cAAc,EAAE,KAAK;AAAA,EAC9C,cAAc,IAAI,KAAK,eAAe,CAAC;AAAA,EACvC,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAAA,EACzC,aAAa,IAAI,KAAK,cAAc,CAAC;AAAA,EACrC,gBAAgB,IAAI,KAAK,iBAAiB,CAAC;AAAA,EAC3C,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAAA,EACzC,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAAA,EACzC,oBAAoB,eAAe,KAAK,qBAAqB,MAAM;AAAA,EACnE,MAAM,MAAM;AAAA,EACZ,2BAA2B,eAAe,KAAK,0BAA0B;AAAA,EACzE,QAAQ,eAAe,KAAK,SAAS;AAAA,EACrC,eAAe,KAAK,KAAK,cAAc;AAAA,EACvC,MAAM,KAAK,KAAK,OAAO;AAAA,EACvB,kBAAkB,KAAK,KAAK,iBAAiB,EAAE,KAAK;AAAA,EACpD,QAAQ,eAAe,KAAK,SAAS;AAAA,EACrC,cAAc,KAAK,KAAK,aAAa;AACvC;AAEA,IAAM,QAAO,CAAI,UAAyB,SAAY,aAAa,aAAa,aAAa;AAYtF,IAAM,WAAU,CAAC,MAA8B,UACpD,MAAK,MAAM,SAAS,KAAK,OAAO,KAChC,MAAK,MAAM,gBAAgB,KAAK,GAAG,KAAK,cAAc,KACtD,MAAK,MAAM,mBAAmB,KAAK,GAAG,KAAK,iBAAiB,KAC5D,MAAK,MAAM,cAAc,KAAK,YAAY,KAC1C,MAAK,MAAM,gBAAgB,KAAK,cAAc,KAC9C,MAAK,MAAM,eAAe,KAAK,aAAa,KAC5C,MAAK,MAAM,gBAAgB,KAAK,cAAc,KAC9C,MAAK,MAAM,iBAAiB,KAAK,eAAe,KAChD,MAAK,MAAM,gBAAgB,KAAK,cAAc,KAC9C,MAAK,MAAM,gBAAgB,KAAK,cAAc,KAC9C,MAAK,MAAM,2BAA2B,KAAK,GAAG,KAAK,yBAAyB,MAC3E,MAAM,+BAA+B,aACpC,eAAe,MAAM,0BAA0B,MAAM,KAAK,+BAC5D,MAAK,MAAM,eAAe,KAAK,aAAa,MAC3C,MAAM,WAAW,aAAa,eAAe,MAAM,MAAM,MAAM,KAAK,YACpE,MAAM,WAAW,aAAa,eAAe,MAAM,MAAM,MAAM,KAAK,YACpE,MAAM,wBAAwB,aAC7B,eAAe,MAAM,qBAAqB,MAAM,MAAM,KAAK;AAE/D,IAAM,OAAM,CAAC,KAAa,UACxB,UAAU,YAAY,CAAC,IAAI,GAAG,MAAM,MAAM;AAG5C,IAAM,QAAQ,CAAC,UAA+B,UAAU,YAAY,YAAY,OAAO,KAAK;AAY5F,IAAM,UAAU,CAAC,WAAsD;AAAA,KAClE,KAAI,WAAW,MAAM,OAAO;AAAA,KAC5B,KAAI,eAAe,MAAM,gBAAgB,KAAK,CAAC;AAAA,KAC/C,KAAI,cAAc,MAAM,MAAM,aAAa,CAAC;AAAA,KAC5C,KAAI,eAAe,MAAM,MAAM,cAAc,CAAC;AAAA,KAC9C,KAAI,aAAa,MAAM,MAAM,YAAY,CAAC;AAAA,KAC1C,KAAI,gBAAgB,MAAM,MAAM,eAAe,CAAC;AAAA,KAChD,KAAI,eAAe,MAAM,MAAM,cAAc,CAAC;AAAA,KAC9C,KAAI,eAAe,MAAM,MAAM,cAAc,CAAC;AAAA,KAC9C,KAAI,0BAA0B,MAAM,yBAAyB;AAAA,KAC7D,KAAI,oBAAoB,MAAM,mBAAmB;AAAA,KACjD,KAAI,2BAA2B,MAAM,0BAA0B;AAAA,KAC/D,KAAI,UAAU,MAAM,MAAM;AAAA,KAC1B,KAAI,eAAe,MAAM,cAAc;AAAA,KACvC,KAAI,kBAAkB,MAAM,mBAAmB,KAAK,CAAC;AAAA,KACrD,KAAI,UAAU,MAAM,MAAM;AAAA,KAC1B,KAAI,cAAc,KAAK,MAAM,aAAa,CAAC;AAChD;AAWO,IAAM,cAAa,CAAC,WAAuC;AAAA,KAC7D,QAAQ,KAAK;AAAA,EAChB,MAAM,MAAM;AAAA,EACZ,MAAM,MAAM;AAAA,KAKR,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAClE;AAqBO,IAAM,cAAa,CAAC,UAAsC,QAAQ,KAAK;AAEvE,IAAM,UAAS,CAAC,UAA6B,oBAAoB,MAAM;AAwBvE,IAAM,UAAU,CAAC,UACtB,IAA6B,MAAM,QAAQ,QAAQ,OAAO,QAAO,KAAK,CAAC,EAAE,KAChE,aAAI,CAAC,SACV,SAAS,aAAa,OAAO,KAAK,YAAY,WAAW,YAAY,WAAW,MAAM,KAAK,CAC7F,GACO,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CACtC;;;AC/OF;AAgBA,IAAM,WAAW,CAAC,MAAc,UAAkB;AAAA,EAChD,MAAM,OAAO,CAAC,UAAmB,MAAM,SAAS,IAAI,MAAM,QAAQ,QAAQ,EAAE,IAAI;AAAA,EAChF,OAAO,KAAK,IAAI,MAAM,KAAK,KAAK;AAAA;AAQ3B,IAAM,YAAY,CAAC,MAA8B,UACtD,KAAK,SAAS,MAAM,SAAS,KAAK,MAAM,MAAM,IAAI,IACvC,gBACA,aACL,IAAI,MACF,GAAG,QAAO,KAAK,oBAAoB,MAAM,sBAAsB,KAAK,oBAClE,sFACA,wFACA,0FACA,uCACJ,CACF;AAgBC,IAAM,eAAe,CAAC,MAA8B,UACzD,MAAM,YAAY,aAAa,eAAe,MAAM,OAAO,MAAM,KAAK,UAC3D,gBACA,aACL,IAAI,MACF,GAAG,QAAO,KAAK,uBAAuB,MAAM,2BAC1C,GAAG,KAAK,YAAY,KAAK,+BAA+B,KAAK,0BAC7D,yFACA,yFACA,iFACA,+BACJ,CACF;AAuBC,IAAM,UAAS,CAAU,OAA8B,SACrD,aAAI,UAAU,GAAG;AAAA,EACtB,SAAS,UAAU,EAAG,UAAU,IAAI,WAAW,GAAG;AAAA,IAChD,MAAM,OAAO,OAAO;AAAA,IACpB,IAAI,KAAK,IAAI;AAAA,MAAG,OAAO;AAAA,IACvB,OAAc,eAAM,WAAW;AAAA,EACjC;AAAA,EACA,OAAO,OAAO;AAAA,CACf;;;AC5FH;AAMO,IAAM,qBAAqF;AAAA,EAChG,QAAQ;AAAA,EACR,QAAQ;AACV;AAGO,IAAM,sBAAsB,CAAC,UAC3B,aAAI,UAAU,GAAG;AAAA,EACtB,OAAO,UAAU,mBAAmB,QAAQ,YAAW,KAAK,GAAG,IAAI;AAAA,EACnE,OAAO,UAAU,mBAAmB,QAAQ,YAAW,KAAK,GAAG,KAAK;AAAA,CACrE;;;AHoII,IAAM,eAAe,WAAuB,iBAAiB;AAAA,EAClE,sBAAsB;AACxB,CAAC;AAEM,IAAM,uBAAuB,MACzB,kBACP,cACO,iBACL,aAAa,SAAS,GAAG;AAAA,EAMvB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAM,GAAG,WAAW,QAAQ,IAAI;AAAA,EAOhC,MAAM,GAAG,MAAM,aACN,aAAI,UAAU,GAAG;AAAA,IACtB,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IAGvB,OAAO,oBAAoB,IAAI;AAAA,IAC/B,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,QAAQ,IAAI;AAAA,IAGhC,IAAI,SAAS;AAAA,MAAW,OAAO,EAAE,QAAQ,SAAS;AAAA,IAClD,OAAO,UAAU,MAAM,IAAI;AAAA,IAC3B,OAAO,aAAa,MAAM,IAAI;AAAA,IAC9B,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EAMH,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAExC,OAAO,oBAAoB,IAAI;AAAA,IAC/B,MAAM,OAAO,OAAO,QAAQ,IAAI;AAAA,IAChC,IAAI;AAAA,IACJ,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,OAAO,IACZ,KAAK,QACL,aACA,QACA,oBACA,YAAW,IAAI,CACjB;AAAA,IACF,EAAO;AAAA,MACL,OAAO,UAAU,MAAM,IAAI;AAAA,MAC3B,OAAO,aAAa,MAAM,IAAI;AAAA,MAE9B,MAAM,OAAO,WAAW,UAAS,MAAM,MAAM,YAAW,IAAI,CAAC;AAAA,MAC7D,IAAI,SAAS,WAAW;AAAA,QACtB,OAAO,IAAI,KAAK,QAAQ,aAAa,OAAO,QAAO,IAAI,GAAG,IAAI;AAAA,MAChE;AAAA;AAAA,IAEF,MAAM,QAAQ,OAAO,QACnB,QAAQ,IAAI,GACZ,CAAC,QAAQ,QAAQ,aAAa,SAAQ,KAAK,IAAI,CACjD;AAAA,IACA,IAAI,UAAU,aAAa,CAAC,SAAQ,OAAO,IAAI,GAAG;AAAA,MAKhD,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,QAAO,IAAI,qEACZ,4DAA4D,QAAQ,cACpE,gFACA,mFACA,2DACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAgBD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,IAAY,KAAK,QAAQ,aAAa,UAAU,QAAO,IAAI,CAAC;AAAA,IACnE,MAAM,OAAO,OAAO,QAAO,QAAQ,IAAI,GAAG,CAAC,QAAQ,QAAQ,SAAS;AAAA,IACpE,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,QAAO,IAAI,mEACZ,kFACA,kEACA,GAAG,KAAK,0EACZ,CACF;AAAA,IACF;AAAA,GACD;AACH,CAAC,CACH,CACF;;AI7OF,qBAAS;AACT;AACA;AAsBO,IAAM,yBAAyB,WAAiC,yBAAyB;AAEhG,IAAM,aAAW,YAAwE;AAAA,EACvF,YAAY,CAAC,MAAM,UAAU,kBAAkB,MAAM,MAAM,IAAI;AAAA,EAC/D,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAEZ,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,EACT,MAAM,CAAC,UAAU,iCAAiC,MAAM;AAAA,EACxD,YAAY;AACd,CAAC;AAEM,IAAM,iCAAiC,MACnC,kBACP,wBACO,iBAAQ,uBAAuB,SAAS,GAAG,UAAQ,CAAC,CAC7D;;ACzDF,qBAAS;AACT;AACA;;;ACjBA,uBAAS;AAET;;;ACYA,IAAM,aAAgF;AAAA,EACpF,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACF;AAGO,IAAM,oBAAoB,CAAC,UAChC,WAAU,MAAM;;;AChBlB,IAAM,eAAe;AAGrB,IAAM,kBACJ;AACF,IAAM,oBAAoB;AAEnB,IAAM,mBAAmB,CAAC,SAC/B,kBAAkB,KAAK,IAAI,KAAK,gBAAgB,KAAK,IAAI;AAE3D,IAAM,WAAU,CAAC,UAA2B,UAAU,MAAM,CAAC,aAAa,KAAK,KAAK;AAG7E,IAAM,2BAA2B,CACtC,WAEA,OAAO,QAAQ,UAAU,CAAC,CAAC,EACxB,OAAO,EAAE,MAAM,WAAW,OAAO,UAAU,YAAY,iBAAiB,IAAI,CAAC,EAC7E,OAAO,IAAI,WAAW,SAAQ,KAAe,CAAC,EAC9C,IAAI,EAAE,UAAU,IAAI,EACpB,KAAK;AAOH,IAAM,0BAA0B,CAAC,QAAsC;AAAA,EAC5E,IAAI,QAAQ;AAAA,IAAW,OAAO,CAAC;AAAA,EAC/B,MAAM,MAAgB,CAAC;AAAA,EACvB,MAAM,YAAY,oCAAoC,KAAK,GAAG,IAAI,MAAM;AAAA,EACxE,MAAM,KAAK,UAAU,YAAY,GAAG;AAAA,EACpC,IAAI,MAAM,GAAG;AAAA,IACX,MAAM,WAAW,UAAU,MAAM,GAAG,EAAE;AAAA,IACtC,MAAM,QAAQ,SAAS,QAAQ,GAAG;AAAA,IAClC,IAAI,SAAS,KAAK,SAAQ,SAAS,MAAM,QAAQ,CAAC,CAAC;AAAA,MAAG,IAAI,KAAK,UAAU;AAAA,EAC3E;AAAA,EAEA,MAAM,SAAS,IAAI,QAAQ,WAAW,EAAE;AAAA,EACxC,WAAW,QAAQ,OAAO,MAAM,OAAO,GAAG;AAAA,IACxC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,IAC3B,MAAM,OAAO,KAAK,IAAI,OAAO,KAAK,MAAM,GAAG,EAAE;AAAA,IAC7C,IAAI,MAAM,KAAK,iBAAiB,IAAI,KAAK,SAAQ,KAAK,MAAM,KAAK,CAAC,CAAC;AAAA,MAAG,IAAI,KAAK,IAAI,MAAM;AAAA,EAC3F;AAAA,EACA,OAAO;AAAA;;;ACtDT,mBAAS;;;ACYT;AACA;AAmBO,IAAM,aAAa,CACxB,MACA,MAAmB,QAAQ,QACoE;AAAA,EAC/F,MAAM,SAAiC,CAAC;AAAA,EACxC,MAAM,UAAoB,CAAC;AAAA,EAC3B,YAAY,KAAK,QAAQ,OAAO,QAAQ,IAAI,GAAG;AAAA,IAC7C,MAAM,QAAQ,IAAI,IAAI;AAAA,IACtB,IAAI,UAAU,aAAa,UAAU;AAAA,MAAI,QAAQ,KAAK,IAAI,OAAO;AAAA,IAC5D;AAAA,aAAO,OAAO;AAAA,EACrB;AAAA,EACA,OAAO,EAAE,SAAS,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,EAAE,KAAK,GAAG,OAAO;AAAA;AAQzD,IAAM,OAAO,EAAE,GAAG,OAAQ,QAAQ,KAAK,OAAO,MAAM,GAAG,GAAG,GAAG,EAAE;AAC/D,IAAM,SAAS;AAGf,IAAM,YAAY,CAAC,WACjB,KAAK,UACH,OAAO,KAAK,MAAM,EACf,KAAK,EACL,IAAI,CAAC,QAAQ,CAAC,KAAK,OAAO,IAAI,CAAC,CACpC;AAEF,IAAM,SAAS,CAAC,MAAc,WAC5B,WAAW,UAAU,MAAM,GAAG,MAAM,IAAI,IAAI;AASvC,IAAM,OAAO,CAAC,QAA0C,SAA0B;AAAA,EACvF,IAAI,OAAO,KAAK,MAAM,EAAE,WAAW;AAAA,IAAG,OAAO;AAAA,EAC7C,MAAM,QAAQ,SAAS,YAAY,YAAY,EAAE,IAAI,OAAO,KAAK,MAAM,MAAM;AAAA,EAC7E,OAAO,GAAG,UAAU,MAAM,SAAS,WAAW,KAAK,OAAO,OAAO,MAAM,EAAE,SAAS,WAAW;AAAA;AASxF,IAAM,cAAc,CAAC,QAAgB,WAAsD;AAAA,EAChG,IAAI,WAAW;AAAA,IAAI,OAAO,OAAO,KAAK,MAAM,EAAE,WAAW;AAAA,EACzD,OAAO,QAAQ,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG;AAAA,EACtD,IAAI,WAAW,UAAU,SAAS,aAAa,WAAW,aAAa,UAAU,WAAW;AAAA,IAC1F,OAAO;AAAA,EACT;AAAA,EACA,MAAM,WAAW,OAAO,KAAK,QAAQ,WAAW;AAAA,EAChD,MAAM,SAAS,OAAO,OAAO,KAAK,MAAM,WAAW,GAAG,MAAM;AAAA,EAC5D,OAAO,SAAS,WAAW,OAAO,UAAU,gBAAgB,UAAU,MAAM;AAAA;;;ADnFvE,IAAM,SAAS,CAAC,UAA0B,QAAO,KAAK,OAAO,MAAM,EAAE,SAAS,QAAQ;AAGtF,IAAM,WAAW,CAAC,UAA0B,QAAO,KAAK,OAAO,QAAQ,EAAE,SAAS,MAAM;AAQxF,IAAM,cAAc,CAAC,SAAmD;AAAA,EAC7E,MAAM,QAAgC,CAAC;AAAA,EACvC,WAAW,QAAQ,KAAK,MAAM,GAAG,GAAG;AAAA,IAClC,MAAM,KAAK,KAAK,QAAQ,GAAG;AAAA,IAC3B,IAAI,KAAK;AAAA,MAAG,MAAM,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,KAAK,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,EACxE;AAAA,EACA,MAAM,QAAQ,MAAM;AAAA,EACpB,OAAO,UAAU,YAAY,EAAE,MAAM,MAAM,WAAW,GAAG,IAAI,EAAE,MAAM,MAAM,WAAW,IAAI,MAAM;AAAA;AAI3F,IAAM,WAAW,CAAC,MAAc,UACrC,QAAQ,cAAc,OAAO,KAAK;AAEpC,IAAM,QAAO,CAAC,UACZ,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,CAAC,SAAkB,OAAO,IAAI,CAAC,IAAI,CAAC;AAGhE,IAAM,QAAQ,CAAC,SACpB,CAAC,GAAG,IAAI,EACL,OAAO,CAAC,QAAQ,QAAQ,EAAE,EAC1B,KAAK,EACL,KAAK,GAAG;AAON,IAAM,eAAe,CAAC,QAAgB,WAC3C,KAAK,QAAO,8BAA8B,eAAe;AAMpD,IAAM,mBAAmB,CAC9B,MACA,UACoC;AAAA,EACpC,MAAM,UAAkC,CAAC;AAAA,EACzC,WAAW,QAAQ,MAAK,KAAK,SAAS,GAAG;AAAA,IACvC,QAAQ,MAAM,UAAU,YAAY,IAAI;AAAA,IACxC,IAAI,SAAS;AAAA,MAAI,QAAQ,QAAQ,SAAS,SAAS,EAAE;AAAA,EACvD;AAAA,EACA,MAAM,UAAU,MAAK,KAAK,SAAS,EAAE,IAAI,CAAC,SAAS,YAAY,IAAI,EAAE,IAAI;AAAA,EACzE,OAAO;AAAA,IACL,QAAQ,KAAK,KAAK,SAAS;AAAA,IAI3B,MAAM,SAAS,KAAK,KAAK,OAAO,CAAC;AAAA,IACjC,SAAS,KAAK,KAAK,UAAU;AAAA,IAC7B,SAAS,KAAK,KAAK,UAAU;AAAA,IAC7B,gBAAgB,KAAK,KAAK,eAAe;AAAA,IACzC,QAAQ,MAAM,OAAO,KAAK,OAAO,CAAC;AAAA,IAClC,cAAc,aAAa,MAAM,MAAM,OAAO;AAAA,IAC9C,QAAQ,YAAY,KAAK,SAAS;AAAA,IAClC,eAAe,YAAY,KAAK,cAAc;AAAA,IAC9C,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,KAAK,KAAK,OAAO;AAAA,IACvB,MAAM,MAAM;AAAA,IAGZ,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,OAAO,KAAK,OAAO;AAAA,IACzB,QAAQ,MAAM,OAAO;AAAA,IACrB,QAAQ;AAAA,IACR,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,MAAM,MAAM;AAAA,IACZ,KAAK,KAAK,KAAK,MAAM;AAAA,IACrB,UAAU,KAAK,KAAK,WAAW;AAAA,EACjC;AAAA;;;AE7EF,IAAM,QAAoE;AAAA,EACxE,QAAQ,CAAC,YAAY,MAAM;AAAA,EAC3B,MAAM,CAAC,SAAS;AAAA,EAChB,gBAAgB,CAAC,YAAY,MAAM;AAAA,EACnC,QAAQ,CAAC,SAAS;AAAA,EAClB,QAAQ,CAAC,YAAY,MAAM;AAAA,EAC3B,eAAe,CAAC,YAAY,MAAM;AAAA,EAClC,QAAQ,CAAC,SAAS;AAAA,EAClB,MAAM,CAAC,MAAM;AAAA,EACb,UAAU,CAAC,MAAM;AAAA,EACjB,MAAM,CAAC,MAAM;AAAA,EACb,QAAQ,CAAC,SAAS;AAAA,EAClB,QAAQ,CAAC,MAAM;AAAA,EACf,KAAK,CAAC,SAAS;AAAA,EACf,UAAU,CAAC,MAAM;AACnB;AAEA,IAAM,WAA8D;AAAA,EAClE,UAAU,CAAC;AAAA,EACX,MAAM,CAAC,UAAU,cAAc;AAAA,EAC/B,SAAS,CAAC,OAAO,QAAQ;AAC3B;AAGA,IAAM,aAAa;AAGnB,IAAM,aACJ;AAQK,IAAM,WAAW,CAAC,UAA2B;AAAA,EAClD,MAAM,MAAgB,CAAC;AAAA,EACvB,YAAY,QAAO,UAAU,OAAO,QAAQ,KAAK,GAA0C;AAAA,IACzF,IAAI,MAAM,YAAW,aAAa,CAAC,MAAM,SAAS,MAAM,IAAI,GAAG;AAAA,MAC7D,IAAI,KAAK,IAAI,sBAAqB,MAAM,KAAK,GAAG,kBAAkB,MAAM,MAAM;AAAA,IAChF;AAAA,EACF;AAAA,EACA,WAAW,UAAS,SAAS,MAAM,OAAO;AAAA,IACxC,IAAI,MAAM,YAAW,aAAa,MAAM,YAAW;AAAA,MACjD,IAAI,KAAK,GAAG,MAAM,eAAe,SAAQ;AAAA,EAC7C;AAAA,EACA,WAAW,OAAO,CAAC,GAAG,OAAO,KAAK,MAAM,UAAU,CAAC,CAAC,GAAG,GAAG,OAAO,KAAK,MAAM,UAAU,CAAC,CAAC,CAAC,GAAG;AAAA,IAC1F,IAAI,CAAC,WAAW,KAAK,GAAG;AAAA,MAAG,IAAI,KAAK,IAAI,wCAAwC;AAAA,EAClF;AAAA,EAEA,WAAW,QAAQ,yBAAyB,MAAM,MAAM,GAAG;AAAA,IACzD,IAAI,KAAK,WAAW,qCAAqC,YAAY;AAAA,EACvE;AAAA,EACA,WAAW,SAAS,wBAAwB,MAAM,GAAG,GAAG;AAAA,IACtD,IAAI,KAAK,SAAS,qCAAqC,YAAY;AAAA,EACrE;AAAA,EACA,OAAO;AAAA;AAGT,IAAM,YAAY,CAAC,UAA8C,OAAO,UAAU;AAG3E,IAAM,gBAAgB,CAAC,OAAc,MAAmB,QAAQ,QAAQ;AAAA,EAC7E,MAAM,aAAsC,CAAC;AAAA,EAC7C,MAAM,UAAkC,CAAC;AAAA,EACzC,YAAY,MAAM,UAAU,OAAO,QAAQ,MAAM,UAAU,CAAC,CAAC,GAAG;AAAA,IAC9D,IAAI,UAAU,KAAK;AAAA,MAAG,WAAW,QAAQ;AAAA,IACpC;AAAA,cAAQ,QAAQ;AAAA,EACvB;AAAA,EACA,MAAM,SAAS,WAAW,YAAY,GAAG;AAAA,EACzC,MAAM,aAAsC,CAAC;AAAA,EAC7C,YAAY,MAAM,QAAQ,OAAO,QAAQ,MAAM,UAAU,CAAC,CAAC;AAAA,IAAG,WAAW,UAAU,UAAU;AAAA,EAC7F,IAAI,MAAM,aAAa;AAAA,IAAW,WAAW,cAAc,MAAM;AAAA,EACjE,MAAM,SAAS,WAAW,YAAY,GAAG;AAAA,EACzC,OAAO;AAAA,IACL,QAAQ,EAAE,SAAS,OAAO,SAAS,QAAQ,KAAK,YAAY,OAAO,OAAO,EAAE;AAAA,IAC5E;AAAA,EACF;AAAA;AAMF,IAAM,QAAO,CAAC,UAA8B,SAC1C,aAAa,aAAa,aAAa;AAGlC,IAAM,eAAe,CAAC,MAAuC,UAClE,KAAK,aAAa,MAAM,YAAY,SACpC,MAAK,MAAM,SAAS,KAAK,OAAO,KAChC,MAAK,MAAM,QAAQ,KAAK,MAAM,KAC9B,MAAK,MAAM,iBAAiB,KAAK,eAAe,KAChD,MAAK,MAAM,QAAQ,KAAK,MAAM,MAC7B,MAAM,SAAS,aAAa,MAAM,SAAS,KAAK,SACjD,MAAK,MAAM,MAAM,KAAK,IAAI,KAC1B,MAAK,MAAM,UAAU,KAAK,QAAQ,KAClC,MAAK,MAAM,KAAK,KAAK,GAAG,KACxB,MAAK,MAAM,QAAQ,KAAK,MAAM,KAC9B,MAAK,MAAM,MAAM,KAAK,IAAI,MACzB,MAAM,WAAW,aAAa,YAAY,MAAM,MAAM,MAAM,KAAK,YACjE,MAAM,mBAAmB,aAAa,YAAY,MAAM,cAAc,MAAM,KAAK;AAE7E,IAAM,cAAc,CACzB,MACA,OACA,WACe;AAAA,EACf,IAAI,MAAM,WAAW;AAAA,IAAW,OAAO;AAAA,EACvC,IAAI,MAAM,OAAO,KAAK,MAAM,MAAM,CAAC,MAAM,KAAK;AAAA,IAAQ,OAAO;AAAA,EAC7D,IAAI,OAAO,OAAO,QAAQ,SAAS;AAAA,IAAG,OAAO;AAAA,EAC7C,OAAO,aAAa,MAAM,MAAM,OAAO,OAAO,MAAM,MAAM,KAAK,eAAe,UAAU;AAAA;AAGnF,IAAM,cAAc,CACzB,MACA,OACA,QACA,WACe;AAAA,EACf,IAAI,MAAM,WAAW,aAAa,MAAM,aAAa;AAAA,IAAW,OAAO;AAAA,EACvE,IAAI,MAAM,WAAW,aAAa,MAAM,OAAO,KAAK,MAAM,MAAM,CAAC,MAAM,KAAK;AAAA,IAC1E,OAAO;AAAA,EACT,IAAI,OAAO,OAAO,QAAQ,SAAS,KAAK,WAAW;AAAA,IAAI,OAAO;AAAA,EAC9D,OAAO,YAAY,QAAQ,OAAO,OAAO,MAAM,IAAI,UAAU;AAAA;AAS/D,IAAM,cAAc,CAAC,OAAc,WACjC,OAAO,KAAK,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,SACnC,SAAS,MAAM,OAAO,OAAO,OAAO,UAAU,WAAW,EAAE,CAC7D;AAEF,IAAM,cAAc,CAAC,OAAc,WACjC,OAAO,KAAK,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,SAAS,MAAM,OAAO,OAAO,OAAO,SAAS,EAAE,CAAC;AAGhG,IAAM,aAAa,CAAC,UAAyD;AAAA,EAC3E,CAAC,UAAU,MAAM,UAAU,EAAE;AAAA,EAC7B,CAAC,QAAQ,MAAM,SAAS,YAAY,KAAK,OAAO,MAAM,IAAI,CAAC;AAAA,EAC3D,CAAC,WAAW,MAAM,WAAW,EAAE;AAAA,EAC/B,CAAC,gBAAgB,MAAM,mBAAmB,EAAE;AAAA,EAC5C,CAAC,UAAU,MAAM,UAAU,EAAE;AAAA,EAC7B,CAAC,QAAQ,MAAM,QAAQ,EAAE;AAAA,EACzB,CAAC,QAAQ,MAAM,SAAS,YAAY,KAAK,OAAO,MAAM,IAAI,CAAC;AAAA,EAC3D,CAAC,UAAU,MAAM,UAAU,EAAE;AAAA,EAC7B,CAAC,OAAO,MAAM,OAAO,EAAE;AAAA,EACvB,CAAC,YAAY,MAAM,YAAY,EAAE;AAAA,EACjC,CAAC,UAAU,MAAM,WAAW,YAAY,CAAC,IAAI,YAAY,MAAM,MAAM,EAAE,MAAM,GAAG,CAAC;AAAA,EACjF;AAAA,IACE;AAAA,IACA,MAAM,mBAAmB,YAAY,CAAC,IAAI,YAAY,MAAM,cAAc,EAAE,MAAM,GAAG;AAAA,EACvF;AACF;AAEA,IAAM,WAAW,CAAC,OAAc,QAC7B,MAA6C,SAAS;AAEzD,IAAM,QAAQ,CAAC,UACb,OAAO,UAAU,WAAW,UAAU,KAAK,MAAM,OAAO,CAAC,SAAS,SAAS,EAAE,EAAE,WAAW;AAQrF,IAAM,aAAa,CACxB,OACA,QACA,OACA,SACY;AAAA,EACZ,MAAM,OAAmD;AAAA,IACvD,SAAS,MAAM,YAAY,OAAO,MAAM;AAAA,EAC1C;AAAA,EACA,MAAM,UAAoB,CAAC;AAAA,EAC3B,MAAM,MAAM,CAAC,KAAa,UAAsC;AAAA,IAC9D,IAAI,CAAC,MAAM,KAAK;AAAA,MAAG,KAAK,OAAO;AAAA,IAC1B,SAAI,SAAS;AAAA,MAAU,QAAQ,KAAK,GAAG;AAAA;AAAA,EAE9C,YAAY,KAAK,UAAU,WAAW,KAAK;AAAA,IAAG,IAAI,SAAS,OAAO,GAAG;AAAA,MAAG,IAAI,KAAK,KAAK;AAAA,EACtF,IAAI,MAAM,UAAU,MAAM,WAAW;AAAA,IAAW,IAAI,UAAU,YAAY,OAAO,MAAM,CAAC;AAAA,EACxF,IAAI,MAAM,UAAU,MAAM,WAAW;AAAA,IAAW,IAAI,UAAU,YAAY,OAAO,MAAM,CAAC;AAAA,EACxF,IAAI,MAAM,UAAU,MAAM,aAAa,WAAW;AAAA,IAChD,KAAK,cAAc,OAAO,OAAO,OAAO,eAAe;AAAA,EACzD;AAAA,EACA,IAAI,SAAS;AAAA,IAAU,KAAK,UAAU,MAAM;AAAA,EAC5C,IAAI,QAAQ,SAAS;AAAA,IAAG,KAAK,YAAY;AAAA,EACzC,OAAO;AAAA;;;AL5LT,IAAM,OAAO,CAAC,UAAiB,kCAAkC,MAAM,QAAQ,MAAM;AAMrF,IAAM,YAAW,CAAC,UAChB,IAA6B,MAAM,QAAQ,QAAQ,OAAO,KAAK,KAAK,CAAC,EAAE,KAC9D,aAAI,CAAC,SAAU,QAAQ,OAAO,YAAY,iBAAiB,MAAM,KAAK,CAAE,GACxE,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CACtC;AAEF,IAAM,UAAS,CAAC,UAAiB;AAAA,EAC/B,MAAM,UAAU,SAAS,KAAK;AAAA,EAC9B,OAAO,QAAQ,WAAW,IACf,gBACA,aAAI,IAAI,MAAM,GAAG,KAAK,KAAK,MAAM,QAAQ,KAAK,IAAI,IAAI,CAAC;AAAA;AAIpE,IAAM,UAAU,CAAC,MAAkB,OAAc,QAAgB,WAAmB;AAAA,EAClF,MAAM,SAAS,YAAY,MAAM,OAAO,MAAM,MAAM;AAAA,EACpD,MAAM,cAAc,YAAY,MAAM,OAAO,QAAQ,MAAM,MAAM;AAAA,EACjE,OAAO,aAAa,MAAM,KAAK,KAAK,CAAC,UAAU,CAAC,cAC5C,YACC,EAAE,QAAQ,QAAQ,YAAY;AAAA;AAIrC,IAAM,gBAAgB,CAAC,OAAc,QAAgB,UAAiB;AAAA,EACpE,MAAM,UAAU;AAAA,IACd,GAAI,MAAM,SAAS,OAAO,OAAO,UAAU,CAAC;AAAA,IAC5C,GAAI,MAAM,SAAS,OAAO,OAAO,UAAU,CAAC;AAAA,EAC9C;AAAA,EACA,OAAO,QAAQ,WAAW,IACf,gBACA,aACL,IAAI,MACF,GAAG,KAAK,KAAK,kDAAkD,QAAQ,KAAK,IAAI,OAC9E,6EACJ,CACF;AAAA;AAGC,IAAM,aAAW;AAAA,EAEtB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAiB7B,MAAM,GAAG,MAAM,cACZ,WAAW,YAAY,QAAO,IAAI,IAAW,eAAM,KAC3C,iBAAQ,UAAS,IAAI,CAAC,GACtB,aAAI,CAAC,SACV,SAAS,YAAY,YAAY,KAAK,MAAM,QAAQ,QAAQ,UAAU,GAAG,CAC3E,CACF;AAAA,EAOF,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,QAMO,aAAI,UAAU,GAAG;AAAA,IACtB,IAAI,WAAW,aAAa,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IAC/C,IAAI,SAAS,cAAc,KAAK,SAAS,KAAK,QAAQ,KAAK,SAAS,KAAK,OAAO;AAAA,MAC9E,OAAO,EAAE,QAAQ,WAAW,aAAa,KAAK,SAAS,KAAK,KAAK;AAAA,IACnE;AAAA,IACA,OAAO,QAAO,IAAI;AAAA,IAClB,MAAM,OAAO,OAAO,UAAS,IAAI;AAAA,IACjC,IAAI,SAAS;AAAA,MAAW,OAAO,EAAE,QAAQ,SAAS;AAAA,IAClD,OAAO,QAAQ,MAAM,MAAM,cAAc,IAAI,GAAG,OAAO,MAAM,MAAM,YAC9D,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACH,WAAW,GAAG,MAAM,aACX,aAAI,UAAU,GAAG;AAAA,IACtB,OAAO,QAAO,IAAI;AAAA,IAClB,MAAM,SAAS,cAAc,IAAI;AAAA,IACjC,MAAM,OAAO,OAAO,UAAS,IAAI;AAAA,IACjC,IAAI,SAAS,QAAQ,UAAU;AAAA,IAC/B,IAAI,SAAS,WAAW;AAAA,MACtB,MAAM,QAAQ,EAAE,QAAQ,MAAM,QAAQ,KAAK;AAAA,MAC3C,OAAO,cAAc,MAAM,QAAQ,KAAK;AAAA,MACxC,MAAM,aAAa,kCAAkC,KAAK;AAAA,MAC1D,MAAM,OAAO,WAAW,MAAM,QAAQ,OAAO,QAAQ;AAAA,MAQrD,OAAO,UAAU,kBAAkB,IAAI,EAAE,QAAQ,MAAM,IAAI;AAAA,MAC3D,OAAO,IAAI,KAAK,QAAQ,aAAa,QAAQ,YAAY,IAAI;AAAA,MAC7D,SAAS,KAAK,OAAO,OAAO,MAAM;AAAA,IACpC,EAAO;AAAA,MACL,MAAM,QAAQ,QAAQ,MAAM,MAAM,QAAQ,MAAM;AAAA,MAChD,IAAI,UAAU,WAAW;AAAA,QACvB,OAAO,cAAc,MAAM,QAAQ,KAAK;AAAA,QACxC,MAAM,OAAO,WAAW,MAAM,QAAQ,OAAO,QAAQ;AAAA,QAErD,OAAO,UAAU,kBAAkB,IAAI,EAAE,QAAQ,MAAM,KAAK;AAAA,QAC5D,OAAO,IAAI,KAAK,QAAQ,aAAa,OAAO,KAAK,IAAI,GAAG,IAAI;AAAA,QAC5D,IAAI,MAAM;AAAA,UAAQ,SAAS,KAAK,OAAO,OAAO,MAAM;AAAA,MACtD;AAAA;AAAA,IAEF,MAAM,QAAQ,OAAO,UAAS,IAAI;AAAA,IAClC,IAAI,UAAU,WAAW;AAAA,MAEvB,OAAO,OAAc,aACnB,IAAI,MAAM,GAAG,KAAK,IAAI,gEAAgE,CACxF;AAAA,IACF;AAAA,IACA,OAAO,KAAK,OAAO,OAAO;AAAA,GAC3B;AAAA,EACH,QAAQ,GAAG,WAA4B,IAAI,KAAK,QAAQ,aAAa,UAAU,KAAK,IAAI,CAAC;AAC3F;;;ADlDO,IAAM,wBAAwB,WAAgC,wBAAwB;AAMtF,IAAM,gCAAgC,MAClC,kBACP,uBACO,iBAAQ,sBAAsB,SAAS,GAAG,UAAQ,CAAC,CAC5D;;AO5DF,qBAAS;AACT;AACA;;;ACzCO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,WAAW,CAAC,UAAiD;AAAA,EACjE,MAAM,OAA+B,CAAC;AAAA,EACtC,WAAW,OAAO,WAAW;AAAA,IAC3B,MAAM,QAAQ,MAAM;AAAA,IACpB,IAAI,UAAU;AAAA,MAAW,KAAK,OAAO,OAAO,KAAK;AAAA,EACnD;AAAA,EACA,OAAO;AAAA;AAYF,IAAM,iBAAiB,CAC5B,UACuC;AAAA,EACvC,cAAc,IAAI,KAAK,eAAe,CAAC;AAAA,EACvC,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAAA,EACzC,aAAa,IAAI,KAAK,cAAc,CAAC;AAAA,EACrC,gBAAgB,IAAI,KAAK,iBAAiB,CAAC;AAAA,EAC3C,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAAA,EACzC,eAAe,IAAI,KAAK,gBAAgB,CAAC;AAC3C;AASO,IAAM,aAAa,CAAC,aAA+C,UACxE,UAAU,MAAM,CAAC,QAAQ,MAAM,SAAS,aAAa,MAAM,SAAS,YAAW,IAAI;AA2BrF,IAAM,iBAAiB,CAAC,UAAyB,UAAU,KAAK,CAAC,QAAQ,MAAM,SAAS,SAAS;AAEjG,IAAM,eAAe,CAAC,UAAyB;AAAA,EAC7C,IAAI,eAAe,KAAK;AAAA,IAAG;AAAA,EAC3B,MAAM,IAAI,MACR,gBAAgB,MAAM,uEACpB,cAAc,MAAM,wEACpB,gGACA,uFACJ;AAAA;AAIF,IAAM,SAAQ,CAAC,MAAc,UAC3B,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,MAAM;AAG7C,IAAM,UAAU,CAAC,UAA+B,UAAU,YAAY,YAAY,OAAO,KAAK;AAoB9F,IAAM,SAAQ,CAAC,WAAkD;AAAA,KAC5D,SAAS,KAAK;AAAA,KACd,OAAM,WAAW,MAAM,OAAO;AAAA,KAC9B,OAAM,WAAW,KAAK,MAAM,OAAO,CAAC;AAAA,KACpC,OAAM,aAAa,QAAQ,MAAM,YAAY,CAAC;AAAA,KAC9C,OAAM,MAAM,MAAM,EAAE;AAAA,EACvB,UAAU,MAAM;AAAA,EAChB,OAAO,MAAM;AACf;AAWO,IAAM,cAAa,CAAC,UAAiD;AAAA,EAC1E,aAAa,KAAK;AAAA,EAClB,OAAO,KAAK,OAAM,KAAK,GAAG,IAAI,MAAM,GAAG;AAAA;AA+BlC,IAAM,cAAa,CAAC,UAAiD;AAAA,EAC1E,aAAa,KAAK;AAAA,EAClB,OAAO,OAAM,KAAK;AAAA;;;AD9Cb,IAAM,cAAc,WAAsB,cAAc;AAG/D,IAAM,QAAO,CAAI,WAAyB,SAAY,cAAa,aAAa,cAAa;AAE7F,IAAM,aAAW,YAA+C;AAAA,EAU9D,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,IACjC,SAAS,KAAK,KAAK,YAAY,KAAK;AAAA,IACpC,IAAI,MAAM;AAAA,OACP,eAAe,IAAI;AAAA,IACtB,aAAa,IAAI,KAAK,cAAc,EAAE;AAAA,IACtC,IAAI,KAAK,KAAK,OAAO,EAAE;AAAA,IACvB,UAAU,KAAK,KAAK,aAAa,EAAE;AAAA,IACnC,OAAO,KAAK,KAAK,UAAU,MAAM,KAAK;AAAA,EACxC;AAAA,EACA,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAWZ,UAAU,EAAE,QAAQ,0BAA0B,QAAQ,6BAA6B;AAAA,EACnF,SAAS,CAAC,aAAY,UACpB,YAAW,aAAa,MAAM,YAC9B,YAAW,UAAU,MAAM,SAC3B,MAAK,MAAM,IAAI,YAAW,EAAE,KAC5B,MAAK,MAAM,cAAc,YAAW,YAAY,KAChD,MAAK,MAAM,SAAS,YAAW,OAAO,KACtC,MAAK,MAAM,SAAS,YAAW,OAAO,KACtC,WAAW,aAAY,KAAK;AAAA,EAC9B,MAAM,CAAC,UAAU,gBAAgB,MAAM;AAAA,EACvC,YAAY;AACd,CAAC;AAmBM,IAAM,sBAAsB,MACxB,kBAAO,aAAoB,iBAAQ,YAAY,SAAS,GAAG,UAAQ,CAAC,CAAC;;AE9KhF,qBAAS;AACT;AACA;;;ACvBO,IAAM,SAAQ;AAGrB,IAAM,SAAgC;AAAA,EACpC,IAAI;AAAA,EACJ,GAAG;AAAA,EACH,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AACP;AAkBO,IAAM,QAAQ,CAAC,UAA2B;AAAA,EAC/C,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,MAAM,MAAM,KAAK,KAAK,EAAE,KAAK;AAAA,EAC7B,MAAM,QAAQ,wCAAwC,KAAK,GAAG;AAAA,EAC9D,IAAI,UAAU;AAAA,IAAM,OAAO;AAAA,EAC3B,MAAM,OAAO,OAAM,MAAM,MAAM;AAAA,EAC/B,OAAO,SAAS,YAAY,SAAQ,KAAK,MAAM,OAAO,MAAM,MAAM,GAAG,IAAI,IAAI;AAAA;AAYxE,IAAM,UAAU,CAAC,UACtB,MAAM,QAAQ,KAAK,IAAI,MAAM,IAAI,CAAC,UAAmB,OAAO,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,KAAK,KAAK;AAsB9F,IAAM,SAAQ,CAAC,WAAyB;AAAA,EACtC,gBAAgB,MAAM;AAAA,EACtB,mBAAmB,MAAM,uBAAuB,OAAO,MAAM;AAAA,EAC7D,OAAO,MAAM;AAAA,KACT,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,KAC5D,MAAM,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa,OAAO,MAAM,YAAY,EAAE;AAAA,KAClF,MAAM,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,MAAM,GAAG;AAAA,KAC7C,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;AAAA,KACtD,MAAM,eAAe,YAAY,CAAC,IAAI,EAAE,WAAW,OAAO,MAAM,UAAU,EAAE;AAAA,KAC5E,MAAM,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;AAAA,KACzD,MAAM,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa,MAAM,aAAa;AAAA,KAC1E,MAAM,aAAa,YAAY,CAAC,IAAI,EAAE,UAAU,MAAM,SAAS;AAAA,KAC/D,MAAM,qBAAqB,YAC3B,CAAC,IACD,EAAE,iBAAiB,MAAM,mBAAmB,MAAM,IAAI;AAAA,KACtD,MAAM,qBAAqB,YAC3B,CAAC,IACD,EAAE,iBAAiB,OAAO,MAAM,gBAAgB,EAAE;AACxD;AAYO,IAAM,cAAa,CAAC,WAAiD;AAAA,KACvE,OAAM,KAAK;AAAA,EACd,IAAI,MAAM;AAAA,KACN,MAAM,sBAAsB,YAAY,CAAC,IAAI,EAAE,kBAAkB,MAAM,kBAAkB;AAC/F;AAUO,IAAM,cAAa,CAAC,UAAgD,OAAM,KAAK;AAE/E,IAAM,aAAW,YAA6C;AAAA,EAiBnE,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,IACjC,gBAAgB,QAAQ,KAAK,eAAe;AAAA,IAC5C,IAAI,MAAM;AAAA,IACV,aAAa,IAAI,KAAK,cAAc,MAAK;AAAA,IACzC,IAAI,KAAK,KAAK,OAAO,EAAE;AAAA,IACvB,OAAO,KAAK,KAAK,UAAU,EAAE;AAAA,IAC7B,WAAW,MAAM,KAAK,UAAU;AAAA,IAChC,QAAQ,KAAK,KAAK,WAAW,EAAE;AAAA,IAC/B,aAAa,KAAK,KAAK,cAAc,EAAE;AAAA,IACvC,gBAAgB,KAAK,KAAK,iBAAiB,EAAE;AAAA,IAG7C,mBAAmB,KAAK,KAAK,oBAAoB,KAAK;AAAA,IACtD,UAAU,KAAK,KAAK,aAAa,EAAE;AAAA,IAGnC,iBAAiB,KAAK,KAAK,kBAAkB,KAAK;AAAA,IAClD,OAAO,KAAK,KAAK,UAAU,EAAE;AAAA,IAC7B,kBAAkB,KAAK,KAAK,mBAAmB,MAAM;AAAA,IACrD,iBAAiB,IAAI,KAAK,kBAAkB,MAAK;AAAA,EACnD;AAAA,EACA,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAoBZ,UAAU,EAAE,QAAQ,yBAAyB,QAAQ,4BAA4B;AAAA,EACjF,SAAS,CAAC,aAAY,UACpB,YAAW,wBAAwB,MAAM,uBAAuB,SAChE,YAAW,UAAU,MAAM,SAC3B,YAAW,oBAAoB,MAAM,oBACpC,MAAM,WAAW,aAAa,YAAW,WAAW,MAAM,YAC1D,MAAM,OAAO,aAAa,YAAW,OAAO,MAAM,QAClD,MAAM,iBAAiB,aAAa,YAAW,iBAAiB,MAAM,kBACtE,MAAM,aAAa,aAAa,YAAW,aAAa,MAAM,cAC9D,MAAM,YAAY,aAAa,YAAW,YAAY,MAAM,aAC5D,MAAM,UAAU,aAAa,YAAW,UAAU,MAAM,WAIxD,MAAM,qBAAqB,aAC1B,YAAW,qBAAqB,MAAM,sBACvC,MAAM,eAAe,aAAa,YAAW,eAAe,MAAM,gBAClE,MAAM,iBAAiB,aAAa,YAAW,iBAAiB,MAAM,kBACtE,MAAM,qBAAqB,aAC1B,YAAW,qBAAqB,MAAM;AAAA,EAE1C,MAAM,CAAC,UAAU,eAAe,MAAM;AAAA,EACtC,YAAY;AACd,CAAC;;;ADUM,IAAM,aAAa,WAAqB,aAAa;AAWrD,IAAM,qBAAqB,MACvB,kBAAO,YAAmB,iBAAQ,WAAW,SAAS,GAAG,UAAQ,CAAC,CAAC;;AEhO9E,qBAAS;AACT;AACA;;;AC6CO,IAAM,WAAW,CAAC,gBAAyB,kBAAkC;AAAA,EAClF,IAAI,CAAC;AAAA,IAAgB,OAAO;AAAA,EAG5B,IAAI,gBAAgB;AAAA,IAAG,OAAO;AAAA,EAC9B,OAAO,oCAAoC,OAAO,aAAa;AAAA;AAmC1D,IAAM,SAAQ,CAAC,WAAsD;AAAA,EAC1E,mBAAmB,MAAM,uBAAuB,QAAQ,MAAM;AAAA,EAC9D,OAAO,MAAM;AAAA,KACT,MAAM,aAAa,OAAO,CAAC,IAAI,EAAE,UAAU,MAAM,SAAS;AAAA,KAC1D,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,KAC5D,MAAM,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa,OAAO,MAAM,YAAY,EAAE;AAAA,KAClF,MAAM,OAAO,aAAa,MAAM,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,MAAM,GAAG;AAAA,KAChE,MAAM,sBAAsB,YAC5B,CAAC,IACD,EAAE,kBAAkB,OAAO,MAAM,iBAAiB,EAAE;AAC1D;;;ADUO,IAAM,eAAe,WAAuB,eAAe;AAalE,IAAM,aAAW,YAAuD;AAAA,EACtE,YAAY,CAAC,MAAM,UAAU;AAAA,IAC3B,MAAM,iBAAiB,KAAK,KAAK,oBAAoB,IAAI;AAAA,IACzD,MAAM,gBAAgB,IAAI,KAAK,mBAAmB,EAAE;AAAA,IACpD,OAAO;AAAA,MACL,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,MACjC,IAAI,MAAM;AAAA,MACV,mBAAmB;AAAA,MACnB,aAAa,IAAI,KAAK,cAAc,EAAE;AAAA,MACtC,IAAI,KAAK,KAAK,OAAO,EAAE;AAAA,MACvB,kBAAkB;AAAA,MAClB,UAAU,SAAS,gBAAgB,aAAa;AAAA,MAChD,UAAU,KAAK,KAAK,aAAa,EAAE;AAAA,MACnC,OAAO,KAAK,KAAK,UAAU,MAAM,KAAK;AAAA,IACxC;AAAA;AAAA,EAcF,YAAY,MAAM;AAAA,EAElB,YAAY,CAAC,WAAW,KAAK,OAAM,KAAK,GAAG,IAAI,MAAM,GAAG;AAAA,EAaxD,UAAU,EAAE,QAAQ,2BAA2B,QAAQ,8BAA8B;AAAA,EACrF,SAAS,CAAC,aAAY,UACpB,YAAW,UAAU,MAAM,SAI3B,YAAW,cAAc,MAAM,YAAY,OAC3C,YAAW,wBAAwB,MAAM,uBAAuB,WAC/D,MAAM,sBAAsB,aAC3B,YAAW,sBAAsB,MAAM,uBACxC,MAAM,iBAAiB,aAAa,YAAW,iBAAiB,MAAM,kBACtE,MAAM,OAAO,aAAa,YAAW,OAAO,MAAM,QAClD,MAAM,YAAY,aAAa,YAAW,YAAY,MAAM;AAAA,EAC/D,MAAM,CAAC,UAAU,iBAAiB,MAAM;AAAA,EACxC,YAAY;AACd,CAAC;AAgBM,IAAM,uBAAuB,MACzB,kBAAO,cAAqB,iBAAQ,aAAa,SAAS,GAAG,UAAQ,CAAC,CAAC;;AEnNlF,qBAAS;AACT;AACA;AA8BO,IAAM,cAAc,WAAsB,cAAc;AAGxD,IAAM,iBAAiB,CAAC,WAAuC;AAAA,EACpE,SAAS,MAAM,WAAW;AAAA,EAC1B,QAAQ,MAAM;AAChB;AAGO,IAAM,iBAAiB,CAAC,WAA6D;AAAA,EAC1F,SAAS,MAAM,WAAW;AAC5B;AAEA,IAAM,aAAW,YAAuC;AAAA,EACtD,YAAY,CAAC,MAAM,UAAU;AAAA,IAC3B,MAAM,MAAM;AAAA,IACZ,OAAO;AAAA,MACL,SAAS,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU;AAAA,MACzD,SAAS,MAAM,QAAQ,IAAI,OAAO,IAAI,IAAI,QAAQ,SAAS;AAAA,MAC3D,QAAQ,MAAM;AAAA,IAChB;AAAA;AAAA,EAEF,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAEZ,UAAU,EAAE,QAAQ,mBAAmB,QAAQ,0BAA0B;AAAA,EACzE,SAAS,CAAC,aAAY,UAAU,YAAW,aAAa,MAAM,WAAW;AAAA,EACzE,MAAM,CAAC,UAAU,SAAS,MAAM;AAAA,EAChC,YAAY;AACd,CAAC;AAEM,IAAM,sBAAsB,MACxB,kBAAO,aAAoB,iBAAQ,YAAY,SAAS,GAAG,UAAQ,CAAC,CAAC;;ACxDzE,IAAM,uBAA0C,OAAO,OAAO;AAAA,EACnE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAsDM,IAAM,qBAA6C,OAAO,OAAO;AAAA,EACtE,SACE;AAAA,EACF,WAAW;AAAA,EACX,eAAe;AAAA,EACf,UAAU;AAAA,EACV,UAAU;AAAA,EACV,MAAM;AACR,CAAC;AAyBD,IAAM,KAAK;AACX,IAAM,SAAS;AACf,IAAM,UAAU;AAEhB,IAAM,YAAW,CACf,QACA,UACA,UACa;AAAA,EACb,MAAM,QAAkB,CAAC;AAAA,EACzB,IAAI,CAAC,GAAG,KAAK,OAAM,IAAI;AAAA,IAAG,MAAM,KAAK,UAAU,OAAM,6BAA6B;AAAA,EAClF,IAAI,CAAC,GAAG,KAAK,OAAM,SAAS;AAAA,IAAG,MAAM,KAAK,eAAe,OAAM,+BAA+B;AAAA,EAC9F,IAAI,CAAC,GAAG,KAAK,OAAM,QAAQ;AAAA,IAAG,MAAM,KAAK,cAAc,OAAM,iCAAiC;AAAA,EAC9F,YAAY,QAAO,WAAW;AAAA,IAC5B,CAAC,iBAAiB,OAAM,aAAa;AAAA,IACrC,CAAC,YAAY,OAAM,QAAQ;AAAA,EAC7B,GAAY;AAAA,IACV,IAAI,WAAW,QAAQ,CAAC,OAAO,KAAK,MAAM,GAAG;AAAA,MAC3C,MAAM,KAAK,GAAG,YAAW,wDAAwD;AAAA,IACnF;AAAA,EACF;AAAA,EACA,IAAI,OAAM,aAAa,OAAM;AAAA,IAAe,MAAM,KAAK,yCAAyC;AAAA,EAMhG,MAAM,SAAS,CAAC,UAA8B,WAC5C,aAAa,YAAY,YAAY;AAAA,EACvC,MAAM,UAAyC;AAAA,IAC7C,CAAC,OAAO,MAAM,cAAc,cAAc,GAAG,SAAS,KAAK;AAAA,IAC3D,CAAC,OAAO,MAAM,kBAAkB,kBAAkB,GAAG,SAAS,SAAS;AAAA,EACzE;AAAA,EACA,IAAI,OAAM,aAAa,MAAM;AAAA,IAC3B,QAAQ,KAAK,CAAC,OAAO,MAAM,aAAa,aAAa,GAAG,SAAS,IAAI,CAAC;AAAA,EACxE;AAAA,EACA,MAAM,OAAO,IAAI;AAAA,EACjB,YAAY,QAAO,aAAY,SAAS;AAAA,IACtC,IAAI,QAAQ,KAAK,QAAO,KAAK,KAAK,IAAI,MAAK;AAAA,MAAG;AAAA,IAC9C,KAAK,IAAI,MAAK;AAAA,IACd,MAAM,KAAK,GAAG,uDAAsD;AAAA,EACtE;AAAA,EACA,OAAO;AAAA;AAIF,IAAM,oBAAoB,CAAC,SAAwB,CAAC,MAAyB;AAAA,EAGlF,QAAQ,cAAc,kBAAkB,gBAAgB,SAAS;AAAA,EAEjE,MAAM,QAAQ,OAAO,QAAQ,IAAI,EAAE,OAAO,IAAI,WAAW,UAAU,SAAS;AAAA,EAC5E,MAAM,WAAmC;AAAA,OACpC;AAAA,OACA,OAAO,YAAY,KAAK;AAAA,EAC7B;AAAA,EAGA,MAAM,WAA8B;AAAA,IAClC,OAAO,gBAAgB,SAAS;AAAA,IAChC,WAAW,oBAAoB,SAAS;AAAA,IACxC,MAAM,eAAe,SAAS;AAAA,EAChC;AAAA,EACA,MAAM,QAAQ,UAAS,UAAU,UAAU,MAAK;AAAA,EAChD,IAAI,MAAM,SAAS;AAAA,IAAG,MAAM,IAAI,MAAM,uBAAuB,MAAM,KAAK,IAAI,GAAG;AAAA,EAC/E,MAAM,QAA2C;AAAA,IAC/C,CAAC,aAAa,SAAS,eAAe,SAAS,IAAI;AAAA,EACrD;AAAA,EACA,IAAI,SAAS,aAAa;AAAA,IAAM,MAAM,KAAK,CAAC,QAAQ,SAAS,UAAU,SAAS,QAAQ,CAAC;AAAA,EACzF,OAAO;AAAA,IACL,QAAQ,MAAM,IAAI,EAAE,MAAM,QAAQ,aAAa,EAAE,MAAM,QAAQ,OAAO,EAAE;AAAA,IACxE,OAAO,EAAE,SAAS,SAAS,OAAO,SAAS,SAAS,UAAU;AAAA,IAC9D,MAAM,EAAE,OAAO,sBAAsB,QAAQ,SAAS,KAAK;AAAA,IAC3D,OAAO,MAAM,IAAI,EAAE,MAAM,aAAa;AAAA,MACpC,SAAS,SAAS;AAAA,MAClB,QAAQ,CAAC,SAAS,SAAS;AAAA,MAC3B;AAAA,MACA;AAAA,IACF,EAAE;AAAA,EACJ;AAAA;;AC3LF,IAAM,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBf,IAAM,WAAW,CAAC,UAAiB,KAAK;AAGxC,IAAM,aACJ,qEACA,iGACA,sEACA,mFACA;AAEF,IAAM,WAAW,GAAG,WAAsC;AAAA,EACxD,MAAM,QAAQ,CAAC,GAAG,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG;AAAA,EAC7C,OAAO;AAAA,SACA,KAAK;AAAA,QACN;AAAA,8BACsB,KAAK;AAAA,8CACW,KAAK;AAAA,oBAC/B,KAAK,+DAA+D,KAAK;AAAA;AAAA,eAE9E,KAAK,mCAAmC,KAAK;AAAA;AAAA;AAAA;AAK5D,IAAM,YAAY,GAAG,YAAuC;AAAA,UAClD,MAAM;AAAA,+BACe,MAAM;AAAA,oBACjB,MAAM,gCAAgC,MAAM;AAAA,qBAC3C,MAAM,qDAAqD,MAAM,sBAAsB,MAAM;AAAA;AAAA,gBAElG,MAAM,qCAAqC,MAAM,sBAAsB,MAAM;AAAA;AAAA;AAI7F,IAAM,WAAW,CAAC,SAAqD;AAAA,EACrE,MAAM,SAAS,CAAC,GAAG,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG;AAAA,EAC/C,MAAM,OAAO,UAAU,gEAAgE,KAAK;AAAA,EAC5F,MAAM,SAAS,YAAY,qBAAqB,KAAK;AAAA,EACrD,OAAO;AAAA,SACA,KAAK,eAAe,KAAK,kBAAkB;AAAA,8BACtB,KAAK,WAAW;AAAA,oBAC1B,4BAA4B,KAAK;AAAA,oBACjC,KAAK;AAAA,wBACD,KAAK,UAAU;AAAA;AAAA,eAExB,KAAK,mCAAmC,KAAK,UAAU;AAAA;AAAA;AAAA;AAKtE,IAAM,YAAY,CAAC,UAAuD;AAAA,EACxE,MAAM,QACJ,sEACA,iBAAiB,SAAS,MAAM,MAAM,wBAAwB,SAAS,MAAM,MAAM,UACnF;AAAA,EACF,OAAO;AAAA,WACE,MAAM,gBAAgB,MAAM,gCAAgC,MAAM;AAAA,2BAClD,oCAAoC,MAAM,UAAU,MAAM;AAAA,mBAClE,MAAM,UAAU,MAAM,iDAAiD,MAAM,kBAAkB,MAAM;AAAA;AAAA;AAKxH,IAAM,cAAc,CAAC,WAA2B;AAAA,oBAC5B,0DAA0D;AAAA;AAOvE,IAAM,qBAAqB,CAAC,SAAwB,CAAC,MAAc;AAAA,EACxE,MAAM,WAAW,kBAAkB,MAAK;AAAA,EACxC,MAAM,WAAW,SAAS,OACvB,IAAI,CAAC,UAAU,MAAM,MAAM,EAC3B,OAAO,CAAC,WAAW,WAAW,SAAS,KAAK,MAAM;AAAA,EACrD,OAAO;AAAA,IACL;AAAA,IACA,GAAG,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,EAAE,IAAI,WAAW;AAAA,IACzC,SAAS,QAAQ;AAAA,IACjB,UAAU,QAAQ;AAAA,IAClB,GAAG,SAAS,MAAM,IAAI,QAAQ;AAAA,IAC9B,GAAG,SAAS,OAAO,IAAI,SAAS;AAAA,IAChC;AAAA;AAAA;AAAA,EACF,EAAE,KAAK,EAAE;AAAA;;ACxGX;AACA;AACA;;;ACkBA,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;AC7CO,IAAM,cAAc;AACpB,IAAM,cAAc;AAUpB,IAAM,aAAY,CAAC,UACxB,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK;AAEjF,IAAM,cAAa,CAAC,WAAsD;AAAA,EAC/E,OAAO,WAAU,MAAM,KAAK,EAAE,KAAK,GAAG;AAAA,EACtC,QAAQ,MAAM;AAChB;AAMO,IAAM,cAAa,CAAC,WAAmD;AAAA,EAC5E,OAAO,WAAU,MAAM,KAAK,EAAE,KAAK,GAAG;AAAA,EACtC,QAAQ,MAAM;AAChB;AAEO,IAAM,QAAO,CAAC,MAAyD,WAC5E,KAAK,KAAK,CAAC,QAAQ,IAAI,WAAW,MAAM;AAEnC,IAAM,gBAAe,CAC1B,KACA,WACoB;AAAA,EACpB,OAAO,WAAU,IAAI,UAAU,YAAY,CAAC,IAAI,IAAI,MAAM,MAAM,GAAG,CAAC;AAAA,EACpE,QAAQ,MAAM;AAChB;AAEO,IAAM,WAAU,CAAC,aAA4B,UAClD,WAAU,YAAW,KAAK,EAAE,KAAK,GAAG,MAAM,WAAU,MAAM,KAAK,EAAE,KAAK,GAAG;;;AD2DpE,IAAM,cAAc,WAAsB,cAAc;AAW/D,IAAM,WAAW,CAAC,UAChB,iBAAiB,OAAO,MAAM,QAAQ,QAAQ,OAAc,wBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,KACzE,aAAI,CAAC,SAAS;AAAA,EACnB,IAAI,SAAS;AAAA,IAAY,OAAO;AAAA,EAChC,MAAM,MAAM,MAAK,MAAM,MAAM,MAAM;AAAA,EACnC,OAAO,QAAQ,YAAY,YAAY,cAAa,KAAK,KAAK;AAAA,CAC/D,CACH;AAGF,IAAM,kBAAiB,CAAC,SACtB,SAAS,aAAa,YAAY;AAE7B,IAAM,sBAAsB,MACxB,kBACP,aACO,iBACL,YAAY,SAAS,GAAG;AAAA,EAKtB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAC7B,MAAa,YAAG,UAAU,GAAG,QAAQ;AAAA,IACnC,OAAO,gBAAe,OAAO,SAAS,IAAI,CAAC;AAAA,GAC5C;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACrE,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,WAAW;AAAA,MAAW;AAAA,IAC1B,MAAM,OAAO,OAAO,SAAS,IAAI;AAAA,IAGjC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,gBAAgB,KAAK,MAAM;AAAA,MACpD,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,IAAI;AAAA,MACrD,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAKxC,MAAM,SAAS,gBAAe,OAAO,SAAS,IAAI,CAAC;AAAA,IACnD,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACrE,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OACL,KAAK,QACL,aACA,MACO,yBAAiB,YAAW,IAAI,CAAC,CAC1C;AAAA,IACF,EAAO,SAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MACjC,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,sBAAc,YAAW,IAAI,CAAC,CAAC;AAAA,IACtF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,SAAS,IAAI,CAAC;AAAA,IAClD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,gBAAgB,KAAK,yDACnB,iFACA,+EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAOD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACO,yBAAiB,EAAE,QAAQ,KAAK,OAAO,CAAC,CACjD;AAAA,GACD;AACH,CAAC,CACH,CACF;;;AE5JF,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;ACrDA;AACA;AAMO,IAAM,cAAc;AACpB,IAAM,cAAc;AAU3B,IAAM,OAAM,CAAC,UAAmB;AAAA,EAC9B,MAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,SAAS,CAAC;AAAA,EACpE,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAAA;AAQ5C,IAAM,WAAW,CAAC,UAA6B;AAAA,EAC7C,MAAM,MAAiB,MAAM,QAAQ,KAAK,IACtC,QACA,OAAO,UAAU,WACf,MAAM,MAAM,GAAG,IACf,CAAC;AAAA,EACP,MAAM,SAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,UAAU,UAAU,EAAE;AAAA,EACnF,OAAO,CAAC,GAAG,IAAI,IAAI,MAAK,CAAC,EAAE,KAAK;AAAA;AASlC,IAAM,aAAa,CAAC,UAClB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAC/D,OAAO,KAAK,KAAK,EAAE,KAAK,IACxB,CAAC;AAGP,IAAM,SAAQ,CAAC,WAAsB;AAAA,EACnC,SAAS,MAAM,WAAW;AAAA,EAC1B,OAAO,MAAM,SAAS;AAAA,EACtB,QAAQ,MAAM,WAAW,QAAQ,MAAM;AAAA,EACvC,QAAQ,OAAO,MAAM,UAAU,CAAC;AAAA,EAChC,WAAW,MAAM,aAAa;AAAA,EAQ9B,QAAQ,SAAS,MAAM,MAAM,EAAE,KAAK,GAAG;AAAA,EACvC,UAAU,MAAM,YAAY;AAC9B;AAEO,IAAM,cAAa,CAAC,WAAsD;AAAA,KAC5E,OAAM,KAAK;AAAA,EACd,QAAQ,MAAM;AAChB;AAEO,IAAM,cAAa,CAAC,WAAmD;AAAA,KACzE,OAAM,KAAK;AAAA,EACd,QAAQ,MAAM;AAChB;AAEA,IAAM,gBAAe,CAAC,MAAoC,WAAsC;AAAA,EAC9F,SAAS,KAAK,KAAK,OAAO;AAAA,EAC1B,OAAO,KAAK,KAAK,KAAK;AAAA,EAMtB,QAAQ,KAAK,KAAK,QAAQ,IAAI;AAAA,EAC9B,QAAQ,KAAI,KAAK,MAAM;AAAA,EACvB,WAAW,KAAK,KAAK,SAAS;AAAA,EAC9B,QAAQ,SAAS,KAAK,MAAM;AAAA,EAC5B,UAAU,KAAK,KAAK,QAAQ;AAAA,EAC5B,QAAQ,WAAW,KAAK,MAAM;AAAA,EAE9B,QAAQ,MAAM;AAChB;AAMO,IAAM,WAAU,CAAC,aAA4B,UAClD,YAAW,aAAa,MAAM,WAAW,OACzC,YAAW,WAAW,MAAM,SAAS,OACrC,YAAW,YAAY,MAAM,WAAW,UACxC,YAAW,YAAY,MAAM,UAAU,MACvC,YAAW,eAAe,MAAM,aAAa,OAC7C,YAAW,cAAc,MAAM,YAAY,OAC3C,YAAW,OAAO,KAAK,GAAG,MAAM,SAAS,MAAM,MAAM,EAAE,KAAK,GAAG;AAe1D,IAAM,iBAAiB,CAAC,UAC7B,iBACE,OAAO,MAAM,QAAQ,QAAQ,OAAc,sBAAc,EAAE,QAAQ,MAAM,OAAO,CAAC,CAAC,CACpF,EAAE,KAAY,aAAI,CAAC,SAAU,SAAS,aAAa,aAAa,cAAa,MAAM,KAAK,CAAE,CAAC;AAUtF,IAAM,WAAW,CAAC,UACvB,eAAe,KAAK,EAAE,KAAY,kBAAS,gBAAgB,MAAa,iBAAQ,SAAS,CAAC,CAAC;AAGtF,IAAM,kBAAiB,CAAC,SAC7B,SAAS,aAAa,YAAY;;;ADrB7B,IAAM,cAAc,WAAsB,cAAc;AAExD,IAAM,sBAAsB,MACxB,kBACP,aACO,iBACL,YAAY,SAAS,GAAG;AAAA,EAMtB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAY7B,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,OAAO,gBACL,OAAO,WAAW,YAAY,SAAS,IAAI,IAAI,eAAe,IAAI,CACpE;AAAA,GACD;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACrE,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,WAAW;AAAA,MAAW;AAAA,IAI1B,MAAM,OAAO,OAAO,eAAe,IAAI;AAAA,IAGvC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,gBAAgB,KAAK,MAAM;AAAA,MACpD,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,IAAI;AAAA,MACrD,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAKxC,MAAM,SAAS,gBAAe,OAAO,SAAS,IAAI,CAAC;AAAA,IACnD,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACrE,OAAO,YAAW,aAAa,YAAW,IAAI,GAAG,KAAK;AAAA,IACtD,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OACL,KAAK,QACL,aACA,MACO,yBAAiB,YAAW,IAAI,CAAC,CAC1C;AAAA,IACF,EAAO,SAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MACjC,OAAO,OAAO,KAAK,QAAQ,aAAa,MAAa,sBAAc,YAAW,IAAI,CAAC,CAAC;AAAA,IACtF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,SAAS,IAAI,CAAC;AAAA,IAClD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,gBAAgB,KAAK,4DACnB,iFACA,+EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAOD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACO,yBAAiB,EAAE,QAAQ,KAAK,OAAO,CAAC,CACjD;AAAA,GACD;AACH,CAAC,CACH,CACF;;;AH3KK,IAAM,2BAA2B,CACtC,IACA,QACA,SAAwB,CAAC,GACzB,UAAmC,CAAC,MAE7B,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WAAW,OAAc,aAAI;AAAA,IACjC,OAAO,CAAC,UAAW,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,IAC3E,KAAK,MAAM,kBAAkB,MAAK;AAAA,EACpC,CAAC;AAAA,EACD,MAAM,QAAQ,CAAO,aAAyC;AAAA,IAC5D,MAAM,OAAO,SAAS,KAAmB,qBAAO,CAAC;AAAA,IACjD,OAAO,QAAQ,UAAU,YAAY,OAAO,KAAK,KAAK,MAAM,QAAQ,KAAK,CAAC;AAAA;AAAA,EAE5E,MAAM,OAAO,OAAO,MAClB,YAAY,GAAG,WAAW;AAAA,IACxB,OAAO,CAAC,GAAG,SAAS,KAAK,KAAK;AAAA,IAC9B,QAAQ,SAAS,KAAK;AAAA,IACtB;AAAA,EACF,CAAC,CACH;AAAA,EACA,MAAM,QAAQ,OAAO,MAAM,aAAa,GAAG,iBAAiB,KAAK,SAAS,OAAO,OAAO,CAAC,CAAC;AAAA,EAG1F,MAAM,QAAQ,OAAc,aAC1B,SAAS,MAAM,IAAI,CAAC,SAClB,MACE,YAAY,GAAG,MAAM,KAAK,aAAa;AAAA,IACrC,SAAS,KAAK;AAAA,IACd,QAAQ,CAAC,GAAG,KAAK,MAAM;AAAA,IACvB;AAAA,IACA,QAAQ,KAAK;AAAA,EACf,CAAC,CACH,CACF,CACF;AAAA,EACA,MAAM,SAAS,OAAc,aAC3B,SAAS,OAAO,IAAI,CAAC,UACnB,MACE,WAAW,GAAG,MAAM,MAAM,cAAc;AAAA,IACtC,MAAM;AAAA,IACN,WAAW;AAAA,IACX,QAAQ,MAAM;AAAA,IACd;AAAA,IACA,MAAM;AAAA,IACN,MAAM,MAAM;AAAA,EACd,CAAC,CACH,CACF,CACF;AAAA,EACA,OAAO,EAAE,UAAU,QAAQ,OAAO,MAAM,MAAM;AAAA,CAC/C;;AKtFH,qBAAS;AACT;AACA;AAoCO,IAAM,YAAY,WAAoB,YAAY;AAGlD,IAAM,cAAa,CAAC,WAAoB,KAAK,OAAM,KAAK,GAAG,MAAM,OAAO,MAAM,IAAI,EAAE;AAE3F,IAAM,SAAQ,CAAC,WAAoB;AAAA,EACjC,OAAO,OAAO,MAAM,SAAS,CAAC;AAAA,EAC9B,QAAQ,OAAO,MAAM,UAAU,GAAG;AAAA,EAClC,MAAM,MAAM,QAAQ,KAAK,OAAO,MAAM,IAAI;AAAA,EAC1C,QAAQ,MAAM,WAAW,OAAO,MAAM;AAAA,EACtC,SAAS,OAAO,MAAM,WAAW,CAAC;AAAA,KAC9B,MAAM,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;AACzD;AAEA,IAAM,aAAW,YAAmC;AAAA,EAClD,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,OAAO,IAAI,KAAK,UAAU,CAAC;AAAA,IAC3B,QAAQ,IAAI,KAAK,WAAW,GAAG;AAAA,IAC/B,MAAM,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAAA,IACxD,MAAM,MAAM;AAAA,IACZ,QAAQ,KAAK,cAAc,KAAK,KAAK,cAAc;AAAA,IACnD,SAAS,IAAI,KAAK,YAAY,CAAC;AAAA,IAC/B,MAAM,MAAM;AAAA,EACd;AAAA,EACA,YAAY,CAAC,UAAU,SAAS,MAAM;AAAA,EACtC;AAAA,EAEA,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS,CAAC,aAAY,UACpB,YAAW,UAAU,MAAM,QAAQ,KAAK,OAAO,MAAM,IAAI,QACzD,YAAW,YAAY,MAAM,UAAU,QACvC,YAAW,WAAW,MAAM,SAAS,MACrC,YAAW,aAAa,MAAM,WAAW,MACzC,YAAW,YAAY,MAAM,WAAW;AAAA,EAC1C,MAAM,CAAC,UAAU,SAAS,MAAM,aAAa,OAAO,MAAM,IAAI;AAAA,EAC9D,YAAY;AACd,CAAC;AAEM,IAAM,oBAAoB,MACtB,kBAAO,WAAkB,iBAAQ,UAAU,SAAS,GAAG,UAAQ,CAAC,CAAC;;ACX5E,qBAAS;AACT;AACA;;;AC/DO,IAAM,mBAAmB;AASzB,IAAM,QAAQ,CAAC,UACpB,GAAG,OAAO,MAAM,KAAK,KAAK,OAAO,MAAM,MAAM;AAe/C,IAAM,UAAQ,CAAC,WAAgC;AAAA,EAC7C,SAAS,MAAM,WAAW;AAAA,EAC1B,SAAS,MAAM,YAAY,OAAO,MAAM;AAAA,EACxC,UAAU,MAAM,YAAY;AAAA,KACxB,MAAM,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,OAAO,MAAM,IAAI,EAAE;AACjE;AAUO,IAAM,cAAa,CAAC,WAAgC;AAAA,KACtD,QAAM,KAAK;AAAA,EACd,IAAI,MAAM,KAAK;AAAA,EACf,QAAQ,MAAM;AAAA,EACd,MAAM;AACR;AAgBO,IAAM,cAAa,CAAC,WAAgC;AAAA,KACtD,QAAM,KAAK;AAAA,EACd,QAAQ;AACV;;;AD4EO,IAAM,wBAAwB,WAAgC,wBAAwB;AAY7F,IAAM,SAAS,CAAC,UAA2B;AAAA,EACzC,IAAI,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EACtC,MAAM,SAAS,OAAO,WAAW,KAAK,KAAK,CAAC;AAAA,EAC5C,OAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAAA;AAG5C,IAAM,aAAW,YAA2D;AAAA,EAY1E,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,SAAS,KAAK,KAAK,YAAY,EAAE;AAAA,IACjC,SAAS,KAAK,KAAK,YAAY,KAAK;AAAA,IACpC,OAAO,IAAI,KAAK,UAAU,MAAM,KAAK;AAAA,IACrC,IAAI,KAAK,KAAK,OAAO,MAAM,KAAK,CAAC;AAAA,IACjC,QAAQ,IAAI,KAAK,WAAW,MAAM,MAAM;AAAA,IACxC,MAAM,OAAO,KAAK,OAAO;AAAA,IACzB,YAAY,KAAK,KAAK,eAAe,EAAE;AAAA,IACvC,UAAU,KAAK,KAAK,aAAa,gBAAgB;AAAA,IACjD,QAAQ,KAAK,KAAK,WAAW,EAAE;AAAA,IAC/B,YAAY,KAAK,KAAK,WAAW,MAAM,UAAU;AAAA,IACjD,MAAM,KAAK,KAAK,SAAS,OAAO;AAAA,EAClC;AAAA,EACA,YAAY,MAAM;AAAA,EAClB,YAAY;AAAA,EAmBZ,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS,CAAC,aAAY,UACpB,YAAW,eAAe,MAC1B,YAAW,cAAc,MAAM,YAAY,qBAC3C,YAAW,aAAa,MAAM,YAAY,SAC1C,YAAW,aAAa,MAAM,WAAW,QACxC,MAAM,SAAS,aAAa,YAAW,SAAS,MAAM;AAAA,EACzD,MAAM,CAAC,UAAU,uBAAuB,MAAM,KAAK;AAAA,EACnD,YAAY;AACd,CAAC;AAUM,IAAM,gCAAgC,MAClC,kBACP,uBACO,iBAAQ,sBAAsB,SAAS,GAAG,UAAQ,CAAC,CAC5D;;AE7NF,qBAAS;AACT,uBAAS;AAET;AACA;;;ACHA;AAkBA,IAAM,SAAS;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA2BO,IAAM,kBAAkB,CAAC,UAC9B,iBAAiB,YAAY,MAAM,WAAW;AAGhD,IAAM,gBAAgB,CAAC,WACd,aACL,OAAO,IAAI,CAAC,eACV,IAAkB,QAAQ,QAAQ,OAAO,GAAG,sBAAsB,EAAE,KAC3D,aAAI,CAAC,UAAU,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,SAAS,EAAE,MAAM,GAQ1E,iBAAQ,iBAAiB,MAAa,iBAAQ,CAAC,CAAC,CACzD,CACF,GACA,EAAE,aAAa,YAAY,CAC7B,EAAE,KAAY,aAAI,CAAC,WAAW,OAAO,OAAO,CAAC,OAAO,WAAU,QAAQ,QAAO,CAAC,CAAC,CAAC;AAU3E,IAAM,eAAe,CAC1B,QACA,YAC4B;AAAA,EAC5B,IAAI,WAAW,aAAa,YAAY;AAAA,IAAW,OAAO;AAAA,EAC1D,IAAI,WAAW,aAAa,YAAY;AAAA,IAAW,OAAO;AAAA,EAC1D,OAAO,WAAW,UAAU,IAAI;AAAA;AAiBlC,IAAM,gBAAgB,CAAC,WACd,aACL,CAAC,WAAW,SAAS,EAAE,IAAI,CAAC,SAC1B,IAAa,QAAQ,QAAQ,OAAO,2BAA2B,QAAQ,EAAE,KAChE,aAAI,UAAS,GACb,iBAAQ,iBAAiB,MAAa,iBAAQ,SAAS,CAAC,CACjE,CACF,GACA,EAAE,aAAa,YAAY,CAC7B,EAAE,KACO,iBAAQ,EAAE,QAAQ,aAAa;AAAA,EACpC,MAAM,UAAU,aAAa,QAAQ,OAAO;AAAA,EAC5C,OAAO,YAAY,iBACR,aACL,IAAI,MACF,uFACE,6DACJ,CACF,IACO,iBAAQ,OAAO;AAAA,CAC3B,CACH;AAGK,IAAM,aAAY,CAAC,UAA2B,KAAK,UAAU,SAAS,KAAK,CAAC;AAEnF,IAAM,WAAW,CAAC,UAA4B;AAAA,EAC5C,IAAI,MAAM,QAAQ,KAAK,GAAG;AAAA,IACxB,OAAO,MACJ,IAAI,QAAQ,EACZ,KAAK,CAAC,MAAM,UAAU,KAAK,UAAU,IAAI,EAAE,cAAc,KAAK,UAAU,KAAK,CAAC,CAAC;AAAA,EACpF;AAAA,EACA,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAAA,IAC/C,MAAM,UAAU,OAAO,QAAQ,KAAgC,EAC5D,OAAO,EAAE,SAAS,QAAQ,QAAQ,EAClC,KAAK,EAAE,QAAQ,WAAW,KAAK,cAAc,KAAK,CAAC;AAAA,IACtD,OAAO,OAAO,YAAY,QAAQ,IAAI,EAAE,KAAK,WAAW,CAAC,KAAK,SAAS,KAAK,CAAC,CAAC,CAAC;AAAA,EACjF;AAAA,EACA,OAAO;AAAA;AAUF,IAAM,kBAAkB,CAAC,WACvB,aAAI,CAAC,cAAc,MAAM,GAAG,cAAc,MAAM,CAAC,GAAG,EAAE,aAAa,YAAY,CAAC,EAAE,KAChF,aAAI,EAAE,QAAQ,YAAY,SAAS,MAAM,CAClD;;;ADjHK,IAAM,kBAAkB,WAA0B,kBAAkB;AAE3E,IAAM,QAAO,CAAC,UACZ,gBAAgB,MAAM,MAAM,EAAE,KAAY,aAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC;AAEpE,IAAM,0BAA0B,MAC5B,kBACP,iBACO,iBACL,gBAAgB,SAAS,GAAG;AAAA,EAE1B,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAE7B,MAAa,YAAG,UAAU,GAAG,QAAQ;AAAA,IACnC,OAAO,OAAO,MAAK,IAAI;AAAA,GACxB;AAAA,EAQD,MAAa,YAAG,UAAU,GAAG,QAAwC;AAAA,IACnE,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IACvB,QAAQ,YAAY,OAAO,MAAK,IAAI;AAAA,IACpC,OAAO,YAAY,IAAK,EAAE,QAAQ,OAAO,IAAe,EAAE,QAAQ,SAAS;AAAA,GAC5E;AAAA,EAED,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAiBxC,MAAM,SAAS,OAAO,MAAK,IAAI;AAAA,IAC/B,IAAI,OAAO,YAAY;AAAA,MAAG,OAAO;AAAA,IAIjC,OAAO;AAAA,IACP,OAAO,IAAI,KAAK,QAAQ,aAAa,OAAO,aAAa;AAAA,IAOzD,MAAM,QAAQ,OAAO,MAAK,IAAI;AAAA,IAC9B,IAAI,MAAM,YAAY,GAAG;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,0CAA0C,OAAO,MAAM,OAAO,qBAC5D,mFACA,yEACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EASD,QAAQ,MAAa;AACvB,CAAC,CACH,CACF;;AE/FF,qBAAS;AACT;AACA;;;ACjCO,IAAM,WAAW,CAAC,UACvB,GAAG,MAAM,QAAQ,MAAM,KAAK,QAAQ,KAAK,GAAG;AAG9C,IAAM,cAAc,CAAC,UAAqB,iBAAiB,MAAM,qBAAqB,MAAM;AAoBrF,IAAM,aAAa,CAAC,WACxB,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,GAC9B,IAAI,CAAC,UAAmB,eAAe,KAAK,CAAC,EAC7C,OAAO,CAAC,UAAU,UAAU,EAAE,EAC9B,KAAK,EACL,KAAK,GAAG;AAGN,IAAM,iBAAiB,CAAC,UAC7B,UAAU,YAAY,KAAK,WAAW,CAAC,YAAY,KAAK,CAAC,CAAC;AAO5D,IAAM,QAAQ,CAAC,UACb,UAAU,aAAa,UAAU,KAAK,YAAY;AA0B7C,IAAM,YAAW,CAAC,WAA+D;AAAA,EACtF,mBAAmB,MAAM,MAAM,aAAa;AAAA,EAC5C,cAAc,MAAM,cAAc,YAAY,YAAY,YAAY,MAAM,SAAS;AAAA,EACrF,eAAe,MAAM,MAAM,aAAa;AAAA,EACxC,SAAS,MAAM,MAAM,OAAO;AAC9B;AAUO,IAAM,QAAO,CAAC,WAAmD;AAAA,EACtE,MAAM,MAAM,SAAS,OAAO,MAAM;AAAA,EAClC,MAAM,MAAM;AAAA,KACT,OAAO,YACR,OAAO,QAAQ,UAAS,KAAK,CAAC,EAAE,OAC9B,CAAC,UAAqC,MAAM,OAAO,SACrD,CACF;AACF;AAOO,IAAM,eAAa,CAAC,WAAmD;AAAA,KACzE,MAAK,KAAK;AAAA,EACb,QAAQ,MAAM;AAAA,EACd,MAAM;AACR;AAkBO,IAAM,cAAa,CAAC,UAAkD;AAAA,EAC3E,MAAM,QAAQ,OAAO,QAAQ,UAAS,KAAK,CAAC,EACzC,OAAO,IAAI,WAAW,UAAU,SAAS,EACzC,IAAI,EAAE,SAAS,GAAG;AAAA,EACrB,OAAO,WAAW,MAAK,KAAK,GAAG,KAAK;AAAA;;;ADY/B,IAAM,mBAAmB,WAA2B,mBAAmB;AAE9E,IAAM,aAAW,YAAiD;AAAA,EAChE,YAAY,CAAC,MAAM,UAAU;AAAA,IAS3B,MAAM,WAAW,KAAK,KAAK,OAAO;AAAA,IAClC,IAAI,aAAa,MAAM,aAAa,MAAM;AAAA,MAAM;AAAA,IAChD,OAAO;AAAA,MACL,MAAM,KAAK,KAAK,OAAO;AAAA,MACvB,eAAe,KAAK,KAAK,kBAAkB;AAAA,MAC3C,WAAW,WAAW,KAAK,aAAa;AAAA,MACxC,eAAe,KAAK,KAAK,gBAAgB;AAAA,MACzC,SAAS,KAAK,KAAK,UAAU;AAAA,MAC7B,MAAM,IAAI,KAAK,SAAS,CAAC;AAAA,MACzB,MAAM,KAAK,KAAK,OAAO;AAAA,MACvB,QAAQ;AAAA,MACR,UAAU,SAAS,KAAK;AAAA,MACxB,MAAM,MAAM;AAAA,MACZ,MAAM,KAAK,KAAK,OAAO;AAAA,IACzB;AAAA;AAAA,EAEF,YAAY,CAAC,UAAU,qBAAqB,MAAM;AAAA,EAClD;AAAA,EAEA,UAAU;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EAeA,SAAS,CAAC,aAAY,UACpB,YAAW,aAAa,MAAM,WAAW,OACzC,YAAW,UAAU,MAAM,SAAS,SACpC,YAAW,mBAAmB,MAAM,iBAAiB,OACrD,YAAW,mBAAmB,MAAM,iBAAiB,OACrD,YAAW,cAAc,eAAe,MAAM,SAAS;AAAA,EAOzD,MAAM,CAAC,UAAU,qBAAqB,MAAM,gBAAgB,SAAS,KAAK;AAAA,EAC1E;AACF,CAAC;AAYM,IAAM,2BAA2B,MAC7B,kBAAO,kBAAyB,iBAAQ,iBAAiB,SAAS,GAAG,UAAQ,CAAC,CAAC;;AEvM1F,qBAAS;AACT;AACA;AA6DO,IAAM,iBAAiB,WAAyB,iBAAiB;AAQxE,IAAM,QAAQ,CAAC,UAAoB,OAAO,UAAU,WAAW,QAAQ;AAUvE,IAAM,UAAQ,CAAC,UAAgD;AAAA,EAC7D,MAAM,QAAQ,MAAM,SAAS;AAAA,EAC7B,OAAO;AAAA,IAIL,iBAAiB,MAAM,iBAAiB,OAAO,MAAM;AAAA,IACrD,WAAW,MAAM,cAAc,OAAO,MAAM;AAAA,IAC5C,MAAM,MAAM;AAAA,OAIR,UAAU,KAAK,CAAC,IAAI,EAAE,MAAM;AAAA,OAC5B,MAAM,QAAQ,YAAY,CAAC,IAAI,EAAE,KAAK,OAAO,MAAM,GAAG,EAAE;AAAA,EAC9D;AAAA;AAoBF,IAAM,cAAa,CAAC,UAAgD;AAAA,EAClE,MAAM,SAAQ;AAAA,IACZ,IAAK,MAAM,SAAS,QAAQ,KAAK,CAAC,OAAO,IAAI,CAAC;AAAA,IAC9C,GAAI,MAAM,QAAQ,YAAY,CAAC,KAAK,IAAI,CAAC;AAAA,EAC3C;AAAA,EACA,OAAO,WAAW,QAAM,KAAK,GAAG,MAAK;AAAA;AAGvC,IAAM,aAAW,YAA6C;AAAA,EAI5D,UAAU;AAAA,EACV,YAAY,CAAC,MAAM,WAAW;AAAA,IAC5B,OAAO,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AAAA,IAC3D,QAAQ,MAAM;AAAA,IACd,cAAc,KAAK,KAAK,gBAAgB;AAAA,IACxC,KAAK,MAAM,KAAK,MAAM;AAAA,IACtB,WAAW,KAAK,KAAK,YAAY;AAAA,IACjC,MAAM,MAAM;AAAA,IAOZ,MAAM,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAAA,EAC1D;AAAA,EACA,YAAY,MAAM;AAAA,EAClB,YAAY,CAAC,WAAW,KAAK,QAAM,KAAK,GAAG,MAAM,MAAM,KAAK;AAAA,EAS5D,UAAU,EAAE,QAAQ,+BAA+B,QAAQ,oCAAoC;AAAA,EAC/F,SAAS,CAAC,aAAY,UACpB,YAAW,SAAS,MAAM,QAC1B,YAAW,WAAW,MAAM,SAAS,OACrC,YAAW,QAAQ,MAAM,OACzB,YAAW,eAAe,MAAM,cAAc,SAC9C,YAAW,kBAAkB,MAAM,iBAAiB;AAAA,EAOtD,MAAM,CAAC,UAAU,qBAAqB,MAAM;AAAA,EAC5C;AACF,CAAC;AAgBM,IAAM,yBAAyB,MAC3B,kBAAO,gBAAuB,iBAAQ,eAAe,SAAS,GAAG,UAAQ,CAAC,CAAC;;ACrLtF,qBAAS;AACT;AACA;AAwEO,IAAM,iBAAiB,WAAyB,iBAAiB;AAQxE,IAAM,WAAW,CAAC,MAAc,eAC7B,SAAS,KAAK,QAAQ,WAAW,cAAa,aAAa,cAAa,KAAK,QAAQ;AASxF,IAAM,QAAO,CAAC,WAAiD;AAAA,KACzD,MAAM,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;AAAA,KACzD,MAAM,QAAQ,YAAY,CAAC,IAAI,EAAE,KAAK,MAAM,IAAI;AAAA,KAChD,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;AAAA,KAC5D,MAAM,SAAS,YAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;AAAA,KACnD,MAAM,QAAQ,YAAY,CAAC,IAAI,EAAE,KAAK,OAAO,MAAM,GAAG,EAAE;AAAA,KACxD,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,KAAK,EAAE;AAAA,KAC3D,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM,KAAK,EAAE;AAAA,KAC3D,MAAM,QAAQ,YAAY,CAAC,IAAI,EAAE,KAAK,OAAO,MAAM,GAAG,EAAE;AAAA,KACxD,MAAM,iBAAiB,YAAY,CAAC,IAAI,EAAE,aAAa,OAAO,MAAM,YAAY,EAAE;AACxF;AAkBA,IAAM,YAAoD;AAAA,EACxD,MAAM,CAAC,OAAO,WAAW,OAAO,OAAO;AAAA,EACvC,MAAM,CAAC,OAAO,WAAW,QAAQ,OAAO,OAAO;AAAA,EAC/C,QAAQ,CAAC,OAAO,WAAW,QAAQ,OAAO,OAAO;AAAA,EACjD,MAAM,CAAC,OAAO,WAAW,QAAQ,OAAO,OAAO;AAAA,EAC/C,OAAO,CAAC,OAAO,WAAW,QAAQ,OAAO,OAAO;AAClD;AAEA,IAAM,aAAW,YAA6C;AAAA,EAI5D,UAAU;AAAA,EACV,YAAY,CAAC,MAAM,UAAU;AAAA,IAQ3B,MAAM,WAAW,KAAK,KAAK,OAAO;AAAA,IAClC,IAAI,aAAa,MAAM,aAAa,MAAM;AAAA,MAAM;AAAA,IAChD,OAAO;AAAA,MACL,QAAQ,KAAK,KAAK,SAAS;AAAA,MAC3B,KAAK,KAAK,KAAK,MAAM;AAAA,MACrB,SAAS,KAAK,KAAK,UAAU;AAAA,MAC7B,MAAM,KAAK,KAAK,OAAO,MAAM,KAAK,QAAQ,KAAK,KAAK,OAAO;AAAA,MAC3D,KAAK,IAAI,KAAK,QAAQ,CAAC;AAAA,MACvB,OAAO,IAAI,KAAK,KAAK,QAAQ,CAAC;AAAA,MAC9B,OAAO,IAAI,KAAK,KAAK,QAAQ,CAAC;AAAA,MAC9B,QAAQ;AAAA,MACR,KAAK,IAAI,KAAK,QAAQ,CAAC;AAAA,MACvB,MAAM,MAAM;AAAA,MACZ,aAAa,IAAI,KAAK,cAAc,CAAC;AAAA,MACrC,MAAM,MAAM;AAAA,IACd;AAAA;AAAA,EAEF,YAAY,MAAM;AAAA,EAClB,YAAY,CAAC,WAAW,KAAK,MAAK,KAAK,GAAG,MAAM,MAAM,MAAM,MAAM,MAAM,KAAK;AAAA,EAO7E,UAAU,EAAE,QAAQ,+BAA+B,QAAQ,oCAAoC;AAAA,EAC/F,SAAS,CAAC,aAAY,UACpB,YAAW,SAAS,MAAM,OAAO,MACjC,YAAW,UAAU,IAAI,MAAM,KAAK,KACpC,SAAS,YAAW,MAAM,MAAM,IAAI,KACpC,YAAW,SAAS,MAAM,OAAO,OACjC,YAAW,aAAa,MAAM,WAAW,OACzC,YAAW,UAAU,IAAI,MAAM,KAAK,KACpC,YAAW,kBAAkB,MAAM,gBAAgB,MACnD,YAAW,SAAS,MAAM,OAAO,MACjC,YAAW,YAAY,MAAM,UAAU;AAAA,EACzC,MAAM,CAAC,UAAU,qBAAqB,MAAM;AAAA,EAC5C,YAAY,CAAC,UAAU;AAAA,IACrB,MAAM,SAAS,MAAK,KAAK;AAAA,IACzB,MAAM,QAAQ,UAAU,MAAM,MAAM,OAAO,CAAC,WAAW,OAAO,YAAY,SAAS;AAAA,IACnF,OAAO,WAAW,QAAQ,KAAK;AAAA;AAEnC,CAAC;AAgBM,IAAM,yBAAyB,MAC3B,kBAAO,gBAAuB,iBAAQ,eAAe,SAAS,GAAG,UAAQ,CAAC,CAAC;;AChLtF,qBAAS;AACT,uBAAS;AACT;AACA;AACA;;;AClEO,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AAsB9B,IAAM,SAAQ,CAAC,MAAc,UAC3B,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,MAAM;AAQ7C,IAAM,cAAc,CAAC,aAClB,KAAK,QAAQ;AAgChB,IAAM,cAAc,CAAC,SACnB,OAAO,YAAY,OAAO,QAAQ,IAAI,EAAE,IAAI,EAAE,KAAK,WAAW,CAAC,IAAI,WAAW,KAAK,GAAG,GAAG,KAAK,CAAC,CAAC;AAqBlG,IAAM,WAAU,CAAC,WAAyB;AAAA,KACrC,OAAM,WAAW,MAAM,OAAO;AAAA,KAC9B,OAAM,WAAW,MAAM,OAAO;AAAA,KAC9B,OAAM,WAAW,KAAK,MAAM,OAAO,CAAC;AAAA,KACpC,OAAM,SAAS,MAAM,KAAK;AAAA,KAC1B,OAAM,iBAAiB,MAAM,aAAa;AAAA,KAC1C,OAAM,iBAAiB,MAAM,gBAAgB;AAAA,KAC7C,OAAM,UAAU,KAAK,MAAM,MAAM,CAAC;AACvC;AASO,IAAM,eAAa,CAAC,WAAiD;AAAA,KACvE,YAAY,MAAM,OAAO;AAAA,KACzB,SAAQ,KAAK;AAAA,EAChB,SAAS,MAAM;AAAA,EACf,MAAM,MAAM;AACd;AAQO,IAAM,cAAa,CAAC,WAAiD;AAAA,KACvE,SAAQ,KAAK;AAAA,EAChB,SAAS,MAAM;AACjB;AASO,IAAM,qBAAoB,CAAC,UAChC,YAAY,aAAW,KAAK,CAAC;AAGxB,IAAM,qBAAoB,CAAC,UAChC,YAAY,YAAW,KAAK,CAAC;;;ACzI/B;AACA;AAmBA,IAAM,OAAM,CAAC,OAAgB,WAAW,OAAQ,OAAO,UAAU,WAAW,QAAQ;AASpF,IAAM,SAAS,CAAC,UACd,MACG,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,SAAS,EAAE,EAC5B,KAAK,EACL,KAAK,GAAG;AAEN,IAAM,YAAW,CAAC,WAA8B,SACrD,cAAa,aAAa,OAAO,SAAQ,MAAM,OAAO,IAAI;AAErD,IAAM,QAAO,CAAI,WAAyB,SAC/C,cAAa,aAAa,cAAa;AASzC,IAAM,gBAAe,CAAC,MAAe,UAA2C;AAAA,EAC9E,MAAM,OAAO;AAAA,EACb,OAAO;AAAA,IACL,SAAS,KAAI,KAAK,UAAU;AAAA,IAC5B,SAAS,KAAI,KAAK,UAAU;AAAA,IAC5B,SAAS,KAAK,KAAK,UAAU;AAAA,IAC7B,OAAO,KAAI,KAAK,QAAQ;AAAA,IACxB,eAAe,KAAI,KAAK,gBAAgB;AAAA,IACxC,iBAAiB,KAAI,KAAK,gBAAgB;AAAA,IAC1C,QAAQ,KAAK,KAAK,SAAS;AAAA,IAC3B,SAAS,MAAM;AAAA,IACf,MAAM,KAAI,KAAK,SAAS,MAAM,IAAI;AAAA,EACpC;AAAA;AAqBK,IAAM,oBAAoB,CAAC,UAChC,iBACE,OAAO,MAAM,QAAQ,aAAa,OAAe,mBAAW,EAAE,SAAS,MAAM,QAAQ,CAAC,CAAC,CACzF,EAAE,KAAY,aAAI,CAAC,SAAU,SAAS,aAAa,aAAa,cAAa,MAAM,KAAK,CAAE,CAAC;AAUtF,IAAM,cAAc,CAAC,UAC1B,kBAAkB,KAAK,EAAE,KAChB,kBAAS,mBAAmB,MAAa,iBAAQ,SAAS,CAAC,CACpE;AAGK,IAAM,kBAAiB,CAAC,SAC7B,SAAS,aAAa,YAAY;AAM7B,IAAM,WAAU,CAAC,aAA+B,UACrD,UAAS,MAAM,SAAS,YAAW,OAAO,KAC1C,UAAS,MAAM,OAAO,YAAW,KAAK,KACtC,UAAS,MAAM,kBAAkB,YAAW,gBAAgB,KAC5D,MAAK,MAAM,SAAS,YAAW,OAAO,KACtC,MAAK,MAAM,QAAQ,YAAW,MAAM,KACpC,MAAK,MAAM,eAAe,YAAW,aAAa,KAClD,MAAK,MAAM,SAAS,YAAW,OAAO;;;AFejC,IAAM,iBAAiB,WAAyB,mBAAmB;AAAA,EACxE,sBAAsB;AACxB,CAAC;AAEM,IAAM,yBAAyB,MAC3B,kBACP,gBACO,iBACL,eAAe,SAAS,GAAG;AAAA,EAOzB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAQ7B,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,OAAO,gBACL,OAAO,WAAW,YAAY,YAAY,IAAI,IAAI,kBAAkB,IAAI,CAC1E;AAAA,GACD;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IACvB,OAAO,YAAW,gBAAgB,aAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACxE,OAAO,YAAW,gBAAgB,YAAW,IAAI,GAAG,KAAK;AAAA,IACzD,IAAI,WAAW;AAAA,MAAW;AAAA,IAI1B,MAAM,OAAO,OAAO,kBAAkB,IAAI;AAAA,IAG1C,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,mBAAmB,KAAK,OAAO;AAAA,MACxD,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IACA,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,YAAW,gBAAgB,aAAW,IAAI,GAAG,IAAI;AAAA,MACxD,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IACA,OAAO,SAAQ,MAAM,IAAI,IACpB,EAAE,QAAQ,OAAO,IACjB,EAAE,QAAQ,SAAS;AAAA,GACzB;AAAA,EACD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IAIxC,MAAM,SAAS,gBAAe,OAAO,YAAY,IAAI,CAAC;AAAA,IACtD,OAAO,YAAW,gBAAgB,aAAW,IAAI,GAAG,WAAW,SAAS;AAAA,IACxE,OAAO,YAAW,gBAAgB,YAAW,IAAI,GAAG,KAAK;AAAA,IACzD,IAAI,WAAW,WAAW;AAAA,MACxB,OAAO,OACL,KAAK,QACL,aACA,MACQ,uBAAc,mBAAkB,IAAI,CAAC,CAC/C;AAAA,IACF,EAAO,SAAI,CAAC,SAAQ,QAAQ,IAAI,GAAG;AAAA,MACjC,OAAO,OACL,KAAK,QACL,aACA,MACQ,oBAAW,mBAAkB,IAAI,CAAC,CAC5C;AAAA,IACF;AAAA,IACA,MAAM,QAAQ,gBAAe,OAAO,YAAY,IAAI,CAAC;AAAA,IACrD,IAAI,UAAU,WAAW;AAAA,MACvB,OAAO,OAAc,aACnB,IAAI,MACF,WAAW,KAAK,mEACd,gFACA,0EACJ,CACF;AAAA,IACF;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EAMD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,OACL,KAAK,QACL,aACA,MACQ,uBAAc,EAAE,SAAS,KAAK,QAAQ,CAAC,CACjD;AAAA,GACD;AACH,CAAC,CACH,CACF;;AGpKF,qBAAS;AACT,uBAAS;AACT;AACA;;;ACvEA;AACA;AAsCO,IAAM,cAAc,CAAC,aAC1B,MAAM,QAAQ,QAAQ,IAClB,SAAS,QAAQ,CAAC,UAAmB;AAAA,EACnC,MAAM,OAAO;AAAA,EACb,MAAM,SAAS,YAAY,KAAK,QAAQ;AAAA,EACxC,OAAO,OAAO,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,SAAS,EAAE;AAAA,CACnF,IACD,CAAC;AAQP,IAAM,iBAAe,CACnB,MACA,WACuB;AAAA,EACvB,SAAS,YAAY,KAAK,QAAQ,EAAE,KAAK,GAAG;AAAA,EAC5C,QAAQ,KAAK,KAAK,QAAQ,SAAS;AAAA,EACnC,MAAM,MAAM;AAAA,EACZ,MAAM,MAAM;AAAA,EACZ,OAAO,KAAK,KAAK,OAAO,SAAS;AACnC;AAoBO,IAAM,iBAAiB,CAAC,UAC7B,iBACE,OACE,MAAM,QACN,QACA,OACM,uBAAe,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,KAAK,CAAC,CAC7D,CACF,EAAE,KACO,aAAI,CAAC,SAAS;AAAA,EACnB,IAAI,SAAS;AAAA,IAAY,OAAO;AAAA,EAGhC,OAAO,KAAK,KAAK,IAAI,MAAM,KAAK,YAAY,eAAa,MAAM,KAAK;AAAA,CACrE,CACH;AAaK,IAAM,WAAW,CAAC,UACvB,eAAe,KAAK,EAAE,KAAY,uBAAc,MAAG;AAAA,EAAG;AAAA,CAAS,CAAC;AAG3D,IAAM,kBAAiB,CAAC,SAC7B,SAAS,aAAa,YAAY;;;AC9GpC;AACA;AAQO,IAAM,kBAAkB;AA6BxB,IAAM,wBAAwB,CAAC,UACpC,MAAM,YAAY,aAAa,MAAM,cAAc,YAAY,YAAY;AAmBtE,IAAM,eAAa,CAAC,WAAiD;AAAA,KACtE,MAAM,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ,KAAK,GAAG,EAAE;AAAA,EAC1E,MAAM,MAAM;AAAA,KACR,MAAM,cAAc,YAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;AAAA,KAClE,MAAM,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,OAAO,MAAM,MAAM,EAAE;AAAA,KACjE,MAAM,gBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,MAAM,YAAY;AAAA,KACxE,MAAM,oBAAoB,YAAY,CAAC,IAAI,EAAE,gBAAgB,MAAM,gBAAgB;AACzF;AAcA,IAAM,qBAAoB,CAAC,UAAwD;AAAA,EACjF,MAAM,OAAO,aAAW,KAAK;AAAA,EAC7B,OAAO;AAAA,OACF;AAAA,IACH,cAAc,KAAK;AAAA,IACnB,MAAM,MAAM;AAAA,EACd;AAAA;AAIF,IAAM,kBAAkB;AAkDjB,IAAM,aAAa,CACxB,OACA,UAEO,aAAI,UAAU,GAAG;AAAA,EACtB,MAAM,WAAW,OAAO,MAAK,KAAK;AAAA,EAClC,IAAI,aAAa;AAAA,IAAW,OAAO;AAAA,EAEnC,IAAI,MAAM,YAAY,aAAa,MAAM,cAAc,WAAW;AAAA,IAChE,OAAO,OAAc,aACnB,IAAI,MACF,GAAG,MAAM,QAAQ,MAAM,gEACrB,0FACA,yFACA,yDACJ,CACF;AAAA,EACF;AAAA,EAaA,OAAO,UAAU,sBAAsB,KAAK,GAAG,QAAO,aAAW,KAAK,CAAC,GAAG,IAAI;AAAA,EAE9E,MAAM,OAAO,OAAO,OAClB,MAAM,QACN,aACA,MACM,0BAAkB,mBAAkB,KAAK,CAAC,CAClD;AAAA,EAEA,MAAM,UAAS,CAAC,aACP,aAAI,UAAU,GAAG;AAAA,IACtB,MAAM,OAAO,OAAO,MAAK,KAAK;AAAA,IAC9B,IAAI,SAAS,aAAa,YAAY;AAAA,MAAG,OAAO;AAAA,IAChD,OAAc,eAAM,WAAW;AAAA,IAC/B,OAAO,OAAO,QAAO,WAAW,CAAC;AAAA,GAClC;AAAA,EAEH,MAAM,QAAQ,OAAO,QAAO,eAAe;AAAA,EAC3C,IAAI,UAAU,WAAW;AAAA,IACvB,OAAO,OAAc,aACnB,IAAI,MACF,SAAS,MAAM,kBAAkB,MAAM,uBAAuB,KAAK,MAAM,WAAW,OAClF,2FACA,2DAA2D,MAAM,8BACjE,2FACA,yFACA,0FACA,yFACA,0FACA,oCACJ,CACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,CACR;AAeI,IAAM,cAAc,CAAC,UAC1B,OACE,MAAM,QACN,aACA,MACM,0BAAkB,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,KAAK,CAAC,CAChE;;;AFvEK,IAAM,iBAAiB,WAAyB,mBAAmB;AAAA,EACxE,sBAAsB;AACxB,CAAC;AAEM,IAAM,yBAAyB,MAC3B,kBACP,gBACO,iBACL,eAAe,SAAS,GAAG;AAAA,EAGzB,MAAM,MAAa,iBAAQ,CAAC,CAAC;AAAA,EAM7B,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,OAAO,gBACL,OAAO,WAAW,YAAY,SAAS,IAAI,IAAI,eAAe,IAAI,CACpE;AAAA,GACD;AAAA,EACD,MAAa,YAAG,UAAU,GAAG,MAAM,UAAU;AAAA,IAC3C,IAAI,CAAC,aAAW,IAAI;AAAA,MAAG;AAAA,IAMvB,OAAO,UACL,sBAAsB,IAAI,GAC1B,QAAO,aAAW,IAAI,CAAC,GACvB,WAAW,SACb;AAAA,IACA,IAAI,WAAW;AAAA,MAAW;AAAA,IAI1B,MAAM,OAAO,OAAO,eAAe,IAAI;AAAA,IACvC,IAAI,SAAS,YAAY;AAAA,MACvB,OAAO,kBAAkB,mBAAmB,GAAG,KAAK,QAAQ,KAAK,MAAM;AAAA,MACvE,OAAO,EAAE,QAAQ,OAAO;AAAA,IAC1B;AAAA,IAOA,IAAI,SAAS,WAAW;AAAA,MACtB,OAAO,UAAU,sBAAsB,IAAI,GAAG,QAAO,aAAW,IAAI,CAAC,GAAG,IAAI;AAAA,MAC5E,OAAO,EAAE,QAAQ,SAAS;AAAA,IAC5B;AAAA,IAIA,OAAO,EAAE,QAAQ,OAAO;AAAA,GACzB;AAAA,EAUD,WAAkB,YAAG,UAAU,GAAG,QAAQ;AAAA,IACxC,OAAO,OAAO,WAAW,MAAM,CAAC,UAC9B,SAAS,KAAK,EAAE,KAAY,aAAI,eAAc,CAAC,CACjD;AAAA,GACD;AAAA,EACD,QAAe,YAAG,UAAU,GAAG,QAAQ;AAAA,IACrC,OAAO,YAAY,IAAI;AAAA,GACxB;AACH,CAAC,CACH,CACF;",
|
|
136
|
+
"debugId": "7C16E956F2A3150864756E2164756E21",
|
|
137
137
|
"names": []
|
|
138
138
|
}
|