@mondaydotcomorg/atp-provenance 0.19.21 → 0.21.0

package/dist/checkpoint-integration.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Checkpoint Integration Module
+ *
+ * Provides utilities for integrating provenance tracking with checkpoint recovery.
+ * This ensures security policies are enforced even after checkpoint restoration.
+ */
+import type { ProvenanceMetadata } from './types.js';
+/**
+ * Provenance entry with path information for nested object tracking
+ * Used to re-attach provenance to the correct nested object on restore
+ */
+export interface ProvenanceEntry {
+    /** JSON path to the value (e.g., "", "[0]", "[1].nested.field") */
+    path: string;
+    /** Provenance metadata for this value */
+    metadata: ProvenanceMetadata;
+}
+/**
+ * Provenance snapshot for checkpoint storage
+ * Supports both simple and complex provenance scenarios:
+ * - Simple: Single-source result (metadata field for convenience)
+ * - Complex: Aggregated results with multiple sources (entries array with paths)
+ *
+ * Example: Promise.all([getUser('alice'), getUser('bob')]) produces:
+ * - metadata: undefined (or root-level container provenance if exists)
+ * - entries: [
+ *     { path: "[0]", metadata: { readers: ['alice'] } },
+ *     { path: "[1]", metadata: { readers: ['bob'] } }
+ *   ]
+ */
+export interface CheckpointProvenanceSnapshot {
+    /**
+     * Root-level provenance metadata for convenient access
+     * Populated when the result itself has provenance (path="")
+     * Also present in entries[] but duplicated here for ease of use
+     */
+    metadata?: ProvenanceMetadata;
+    /**
+     * All provenance entries with explicit paths
+     * Includes root-level (path="") and all nested objects with provenance
+     * Used for path-based restoration of aggregated/nested results
+     */
+    entries?: ProvenanceEntry[];
+    /** Primitive values with their provenance (for taint tracking) */
+    primitives?: Array<[string, ProvenanceMetadata]>;
+    /**
+     * Whether this checkpoint contains any restricted data
+     * Computed from all entries - if ANY entry has restricted readers, this is true
+     */
+    hasRestrictedData?: boolean;
+}
+/**
+ * Result of recursive provenance extraction
+ */
+interface RecursiveProvenanceResult {
+    entries: ProvenanceEntry[];
+    primitives: Array<[string, ProvenanceMetadata]>;
+    hasRestrictedData: boolean;
+}
+/**
+ * Function type for extracting provenance from a value
+ */
+export type ProvenanceExtractor = (value: unknown) => ProvenanceMetadata | null;
+/**
+ * Function type for re-attaching provenance to a restored value
+ */
+export type ProvenanceAttacher = (value: unknown, metadata: ProvenanceMetadata, primitives?: Array<[string, ProvenanceMetadata]>) => unknown;
+/**
+ * Recursively extract provenance from nested objects/arrays
+ * Handles: Promise.all results, loop aggregations, nested objects
+ *
+ * Example paths:
+ * - "" (root)
+ * - "[0]", "[1]" (array elements)
+ * - ".user", ".data.items[0]" (object properties)
+ */
+export declare function extractProvenanceRecursive(value: unknown, extractor: ProvenanceExtractor, path?: string, visited?: WeakSet<object>): RecursiveProvenanceResult;
+/**
+ * Restore provenance to values using snapshot
+ * Handles both simple and complex restoration scenarios
+ */
+export declare function restoreProvenanceFromSnapshot(value: unknown, snapshot: CheckpointProvenanceSnapshot, attacher: ProvenanceAttacher): unknown;
+/**
+ * Parse a path string into segments
+ * "[0].user.name" → ["0", "user", "name"]
+ */
+export declare function parsePath(path: string): string[];
+/**
+ * Deep clone a value (simple JSON-based clone)
+ */
+export declare function deepClone<T>(value: T): T;
+/**
+ * Check if a provenance snapshot has restricted data
+ */
+export declare function hasRestrictedProvenance(snapshot?: CheckpointProvenanceSnapshot): boolean;
+export {};
+//# sourceMappingURL=checkpoint-integration.d.ts.map

package/dist/checkpoint-integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-integration.d.ts","sourceRoot":"","sources":["../src/checkpoint-integration.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGrD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC/B,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,QAAQ,EAAE,kBAAkB,CAAC;CAC7B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,4BAA4B;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAE9B;;;;OAIG;IACH,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAE5B,kEAAkE;IAClE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEjD;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;GAEG;AACH,UAAU,yBAAyB;IAClC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,UAAU,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAChD,iBAAiB,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,kBAAkB,GAAG,IAAI,CAAC;AAEhF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAChC,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,kBAAkB,EAC5B,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,KAC5C,OAAO,CAAC;AAEb;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACzC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,mBAAmB,EAC9B,IAAI,GAAE,MAAW,EACjB,OAAO,GAAE,OAAO,CAAC,MAAM,CAAiB,GACtC,yBAAyB,CA2E3B;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC5C,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,4BAA4B,EACtC,QAAQ,EAAE,kBAAkB,GAC1B,OAAO,CAwBT;AA+ED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAiChD;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAaxC;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,CAAC,EAAE,4BAA4B,GAAG,OAAO,CAkCxF"}

package/dist/checkpoint-integration.js

@@ -0,0 +1,253 @@
+/**
+ * Checkpoint Integration Module
+ *
+ * Provides utilities for integrating provenance tracking with checkpoint recovery.
+ * This ensures security policies are enforced even after checkpoint restoration.
+ */
+import { PROVENANCE_PROPERTY_NAMES } from './registry.js';
+/**
+ * Recursively extract provenance from nested objects/arrays
+ * Handles: Promise.all results, loop aggregations, nested objects
+ *
+ * Example paths:
+ * - "" (root)
+ * - "[0]", "[1]" (array elements)
+ * - ".user", ".data.items[0]" (object properties)
+ */
+export function extractProvenanceRecursive(value, extractor, path = '', visited = new WeakSet()) {
+    const entries = [];
+    const primitives = [];
+    let hasRestrictedData = false;
+    if (value === null || value === undefined) {
+        return { entries, primitives, hasRestrictedData };
+    }
+    // Handle primitives
+    if (typeof value !== 'object') {
+        // Check if primitive has taint
+        const primMeta = extractor(value);
+        if (primMeta) {
+            primitives.push([`${path}:${String(value)}`, primMeta]);
+            if (primMeta.readers?.type === 'restricted') {
+                hasRestrictedData = true;
+            }
+        }
+        return { entries, primitives, hasRestrictedData };
+    }
+    // Prevent circular references
+    if (visited.has(value)) {
+        return { entries, primitives, hasRestrictedData };
+    }
+    visited.add(value);
+    // Check if this value has provenance
+    const metadata = extractor(value);
+    if (metadata) {
+        entries.push({ path, metadata });
+        if (metadata.readers?.type === 'restricted') {
+            hasRestrictedData = true;
+        }
+    }
+    // Recursively process arrays
+    if (Array.isArray(value)) {
+        for (let i = 0; i < value.length; i++) {
+            const itemPath = `${path}[${i}]`;
+            const itemResult = extractProvenanceRecursive(value[i], extractor, itemPath, visited);
+            entries.push(...itemResult.entries);
+            primitives.push(...itemResult.primitives);
+            if (itemResult.hasRestrictedData) {
+                hasRestrictedData = true;
+            }
+        }
+    }
+    else {
+        // Recursively process object properties
+        for (const key of Object.keys(value)) {
+            // Skip provenance metadata properties
+            if (key === PROVENANCE_PROPERTY_NAMES.PROVENANCE_ID ||
+                key === PROVENANCE_PROPERTY_NAMES.PROVENANCE ||
+                key === PROVENANCE_PROPERTY_NAMES.PROVENANCE_META) {
+                continue;
+            }
+            const propPath = path ? `${path}.${key}` : `.${key}`;
+            const propResult = extractProvenanceRecursive(value[key], extractor, propPath, visited);
+            entries.push(...propResult.entries);
+            primitives.push(...propResult.primitives);
+            if (propResult.hasRestrictedData) {
+                hasRestrictedData = true;
+            }
+        }
+    }
+    return { entries, primitives, hasRestrictedData };
+}
+/**
+ * Restore provenance to values using snapshot
+ * Handles both simple and complex restoration scenarios
+ */
+export function restoreProvenanceFromSnapshot(value, snapshot, attacher) {
+    if (!attacher) {
+        return value;
+    }
+    // Re-register primitive taints
+    if (snapshot.primitives) {
+        for (const [key, primMeta] of snapshot.primitives) {
+            // The attacher should handle primitive registration
+            attacher(null, primMeta, [[key, primMeta]]);
+        }
+    }
+    // Prefer entries if available (handles nested/aggregated provenance)
+    if (snapshot.entries && snapshot.entries.length > 0) {
+        return restoreProvenanceByPath(value, snapshot.entries, attacher);
+    }
+    // Fallback to metadata for simple cases (single root-level provenance)
+    if (snapshot.metadata) {
+        return attacher(value, snapshot.metadata, snapshot.primitives);
+    }
+    return value;
+}
+/**
+ * Restore provenance to values at specific paths
+ *
+ * Path examples:
+ * - "" → root value
+ * - "[0]" → array[0]
+ * - "[1].data" → array[1].data
+ * - ".user.name" → obj.user.name
+ */
+function restoreProvenanceByPath(value, entries, attacher) {
+    if (!entries || entries.length === 0) {
+        return value;
+    }
+    // Sort entries by path length (deepest first) to handle nested objects correctly
+    const sortedEntries = [...entries].sort((a, b) => b.path.length - a.path.length);
+    // Clone the value to avoid mutating the original
+    let result = deepClone(value);
+    // Apply provenance to each path
+    for (const entry of sortedEntries) {
+        if (entry.path === '') {
+            // Root level
+            result = attacher(result, entry.metadata, undefined);
+        }
+        else {
+            // Navigate to the nested value and attach provenance
+            result = attachProvenanceAtPath(result, entry.path, entry.metadata, attacher);
+        }
+    }
+    return result;
+}
+/**
+ * Navigate to a path and attach provenance to the value there
+ */
+function attachProvenanceAtPath(root, path, metadata, attacher) {
+    // Parse path into segments
+    const segments = parsePath(path);
+    if (segments.length === 0) {
+        return attacher(root, metadata, undefined);
+    }
+    // Navigate to parent and get the target value
+    let current = root;
+    const parentSegments = segments.slice(0, -1);
+    const lastSegment = segments[segments.length - 1];
+    for (const segment of parentSegments) {
+        if (current === null || current === undefined) {
+            return root; // Path doesn't exist
+        }
+        current = current[segment];
+    }
+    if (current === null || current === undefined || lastSegment === undefined) {
+        return root; // Path doesn't exist
+    }
+    // Attach provenance to the value at this path
+    const targetValue = current[lastSegment];
+    const wrappedValue = attacher(targetValue, metadata, undefined);
+    current[lastSegment] = wrappedValue;
+    return root;
+}
+/**
+ * Parse a path string into segments
+ * "[0].user.name" → ["0", "user", "name"]
+ */
+export function parsePath(path) {
+    const segments = [];
+    let current = '';
+    let inBracket = false;
+    for (const char of path) {
+        if (char === '[') {
+            if (current) {
+                segments.push(current);
+                current = '';
+            }
+            inBracket = true;
+        }
+        else if (char === ']') {
+            if (current) {
+                segments.push(current);
+                current = '';
+            }
+            inBracket = false;
+        }
+        else if (char === '.' && !inBracket) {
+            if (current) {
+                segments.push(current);
+                current = '';
+            }
+        }
+        else {
+            current += char;
+        }
+    }
+    if (current) {
+        segments.push(current);
+    }
+    return segments;
+}
+/**
+ * Deep clone a value (simple JSON-based clone)
+ */
+export function deepClone(value) {
+    if (value === null || value === undefined) {
+        return value;
+    }
+    if (typeof value !== 'object') {
+        return value;
+    }
+    try {
+        return JSON.parse(JSON.stringify(value));
+    }
+    catch {
+        // Fallback for non-serializable values
+        return value;
+    }
+}
+/**
+ * Check if a provenance snapshot has restricted data
+ */
+export function hasRestrictedProvenance(snapshot) {
+    if (!snapshot) {
+        return false;
+    }
+    // Fast path: check pre-computed flag
+    if (snapshot.hasRestrictedData) {
+        return true;
+    }
+    // Check top-level metadata (backwards compatibility)
+    if (snapshot.metadata?.readers?.type === 'restricted') {
+        return true;
+    }
+    // Check all entries for nested restricted data
+    if (snapshot.entries) {
+        for (const entry of snapshot.entries) {
+            if (entry.metadata?.readers?.type === 'restricted') {
+                return true;
+            }
+        }
+    }
+    // Check primitive provenance
+    if (snapshot.primitives) {
+        for (const [, primMeta] of snapshot.primitives) {
+            if (primMeta.readers?.type === 'restricted') {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=checkpoint-integration.js.map

package/dist/checkpoint-integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-integration.js","sourceRoot":"","sources":["../src/checkpoint-integration.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AA0E1D;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACzC,KAAc,EACd,SAA8B,EAC9B,OAAe,EAAE,EACjB,UAA2B,IAAI,OAAO,EAAE;IAExC,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,UAAU,GAAwC,EAAE,CAAC;IAC3D,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;IACnD,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,QAAQ,EAAE,CAAC;YACd,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;YACxD,IAAI,QAAQ,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7C,iBAAiB,GAAG,IAAI,CAAC;YAC1B,CAAC;QACF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;IACnD,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,KAAe,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IAE7B,qCAAqC;IACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjC,IAAI,QAAQ,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;YAC7C,iBAAiB,GAAG,IAAI,CAAC;QAC1B,CAAC;IACF,CAAC;IAED,6BAA6B;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;YACjC,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;gBAClC,iBAAiB,GAAG,IAAI,CAAC;YAC1B,CAAC;QACF,CAAC;IACF,CAAC;SAAM,CAAC;QACP,wCAAwC;QACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,sCAAsC;YACtC,IACC,GAAG,KAAK,yBAAyB,CAAC,aAAa;gBAC/C,GAAG,KAAK,yBAAyB,CAAC,UAAU;gBAC5C,GAAG,KAAK,yBAAyB,CAAC,eAAe,EAChD,CAAC;gBACF,SAAS;YACV,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;YACrD,MAAM,UAAU,GAAG,0BAA0B,CAC3C,KAAiC,CAAC,GAAG,CAAC,EACvC,SAAS,EACT,QAAQ,EACR,OAAO,CACP,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;gBAClC,iBAAiB,GAAG,IAAI,CAAC;YAC1B,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC5C,KAAc,EACd,QAAsC,EACtC,QAA4B;IAE5B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACd,CAAC;IAED,+BAA+B;IAC/B,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACnD,oDAAoD;YACpD,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;IACF,CAAC;IAED,qEAAqE;IACrE,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnE,CAAC;IAED,uEAAuE;IACvE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,uBAAuB,CAC/B,KAAc,EACd,OAA0B,EAC1B,QAA4B;IAE5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,iFAAiF;IACjF,MAAM,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjF,iDAAiD;IACjD,IAAI,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAE9B,gCAAgC;IAChC,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACvB,aAAa;YACb,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACP,qDAAqD;YACrD,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/E,CAAC;IACF,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAC9B,IAAa,EACb,IAAY,EACZ,QAA4B,EAC5B,QAA4B;IAE5B,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,8CAA8C;IAC9C,IAAI,OAAO,GAAQ,IAAI,CAAC;IACxB,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAElD,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,CAAC,qBAAqB;QACnC,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC,CAAC,qBAAqB;IACnC,CAAC;IAED,8CAA8C;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChE,OAAO,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;IAEpC,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClB,IAAI,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,OAAO,GAAG,EAAE,CAAC;YACd,CAAC;YACD,SAAS,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACzB,IAAI,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,OAAO,GAAG,EAAE,CAAC;YACd,CAAC;YACD,SAAS,GAAG,KAAK,CAAC;QACnB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,OAAO,GAAG,EAAE,CAAC;YACd,CAAC;QACF,CAAC;aAAM,CAAC;YACP,OAAO,IAAI,IAAI,CAAC;QACjB,CAAC;IACF,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAI,KAAQ;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACR,uCAAuC;QACvC,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAuC;IAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACd,CAAC;IAED,qCAAqC;IACrC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,qDAAqD;IACrD,IAAI,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,+CAA+C;IAC/C,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;gBACpD,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;IACF,CAAC;IAED,6BAA6B;IAC7B,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAChD,IAAI,QAAQ,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC"}