@ixo/decision-oracle 0.0.0-stage → 0.2.1

package/dist/routes/v1/reviews.js

@@ -0,0 +1,234 @@
+/**
+ * The review lane (README "How a claim flows" step 6). A `pending_review` decision names the ReviewTasks a human
+ * must answer (`decision.pendingTasks`); the answers land here and the `ReviewComplete` workflow
+ * folds them into the SAME decision through the engine (never a second evaluation). UCAN-guarded
+ * like the rest of `/v1/*`; on top of that, only a reviewer the COMPANY named may answer (company
+ * authority D2; ownership review F1, F12): the answer carries `reviewerGrant`, the `claims/review`
+ * delegation a current controller of the collection's entity gave the reviewer, and it must pass
+ * the gate (lib/review/reviewer-grant.ts) — filed and unrevoked here, rooted at a live controller,
+ * no oracle and no evaluator in it. An evaluate grant alone never answers: that power can already
+ * sign `MsgEvaluateClaim` and move the collection's payments. A rubric's `assignTo` is routing, not
+ * access. The fold re-runs the gate and forwards the grant verbatim; the engine checks its root.
+ *
+ *   POST /v1/reviews/:claimId   { answers: { taskId → boolean | string }, attestation, reviewerGrant }
+ *                               → 202 + the review row
+ *   GET  /v1/reviews/:claimId   the pending tasks, the stored answers, and why a fold failed — the
+ *                               read gate's audience plus the collection's live reviewers
+ *
+ * Answers must cover EXACTLY the pending tasks (all-or-nothing); their VALUES are the engine's to
+ * check against the rubric's ReviewTasks at fold time. Answered-once until folded: a re-POST
+ * before the fold replaces the answers and re-spawns (the crash-window / "try again" recovery —
+ * also how a `foldError` is cleared); after the fold it conflicts.
+ *
+ * `attestation` is the reviewer's own signed statement over those answers (design §B.3) and is
+ * REQUIRED on every review (owner ruling, 2026-09-14): there is no unsigned path and no flag — a
+ * review answer IS a signed statement, or it is refused `ATTESTATION_REQUIRED` before any lookup or
+ * write. This route is the only place that signature CAN be bound to a person: we are the only
+ * party that sees the reviewer's UCAN invocation, so `issuer` is checked against `principal.did`
+ * here and nowhere else. Every check passes or NOTHING is written — which is also why a stored
+ * answer stays signed: the only thing that can replace one is another signature.
+ *
+ * DEPLOY ORDER (docs/ENGINE-CONTRACT.md): the portal signs FIRST — an older kit's body schema
+ * ignores the extra field harmlessly — then engine and kit go out together, because the engine's
+ * fold schema is strict and this kit now forwards `attestation` on every fold.
+ */
+import { isNull } from "drizzle-orm";
+import { Hono } from "hono";
+import { z } from "zod";
+import { claimReviews } from "../../db/schema.js";
+import { AppError } from "../../lib/errors.js";
+import { reviewInstanceIdFor } from "../../lib/ids.js";
+import { getDIDWeb } from "../../lib/ixo/identity.js";
+import { verifyReviewAttestation } from "../../lib/review/attestation.js";
+import { checkReviewerGrant } from "../../lib/review/reviewer-grant.js";
+import { validate } from "../../lib/validator.js";
+import { assertCanRead, reviewBody, watchedOr404 } from "./shared.js";
+export const reviews = new Hono();
+// Same garbage guard as the workflow: real claimIds are CIDs and Matrix event ids — anything
+// printable-ASCII of sane length; the row lookup is the actual validation.
+const ClaimParam = z.object({ claimId: z.string().regex(/^[\x21-\x7e]{1,512}$/) });
+const ReviewBody = z.object({
+    answers: z.record(z.string().min(1).max(256), z.union([z.boolean(), z.string().max(4096)])),
+    /** The reviewer's own signed statement over these answers (design §B.3), a compact JWS. REQUIRED
+     *  — typed optional only so a missing one is refused with `ATTESTATION_REQUIRED` (the handler's
+     *  first line) instead of a generic `VALIDATION`; every check in §B.5 must then pass. */
+    attestation: z.string().min(1).max(16384).optional(),
+    /** The reviewer's grant from the company (D2), a base64 CAR. REQUIRED — typed optional for the
+     *  same reason as `attestation`: a missing one is `REVIEWER_GRANT_INVALID`, the engine's code. */
+    reviewerGrant: z.string().min(1).max(16384).optional(),
+});
+/** The refusal, with the code the engine answers for the same miss. A message per code because the
+ *  reviewer's portal shows it: "signature" and "not you" are different problems to a person. */
+const ATTESTATION_MESSAGES = {
+    ATTESTATION_INVALID: "The review attestation is not a valid signed ClaimReviewAttestation",
+    ATTESTATION_KEY_UNKNOWN: "The reviewer's DID publishes no such Ed25519 key (or no DID document at all)",
+    ATTESTATION_ISSUER_MISMATCH: "The review attestation was issued by someone else",
+    ATTESTATION_MISMATCH: "The review attestation does not match this review",
+    ATTESTATION_UNRESOLVABLE: "The reviewer's DID could not be resolved; try again",
+};
+const attestationError = (code, failures) => 
+// `expose` is explicit: an ATTESTATION_UNRESOLVABLE is a 503, and a 5xx hides its message by
+// default — but this one is the caller's to act on (retry), not an internal fault.
+new AppError(ATTESTATION_MESSAGES[code], { code, expose: true, details: { failures } });
+/**
+ * Spawn (or revive) the completion workflow. Deterministic id ⇒ a concurrent/duplicate spawn
+ * throws "exists": running/complete means already completing; a previously errored instance is
+ * restarted — that one rule makes the POST the recovery path for every failure mode.
+ */
+async function spawnReviewComplete(c, claimId) {
+    const id = await reviewInstanceIdFor(claimId);
+    try {
+        await c.env.REVIEW_WORKFLOW.create({ id, params: { claimId } });
+    }
+    catch (err) {
+        const instance = await c.env.REVIEW_WORKFLOW.get(id).catch(() => null);
+        if (!instance)
+            throw AppError.unavailable("Review workflow unavailable", err);
+        const { status } = await instance.status();
+        if (status === "errored" || status === "terminated")
+            await instance.restart();
+    }
+}
+/** The claim's decision, or 404. Each route gates it its own way before reading further. */
+async function decisionOr404(c, claimId) {
+    const db = await c.var.db();
+    const decision = await db.query.decisions.findFirst({
+        where: (t, { eq }) => eq(t.claimId, claimId),
+    });
+    if (!decision)
+        throw AppError.notFound(`Oracle has no decision for claim ${claimId}`);
+    return decision;
+}
+reviews.post("/:claimId", validate("param", ClaimParam), validate("json", ReviewBody), async (c) => {
+    const { claimId } = c.req.valid("param");
+    const { answers, attestation, reviewerGrant } = c.req.valid("json");
+    const principal = c.get("principal");
+    const config = c.get("config");
+    // A review answer IS the reviewer's signed statement (owner ruling, 2026-09-14): there is no
+    // unsigned path and no flag, so an answer without one is a malformed REQUEST — refused here,
+    // before any lookup or write, rather than after a 404/409/coverage diagnosis it would only
+    // confuse. Its own code, not `VALIDATION`, so a portal can tell "sign it" from "fix it";
+    // that is also why `ReviewBody` types it optional and this line is the requirement.
+    if (!attestation) {
+        throw new AppError("A reviewer-signed attestation is required on every review", {
+            code: "ATTESTATION_REQUIRED",
+        });
+    }
+    // The same posture for the company's grant (D2): no grant, no review — there is no path on
+    // which an evaluate grant or the read gate stands in for it.
+    if (!reviewerGrant) {
+        throw new AppError("A reviewer grant from the collection's owner is required on every review", {
+            code: "REVIEWER_GRANT_INVALID",
+            details: { reason: "absent" },
+        });
+    }
+    const decision = await decisionOr404(c, claimId);
+    await watchedOr404(c, decision.collectionId);
+    const grant = await checkReviewerGrant({ config, trace: c.get("trace"), db: await c.var.db() }, reviewerGrant, { collectionId: decision.collectionId, reviewerDid: principal.did });
+    const pendingTasks = decision.decision?.pendingTasks ?? [];
+    if (decision.status !== "pending_review" || pendingTasks.length === 0) {
+        throw AppError.conflict("Claim is not awaiting review answers");
+    }
+    const extra = Object.keys(answers).filter((id) => !pendingTasks.includes(id));
+    const missing = pendingTasks.filter((id) => !(id in answers));
+    if (extra.length > 0 || missing.length > 0) {
+        throw AppError.badRequest("Answers must cover exactly the pending review tasks", {
+            missing,
+            extra,
+        });
+    }
+    const db = await c.var.db();
+    const existing = await db.query.claimReviews.findFirst({
+        where: (t, { eq }) => eq(t.claimId, claimId),
+    });
+    if (existing?.foldedAt)
+        throw AppError.conflict("Claim already reviewed");
+    // Verified AFTER the pending/coverage gates (a stale or incomplete answer keeps diagnosing
+    // itself) and BEFORE the upsert, so a refused signature never replaces stored answers — which
+    // is also what keeps a stored answer signed: the only way to replace one is another signature.
+    if (!config.SERVICE_ED25519_MNEMONIC) {
+        throw AppError.internal("SERVICE_ED25519_MNEMONIC not configured");
+    }
+    // The audience the reviewer addressed — what `ucan-auth.ts` pins as ours. NOT
+    // `ORACLE_ENTITY_DID`: the card and the portal's handler path name that one differently, and
+    // an attestation two honest paths sign differently is worthless (design §B.3).
+    const { serviceDid } = await getDIDWeb(config.SERVICE_ED25519_MNEMONIC, config.ORACLE_HOSTNAME);
+    // A `pending_review` row always has a digest (they are written together). If one somehow does
+    // not, that is OUR broken row — never an `ATTESTATION_MISMATCH` blaming the reviewer for a
+    // binding we could not supply.
+    if (!decision.resultDigest) {
+        throw AppError.internal(`Decision ${claimId} is pending review with no resultDigest`);
+    }
+    const verified = await verifyReviewAttestation({ config }, attestation, {
+        issuer: principal.did,
+        oracleDid: serviceDid,
+        claimId,
+        answeredAgainst: decision.resultDigest,
+        answers,
+    });
+    if (!verified.ok)
+        throw attestationError(verified.code, verified.failures);
+    const attestationCid = verified.cid;
+    const fields = {
+        answers,
+        reviewerDid: principal.did,
+        attestationJws: attestation,
+        // The grant the answer was checked under, as the controller FILED it (`checkReviewerGrant`
+        // matched it by canonical CID) — not the reviewer's copy, which may be the same grant in
+        // other bytes. Replaced by every re-POST with the answers it came with.
+        reviewerGrant: grant.delegation,
+        answeredAt: new Date(),
+        foldedAt: null,
+        foldError: null,
+    };
+    // Never over a fold that landed since the `existing` read above: the folded row is final, and
+    // the fold stamps only the answer it folded (workflows/review-complete.ts).
+    const [row] = await db
+        .insert(claimReviews)
+        .values({ claimId, ...fields })
+        .onConflictDoUpdate({
+        target: claimReviews.claimId,
+        set: fields,
+        setWhere: isNull(claimReviews.foldedAt),
+    })
+        .returning();
+    if (!row)
+        throw AppError.conflict("Claim already reviewed");
+    await spawnReviewComplete(c, claimId);
+    c.get("metrics").count("review.received");
+    c.get("logger").info("review.received", {
+        claimId,
+        collectionId: decision.collectionId,
+        reviewerDid: principal.did,
+        invokerDid: principal.invokerDid,
+        // Whether `reviewerDid` above is the reviewer's own signed word or merely ours.
+        signed: !!attestation,
+        attestationCid,
+        grantCid: grant.cid,
+        grantRoot: grant.rootDid,
+        tasks: pendingTasks,
+        resend: !!existing,
+    });
+    return c.json(reviewBody(row), 202);
+});
+reviews.get("/:claimId", validate("param", ClaimParam), async (c) => {
+    const { claimId } = c.req.valid("param");
+    const decision = await decisionOr404(c, claimId);
+    await assertCanRead(c, decision.collectionId, { reviewers: true });
+    const db = await c.var.db();
+    const review = await db.query.claimReviews.findFirst({
+        where: (t, { eq }) => eq(t.claimId, claimId),
+    });
+    return c.json({
+        claimId,
+        collectionId: decision.collectionId,
+        status: decision.status,
+        verdict: decision.verdict,
+        resultDigest: decision.resultDigest,
+        pendingTasks: decision.decision?.pendingTasks ?? [],
+        // Which facts errored and why — the reviewer's "why was this held"; null when none did.
+        erroredFacts: decision.erroredFacts,
+        review: review ? reviewBody(review) : null,
+    });
+});
+//# sourceMappingURL=reviews.js.map

package/dist/routes/v1/reviews.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviews.js","sourceRoot":"","sources":["../../../src/routes/v1/reviews.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAA6B,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAEnE,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,IAAI,EAAU,CAAC;AAE1C,6FAA6F;AAC7F,2EAA2E;AAC3E,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;AAEnF,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3F;;6FAEyF;IACzF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACpD;sGACkG;IAClG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH;gGACgG;AAChG,MAAM,oBAAoB,GAAyC;IACjE,mBAAmB,EAAE,qEAAqE;IAC1F,uBAAuB,EACrB,8EAA8E;IAChF,2BAA2B,EAAE,mDAAmD;IAChF,oBAAoB,EAAE,mDAAmD;IACzE,wBAAwB,EAAE,qDAAqD;CAChF,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,IAA0B,EAAE,QAAkB,EAAY,EAAE;AACpF,6FAA6F;AAC7F,mFAAmF;AACnF,IAAI,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;AAE1F;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAAC,CAAa,EAAE,OAAe;IAC/D,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,QAAQ;YAAE,MAAM,QAAQ,CAAC,WAAW,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAC9E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY;YAAE,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;IAChF,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,KAAK,UAAU,aAAa,CAAC,CAAa,EAAE,OAAe;IACzD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC;QAClD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;KAC7C,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;IACtF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,OAAO,CAAC,IAAI,CACV,WAAW,EACX,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,EAC7B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,EAC5B,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE/B,6FAA6F;IAC7F,6FAA6F;IAC7F,2FAA2F;IAC3F,yFAAyF;IACzF,oFAAoF;IACpF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC,2DAA2D,EAAE;YAC9E,IAAI,EAAE,sBAAsB;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,2FAA2F;IAC3F,6DAA6D;IAC7D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,QAAQ,CAChB,0EAA0E,EAC1E;YACE,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC9B,CACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EACvD,aAAa,EACb,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,EAAE,CACpE,CAAC;IACF,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,gBAAgB,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,CAAC,UAAU,CAAC,qDAAqD,EAAE;YAC/E,OAAO;YACP,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;QACrD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;KAC7C,CAAC,CAAC;IACH,IAAI,QAAQ,EAAE,QAAQ;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAE1E,2FAA2F;IAC3F,8FAA8F;IAC9F,+FAA+F;IAC/F,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;QACrC,MAAM,QAAQ,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;IACrE,CAAC;IACD,8EAA8E;IAC9E,6FAA6F;IAC7F,+EAA+E;IAC/E,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAChG,8FAA8F;IAC9F,2FAA2F;IAC3F,+BAA+B;IAC/B,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3B,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,OAAO,yCAAyC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE;QACtE,MAAM,EAAE,SAAS,CAAC,GAAG;QACrB,SAAS,EAAE,UAAU;QACrB,OAAO;QACP,eAAe,EAAE,QAAQ,CAAC,YAAY;QACtC,OAAO;KACR,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC;IAEpC,MAAM,MAAM,GAAG;QACb,OAAO;QACP,WAAW,EAAE,SAAS,CAAC,GAAG;QAC1B,cAAc,EAAE,WAAW;QAC3B,2FAA2F;QAC3F,yFAAyF;QACzF,wEAAwE;QACxE,aAAa,EAAE,KAAK,CAAC,UAAU;QAC/B,UAAU,EAAE,IAAI,IAAI,EAAE;QACtB,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI;KAChB,CAAC;IACF,8FAA8F;IAC9F,4EAA4E;IAC5E,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,YAAY,CAAC;SACpB,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;SAC9B,kBAAkB,CAAC;QAClB,MAAM,EAAE,YAAY,CAAC,OAAO;QAC5B,GAAG,EAAE,MAAM;QACX,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;KACxC,CAAC;SACD,SAAS,EAAE,CAAC;IACf,IAAI,CAAC,GAAG;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAE5D,MAAM,mBAAmB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC1C,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE;QACtC,OAAO;QACP,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,WAAW,EAAE,SAAS,CAAC,GAAG;QAC1B,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,gFAAgF;QAChF,MAAM,EAAE,CAAC,CAAC,WAAW;QACrB,cAAc;QACd,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,SAAS,EAAE,KAAK,CAAC,OAAO;QACxB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,CAAC,CAAC,QAAQ;KACnB,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC,CACF,CAAC;AAEF,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAClE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;QACnD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;KAC7C,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,OAAO;QACP,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE;QACnD,wFAAwF;QACxF,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;KAC3C,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}