@mcp-index/sdk 0.1.0

package/dist/src/gate.js

@@ -0,0 +1,626 @@
+/**
+ * The shared GATE core — the pure pre-flight decision, decoupled from any I/O
+ * seam. A faithful port of Python `tooling/cse/gate.py`. Pin TOFU, derive the
+ * live contract hash, compare to the pin, and on drift VALIDATE -> DECIDE
+ * (benign auto-accept / behavioral-mandated INCONCLUSIVE / HOLD), then apply the
+ * per-server POSTURE. NO credential, NO transport, NO network: the Gate reads
+ * only the PUBLIC contract dict the caller observed.
+ */
+import { Decision, hashTool, makeVerdict, utcNowIso, } from "./preflight.js";
+import { ChangeKind, classifyChange, isSafetyRelevant } from "./schemaDiff.js";
+import { assess, blastRank } from "./risk.js";
+import { scanSchemaHasMarker } from "./scan.js";
+import { mdText } from "./render.js";
+import { redactGreenWords } from "./provenance.js";
+import { Operation } from "./errors.js";
+// ----------------------------------------------------------- behavioral mandate
+const DEFAULT_BEHAVIORAL_MANDATED_KINDS = new Set([
+    ChangeKind.OUTPUT_SCHEMA_CHANGED,
+    ChangeKind.ANNOTATION_FLIP_TO_DESTRUCTIVE,
+]);
+// --------------------------------------------------------------- benign allowlist
+const BENIGN_AUTOACCEPT_KINDS = new Set([
+    ChangeKind.ADDED_OPTIONAL_PARAM,
+    ChangeKind.TOOL_ADDED,
+    ChangeKind.OUTPUT_SCHEMA_ADDED,
+]);
+export var Posture;
+(function (Posture) {
+    Posture["MONITOR"] = "monitor";
+    Posture["GUARD"] = "guard";
+    Posture["STRICT"] = "strict";
+})(Posture || (Posture = {}));
+// The change kinds GUARD treats as UNAMBIGUOUS-DANGEROUS (block even in the
+// lenient default posture). The full genuinely-BREAKING set.
+const GUARD_DANGEROUS_KINDS = new Set([
+    ChangeKind.ANNOTATION_FLIP_TO_DESTRUCTIVE,
+    ChangeKind.ADDED_REQUIRED_PARAM,
+    ChangeKind.REQUIRED_SET_EXPANDED,
+    ChangeKind.REMOVED_PARAM,
+    ChangeKind.TYPE_CHANGED,
+    ChangeKind.ENUM_VALUES_REMOVED,
+    ChangeKind.CONSTRAINT_NARROWED,
+    ChangeKind.TOOL_REMOVED,
+    ChangeKind.OUTPUT_SCHEMA_CHANGED,
+    ChangeKind.DEEP_SCHEMA_UNDIFFABLE,
+]);
+const BREAKING_KIND_REASON = {
+    [ChangeKind.OUTPUT_SCHEMA_CHANGED]: "this tool's output format changed — code or agents parsing its result may break",
+    [ChangeKind.ANNOTATION_FLIP_TO_DESTRUCTIVE]: "this tool now declares itself able to modify or delete data (it did not before)",
+    [ChangeKind.ADDED_REQUIRED_PARAM]: "this tool now requires a new parameter — existing calls that omit it will fail",
+    [ChangeKind.REQUIRED_SET_EXPANDED]: "a parameter that used to be optional is now required — existing calls may fail",
+    [ChangeKind.REMOVED_PARAM]: "a parameter your calls may rely on was removed or renamed",
+    [ChangeKind.TYPE_CHANGED]: "a parameter's type changed — values your calls send may no longer be accepted",
+    [ChangeKind.ENUM_VALUES_REMOVED]: "an allowed value was removed — a value your calls send may now be rejected",
+    [ChangeKind.CONSTRAINT_NARROWED]: "an input rule was tightened — a value your calls send may now be rejected",
+    [ChangeKind.TOOL_REMOVED]: "this tool was removed from the server",
+    [ChangeKind.DEEP_SCHEMA_UNDIFFABLE]: "this tool's schema changed too deeply to verify automatically; held to be safe",
+};
+const DANGEROUS_REASON_MARKERS = [
+    "risk ESCALATED",
+    "injection/exfil marker",
+    "could not complete",
+    "DESCRIPTION changed",
+    "behavioral validation FAILED",
+    "behavioral validation UNAVAILABLE",
+    "behavioral validation DECLINED",
+];
+const BRAND_MARK = "⬡ mcpindex";
+export const HELD_PROVENANCE_UNAVAILABLE_BANNER = `${BRAND_MARK} — held a call before your agent ran it (provenance unavailable; no detail shown).`;
+export const INTERNAL_ERROR_HELD_MESSAGE = `${BRAND_MARK} internal error — held this call for safety. [Override]`;
+const INTERNAL_ERROR_REASON_HOLD = "mcpindex internal error — held for safety";
+export function isInternalErrorVerdict(verdict) {
+    return verdict.reason === INTERNAL_ERROR_REASON_HOLD;
+}
+export function internalErrorHold(serverId, toolName) {
+    return makeVerdict({
+        serverId,
+        toolName,
+        decision: Decision.HOLD,
+        reason: INTERNAL_ERROR_REASON_HOLD,
+        isContractDiff: false,
+    });
+}
+export var Ownership;
+(function (Ownership) {
+    Ownership["OSS"] = "oss";
+    Ownership["DEV_OWNED"] = "dev_owned";
+    Ownership["UNOWNED_THIRD_PARTY"] = "unowned_third_party";
+})(Ownership || (Ownership = {}));
+export var BehavioralMethod;
+(function (BehavioralMethod) {
+    BehavioralMethod["SANDBOX_BATTERY"] = "sandbox_battery";
+    BehavioralMethod["READ_ONLY_PROBE"] = "read_only_probe";
+    BehavioralMethod["DECLINED"] = "declined";
+})(BehavioralMethod || (BehavioralMethod = {}));
+export function chooseBehavioralMethod(ownership) {
+    if (ownership === Ownership.OSS)
+        return BehavioralMethod.SANDBOX_BATTERY;
+    if (ownership === Ownership.DEV_OWNED)
+        return BehavioralMethod.READ_ONLY_PROBE;
+    return BehavioralMethod.DECLINED;
+}
+export var BehavioralOutcome;
+(function (BehavioralOutcome) {
+    BehavioralOutcome["CLEARED"] = "cleared";
+    BehavioralOutcome["FAILED"] = "failed";
+    BehavioralOutcome["UNAVAILABLE"] = "unavailable";
+    BehavioralOutcome["DECLINED"] = "declined";
+})(BehavioralOutcome || (BehavioralOutcome = {}));
+/**
+ * True IFF the verifier ACTUALLY observed the tool's behaviour (CLEARED or FAILED).
+ * UNAVAILABLE / DECLINED / null (verifier never consulted) all mean behaviour did NOT run, so
+ * the evidence tier floors to STRUCTURAL_ONLY (0) — never a false BEHAVIORAL/3 stamp. This is
+ * the ONE place tier-3 eligibility is decided, keyed on the structured enum, never on a
+ * verifier-controlled reason string. Python mirror: `Gate._behaviour_observed`.
+ */
+export function behaviourObserved(outcome) {
+    return outcome === BehavioralOutcome.CLEARED || outcome === BehavioralOutcome.FAILED;
+}
+// ---------------------------------------------------------- banner rendering
+function ordinal(n) {
+    const mod100 = n % 100;
+    let suffix;
+    if (mod100 >= 10 && mod100 <= 20)
+        suffix = "th";
+    else
+        suffix = { 1: "st", 2: "nd", 3: "rd" }[n % 10] ?? "th";
+    return `${n}${suffix}`;
+}
+function friendlyBreakingClause(verdict) {
+    const present = new Set(verdict.drift.map((c) => c.kind));
+    for (const kind of [
+        ChangeKind.OUTPUT_SCHEMA_CHANGED,
+        ChangeKind.ANNOTATION_FLIP_TO_DESTRUCTIVE,
+        ChangeKind.ADDED_REQUIRED_PARAM,
+        ChangeKind.REQUIRED_SET_EXPANDED,
+        ChangeKind.REMOVED_PARAM,
+        ChangeKind.TYPE_CHANGED,
+        ChangeKind.ENUM_VALUES_REMOVED,
+        ChangeKind.CONSTRAINT_NARROWED,
+        ChangeKind.TOOL_REMOVED,
+        ChangeKind.DEEP_SCHEMA_UNDIFFABLE,
+    ]) {
+        if (present.has(kind))
+            return BREAKING_KIND_REASON[kind] ?? null;
+    }
+    return null;
+}
+function bannerWhatChanged(verdict) {
+    if (verdict.descBefore !== null || verdict.descAfter !== null) {
+        return "a tool's description changed (the agent-consumed channel)";
+    }
+    const friendly = friendlyBreakingClause(verdict);
+    if (friendly !== null)
+        return `${mdText(verdict.toolName)} — ${friendly}`;
+    const safety = verdict.drift.filter((c) => c.safetyRelevant);
+    if (safety.length > 0) {
+        const kinds = [...new Set(safety.map((c) => c.kind.toString()))].sort().join(", ");
+        return `${mdText(verdict.toolName)} contract drifted (${kinds})`;
+    }
+    if (verdict.drift.length > 0) {
+        const kinds = [...new Set(verdict.drift.map((c) => c.kind.toString()))].sort().join(", ");
+        return `${mdText(verdict.toolName)} contract drifted (${kinds})`;
+    }
+    return mdText(verdict.reason);
+}
+export function renderHoldBanner(verdict, monthlyCount = null) {
+    const what = bannerWhatChanged(verdict);
+    let line = `${BRAND_MARK} — caught a silent change: ${what}. Held before your agent ran it.`;
+    line += "  [Review · Re-pin · Validate]";
+    if (monthlyCount !== null && monthlyCount > 0) {
+        line += `   · ${ordinal(monthlyCount)} silent change caught for you this month`;
+    }
+    // M3 (FIX 4): redact any green word — the only source is the attacker-derived
+    // tool_name / reason interpolated by `bannerWhatChanged` — so an attacker cannot
+    // smuggle banned reassurance (e.g. a tool named "all-clear-verified") into the HOLD
+    // banner. We redact the offending token, NOT refuse the whole HOLD (a refusal would
+    // let an attacker SUPPRESS a legitimate HOLD). Curated brand/action text carries none.
+    return redactGreenWords(line);
+}
+function descriptionOf(defn) {
+    if (defn === null || typeof defn !== "object")
+        return "";
+    const desc = defn["description"];
+    return desc !== undefined && desc !== null ? String(desc) : "";
+}
+export class Gate {
+    pin;
+    _serverId;
+    failOpen;
+    autoAcceptBenign;
+    now;
+    _ownership;
+    behavioralMandatedKinds;
+    _verifier;
+    _posture;
+    errors;
+    constructor(opts) {
+        this.pin = opts.pin;
+        this._serverId = opts.serverId;
+        this.failOpen = opts.failOpen ?? false;
+        this.autoAcceptBenign = opts.autoAcceptBenign ?? true;
+        this.now = opts.now ?? utcNowIso;
+        this._ownership = opts.ownership ?? Ownership.UNOWNED_THIRD_PARTY;
+        this.behavioralMandatedKinds = opts.behavioralMandatedKinds ?? DEFAULT_BEHAVIORAL_MANDATED_KINDS;
+        this._verifier = opts.verifier ?? null;
+        this._posture = opts.posture ?? Posture.GUARD;
+        this.errors = opts.errors ?? null;
+    }
+    get serverId() {
+        return this._serverId;
+    }
+    get posture() {
+        return this._posture;
+    }
+    get verifier() {
+        return this._verifier;
+    }
+    get ownership() {
+        return this._ownership;
+    }
+    pinFor(name) {
+        return this.pin.get(this._serverId, name);
+    }
+    /** TOFU-pin one observed tool if not already pinned. */
+    observe(name, defn) {
+        if (this.pin.get(this._serverId, name) === null) {
+            this.pin.put({
+                serverId: this._serverId,
+                toolName: name,
+                definitionHash: hashTool(defn),
+                pinnedAt: this.now(),
+                schema: defn,
+            });
+        }
+    }
+    repinOne(name, observed) {
+        const p = {
+            serverId: this._serverId,
+            toolName: name,
+            definitionHash: hashTool(observed),
+            pinnedAt: this.now(),
+            schema: observed,
+        };
+        this.pin.put(p);
+        return p;
+    }
+    // ---------------------------------------------------------------- evaluate
+    evaluate(name, observed) {
+        const pinned = this.pin.get(this._serverId, name);
+        if (pinned === null) {
+            return this.holdOrFailopen(name, "no pin for this tool on this session; observe it via list_tools before relying on it");
+        }
+        if (observed === null) {
+            return this.holdOrFailopen(name, "tool is pinned but ABSENT from the contracts observed this session; cannot verify the live contract");
+        }
+        let liveHash;
+        try {
+            liveHash = hashTool(observed);
+        }
+        catch {
+            return this.holdOrFailopen(name, "could not derive the current contract hash for this tool");
+        }
+        if (liveHash === pinned.definitionHash) {
+            const unhashed = this.mandatedUnhashedDrift(pinned, observed);
+            if (unhashed !== null)
+                return unhashed;
+            return makeVerdict({
+                serverId: this._serverId,
+                toolName: name,
+                decision: Decision.PROCEED,
+                reason: "contract matches your pin",
+            });
+        }
+        return this.validateDrift(name, pinned, observed);
+    }
+    classifyDrift(pinned, observed) {
+        if (pinned.schema !== null) {
+            return classifyChange(pinned.schema, observed);
+        }
+        return [
+            {
+                kind: ChangeKind.DEEP_SCHEMA_UNDIFFABLE,
+                path: "(tool)",
+                safetyRelevant: true,
+                detail: "definition_hash changed but no pinned schema to diff against; re-pin with schema capture to see what changed",
+            },
+        ];
+    }
+    mandatedUnhashedDrift(pinned, observed) {
+        // STEP 1 (fail-closed, H1 / FIX 2) — independent of the structural diff and load-
+        // bearing: scan the observed UNHASHED outputSchema for an injection/exfil marker
+        // BEFORE the mandated-kind check. outputSchema is unhashed (so it never flips the
+        // invocation hash) but agent-consumed and attacker-controllable, so a marker there
+        // must HOLD — on the hash-MATCH path it would otherwise slip through as "contract
+        // matches your pin". A scan THROW fails CLOSED to a HOLD. Mirrors `_unhashed_drift`.
+        const outSch = observed["outputSchema"];
+        if (outSch !== null && typeof outSch === "object" && !Array.isArray(outSch)) {
+            const obj = outSch;
+            if (Object.keys(obj).length > 0) {
+                let marked;
+                try {
+                    marked = scanSchemaHasMarker(obj);
+                }
+                catch {
+                    return this.driftHold(pinned.toolName, [], "outputSchema present but the content scan could not complete; fail-closed HOLD");
+                }
+                if (marked) {
+                    return this.driftHold(pinned.toolName, [], "an injection/exfil marker is present in the tool's outputSchema (an unhashed, agent-consumed channel)");
+                }
+            }
+        }
+        if (pinned.schema === null)
+            return null;
+        let drift;
+        try {
+            drift = this.classifyDrift(pinned, observed);
+        }
+        catch {
+            return null;
+        }
+        const mandated = drift.filter((c) => this.behavioralMandatedKinds.has(c.kind)).map((c) => c.kind.toString());
+        if (mandated.length === 0)
+            return null;
+        return this.behavioralInconclusive(pinned.toolName, drift, mandated);
+    }
+    validateDrift(name, pinned, observed) {
+        let drift;
+        try {
+            drift = this.classifyDrift(pinned, observed);
+        }
+        catch {
+            return this.driftHold(name, [], "contract DRIFTED and validation could not complete; fail-closed HOLD");
+        }
+        // FIX 1 (fail-closed, H2): the canonical hash CHANGED (we only reach here on a hash
+        // mismatch), yet the classifier produced NO change — UN-EXPLAINABLE drift (an
+        // unmodeled inputSchema facet narrowed the contract and flipped the hash without
+        // yielding a Change). An empty change list would otherwise read as "every change is
+        // allowlisted" and clear as PROVEN BENIGN under ANY posture (incl STRICT) — a
+        // fail-OPEN. We cannot prove a drift benign when we cannot say WHAT drifted, so we
+        // fail CLOSED with a synthetic DEEP_SCHEMA_UNDIFFABLE. Mirrors gate.py FIX-1.
+        if (drift.length === 0) {
+            const synthetic = {
+                kind: ChangeKind.DEEP_SCHEMA_UNDIFFABLE,
+                path: "(tool)",
+                safetyRelevant: true,
+                detail: "contract hash DRIFTED but no structured change could be classified (an unmodeled schema facet narrowed the contract); cannot prove benign",
+            };
+            return this.driftHold(name, [synthetic], "contract hash DRIFTED but no structured change could be classified; cannot prove benign — fail-closed HOLD");
+        }
+        const mandated = drift.filter((c) => this.behavioralMandatedKinds.has(c.kind)).map((c) => c.kind.toString());
+        if (!this.autoAcceptBenign) {
+            if (mandated.length > 0)
+                return this.behavioralInconclusive(name, drift, mandated);
+            return this.driftHold(name, drift, "contract DRIFTED from your pin");
+        }
+        if (mandated.length > 0)
+            return this.behavioralInconclusive(name, drift, mandated);
+        const oldDesc = descriptionOf(pinned.schema);
+        const newDesc = descriptionOf(observed);
+        if (oldDesc !== newDesc) {
+            return this.descriptionHold(name, drift, oldDesc, newDesc);
+        }
+        const nonAllowlisted = [
+            ...new Set(drift.filter((c) => !BENIGN_AUTOACCEPT_KINDS.has(c.kind)).map((c) => c.kind.toString())),
+        ].sort();
+        if (nonAllowlisted.length > 0) {
+            return this.driftHold(name, drift, "contract DRIFTED; not in the benign allowlist (added-optional-param / tool-added with no description change): " +
+                nonAllowlisted.join(", "));
+        }
+        let escalation;
+        try {
+            escalation = this.riskEscalation(pinned, observed);
+        }
+        catch {
+            return this.driftHold(name, drift, "contract DRIFTED and the risk assessment could not complete; fail-closed HOLD");
+        }
+        if (escalation !== null) {
+            return this.driftHold(name, drift, "contract DRIFTED; risk ESCALATED on an otherwise-allowlisted change: " + escalation);
+        }
+        let hasMarker;
+        try {
+            hasMarker = this.markerIn(observed);
+        }
+        catch {
+            return this.driftHold(name, drift, "contract DRIFTED and the content scan could not complete; fail-closed HOLD");
+        }
+        if (hasMarker) {
+            return this.driftHold(name, drift, "contract DRIFTED; an injection/exfil marker is present in the new definition (input schema or description)");
+        }
+        this.repinOne(name, observed);
+        return makeVerdict({
+            serverId: this._serverId,
+            toolName: name,
+            decision: Decision.PROCEED,
+            reason: "contract DRIFTED but PROVEN BENIGN (every change is an added-optional-param / tool-added, the description is unchanged, risk did not escalate, and no marker is present); auto-accepted and re-pinned",
+            drift,
+        });
+    }
+    riskEscalation(pinned, observed) {
+        if (pinned.schema === null)
+            return "no pinned schema to compare risk against (fail-closed)";
+        const oldRisk = Gate.riskOf(pinned.schema);
+        const newRisk = Gate.riskOf(observed);
+        if (blastRank(newRisk.blastRadius) > blastRank(oldRisk.blastRadius)) {
+            return `blast radius escalated ${oldRisk.blastRadius} → ${newRisk.blastRadius}`;
+        }
+        if (newRisk.hasWritePayloadParam && !oldRisk.hasWritePayloadParam) {
+            return "gained a write/actionable payload parameter";
+        }
+        if (newRisk.requiresCredential && !oldRisk.requiresCredential) {
+            return "gained a credential-bearing parameter";
+        }
+        return null;
+    }
+    static riskOf(defn) {
+        return assess(String(defn["name"] ?? ""), String(defn["description"] ?? ""), defn["inputSchema"]);
+    }
+    static markerIn(defn) {
+        const d = defn;
+        const inSch = d["inputSchema"];
+        if (inSch !== null && typeof inSch === "object" && !Array.isArray(inSch)) {
+            const obj = inSch;
+            if (Object.keys(obj).length > 0 && scanSchemaHasMarker(obj))
+                return true;
+        }
+        // outputSchema is INCLUDED (H1 / FIX 2): its field description / default / title /
+        // pattern strings are attacker-controllable and agent-consumed, so the marker
+        // tripwire must cover it too — same scanner, same regexes. Mirrors `_marker_in`.
+        const outSch = d["outputSchema"];
+        if (outSch !== null && typeof outSch === "object" && !Array.isArray(outSch)) {
+            const obj = outSch;
+            if (Object.keys(obj).length > 0 && scanSchemaHasMarker(obj))
+                return true;
+        }
+        const desc = d["description"];
+        if (typeof desc === "string" && desc && scanSchemaHasMarker({ description: desc }))
+            return true;
+        return false;
+    }
+    markerIn(defn) {
+        return Gate.markerIn(defn);
+    }
+    // -------------------------------------------------------------- verdicts
+    descriptionHold(name, drift, oldDesc, newDesc) {
+        return makeVerdict({
+            serverId: this._serverId,
+            toolName: name,
+            decision: Decision.HOLD,
+            reason: "contract DRIFTED: the tool DESCRIPTION changed (the agent-consumed, attacker-controllable channel); review the before/after and re-pin if expected",
+            drift,
+            descBefore: oldDesc,
+            descAfter: newDesc,
+        });
+    }
+    driftHold(name, drift, reason) {
+        return makeVerdict({ serverId: this._serverId, toolName: name, decision: Decision.HOLD, reason, drift });
+    }
+    behavioralInconclusive(name, drift, mandatedKinds) {
+        const kinds = [...new Set(mandatedKinds)].sort().join(", ");
+        return makeVerdict({
+            serverId: this._serverId,
+            toolName: name,
+            decision: Decision.INCONCLUSIVE,
+            reason: `contract DRIFTED in a class the declared contract cannot clear or condemn (${kinds}); behavioral validation needed before use`,
+            drift,
+        });
+    }
+    holdOrFailopen(name, reason) {
+        if (this.failOpen) {
+            return makeVerdict({
+                serverId: this._serverId,
+                toolName: name,
+                decision: Decision.PROCEED,
+                reason,
+                failOpenWarning: true,
+                isContractDiff: false,
+            });
+        }
+        return makeVerdict({
+            serverId: this._serverId,
+            toolName: name,
+            decision: Decision.HOLD,
+            reason,
+            isContractDiff: false,
+        });
+    }
+    // ------------------------------------------------------------- posture layer
+    applyPosture(stat) {
+        if (stat.decision === Decision.PROCEED)
+            return stat;
+        if (this._posture === Posture.STRICT)
+            return stat;
+        if (this._posture === Posture.MONITOR)
+            return this.notifyOnly(stat);
+        // GUARD
+        if (!stat.isContractDiff)
+            return stat;
+        if (this.isUnambiguousDangerous(stat))
+            return stat;
+        return this.notifyOnly(stat);
+    }
+    decide(name, observed) {
+        try {
+            const stat = this.evaluate(name, observed);
+            const eff = this.applyPosture(stat);
+            return [stat, eff];
+        }
+        catch (exc) {
+            this.captureError(exc, Operation.GATE_DECISION, "gate.decide");
+            const verdict = this.internalErrorVerdict(name);
+            return [verdict, verdict];
+        }
+    }
+    internalErrorVerdict(name) {
+        return internalErrorHold(this._serverId, name);
+    }
+    captureError(exc, operation, ourCodeLocation) {
+        if (this.errors === null)
+            return;
+        try {
+            const className = exc instanceof Error ? exc.constructor.name : "Error";
+            this.errors.capture(className, operation, ourCodeLocation);
+        }
+        catch {
+            // capture must never break the graceful-fail path
+        }
+    }
+    isUnambiguousDangerous(verdict) {
+        if (verdict.drift.some((c) => GUARD_DANGEROUS_KINDS.has(c.kind)))
+            return true;
+        return DANGEROUS_REASON_MARKERS.some((m) => verdict.reason.includes(m));
+    }
+    notifyOnly(stat) {
+        return makeVerdict({
+            serverId: stat.serverId,
+            toolName: stat.toolName,
+            decision: Decision.PROCEED,
+            reason: `notify-only (${this._posture}): ${stat.reason}`,
+            drift: stat.drift,
+            isContractDiff: stat.isContractDiff,
+            descBefore: stat.descBefore,
+            descAfter: stat.descAfter,
+        });
+    }
+    // ----------------------------------------------------- behavioral validation
+    /**
+     * Verdict-only public wrapper. Callers that must DERIVE the evidence tier
+     * (`tierReached` / `verdictScope`) honestly use `runBehavioralOutcome`, which also surfaces
+     * the STRUCTURED `BehavioralOutcome` so the tier is keyed on the enum and NEVER on the
+     * verifier-controlled free-text reason string.
+     */
+    runBehavioral(toolName, observed, staticVerdict, verifier) {
+        return this.runBehavioralOutcome(toolName, observed, staticVerdict, verifier)[0];
+    }
+    /**
+     * Like `runBehavioral`, but ALSO returns the structured `BehavioralOutcome` the verifier
+     * produced (or `null` when the verifier was NEVER consulted — a missing observed contract or
+     * a verifier that errored). Callers key the evidence tier on this enum, never on the reason
+     * string: behaviour was OBSERVED iff the outcome is CLEARED or FAILED; UNAVAILABLE / DECLINED
+     * / null mean behaviour did NOT run (tier 0). Keying on the enum closes a provenance-honesty
+     * hole — the reason string embeds the verifier-controlled `result.reason`, so a verifier
+     * returning UNAVAILABLE with a reason that merely CONTAINS the literal "behavioral validation
+     * FAILED" must NOT forge a BEHAVIORAL/tier-3 stamp on a HOLD where behaviour was never seen.
+     * Python mirror: `Gate.run_behavioral_outcome`.
+     */
+    runBehavioralOutcome(toolName, observed, staticVerdict, verifier) {
+        const method = chooseBehavioralMethod(this._ownership);
+        if (method === BehavioralMethod.DECLINED) {
+            return [
+                this.holdOrFailopen(toolName, "behavioral validation DECLINED: a full behavioral battery is not permitted against an unowned third-party live server (no consent); stay HOLD"),
+                BehavioralOutcome.DECLINED,
+            ];
+        }
+        if (observed === null) {
+            return [
+                this.holdOrFailopen(toolName, "no observed contract to behaviorally validate; list_tools before validating"),
+                null,
+            ];
+        }
+        let result;
+        try {
+            result = verifier.verify(this._serverId, toolName, observed, this._ownership, method);
+        }
+        catch {
+            return [this.holdOrFailopen(toolName, "behavioral verifier errored; fail-closed HOLD"), null];
+        }
+        if (result.outcome === BehavioralOutcome.CLEARED) {
+            // Behaviour WAS observed (CLEARED) regardless of the description re-check outcome, so the
+            // outcome stays CLEARED even when description drift forces a HOLD — the tier honestly
+            // reflects that behaviour ran (tier 3), while the decision stays HOLD.
+            const pinned = this.pin.get(this._serverId, toolName);
+            if (pinned === null || pinned.schema === null) {
+                return [
+                    this.holdOrFailopen(toolName, "behavioral validation CLEARED but the pinned description could not be compared (no pin/schema); fail-closed HOLD"),
+                    BehavioralOutcome.CLEARED,
+                ];
+            }
+            const oldDesc = descriptionOf(pinned.schema);
+            const newDesc = descriptionOf(observed);
+            if (oldDesc !== newDesc) {
+                return [
+                    this.descriptionHold(toolName, [...staticVerdict.drift], oldDesc, newDesc),
+                    BehavioralOutcome.CLEARED,
+                ];
+            }
+            this.repinOne(toolName, observed);
+            return [
+                makeVerdict({
+                    serverId: this._serverId,
+                    toolName,
+                    decision: Decision.PROCEED,
+                    reason: `behavioral validation CLEARED (${method}); auto-accepted and re-pinned`,
+                }),
+                BehavioralOutcome.CLEARED,
+            ];
+        }
+        const suffix = result.reason || method;
+        const reason = result.outcome === BehavioralOutcome.FAILED
+            ? `behavioral validation FAILED (${suffix})`
+            : `behavioral validation UNAVAILABLE (${suffix}); stay HOLD`;
+        return [this.driftHold(toolName, [...staticVerdict.drift], reason), result.outcome];
+    }
+}
+export { isSafetyRelevant, DEFAULT_BEHAVIORAL_MANDATED_KINDS };
+//# sourceMappingURL=gate.js.map

package/dist/src/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,QAAQ,EAER,QAAQ,EACR,WAAW,EACX,SAAS,GACV,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAc,SAAS,EAAE,MAAM,aAAa,CAAC;AAEpD,iFAAiF;AACjF,MAAM,iCAAiC,GAA4B,IAAI,GAAG,CAAC;IACzE,UAAU,CAAC,qBAAqB;IAChC,UAAU,CAAC,8BAA8B;CAC1C,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,uBAAuB,GAA4B,IAAI,GAAG,CAAC;IAC/D,UAAU,CAAC,oBAAoB;IAC/B,UAAU,CAAC,UAAU;IACrB,UAAU,CAAC,mBAAmB;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAN,IAAY,OAIX;AAJD,WAAY,OAAO;IACjB,8BAAmB,CAAA;IACnB,0BAAe,CAAA;IACf,4BAAiB,CAAA;AACnB,CAAC,EAJW,OAAO,KAAP,OAAO,QAIlB;AAED,4EAA4E;AAC5E,6DAA6D;AAC7D,MAAM,qBAAqB,GAA4B,IAAI,GAAG,CAAC;IAC7D,UAAU,CAAC,8BAA8B;IACzC,UAAU,CAAC,oBAAoB;IAC/B,UAAU,CAAC,qBAAqB;IAChC,UAAU,CAAC,aAAa;IACxB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,mBAAmB;IAC9B,UAAU,CAAC,mBAAmB;IAC9B,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,qBAAqB;IAChC,UAAU,CAAC,sBAAsB;CAClC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAwC;IAChE,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAChC,iFAAiF;IACnF,CAAC,UAAU,CAAC,8BAA8B,CAAC,EACzC,iFAAiF;IACnF,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAC/B,gFAAgF;IAClF,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAChC,gFAAgF;IAClF,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,2DAA2D;IACvF,CAAC,UAAU,CAAC,YAAY,CAAC,EACvB,+EAA+E;IACjF,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAC9B,4EAA4E;IAC9E,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAC9B,2EAA2E;IAC7E,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,uCAAuC;IAClE,CAAC,UAAU,CAAC,sBAAsB,CAAC,EACjC,gFAAgF;CACnF,CAAC;AAEF,MAAM,wBAAwB,GAAsB;IAClD,gBAAgB;IAChB,wBAAwB;IACxB,oBAAoB;IACpB,qBAAqB;IACrB,8BAA8B;IAC9B,mCAAmC;IACnC,gCAAgC;CACjC,CAAC;AAEF,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC,MAAM,CAAC,MAAM,kCAAkC,GAC7C,GAAG,UAAU,oFAAoF,CAAC;AAEpG,MAAM,CAAC,MAAM,2BAA2B,GACtC,GAAG,UAAU,yDAAyD,CAAC;AAEzE,MAAM,0BAA0B,GAAG,2CAA2C,CAAC;AAE/E,MAAM,UAAU,sBAAsB,CAAC,OAAyB;IAC9D,OAAO,OAAO,CAAC,MAAM,KAAK,0BAA0B,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,QAAgB;IAClE,OAAO,WAAW,CAAC;QACjB,QAAQ;QACR,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,MAAM,EAAE,0BAA0B;QAClC,cAAc,EAAE,KAAK;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAN,IAAY,SAIX;AAJD,WAAY,SAAS;IACnB,wBAAW,CAAA;IACX,oCAAuB,CAAA;IACvB,wDAA2C,CAAA;AAC7C,CAAC,EAJW,SAAS,KAAT,SAAS,QAIpB;AAED,MAAM,CAAN,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,uDAAmC,CAAA;IACnC,uDAAmC,CAAA;IACnC,yCAAqB,CAAA;AACvB,CAAC,EAJW,gBAAgB,KAAhB,gBAAgB,QAI3B;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAoB;IACzD,IAAI,SAAS,KAAK,SAAS,CAAC,GAAG;QAAE,OAAO,gBAAgB,CAAC,eAAe,CAAC;IACzE,IAAI,SAAS,KAAK,SAAS,CAAC,SAAS;QAAE,OAAO,gBAAgB,CAAC,eAAe,CAAC;IAC/E,OAAO,gBAAgB,CAAC,QAAQ,CAAC;AACnC,CAAC;AAED,MAAM,CAAN,IAAY,iBAKX;AALD,WAAY,iBAAiB;IAC3B,wCAAmB,CAAA;IACnB,sCAAiB,CAAA;IACjB,gDAA2B,CAAA;IAC3B,0CAAqB,CAAA;AACvB,CAAC,EALW,iBAAiB,KAAjB,iBAAiB,QAK5B;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAiC;IACjE,OAAO,OAAO,KAAK,iBAAiB,CAAC,OAAO,IAAI,OAAO,KAAK,iBAAiB,CAAC,MAAM,CAAC;AACvF,CAAC;AAkBD,8EAA8E;AAC9E,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC;IACvB,IAAI,MAAc,CAAC;IACnB,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE;QAAE,MAAM,GAAG,IAAI,CAAC;;QAC3C,MAAM,GAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAA6B,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC;IACxF,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAyB;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI;QACjB,UAAU,CAAC,qBAAqB;QAChC,UAAU,CAAC,8BAA8B;QACzC,UAAU,CAAC,oBAAoB;QAC/B,UAAU,CAAC,qBAAqB;QAChC,UAAU,CAAC,aAAa;QACxB,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,mBAAmB;QAC9B,UAAU,CAAC,mBAAmB;QAC9B,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,sBAAsB;KAClC,EAAE,CAAC;QACF,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAyB;IAClD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC9D,OAAO,2DAA2D,CAAC;IACrE,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,QAAQ,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnF,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,KAAK,GAAG,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,KAAK,GAAG,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAyB,EAAE,eAA8B,IAAI;IAC5F,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,IAAI,GAAG,GAAG,UAAU,8BAA8B,IAAI,kCAAkC,CAAC;IAC7F,IAAI,IAAI,gCAAgC,CAAC;IACzC,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,IAAI,QAAQ,OAAO,CAAC,YAAY,CAAC,0CAA0C,CAAC;IAClF,CAAC;IACD,8EAA8E;IAC9E,iFAAiF;IACjF,oFAAoF;IACpF,oFAAoF;IACpF,uFAAuF;IACvF,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,IAAoB;IACzC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzD,MAAM,IAAI,GAAI,IAAgC,CAAC,aAAa,CAAC,CAAC;IAC9D,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAgBD,MAAM,OAAO,IAAI;IACE,GAAG,CAAe;IAClB,SAAS,CAAS;IAClB,QAAQ,CAAU;IAClB,gBAAgB,CAAU;IAC1B,GAAG,CAAe;IAClB,UAAU,CAAY;IACtB,uBAAuB,CAA0B;IACjD,SAAS,CAA4B;IACrC,QAAQ,CAAU;IAClB,MAAM,CAAoB;IAE3C,YAAY,IAAiB;QAC3B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QACvC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC;QACtD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,mBAAmB,CAAC;QAClE,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,uBAAuB,IAAI,iCAAiC,CAAC;QACjG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IACpC,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IACD,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IACD,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,wDAAwD;IACxD,OAAO,CAAC,IAAY,EAAE,IAAa;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAChD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBACX,QAAQ,EAAE,IAAI,CAAC,SAAS;gBACxB,QAAQ,EAAE,IAAI;gBACd,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC;gBAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;gBACpB,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,QAAiB;QACtC,MAAM,CAAC,GAAe;YACpB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,QAAQ,EAAE,IAAI;YACd,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAClC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,MAAM,EAAE,QAAQ;SACjB,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,4EAA4E;IAC5E,QAAQ,CAAC,IAAY,EAAE,QAAwB;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,cAAc,CACxB,IAAI,EACJ,sFAAsF,CACvF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,cAAc,CACxB,IAAI,EACJ,qGAAqG,CACtG,CAAC;QACJ,CAAC;QAED,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,0DAA0D,CAAC,CAAC;QAC/F,CAAC;QAED,IAAI,QAAQ,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC9D,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,QAAQ,CAAC;YACvC,OAAO,WAAW,CAAC;gBACjB,QAAQ,EAAE,IAAI,CAAC,SAAS;gBACxB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,QAAQ,CAAC,OAAO;gBAC1B,MAAM,EAAE,2BAA2B;aACpC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAEO,aAAa,CAAC,MAAkB,EAAE,QAAiB;QACzD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QACD,OAAO;YACL;gBACE,IAAI,EAAE,UAAU,CAAC,sBAAsB;gBACvC,IAAI,EAAE,QAAQ;gBACd,cAAc,EAAE,IAAI;gBACpB,MAAM,EACJ,8GAA8G;aACjH;SACF,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAAC,MAAkB,EAAE,QAAiB;QACjE,kFAAkF;QAClF,iFAAiF;QACjF,kFAAkF;QAClF,mFAAmF;QACnF,kFAAkF;QAClF,qFAAqF;QACrF,MAAM,MAAM,GAAI,QAAoC,CAAC,cAAc,CAAC,CAAC;QACrE,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,MAAM,GAAG,GAAG,MAAiC,CAAC;YAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC,SAAS,CACnB,MAAM,CAAC,QAAQ,EACf,EAAE,EACF,gFAAgF,CACjF,CAAC;gBACJ,CAAC;gBACD,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,IAAI,CAAC,SAAS,CACnB,MAAM,CAAC,QAAQ,EACf,EAAE,EACF,uGAAuG,CACxG,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7G,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,OAAO,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvE,CAAC;IAEO,aAAa,CAAC,IAAY,EAAE,MAAkB,EAAE,QAAiB;QACvE,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,SAAS,CACnB,IAAI,EACJ,EAAE,EACF,sEAAsE,CACvE,CAAC;QACJ,CAAC;QAED,oFAAoF;QACpF,8EAA8E;QAC9E,iFAAiF;QACjF,oFAAoF;QACpF,8EAA8E;QAC9E,mFAAmF;QACnF,8EAA8E;QAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,GAAW;gBACxB,IAAI,EAAE,UAAU,CAAC,sBAAsB;gBACvC,IAAI,EAAE,QAAQ;gBACd,cAAc,EAAE,IAAI;gBACpB,MAAM,EACJ,2IAA2I;aAC9I,CAAC;YACF,OAAO,IAAI,CAAC,SAAS,CACnB,IAAI,EACJ,CAAC,SAAS,CAAC,EACX,4GAA4G,CAC7G,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7G,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,gCAAgC,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEnF,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,cAAc,GAAG;YACrB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;SACpG,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,SAAS,CACnB,IAAI,EACJ,KAAK,EACL,gHAAgH;gBAC9G,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5B,CAAC;QACJ,CAAC;QAED,IAAI,UAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,SAAS,CACnB,IAAI,EACJ,KAAK,EACL,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,SAAS,CACnB,IAAI,EACJ,KAAK,EACL,uEAAuE,GAAG,UAAU,CACrF,CAAC;QACJ,CAAC;QAED,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,SAAS,CACnB,IAAI,EACJ,KAAK,EACL,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,SAAS,CACnB,IAAI,EACJ,KAAK,EACL,4GAA4G,CAC7G,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9B,OAAO,WAAW,CAAC;YACjB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ,CAAC,OAAO;YAC1B,MAAM,EACJ,uMAAuM;YACzM,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,MAAkB,EAAE,QAAiB;QAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,wDAAwD,CAAC;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,OAAO,0BAA0B,OAAO,CAAC,WAAW,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAClE,OAAO,6CAA6C,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC9D,OAAO,uCAAuC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,MAAM,CAAC,IAAa;QACjC,OAAO,MAAM,CACX,MAAM,CAAE,IAAgC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EACvD,MAAM,CAAE,IAAgC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAC7D,IAAgC,CAAC,aAAa,CAAC,CACjD,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,QAAQ,CAAC,IAAa;QACnC,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,MAAM,GAAG,GAAG,KAAgC,CAAC;YAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC3E,CAAC;QACD,mFAAmF;QACnF,8EAA8E;QAC9E,iFAAiF;QACjF,MAAM,MAAM,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,MAAM,GAAG,GAAG,MAAiC,CAAC;YAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC3E,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,mBAAmB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAChG,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,QAAQ,CAAC,IAAa;QAC5B,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,0EAA0E;IAClE,eAAe,CAAC,IAAY,EAAE,KAAe,EAAE,OAAe,EAAE,OAAe;QACrF,OAAO,WAAW,CAAC;YACjB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,MAAM,EACJ,oJAAoJ;YACtJ,KAAK;YACL,UAAU,EAAE,OAAO;YACnB,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,KAAe,EAAE,MAAc;QAC7D,OAAO,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3G,CAAC;IAEO,sBAAsB,CAAC,IAAY,EAAE,KAAe,EAAE,aAAuB;QACnF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,WAAW,CAAC;YACjB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ,CAAC,YAAY;YAC/B,MAAM,EAAE,8EAA8E,KAAK,4CAA4C;YACvI,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,IAAY,EAAE,MAAc;QACjD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,WAAW,CAAC;gBACjB,QAAQ,EAAE,IAAI,CAAC,SAAS;gBACxB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,QAAQ,CAAC,OAAO;gBAC1B,MAAM;gBACN,eAAe,EAAE,IAAI;gBACrB,cAAc,EAAE,KAAK;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,WAAW,CAAC;YACjB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,MAAM;YACN,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,YAAY,CAAC,IAAsB;QACjC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACpD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAClD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpE,QAAQ;QACR,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,IAAY,EAAE,QAAwB;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAChD,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,oBAAoB,CAAC,IAAY;QAC/B,OAAO,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,YAAY,CAAC,GAAY,EAAE,SAAoB,EAAE,eAAuB;QACtE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO;QACjC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YACxE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAC,OAAyB;QACtD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9E,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAEO,UAAU,CAAC,IAAsB;QACvC,OAAO,WAAW,CAAC;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,QAAQ,CAAC,OAAO;YAC1B,MAAM,EAAE,gBAAgB,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,EAAE;YACxD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E;;;;;OAKG;IACH,aAAa,CACX,QAAgB,EAChB,QAAwB,EACxB,aAA+B,EAC/B,QAA4B;QAE5B,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;;;;OAUG;IACH,oBAAoB,CAClB,QAAgB,EAChB,QAAwB,EACxB,aAA+B,EAC/B,QAA4B;QAE5B,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YACzC,OAAO;gBACL,IAAI,CAAC,cAAc,CACjB,QAAQ,EACR,+IAA+I,CAChJ;gBACD,iBAAiB,CAAC,QAAQ;aAC3B,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO;gBACL,IAAI,CAAC,cAAc,CACjB,QAAQ,EACR,6EAA6E,CAC9E;gBACD,IAAI;aACL,CAAC;QACJ,CAAC;QAED,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,+CAA+C,CAAC,EAAE,IAAI,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,iBAAiB,CAAC,OAAO,EAAE,CAAC;YACjD,0FAA0F;YAC1F,sFAAsF;YACtF,uEAAuE;YACvE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACtD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC9C,OAAO;oBACL,IAAI,CAAC,cAAc,CACjB,QAAQ,EACR,kHAAkH,CACnH;oBACD,iBAAiB,CAAC,OAAO;iBAC1B,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,OAAO;oBACL,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;oBAC1E,iBAAiB,CAAC,OAAO;iBAC1B,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAClC,OAAO;gBACL,WAAW,CAAC;oBACV,QAAQ,EAAE,IAAI,CAAC,SAAS;oBACxB,QAAQ;oBACR,QAAQ,EAAE,QAAQ,CAAC,OAAO;oBAC1B,MAAM,EAAE,kCAAkC,MAAM,gCAAgC;iBACjF,CAAC;gBACF,iBAAiB,CAAC,OAAO;aAC1B,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC;QACvC,MAAM,MAAM,GACV,MAAM,CAAC,OAAO,KAAK,iBAAiB,CAAC,MAAM;YACzC,CAAC,CAAC,iCAAiC,MAAM,GAAG;YAC5C,CAAC,CAAC,sCAAsC,MAAM,cAAc,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,CAAC;CACF;AAED,OAAO,EAAE,gBAAgB,EAAE,iCAAiC,EAAE,CAAC"}