@m2-ai/lattice-cli 0.0.0-stage → 0.8.7

package/dist/project-bundle-env.test.js

@@ -0,0 +1,93 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_test_1 = __importDefault(require("node:test"));
+const project_bundle_env_js_1 = require("./project-bundle-env.js");
+(0, node_test_1.default)('normalizeProjectBundleEnvVariables supports legacy and structured shapes', () => {
+    strict_1.default.deepEqual((0, project_bundle_env_js_1.normalizeProjectBundleEnvVariables)([
+        'NEXT_PUBLIC_SUPABASE_URL',
+        {
+            key: 'SUPABASE_SERVICE_ROLE_KEY',
+            description: 'Server-only key',
+            defaultValue: 'your-service-role-key',
+        },
+        {
+            name: 'DATABASE_URL',
+            group: 'Database',
+            example: 'postgresql://postgres:postgres@localhost:5432/app',
+        },
+    ]), [
+        { name: 'NEXT_PUBLIC_SUPABASE_URL' },
+        {
+            name: 'SUPABASE_SERVICE_ROLE_KEY',
+            comment: 'Server-only key',
+            example: 'your-service-role-key',
+        },
+        {
+            name: 'DATABASE_URL',
+            group: 'Database',
+            example: 'postgresql://postgres:postgres@localhost:5432/app',
+        },
+    ]);
+});
+(0, node_test_1.default)('renderEnvExampleFile groups and annotates variables', () => {
+    const specs = [
+        {
+            name: 'NEXT_PUBLIC_SUPABASE_URL',
+            group: 'Supabase',
+            comment: 'Project URL from Supabase settings.',
+            example: 'https://your-project.supabase.co',
+        },
+        {
+            name: 'SUPABASE_SERVICE_ROLE_KEY',
+            group: 'Supabase',
+            comment: 'Server-only key.',
+            example: 'your-service-role-key',
+        },
+    ];
+    strict_1.default.equal((0, project_bundle_env_js_1.renderEnvExampleFile)(specs), [
+        '# Environment variables',
+        '',
+        '# Supabase',
+        '# Project URL from Supabase settings.',
+        'NEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co',
+        '',
+        '# Server-only key.',
+        'SUPABASE_SERVICE_ROLE_KEY=your-service-role-key',
+        '',
+    ].join('\n'));
+});
+(0, node_test_1.default)('renderEnvLocalFile keeps examples in comments and blanks the values', () => {
+    const specs = [
+        {
+            name: 'NEXT_PUBLIC_SUPABASE_URL',
+            group: 'Supabase',
+            comment: 'Project URL from Supabase settings.',
+            example: 'https://your-project.supabase.co',
+        },
+        {
+            name: 'SUPABASE_SERVICE_ROLE_KEY',
+            group: 'Supabase',
+            comment: 'Server-only key.',
+            example: 'your-service-role-key',
+        },
+    ];
+    strict_1.default.equal((0, project_bundle_env_js_1.renderEnvLocalFile)(specs), [
+        '# Copy from .env.example and fill in your values',
+        '# DO NOT commit this file to git',
+        '',
+        '# Supabase',
+        '# Project URL from Supabase settings.',
+        '# Example: https://your-project.supabase.co',
+        'NEXT_PUBLIC_SUPABASE_URL=',
+        '',
+        '# Server-only key.',
+        '# Example: your-service-role-key',
+        'SUPABASE_SERVICE_ROLE_KEY=',
+        '',
+    ].join('\n'));
+});
+//# sourceMappingURL=project-bundle-env.test.js.map

package/dist/project-bundle-env.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-bundle-env.test.js","sourceRoot":"","sources":["../src/project-bundle-env.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,0DAA6B;AAC7B,mEAKiC;AAEjC,IAAA,mBAAI,EAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,gBAAM,CAAC,SAAS,CACd,IAAA,0DAAkC,EAAC;QACjC,0BAA0B;QAC1B;YACE,GAAG,EAAE,2BAA2B;YAChC,WAAW,EAAE,iBAAiB;YAC9B,YAAY,EAAE,uBAAuB;SACtC;QACD;YACE,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,mDAAmD;SAC7D;KACF,CAAC,EACF;QACE,EAAE,IAAI,EAAE,0BAA0B,EAAE;QACpC;YACE,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EAAE,uBAAuB;SACjC;QACD;YACE,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,mDAAmD;SAC7D;KACF,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,qDAAqD,EAAE,GAAG,EAAE;IAC/D,MAAM,KAAK,GAAsB;QAC/B;YACE,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,qCAAqC;YAC9C,OAAO,EAAE,kCAAkC;SAC5C;QACD;YACE,IAAI,EAAE,2BAA2B;YACjC,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,uBAAuB;SACjC;KACF,CAAC;IAEF,gBAAM,CAAC,KAAK,CACV,IAAA,4CAAoB,EAAC,KAAK,CAAC,EAC3B;QACE,yBAAyB;QACzB,EAAE;QACF,YAAY;QACZ,uCAAuC;QACvC,2DAA2D;QAC3D,EAAE;QACF,oBAAoB;QACpB,iDAAiD;QACjD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,KAAK,GAAsB;QAC/B;YACE,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,qCAAqC;YAC9C,OAAO,EAAE,kCAAkC;SAC5C;QACD;YACE,IAAI,EAAE,2BAA2B;YACjC,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,uBAAuB;SACjC;KACF,CAAC;IAEF,gBAAM,CAAC,KAAK,CACV,IAAA,0CAAkB,EAAC,KAAK,CAAC,EACzB;QACE,kDAAkD;QAClD,kCAAkC;QAClC,EAAE;QACF,YAAY;QACZ,uCAAuC;QACvC,6CAA6C;QAC7C,2BAA2B;QAC3B,EAAE;QACF,oBAAoB;QACpB,kCAAkC;QAClC,4BAA4B;QAC5B,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/project-path-confinement.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=project-path-confinement.test.d.ts.map

package/dist/project-path-confinement.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-path-confinement.test.d.ts","sourceRoot":"","sources":["../src/project-path-confinement.test.ts"],"names":[],"mappings":""}

package/dist/project-path-confinement.test.js

@@ -0,0 +1,222 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_test_1 = __importDefault(require("node:test"));
+const index_js_1 = require("./index.js");
+const quietLog = console.log;
+async function fixture(run) {
+    const root = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'lattice-path-confinement-'));
+    const pack = (0, node_path_1.join)(root, 'pack');
+    const target = (0, node_path_1.join)(root, 'target');
+    const outside = (0, node_path_1.join)(root, 'outside');
+    await Promise.all([node_fs_1.promises.mkdir(pack), node_fs_1.promises.mkdir(target), node_fs_1.promises.mkdir(outside)]);
+    console.log = () => { };
+    try {
+        await run({ root, pack, target, outside });
+    }
+    finally {
+        console.log = quietLog;
+        await node_fs_1.promises.rm(root, { recursive: true, force: true });
+    }
+}
+function sha256(content) {
+    return (0, node_crypto_1.createHash)('sha256').update(content).digest('hex');
+}
+async function writePack(pack, files) {
+    for (const [filePath, content] of Object.entries(files)) {
+        const absolutePath = (0, node_path_1.join)(pack, ...filePath.split('/'));
+        await node_fs_1.promises.mkdir((0, node_path_1.dirname)(absolutePath), { recursive: true });
+        await node_fs_1.promises.writeFile(absolutePath, content);
+    }
+    const manifest = {
+        generatorVersion: 'test',
+        policyVersion: 'test',
+        configHash: 'test',
+        files: Object.entries(files).map(([path, content]) => ({ path, sha256: sha256(content) })),
+    };
+    await node_fs_1.promises.mkdir((0, node_path_1.join)(pack, '.lattice'), { recursive: true });
+    await node_fs_1.promises.writeFile((0, node_path_1.join)(pack, '.lattice', 'manifest.json'), JSON.stringify(manifest));
+}
+(0, node_test_1.default)('apply rejects a later junction path before an earlier file or outside sentinel is written', async () => {
+    await fixture(async ({ pack, target, outside }) => {
+        await writePack(pack, {
+            'safe.txt': Buffer.from('must not be written'),
+            '.github/workflows/ci.yml': Buffer.from('attacker content'),
+        });
+        const sentinel = (0, node_path_1.join)(outside, 'workflows', 'ci.yml');
+        await node_fs_1.promises.mkdir((0, node_path_1.dirname)(sentinel), { recursive: true });
+        await node_fs_1.promises.writeFile(sentinel, 'outside sentinel\n');
+        await node_fs_1.promises.symlink(outside, (0, node_path_1.join)(target, '.github'), process.platform === 'win32' ? 'junction' : 'dir');
+        await strict_1.default.rejects((0, index_js_1.apply)(pack, target), /symbolic link or junction/);
+        await strict_1.default.rejects(node_fs_1.promises.access((0, node_path_1.join)(target, 'safe.txt')), { code: 'ENOENT' });
+        strict_1.default.equal(await node_fs_1.promises.readFile(sentinel, 'utf8'), 'outside sentinel\n');
+    });
+});
+(0, node_test_1.default)('apply preview validates a missing target without creating it', async () => {
+    await fixture(async ({ root, pack }) => {
+        const target = (0, node_path_1.join)(root, 'missing-target');
+        await writePack(pack, { 'binary.dat': Buffer.from([0, 255, 1, 254]) });
+        await (0, index_js_1.apply)(pack, target, { preview: true });
+        await strict_1.default.rejects(node_fs_1.promises.access(target), { code: 'ENOENT' });
+    });
+});
+(0, node_test_1.default)('apply preserves binary bytes in the normal missing-file journey', async () => {
+    await fixture(async ({ pack, target }) => {
+        const bytes = Buffer.from([0, 255, 1, 254, 13, 10, 0]);
+        await writePack(pack, { 'assets/binary.dat': bytes });
+        await (0, index_js_1.apply)(pack, target);
+        strict_1.default.deepEqual(await node_fs_1.promises.readFile((0, node_path_1.join)(target, 'assets', 'binary.dat')), bytes);
+    });
+});
+(0, node_test_1.default)('apply preserves a source pack in a sibling with the same target-name prefix', async () => {
+    await fixture(async ({ root }) => {
+        const target = (0, node_path_1.join)(root, 'app');
+        const pack = (0, node_path_1.join)(root, 'application', 'lattice-pack');
+        await node_fs_1.promises.mkdir(pack, { recursive: true });
+        await writePack(pack, { 'safe.txt': Buffer.from('normal content') });
+        await (0, index_js_1.apply)(pack, target);
+        strict_1.default.equal(await node_fs_1.promises.readFile((0, node_path_1.join)(target, 'safe.txt'), 'utf8'), 'normal content');
+        strict_1.default.equal(await node_fs_1.promises.readFile((0, node_path_1.join)(pack, 'safe.txt'), 'utf8'), 'normal content');
+    });
+});
+(0, node_test_1.default)('apply rejects manifest traversal before reading a declared source', async () => {
+    await fixture(async ({ root, pack, target }) => {
+        await node_fs_1.promises.mkdir((0, node_path_1.join)(pack, '.lattice'), { recursive: true });
+        await node_fs_1.promises.writeFile((0, node_path_1.join)(root, 'secret.txt'), 'secret');
+        await node_fs_1.promises.writeFile((0, node_path_1.join)(pack, '.lattice', 'manifest.json'), JSON.stringify({
+            files: [{ path: '../secret.txt', sha256: 'irrelevant' }],
+        }));
+        await strict_1.default.rejects((0, index_js_1.apply)(pack, target), /unsafe segment|escapes/);
+    });
+});
+(0, node_test_1.default)('drift refuses a manifest-declared read through a junction', async () => {
+    await fixture(async ({ target, outside }) => {
+        await node_fs_1.promises.mkdir((0, node_path_1.join)(target, '.lattice'), { recursive: true });
+        await node_fs_1.promises.writeFile((0, node_path_1.join)(outside, 'secret.txt'), 'secret');
+        await node_fs_1.promises.symlink(outside, (0, node_path_1.join)(target, 'linked'), process.platform === 'win32' ? 'junction' : 'dir');
+        await node_fs_1.promises.writeFile((0, node_path_1.join)(target, '.lattice', 'manifest.json'), JSON.stringify({
+            files: [{ path: 'linked/secret.txt', sha256: sha256(Buffer.from('secret')) }],
+        }));
+        await strict_1.default.rejects((0, index_js_1.detectDrift)(target), /symbolic link or junction/);
+    });
+});
+(0, node_test_1.default)('bundle preflight rejects a junction before config or outside writes', async () => {
+    await fixture(async ({ target, outside }) => {
+        await node_fs_1.promises.symlink(outside, (0, node_path_1.join)(target, '.github'), process.platform === 'win32' ? 'junction' : 'dir');
+        const previousCwd = process.cwd();
+        process.chdir(target);
+        try {
+            await strict_1.default.rejects((0, index_js_1.applyBundle)({
+                version: 'test',
+                name: 'test',
+                config: { projectType: 'nextjs', strictnessPreset: 'startup' },
+                files: { '.github/workflows/ci.yml': 'attacker content' },
+            }), /symbolic link or junction/);
+        }
+        finally {
+            process.chdir(previousCwd);
+        }
+        await strict_1.default.rejects(node_fs_1.promises.access((0, node_path_1.join)(target, '.lattice', 'config.json')), { code: 'ENOENT' });
+        await strict_1.default.rejects(node_fs_1.promises.access((0, node_path_1.join)(outside, 'workflows', 'ci.yml')), { code: 'ENOENT' });
+    });
+});
+(0, node_test_1.default)('bundle preflight rejects the fixed lattice-pack generation directory when linked', async () => {
+    await fixture(async ({ target, outside }) => {
+        await node_fs_1.promises.symlink(outside, (0, node_path_1.join)(target, 'lattice-pack'), process.platform === 'win32' ? 'junction' : 'dir');
+        const previousCwd = process.cwd();
+        process.chdir(target);
+        try {
+            await strict_1.default.rejects((0, index_js_1.applyBundle)({
+                version: 'test',
+                name: 'test',
+                config: { projectType: 'nextjs', strictnessPreset: 'startup' },
+                files: {},
+            }), /symbolic link or junction/);
+        }
+        finally {
+            process.chdir(previousCwd);
+        }
+        await strict_1.default.rejects(node_fs_1.promises.access((0, node_path_1.join)(target, '.lattice', 'config.json')), { code: 'ENOENT' });
+        strict_1.default.deepEqual(await node_fs_1.promises.readdir(outside), []);
+    });
+});
+(0, node_test_1.default)('generate refuses an output junction without changing its outside target', async () => {
+    await fixture(async ({ target, outside }) => {
+        await node_fs_1.promises.mkdir((0, node_path_1.join)(target, '.lattice'), { recursive: true });
+        await node_fs_1.promises.writeFile((0, node_path_1.join)(target, '.lattice', 'config.json'), JSON.stringify({
+            projectType: 'nextjs',
+            strictnessPreset: 'startup',
+        }));
+        const sentinel = (0, node_path_1.join)(outside, 'workflows', 'ci.yml');
+        await node_fs_1.promises.mkdir((0, node_path_1.dirname)(sentinel), { recursive: true });
+        await node_fs_1.promises.writeFile(sentinel, 'outside sentinel\n');
+        await node_fs_1.promises.symlink(outside, (0, node_path_1.join)(target, '.github'), process.platform === 'win32' ? 'junction' : 'dir');
+        const previousCwd = process.cwd();
+        process.chdir(target);
+        try {
+            await strict_1.default.rejects((0, index_js_1.generate)(target), /symbolic link or junction/);
+        }
+        finally {
+            process.chdir(previousCwd);
+        }
+        strict_1.default.equal(await node_fs_1.promises.readFile(sentinel, 'utf8'), 'outside sentinel\n');
+    });
+});
+(0, node_test_1.default)('manual Next scaffold rejects a later junction before package.json is written', async () => {
+    await fixture(async ({ target, outside }) => {
+        await node_fs_1.promises.symlink(outside, (0, node_path_1.join)(target, 'src'), process.platform === 'win32' ? 'junction' : 'dir');
+        await strict_1.default.rejects((0, index_js_1.scaffoldNextJsProject)(target, 'fixture-app'), /symbolic link or junction/);
+        await strict_1.default.rejects(node_fs_1.promises.access((0, node_path_1.join)(target, 'package.json')), { code: 'ENOENT' });
+        strict_1.default.deepEqual(await node_fs_1.promises.readdir(outside), []);
+    });
+});
+(0, node_test_1.default)('create preflight rejects a conditional env hard link before scaffold writes', async () => {
+    await fixture(async ({ target, outside }) => {
+        const sentinel = (0, node_path_1.join)(outside, 'env-sentinel');
+        await node_fs_1.promises.writeFile(sentinel, 'outside sentinel\n');
+        await node_fs_1.promises.link(sentinel, (0, node_path_1.join)(target, '.env.local'));
+        await strict_1.default.rejects((0, index_js_1.prepareCreateOutputPlan)(target, ['PROJECT_GUIDE.md'], false, true), /multiple hard links/);
+        await strict_1.default.rejects(node_fs_1.promises.access((0, node_path_1.join)(target, 'package.json')), { code: 'ENOENT' });
+        strict_1.default.equal(await node_fs_1.promises.readFile(sentinel, 'utf8'), 'outside sentinel\n');
+    });
+});
+(0, node_test_1.default)('init refuses a linked metadata directory without changing the outside sentinel', async () => {
+    await fixture(async ({ target, outside }) => {
+        const sentinel = (0, node_path_1.join)(outside, 'config.json');
+        await node_fs_1.promises.writeFile(sentinel, 'outside sentinel\n');
+        await node_fs_1.promises.symlink(outside, (0, node_path_1.join)(target, '.lattice'), process.platform === 'win32' ? 'junction' : 'dir');
+        const previousCwd = process.cwd();
+        process.chdir(target);
+        try {
+            await strict_1.default.rejects((0, index_js_1.init)('nextjs', 'startup'), /symbolic link or junction/);
+        }
+        finally {
+            process.chdir(previousCwd);
+        }
+        strict_1.default.equal(await node_fs_1.promises.readFile(sentinel, 'utf8'), 'outside sentinel\n');
+    });
+});
+(0, node_test_1.default)('failure-report fallback does not follow a linked metadata directory', async () => {
+    await fixture(async ({ target, outside }) => {
+        const sentinel = (0, node_path_1.join)(outside, 'failure-report.json');
+        await node_fs_1.promises.writeFile(sentinel, 'outside sentinel\n');
+        await node_fs_1.promises.symlink(outside, (0, node_path_1.join)(target, '.lattice'), process.platform === 'win32' ? 'junction' : 'dir');
+        const previousCwd = process.cwd();
+        process.chdir(target);
+        try {
+            await (0, index_js_1.writeFailureReport)({ error: new Error('expected'), argv: [], debug: false });
+        }
+        finally {
+            process.chdir(previousCwd);
+        }
+        strict_1.default.equal(await node_fs_1.promises.readFile(sentinel, 'utf8'), 'outside sentinel\n');
+    });
+});
+//# sourceMappingURL=project-path-confinement.test.js.map

package/dist/project-path-confinement.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-path-confinement.test.js","sourceRoot":"","sources":["../src/project-path-confinement.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,6CAAyC;AACzC,qCAAyC;AACzC,qCAAiC;AACjC,yCAA0C;AAC1C,0DAA6B;AAC7B,yCASoB;AAEpB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;AAE7B,KAAK,UAAU,OAAO,CAAC,GAA8F;IACnH,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,kBAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,kBAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,kBAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC;QACvB,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,KAA6B;IAClE,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,mBAAO,EAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,kBAAE,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,gBAAgB,EAAE,MAAM;QACxB,aAAa,EAAE,MAAM;QACrB,UAAU,EAAE,MAAM;QAClB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;KAC3F,CAAC;IACF,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,IAAA,mBAAI,EAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;IAC3G,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAChD,MAAM,SAAS,CAAC,IAAI,EAAE;YACpB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC;YAC9C,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,mBAAO,EAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QACnD,MAAM,kBAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAA,gBAAI,EAAC,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAEtG,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,gBAAK,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,2BAA2B,CAAC,CAAC;QACvE,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9E,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;IAC9E,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAC5C,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,IAAA,gBAAK,EAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;IACjF,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,IAAA,gBAAK,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1B,gBAAM,CAAC,SAAS,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;QACvD,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,IAAA,gBAAK,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1B,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACpF,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QAC7C,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACzE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;SACzD,CAAC,CAAC,CAAC;QACJ,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,gBAAK,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1C,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,kBAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAA,gBAAI,EAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrG,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YAC3E,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAC,CAAC;QACJ,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,sBAAW,EAAC,MAAM,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1C,MAAM,kBAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAA,gBAAI,EAAC,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtG,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,sBAAW,EAAC;gBAC/B,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE;gBAC9D,KAAK,EAAE,EAAE,0BAA0B,EAAE,kBAAkB,EAAE;aAC1D,CAAC,EAAE,2BAA2B,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7F,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;IAClG,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1C,MAAM,kBAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAA,gBAAI,EAAC,MAAM,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3G,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,sBAAW,EAAC;gBAC/B,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE;gBAC9D,KAAK,EAAE,EAAE;aACV,CAAC,EAAE,2BAA2B,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7F,gBAAM,CAAC,SAAS,CAAC,MAAM,kBAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1C,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACzE,WAAW,EAAE,QAAQ;YACrB,gBAAgB,EAAE,SAAS;SAC5B,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAA,mBAAO,EAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QACnD,MAAM,kBAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAA,gBAAI,EAAC,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtG,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,mBAAQ,EAAC,MAAM,CAAC,EAAE,2BAA2B,CAAC,CAAC;QACtE,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;QACD,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1C,MAAM,kBAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAA,gBAAI,EAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClG,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,gCAAqB,EAAC,MAAM,EAAE,aAAa,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAChG,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClF,gBAAM,CAAC,SAAS,CAAC,MAAM,kBAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC/C,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QACnD,MAAM,kBAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAA,gBAAI,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QACpD,MAAM,gBAAM,CAAC,OAAO,CAClB,IAAA,kCAAuB,EAAC,MAAM,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAClE,qBAAqB,CACtB,CAAC;QACF,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,IAAA,gBAAI,EAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClF,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC9C,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QACnD,MAAM,kBAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAA,gBAAI,EAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvG,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,eAAI,EAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAC/E,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;QACD,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACtD,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QACnD,MAAM,kBAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAA,gBAAI,EAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvG,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAA,6BAAkB,EAAC,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;QACD,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/security/api.d.ts

@@ -0,0 +1,18 @@
+import type { BeginSecurityRunRequest, BeginSecurityRunResponse, FinishSecurityRunResponse, SecurityAppStatusResponse, SecurityConnection } from './types.js';
+export declare class SecurityApiRequestError extends Error {
+    readonly status: number | null;
+    readonly code: string;
+    readonly retryable: boolean;
+    readonly recoveryAt?: string | undefined;
+    constructor(message: string, status: number | null, code: string, retryable: boolean, recoveryAt?: string | undefined);
+}
+export interface SecurityApiRequestOptions {
+    fetcher?: typeof fetch;
+    timeoutMs?: number;
+}
+export declare function getSecurityStatus(connection: SecurityConnection, options?: SecurityApiRequestOptions): Promise<SecurityAppStatusResponse>;
+export declare function beginSecurityRun(connection: SecurityConnection, input: BeginSecurityRunRequest, options?: SecurityApiRequestOptions): Promise<BeginSecurityRunResponse>;
+export declare function finishSecurityRun(connection: SecurityConnection, runId: string, exactRequestBody: string, options?: SecurityApiRequestOptions & {
+    retries?: number;
+}): Promise<FinishSecurityRunResponse>;
+//# sourceMappingURL=api.d.ts.map

package/dist/security/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/security/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EAEzB,yBAAyB,EACzB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAqDpB,qBAAa,uBAAwB,SAAQ,KAAK;aAG9B,MAAM,EAAE,MAAM,GAAG,IAAI;aACrB,IAAI,EAAE,MAAM;aACZ,SAAS,EAAE,OAAO;aAClB,UAAU,CAAC,EAAE,MAAM;gBAJnC,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,OAAO,EAClB,UAAU,CAAC,EAAE,MAAM,YAAA;CAKtC;AA2ED,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAkDD,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,kBAAkB,EAC9B,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,yBAAyB,CAAC,CAWpC;AAED,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,kBAAkB,EAC9B,KAAK,EAAE,uBAAuB,EAC9B,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAoBnC;AAED,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,kBAAkB,EAC9B,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,yBAAyB,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7D,OAAO,CAAC,yBAAyB,CAAC,CAsCpC"}

package/dist/security/api.js

@@ -0,0 +1,238 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityApiRequestError = void 0;
+exports.getSecurityStatus = getSecurityStatus;
+exports.beginSecurityRun = beginSecurityRun;
+exports.finishSecurityRun = finishSecurityRun;
+const MAX_RESPONSE_BYTES = 262_144;
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const RUN_MODES = new Set(['scan', 'deep', 'release', 'report']);
+const RELEASE_BLOCKERS = new Set(['feature_disabled', 'configuration_missing', 'commercial_artifact_unavailable', 'payment_required']);
+const PROVIDER_STATUSES = new Set(['checkout_pending', 'active', 'past_due', 'unpaid', 'incomplete', 'disputed', 'canceled', 'refunded', 'expired']);
+const ARTIFACT_STATUSES = new Set(['unavailable', 'synthetic_test', 'rights_cleared']);
+function isoOrNull(value) {
+    return value === null || (typeof value === 'string' && !Number.isNaN(Date.parse(value)));
+}
+function hasExactKeys(value, expected) {
+    const keys = Object.keys(value);
+    return keys.length === expected.length && keys.every((key) => expected.includes(key));
+}
+function validRuntimeIdentity(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const item = value;
+    const keys = ['vsgVersion', 'profileId', 'profileVersion', 'rulesDigest', 'registryDigest', 'commercialManifestDigest', 'evaluatorDigest', 'catalogDigest'];
+    return hasExactKeys(item, keys)
+        && ['vsgVersion', 'profileId', 'profileVersion'].every((key) => typeof item[key] === 'string' && item[key] !== '')
+        && ['rulesDigest', 'registryDigest', 'commercialManifestDigest', 'evaluatorDigest', 'catalogDigest']
+            .every((key) => typeof item[key] === 'string' && /^[0-9a-f]{64}$/.test(item[key]));
+}
+function validStatusResponse(value, appId) {
+    if (!value || !hasExactKeys(value, ['app', 'entitledModes', 'entitlements', 'checkoutEnabled', 'publicationEnabled', 'releaseBlockers'])
+        || !value.app || !hasExactKeys(value.app, ['id', 'name', 'repositoryIdentity', 'origin', 'repositoryLockedAt', 'createdAt'])
+        || value.app.id !== appId || typeof value.app.name !== 'string'
+        || typeof value.app.repositoryIdentity !== 'string'
+        || !(value.app.origin === null || typeof value.app.origin === 'string')
+        || !isoOrNull(value.app.repositoryLockedAt)
+        || typeof value.app.createdAt !== 'string' || Number.isNaN(Date.parse(value.app.createdAt))
+        || !Array.isArray(value.entitlements) || !Array.isArray(value.entitledModes)
+        || value.entitledModes.some((mode) => !RUN_MODES.has(mode))
+        || !Array.isArray(value.releaseBlockers) || value.releaseBlockers.some((item) => !RELEASE_BLOCKERS.has(item))
+        || typeof value.publicationEnabled !== 'boolean' || typeof value.checkoutEnabled !== 'boolean')
+        return false;
+    return value.entitlements.every((item) => hasExactKeys(item, [
+        'id', 'kind', 'providerStatus', 'artifactStatus', 'unitLimit', 'consumedUnits', 'reservedUnits',
+        'remainingUnits', 'periodStart', 'periodEnd', 'cancelAtPeriodEnd', 'requiredRuntime',
+    ]) && UUID.test(item.id)
+        && ['security_launch', 'security_subscription'].includes(item.kind)
+        && PROVIDER_STATUSES.has(item.providerStatus) && ARTIFACT_STATUSES.has(item.artifactStatus)
+        && [item.unitLimit, item.consumedUnits, item.reservedUnits, item.remainingUnits]
+            .every((number) => Number.isSafeInteger(number) && number >= 0)
+        && isoOrNull(item.periodStart) && isoOrNull(item.periodEnd)
+        && typeof item.cancelAtPeriodEnd === 'boolean'
+        && (item.requiredRuntime === null || validRuntimeIdentity(item.requiredRuntime)));
+}
+class SecurityApiRequestError extends Error {
+    status;
+    code;
+    retryable;
+    recoveryAt;
+    constructor(message, status, code, retryable, recoveryAt) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.retryable = retryable;
+        this.recoveryAt = recoveryAt;
+        this.name = 'SecurityApiRequestError';
+    }
+}
+exports.SecurityApiRequestError = SecurityApiRequestError;
+function redactToken(value, token) {
+    return value.split(token).join('[REDACTED]');
+}
+async function cancelResponseBody(response) {
+    try {
+        await response.body?.cancel();
+    }
+    catch {
+        // The response is being rejected already; cancellation is best-effort socket cleanup.
+    }
+}
+async function readBoundedJson(response) {
+    const contentType = response.headers.get('content-type')?.toLowerCase() ?? '';
+    if (!contentType.startsWith('application/json')) {
+        await cancelResponseBody(response);
+        throw new Error('Security API returned a non-JSON response.');
+    }
+    const declaredLength = response.headers.get('content-length');
+    if (declaredLength !== null) {
+        const parsed = Number(declaredLength);
+        if (!Number.isSafeInteger(parsed) || parsed < 0) {
+            await cancelResponseBody(response);
+            throw new Error('Security API returned an invalid Content-Length.');
+        }
+        if (parsed > MAX_RESPONSE_BYTES) {
+            await cancelResponseBody(response);
+            throw new Error('Security API response exceeded the allowed size.');
+        }
+    }
+    if (!response.body)
+        throw new Error('Security API returned an empty response.');
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        total += value.byteLength;
+        if (total > MAX_RESPONSE_BYTES) {
+            await reader.cancel();
+            throw new Error('Security API response exceeded the allowed size.');
+        }
+        chunks.push(value);
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    try {
+        return JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes));
+    }
+    catch {
+        throw new Error('Security API returned invalid UTF-8 JSON.');
+    }
+}
+function parseApiError(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return null;
+    const error = value.error;
+    if (!error || typeof error !== 'object' || Array.isArray(error))
+        return null;
+    const item = error;
+    if (typeof item.code !== 'string' || typeof item.message !== 'string' || typeof item.retryable !== 'boolean')
+        return null;
+    return {
+        error: {
+            code: item.code,
+            message: item.message,
+            retryable: item.retryable,
+            ...(typeof item.recoveryAt === 'string' ? { recoveryAt: item.recoveryAt } : {}),
+        },
+    };
+}
+async function requestSecurityJson(connection, pathname, init, options = {}) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), options.timeoutMs ?? 15_000);
+    const url = new URL(pathname, `${connection.apiUrl}/`);
+    try {
+        let response;
+        try {
+            response = await (options.fetcher ?? fetch)(url, {
+                ...init,
+                redirect: 'error',
+                signal: controller.signal,
+                headers: {
+                    Accept: 'application/json',
+                    Authorization: `Bearer ${connection.token}`,
+                    ...init.headers,
+                },
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            throw new SecurityApiRequestError(redactToken(message, connection.token), null, controller.signal.aborted ? 'timeout' : 'network_error', true);
+        }
+        const body = await readBoundedJson(response);
+        if (!response.ok) {
+            const parsed = parseApiError(body);
+            throw new SecurityApiRequestError(redactToken(parsed?.error.message ?? `Security API request failed (HTTP ${response.status}).`, connection.token), response.status, parsed?.error.code ?? 'invalid_response', parsed?.error.retryable ?? response.status >= 500, parsed?.error.recoveryAt);
+        }
+        return body;
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+async function getSecurityStatus(connection, options = {}) {
+    const response = await requestSecurityJson(connection, `/api/security/apps/${encodeURIComponent(connection.appId)}/status`, { method: 'GET' }, options);
+    if (!validStatusResponse(response, connection.appId)) {
+        throw new SecurityApiRequestError('Security API returned an invalid status response.', 200, 'invalid_response', false);
+    }
+    return response;
+}
+async function beginSecurityRun(connection, input, options = {}) {
+    const response = await requestSecurityJson(connection, `/api/security/apps/${encodeURIComponent(connection.appId)}/runs`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', 'Content-Encoding': 'identity' },
+        body: JSON.stringify(input),
+    }, options);
+    if (!response || !['reserved', 'replay'].includes(response.result) || !UUID.test(response.runId)
+        || !['reserved', 'finished', 'aborted', 'expired'].includes(response.state)
+        || Number.isNaN(Date.parse(response.reservationExpiresAt)) || response.entitlementId !== input.entitlementId
+        || !['security_launch', 'security_subscription'].includes(response.grantKind)
+        || !Number.isSafeInteger(response.remainingUnits) || response.remainingUnits < 0
+        || !Number.isSafeInteger(response.reservedUnits) || response.reservedUnits < 0) {
+        throw new SecurityApiRequestError('Security API returned an invalid begin response.', 200, 'invalid_response', false);
+    }
+    return response;
+}
+async function finishSecurityRun(connection, runId, exactRequestBody, options = {}) {
+    const attempts = 1 + Math.min(Math.max(options.retries ?? 2, 0), 2);
+    let lastError;
+    for (let attempt = 0; attempt < attempts; attempt += 1) {
+        try {
+            const response = await requestSecurityJson(connection, `/api/security/apps/${encodeURIComponent(connection.appId)}/runs/${encodeURIComponent(runId)}`, {
+                method: 'PUT',
+                headers: { 'Content-Type': 'application/json', 'Content-Encoding': 'identity' },
+                body: exactRequestBody,
+            }, options);
+            const resultMatchesState = response?.result === 'finished'
+                ? response.state === 'finished'
+                : response?.result === 'aborted'
+                    ? response.state === 'aborted'
+                    : response?.result === 'replay' && ['finished', 'aborted'].includes(response.state);
+            const terminalFieldsMatch = response?.state === 'finished'
+                ? response.verdict !== null
+                : response?.state === 'aborted' && response.verdict === null && response.consumedUnit === false;
+            if (!response || !resultMatchesState || !terminalFieldsMatch || response.runId !== runId
+                || ![null, 'PASS', 'BLOCKED', 'INCOMPLETE'].includes(response.verdict)
+                || Number.isNaN(Date.parse(response.completedAt)) || !isoOrNull(response.contentExpiresAt)
+                || typeof response.consumedUnit !== 'boolean') {
+                throw new SecurityApiRequestError('Security API returned an invalid finish response.', 200, 'invalid_response', false);
+            }
+            return response;
+        }
+        catch (error) {
+            lastError = error;
+            const retry = error instanceof SecurityApiRequestError
+                && (error.status === null || error.status >= 500);
+            if (!retry || attempt + 1 >= attempts)
+                throw error;
+        }
+    }
+    throw lastError;
+}
+//# sourceMappingURL=api.js.map

package/dist/security/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/security/api.ts"],"names":[],"mappings":";;;AAuMA,8CAcC;AAED,4CAwBC;AAED,8CA2CC;AAnRD,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,IAAI,GAAG,4EAA4E,CAAC;AAC1F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AACjE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,uBAAuB,EAAE,iCAAiC,EAAE,kBAAkB,CAAC,CAAC,CAAC;AACvI,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AACrJ,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEvF,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,QAAkB;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,MAAM,IAAI,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC;IAC5J,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC;WAC1B,CAAC,YAAY,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;WAC/G,CAAC,aAAa,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,eAAe,CAAC;aACjG,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAW,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAgC,EAAE,KAAa;IAC1E,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;WACnI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;WACzH,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ;WAC5D,OAAO,KAAK,CAAC,GAAG,CAAC,kBAAkB,KAAK,QAAQ;WAChD,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC;WACpE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC;WACxC,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;WACxF,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;WACzE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;WACxD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;WAC1G,OAAO,KAAK,CAAC,kBAAkB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/G,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE;QAC3D,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe;QAC/F,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,EAAE,iBAAiB;KACrF,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;WACnB,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;WAChE,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC;WACxF,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,cAAc,CAAC;aAC7E,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC;WAC9D,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;WACxD,OAAO,IAAI,CAAC,iBAAiB,KAAK,SAAS;WAC3C,CAAC,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,MAAa,uBAAwB,SAAQ,KAAK;IAG9B;IACA;IACA;IACA;IALlB,YACE,OAAe,EACC,MAAqB,EACrB,IAAY,EACZ,SAAkB,EAClB,UAAmB;QAEnC,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,WAAM,GAAN,MAAM,CAAe;QACrB,SAAI,GAAJ,IAAI,CAAQ;QACZ,cAAS,GAAT,SAAS,CAAS;QAClB,eAAU,GAAV,UAAU,CAAS;QAGnC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAXD,0DAWC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa;IAC/C,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAkB;IAClD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,sFAAsF;IACxF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB;IAC/C,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC9E,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAChD,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9D,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,MAAM,GAAG,kBAAkB,EAAE,CAAC;YAChC,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1B,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAC/B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1H,OAAO;QACL,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF;KACF,CAAC;AACJ,CAAC;AAOD,KAAK,UAAU,mBAAmB,CAChC,UAA8B,EAC9B,QAAgB,EAChB,IAAiB,EACjB,UAAqC,EAAE;IAEvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE;gBAC/C,GAAG,IAAI;gBACP,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,UAAU,UAAU,CAAC,KAAK,EAAE;oBAC3C,GAAG,IAAI,CAAC,OAAO;iBAChB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,uBAAuB,CAC/B,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,EACtC,IAAI,EACJ,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,EACvD,IAAI,CACL,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,IAAI,uBAAuB,CAC/B,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,qCAAqC,QAAQ,CAAC,MAAM,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,EAChH,QAAQ,CAAC,MAAM,EACf,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,kBAAkB,EACxC,MAAM,EAAE,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EACjD,MAAM,EAAE,KAAK,CAAC,UAAU,CACzB,CAAC;QACJ,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,UAA8B,EAC9B,UAAqC,EAAE;IAEvC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,UAAU,EACV,sBAAsB,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EACnE,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,OAAO,CACR,CAAC;IACF,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,uBAAuB,CAAC,mDAAmD,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACzH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,UAA8B,EAC9B,KAA8B,EAC9B,UAAqC,EAAE;IAEvC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,UAAU,EACV,sBAAsB,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EACjE;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,UAAU,EAAE;QAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;KAC5B,EACD,OAAO,CACR,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;WAC3F,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;WACxE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,IAAI,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;WACzG,CAAC,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;WAC1E,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,cAAc,GAAG,CAAC;WAC7E,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,uBAAuB,CAAC,kDAAkD,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACxH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,UAA8B,EAC9B,KAAa,EACb,gBAAwB,EACxB,UAA4D,EAAE;IAE9D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,UAAU,EACV,sBAAsB,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAC9F;gBACE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,UAAU,EAAE;gBAC/E,IAAI,EAAE,gBAAgB;aACvB,EACD,OAAO,CACR,CAAC;YACF,MAAM,kBAAkB,GAAG,QAAQ,EAAE,MAAM,KAAK,UAAU;gBACxD,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU;gBAC/B,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS;oBAC9B,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS;oBAC9B,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,QAAQ,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxF,MAAM,mBAAmB,GAAG,QAAQ,EAAE,KAAK,KAAK,UAAU;gBACxD,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,IAAI;gBAC3B,CAAC,CAAC,QAAQ,EAAE,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,IAAI,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC;YAClG,IAAI,CAAC,QAAQ,IAAI,CAAC,kBAAkB,IAAI,CAAC,mBAAmB,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK;mBACnF,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;mBACnE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC;mBACvF,OAAO,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAChD,MAAM,IAAI,uBAAuB,CAAC,mDAAmD,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;YACzH,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;YAClB,MAAM,KAAK,GAAG,KAAK,YAAY,uBAAuB;mBACjD,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,IAAI,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACrD,CAAC;IACH,CAAC;IACD,MAAM,SAAS,CAAC;AAClB,CAAC"}