@mikeargento/bitgraph 1.1.0 → 1.2.0

package/dist/__tests__/audit-ingest.test.js

@@ -0,0 +1,473 @@
+// Copyright (c) Mike Argento. All rights reserved. See LICENSE.
+/**
+ * Tests for @mikeargento/bitgraph-audit ingest: container handling
+ * (directory, tar, tar.gz), discovery by shape, the version policy,
+ * duplicate detection, embedded proofHash cross-checks, manifest
+ * validation, the deterministic contents hash, and path safety.
+ */
+import { describe, test, before, after } from "node:test";
+import * as assert from "node:assert/strict";
+import { rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { gzipSync } from "node:zlib";
+import { computeProofHash } from "@mikeargento/bitgraph-verify";
+import { computeContentsHashB64, ingestBundle, } from "@mikeargento/bitgraph-audit";
+import { b64, makeChainIdProof, makeConstructorProof, makeTar, makeTempDir, proofJson, storedProofJson, utf8, writeBundleDir, } from "./audit-fixtures.js";
+const tempDirs = [];
+async function newBundleDir() {
+    const dir = await makeTempDir("bitgraph-audit-ingest-");
+    tempDirs.push(dir);
+    return dir;
+}
+after(async () => {
+    for (const dir of tempDirs) {
+        await rm(dir, { recursive: true, force: true });
+    }
+});
+// Shared fixtures
+let fxProof;
+let fxBytes;
+let fxHash;
+before(async () => {
+    const made = await makeConstructorProof();
+    fxProof = made.proof;
+    fxBytes = made.bytes;
+    fxHash = computeProofHash(fxProof);
+});
+// ---------------------------------------------------------------------------
+// Directory bundles
+// ---------------------------------------------------------------------------
+describe("audit ingest: directory bundles", () => {
+    test("discovers proofs by shape, matches artifacts by content, ignores unrelated files", async () => {
+        const dir = await newBundleDir();
+        await writeBundleDir(dir, {
+            "proofs/anything-goes.txt": storedProofJson(fxProof, fxHash),
+            "media/original.bin": fxBytes,
+            "notes/README.txt": "operator notes, not evidence",
+        });
+        const result = await ingestBundle(dir);
+        assert.equal(result.container, "directory");
+        assert.equal(result.counts.observed, 1);
+        assert.equal(result.counts.proofFiles, 1);
+        const proof = result.proofs[0];
+        assert.equal(proof.proofHash, fxHash);
+        assert.equal(proof.sources.length, 1);
+        assert.equal(proof.sources[0].path, "proofs/anything-goes.txt");
+        assert.equal(proof.embeddedProofHash, "match");
+        // Artifact matched content-addressed; the README is an unmatched candidate.
+        const matched = result.artifacts.filter((a) => a.matchedProofHashes.length > 0);
+        assert.equal(matched.length, 1);
+        assert.deepEqual(matched[0].paths, ["media/original.bin"]);
+        assert.deepEqual(matched[0].matchedProofHashes, [fxHash]);
+        const unmatched = result.artifacts.filter((a) => a.matchedProofHashes.length === 0);
+        assert.equal(unmatched.length, 1);
+        assert.deepEqual(unmatched[0].paths, ["notes/README.txt"]);
+        // Unrelated files produce no findings.
+        assert.deepEqual(result.findings, []);
+    });
+    test("version policy: occ/1 proof-shaped file is rejected with the stable code", async () => {
+        const dir = await newBundleDir();
+        await writeBundleDir(dir, {
+            "legacy.json": JSON.stringify({
+                version: "occ/1",
+                artifact: { hashAlg: "sha256", digestB64: "AAAA" },
+                commit: { nonceB64: "AAAA" },
+                signer: { publicKeyB64: "AAAA", signatureB64: "AAAA" },
+            }),
+            "good.json": proofJson(fxProof),
+        });
+        const result = await ingestBundle(dir);
+        assert.equal(result.counts.observed, 1);
+        assert.equal(result.counts.unsupportedVersion, 1);
+        const rejected = result.unsupportedVersions[0];
+        assert.equal(rejected.code, "unsupported-version");
+        assert.equal(rejected.path, "legacy.json");
+        assert.equal(rejected.version, "occ/1");
+        const finding = result.findings.find((f) => f.code === "unsupported-version");
+        assert.ok(finding);
+        assert.equal(finding.path, "legacy.json");
+        // Excluded from observation entirely.
+        assert.ok(result.proofs.every((p) => p.sources[0].path !== "legacy.json"));
+    });
+    test("unknown fields tolerated: signed chainId is extracted, absence normalizes to global", async () => {
+        const withChain = await makeChainIdProof({ chainId: "bitgraph:main", counter: "2", epochId: "epoch-x" });
+        const dir = await newBundleDir();
+        await writeBundleDir(dir, {
+            "a.json": proofJson(withChain.proof),
+            "b.json": proofJson(fxProof),
+        });
+        const result = await ingestBundle(dir);
+        assert.equal(result.counts.observed, 2);
+        const chained = result.proofs.find((p) => p.sources[0].path === "a.json");
+        const plain = result.proofs.find((p) => p.sources[0].path === "b.json");
+        assert.equal(chained.chainId, "bitgraph:main");
+        assert.equal(chained.counter, "2");
+        assert.equal(chained.epochId, "epoch-x");
+        assert.equal(chained.chainless, false);
+        assert.equal(plain.chainId, "global");
+    });
+    test("exact duplicates: byte-identical copies collapse to one observed proof", async () => {
+        const dir = await newBundleDir();
+        const body = proofJson(fxProof);
+        await writeBundleDir(dir, {
+            "one/copy.json": body,
+            "two/copy.json": body,
+        });
+        const result = await ingestBundle(dir);
+        assert.equal(result.counts.observed, 1);
+        assert.equal(result.counts.proofFiles, 2);
+        assert.equal(result.counts.exactDuplicates, 1);
+        assert.equal(result.counts.semanticDuplicates, 0);
+        assert.equal(result.proofs[0].sources.length, 2);
+        const finding = result.findings.find((f) => f.code === "exact-duplicate");
+        assert.ok(finding);
+        assert.equal(finding.details?.["proofHash"], fxHash);
+    });
+    test("semantic duplicates: different encodings of the same canonical identity", async () => {
+        const dir = await newBundleDir();
+        await writeBundleDir(dir, {
+            "compact.json": JSON.stringify(fxProof),
+            "pretty.json": JSON.stringify(fxProof, null, 2),
+        });
+        const result = await ingestBundle(dir);
+        assert.equal(result.counts.observed, 1);
+        assert.equal(result.counts.exactDuplicates, 0);
+        assert.equal(result.counts.semanticDuplicates, 1);
+        assert.equal(result.proofs[0].proofHash, fxHash);
+        assert.equal(result.proofs[0].sources.length, 2);
+        assert.ok(result.findings.find((f) => f.code === "semantic-duplicate"));
+    });
+    test("embedded proofHash mismatch is flagged with a stable code but still observed", async () => {
+        const dir = await newBundleDir();
+        await writeBundleDir(dir, {
+            "tampered-hash.json": storedProofJson(fxProof, b64(new Uint8Array(32))),
+        });
+        const result = await ingestBundle(dir);
+        assert.equal(result.counts.observed, 1);
+        const proof = result.proofs[0];
+        assert.equal(proof.embeddedProofHash, "mismatch");
+        // Identity is always computed, never read from the file.
+        assert.equal(proof.proofHash, fxHash);
+        const finding = result.findings.find((f) => f.code === "proofhash-mismatch");
+        assert.ok(finding);
+        assert.equal(finding.details?.["computed"], proof.proofHash);
+    });
+    test("chainless classification: no counter and no epochId means observed-but-unchained", async () => {
+        const chained = await makeConstructorProof({ withCounter: true, epochId: "epoch-chained" });
+        const dir = await newBundleDir();
+        await writeBundleDir(dir, {
+            "chainless.json": proofJson(fxProof),
+            "chained.json": proofJson(chained.proof),
+        });
+        const result = await ingestBundle(dir);
+        const unchained = result.proofs.find((p) => p.sources[0].path === "chainless.json");
+        const linked = result.proofs.find((p) => p.sources[0].path === "chained.json");
+        assert.equal(unchained.chainless, true);
+        assert.equal(linked.chainless, false);
+        assert.equal(linked.counter, "1");
+        assert.equal(linked.epochId, "epoch-chained");
+        // Chainless is not an anomaly: no finding is emitted for it.
+        assert.deepEqual(result.findings, []);
+    });
+});
+// ---------------------------------------------------------------------------
+// Manifest
+// ---------------------------------------------------------------------------
+describe("audit ingest: manifest", () => {
+    test("contents hash verifies over every entry except the root manifest", async () => {
+        const dir = await newBundleDir();
+        const proofBytes = utf8(proofJson(fxProof));
+        const contentsHashB64 = computeContentsHashB64([
+            { path: "proofs/p.json", content: proofBytes },
+            { path: "media/original.bin", content: fxBytes },
+        ]);
+        await writeBundleDir(dir, {
+            "proofs/p.json": proofBytes,
+            "media/original.bin": fxBytes,
+            "manifest.json": JSON.stringify({
+                version: "bitgraph-bundle/1",
+                proofCount: 1,
+                contentsHashB64,
+                artifactsIncluded: true,
+            }),
+        });
+        const result = await ingestBundle(dir);
+        assert.ok(result.manifest);
+        assert.equal(result.manifest.recognized, true);
+        assert.deepEqual(result.manifest.problems, []);
+        assert.equal(result.manifest.contentsHash?.match, true);
+        assert.equal(result.computedContentsHashB64, contentsHashB64);
+        assert.equal(result.findings.filter((f) => f.code === "manifest-contents-hash-mismatch").length, 0);
+        // The manifest is never a proof, artifact, or witness.
+        assert.equal(result.counts.observed, 1);
+        assert.ok(result.artifacts.every((a) => !a.paths.includes("manifest.json")));
+    });
+    test("contents hash mismatch is an advisory finding, never a proof failure", async () => {
+        const dir = await newBundleDir();
+        await writeBundleDir(dir, {
+            "proofs/p.json": proofJson(fxProof),
+            "manifest.json": JSON.stringify({
+                version: "bitgraph-bundle/1",
+                contentsHashB64: "47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=",
+            }),
+        });
+        const result = await ingestBundle(dir);
+        assert.equal(result.manifest?.contentsHash?.match, false);
+        const finding = result.findings.find((f) => f.code === "manifest-contents-hash-mismatch");
+        assert.ok(finding);
+        // Advisory: the proof is still observed normally.
+        assert.equal(result.counts.observed, 1);
+        assert.equal(result.proofs[0].proofHash, fxHash);
+    });
+    test("manifest field type problems are reported per spec section 7.1", async () => {
+        const dir = await newBundleDir();
+        await writeBundleDir(dir, {
+            "manifest.json": JSON.stringify({
+                version: "bitgraph-bundle/1",
+                proofCount: "five",
+                epochIds: "not-an-array",
+                futureUnknownField: { tolerated: true },
+            }),
+        });
+        const result = await ingestBundle(dir);
+        assert.ok(result.manifest);
+        assert.equal(result.manifest.recognized, true);
+        assert.equal(result.manifest.problems.length, 2);
+        assert.equal(result.findings.filter((f) => f.code === "manifest-field-invalid").length, 2);
+    });
+    test("unrecognized manifest version is reported and the manifest is not interpreted", async () => {
+        const dir = await newBundleDir();
+        await writeBundleDir(dir, {
+            "manifest.json": JSON.stringify({ version: "bitgraph-bundle/2", proofCount: 1 }),
+            "proofs/p.json": proofJson(fxProof),
+        });
+        const result = await ingestBundle(dir);
+        assert.equal(result.manifest?.recognized, false);
+        assert.equal(result.manifest?.manifest, undefined);
+        assert.ok(result.findings.find((f) => f.code === "manifest-unrecognized-version"));
+        // Processing continues as if no manifest were present.
+        assert.equal(result.counts.observed, 1);
+    });
+});
+// ---------------------------------------------------------------------------
+// Tar and tar.gz containers
+// ---------------------------------------------------------------------------
+describe("audit ingest: tar and tar.gz containers", () => {
+    test("plain tar with a PAX long-name entry", async () => {
+        const dir = await newBundleDir();
+        const longPath = `proofs/${"very-long-directory-name-".repeat(6)}segment/proof.json`;
+        assert.ok(longPath.length > 100);
+        const tar = makeTar([
+            { name: "long-name-truncated", paxPath: longPath, content: proofJson(fxProof) },
+            { name: "media/original.bin", content: fxBytes },
+            { name: "notes.txt", content: "unrelated" },
+        ]);
+        const tarPath = join(dir, "bundle.tar");
+        await writeFile(tarPath, tar);
+        const result = await ingestBundle(tarPath);
+        assert.equal(result.container, "tar");
+        assert.equal(result.counts.observed, 1);
+        assert.equal(result.proofs[0].sources[0].path, longPath);
+        const matched = result.artifacts.find((a) => a.matchedProofHashes.length > 0);
+        assert.deepEqual(matched?.paths, ["media/original.bin"]);
+    });
+    test("GNU long-name entries are accepted", async () => {
+        const dir = await newBundleDir();
+        const longPath = `archive/${"gnu-long-name-".repeat(9)}tail/proof.json`;
+        assert.ok(longPath.length > 100);
+        const tar = makeTar([
+            { name: "gnu-truncated", gnuLongName: longPath, content: proofJson(fxProof) },
+            // Root-level entry so the single-top-level-directory rule does not apply.
+            { name: "notes.txt", content: "unrelated" },
+        ]);
+        const tarPath = join(dir, "gnu.tar");
+        await writeFile(tarPath, tar);
+        const result = await ingestBundle(tarPath);
+        assert.equal(result.strippedRootPrefix, undefined);
+        assert.equal(result.counts.observed, 1);
+        assert.equal(result.proofs[0].sources[0].path, longPath);
+    });
+    test("tar.gz round-trips identically to the plain tar", async () => {
+        const dir = await newBundleDir();
+        const tar = makeTar([
+            { name: "proofs/p.json", content: proofJson(fxProof) },
+            { name: "media/original.bin", content: fxBytes },
+        ]);
+        const tgzPath = join(dir, "bundle.tgz");
+        await writeFile(tgzPath, gzipSync(tar));
+        const result = await ingestBundle(tgzPath);
+        assert.equal(result.container, "tar-gz");
+        assert.equal(result.counts.observed, 1);
+        assert.equal(result.proofs[0].proofHash, fxHash);
+        assert.equal(result.artifacts.filter((a) => a.matchedProofHashes.length > 0).length, 1);
+    });
+    test("a single common top-level directory is stripped as the bundle root", async () => {
+        const dir = await newBundleDir();
+        const proofBytes = utf8(proofJson(fxProof));
+        // Contents hash computed over bundle-root-relative (stripped) paths.
+        const contentsHashB64 = computeContentsHashB64([
+            { path: "proofs/p.json", content: proofBytes },
+            { path: "media/original.bin", content: fxBytes },
+        ]);
+        const tar = makeTar([
+            { name: "mybundle/proofs/p.json", content: proofBytes },
+            { name: "mybundle/media/original.bin", content: fxBytes },
+            {
+                name: "mybundle/manifest.json",
+                content: JSON.stringify({ version: "bitgraph-bundle/1", contentsHashB64 }),
+            },
+        ]);
+        const tarPath = join(dir, "wrapped.tar");
+        await writeFile(tarPath, tar);
+        const result = await ingestBundle(tarPath);
+        assert.equal(result.strippedRootPrefix, "mybundle");
+        assert.equal(result.proofs[0].sources[0].path, "proofs/p.json");
+        assert.ok(result.manifest, "manifest at the stripped root is the root manifest");
+        assert.equal(result.manifest.contentsHash?.match, true);
+    });
+    test("unsafe paths are skipped and reported, and never contribute anywhere", async () => {
+        const dir = await newBundleDir();
+        const tar = makeTar([
+            { name: "../escape.json", content: proofJson(fxProof) },
+            { name: "/absolute.json", content: proofJson(fxProof) },
+            { name: "good/p.json", content: proofJson(fxProof) },
+        ]);
+        const tarPath = join(dir, "unsafe.tar");
+        await writeFile(tarPath, tar);
+        const result = await ingestBundle(tarPath);
+        assert.equal(result.counts.skippedUnsafePaths, 2);
+        assert.equal(result.findings.filter((f) => f.code === "unsafe-path").length, 2);
+        assert.equal(result.counts.observed, 1);
+        assert.equal(result.proofs[0].sources.length, 1);
+        assert.equal(result.proofs[0].sources[0].path, "good/p.json");
+        // Skipped entries are excluded from the contents hash.
+        assert.equal(result.computedContentsHashB64, computeContentsHashB64([{ path: "good/p.json", content: utf8(proofJson(fxProof)) }]));
+    });
+    test("duplicate tar paths: the last entry wins and the duplication is reported", async () => {
+        const dir = await newBundleDir();
+        const tar = makeTar([
+            { name: "data/blob.bin", content: "first version" },
+            { name: "data/blob.bin", content: "second version" },
+            // Root-level entry so the single-top-level-directory rule does not apply.
+            { name: "notes.txt", content: "unrelated" },
+        ]);
+        const tarPath = join(dir, "dupes.tar");
+        await writeFile(tarPath, tar);
+        const result = await ingestBundle(tarPath);
+        assert.ok(result.findings.find((f) => f.code === "duplicate-path" && f.path === "data/blob.bin"));
+        const blob = result.artifacts.find((a) => a.paths.includes("data/blob.bin"));
+        assert.equal(blob.byteLength, utf8("second version").length);
+        // Exactly one entry per path participates: the shadowed first version is gone.
+        assert.equal(result.artifacts.filter((a) => a.paths.includes("data/blob.bin")).length, 1);
+    });
+});
+// ---------------------------------------------------------------------------
+// Untrusted-archive resource caps (gzip-bomb / entry-flood defense)
+// ---------------------------------------------------------------------------
+describe("audit ingest: untrusted-archive resource caps", () => {
+    test("an entry count over the cap aborts cleanly instead of unbounded scanning", async () => {
+        const dir = await newBundleDir();
+        // Many zero-length entries: a small archive that would scan forever
+        // under an unbounded reader.
+        const entries = [];
+        for (let i = 0; i < 200; i++) {
+            entries.push({ name: `empty-${i}.bin`, content: new Uint8Array(0) });
+        }
+        const tarPath = join(dir, "flood.tar.gz");
+        await writeFile(tarPath, gzipSync(makeTar(entries)));
+        await assert.rejects(ingestBundle(tarPath, {
+            maxEntryCount: 25,
+            maxTotalBytes: 1 << 30,
+            maxMetadataEntryBytes: 8 * 1024 * 1024,
+        }), /archive exceeds the maximum of 25 entries/);
+    });
+    test("a total decompressed-byte ceiling aborts a bomb before it is fully read", async () => {
+        const dir = await newBundleDir();
+        // A single large artifact whose decompressed size exceeds a low cap.
+        const big = new Uint8Array(512 * 1024).fill(0x41);
+        const tarPath = join(dir, "big.tar.gz");
+        await writeFile(tarPath, gzipSync(makeTar([{ name: "blob.bin", content: big }])));
+        await assert.rejects(ingestBundle(tarPath, {
+            maxEntryCount: 1_000_000,
+            maxTotalBytes: 64 * 1024, // far below the 512 KiB payload
+            maxMetadataEntryBytes: 8 * 1024 * 1024,
+        }), /archive exceeds the maximum decompressed size of 65536 bytes/);
+    });
+    test("a PAX header declaring an absurd size aborts before allocating that buffer", async () => {
+        const dir = await newBundleDir();
+        // The PAX 'x' header claims 2 GiB; the archive itself is tiny. A reader
+        // that trusted the declared size would try to allocate 2 GiB.
+        const tar = makeTar([
+            {
+                name: "pax-truncated",
+                paxPath: "renamed/proof.json",
+                paxHeaderDeclaredSize: 2 * 1024 * 1024 * 1024,
+                content: proofJson(fxProof),
+            },
+        ]);
+        const tarPath = join(dir, "pax-bomb.tar.gz");
+        await writeFile(tarPath, gzipSync(tar));
+        // Default limits: the 8 MiB metadata cap trips before any allocation.
+        await assert.rejects(ingestBundle(tarPath), /PAX metadata entry of \d+ bytes exceeds the \d+-byte cap/);
+    });
+    test("legitimate archives ingest normally under the default caps", async () => {
+        const dir = await newBundleDir();
+        const tarPath = join(dir, "ok.tar.gz");
+        await writeFile(tarPath, gzipSync(makeTar([
+            { name: "proofs/p.json", content: proofJson(fxProof) },
+            { name: "media/original.bin", content: fxBytes },
+        ])));
+        // No limits argument: DEFAULT_INGEST_LIMITS apply and never trip.
+        const result = await ingestBundle(tarPath);
+        assert.equal(result.counts.observed, 1);
+        assert.equal(result.proofs[0].proofHash, fxHash);
+    });
+});
+// ---------------------------------------------------------------------------
+// Deterministic contents hash vectors (docs/BUNDLE-FORMAT.md section 8.3)
+// ---------------------------------------------------------------------------
+describe("audit ingest: contents hash test vectors", () => {
+    test("empty hashed set reproduces the published vector", () => {
+        assert.equal(computeContentsHashB64([]), "47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=");
+    });
+    test("two-entry set reproduces the published vector", () => {
+        const entries = [
+            // Deliberately supplied out of sorted order; the scheme sorts by path bytes.
+            { path: "proofs/example.json", content: utf8('{"hello":"world"}\n') },
+            { path: "artifacts/a.bin", content: new Uint8Array([0x00, 0x01, 0x02]) },
+        ];
+        assert.equal(computeContentsHashB64(entries), "uO+wswRbTl4WWwAuXVrdRjEVDs2jKq72iJhI95XoH3s=");
+    });
+    test("streaming ingest agrees with the one-shot vector implementation", async () => {
+        const dir = await newBundleDir();
+        await writeBundleDir(dir, {
+            "artifacts/a.bin": new Uint8Array([0x00, 0x01, 0x02]),
+            "proofs/example.json": utf8('{"hello":"world"}\n'),
+        });
+        const result = await ingestBundle(dir);
+        assert.equal(result.computedContentsHashB64, "uO+wswRbTl4WWwAuXVrdRjEVDs2jKq72iJhI95XoH3s=");
+    });
+});
+// ---------------------------------------------------------------------------
+// Witness discovery
+// ---------------------------------------------------------------------------
+describe("audit ingest: anchor witness discovery", () => {
+    test("witnesses are discovered by version discriminator, never by filename", async () => {
+        const dir = await newBundleDir();
+        await writeBundleDir(dir, {
+            "some/dir/whatever.dat": JSON.stringify({
+                version: "bitgraph-anchor-witness/1",
+                headerRlpHex: "0xf90201",
+                blockNumber: 19000000,
+                blockHash: `0x${"ab".repeat(32)}`,
+            }),
+        });
+        const result = await ingestBundle(dir);
+        assert.equal(result.counts.witnesses, 1);
+        assert.equal(result.witnesses[0].path, "some/dir/whatever.dat");
+        assert.equal(result.witnesses[0].witness["blockNumber"], 19000000);
+        // Witnesses are not artifact candidates.
+        assert.equal(result.artifacts.length, 0);
+    });
+});
+//# sourceMappingURL=audit-ingest.test.js.map

package/dist/__tests__/audit-ingest.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-ingest.test.js","sourceRoot":"","sources":["../../src/__tests__/audit-ingest.test.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EACL,sBAAsB,EACtB,YAAY,GACb,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,GAAG,EACH,gBAAgB,EAChB,oBAAoB,EACpB,OAAO,EACP,WAAW,EACX,SAAS,EACT,eAAe,EACf,IAAI,EACJ,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,MAAM,QAAQ,GAAa,EAAE,CAAC;AAE9B,KAAK,UAAU,YAAY;IACzB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,wBAAwB,CAAC,CAAC;IACxD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,CAAC,KAAK,IAAI,EAAE;IACf,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,kBAAkB;AAClB,IAAI,OAAuB,CAAC;AAC5B,IAAI,OAAoB,CAAC;AACzB,IAAI,MAAe,CAAC;AAEpB,MAAM,CAAC,KAAK,IAAI,EAAE;IAChB,MAAM,IAAI,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC1C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;IACrB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;IACrB,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAI,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,0BAA0B,EAAE,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC;YAC5D,oBAAoB,EAAE,OAAO;YAC7B,kBAAkB,EAAE,8BAA8B;SACnD,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAEvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAE/C,4EAA4E;QAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,kBAAkB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAE5D,uCAAuC;QACvC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC5B,OAAO,EAAE,OAAO;gBAChB,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE;gBAClD,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;gBAC5B,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE;aACvD,CAAC;YACF,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC;SAChC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAEvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAE,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;QAC9E,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC1C,sCAAsC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACzG,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC;YACpC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC;SAC7B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,QAAQ,CAAE,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,QAAQ,CAAE,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC;QAC1E,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACvC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;SAChD,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,oBAAoB,EAAE,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;SACxE,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QAClD,yDAAyD;QACzD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;QAC7E,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC;YACpC,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;SACzC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,gBAAgB,CAAE,CAAC;QACtF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,cAAc,CAAE,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC9C,6DAA6D;QAC7D,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5C,MAAM,eAAe,GAAG,sBAAsB,CAAC;YAC7C,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE;YAC9C,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,eAAe,EAAE,UAAU;YAC3B,oBAAoB,EAAE,OAAO;YAC7B,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC9B,OAAO,EAAE,mBAAmB;gBAC5B,UAAU,EAAE,CAAC;gBACb,eAAe;gBACf,iBAAiB,EAAE,IAAI;aACxB,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iCAAiC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACpG,uDAAuD;QACvD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,eAAe,EAAE,SAAS,CAAC,OAAO,CAAC;YACnC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC9B,OAAO,EAAE,mBAAmB;gBAC5B,eAAe,EAAE,8CAA8C;aAChE,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iCAAiC,CAAC,CAAC;QAC1F,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACnB,kDAAkD;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC9B,OAAO,EAAE,mBAAmB;gBAC5B,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,cAAc;gBACxB,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;aACxC,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YAChF,eAAe,EAAE,SAAS,CAAC,OAAO,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC;QACnF,uDAAuD;QACvD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,IAAI,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,UAAU,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACrF,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE;YAC/E,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE;YAChD,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE;SAC5C,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACxC,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAE9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9E,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,WAAW,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC;QACxE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE;YAC7E,0EAA0E;YAC1E,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE;SAC5C,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACrC,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAE9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE;YACtD,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACxC,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5C,qEAAqE;QACrE,MAAM,eAAe,GAAG,sBAAsB,CAAC;YAC7C,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE;YAC9C,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,UAAU,EAAE;YACvD,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,OAAO,EAAE;YACzD;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,CAAC;aAC3E;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACzC,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAE9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAClE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,oDAAoD,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE;YACvD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE;YACvD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE;SACrD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACxC,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAE9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAChE,uDAAuD;QACvD,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,uBAAuB,EAC9B,sBAAsB,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CACrF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE;YACnD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE;YACpD,0EAA0E;YAC1E,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE;SAC5C,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACvC,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAE9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC;QAClG,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAE,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7D,+EAA+E;QAC/E,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EACxE,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,oEAAoE;AACpE,8EAA8E;AAE9E,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,oEAAoE;QACpE,6BAA6B;QAC7B,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAErD,MAAM,MAAM,CAAC,OAAO,CAClB,YAAY,CAAC,OAAO,EAAE;YACpB,aAAa,EAAE,EAAE;YACjB,aAAa,EAAE,CAAC,IAAI,EAAE;YACtB,qBAAqB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;SACvC,CAAC,EACF,2CAA2C,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,qEAAqE;QACrE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACxC,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAElF,MAAM,MAAM,CAAC,OAAO,CAClB,YAAY,CAAC,OAAO,EAAE;YACpB,aAAa,EAAE,SAAS;YACxB,aAAa,EAAE,EAAE,GAAG,IAAI,EAAE,gCAAgC;YAC1D,qBAAqB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;SACvC,CAAC,EACF,8DAA8D,CAC/D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,wEAAwE;QACxE,8DAA8D;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB;gBACE,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,oBAAoB;gBAC7B,qBAAqB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;gBAC7C,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;aAC5B;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC7C,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAExC,sEAAsE;QACtE,MAAM,MAAM,CAAC,OAAO,CAClB,YAAY,CAAC,OAAO,CAAC,EACrB,0DAA0D,CAC3D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACvC,MAAM,SAAS,CACb,OAAO,EACP,QAAQ,CACN,OAAO,CAAC;YACN,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE;YACtD,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE;SACjD,CAAC,CACH,CACF,CAAC;QACF,kEAAkE;QAClE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,KAAK,CACV,sBAAsB,CAAC,EAAE,CAAC,EAC1B,8CAA8C,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACzD,MAAM,OAAO,GAAG;YACd,6EAA6E;YAC7E,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,qBAAqB,CAAC,EAAE;YACrE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE;SACzE,CAAC;QACF,MAAM,CAAC,KAAK,CACV,sBAAsB,CAAC,OAAO,CAAC,EAC/B,8CAA8C,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,iBAAiB,EAAE,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACrD,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,8CAA8C,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,uBAAuB,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtC,OAAO,EAAE,2BAA2B;gBACpC,YAAY,EAAE,UAAU;gBACxB,WAAW,EAAE,QAAQ;gBACrB,SAAS,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;aAClC,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAC;QACpE,yCAAyC;QACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/audit-memory-ingest.test.d.ts

@@ -0,0 +1,12 @@
+/**
+ * ingestEntries() and auditIngest(): the filesystem-free path.
+ *
+ * A browser cannot call ingestBundle(path); it hands over bytes. This suite
+ * pins that the in-memory ingest classifies, hashes, and matches exactly
+ * as the directory ingest does over the same files at the same paths, and
+ * that auditIngest() over either produces the same audit (less the run
+ * stamp and the container label). It also pins AUDIT_VERSION to
+ * package.json, since the constant replaced a runtime file read.
+ */
+export {};
+//# sourceMappingURL=audit-memory-ingest.test.d.ts.map

package/dist/__tests__/audit-memory-ingest.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-memory-ingest.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/audit-memory-ingest.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/__tests__/audit-memory-ingest.test.js

@@ -0,0 +1,120 @@
+/**
+ * ingestEntries() and auditIngest(): the filesystem-free path.
+ *
+ * A browser cannot call ingestBundle(path); it hands over bytes. This suite
+ * pins that the in-memory ingest classifies, hashes, and matches exactly
+ * as the directory ingest does over the same files at the same paths, and
+ * that auditIngest() over either produces the same audit (less the run
+ * stamp and the container label). It also pins AUDIT_VERSION to
+ * package.json, since the constant replaced a runtime file read.
+ */
+import { describe, it, before, after } from "node:test";
+import * as assert from "node:assert/strict";
+import { readFile, readdir, rm } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import { join } from "node:path";
+import { auditIngest, auditToolVersion, AUDIT_VERSION, ingestBundle, ingestEntries, runAudit, streamMatchedArtifacts, } from "@mikeargento/bitgraph-audit";
+import { makeStandardAuditBundle } from "./audit-fixtures.js";
+async function walk(root, rel = "") {
+    const out = [];
+    const dir = rel === "" ? root : join(root, rel);
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        const r = rel === "" ? entry.name : `${rel}/${entry.name}`;
+        if (entry.isDirectory())
+            out.push(...(await walk(root, r)));
+        else if (entry.isFile())
+            out.push(r);
+    }
+    return out;
+}
+async function entriesOf(root) {
+    return (await walk(root)).map((p) => ({
+        path: p,
+        open: () => readFile(join(root, ...p.split("/"))).then((b) => new Uint8Array(b)),
+    }));
+}
+/** Everything in an IngestResult that must agree between containers. */
+function comparableIngest(r) {
+    const { bundlePath: _p, container: _c, ...rest } = r;
+    return JSON.parse(JSON.stringify(rest));
+}
+function comparableAudit(a) {
+    const { runMetadata: _m, ingest, ...rest } = a;
+    return JSON.parse(JSON.stringify({ ingest: comparableIngest(ingest), ...rest }));
+}
+describe("audit: AUDIT_VERSION is a source constant that tracks package.json", () => {
+    it("equals the version in packages/audit/package.json", async () => {
+        const pkgPath = fileURLToPath(new URL("../../packages/audit/package.json", import.meta.url));
+        const pkg = JSON.parse(await readFile(pkgPath, "utf8"));
+        assert.equal(AUDIT_VERSION, pkg.version);
+        assert.equal(auditToolVersion(), pkg.version);
+    });
+});
+describe("audit: ingestEntries mirrors ingestBundle over the same files", () => {
+    let dir;
+    let fromDisk;
+    let fromMemory;
+    before(async () => {
+        const bundle = await makeStandardAuditBundle();
+        dir = bundle.dir;
+        fromDisk = await ingestBundle(dir);
+        fromMemory = await ingestEntries(await entriesOf(dir));
+    });
+    after(async () => {
+        if (dir !== undefined)
+            await rm(dir, { recursive: true, force: true });
+    });
+    it("labels the container and keeps the label the caller gave", async () => {
+        assert.equal(fromMemory.container, "memory");
+        assert.equal(fromMemory.bundlePath, "");
+        const labeled = await ingestEntries([], { label: "dropped files" });
+        assert.equal(labeled.bundlePath, "dropped files");
+        assert.equal(labeled.entriesScanned, 0);
+    });
+    it("classifies and matches identically: proofs, artifacts, witnesses, findings, counts, contents hash", () => {
+        assert.deepEqual(comparableIngest(fromMemory), comparableIngest(fromDisk));
+        assert.ok(fromDisk.proofs.length > 0, "the standard bundle has proofs");
+        assert.equal(fromMemory.computedContentsHashB64, fromDisk.computedContentsHashB64);
+    });
+    it("re-reads matched artifact bytes through the registered sources", async () => {
+        const disk = [];
+        for await (const m of streamMatchedArtifacts(fromDisk))
+            disk.push(`${m.path}:${m.sha256Hex}:${m.bytes.length}`);
+        const mem = [];
+        for await (const m of streamMatchedArtifacts(fromMemory))
+            mem.push(`${m.path}:${m.sha256Hex}:${m.bytes.length}`);
+        assert.deepEqual(mem, disk);
+        assert.ok(mem.length > 0, "the standard bundle has matched artifacts");
+    });
+    it("yields no artifact bytes for a structurally cloned result (sources are keyed by identity), never throws", async () => {
+        const clone = JSON.parse(JSON.stringify(fromMemory));
+        const seen = [];
+        for await (const m of streamMatchedArtifacts(clone))
+            seen.push(m.path);
+        assert.deepEqual(seen, []);
+    });
+    it("skips and reports unsafe paths exactly as archive ingest does", async () => {
+        const bad = await ingestEntries([
+            { path: "../escape.json", open: () => new Uint8Array([1]) },
+            { path: "/abs.json", open: () => new Uint8Array([2]) },
+            { path: "ok.bin", open: () => new Uint8Array([3]) },
+        ]);
+        assert.equal(bad.counts.skippedUnsafePaths, 2);
+        assert.equal(bad.entriesScanned, 3);
+        assert.deepEqual(bad.findings.map((f) => f.code), ["unsafe-path", "unsafe-path"]);
+        assert.equal(bad.artifacts.length, 1);
+    });
+    it("auditIngest over either ingest matches runAudit over the directory, less the run stamp", async () => {
+        const viaRun = await runAudit(dir);
+        const viaMemory = await auditIngest(await ingestEntries(await entriesOf(dir)), { startedAt: "" });
+        assert.deepEqual(comparableAudit(viaMemory), comparableAudit(viaRun));
+        assert.equal(viaMemory.runMetadata.startedAt, "");
+        assert.equal(viaMemory.runMetadata.container, "memory");
+        assert.equal(viaRun.runMetadata.toolVersion, AUDIT_VERSION);
+        // The full-tier pass ran in memory too: matched artifacts verified with bytes.
+        assert.equal(viaMemory.verification.verified, viaRun.verification.verified);
+        assert.ok(viaMemory.verification.verified > 0);
+    });
+});
+//# sourceMappingURL=audit-memory-ingest.test.js.map