@moxxy/plugin-self-update 0.26.0

package/dist/core-update.js

@@ -0,0 +1,626 @@
+import { spawn } from 'node:child_process';
+import { existsSync, lstatSync, promises as fs, readFileSync, realpathSync } from 'node:fs';
+import * as path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { writeFileAtomic } from '@moxxy/sdk/server';
+import { newTxnId } from './transaction.js';
+/**
+ * Tier-2: patch moxxy's OWN compiled framework packages in a global npm
+ * install. Unlike Tier 1 (plugins/skills, hot-reloaded), a core change cannot
+ * be hot-swapped — @moxxy/core is imported once into the live process — so the
+ * flow is: provision a source clone at the EXACT published commit, edit + build
+ * + test it there, then atomically overlay the built `dist/` into the live
+ * install (snapshotting the previous dist) and require a restart. A boot-time
+ * finalize hook commits or rolls back.
+ *
+ * Everything here is filesystem + child-process only; no moxxy core import.
+ */
+const SCOPE = '@moxxy/';
+const BUILD_TIMEOUT_MS = 12 * 60_000;
+/**
+ * Cap on the child-process output we retain in memory. A long, model-triggered
+ * `pnpm build/typecheck/test` (turbo fan-out, a looping test, a tool dumping a
+ * large file) can emit hundreds of MB; holding it all in the LIVE process would
+ * OOM-kill the host mid-update. Callers only ever read the trailing ~1.5KB, so a
+ * sliding tail is lossless for them.
+ */
+const MAX_RUN_OUTPUT_BYTES = 512 * 1024;
+/** A full git commit sha — the source-pin must compare exact 40-hex shas, never a prefix. */
+const FULL_SHA_RE = /^[0-9a-f]{40}$/;
+export function shortName(pkg) {
+    return pkg.startsWith(SCOPE) ? pkg.slice(SCOPE.length) : pkg;
+}
+export function run(cmd, args, cwd, timeoutMs = BUILD_TIMEOUT_MS) {
+    return new Promise((resolve) => {
+        // `detached` puts the child in its own process group so a timeout can kill
+        // the WHOLE subtree (pnpm/turbo/vitest fan out to many grandchildren that
+        // SIGKILL on the immediate child would orphan).
+        const child = spawn(cmd, [...args], { cwd, stdio: ['ignore', 'pipe', 'pipe'], detached: true });
+        const tail = new TailBuffer(MAX_RUN_OUTPUT_BYTES);
+        const onData = (d) => tail.push(d);
+        child.stdout.on('data', onData);
+        child.stderr.on('data', onData);
+        const timer = setTimeout(() => killTree(child), timeoutMs);
+        let settled = false;
+        const finish = (r) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            child.stdout.off('data', onData);
+            child.stderr.off('data', onData);
+            resolve(r);
+        };
+        child.on('error', (err) => finish({ code: -1, output: `${cmd} failed to start: ${err.message}` }));
+        child.on('close', (code) => finish({ code: code ?? -1, output: tail.toString() }));
+    });
+}
+/**
+ * Bounded sliding-tail accumulator: keeps at most `cap` bytes of the most recent
+ * output. Once the cap is exceeded it trims from the front so memory stays
+ * O(cap) regardless of how much the child emits.
+ */
+class TailBuffer {
+    cap;
+    buf = '';
+    constructor(cap) {
+        this.cap = cap;
+    }
+    push(d) {
+        this.buf += d.toString('utf8');
+        if (this.buf.length > this.cap)
+            this.buf = this.buf.slice(this.buf.length - this.cap);
+    }
+    toString() {
+        return this.buf;
+    }
+}
+/** SIGKILL a detached child's whole process group, tolerating an already-dead group. */
+function killTree(child) {
+    try {
+        if (child.pid != null)
+            process.kill(-child.pid, 'SIGKILL');
+        else
+            child.kill('SIGKILL');
+    }
+    catch {
+        // ESRCH: the group already exited. Fall back to the direct kill just in case.
+        try {
+            child.kill('SIGKILL');
+        }
+        catch {
+            /* already gone */
+        }
+    }
+}
+function trunc(s, n = 1500) {
+    return s.length <= n ? s : `…${s.slice(s.length - n)}`;
+}
+/**
+ * Memoize the resolution per `fromUrl`: the live install root cannot move
+ * underneath a running process, yet detectCoreInstall is called from many tool
+ * handlers (preflight/begin/verify/apply/rollback) and does synchronous blocking
+ * I/O (readFileSync + an existsSync walk). Caching keeps that off the hot path.
+ * `null` results are cached too so repeated misses stay cheap.
+ */
+const coreInstallCache = new Map();
+/**
+ * Resolve the live `@moxxy/core` install to learn its version, the commit it
+ * was published from (npm writes `gitHead` on publish), and the on-disk root
+ * to overlay into.
+ */
+export function detectCoreInstall(fromUrl) {
+    if (coreInstallCache.has(fromUrl))
+        return coreInstallCache.get(fromUrl) ?? null;
+    const info = detectCoreInstallUncached(fromUrl);
+    coreInstallCache.set(fromUrl, info);
+    return info;
+}
+function detectCoreInstallUncached(fromUrl) {
+    try {
+        // `require.resolve('@moxxy/core')` is unreliable — core's `exports` map has
+        // no "." main. Instead locate the `@moxxy` scope dir by walking up from the
+        // caller and reading core/package.json directly.
+        const scopeDir = findCoreScopeDir(fileURLToPath(fromUrl));
+        if (!scopeDir)
+            return null;
+        const pkg = JSON.parse(readFileSync(path.join(scopeDir, 'core', 'package.json'), 'utf8'));
+        const repoUrl = typeof pkg.repository === 'string' ? pkg.repository : pkg.repository?.url;
+        return {
+            version: pkg.version ?? '0.0.0',
+            ...(pkg.gitHead ? { gitHead: pkg.gitHead } : {}),
+            ...(repoUrl ? { repoUrl: normalizeGitUrl(repoUrl) } : {}),
+            scopeDir,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Find the `@moxxy` scope dir containing `core/package.json`, by walking up
+ * ancestors of `start`. Handles both the global install (the file lives under
+ * `node_modules/@moxxy/<pkg>`, so a parent IS the scope dir) and a workspace
+ * (an ancestor has `node_modules/@moxxy`).
+ */
+function findCoreScopeDir(start) {
+    let dir = start;
+    for (let i = 0; i < 16; i++) {
+        if (path.basename(dir) === '@moxxy' && existsSync(path.join(dir, 'core', 'package.json'))) {
+            return dir;
+        }
+        const nm = path.join(dir, 'node_modules', '@moxxy');
+        if (existsSync(path.join(nm, 'core', 'package.json')))
+            return nm;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+function normalizeGitUrl(url) {
+    return url.replace(/^git\+/, '').replace(/^git:\/\//, 'https://');
+}
+export async function corePreflight(install) {
+    const checks = [];
+    const git = await run('git', ['--version'], process.cwd(), 10_000);
+    checks.push({ id: 'git', ok: git.code === 0, detail: git.code === 0 ? git.output.trim() : 'git not found' });
+    const pnpm = await run('pnpm', ['--version'], process.cwd(), 10_000);
+    checks.push({ id: 'pnpm', ok: pnpm.code === 0, detail: pnpm.code === 0 ? `pnpm ${pnpm.output.trim()}` : 'pnpm not found' });
+    checks.push({ id: 'install', ok: Boolean(install), detail: install ? `@moxxy/core@${install.version}` : 'could not resolve @moxxy/core' });
+    checks.push({
+        id: 'provenance',
+        ok: Boolean(install?.gitHead),
+        detail: install?.gitHead ? `gitHead ${install.gitHead.slice(0, 10)}` : 'no gitHead in published metadata — cannot pin source',
+    });
+    checks.push({
+        id: 'repo',
+        ok: Boolean(install?.repoUrl),
+        detail: install?.repoUrl ?? 'no repository url in @moxxy/core package.json',
+    });
+    return { ok: checks.every((c) => c.ok), checks };
+}
+export function coreTxnRoot(moxxyDir) {
+    return path.join(moxxyDir, 'self-update', 'core-txns');
+}
+export function coreTxnDir(moxxyDir, txnId) {
+    return path.join(coreTxnRoot(moxxyDir), txnId);
+}
+export function repoDir(moxxyDir) {
+    return path.join(moxxyDir, 'self-update', 'repo');
+}
+export async function writeCoreJournal(moxxyDir, j) {
+    j.updatedAt = new Date().toISOString();
+    const file = path.join(coreTxnDir(moxxyDir, j.txnId), 'journal.json');
+    await writeFileAtomic(file, JSON.stringify(j, null, 2) + '\n');
+}
+export async function readCoreJournal(moxxyDir, txnId) {
+    return JSON.parse(await fs.readFile(path.join(coreTxnDir(moxxyDir, txnId), 'journal.json'), 'utf8'));
+}
+export async function listCoreTxns(moxxyDir) {
+    let ids;
+    try {
+        ids = (await fs.readdir(coreTxnRoot(moxxyDir), { withFileTypes: true }))
+            .filter((e) => e.isDirectory())
+            .map((e) => e.name);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const id of ids) {
+        try {
+            out.push(await readCoreJournal(moxxyDir, id));
+        }
+        catch {
+            /* skip corrupt */
+        }
+    }
+    return out.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+}
+/**
+ * Count core-txn dirs whose `journal.json` is present but unparseable. A corrupt
+ * (or hand-edited / half-written) journal would silently VANISH from
+ * listCoreTxns — making the begin serialization guard fail OPEN and let a second
+ * concurrent core txn clobber the shared repoDir. The guard uses this to instead
+ * fail CLOSED. A missing journal.json (a dir mid-create) is NOT corruption and
+ * is ignored.
+ */
+export async function countCorruptCoreTxns(moxxyDir) {
+    let ids;
+    try {
+        ids = (await fs.readdir(coreTxnRoot(moxxyDir), { withFileTypes: true }))
+            .filter((e) => e.isDirectory())
+            .map((e) => e.name);
+    }
+    catch {
+        return 0;
+    }
+    let corrupt = 0;
+    for (const id of ids) {
+        const file = path.join(coreTxnDir(moxxyDir, id), 'journal.json');
+        let raw;
+        try {
+            raw = await fs.readFile(file, 'utf8');
+        }
+        catch {
+            continue; // no journal yet — not corruption.
+        }
+        try {
+            JSON.parse(raw);
+        }
+        catch {
+            corrupt++;
+        }
+    }
+    return corrupt;
+}
+/**
+ * Ensure a buildable clone exists at exactly `install.gitHead`. Clones on first
+ * use, otherwise fetches; always checks out the pinned commit and verifies HEAD
+ * matches — this is the integrity guarantee that the source equals the binary.
+ */
+export async function provisionWorkspace(opts) {
+    const dir = repoDir(opts.moxxyDir);
+    const url = opts.repoUrlOverride ?? opts.install.repoUrl;
+    const ref = opts.install.gitHead;
+    if (!url)
+        return { ok: false, message: 'no repository url to clone from', repoDir: dir };
+    if (!ref)
+        return { ok: false, message: 'no gitHead — cannot pin source to the installed version', repoDir: dir };
+    const hasClone = await fs
+        .access(path.join(dir, '.git'))
+        .then(() => true)
+        .catch(() => false);
+    if (!hasClone) {
+        await fs.mkdir(path.dirname(dir), { recursive: true });
+        const clone = await run('git', ['clone', url, dir], path.dirname(dir));
+        if (clone.code !== 0)
+            return { ok: false, message: `git clone failed: ${trunc(clone.output, 400)}`, repoDir: dir };
+    }
+    else {
+        await run('git', ['fetch', '--all', '--tags'], dir);
+    }
+    const checkout = await run('git', ['checkout', '--force', ref], dir);
+    if (checkout.code !== 0) {
+        const fetched = await run('git', ['fetch', 'origin', ref], dir);
+        if (fetched.code === 0)
+            await run('git', ['checkout', '--force', ref], dir);
+    }
+    // Resolve the pinned ref to a full sha so a short/abbreviated gitHead can't
+    // prefix-match a DIFFERENT commit and defeat the source-equals-binary pin.
+    const refFull = (await run('git', ['rev-parse', ref], dir)).output.trim();
+    const head = (await run('git', ['rev-parse', 'HEAD'], dir)).output.trim();
+    if (!FULL_SHA_RE.test(head) || !FULL_SHA_RE.test(refFull) || head !== refFull) {
+        return {
+            ok: false,
+            message: `source mismatch: clone HEAD ${head.slice(0, 10)} ≠ installed gitHead ${ref.slice(0, 10)}`,
+            repoDir: dir,
+        };
+    }
+    await run('git', ['clean', '-fdx', 'packages'], dir).catch(() => undefined);
+    await run('git', ['checkout', '--', '.'], dir).catch(() => undefined);
+    const install = await run('pnpm', ['install', '--frozen-lockfile'], dir);
+    if (install.code !== 0) {
+        const loose = await run('pnpm', ['install'], dir);
+        if (loose.code !== 0)
+            return { ok: false, message: `pnpm install failed: ${trunc(loose.output, 400)}`, repoDir: dir };
+    }
+    return { ok: true, message: 'workspace provisioned', repoDir: dir };
+}
+// ── repo package layout ──────────────────────────────────────────────────────────
+/** Find the clone's package directory whose package.json `name` === pkgName. */
+export async function findRepoPkgDir(repo, pkgName) {
+    const pkgsRoot = path.join(repo, 'packages');
+    let entries;
+    try {
+        entries = (await fs.readdir(pkgsRoot, { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
+    }
+    catch {
+        return null;
+    }
+    for (const name of entries) {
+        const dir = path.join(pkgsRoot, name);
+        try {
+            const pkg = JSON.parse(await fs.readFile(path.join(dir, 'package.json'), 'utf8'));
+            if (pkg.name === pkgName)
+                return dir;
+        }
+        catch {
+            /* skip */
+        }
+    }
+    return null;
+}
+export async function verifyCorePackages(repo, install, pkgNames) {
+    const stages = [];
+    // `...` expands the turbo filter to include dependents, so a change that
+    // breaks a downstream package is caught.
+    const filters = pkgNames.flatMap((p) => ['--filter', `${p}...`]);
+    for (const task of ['build', 'typecheck', 'test']) {
+        const r = await run('pnpm', [...filters, task], repo);
+        stages.push({ stage: task, ok: r.code === 0, message: r.code === 0 ? `${task} ok` : trunc(r.output) });
+        if (r.code !== 0)
+            return { ok: false, stages, newDeps: [] };
+    }
+    const newDeps = await detectNewDeps(repo, install, pkgNames);
+    if (newDeps.length > 0) {
+        stages.push({
+            stage: 'deps',
+            ok: false,
+            message: `patch adds runtime dependencies not in the live install: ${newDeps.join(', ')} — a dist overlay can't install these. Escalate.`,
+        });
+        return { ok: false, stages, newDeps };
+    }
+    return { ok: true, stages, newDeps: [] };
+}
+/** Runtime deps the patched clone declares that aren't present in the live install. */
+export async function detectNewDeps(repo, install, pkgNames) {
+    const missing = new Set();
+    for (const pkgName of pkgNames) {
+        const dir = await findRepoPkgDir(repo, pkgName);
+        if (!dir)
+            continue;
+        let deps = {};
+        try {
+            const pkg = JSON.parse(await fs.readFile(path.join(dir, 'package.json'), 'utf8'));
+            deps = pkg.dependencies ?? {};
+        }
+        catch {
+            continue;
+        }
+        // The live node_modules root is the parent of the `@moxxy` scope dir.
+        const nmRoot = path.dirname(install.scopeDir);
+        for (const [dep, spec] of Object.entries(deps)) {
+            if (spec.startsWith('workspace:'))
+                continue; // resolved internally at build
+            const present = await exists(path.join(nmRoot, dep));
+            if (!present)
+                missing.add(dep);
+        }
+    }
+    return [...missing];
+}
+// ── overlay / restore ────────────────────────────────────────────────────────────
+/**
+ * Swap each package's freshly-built `dist/` into the live install, keeping the
+ * previous dist as a snapshot for rollback. Renames are atomic on the same fs.
+ *
+ * Crash-atomicity across packages: a multi-package overlay must not leave the
+ * install with a NEW core dist but an OLD cli dist (a version-skewed, possibly
+ * non-bootable combo) if the process is killed mid-loop. So we work in phases:
+ *   1. validate every package + snapshot every old dist,
+ *   2. stage every new dist (`dist.new`) — nothing live is touched yet,
+ *   3. write a `pending.json` intent recording the full set + staged paths,
+ *   4. swap all dists in a tight loop, then write `applied.json`.
+ * If the process dies between 3 and the final `applied.json`, a leftover
+ * `pending.json` lets {@link reconcileOverlay} (run on boot) complete or undo
+ * the partial set instead of stranding a mixed core.
+ */
+export async function overlayPackages(opts) {
+    await fs.mkdir(opts.snapshotDir, { recursive: true });
+    // Phase 1 + 2: validate, snapshot old, stage new. No live dist is swapped yet,
+    // so a failure here leaves the install untouched (only orphaned dist.new dirs).
+    const planned = [];
+    for (const pkgName of opts.pkgNames) {
+        const repoPkg = await findRepoPkgDir(opts.repo, pkgName);
+        if (!repoPkg) {
+            await cleanupStaged(planned);
+            return { ok: false, message: `package not found in clone: ${pkgName}`, applied: [] };
+        }
+        const srcDist = path.join(repoPkg, 'dist');
+        if (!(await exists(srcDist))) {
+            await cleanupStaged(planned);
+            return { ok: false, message: `no built dist for ${pkgName}`, applied: [] };
+        }
+        const destPkg = path.join(opts.install.scopeDir, shortName(pkgName));
+        const destDist = path.join(destPkg, 'dist');
+        if (await exists(destDist)) {
+            await fs.cp(destDist, path.join(opts.snapshotDir, shortName(pkgName)), { recursive: true });
+        }
+        const staged = path.join(destPkg, 'dist.new');
+        await fs.rm(staged, { recursive: true, force: true });
+        await fs.cp(srcDist, staged, { recursive: true });
+        planned.push({ pkgName, destDist, staged });
+    }
+    // Phase 3: record the intent so an interrupted phase-4 swap is reconcilable.
+    await writeFileAtomic(path.join(opts.snapshotDir, 'pending.json'), JSON.stringify({ packages: planned.map((p) => p.pkgName), at: new Date().toISOString() }, null, 2));
+    // Phase 4: swap each staged dist into place. Atomic per package; the pending
+    // marker covers the (tiny) window where the set is only partially swapped.
+    const applied = [];
+    for (const { pkgName, destDist, staged } of planned) {
+        const bak = `${destDist}.bak`;
+        await fs.rm(bak, { recursive: true, force: true });
+        if (await exists(destDist))
+            await fs.rename(destDist, bak);
+        await fs.rename(staged, destDist);
+        await fs.rm(bak, { recursive: true, force: true });
+        applied.push(pkgName);
+    }
+    await writeFileAtomic(path.join(opts.snapshotDir, 'applied.json'), JSON.stringify({ packages: applied, at: new Date().toISOString() }, null, 2));
+    // The swap completed; the pending intent is now satisfied.
+    await fs.rm(path.join(opts.snapshotDir, 'pending.json'), { force: true }).catch(() => undefined);
+    return { ok: true, message: `overlaid ${applied.length} package(s)`, applied };
+}
+/** Remove any staged `dist.new` dirs from an aborted overlay plan. */
+async function cleanupStaged(planned) {
+    for (const { staged } of planned) {
+        await fs.rm(staged, { recursive: true, force: true }).catch(() => undefined);
+    }
+}
+/**
+ * Reconcile an overlay that was interrupted between intent and completion. If a
+ * `pending.json` exists without a matching `applied.json`, the swap loop may
+ * have run partially (some live dists new, some old) and left orphaned
+ * `dist.new`/`dist.bak`. Restoring from the snapshot returns every package to
+ * its pre-overlay dist so the install is internally consistent again; the caller
+ * marks the txn rolled_back. No-op when the overlay completed cleanly.
+ */
+export async function reconcileOverlay(opts) {
+    const pendingFile = path.join(opts.snapshotDir, 'pending.json');
+    if (!(await exists(pendingFile)))
+        return { reconciled: false };
+    if (await exists(path.join(opts.snapshotDir, 'applied.json'))) {
+        // The full set landed; the pending marker is just stale. Clear it.
+        await fs.rm(pendingFile, { force: true }).catch(() => undefined);
+        return { reconciled: false };
+    }
+    await restoreOverlay(opts);
+    // Drop any orphaned staging dirs from the interrupted swap.
+    for (const pkgName of opts.pkgNames) {
+        const destPkg = path.join(opts.install.scopeDir, shortName(pkgName));
+        await fs.rm(path.join(destPkg, 'dist.new'), { recursive: true, force: true }).catch(() => undefined);
+        await fs.rm(path.join(destPkg, 'dist.bak'), { recursive: true, force: true }).catch(() => undefined);
+    }
+    await fs.rm(pendingFile, { force: true }).catch(() => undefined);
+    return { reconciled: true };
+}
+/** Reverse an overlay: restore each package's dist from the snapshot. */
+export async function restoreOverlay(opts) {
+    for (const pkgName of opts.pkgNames) {
+        const snap = path.join(opts.snapshotDir, shortName(pkgName));
+        if (!(await exists(snap)))
+            continue;
+        const destDist = path.join(opts.install.scopeDir, shortName(pkgName), 'dist');
+        await fs.rm(destDist, { recursive: true, force: true });
+        await fs.cp(snap, destDist, { recursive: true });
+    }
+}
+async function exists(p) {
+    return fs.access(p).then(() => true).catch(() => false);
+}
+// ── boot-time finalize ────────────────────────────────────────────────────────────
+/** Whether the snapshot dir holds a consistent, fully-applied overlay for `pkgNames`. */
+async function overlayApplied(snapshotDir, pkgNames) {
+    try {
+        const applied = JSON.parse(await fs.readFile(path.join(snapshotDir, 'applied.json'), 'utf8'));
+        const got = new Set(applied.packages ?? []);
+        return pkgNames.every((p) => got.has(p));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Called early on every CLI boot. Reaching this point means the (possibly
+ * overlaid) core code imported successfully, so a cleanly-applied
+ * `staged_restart` txn is committed. The primary defense against a bad patch is
+ * the pre-overlay build+typecheck+test in verify; this adds two boot-time
+ * safety nets when an `install` is supplied:
+ *  - reconcile an overlay interrupted mid-swap (partial dist set) by restoring
+ *    the snapshot, and mark that txn rolled_back rather than committing a mixed
+ *    core that merely imported far enough to reach this hook;
+ *  - refuse to commit unless `applied.json` records every journal package, so an
+ *    inconsistent overlay keeps its rollback snapshot instead of GC-ing it.
+ * Without `install` it stays best-effort (commits any staged txn) for callers
+ * that cannot resolve the live install.
+ */
+export async function finalizeStagedCoreUpdate(moxxyDir, install, keepTerminal = 5) {
+    const committed = [];
+    for (const j of await listCoreTxns(moxxyDir)) {
+        if (j.state !== 'staged_restart')
+            continue;
+        const snapDir = path.join(coreTxnDir(moxxyDir, j.txnId), 'snapshot');
+        if (install) {
+            const recon = await reconcileOverlay({
+                install,
+                pkgNames: j.packages,
+                snapshotDir: snapDir,
+            }).catch(() => ({ reconciled: false }));
+            if (recon.reconciled) {
+                j.state = 'rolled_back';
+                await writeCoreJournal(moxxyDir, j).catch(() => undefined);
+                continue;
+            }
+            if (!(await overlayApplied(snapDir, j.packages))) {
+                // The overlay never recorded a complete apply — restore and back out
+                // rather than commit (and then GC) a possibly-broken core.
+                await restoreOverlay({ install, pkgNames: j.packages, snapshotDir: snapDir }).catch(() => undefined);
+                j.state = 'rolled_back';
+                await writeCoreJournal(moxxyDir, j).catch(() => undefined);
+                continue;
+            }
+        }
+        j.state = 'committed';
+        await writeCoreJournal(moxxyDir, j).catch(() => undefined);
+        committed.push(j.txnId);
+    }
+    // Reclaim disk: every core txn parks a full pre-overlay dist snapshot, so old
+    // terminal txns would otherwise accumulate unbounded. Boot is the safe, single
+    // place to prune (all staged txns above are now terminal). Best-effort.
+    await gcCoreTxns(moxxyDir, keepTerminal).catch(() => undefined);
+    return committed;
+}
+export function newCoreTxnId(now = new Date()) {
+    return `core-${newTxnId(now)}`;
+}
+/**
+ * Prune old terminal core transactions. Each core txn parks a full pre-overlay
+ * `dist` snapshot of every patched package (tens of MB), and nothing else ever
+ * deletes them — left unbounded they accumulate on disk across every
+ * apply/rollback cycle. Keep only the most recent `keep` terminal
+ * (committed / rolled_back) txns; never touch a non-terminal one (an open /
+ * provisioned / verified / staged_restart txn whose snapshot finalize or a
+ * rollback may still need). Best-effort: a failed delete is ignored.
+ */
+export async function gcCoreTxns(moxxyDir, keep) {
+    const all = await listCoreTxns(moxxyDir);
+    const terminal = all.filter((j) => j.state === 'committed' || j.state === 'rolled_back');
+    for (const j of terminal.slice(Math.max(0, keep))) {
+        await fs.rm(coreTxnDir(moxxyDir, j.txnId), { recursive: true, force: true }).catch(() => undefined);
+    }
+}
+/**
+ * Resolve a clone-relative path, refusing anything that escapes the repo —
+ * including via a symlink. `path.resolve` collapses literal `..`, but the clone
+ * is git-controlled and can contain symlinks, and core_write/core_edit follow
+ * them (fs.writeFile/readFile dereference), so a path that textually stays inside
+ * the repo but traverses a symlink could read or clobber files outside the clone
+ * (the live install, ~/.ssh, …). We therefore (1) keep the cheap textual gate,
+ * then (2) re-check against the realpath of the repo root and reject if any
+ * existing component of the target is a symlink.
+ */
+export function safeRepoPath(repo, rel) {
+    const root = path.resolve(repo);
+    const resolved = path.resolve(repo, rel);
+    if (resolved !== root && !resolved.startsWith(root + path.sep)) {
+        throw new Error(`path escapes the provisioned repo: ${rel}`);
+    }
+    // Resolve the repo root through any symlinks once; everything must stay under it.
+    let realRoot;
+    try {
+        realRoot = realpathSync(root);
+    }
+    catch {
+        // Repo root not provisioned yet — the textual gate is the best we can do.
+        return resolved;
+    }
+    // The portion *inside* the repo is the path relative to the (textual) root —
+    // computed from `resolved`, NOT by re-resolving `rel` against realRoot. An
+    // absolute `rel` (legitimately repo-prefixed) makes `path.resolve(realRoot,
+    // rel)` ignore realRoot, and when the root traverses a symlink (e.g. macOS
+    // /var→/private/var, or a symlinked $HOME) the relative diff is then all `..`
+    // and a valid in-repo absolute path is wrongly rejected. Anchoring the
+    // already-validated in-repo segments onto realRoot avoids that.
+    const relParts = path.relative(root, resolved).split(path.sep).filter(Boolean);
+    if (relParts.some((p) => p === '..')) {
+        throw new Error(`path escapes the provisioned repo: ${rel}`);
+    }
+    let cur = realRoot;
+    for (const part of relParts) {
+        cur = path.join(cur, part);
+        let st;
+        try {
+            st = lstatSync(cur);
+        }
+        catch {
+            break; // component doesn't exist yet (the file we're about to create) — stop.
+        }
+        if (st.isSymbolicLink()) {
+            throw new Error(`path traverses a symlink, refusing: ${rel}`);
+        }
+    }
+    return path.join(realRoot, ...relParts);
+}
+//# sourceMappingURL=core-update.js.map

package/dist/core-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-update.js","sourceRoot":"","sources":["../src/core-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;;;;;;;;GAUG;AAEH,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,gBAAgB,GAAG,EAAE,GAAG,MAAM,CAAC;AACrC;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG,GAAG,GAAG,IAAI,CAAC;AACxC,6FAA6F;AAC7F,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAErC,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC/D,CAAC;AAOD,MAAM,UAAU,GAAG,CACjB,GAAW,EACX,IAA2B,EAC3B,GAAW,EACX,SAAS,GAAG,gBAAgB;IAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,2EAA2E;QAC3E,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,oBAAoB,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,CAAY,EAAQ,EAAE;YACpC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjC,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,qBAAqB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACnG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU;IAEe;IADrB,GAAG,GAAG,EAAE,CAAC;IACjB,YAA6B,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAC5C,IAAI,CAAC,CAAS;QACZ,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,QAAQ;QACN,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;CACF;AAED,wFAAwF;AACxF,SAAS,QAAQ,CAAC,KAA6D;IAC7E,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;;YACtD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,CAAS,EAAE,CAAC,GAAG,IAAI;IAChC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkC,CAAC;AAEnE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAChF,MAAM,IAAI,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAChD,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAe;IAChD,IAAI,CAAC;QACH,4EAA4E;QAC5E,4EAA4E;QAC5E,iDAAiD;QACjD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAIvF,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC;QAC1F,OAAO;YACL,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO;YAC/B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,QAAQ;SACT,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC1F,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QACpD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AACpE,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA+B;IACjE,MAAM,MAAM,GAAkD,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5H,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,+BAA+B,EAAE,CAAC,CAAC;IAC3I,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,YAAY;QAChB,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;QAC7B,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,sDAAsD;KAC9H,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,MAAM;QACV,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;QAC7B,MAAM,EAAE,OAAO,EAAE,OAAO,IAAI,+CAA+C;KAC5E,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC;AAwBD,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AACzD,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,KAAa;IACxD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,CAAc;IACrE,CAAC,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,CAAC;IACtE,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAa;IACnE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;AACtH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;aACrE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;aACrE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;QACjE,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,mCAAmC;QAC/C,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAIxC;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iCAAiC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACzF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,yDAAyD,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAEjH,MAAM,QAAQ,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;SAC9B,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACrH,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACrE,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1E,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,+BAA+B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YACnG,OAAO,EAAE,GAAG;SACb,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5E,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wBAAwB,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACxH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACtE,CAAC;AAED,oFAAoF;AACpF,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACpH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAsB,CAAC;YACvG,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,GAAG,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,OAAwB,EACxB,QAA+B;IAE/B,MAAM,MAAM,GAAsD,EAAE,CAAC;IACrE,yEAAyE;IACzE,yCAAyC;IACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAEjE,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAU,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,MAAM;YACb,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,4DAA4D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kDAAkD;SAC1I,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,OAAwB,EACxB,QAA+B;IAE/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,IAAI,GAA2B,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAE/E,CAAC;YACF,IAAI,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,sEAAsE;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,SAAS,CAAC,+BAA+B;YAC5E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,oFAAoF;AACpF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAKrC;IACC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtD,+EAA+E;IAC/E,gFAAgF;IAChF,MAAM,OAAO,GAA4D,EAAE,CAAC;IAC5E,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACvF,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC7B,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC7E,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,6EAA6E;IAC7E,MAAM,eAAe,CACnB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAC3C,IAAI,CAAC,SAAS,CACZ,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EACzE,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IAEF,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,QAAQ,MAAM,CAAC;QAC9B,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,MAAM,MAAM,CAAC,QAAQ,CAAC;YAAE,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,eAAe,CACnB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAC3C,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAC7E,CAAC;IACF,2DAA2D;IAC3D,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,OAAO,CAAC,MAAM,aAAa,EAAE,OAAO,EAAE,CAAC;AACjF,CAAC;AAED,sEAAsE;AACtE,KAAK,UAAU,aAAa,CAC1B,OAA0C;IAE1C,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAItC;IACC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/D,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QAC9D,mEAAmE;QACnE,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3B,4DAA4D;IAC5D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrG,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAIpC;IACC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9E,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,qFAAqF;AACrF,yFAAyF;AACzF,KAAK,UAAU,cAAc,CAC3B,WAAmB,EACnB,QAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACvC,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAgB,EAChB,OAAgC,EAChC,YAAY,GAAG,CAAC;IAEhB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,CAAC,KAAK,KAAK,gBAAgB;YAAE,SAAS;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;QAErE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC;gBACnC,OAAO;gBACP,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,OAAO;aACrB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,CAAC,CAAC,KAAK,GAAG,aAAa,CAAC;gBACxB,MAAM,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3D,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACjD,qEAAqE;gBACrE,2DAA2D;gBAC3D,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CACjF,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;gBACF,CAAC,CAAC,KAAK,GAAG,aAAa,CAAC;gBACxB,MAAM,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3D,SAAS;YACX,CAAC;QACH,CAAC;QAED,CAAC,CAAC,KAAK,GAAG,WAAW,CAAC;QACtB,MAAM,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3D,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,8EAA8E;IAC9E,+EAA+E;IAC/E,wEAAwE;IACxE,MAAM,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAY,IAAI,IAAI,EAAE;IACjD,OAAO,QAAQ,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB,EAAE,IAAY;IAC7D,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC;IACzF,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,kFAAkF;IAClF,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,uEAAuE;QAChF,CAAC;QACD,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC;AAC1C,CAAC"}