@mmnto/cli 1.121.0 → 1.123.0

package/dist/commands/legs.js

@@ -0,0 +1,623 @@
+/**
+ * `totem legs deposit` / `totem legs gate` — the two verbs over the
+ * leg-deposit store (mmnto-ai/totem#2698, ruled 2026-09-03;
+ * `doctrine/model-tiering.md` § Review legs).
+ *
+ * `deposit` is the ONLY writer: it resolves the head a falsification leg
+ * actually read, binds the leg's findings file to that sha, and hands the
+ * bytes to core's validate-on-write `saveLegDeposit`. `gate` is a READER — it
+ * never writes, never judges a finding's severity, and never decides policy:
+ * it answers one question for a push, *was this head read by a leg*, and says
+ * exactly how it derived the answer.
+ *
+ * Three properties of the gate are contract, not style:
+ *
+ * 1. **The tier changes only the exit code.** `--advisory` prints the
+ *    BYTE-IDENTICAL lines of every state and exits 0; the strict caller is
+ *    the pre-push hook, which maps 3 and 2 to a block. That is why the
+ *    derivation returns its lines and BOTH codes, and the flag is applied at
+ *    one place at the very end — a second formatting path per tier is how the
+ *    advisory line and the blocking line drift apart.
+ * 2. **Not owed never consults the store.** The predicate is derived from the
+ *    changed-file set alone; a repo whose diff matches no glob must not have
+ *    its deposit directory read, so the "not owed" line is honest about
+ *    having judged globs and nothing else.
+ * 3. **stdout is written SYNCHRONOUSLY before exit.** A piped write is
+ *    asynchronous on macOS, so `process.stdout.write` followed by
+ *    `process.exit` can truncate the very line the `sh` arm is about to echo
+ *    — the `fs.writeSync(1, …)` precedent from the strict pre-commit reader.
+ *
+ * Everything the gate echoes is control-character sanitized. The deposit's own
+ * strings are already refused at the schema boundary (core `artifacts/legs.ts`),
+ * but paths, glob names and corrupt-file reasons come off a filesystem and a
+ * config file, so they are sanitized here too rather than trusted by provenance.
+ *
+ * Per the CLI command-module contract, every VALUE import is dynamic inside
+ * the command bodies (the core barrel pulls LanceDB into `--help` otherwise);
+ * `import type` is erased at build and stays static.
+ */
+/** Log tag for this command pair's human output (`log.*` writes to stderr). */
+const TAG = 'Legs';
+/**
+ * How many `glob → file` basis pairs the BLOCKED line names before it
+ * collapses the rest into `+K more`. Sized like `MAX_DISCLOSED_FILTERED_FILES`
+ * in `git.ts`: enough to show the reason, bounded so one broad glob cannot
+ * flood a hook's output.
+ */
+const MAX_DISCLOSED_BASIS_PAIRS = 5;
+/**
+ * How many changed paths the gate's own scope line names before it collapses
+ * the rest into `+K more`. Higher than the basis cap because this line is the
+ * scope itself rather than a reason, but still bounded: an unbounded list is a
+ * screenful in a hook's output on a large branch, and the true count stays in
+ * the parentheses either way.
+ */
+const MAX_DISCLOSED_CHANGED_FILES = 12;
+/**
+ * List what a candidate could have READ: the paths its own branch diff added
+ * relative to `base` (three-dot).
+ *
+ * `-z` is load-bearing, not a style choice (mmnto-ai/totem#2698 fold 4). Under
+ * git's default `core.quotePath=true`, `--name-only` C-QUOTES any path with a
+ * non-ASCII byte, a quote or a backslash — `docs/caf\303\251.md` — while the
+ * owed set comes from `extractChangedFiles`, which is unquoted. The two sets
+ * then never intersect for such a path, and a covering ancestor is rejected
+ * with the false reason "predates every owed change". `-z` emits raw
+ * NUL-separated names and never quotes, so both sides speak one spelling.
+ *
+ * One helper, taking the runner: the gate shells out through `safeExec` and the
+ * covariate through its injected `GitExec`, and a second copy of this argv is
+ * exactly how one of them would drift back to the quoted form.
+ */
+export function legReachPaths(run, base, head) {
+    const raw = run(['diff', '--name-only', '-z', `${base}...${head}`]);
+    // NUL-terminated, not NUL-separated: the payload ends with one, so the final
+    // split element is empty and is dropped along with any other empty.
+    return raw.split(LEG_PATH_SEPARATOR).filter((entry) => entry.length > 0);
+}
+/** The `-z` record separator, built rather than escaped (the banked decode trap). */
+const LEG_PATH_SEPARATOR = String.fromCharCode(0);
+/** The prefix `TotemError` stamps on every message — stripped when re-branding. */
+const TOTEM_ERROR_BRAND = '[Totem Error] ';
+/** Milliseconds in a day — the evidence line's age is reported in days. */
+const MS_PER_DAY = 86_400_000;
+/**
+ * Collapse every C0 (0-31) and DEL/C1 (127-159) code point to `?`.
+ *
+ * `sanitizeForTerminal` deliberately PRESERVES LF and HT — it defends a
+ * multi-line log payload — so it is not sufficient on its own for a value
+ * landing inside a single `[Totem] …` line that a shell arm echoes: one
+ * newline in a glob or a path would forge a second line and a reader could not
+ * tell the forged one from the gate's own. This is the strict-pre-commit
+ * reader's `safe()` rule (`install-hooks.ts`), applied AFTER the ANSI/CSI strip
+ * so both defenses hold: escapes removed, then every remaining control byte
+ * flattened. U+0085 (NEL) is inside the band because it breaks a line on some
+ * terminals.
+ *
+ * Written as a `charCodeAt` loop, not the equivalent regex class: the class
+ * would have to be authored with `\u`/`\x` escapes, and this repo has a banked
+ * incident where an editing tool decoded such an escape into a RAW control byte
+ * in the source (mmnto-ai/totem#2692 fold 3).
+ */
+function safeLine(text) {
+    let out = '';
+    for (let i = 0; i < text.length; i++) {
+        const code = text.charCodeAt(i);
+        const control = code < 32 || (code >= 127 && code <= 159);
+        out = out + (control ? '?' : text.charAt(i));
+    }
+    return out;
+}
+/**
+ * The ONE spelling of "this value came from outside and is about to be echoed":
+ * strip ANSI/CSI escapes, then flatten every remaining control byte. Both verbs
+ * pass every filesystem-, config- and argv-sourced value through it
+ * (mmnto-ai/totem#2698 fold 2).
+ */
+function echoSafe(value) {
+    return safeLine(sanitizeForTerminalSync(value));
+}
+/**
+ * `sanitizeForTerminal`, bound through a module-local slot so {@link echoSafe}
+ * stays synchronous inside message templates. Assigned from the same dynamic
+ * core import the rest of the module uses, before either verb echoes anything.
+ */
+let sanitizeForTerminalSync = (value) => value;
+/** Bind the core sanitizer for this process. Idempotent; called by both verbs. */
+async function loadSanitizer() {
+    const { sanitizeForTerminal } = await import('@mmnto/totem');
+    sanitizeForTerminalSync = sanitizeForTerminal;
+}
+/** Render the four counts the way both verbs spell them. */
+function renderCounts(counts) {
+    return `blocking=${counts.blocking} material=${counts.material} minor=${counts.minor} folded=${counts.folded}`;
+}
+/**
+ * Resolve `ref` to a full 40-hex COMMIT sha, refusing anything that is not a
+ * commit in this repo by name. `^{commit}` is the peel that makes a tag or a
+ * tree fail here rather than silently addressing the store under a non-commit
+ * object name.
+ */
+async function resolveCommitSha(cwd, ref) {
+    const { safeExec, TotemError } = await import('@mmnto/totem');
+    await loadSanitizer();
+    const trimmed = ref.trim();
+    if (trimmed.length === 0 || trimmed.startsWith('-')) {
+        // Mirrors `getGitDiffRange`'s flag-injection guard: a ref starting with
+        // `-` reaches git as an option, not a revision.
+        throw new TotemError('GIT_FAILED', `Invalid --sha ${JSON.stringify(echoSafe(ref))}: a revision may not be empty or start with '-' (git-flag injection guard).`, 'Pass a plain revision such as HEAD or a commit sha.');
+    }
+    let out;
+    try {
+        out = safeExec('git', ['rev-parse', '--verify', `${trimmed}^{commit}`], { cwd });
+    }
+    catch (err) {
+        // git's own failure rides as the CAUSE (styleguide rule 9): the message
+        // names the ref the seat passed, and `--debug` can still reach what git
+        // actually said.
+        throw new TotemError('GIT_FAILED', `--sha ${echoSafe(trimmed)} does not name a commit in this repository.`, 'Pass a commit this checkout can resolve (e.g. HEAD), or fetch the missing history first.', err);
+    }
+    const sha = out.trim();
+    if (!/^[0-9a-f]{40}$/.test(sha)) {
+        throw new TotemError('GIT_FAILED', `--sha ${echoSafe(trimmed)} resolved to ${JSON.stringify(echoSafe(sha))}, which is not a 40-character commit sha.`, 'Pass a commit this checkout can resolve (e.g. HEAD).');
+    }
+    return sha;
+}
+/**
+ * `totem legs deposit --sha <ref> --from <file> [--replace] [--read-at <iso>]`
+ *
+ * The writer. Refuses, loudly and before touching the store, every way the
+ * deposit could name the wrong head: a `--sha` that is not a commit, a file
+ * whose own `diffSha` disagrees with it, and an occupied address without
+ * `--replace`. `readAt` is the leg's own instant — when the file carries none
+ * and none is passed, the stamp is `now` and that substitution is PRINTED,
+ * because a deposit's instant is what the resolver breaks ties on.
+ */
+export async function legsDepositCommand(options) {
+    const fs = await import('node:fs');
+    const path = await import('node:path');
+    const { LEG_DEPOSIT_SCHEMA_VERSION, countLegFindings, saveLegDeposit, TotemError } = await import('@mmnto/totem');
+    const { log } = await import('../ui.js');
+    const { loadConfig, loadEnv, resolveConfigPath } = await import('../utils.js');
+    await loadSanitizer();
+    const cwd = process.cwd();
+    const configPath = resolveConfigPath(cwd);
+    loadEnv(cwd);
+    const config = await loadConfig(configPath);
+    const totemDirAbs = path.join(path.dirname(configPath), config.totemDir);
+    const diffSha = await resolveCommitSha(cwd, options.sha ?? 'HEAD');
+    const fromPath = path.resolve(cwd, options.from);
+    let raw;
+    try {
+        raw = JSON.parse(fs.readFileSync(fromPath, 'utf-8'));
+    }
+    catch (err) {
+        throw new TotemError('PARSE_FAILED', `Could not read the leg's findings at ${echoSafe(options.from)}.`, 'Pass --from <file> pointing at the leg deposit JSON the review leg returned.', err);
+    }
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {
+        throw new TotemError('PARSE_FAILED', `The leg's findings at ${echoSafe(options.from)} are not a JSON object.`, 'The file must be a deposit object: { findings, folded, verdict, ... }.');
+    }
+    const fields = raw;
+    // The deposit must NAME the head it read: a file that carries its own
+    // `diffSha` and disagrees with `--sha` is a mismatch, never a rewrite.
+    const declaredSha = fields['diffSha'];
+    if (typeof declaredSha === 'string' && declaredSha !== diffSha) {
+        throw new TotemError('PARSE_FAILED', `The findings file names diffSha ${echoSafe(declaredSha)}, but --sha resolved to ${diffSha}.`, 'Deposit against the head the leg actually read, or correct the diffSha in the file.');
+    }
+    const fileReadAt = typeof fields['readAt'] === 'string' ? fields['readAt'] : undefined;
+    const readAt = options.readAt ?? fileReadAt ?? new Date().toISOString();
+    if (options.readAt === undefined && fileReadAt === undefined) {
+        log.warn(TAG, `readAt defaulted to ${echoSafe(readAt)} — pass --read-at for the leg's own instant`);
+    }
+    const schemaVersion = typeof fields['schemaVersion'] === 'string'
+        ? fields['schemaVersion']
+        : LEG_DEPOSIT_SCHEMA_VERSION;
+    // Assembled as `unknown` and handed to the validate-on-write path: the
+    // schema is the ONE validation boundary, so a malformed findings array
+    // surfaces with its Zod path instead of a hand-rolled second opinion.
+    const candidate = {
+        ...fields,
+        schemaVersion,
+        diffSha,
+        readAt,
+    };
+    let result;
+    try {
+        result = saveLegDeposit(totemDirAbs, candidate, { replace: options.replace === true });
+    }
+    catch (err) {
+        // A ZodError's own message is a JSON blob; re-state it as the path→message
+        // pairs the seat has to fix (the `loadConfig` idiom). Every other failure —
+        // including core's typed LegDepositExistsError, which already carries the
+        // incumbent's readAt and names --replace — propagates untouched.
+        if (err instanceof Error && err.name === 'ZodError' && 'issues' in err) {
+            const issues = err.issues
+                // Each issue's path and message are line-safed INDIVIDUALLY; the
+                // newline between entries is this code's own layout, not attacker
+                // input, so it survives (a whole-block flatten would destroy the list).
+                .map((issue) => `  ${echoSafe(issue.path.join('.') || '<root>')}: ${echoSafe(issue.message)}`)
+                .join('\n');
+            throw new TotemError('PARSE_FAILED', `The leg deposit built from ${echoSafe(options.from)} is not valid:\n${issues}`, 'Fix the fields listed above; every finding needs a unique id, and folded may only name finding ids.', err);
+        }
+        throw err;
+    }
+    if (result.replaced !== undefined) {
+        log.warn(TAG, `replaced the deposit read at ${echoSafe(result.replaced.readAt ?? 'an unreadable instant')} for ${diffSha}`);
+    }
+    log.success(TAG, `${echoSafe(result.path)} · ${renderCounts(countLegFindings(candidate))}`);
+}
+/**
+ * The coverage query for a set of owed paths, or `undefined` when it cannot be
+ * derived (no base). Exported because the covariate resolves through the SAME
+ * inputs as the gate — a field that named a deposit the gate rejects would be
+ * the round reading evidence the push gate does not accept.
+ *
+ * The basis lists one entry per `glob -> file` MATCH, so a file matching three
+ * globs appears three times; the owed set is those files, deduplicated in
+ * basis order.
+ */
+export function legsCoverageForBasis(base, basis) {
+    if (base === undefined)
+        return undefined;
+    const owedFiles = [...new Set(basis.map((entry) => entry.file))];
+    return owedFiles.length === 0 ? undefined : { base, owedFiles };
+}
+/**
+ * Derive the gate's verdict and its lines.
+ *
+ * The tier is applied ONLY to `status`; `stdout` is produced once, so an
+ * advisory run and a strict run of the same state cannot print different text.
+ */
+export async function runLegsGate(options, deps) {
+    const path = await import('node:path');
+    const { classifyLegsOwed, countLegFindings, findLegDepositForHead, sanitizeForTerminal } = await import('@mmnto/totem');
+    const advisory = options.advisory === true;
+    const finish = (derived, stdout, stderr) => ({
+        derived,
+        status: advisory ? 0 : derived,
+        stdout,
+        stderr,
+    });
+    // Two-stage, in this order: strip ANSI/CSI escapes, then flatten every
+    // remaining control byte. The second stage is what keeps a newline in a glob
+    // or a path from forging a second `[Totem]` line (mmnto-ai/totem#2698 fold 2).
+    const safe = (value) => safeLine(sanitizeForTerminal(value));
+    /** Repo-root-relative, forward-slashed — the address a reader can act on. */
+    const relative = (target) => safe(path.relative(deps.root, target).split(path.sep).join('/'));
+    let head;
+    let scope;
+    let resolution;
+    let owed;
+    try {
+        const { TotemError } = await import('@mmnto/totem');
+        head = deps.resolveHead();
+        scope = await deps.changedFiles();
+        owed = classifyLegsOwed(scope.files, deps.globs);
+        // The store is consulted ONLY when the diff is owed — a not-owed push must
+        // not depend on the deposit directory being readable at all.
+        if (owed.owed) {
+            // Coverage is not optional for the GATE (mmnto-ai/totem#2698 fold 3): it
+            // only ever runs on the branch scope, so a scope that resolved without a
+            // base is a failure to derive, not a licence to fall back to
+            // ancestry-only — that fallback is exactly the merge-base pass the
+            // ruling closed.
+            const query = legsCoverageForBasis(scope.base, owed.basis);
+            if (query === undefined) {
+                throw new TotemError('GIT_FAILED', 'the branch scope resolved without a base ref, so coverage is not derivable', 'Fetch the base branch (git fetch origin <base>) and retry.');
+            }
+            resolution = findLegDepositForHead(deps.totemDirAbs, head, deps.git, query);
+        }
+        // totem-context: intentional — this is not a swallow but the gate's LOUDEST arm: any failure to derive (no repo, an unresolvable head, a branch diff or an ancestry probe that will not resolve) becomes the NOT DERIVED verdict, printed with its cause and exit 2, which the strict pre-push arm blocks on with its own line (mmnto-ai/totem#2698)
+    }
+    catch (err) {
+        // `TotemError` brands its own message, and this line is already branded —
+        // `[Totem] legs: NOT DERIVED — [Totem Error] …` reads as two speakers. The
+        // gate owns the shape of its line, so the inner brand is stripped; the
+        // recovery hint stays on the error for any programmatic caller.
+        const raw = err instanceof Error ? err.message : String(err);
+        const cause = safe(raw.startsWith(TOTEM_ERROR_BRAND) ? raw.slice(TOTEM_ERROR_BRAND.length) : raw);
+        return finish(2, [`[Totem] legs: NOT DERIVED — ${cause}`], []);
+    }
+    const head8 = safe(head.slice(0, 8));
+    if (!owed.owed) {
+        return finish(0, [
+            `[Totem] legs: not owed — no changed path matched hooks.legsOwed.globs (${deps.globs.length} globs; head ${head8})`,
+        ], []);
+    }
+    // The corrupt rows are a SENSOR, not a verdict: they are disclosed on stderr
+    // whatever the outcome, and they never mask a valid sibling deposit.
+    const stderr = (resolution?.corrupt ?? []).map((entry) => `[Totem] legs: sensor — ignoring corrupt deposit ${safe(entry.file)}: ${safe(entry.reason)}`);
+    const winner = resolution?.winner;
+    if (winner !== undefined) {
+        const counts = countLegFindings(winner.deposit);
+        const stamp = Date.parse(winner.deposit.readAt);
+        const deltaMs = Number.isNaN(stamp) ? undefined : Date.now() - stamp;
+        const days = deltaMs === undefined ? undefined : Math.floor(deltaMs / MS_PER_DAY);
+        // A negative age is not an unknown age. A deposit stamped in the FUTURE —
+        // a skewed clock, a hand-edited instant — used to print `age unknown`,
+        // which reads as "unparseable" and hides the one thing worth acting on:
+        // this instant is wrong, and ranking breaks ties on it.
+        const age = days === undefined
+            ? 'age unknown'
+            : days >= 0
+                ? `${days} days old`
+                : // The MAGNITUDE is floored, not the signed value: `Math.floor` on a
+                    // negative delta rounds AWAY from zero, so a stamp two days and a
+                    // second ahead reported three.
+                    `read ${Math.floor(Math.abs(deltaMs ?? 0) / MS_PER_DAY)} days in the FUTURE — check the clock or the deposit`;
+        const reach = winner.rank === 'exact'
+            ? 'exact'
+            : `nearest ancestor, +${winner.distance} commits since the leg read`;
+        // `covers K/N owed paths` is DISCLOSURE, never a block: a leg that read
+        // some of what this push owes is still a leg that read this head, and the
+        // re-arm is doctrine's call. The gate always supplies a coverage query, so
+        // the field is always present here; the guard exists because the core
+        // resolution is shared with the covariate, which may resolve without one.
+        const covers = winner.coverage === undefined
+            ? ''
+            : ` · covers ${winner.coverage.covered}/${winner.coverage.owed} owed paths`;
+        const stdout = [
+            `[Totem] legs evidence: ${relative(winner.path)} (read ${safe(winner.deposit.readAt)}, ${age}) · head ${head8} · ${reach}${covers} · blocking=${counts.blocking} material=${counts.material} folded=${counts.folded}`,
+        ];
+        const superseded = resolution?.superseded ?? [];
+        if (superseded.length > 0) {
+            const named = superseded
+                .map((candidate) => `${safe(candidate.diffSha.slice(0, 8))} (read ${safe(candidate.readAt)}, ${candidate.rank === 'exact' ? 'exact' : `ancestor +${candidate.distance}`})`)
+                .join(', ');
+            stdout.push(`[Totem] legs: ${superseded.length} superseded candidate(s) for this head: ${named}`);
+        }
+        return finish(0, stdout, stderr);
+    }
+    // Owed, and nothing answers for this head. The basis is what makes the block
+    // actionable — WHICH glob matched WHICH file — and every stale candidate is
+    // named with its own reason, because "not an ancestor" and "unknown to this
+    // repo" are different repairs.
+    const shown = owed.basis
+        .slice(0, MAX_DISCLOSED_BASIS_PAIRS)
+        .map((entry) => `${safe(entry.glob)} → ${safe(entry.file)}`)
+        .join(', ');
+    const more = owed.basis.length > MAX_DISCLOSED_BASIS_PAIRS
+        ? `, +${owed.basis.length - MAX_DISCLOSED_BASIS_PAIRS} more`
+        : '';
+    const stdout = [
+        `[Totem] BLOCKED: this push is legs-owed (${shown}${more}) and carries no fresh falsification-leg deposit for head ${head8}`,
+    ];
+    for (const candidate of resolution?.stale ?? []) {
+        // One reason per candidate, because the repairs differ: fetch the missing
+        // history, deposit against this branch, or run the leg over the owed diff.
+        // Exhaustive on purpose — a ternary chain's final arm silently ADOPTS any
+        // reason core adds later, printing the wrong repair for it.
+        const reason = (() => {
+            switch (candidate.reason) {
+                case 'not-ancestor':
+                    return 'not an ancestor of head';
+                case 'unknown-commit':
+                    return 'unknown to this repo';
+                case 'no-coverage':
+                    return 'covers none of the owed paths (the deposit predates every owed change)';
+                default: {
+                    const unreachable = candidate.reason;
+                    return String(unreachable);
+                }
+            }
+        })();
+        stdout.push(`[Totem] legs: stale deposit ${safe(candidate.diffSha.slice(0, 8))}: ${reason}`);
+    }
+    stdout.push('[Totem] legs: run the leg, then: totem legs deposit --sha HEAD --from <findings.json>');
+    return finish(3, stdout, stderr);
+}
+/**
+ * Resolve the branch scope the floor is judged on — the ONE derivation the gate
+ * and the covariate both use (mmnto-ai/totem#2698 fold 3 item 3), so the
+ * covariate can never name a deposit the gate would reject.
+ *
+ * The push-gate scope (`--branch`): the branch-vs-base diff is what the leg
+ * read, and it is what the push actually proposes. An empty result is not owed
+ * — there is nothing for a leg to read.
+ *
+ * UNFILTERED, deliberately (mmnto-ai/totem#2698 fold 1). The same base/head
+ * resolution runs, but with an EMPTY ignore configuration, so neither
+ * `ignorePatterns` nor `shieldIgnorePatterns` can hide a path from the floor.
+ * Those keys carry INDEX-exclusion semantics that were merged into the
+ * review/lint diff filter for back-compat (mmnto-ai/totem#1746,
+ * mmnto-ai/totem#1748) — letting them narrow this predicate would mean a repo
+ * that excludes `README.md` from its index silently stops owing a leg for its
+ * public copy, which is the claim-without-mechanism shape the floor exists to
+ * close.
+ *
+ * The resolved BASE rides back with the files: coverage is measured against it,
+ * and it must be the same base HEAD was resolved against.
+ */
+export async function resolveUnfilteredBranchScope(cwd, options = {}) {
+    const { safeExec } = await import('@mmnto/totem');
+    const { getDiffForReview } = await import('../git.js');
+    const { log } = await import('../ui.js');
+    await loadSanitizer();
+    const run = options.run ?? ((args) => safeExec('git', [...args], { cwd }));
+    const narrate = options.suppressScopeNarration !== true;
+    // The GATE narrates its scope; the covariate does not. Since fold 4 the leg
+    // field derives coverage from HEAD's branch scope on every review scope, so
+    // this resolution runs inside `totem review` runs too — and a `[Legs]` line
+    // in the middle of a `[Review]` run describes a probe nobody asked for.
+    // `getDiffForReview` still resolves the BASE (its origin-preference logic is
+    // the one this gate must agree with) and still rules on the empty-diff case,
+    // but its narration is ALWAYS suppressed: its `Changed files` line is built
+    // from `extractChangedFiles`, which spells a non-ASCII path the C-quoted way,
+    // and this module prints the RAW list below. Letting both speak printed the
+    // same line twice, in two different spellings (caught on this branch's own
+    // gate run, mmnto-ai/totem#2698 fold 5).
+    const result = await getDiffForReview({ branch: true, suppressScopeNarration: true }, { ignorePatterns: [], shieldIgnorePatterns: [] }, cwd, TAG);
+    const base = result.base;
+    // One disclosure, ours, carrying the resolved base so nothing the suppressed
+    // line said is lost.
+    if (narrate) {
+        log.info(TAG, safeLine(`Diff source: branch-vs-base (${base ?? 'no base resolved'}...HEAD, unfiltered — ignorePatterns do not apply to the floor)`));
+    }
+    // The FILE LIST is read separately, with `-z` (mmnto-ai/totem#2698 fold 5).
+    //
+    // Not a preference: `extractChangedFiles` parses `diff --git` headers, which
+    // git C-QUOTES for any path carrying a non-ASCII byte, a double quote or a
+    // backslash. The reach probe reads the same names raw. Fold 4 tried to
+    // reconcile them by DECODING the quoted side, which handled octal triples
+    // and nothing else — a name with a quote or a backslash still missed, and a
+    // literal `\123` inside a legal filename was rewritten to `S`. Reading the
+    // owed side through the SAME `-z` helper the reach uses makes both sides raw
+    // by construction, so there is nothing left to decode and no name a decoder
+    // could corrupt.
+    const files = 'empty' in result || base === undefined
+        ? // No base, or nothing changed: there is no `base...HEAD` to list, and
+            // an empty scope is not owed anyway.
+            []
+        : legReachPaths(run, base, 'HEAD');
+    // The gate's own disclosure, from the RAW list — so the names it prints are
+    // the names it judged, spelled as they are on disk.
+    if (narrate) {
+        const shownFiles = files.slice(0, MAX_DISCLOSED_CHANGED_FILES).map(safeLine);
+        const moreFiles = files.length > shownFiles.length ? `, +${files.length - shownFiles.length} more` : '';
+        // The count in the parentheses is the TRUE one — the cap shortens the list,
+        // never the number.
+        log.info(TAG, safeLine(`Changed files (${files.length}): ${shownFiles.join(', ')}${moreFiles}`));
+    }
+    return { files, ...(base === undefined ? {} : { base }) };
+}
+/**
+ * The judgment-dense floor this repo declares, or the default when it declares
+ * none — the ONE spelling, shared by the gate and both covariate sites.
+ */
+export async function legsOwedGlobs(config) {
+    const { DEFAULT_LEGS_OWED_GLOBS } = await import('@mmnto/totem');
+    return config.hooks?.legsOwed?.globs ?? [...DEFAULT_LEGS_OWED_GLOBS];
+}
+/**
+ * Derive the coverage query for a COVARIATE site (mmnto-ai/totem#2698 fold 3,
+ * corrected in fold 4).
+ *
+ * The inputs come from HEAD's branch-vs-base scope ALWAYS — never from the
+ * scope the review itself ran on. The leg field answers "was THIS HEAD read",
+ * so what it owes is a property of HEAD, not of whether the operator happened
+ * to review a staged slice or a dirty tree. Deriving from the review's scope
+ * meant the default `uncommitted` scope resolved ancestry-only and NAMED the
+ * merge-base deposit the gate rejects — the field disagreeing with the gate,
+ * which is the one thing it must never do.
+ *
+ * Both covariate sites route through this one function, and it reuses the
+ * gate's own pieces — the unfiltered branch scope and core's single
+ * `classifyLegsOwed` — so the guarantee is unconditional: the field never names
+ * a deposit the gate would reject. When HEAD has no branch base the answer is
+ * `leg: none` plus one sensor, never a name resolved on ancestry alone.
+ */
+export async function deriveLegsCoverageForHead(cwd, globs, options = {}) {
+    const { classifyLegsOwed } = await import('@mmnto/totem');
+    await loadSanitizer();
+    let scope;
+    try {
+        scope = await resolveUnfilteredBranchScope(cwd, options);
+        // totem-context: intentional — `--covariate` is a read-only sensor whose contract is to print a line and exit 0, so a branch scope that will not resolve (no repo, an unfetched base) yields the no-coverage answer with its reason printed, never a throw out of a transport verb
+    }
+    catch (err) {
+        return {
+            reason: `coverage was not derivable — HEAD has no branch base (${echoSafe(err instanceof Error ? err.message : String(err))})`,
+        };
+    }
+    const owed = classifyLegsOwed(scope.files, globs);
+    const query = legsCoverageForBasis(scope.base, owed.basis);
+    if (query !== undefined)
+        return { query };
+    // Two shapes reach here and they are NOT the same answer. No base: coverage
+    // is underivable, so no deposit can be credited. Nothing owed: HEAD owes no
+    // leg at all, so an empty query is vacuously satisfied and the field resolves
+    // on ancestry — the gate would not even consult the store for this head.
+    return scope.base === undefined
+        ? { reason: 'coverage was not derivable — HEAD has no branch base' }
+        : { query: { base: scope.base, owedFiles: [] } };
+}
+/**
+ * Build the gate's real-world seam from the repo's config and git.
+ *
+ * Exported so the UNFILTERED-diff contract below is testable against a real
+ * checkout without capturing a process exit: a test resolves these deps in a
+ * fixture repo and asserts what `changedFiles()` actually returns.
+ *
+ * It takes no options: since `--head` was removed (mmnto-ai/totem#2698 fold 2)
+ * nothing about the seam varies with a flag — `--advisory` is applied to the
+ * STATUS, after the derivation, and never to what is derived.
+ */
+export async function buildLegsGateDeps() {
+    const path = await import('node:path');
+    const { safeExec, TotemError } = await import('@mmnto/totem');
+    // The branch scope (and its `Diff source:` disclosure) now lives in the
+    // shared `resolveUnfilteredBranchScope`, which the covariate calls too.
+    const { isAncestor } = await import('../git.js');
+    const { loadConfig, loadEnv, resolveConfigPath } = await import('../utils.js');
+    await loadSanitizer();
+    const cwd = process.cwd();
+    const configPath = resolveConfigPath(cwd);
+    loadEnv(cwd);
+    const config = await loadConfig(configPath);
+    const root = path.dirname(configPath);
+    const git = {
+        isCommit(sha) {
+            try {
+                safeExec('git', ['cat-file', '-e', `${sha}^{commit}`], { cwd });
+                return true;
+                // totem-context: intentional — "does this repo know that object" IS the boolean; git's failure text is not a second signal, and the caller reports the deposit as `unknown to this repo`
+            }
+            catch {
+                return false;
+            }
+        },
+        isAncestor(base, head) {
+            return isAncestor(cwd, base, head);
+        },
+        changedFiles: (base, head) => legReachPaths((args) => safeExec('git', [...args], { cwd }), base, head),
+        distance(base, head) {
+            const raw = safeExec('git', ['rev-list', '--count', `${base}..${head}`], { cwd }).trim();
+            const count = Number.parseInt(raw, 10);
+            if (Number.isNaN(count)) {
+                // Never guessed (mmnto-ai/totem#2698 fold 2, MINOR). The number is
+                // PRINTED as fact — `+N commits since the leg read` — so an
+                // unparseable answer is a failure to derive, not a zero: it throws,
+                // reaches the gate's NOT DERIVED arm, and the strict hook blocks on it.
+                // Guessing 0 would render a stale read as an exact one.
+                throw new TotemError('GIT_FAILED', `git rev-list --count ${base}..${head} returned ${JSON.stringify(echoSafe(raw))}, which is not a commit count.`, 'Fix the checkout (a corrupt or truncated object store) and retry.');
+            }
+            return count;
+        },
+    };
+    const deps = {
+        root,
+        totemDirAbs: path.join(root, config.totemDir),
+        globs: await legsOwedGlobs(config),
+        git,
+        resolveHead() {
+            return safeExec('git', ['rev-parse', '--verify', 'HEAD^{commit}'], { cwd }).trim();
+        },
+        changedFiles: () => resolveUnfilteredBranchScope(cwd, {
+            run: (args) => safeExec('git', [...args], { cwd }),
+        }),
+    };
+    return deps;
+}
+/**
+ * `totem legs gate [--advisory]`
+ *
+ * The reader the strict pre-push arm calls. Loads the repo's config, builds
+ * the real git and diff seams, derives, writes SYNCHRONOUSLY, exits with the
+ * tier-mapped status. `--advisory` maps every GATE state to 0; a failure
+ * before the derivation (config load, flag parse) still exits non-zero
+ * through the CLI's error boundary.
+ */
+export async function legsGateCommand(options) {
+    const fs = await import('node:fs');
+    const deps = await buildLegsGateDeps();
+    const outcome = await runLegsGate(options, deps);
+    for (const line of outcome.stderr)
+        fs.writeSync(2, `${line}\n`);
+    // fs.writeSync, not console.log: stdout is a PIPE under the hook, and a
+    // piped write is asynchronous on macOS — process.exit could truncate the
+    // line the `sh` arm is about to echo.
+    for (const line of outcome.stdout)
+        fs.writeSync(1, `${line}\n`);
+    process.exit(outcome.status);
+}
+//# sourceMappingURL=legs.js.map

package/dist/commands/legs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legs.js","sourceRoot":"","sources":["../../src/commands/legs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAIH,+EAA+E;AAC/E,MAAM,GAAG,GAAG,MAAM,CAAC;AAEnB;;;;;GAKG;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAEvC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAwC,EACxC,IAAY,EACZ,IAAY;IAEZ,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IACpE,6EAA6E;IAC7E,oEAAoE;IACpE,OAAO,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,qFAAqF;AACrF,MAAM,kBAAkB,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AAElD,mFAAmF;AACnF,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAE3C,2EAA2E;AAC3E,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC;QAC1D,GAAG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,QAAQ,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,IAAI,uBAAuB,GAA8B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC;AAE1E,kFAAkF;AAClF,KAAK,UAAU,aAAa;IAC1B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7D,uBAAuB,GAAG,mBAAmB,CAAC;AAChD,CAAC;AAeD,4DAA4D;AAC5D,SAAS,YAAY,CAAC,MAAwB;IAC5C,OAAO,YAAY,MAAM,CAAC,QAAQ,aAAa,MAAM,CAAC,QAAQ,UAAU,MAAM,CAAC,KAAK,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC;AACjH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,GAAW;IACtD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC9D,MAAM,aAAa,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,wEAAwE;QACxE,gDAAgD;QAChD,MAAM,IAAI,UAAU,CAClB,YAAY,EACZ,iBAAiB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,6EAA6E,EAC3H,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,wEAAwE;QACxE,iBAAiB;QACjB,MAAM,IAAI,UAAU,CAClB,YAAY,EACZ,SAAS,QAAQ,CAAC,OAAO,CAAC,6CAA6C,EACvE,0FAA0F,EAC1F,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,UAAU,CAClB,YAAY,EACZ,SAAS,QAAQ,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,2CAA2C,EAClH,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA2B;IAClE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,GAChF,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,aAAa,EAAE,CAAC;IAEtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEzE,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAClB,cAAc,EACd,wCAAwC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EACjE,8EAA8E,EAC9E,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,UAAU,CAClB,cAAc,EACd,yBAAyB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EACxE,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAE9C,sEAAsE;IACtE,uEAAuE;IACvE,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QAC/D,MAAM,IAAI,UAAU,CAClB,cAAc,EACd,mCAAmC,QAAQ,CAAC,WAAW,CAAC,2BAA2B,OAAO,GAAG,EAC7F,qFAAqF,CACtF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GACd,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAM,CAAC,QAAQ,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CACN,GAAG,EACH,uBAAuB,QAAQ,CAAC,MAAM,CAAC,6CAA6C,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GACjB,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,QAAQ;QACzC,CAAC,CAAE,MAAM,CAAC,eAAe,CAAY;QACrC,CAAC,CAAC,0BAA0B,CAAC;IAEjC,uEAAuE;IACvE,uEAAuE;IACvE,sEAAsE;IACtE,MAAM,SAAS,GAAG;QAChB,GAAG,MAAM;QACT,aAAa;QACb,OAAO;QACP,MAAM;KACO,CAAC;IAEhB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,cAAc,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;YACvE,MAAM,MAAM,GACV,GACD,CAAC,MAAM;gBACN,iEAAiE;gBACjE,kEAAkE;gBAClE,wEAAwE;iBACvE,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CACzF;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,IAAI,UAAU,CAClB,cAAc,EACd,8BAA8B,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,MAAM,EAAE,EAC/E,qGAAqG,EACrG,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CACN,GAAG,EACH,gCAAgC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,uBAAuB,CAAC,QAAQ,OAAO,EAAE,CAC7G,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9F,CAAC;AA0DD;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAwB,EACxB,KAAgD;IAEhD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAClE,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAwB,EACxB,IAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,GACtF,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,OAAqB,EAAE,MAAgB,EAAE,MAAgB,EAAmB,EAAE,CAAC,CAAC;QAC9F,OAAO;QACP,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;QAC9B,MAAM;QACN,MAAM;KACP,CAAC,CAAC;IACH,uEAAuE;IACvE,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAU,EAAE,CAC1C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAEnE,IAAI,IAAY,CAAC;IACjB,IAAI,KAAoB,CAAC;IACzB,IAAI,UAAyE,CAAC;IAC9E,IAAI,IAAqD,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACpD,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1B,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,yEAAyE;YACzE,yEAAyE;YACzE,6DAA6D;YAC7D,mEAAmE;YACnE,iBAAiB;YACjB,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,UAAU,CAClB,YAAY,EACZ,4EAA4E,EAC5E,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YACD,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9E,CAAC;QACD,qVAAqV;IACvV,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAChB,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAC9E,CAAC;QACF,OAAO,MAAM,CAAC,CAAC,EAAE,CAAC,+BAA+B,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAErC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,MAAM,CACX,CAAC,EACD;YACE,0EAA0E,IAAI,CAAC,KAAK,CAAC,MAAM,gBAAgB,KAAK,GAAG;SACpH,EACD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAC5C,CAAC,KAAK,EAAE,EAAE,CACR,mDAAmD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAC/F,CAAC;IAEF,MAAM,MAAM,GAAG,UAAU,EAAE,MAAM,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACrE,MAAM,IAAI,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC,CAAC;QAClF,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,wDAAwD;QACxD,MAAM,GAAG,GACP,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,IAAI,IAAI,CAAC;gBACT,CAAC,CAAC,GAAG,IAAI,WAAW;gBACpB,CAAC,CAAC,oEAAoE;oBACpE,kEAAkE;oBAClE,+BAA+B;oBAC/B,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,sDAAsD,CAAC;QACtH,MAAM,KAAK,GACT,MAAM,CAAC,IAAI,KAAK,OAAO;YACrB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,sBAAsB,MAAM,CAAC,QAAQ,6BAA6B,CAAC;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,MAAM,GACV,MAAM,CAAC,QAAQ,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC;QAChF,MAAM,MAAM,GAAG;YACb,0BAA0B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,YAAY,KAAK,MAAM,KAAK,GAAG,MAAM,eAAe,MAAM,CAAC,QAAQ,aAAa,MAAM,CAAC,QAAQ,WAAW,MAAM,CAAC,MAAM,EAAE;SACtN,CAAC;QACF,MAAM,UAAU,GAAG,UAAU,EAAE,UAAU,IAAI,EAAE,CAAC;QAChD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,UAAU;iBACrB,GAAG,CACF,CAAC,SAAS,EAAE,EAAE,CACZ,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KACpE,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,SAAS,CAAC,QAAQ,EACxE,GAAG,CACN;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,CACT,iBAAiB,UAAU,CAAC,MAAM,2CAA2C,KAAK,EAAE,CACrF,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,+BAA+B;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK;SACrB,KAAK,CAAC,CAAC,EAAE,yBAAyB,CAAC;SACnC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;SAC3D,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,IAAI,GACR,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,yBAAyB;QAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,yBAAyB,OAAO;QAC5D,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,MAAM,GAAG;QACb,4CAA4C,KAAK,GAAG,IAAI,6DAA6D,KAAK,EAAE;KAC7H,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QAChD,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,4DAA4D;QAC5D,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE;YAC3B,QAAQ,SAAS,CAAC,MAAM,EAAE,CAAC;gBACzB,KAAK,cAAc;oBACjB,OAAO,yBAAyB,CAAC;gBACnC,KAAK,gBAAgB;oBACnB,OAAO,sBAAsB,CAAC;gBAChC,KAAK,aAAa;oBAChB,OAAO,wEAAwE,CAAC;gBAClF,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,WAAW,GAAU,SAAS,CAAC,MAAM,CAAC;oBAC5C,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,CAAC,IAAI,CACT,uFAAuF,CACxF,CAAC;IACF,OAAO,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACnC,CAAC;AAiBD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,GAAW,EACX,UAA4B,EAAE;IAE9B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAClD,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,aAAa,EAAE,CAAC;IACtB,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAuB,EAAU,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,OAAO,CAAC,sBAAsB,KAAK,IAAI,CAAC;IACxD,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,yCAAyC;IACzC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAC9C,EAAE,cAAc,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,EAChD,GAAG,EACH,GAAG,CACJ,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,6EAA6E;IAC7E,qBAAqB;IACrB,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,CAAC,IAAI,CACN,GAAG,EACH,QAAQ,CACN,gCAAgC,IAAI,IAAI,kBAAkB,iEAAiE,CAC5H,CACF,CAAC;IACJ,CAAC;IACD,4EAA4E;IAC5E,EAAE;IACF,6EAA6E;IAC7E,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,iBAAiB;IACjB,MAAM,KAAK,GACT,OAAO,IAAI,MAAM,IAAI,IAAI,KAAK,SAAS;QACrC,CAAC,CAAC,sEAAsE;YACtE,qCAAqC;YACrC,EAAE;QACJ,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,4EAA4E;IAC5E,oDAAoD;IACpD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7E,MAAM,SAAS,GACb,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,4EAA4E;QAC5E,oBAAoB;QACpB,GAAG,CAAC,IAAI,CACN,GAAG,EACH,QAAQ,CAAC,kBAAkB,KAAK,CAAC,MAAM,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAEnC;IACC,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,CAAC,GAAG,uBAAuB,CAAC,CAAC;AACvE,CAAC;AAYD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAW,EACX,KAAwB,EACxB,UAA4B,EAAE;IAE9B,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC1D,MAAM,aAAa,EAAE,CAAC;IACtB,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,4BAA4B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACzD,mRAAmR;IACrR,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,yDAAyD,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG;SAC/H,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1C,4EAA4E;IAC5E,4EAA4E;IAC5E,8EAA8E;IAC9E,yEAAyE;IACzE,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS;QAC7B,CAAC,CAAC,EAAE,MAAM,EAAE,sDAAsD,EAAE;QACpE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC9D,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,aAAa,EAAE,CAAC;IAEtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEtC,MAAM,GAAG,GAAkB;QACzB,QAAQ,CAAC,GAAG;YACV,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC;gBACZ,yLAAyL;YAC3L,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,IAAI;YACnB,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAC3B,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC;QAC1E,QAAQ,CAAC,IAAI,EAAE,IAAI;YACjB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACzF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,mEAAmE;gBACnE,4DAA4D;gBAC5D,oEAAoE;gBACpE,wEAAwE;gBACxE,wDAAwD;gBACxD,MAAM,IAAI,UAAU,CAClB,YAAY,EACZ,wBAAwB,IAAI,KAAK,IAAI,aAAa,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,gCAAgC,EAC/G,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;IAEF,MAAM,IAAI,GAAiB;QACzB,IAAI;QACJ,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC7C,KAAK,EAAE,MAAM,aAAa,CAAC,MAAM,CAAC;QAClC,GAAG;QACH,WAAW;YACT,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CACjB,4BAA4B,CAAC,GAAG,EAAE;YAChC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC;SACnD,CAAC;KACL,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAwB;IAC5D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM;QAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;IAChE,wEAAwE;IACxE,yEAAyE;IACzE,sCAAsC;IACtC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM;QAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}