@m2-ai/lattice-cli 0.0.0-stage → 0.8.7

package/dist/security/journal.js

@@ -0,0 +1,441 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultSecurityJournalRoot = defaultSecurityJournalRoot;
+exports.createSecurityPublishJournal = createSecurityPublishJournal;
+exports.createSecurityBeginJournal = createSecurityBeginJournal;
+exports.setSecurityJournalReservation = setSecurityJournalReservation;
+exports.createSecurityReservationJournal = createSecurityReservationJournal;
+exports.setSecurityPublishJournalRequest = setSecurityPublishJournalRequest;
+exports.setSecurityJournalResult = setSecurityJournalResult;
+exports.markSecurityJournalAcknowledged = markSecurityJournalAcknowledged;
+exports.readSecurityRecovery = readSecurityRecovery;
+exports.createOrReadSecurityRecovery = createOrReadSecurityRecovery;
+exports.saveSecurityAcknowledgment = saveSecurityAcknowledgment;
+exports.readSecurityAcknowledgment = readSecurityAcknowledgment;
+exports.readSecurityPublishJournal = readSecurityPublishJournal;
+exports.readSecurityJournal = readSecurityJournal;
+exports.removeSecurityPublishJournal = removeSecurityPublishJournal;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const credential_store_js_1 = require("../credential-store.js");
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const SHA256 = /^[0-9a-f]{64}$/;
+function defaultSecurityJournalRoot(home = (0, node_os_1.homedir)()) {
+    return (0, node_path_1.join)(home, '.lattice', 'security-pending');
+}
+function sha256(value) {
+    return (0, node_crypto_1.createHash)('sha256').update(value, 'utf8').digest('hex');
+}
+function journalPaths(id, root) {
+    if (!UUID.test(id))
+        throw new Error('Security publish journal ID must be a UUID.');
+    const directory = (0, node_path_1.join)(root, id.toLowerCase());
+    return {
+        directory,
+        metadata: (0, node_path_1.join)(directory, 'journal.json'),
+        body: (0, node_path_1.join)(directory, 'finish-request.json'),
+        recovery: (0, node_path_1.join)(directory, 'recovery.json'),
+    };
+}
+function acknowledgmentPath(id, root) {
+    if (!UUID.test(id))
+        throw new Error('Security publish journal ID must be a UUID.');
+    return (0, node_path_1.join)(root, `${id.toLowerCase()}.ack.json`);
+}
+async function syncDirectory(directory) {
+    // Node cannot portably open Windows directories for FlushFileBuffers. The linked
+    // file itself is fsynced on every platform; POSIX also needs the directory entry.
+    if (process.platform === 'win32')
+        return;
+    const handle = await node_fs_1.promises.open(directory, 'r');
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+function sameAcknowledgment(left, right) {
+    return left.rootJournalId === right.rootJournalId
+        && left.finalJournalId === right.finalJournalId && left.finalRunId === right.finalRunId
+        && left.apiUrl === right.apiUrl && left.appId === right.appId && left.localExit === right.localExit
+        && left.journalIds.length === right.journalIds.length
+        && left.journalIds.every((journalId, index) => journalId === right.journalIds[index]);
+}
+function parseAcknowledgment(raw, id) {
+    const receipt = JSON.parse(raw);
+    if (receipt.version !== 1 || !UUID.test(receipt.rootJournalId)
+        || !UUID.test(receipt.finalJournalId) || !UUID.test(receipt.finalRunId)
+        || !Array.isArray(receipt.journalIds) || receipt.journalIds.length < 2
+        || receipt.journalIds.some((journalId) => !UUID.test(journalId))
+        || new Set(receipt.journalIds.map((journalId) => journalId.toLowerCase())).size !== receipt.journalIds.length
+        || receipt.journalIds[0].toLowerCase() !== receipt.finalJournalId.toLowerCase()
+        || receipt.journalIds.at(-1)?.toLowerCase() !== receipt.rootJournalId.toLowerCase()
+        || !receipt.journalIds.some((journalId) => journalId.toLowerCase() === id.toLowerCase())
+        || typeof receipt.apiUrl !== 'string' || !UUID.test(receipt.appId)
+        || ![0, 1, 2].includes(receipt.localExit) || Number.isNaN(Date.parse(receipt.acknowledgedAt))) {
+        throw new Error('Security acknowledgment receipt is invalid.');
+    }
+    return receipt;
+}
+async function readAcknowledgmentFile(filePath, id) {
+    try {
+        return parseAcknowledgment(await node_fs_1.promises.readFile(filePath, 'utf8'), id);
+    }
+    catch (error) {
+        if (error && typeof error === 'object' && 'code' in error && error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+}
+async function createSecurityPublishJournal(input, exactRequestBody, root = defaultSecurityJournalRoot(), now = new Date()) {
+    const reserved = await createSecurityReservationJournal(input, root, now);
+    try {
+        return await setSecurityPublishJournalRequest(reserved, exactRequestBody, root);
+    }
+    catch (error) {
+        await node_fs_1.promises.rm(journalPaths(input.id, root).directory, { recursive: true, force: true });
+        throw error;
+    }
+}
+async function createSecurityBeginJournal(input, root = defaultSecurityJournalRoot(), now = new Date()) {
+    const paths = journalPaths(input.id, root);
+    try {
+        await node_fs_1.promises.lstat(paths.directory);
+        throw new Error('Security publish journal already exists.');
+    }
+    catch (error) {
+        if (!(error && typeof error === 'object' && 'code' in error && error.code === 'ENOENT'))
+            throw error;
+    }
+    const journal = {
+        version: 1,
+        ...input,
+        runId: null,
+        reservationExpiresAt: null,
+        requestBodyPath: null,
+        requestBodySha256: null,
+        state: 'begin_pending',
+        createdAt: now.toISOString(),
+    };
+    await (0, credential_store_js_1.savePrivateJsonFile)(paths.metadata, journal);
+    return journal;
+}
+async function setSecurityJournalReservation(journal, reservation, root = defaultSecurityJournalRoot()) {
+    if (journal.state !== 'begin_pending' || journal.runId !== null)
+        throw new Error('Security publish journal is not awaiting begin.');
+    if (!UUID.test(reservation.runId) || Number.isNaN(Date.parse(reservation.reservationExpiresAt))) {
+        throw new Error('Security run reservation response is invalid.');
+    }
+    const updated = { ...journal, ...reservation, state: 'reserved' };
+    try {
+        await (0, credential_store_js_1.savePrivateJsonFile)(journalPaths(journal.id, root).metadata, updated);
+        return updated;
+    }
+    catch (error) {
+        for (let attempt = 0; attempt < 3; attempt += 1) {
+            const current = await readSecurityJournal(journal.id, root).catch(() => null);
+            if (current && current.runId === reservation.runId && current.reservationExpiresAt === reservation.reservationExpiresAt
+                && ['reserved', 'result_ready', 'pending_finish', 'acknowledged'].includes(current.state))
+                return current;
+            await new Promise((resolve) => setTimeout(resolve, 5));
+        }
+        throw error;
+    }
+}
+async function createSecurityReservationJournal(input, root = defaultSecurityJournalRoot(), now = new Date()) {
+    const paths = journalPaths(input.id, root);
+    try {
+        await node_fs_1.promises.lstat(paths.directory);
+        throw new Error('Security publish journal already exists.');
+    }
+    catch (error) {
+        if (!(error && typeof error === 'object' && 'code' in error && error.code === 'ENOENT'))
+            throw error;
+    }
+    const journal = {
+        version: 1,
+        ...input,
+        requestBodyPath: null,
+        requestBodySha256: null,
+        state: 'reserved',
+        createdAt: now.toISOString(),
+    };
+    try {
+        await (0, credential_store_js_1.savePrivateJsonFile)(paths.metadata, journal);
+        return journal;
+    }
+    catch (error) {
+        await node_fs_1.promises.rm(paths.directory, { recursive: true, force: true });
+        throw error;
+    }
+}
+async function setSecurityPublishJournalRequest(journal, exactRequestBody, root = defaultSecurityJournalRoot()) {
+    JSON.parse(exactRequestBody);
+    const paths = journalPaths(journal.id, root);
+    if (!['reserved', 'result_ready'].includes(journal.state))
+        throw new Error('Security publish journal is not awaiting a finish request.');
+    const updated = {
+        ...journal,
+        requestBodyPath: paths.body,
+        requestBodySha256: sha256(exactRequestBody),
+        state: 'pending_finish',
+    };
+    try {
+        await (0, credential_store_js_1.savePrivateTextFile)(paths.body, exactRequestBody);
+    }
+    catch (error) {
+        const existing = await node_fs_1.promises.readFile(paths.body, 'utf8').catch(() => null);
+        if (existing !== exactRequestBody)
+            throw error;
+    }
+    try {
+        await (0, credential_store_js_1.savePrivateJsonFile)(paths.metadata, updated);
+        return updated;
+    }
+    catch (error) {
+        for (let attempt = 0; attempt < 3; attempt += 1) {
+            const current = await readSecurityJournal(journal.id, root).catch(() => null);
+            if (current && current.requestBodySha256 === updated.requestBodySha256
+                && ['pending_finish', 'acknowledged'].includes(current.state))
+                return current;
+            await new Promise((resolve) => setTimeout(resolve, 5));
+        }
+        throw error;
+    }
+}
+async function setSecurityJournalResult(journal, result, root = defaultSecurityJournalRoot()) {
+    if (journal.state !== 'reserved' || !result.reportPath || ![0, 1, 2].includes(result.localExit)) {
+        throw new Error('Security publish journal cannot record this local result.');
+    }
+    const updated = {
+        ...journal,
+        reportPath: result.reportPath,
+        retainedCompleted: true,
+        localExit: result.localExit,
+        state: 'result_ready',
+    };
+    try {
+        await (0, credential_store_js_1.savePrivateJsonFile)(journalPaths(journal.id, root).metadata, updated);
+        return updated;
+    }
+    catch (error) {
+        for (let attempt = 0; attempt < 3; attempt += 1) {
+            const current = await readSecurityJournal(journal.id, root).catch(() => null);
+            if (current && current.retainedCompleted && current.localExit === result.localExit
+                && current.reportPath === result.reportPath
+                && ['result_ready', 'pending_finish', 'acknowledged'].includes(current.state))
+                return current;
+            await new Promise((resolve) => setTimeout(resolve, 5));
+        }
+        throw error;
+    }
+}
+async function markSecurityJournalAcknowledged(journal, root = defaultSecurityJournalRoot()) {
+    if (journal.state !== 'pending_finish')
+        throw new Error('Security publish journal is not awaiting acknowledgment.');
+    const updated = { ...journal, state: 'acknowledged' };
+    try {
+        await (0, credential_store_js_1.savePrivateJsonFile)(journalPaths(journal.id, root).metadata, updated);
+        return updated;
+    }
+    catch (error) {
+        for (let attempt = 0; attempt < 20; attempt += 1) {
+            const current = await readSecurityJournal(journal.id, root).catch(() => null);
+            if (current?.state === 'acknowledged')
+                return current;
+            if (journal.recoveryRootId) {
+                const receipt = await readSecurityAcknowledgment(journal.recoveryRootId, root).catch(() => null);
+                if (receipt?.finalJournalId === journal.id && receipt.finalRunId === journal.runId)
+                    return updated;
+            }
+            await new Promise((resolve) => setTimeout(resolve, 10));
+        }
+        throw error;
+    }
+}
+async function readSecurityRecovery(id, root = defaultSecurityJournalRoot()) {
+    let raw;
+    try {
+        raw = await node_fs_1.promises.readFile(journalPaths(id, root).recovery, 'utf8');
+    }
+    catch (error) {
+        if (error && typeof error === 'object' && 'code' in error && error.code === 'ENOENT')
+            return null;
+        throw error;
+    }
+    const record = JSON.parse(raw);
+    if (record.version !== 1 || record.parentJournalId.toLowerCase() !== id.toLowerCase()
+        || !UUID.test(record.childJournalId) || Number.isNaN(Date.parse(record.createdAt))) {
+        throw new Error('Security recovery record is invalid.');
+    }
+    return record;
+}
+async function createOrReadSecurityRecovery(parentJournalId, root = defaultSecurityJournalRoot(), now = new Date()) {
+    const paths = journalPaths(parentJournalId, root);
+    const record = {
+        version: 1,
+        parentJournalId: parentJournalId.toLowerCase(),
+        childJournalId: (0, node_crypto_1.randomUUID)(),
+        createdAt: now.toISOString(),
+    };
+    const temporary = (0, node_path_1.join)(paths.directory, `.recovery-${(0, node_crypto_1.randomUUID)()}.tmp`);
+    try {
+        const handle = await node_fs_1.promises.open(temporary, 'wx', 0o600);
+        try {
+            await handle.writeFile(`${JSON.stringify(record, null, 2)}\n`, 'utf8');
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        try {
+            await node_fs_1.promises.link(temporary, paths.recovery);
+            if (process.platform !== 'win32')
+                await node_fs_1.promises.chmod(paths.recovery, 0o600);
+            await syncDirectory(paths.directory);
+            return record;
+        }
+        catch (error) {
+            if (!(error && typeof error === 'object' && 'code' in error && error.code === 'EEXIST'))
+                throw error;
+            const existing = await readSecurityRecovery(parentJournalId, root);
+            if (!existing)
+                throw new Error('Security recovery record disappeared during creation.');
+            return existing;
+        }
+    }
+    finally {
+        await node_fs_1.promises.rm(temporary, { force: true });
+    }
+}
+async function saveSecurityAcknowledgment(receipt, root = defaultSecurityJournalRoot()) {
+    const target = acknowledgmentPath(receipt.rootJournalId, root);
+    const temporary = (0, node_path_1.join)(root, `.${receipt.rootJournalId.toLowerCase()}.ack.${(0, node_crypto_1.randomUUID)()}.tmp`);
+    await node_fs_1.promises.mkdir(root, { recursive: true, mode: 0o700 });
+    if (process.platform !== 'win32')
+        await node_fs_1.promises.chmod(root, 0o700);
+    try {
+        const handle = await node_fs_1.promises.open(temporary, 'wx', 0o600);
+        try {
+            await handle.writeFile(`${JSON.stringify(receipt, null, 2)}\n`, 'utf8');
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        for (const journalId of receipt.journalIds) {
+            const alias = acknowledgmentPath(journalId, root);
+            if (alias === target)
+                continue;
+            try {
+                await node_fs_1.promises.link(temporary, alias);
+                if (process.platform !== 'win32')
+                    await node_fs_1.promises.chmod(alias, 0o600);
+            }
+            catch (error) {
+                if (!(error && typeof error === 'object' && 'code' in error && error.code === 'EEXIST'))
+                    throw error;
+                const current = await readAcknowledgmentFile(alias, journalId);
+                if (!current || !sameAcknowledgment(current, receipt)) {
+                    throw new Error('Security acknowledgment receipt alias conflicts with an existing terminal result.');
+                }
+            }
+        }
+        await syncDirectory(root);
+        try {
+            await node_fs_1.promises.link(temporary, target);
+            if (process.platform !== 'win32')
+                await node_fs_1.promises.chmod(target, 0o600);
+        }
+        catch (error) {
+            if (!(error && typeof error === 'object' && 'code' in error && error.code === 'EEXIST'))
+                throw error;
+            const current = await readAcknowledgmentFile(target, receipt.rootJournalId);
+            if (!current || !sameAcknowledgment(current, receipt)) {
+                throw new Error('Security acknowledgment receipt conflicts with an existing terminal result.');
+            }
+        }
+        await syncDirectory(root);
+    }
+    finally {
+        await node_fs_1.promises.rm(temporary, { force: true });
+    }
+}
+async function readSecurityAcknowledgment(id, root = defaultSecurityJournalRoot()) {
+    const receipt = await readAcknowledgmentFile(acknowledgmentPath(id, root), id);
+    if (!receipt)
+        return null;
+    if (receipt.rootJournalId.toLowerCase() !== id.toLowerCase()) {
+        const committed = await readAcknowledgmentFile(acknowledgmentPath(receipt.rootJournalId, root), receipt.rootJournalId);
+        if (!committed)
+            return null;
+        if (!sameAcknowledgment(committed, receipt)) {
+            throw new Error('Security acknowledgment receipt alias conflicts with its committed root receipt.');
+        }
+    }
+    // A reader may observe the root hard link before its publisher syncs the
+    // directory. Make that observed commit durable before callers clean payloads.
+    await syncDirectory(root);
+    return receipt;
+}
+async function readSecurityPublishJournal(id, root = defaultSecurityJournalRoot()) {
+    const paths = journalPaths(id, root);
+    const journal = await readSecurityJournal(id, root);
+    if (journal.requestBodyPath !== paths.body || !journal.requestBodySha256
+        || !['pending_finish', 'acknowledged'].includes(journal.state)) {
+        throw new Error('Security publish journal is invalid.');
+    }
+    const exactRequestBody = await node_fs_1.promises.readFile(paths.body, 'utf8');
+    if (sha256(exactRequestBody) !== journal.requestBodySha256)
+        throw new Error('Security publish request was changed after capture.');
+    return { journal, exactRequestBody };
+}
+async function readSecurityJournal(id, root = defaultSecurityJournalRoot()) {
+    const paths = journalPaths(id, root);
+    const journal = JSON.parse(await node_fs_1.promises.readFile(paths.metadata, 'utf8'));
+    if (journal.version !== 1 || journal.id.toLowerCase() !== id.toLowerCase()
+        || !UUID.test(journal.appId) || !UUID.test(journal.clientRequestId) || !UUID.test(journal.entitlementId)
+        || !['scan', 'deep', 'release', 'report'].includes(journal.mode)
+        || (journal.parentRunId !== null && !UUID.test(journal.parentRunId))
+        || (journal.recoveryParentId !== null && !UUID.test(journal.recoveryParentId))
+        || (journal.recoveryRootId !== null && !UUID.test(journal.recoveryRootId))
+        || ((journal.recoveryParentId === null) !== (journal.recoveryRootId === null))
+        || typeof journal.repo !== 'string' || journal.repo === ''
+        || typeof journal.outDir !== 'string' || journal.outDir === ''
+        || typeof journal.artifactRoot !== 'string' || journal.artifactRoot === ''
+        || !SHA256.test(journal.artifactManifestSha256)
+        || typeof journal.repositoryIdentity !== 'string' || journal.repositoryIdentity === ''
+        || typeof journal.retainedCompleted !== 'boolean'
+        || (journal.localExit !== null && ![0, 1, 2].includes(journal.localExit))
+        || (journal.acknowledgedExit !== null && ![0, 1, 2].includes(journal.acknowledgedExit))
+        || !['begin_pending', 'reserved', 'result_ready', 'pending_finish', 'acknowledged'].includes(journal.state)
+        || Number.isNaN(Date.parse(journal.createdAt))
+        || (journal.state === 'begin_pending' && (journal.runId !== null || journal.reservationExpiresAt !== null))
+        || (journal.state !== 'begin_pending' && (!journal.runId || !UUID.test(journal.runId)
+            || !journal.reservationExpiresAt || Number.isNaN(Date.parse(journal.reservationExpiresAt))))
+        || (journal.state === 'result_ready' && (!journal.retainedCompleted || journal.localExit === null || !journal.reportPath))
+        || (['pending_finish', 'acknowledged'].includes(journal.state) && (journal.requestBodyPath !== paths.body
+            || !journal.requestBodySha256 || !SHA256.test(journal.requestBodySha256)))) {
+        throw new Error('Security publish journal is invalid.');
+    }
+    return journal;
+}
+async function removeSecurityPublishJournal(id, root = defaultSecurityJournalRoot(), preserveRecoveryIdentity = false) {
+    const paths = journalPaths(id, root);
+    await node_fs_1.promises.rm(paths.body, { force: true });
+    if (!preserveRecoveryIdentity)
+        await node_fs_1.promises.rm(paths.recovery, { force: true });
+    await node_fs_1.promises.rm(paths.metadata, { force: true });
+    try {
+        await node_fs_1.promises.rmdir(paths.directory);
+    }
+    catch (error) {
+        const code = error && typeof error === 'object' && 'code' in error ? error.code : null;
+        if (code !== 'ENOENT' && !(preserveRecoveryIdentity && code === 'ENOTEMPTY'))
+            throw error;
+    }
+}
+//# sourceMappingURL=journal.js.map

package/dist/security/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../../src/security/journal.ts"],"names":[],"mappings":";;AAUA,gEAEC;AAoED,oEAaC;AAED,gEAwBC;AAED,sEAsBC;AAED,4EA2BC;AAED,4EAgCC;AAED,4DA4BC;AAED,0EAqBC;AAED,oDAiBC;AAED,oEAmCC;AAED,gEA6CC;AAED,gEAoBC;AAED,gEAaC;AAED,kDA6BC;AAED,oEAeC;AA/bD,6CAAqD;AACrD,qCAAyC;AACzC,qCAAkC;AAClC,yCAAiC;AACjC,gEAAkF;AAGlF,MAAM,IAAI,GAAG,4EAA4E,CAAC;AAC1F,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAEhC,SAAgB,0BAA0B,CAAC,IAAI,GAAG,IAAA,iBAAO,GAAE;IACzD,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,EAAU,EAAE,IAAY;IAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,OAAO;QACL,SAAS;QACT,QAAQ,EAAE,IAAA,gBAAI,EAAC,SAAS,EAAE,cAAc,CAAC;QACzC,IAAI,EAAE,IAAA,gBAAI,EAAC,SAAS,EAAE,qBAAqB,CAAC;QAC5C,QAAQ,EAAE,IAAA,gBAAI,EAAC,SAAS,EAAE,eAAe,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,EAAU,EAAE,IAAY;IAClD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACnF,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,iFAAiF;IACjF,kFAAkF;IAClF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,MAAM,MAAM,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAmC,EAAE,KAAoC;IACnG,OAAO,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;WAC5C,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;WACpF,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WAChG,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM;WAClD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW,EAAE,EAAU;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkC,CAAC;IACjE,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;WACzD,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;WACpE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;WACnE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;WAC7D,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,CAAC,MAAM;WAC1G,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE;WAC5E,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE;WAChF,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;WACrF,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;WAC/D,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,QAAgB,EAAE,EAAU;IAChE,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClG,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAChD,KAAgH,EAChH,gBAAwB,EACxB,IAAI,GAAG,0BAA0B,EAAE,EACnC,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,OAAO,MAAM,gCAAgC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,kBAAE,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAC9C,KAAmJ,EACnJ,IAAI,GAAG,0BAA0B,EAAE,EACnC,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;YAAE,MAAM,KAAK,CAAC;IACvG,CAAC;IACD,MAAM,OAAO,GAA2B;QACtC,OAAO,EAAE,CAAC;QACV,GAAG,KAAK;QACR,KAAK,EAAE,IAAI;QACX,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,IAAI;QACvB,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;KAC7B,CAAC;IACF,MAAM,IAAA,yCAAmB,EAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,6BAA6B,CACjD,OAA+B,EAC/B,WAA4D,EAC5D,IAAI,GAAG,0BAA0B,EAAE;IAEnC,IAAI,OAAO,CAAC,KAAK,KAAK,eAAe,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACpI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,GAAG,OAAO,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC1F,IAAI,CAAC;QACH,MAAM,IAAA,yCAAmB,EAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5E,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9E,IAAI,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,IAAI,OAAO,CAAC,oBAAoB,KAAK,WAAW,CAAC,oBAAoB;mBAClH,CAAC,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC;YAC5G,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,gCAAgC,CACpD,KAAgH,EAChH,IAAI,GAAG,0BAA0B,EAAE,EACnC,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;YAAE,MAAM,KAAK,CAAC;IACvG,CAAC;IACD,MAAM,OAAO,GAA2B;QACtC,OAAO,EAAE,CAAC;QACV,GAAG,KAAK;QACR,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,IAAI;QACvB,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;KAC7B,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAA,yCAAmB,EAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,kBAAE,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,gCAAgC,CACpD,OAA+B,EAC/B,gBAAwB,EACxB,IAAI,GAAG,0BAA0B,EAAE;IAEnC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACzI,MAAM,OAAO,GAA2B;QACtC,GAAG,OAAO;QACV,eAAe,EAAE,KAAK,CAAC,IAAI;QAC3B,iBAAiB,EAAE,MAAM,CAAC,gBAAgB,CAAC;QAC3C,KAAK,EAAE,gBAAgB;KACxB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAA,yCAAmB,EAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,QAAQ,KAAK,gBAAgB;YAAE,MAAM,KAAK,CAAC;IACjD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAA,yCAAmB,EAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9E,IAAI,OAAO,IAAI,OAAO,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB;mBACjE,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC;YAChF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC5C,OAA+B,EAC/B,MAAiD,EACjD,IAAI,GAAG,0BAA0B,EAAE;IAEnC,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,OAAO,GAA2B;QACtC,GAAG,OAAO;QACV,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,cAAc;KACtB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAA,yCAAmB,EAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5E,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9E,IAAI,OAAO,IAAI,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;mBAC7E,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;mBACxC,CAAC,cAAc,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC;YAChG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,+BAA+B,CACnD,OAA+B,EAC/B,IAAI,GAAG,0BAA0B,EAAE;IAEnC,IAAI,OAAO,CAAC,KAAK,KAAK,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACpH,MAAM,OAAO,GAA2B,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,IAAA,yCAAmB,EAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5E,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9E,IAAI,OAAO,EAAE,KAAK,KAAK,cAAc;gBAAE,OAAO,OAAO,CAAC;YACtD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACjG,IAAI,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK;oBAAE,OAAO,OAAO,CAAC;YACrG,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACxC,EAAU,EACV,IAAI,GAAG,0BAA0B,EAAE;IAEnC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClG,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;IACzD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE;WAChF,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAChD,eAAuB,EACvB,IAAI,GAAG,0BAA0B,EAAE,EACnC,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,MAAM,GAA2B;QACrC,OAAO,EAAE,CAAC;QACV,eAAe,EAAE,eAAe,CAAC,WAAW,EAAE;QAC9C,cAAc,EAAE,IAAA,wBAAU,GAAE;QAC5B,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;KAC7B,CAAC;IACF,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,KAAK,CAAC,SAAS,EAAE,aAAa,IAAA,wBAAU,GAAE,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,kBAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,MAAM,kBAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACxE,MAAM,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACrC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;YACrG,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YACnE,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACxF,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAC9C,OAAsC,EACtC,IAAI,GAAG,0BAA0B,EAAE;IAEnC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,IAAI,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,QAAQ,IAAA,wBAAU,GAAE,MAAM,CAAC,CAAC;IAChG,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,KAAK,KAAK,MAAM;gBAAE,SAAS;YAC/B,IAAI,CAAC;gBACH,MAAM,kBAAE,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;oBAAE,MAAM,kBAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACrG,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBAC/D,IAAI,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;oBACtD,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;gBACvG,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,kBAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,MAAM,kBAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;YACrG,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YAC5E,IAAI,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QACD,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAC9C,EAAU,EACV,IAAI,GAAG,0BAA0B,EAAE;IAEnC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7D,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAC5C,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,EAC/C,OAAO,CAAC,aAAa,CACtB,CAAC;QACF,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,8EAA8E;IAC9E,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAC9C,EAAU,EACV,IAAI,GAAG,0BAA0B,EAAE;IAEnC,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB;WACnE,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,gBAAgB,CAAC,KAAK,OAAO,CAAC,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACnI,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AACvC,CAAC;AAEM,KAAK,UAAU,mBAAmB,CAAC,EAAU,EAAE,IAAI,GAAG,0BAA0B,EAAE;IACvF,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAA2B,CAAC;IAChG,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE;WACrE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;WACrG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;WAC7D,CAAC,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;WACjE,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;WAC3E,CAAC,OAAO,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;WACvE,CAAC,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC;WAC3E,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,EAAE;WACvD,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;WAC3D,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY,KAAK,EAAE;WACvE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;WAC5C,OAAO,OAAO,CAAC,kBAAkB,KAAK,QAAQ,IAAI,OAAO,CAAC,kBAAkB,KAAK,EAAE;WACnF,OAAO,OAAO,CAAC,iBAAiB,KAAK,SAAS;WAC9C,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;WACtE,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;WACpF,CAAC,CAAC,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;WACxG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;WAC3C,CAAC,OAAO,CAAC,KAAK,KAAK,eAAe,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,oBAAoB,KAAK,IAAI,CAAC,CAAC;WACxG,CAAC,OAAO,CAAC,KAAK,KAAK,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;eAChF,CAAC,OAAO,CAAC,oBAAoB,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;WAC3F,CAAC,OAAO,CAAC,KAAK,KAAK,cAAc,IAAI,CAAC,CAAC,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;WACvH,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,IAAI;eACpG,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAChD,EAAU,EACV,IAAI,GAAG,0BAA0B,EAAE,EACnC,wBAAwB,GAAG,KAAK;IAEhC,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,kBAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,wBAAwB;QAAE,MAAM,kBAAE,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,MAAM,kBAAE,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,wBAAwB,IAAI,IAAI,KAAK,WAAW,CAAC;YAAE,MAAM,KAAK,CAAC;IAC5F,CAAC;AACH,CAAC"}

package/dist/security/journal.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=journal.test.d.ts.map

package/dist/security/journal.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.test.d.ts","sourceRoot":"","sources":["../../src/security/journal.test.ts"],"names":[],"mappings":""}