@intentius/chant 0.124.27 → 0.124.29

package/dist/lifecycle/release-revocation.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Which releases are revoked (#4033, ws-105 question 2).
+ *
+ * A release traces to one commit (ws-104), and a commit is revoked when it
+ * carries a `ci/revoked/<sha>` tag that counts (ws-103). So a release is
+ * revoked exactly when its commit is, and this module derives that at read
+ * time from the tags. Nothing is written when a commit is revoked: the tag is
+ * the record, `chant ci tick` makes it once, and every reader below judges it
+ * the same way.
+ *
+ * The tags are judged as `release cut` judges them (#4031): with
+ * `ci.green.signedSince` declared, a revoked tag without a valid runner
+ * statement is ignored and revokes nothing. The declaration and the runner
+ * keys are read at base, the green branch's tip on `origin` (or the local
+ * branch, or `HEAD`). Only local tags are read; nothing is fetched.
+ *
+ * The readers:
+ *
+ * - `chant approve` refuses a release gate whose release is revoked
+ *   (`release-revoked`), and `chant components promote --release` refuses to
+ *   deploy one, so a pending gate for it can never pass.
+ * - `chant workspace status --json` reads such a gate as `superseded` and
+ *   flags a component whose environment runs a revoked release, with the
+ *   rollback line.
+ * - `chant release list` marks a revoked release.
+ */
+import type { CiGreen } from "../workspace/declaration.js";
+import type { CiTags, RevokedTagView } from "../workspace/ci-green.js";
+/** A revoked release: the commit it was cut from and the revoked tag on it, as `ci list` shows the tag. */
+export interface ReleaseRevocation extends RevokedTagView {
+    /** The release's commit, which the tag names. */
+    commit: string;
+}
+/** The stable code `approve` and `promote --release` refuse a revoked release with. */
+export declare const RELEASE_REVOKED_CODE = "release-revoked";
+/**
+ * The ci tags at `top`, judged against `green` at base: the green branch's
+ * tip on `origin`, else the local branch, else `HEAD`. With no `ci.green`
+ * every tag counts. Throws `WorkspaceReadError` (`declaration-invalid`) when
+ * `ci.green.signedSince` names no commit here.
+ */
+export declare function judgedCiTags(top: string, green: CiGreen | null): Promise<CiTags>;
+/**
+ * Every revoked commit in the repository holding `cwd`, keyed by its full
+ * sha, with the declaration's `ci.green` read at base as `release cut` reads
+ * it. Empty outside a git repository. Throws `WorkspaceReadError`
+ * (`declaration-invalid`) when the tags can't be judged.
+ */
+export declare function readRevokedCommits(cwd: string): Promise<Map<string, ReleaseRevocation>>;
+/** {@link readRevokedCommits} for a caller that has the git top and the declaration's `ci.green` at base already. */
+export declare function revokedCommitsAt(top: string, green: CiGreen | null): Promise<Map<string, ReleaseRevocation>>;
+/** What a reader prints for a release it found revoked: the revocation, the release and its label. */
+export interface RevokedRelease extends ReleaseRevocation {
+    releaseDigest: string;
+    /** The release's label, or null when its cuts gave it none. */
+    label: string | null;
+}
+/**
+ * A memoised lookup from a release digest to its revocation, for the member
+ * whose ledger is read from `memberDir`: null when the release is not
+ * revoked, or its file can't be read. `revoked` is called on the first
+ * lookup only, so a reader that meets no release reads no tags, and no
+ * release file is read while no commit is revoked.
+ */
+export declare function revokedReleaseLookup(memberDir: string, revoked: () => Promise<ReadonlyMap<string, ReleaseRevocation>>): (releaseDigest: string) => Promise<RevokedRelease | null>;
+/** Whether `release` is revoked: its commit's revoked tag, or null. */
+export declare function revocationOf(release: {
+    commit: string;
+}, revoked: ReadonlyMap<string, ReleaseRevocation>): ReleaseRevocation | null;
+/** What failed, in words: `phase e2e failed in deploy-smoke (Op run r-12 in staging)`. */
+export declare function describeRevocation(r: ReleaseRevocation): string;
+/** The refusal `approve` and `promote --release` print for a revoked release, and the line that fixes it. */
+export declare function revokedRefusal(release: {
+    releaseDigest: string;
+    label: string | null;
+}, r: ReleaseRevocation, fix: string): {
+    message: string;
+    hint: string;
+};
+//# sourceMappingURL=release-revocation.d.ts.map

package/dist/lifecycle/release-revocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-revocation.d.ts","sourceRoot":"","sources":["../../src/lifecycle/release-revocation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEpE,2GAA2G;AAC3G,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uFAAuF;AACvF,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAUtD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAQtF;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAK7F;AAED,qHAAqH;AACrH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAKlH;AAED,sGAAsG;AACtG,MAAM,WAAW,cAAe,SAAQ,iBAAiB;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,GAC7D,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAqB3D;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,iBAAiB,GAAG,IAAI,CAEnI;AAED,0FAA0F;AAC1F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAK/D;AAED,6GAA6G;AAC7G,wBAAgB,cAAc,CAAC,OAAO,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAAE,CAAC,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAO7J"}

package/dist/lifecycle/release-revocation.js

@@ -0,0 +1,123 @@
+/**
+ * Which releases are revoked (#4033, ws-105 question 2).
+ *
+ * A release traces to one commit (ws-104), and a commit is revoked when it
+ * carries a `ci/revoked/<sha>` tag that counts (ws-103). So a release is
+ * revoked exactly when its commit is, and this module derives that at read
+ * time from the tags. Nothing is written when a commit is revoked: the tag is
+ * the record, `chant ci tick` makes it once, and every reader below judges it
+ * the same way.
+ *
+ * The tags are judged as `release cut` judges them (#4031): with
+ * `ci.green.signedSince` declared, a revoked tag without a valid runner
+ * statement is ignored and revokes nothing. The declaration and the runner
+ * keys are read at base, the green branch's tip on `origin` (or the local
+ * branch, or `HEAD`). Only local tags are read; nothing is fetched.
+ *
+ * The readers:
+ *
+ * - `chant approve` refuses a release gate whose release is revoked
+ *   (`release-revoked`), and `chant components promote --release` refuses to
+ *   deploy one, so a pending gate for it can never pass.
+ * - `chant workspace status --json` reads such a gate as `superseded` and
+ *   flags a component whose environment runs a revoked release, with the
+ *   rollback line.
+ * - `chant release list` marks a revoked release.
+ */
+import { execFileSync } from "node:child_process";
+/** The stable code `approve` and `promote --release` refuse a revoked release with. */
+export const RELEASE_REVOKED_CODE = "release-revoked";
+function tryGit(top, args) {
+    try {
+        return execFileSync("git", args, { cwd: top, encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] }).trim();
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The ci tags at `top`, judged against `green` at base: the green branch's
+ * tip on `origin`, else the local branch, else `HEAD`. With no `ci.green`
+ * every tag counts. Throws `WorkspaceReadError` (`declaration-invalid`) when
+ * `ci.green.signedSince` names no commit here.
+ */
+export async function judgedCiTags(top, green) {
+    const { readCiTags } = await import("../workspace/ci-green.js");
+    const base = green
+        ? (tryGit(top, ["rev-parse", "--verify", "--quiet", `refs/remotes/origin/${green.branch}^{commit}`]) ??
+            tryGit(top, ["rev-parse", "--verify", "--quiet", `refs/heads/${green.branch}^{commit}`]) ??
+            tryGit(top, ["rev-parse", "HEAD"]))
+        : null;
+    return readCiTags(top, green, base);
+}
+/**
+ * Every revoked commit in the repository holding `cwd`, keyed by its full
+ * sha, with the declaration's `ci.green` read at base as `release cut` reads
+ * it. Empty outside a git repository. Throws `WorkspaceReadError`
+ * (`declaration-invalid`) when the tags can't be judged.
+ */
+export async function readRevokedCommits(cwd) {
+    const top = tryGit(cwd, ["rev-parse", "--show-toplevel"]);
+    if (!top)
+        return new Map();
+    const { scopeSource } = await import("../workspace/write-scope.js");
+    return revokedCommitsAt(top, scopeSource(cwd).declaration?.ci?.green ?? null);
+}
+/** {@link readRevokedCommits} for a caller that has the git top and the declaration's `ci.green` at base already. */
+export async function revokedCommitsAt(top, green) {
+    const { revokedTagView } = await import("../workspace/ci-green.js");
+    const out = new Map();
+    for (const [sha, counted] of (await judgedCiTags(top, green)).revoked)
+        out.set(sha, { commit: sha, ...revokedTagView(sha, counted) });
+    return out;
+}
+/**
+ * A memoised lookup from a release digest to its revocation, for the member
+ * whose ledger is read from `memberDir`: null when the release is not
+ * revoked, or its file can't be read. `revoked` is called on the first
+ * lookup only, so a reader that meets no release reads no tags, and no
+ * release file is read while no commit is revoked.
+ */
+export function revokedReleaseLookup(memberDir, revoked) {
+    const seen = new Map();
+    let labels;
+    return (releaseDigest) => {
+        let found = seen.get(releaseDigest);
+        if (!found) {
+            found = (async () => {
+                const commits = await revoked();
+                if (commits.size === 0)
+                    return null;
+                const { readRelease, readCuts, labelsByDigest } = await import("./release-store.js");
+                const loc = { cwd: memberDir };
+                const release = await readRelease(releaseDigest, loc).catch(() => null);
+                const r = release ? revocationOf(release, commits) : null;
+                if (!r)
+                    return null;
+                labels ?? (labels = readCuts(loc).then((c) => labelsByDigest(c.cuts), () => new Map()));
+                return { ...r, releaseDigest, label: (await labels).get(releaseDigest) ?? null };
+            })();
+            seen.set(releaseDigest, found);
+        }
+        return found;
+    };
+}
+/** Whether `release` is revoked: its commit's revoked tag, or null. */
+export function revocationOf(release, revoked) {
+    return revoked.get(release.commit) ?? null;
+}
+/** What failed, in words: `phase e2e failed in deploy-smoke (Op run r-12 in staging)`. */
+export function describeRevocation(r) {
+    const run = r.run
+        ? ` in ${r.run.name}${r.run.opRun ? ` (Op run ${r.run.opRun.id} in ${r.run.opRun.env})` : r.run.id !== null ? ` (run ${r.run.id})` : ""}`
+        : "";
+    return r.phase !== null ? `phase ${r.phase} failed${run}` : `a required phase failed${run}`;
+}
+/** The refusal `approve` and `promote --release` print for a revoked release, and the line that fixes it. */
+export function revokedRefusal(release, r, fix) {
+    return {
+        message: `release ${release.label ?? release.releaseDigest} was cut from commit ${r.commit.slice(0, 12)}, which ${r.tag} revokes ` +
+            `(${describeRevocation(r)}), so it is not deployed and no approval of it counts [${RELEASE_REVOKED_CODE}]`,
+        hint: fix,
+    };
+}

package/dist/lifecycle/release-store.d.ts

@@ -0,0 +1,200 @@
+/**
+ * The release (#4026, ws-104): one green commit of one member, compiled for
+ * every environment the member declares, stored on `chant/lifecycle`.
+ *
+ * A release is a different object from a deploy record. A deploy record is
+ * one line of `<env>/releases.jsonl` (./release-ledger.ts) saying a component
+ * was deployed. A release is what is cut once from a green commit and then
+ * moves through the environments: the commit, the artifacts built once from
+ * it, and one compile target per environment, each with the template digests
+ * and the build parameters that environment was compiled with.
+ *
+ * Storage, per ws-104 question 3:
+ *
+ *   _releases/<releaseDigest>.json      the release, written once and never rewritten
+ *   _releases/cuts.jsonl                one line per cut, with the release's label
+ *   _releases/templates/<digest>.txt    each template's bytes, by content digest
+ *
+ * `:` is written as `_` in file names, as `_plans/` and `_builds/` do. A
+ * workspace member's copy sits under `_members/<member>/` through the same
+ * `ledgerDir` prefix every other store uses.
+ *
+ * The template bytes are kept so that a promote under a release deploys the
+ * templates the cut recorded, not whatever the promoting checkout holds
+ * (ws-104 question 5). They are named by content digest, so a template that
+ * two environments or two releases share is stored once.
+ *
+ * `releaseDigest` is `computePlanDigest("release", subject)` over the member,
+ * the commit, the artifact digests and each target's env, templates and the
+ * name and value of each param. A param's `source`, the label, the actor, the
+ * time and any signature stay outside it, so two cuts of one commit give the
+ * same digest.
+ */
+import { type LedgerLocation } from "./git.js";
+import type { RunOrigin } from "./release-ledger.js";
+/** The directory on `chant/lifecycle` that holds releases, cuts and template bytes. */
+export declare const RELEASES_DIR = "_releases";
+/** The cut log inside {@link RELEASES_DIR}. */
+export declare const CUTS_FILE = "cuts.jsonl";
+/** The directory inside {@link RELEASES_DIR} that holds template bytes by content digest. */
+export declare const TEMPLATES_SUBDIR = "templates";
+/** The `kind` a release digest is computed under, so it can never equal a plan digest of another kind. */
+export declare const RELEASE_DIGEST_KIND = "release";
+/** An artifact built once from the release's commit: an `image` or `asset` archive entry. */
+export interface ReleaseArtifact {
+    component: string;
+    kind: "image" | "asset";
+    /** The archive path the build step wrote. */
+    path: string;
+    digest: string;
+}
+/** One template of a target: a file a component's deploy reads, compiled for the target's environment. */
+export interface ReleaseTemplate {
+    /** The component whose deploy reads it, or null for a project with no components. */
+    component: string | null;
+    /** The path the deploy step names, relative to the member's directory. */
+    path: string;
+    /** `sha256:<hex>` of the file's bytes. */
+    digest: string;
+}
+/** One resolved build parameter of a target. */
+export interface ReleaseParam {
+    name: string;
+    value: string | number | boolean;
+    /** Where the value came from: `cli`, `params-file`, `env` or `default`. Outside the digest. */
+    source: string;
+}
+/** What one environment compiles to. */
+export interface ReleaseTarget {
+    env: string;
+    templates: ReleaseTemplate[];
+    params: ReleaseParam[];
+}
+/** The release file, `_releases/<releaseDigest>.json`. */
+export interface Release {
+    version: 1;
+    releaseDigest: string;
+    /** The workspace member, its path of names joined with `/` when nested, or null outside a workspace. */
+    member: string | null;
+    /** The full sha of the green commit. */
+    commit: string;
+    artifactDigests: ReleaseArtifact[];
+    targets: ReleaseTarget[];
+}
+/** One line of `_releases/cuts.jsonl`. */
+export interface ReleaseCut {
+    version: 1;
+    releaseDigest: string;
+    /** The human name of the release, such as `v1.4.0`, or null for a cut with none. */
+    label: string | null;
+    actor: string;
+    timestamp: string;
+    /**
+     * The run the cut ran in (#4027): the CI run's id in CI, or an id minted on
+     * the machine that cut (`local-<epoch ms>`). Null on every cut written
+     * before 0.124.29.
+     */
+    runId: string | null;
+    /**
+     * Where that run ran: the CI run's origin, or `{ forge: "local" }` for a
+     * minted id (#4027). A cut written before 0.124.29 holds null outside CI.
+     */
+    runOrigin: RunOrigin | null;
+    /**
+     * The cut's signature (#4031): an armored ssh signature by the actor's key
+     * in the `chant-release` namespace over the release digest, the label, the
+     * actor and the time, one per line (`releaseSealPayload`). Null for an
+     * unsigned cut, and on every cut written before 0.124.28.
+     */
+    signature: string | null;
+}
+/** The parts of a release a digest is computed from. */
+export type ReleaseSubject = Pick<Release, "member" | "commit" | "artifactDigests" | "targets">;
+/** The same release with every list in the order ws-104 sets: artifacts by component then path, targets by env, templates by component then path, params by name. */
+export declare function normalizeRelease<T extends ReleaseSubject>(release: T): T;
+/** The hash input of ws-104 question 3: a param's `source` is left out. */
+export declare function releaseHashInput(release: ReleaseSubject): unknown;
+/** `computePlanDigest("release", input)` over {@link releaseHashInput}. */
+export declare function computeReleaseDigest(release: ReleaseSubject): string;
+/** A release with its digest computed and its lists in order. */
+export declare function makeRelease(subject: ReleaseSubject): Release;
+/** Whether a release's own `releaseDigest` is the digest of what it holds. */
+export declare function verifyReleaseDigest(release: Release): boolean;
+/** Why a label can't be used, or undefined when it can. */
+export declare function invalidLabel(label: string): string | undefined;
+/** Thrown when a cut would give a label two digests, or a digest two labels. */
+export declare class ReleaseLabelError extends Error {
+    readonly code: "release-label-taken" | "release-already-labelled" | "release-label-invalid";
+    constructor(code: "release-label-taken" | "release-already-labelled" | "release-label-invalid", message: string);
+}
+/** A release's template bytes, as the cut read them. */
+export interface TemplateContent {
+    digest: string;
+    content: string;
+}
+/**
+ * Store a release and its template bytes in one commit. A release already
+ * stored under its digest is never rewritten, and a template already stored
+ * is not written again. Does not push.
+ */
+export declare function persistRelease(release: Release, templates: readonly TemplateContent[], opts?: {
+    cwd?: string;
+}): Promise<{
+    commit: string | null;
+    written: boolean;
+}>;
+/** Parse a stored release file, or null when it is not a release. */
+export declare function parseRelease(text: string): Release | null;
+/** Read one release by digest. Null when none is stored, or when the file is not a release whose content hashes to its digest. */
+export declare function readRelease(digest: string, opts?: LedgerLocation): Promise<Release | null>;
+/** Every stored release, and how many release files could not be read as one. */
+export declare function readAllReleases(opts?: LedgerLocation): Promise<{
+    releases: Release[];
+    malformed: number;
+}>;
+/** Parse the lines of `cuts.jsonl`. A line that is not a cut is counted and skipped. */
+export declare function parseCuts(text: string | null): {
+    cuts: ReleaseCut[];
+    malformed: number;
+};
+/** Every cut, oldest first. */
+export declare function readCuts(opts?: LedgerLocation): Promise<{
+    cuts: ReleaseCut[];
+    malformed: number;
+}>;
+/** The label each digest carries, from its labelled cuts. */
+export declare function labelsByDigest(cuts: readonly ReleaseCut[]): Map<string, string>;
+/** What {@link appendCut} did. */
+export type CutOutcome = {
+    appended: true;
+    cut: ReleaseCut;
+}
+/** The digest was already cut; nothing was written. `label` is the label it carries, or null. */
+ | {
+    appended: false;
+    label: string | null;
+};
+/**
+ * Append a cut for `releaseDigest`. A label names one digest and a digest
+ * takes at most one label (ws-104 question 3): cutting a digest again is a
+ * no-op that returns its label, giving an unlabelled digest a label appends a
+ * cut, and cutting a digest under a label other than its own, or under a
+ * label another digest has, throws {@link ReleaseLabelError}. Does not push.
+ */
+export declare function appendCut(input: Omit<ReleaseCut, "version" | "signature" | "runId"> & {
+    signature?: string | null;
+    runId?: string | null;
+}, opts?: {
+    cwd?: string;
+}): Promise<CutOutcome>;
+/** A template's bytes by digest, or null when none is stored. */
+export declare function readReleaseTemplate(digest: string, opts?: LedgerLocation): Promise<string | null>;
+/**
+ * Find a release by its digest or its label. Null when neither names one.
+ * A string that names a digest is read as a digest first.
+ */
+export declare function resolveRelease(ref: string, opts?: LedgerLocation): Promise<{
+    release: Release;
+    label: string | null;
+} | null>;
+//# sourceMappingURL=release-store.d.ts.map

package/dist/lifecycle/release-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-store.d.ts","sourceRoot":"","sources":["../../src/lifecycle/release-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,OAAO,EASL,KAAK,cAAc,EACpB,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,uFAAuF;AACvF,eAAO,MAAM,YAAY,cAAc,CAAC;AACxC,+CAA+C;AAC/C,eAAO,MAAM,SAAS,eAAe,CAAC;AACtC,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,cAAc,CAAC;AAE5C,0GAA0G;AAC1G,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAE7C,6FAA6F;AAC7F,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACxB,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,0GAA0G;AAC1G,MAAM,WAAW,eAAe;IAC9B,qFAAqF;IACrF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,+FAA+F;IAC/F,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,MAAM,EAAE,YAAY,EAAE,CAAC;CACxB;AAED,0DAA0D;AAC1D,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,CAAC,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,wGAAwG;IACxG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,eAAe,EAAE,CAAC;IACnC,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,0CAA0C;AAC1C,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,CAAC,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;OAGG;IACH,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,wDAAwD;AACxD,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,GAAG,SAAS,CAAC,CAAC;AAIhG,qKAAqK;AACrK,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,cAAc,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAgBxE;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAQjE;AAED,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAEpE;AAED,iEAAiE;AACjE,wBAAgB,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAG5D;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAE7D;AASD,2DAA2D;AAC3D,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG9D;AAED,gFAAgF;AAChF,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,0BAA0B,GAAG,uBAAuB;IAD7F,YACW,IAAI,EAAE,qBAAqB,GAAG,0BAA0B,GAAG,uBAAuB,EAC3F,OAAO,EAAE,MAAM,EAIhB;CACF;AAED,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,SAAS,eAAe,EAAE,EACrC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CA4BtD;AAED,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CA2BzD;AAED,kIAAkI;AAClI,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAMhG;AAED,iFAAiF;AACjF,wBAAsB,eAAe,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAWhH;AAED,wFAAwF;AACxF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG;IAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CA0BxF;AAED,+BAA+B;AAC/B,wBAAsB,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAExG;AAED,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAI/E;AAED,kCAAkC;AAClC,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,UAAU,CAAA;CAAE;AACrC,iGAAiG;GAC/F;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAI9C;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,CAAC,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EACjH,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,UAAU,CAAC,CAiDrB;AAED,iEAAiE;AACjE,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAEvG;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAAC,CAQnI"}