@msn-control/liftoff 0.10.3 → 0.10.4

package/dist/governance-assessment/live-transport.js

@@ -0,0 +1,467 @@
+import { performance } from 'node:perf_hooks';
+import { isRecord } from './sanitize.js';
+import { assessmentLimits } from './types.js';
+const githubCliHost = 'github.com';
+const githubApiOrigin = 'https://api.github.com';
+const armHost = 'https://management.azure.com';
+const pageSize = 100;
+export const githubApiVersion = '2022-11-28';
+export class LiveFailure extends Error {
+    code;
+    transient;
+    constructor(code, message, transient = false) {
+        super(message);
+        this.code = code;
+        this.transient = transient;
+    }
+}
+function failureForStatus(status) {
+    if (status === 401)
+        return new LiveFailure('authentication', 'Existing authentication did not authorize the read.');
+    if (status === 403)
+        return new LiveFailure('denied', 'The scoped read was denied; absence cannot be established.');
+    if (status === 404)
+        return new LiveFailure('masked-not-found', 'The read returned 404; absence cannot be distinguished from hidden access.');
+    if (status === 429)
+        return new LiveFailure('rate-limit', 'The provider rate-limited the scoped read.', true);
+    if (status >= 500 && status <= 599)
+        return new LiveFailure('provider-unavailable', 'The provider could not complete the scoped read.', true);
+    return new LiveFailure('http-error', 'The provider returned an unsuccessful HTTP response.');
+}
+function parseJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new LiveFailure('invalid-response', 'The provider response was invalid or truncated JSON.');
+    }
+}
+function parseGitHub(text) {
+    const split = text.search(/\r?\n\r?\n/u);
+    if (split < 0)
+        throw new LiveFailure('invalid-response', 'GitHub response headers were unavailable; pagination cannot be verified.');
+    const lines = text.slice(0, split).split(/\r?\n/u);
+    const status = /^HTTP\/[0-9.]+\s+([0-9]{3})(?:\s|$)/u.exec(lines.shift() ?? '');
+    if (!status)
+        throw new LiveFailure('invalid-response', 'GitHub returned an invalid HTTP envelope.');
+    const headers = new Map();
+    for (const line of lines) {
+        const colon = line.indexOf(':');
+        if (colon < 1)
+            throw new LiveFailure('invalid-response', 'GitHub returned malformed response headers.');
+        const name = line.slice(0, colon).toLowerCase();
+        if (!/^[a-z0-9-]+$/u.test(name) || headers.has(name)) {
+            throw new LiveFailure('invalid-response', 'GitHub returned ambiguous response headers.');
+        }
+        headers.set(name, line.slice(colon + 1).trim());
+    }
+    const code = Number(status[1]);
+    if (code < 200 || code >= 300)
+        throw failureForStatus(code);
+    const body = text.slice(split).replace(/^\r?\n\r?\n/u, '');
+    const length = headers.get('content-length');
+    if (length !== undefined && !headers.has('content-encoding') &&
+        (!/^\d+$/u.test(length) || Number(length) !== Buffer.byteLength(body))) {
+        throw new LiveFailure('truncated-response', 'The GitHub response did not match its declared content length.');
+    }
+    return { value: parseJson(body), headers };
+}
+function httpError(result) {
+    if (result.errorCode === 'ENOENT')
+        return new LiveFailure('tool-unavailable', 'The required CLI is unavailable; no installation was attempted.');
+    const code = /\bHTTP(?:\/[0-9.]+)?\s+([1-5][0-9]{2})\b/iu.exec(result.stderr)?.[1] ??
+        /\b(?:status(?:\s+code)?|StatusCode)\s*[:=]?\s*([1-5][0-9]{2})\b/iu.exec(result.stderr)?.[1];
+    if (code)
+        return failureForStatus(Number(code));
+    if (/\b(?:AuthorizationFailed|Forbidden|AccessDenied)\b/u.test(result.stderr))
+        return failureForStatus(403);
+    if (/\b(?:AuthenticationFailed|Unauthorized|NotLoggedIn)\b|az login|gh auth login/iu.test(result.stderr))
+        return failureForStatus(401);
+    if (/\b(?:ResourceNotFound|NotFound)\b/u.test(result.stderr))
+        return failureForStatus(404);
+    if (['EAI_AGAIN', 'ECONNRESET', 'ETIMEDOUT'].includes(result.errorCode ?? '')) {
+        return new LiveFailure('transport-unavailable', 'The scoped read encountered a transient transport failure.', true);
+    }
+    return new LiveFailure('command-failed', 'The read-only CLI request failed; provider error details were withheld.');
+}
+export class LiveTransport {
+    runner;
+    now;
+    scope;
+    azureUrls;
+    diagnostic;
+    clockStart;
+    monotonicStart = performance.now();
+    verified = false;
+    shas = new Set();
+    unavailable = new Set();
+    active = new Set();
+    deadlineFailure;
+    constructor(runner, now, scope, azureUrls, diagnostic) {
+        this.runner = runner;
+        this.now = now;
+        this.scope = scope;
+        this.azureUrls = azureUrls;
+        this.diagnostic = diagnostic;
+        this.clockStart = now().getTime();
+    }
+    verifyRepository() {
+        this.verified = true;
+    }
+    bindSha(sha) {
+        if (!/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/u.test(sha)) {
+            throw new LiveFailure('scope-mismatch', 'A check request requires a verified commit SHA.');
+        }
+        this.shas.add(sha);
+    }
+    remaining() {
+        if (this.deadlineFailure)
+            throw this.deadlineFailure;
+        const elapsed = Math.max(this.now().getTime() - this.clockStart, performance.now() - this.monotonicStart);
+        const remaining = assessmentLimits.liveDeadlineMs - elapsed;
+        if (!Number.isFinite(remaining) || remaining <= 0) {
+            throw this.expireDeadline();
+        }
+        return Math.max(1, Math.floor(remaining));
+    }
+    expireDeadline() {
+        this.deadlineFailure ??= new LiveFailure('deadline', 'The live collection deadline was reached; remaining proof was not collected.');
+        for (const controller of this.active)
+            controller.abort(this.deadlineFailure);
+        return this.deadlineFailure;
+    }
+    githubUrl(action, selector) {
+        const repository = this.scope.repository;
+        if (!repository || (action !== 'repository' && !this.verified)) {
+            throw new LiveFailure('unverified-scope', 'Repository identity must be verified before dependent reads.');
+        }
+        const root = `/repos/${repository.owner}/${repository.name}`;
+        const runner = this.scope.runner;
+        let pathname;
+        switch (action) {
+            case 'repository':
+                pathname = root;
+                break;
+            case 'actions-app':
+                pathname = '/apps/github-actions';
+                break;
+            case 'rulesets':
+                pathname = `${root}/rulesets`;
+                break;
+            case 'ruleset':
+                if (typeof selector !== 'number' || !Number.isSafeInteger(selector) || selector < 1) {
+                    throw new LiveFailure('unsafe-scope', 'A ruleset read requires an observed numeric ruleset ID.');
+                }
+                pathname = `${root}/rulesets/${selector}`;
+                break;
+            case 'branch':
+            case 'protection':
+            case 'branch-rules':
+                if (typeof selector !== 'string' || !this.scope.refs.includes(selector)) {
+                    throw new LiveFailure('unsafe-scope', 'The requested branch was not in the validated scope.');
+                }
+                pathname = action === 'branch-rules'
+                    ? `${root}/rules/branches/${encodeURIComponent(selector)}`
+                    : `${root}/branches/${encodeURIComponent(selector)}${action === 'protection' ? '/protection' : ''}`;
+                break;
+            case 'checks':
+                if (typeof selector !== 'string' || !this.shas.has(selector)) {
+                    throw new LiveFailure('unverified-scope', 'Checks must be requested for an observed commit SHA.');
+                }
+                pathname = `${root}/commits/${selector}/check-runs`;
+                break;
+            case 'environments':
+                pathname = `${root}/environments`;
+                break;
+            case 'environment-policies':
+                if (typeof selector !== 'string' || !this.scope.environments.includes(selector)) {
+                    throw new LiveFailure('unsafe-scope', 'The environment was not in the validated scope.');
+                }
+                pathname = `${root}/environments/${encodeURIComponent(selector)}/deployment-branch-policies`;
+                break;
+            case 'workflows':
+                pathname = `${root}/actions/workflows`;
+                break;
+            case 'runner':
+            case 'runner-group':
+            case 'runner-assignment':
+            case 'runner-network':
+                if (!runner || runner.organization.toLowerCase() !== repository.owner.toLowerCase() ||
+                    !Number.isSafeInteger(runner.runnerId) || runner.runnerId <= 0 ||
+                    !Number.isSafeInteger(runner.groupId) || Number(runner.groupId) <= 0 ||
+                    typeof runner.networkConfigurationId !== 'string' || !/^[A-Za-z0-9_-]{1,128}$/u.test(runner.networkConfigurationId)) {
+                    throw new LiveFailure('unsafe-scope', 'Exact runner, group, network and repository bindings are required.');
+                }
+                pathname = action === 'runner' ? `/orgs/${repository.owner}/actions/hosted-runners/${runner.runnerId}`
+                    : action === 'runner-group' ? `/orgs/${repository.owner}/actions/runner-groups/${runner.groupId}`
+                        : action === 'runner-network' ? `/orgs/${repository.owner}/settings/network-configurations/${runner.networkConfigurationId}`
+                            : `/orgs/${repository.owner}/actions/runner-groups`;
+                break;
+            default: throw new LiveFailure('unsafe-action', 'The requested action is not an allowlisted live read.');
+        }
+        const url = new URL(pathname, githubApiOrigin);
+        if (action === 'rulesets' || action === 'ruleset')
+            url.searchParams.set('includes_parents', 'true');
+        if (action === 'checks')
+            url.searchParams.set('filter', 'latest');
+        if (action === 'runner-assignment')
+            url.searchParams.set('visible_to_repository', repository.name);
+        return url;
+    }
+    async github(action, selector) {
+        const response = await this.getGitHub(this.githubUrl(action, selector));
+        if (response.headers.has('link')) {
+            throw new LiveFailure('incomplete-pagination', 'A single-object read unexpectedly returned pagination.');
+        }
+        return response.value;
+    }
+    async pages(action, field, normalize, selector) {
+        const base = this.githubUrl(action, selector);
+        base.searchParams.set('per_page', String(pageSize));
+        base.searchParams.set('page', '1');
+        let current = base;
+        let expectedTotal;
+        let expectedLast;
+        let terminalProbe = false;
+        let bytes = 0;
+        const rows = [];
+        const keys = new Set();
+        for (let page = 1; page <= assessmentLimits.maxPages; page += 1) {
+            const response = await this.getGitHub(current);
+            const container = response.value;
+            if (isRecord(container) && (container.incomplete_results === true || container.truncated === true ||
+                container.nextLink !== undefined || container['@odata.nextLink'] !== undefined)) {
+                throw new LiveFailure('incomplete-pagination', 'The provider marked the inventory incomplete or supplied unsupported continuation metadata.');
+            }
+            const entries = field === null ? container : isRecord(container) ? container[field] : undefined;
+            if (!Array.isArray(entries) || entries.length > pageSize) {
+                throw new LiveFailure('invalid-page', 'The provider returned an invalid inventory page.');
+            }
+            if (field !== null) {
+                const count = isRecord(container) ? container.total_count : undefined;
+                if (!Number.isSafeInteger(count) || Number(count) < 0) {
+                    throw new LiveFailure('invalid-page', 'The inventory page did not provide a valid total count.');
+                }
+                if (expectedTotal !== undefined && expectedTotal !== count) {
+                    throw new LiveFailure('incomplete-pagination', 'The inventory changed while its pages were being read.');
+                }
+                expectedTotal = Number(count);
+                if (expectedTotal > assessmentLimits.maxPages * pageSize) {
+                    throw new LiveFailure('page-limit', 'The inventory exceeds the release-owned page limit.');
+                }
+            }
+            for (const entry of entries) {
+                const normalized = normalize(entry);
+                if (keys.has(normalized.key)) {
+                    throw new LiveFailure('incomplete-pagination', 'The inventory repeated an entry across pages.');
+                }
+                keys.add(normalized.key);
+                bytes += Buffer.byteLength(JSON.stringify(normalized.value));
+                if (bytes > assessmentLimits.responseBytes) {
+                    throw new LiveFailure('size-limit', 'Normalized inventory metadata exceeded the byte limit.');
+                }
+                rows.push(normalized.value);
+            }
+            if (expectedTotal !== undefined && rows.length > expectedTotal) {
+                throw new LiveFailure('incomplete-pagination', 'The inventory exceeded its declared total count.');
+            }
+            const link = response.headers.get('link');
+            const { next, last } = link === undefined ? { next: null, last: undefined }
+                : this.nextPage(link, base, page, terminalProbe && entries.length === 0);
+            if (last !== undefined) {
+                if (expectedLast !== undefined && expectedLast !== last) {
+                    throw new LiveFailure('incomplete-pagination', 'The advertised final inventory page changed during collection.');
+                }
+                expectedLast = last;
+                if (last > assessmentLimits.maxPages) {
+                    throw new LiveFailure('page-limit', 'The advertised inventory exceeds the release-owned page limit.');
+                }
+            }
+            if (expectedLast !== undefined) {
+                if (terminalProbe && entries.length === 0 && page === expectedLast + 1 && next === null)
+                    return rows;
+                if (page > expectedLast || (page < expectedLast && next === null) || (page === expectedLast && next !== null)) {
+                    throw new LiveFailure('incomplete-pagination', 'Inventory continuation metadata contradicted the advertised final page.');
+                }
+            }
+            if (next !== null) {
+                if (entries.length === 0 || (expectedTotal !== undefined && rows.length >= expectedTotal)) {
+                    throw new LiveFailure('incomplete-pagination', 'The inventory returned inconsistent continuation metadata.');
+                }
+                current = next;
+                terminalProbe = false;
+            }
+            else {
+                if (expectedTotal !== undefined) {
+                    if (rows.length !== expectedTotal) {
+                        throw new LiveFailure('incomplete-pagination', 'The inventory ended before its declared total count.');
+                    }
+                    return rows;
+                }
+                if (entries.length < pageSize || page === expectedLast)
+                    return rows;
+                // Bare-array APIs have no total: an exactly full last page needs a terminal read.
+                current = new URL(base);
+                current.searchParams.set('page', String(page + 1));
+                terminalProbe = true;
+            }
+        }
+        throw new LiveFailure('page-limit', 'The inventory could not be completed within the page limit.');
+    }
+    nextPage(link, base, currentPage, emptyTerminalProbe) {
+        let next = null;
+        let last;
+        const relations = new Set();
+        for (const item of link.split(',')) {
+            const match = /^\s*<([^<>]+)>;\s*rel="(next|prev|first|last)"\s*$/u.exec(item);
+            if (!match || relations.has(match[2])) {
+                throw new LiveFailure('unsafe-continuation', 'The provider supplied an invalid or ambiguous continuation link.');
+            }
+            relations.add(match[2]);
+            let url;
+            try {
+                url = new URL(match[1]);
+            }
+            catch {
+                throw new LiveFailure('unsafe-continuation', 'The provider supplied an invalid continuation URL.');
+            }
+            if (match[1].split('?')[0] !== `${githubApiOrigin}${base.pathname}` ||
+                url.origin !== githubApiOrigin || url.username || url.password || url.hash || url.pathname !== base.pathname) {
+                throw new LiveFailure('unsafe-continuation', 'A continuation attempted to leave the verified API host or endpoint scope.');
+            }
+            const params = [...url.searchParams];
+            if (new Set(params.map(([key]) => key)).size !== params.length ||
+                params.length !== [...base.searchParams].length ||
+                params.some(([key, value]) => key !== 'page' && base.searchParams.get(key) !== value) ||
+                !/^[1-9]\d*$/u.test(url.searchParams.get('page') ?? '')) {
+                throw new LiveFailure('unsafe-continuation', 'A continuation changed the allowlisted query scope.');
+            }
+            const page = Number(url.searchParams.get('page'));
+            if (!Number.isSafeInteger(page) || (match[2] === 'next' && page !== currentPage + 1) ||
+                (match[2] === 'prev' && page !== currentPage - 1) || (match[2] === 'first' && page !== 1)) {
+                throw new LiveFailure('unsafe-continuation', 'A continuation skipped or repeated an inventory page.');
+            }
+            if (match[2] === 'next')
+                next = url;
+            if (match[2] === 'last')
+                last = page;
+        }
+        if (last !== undefined &&
+            ((last < currentPage && !(emptyTerminalProbe && last === currentPage - 1 && next === null)) ||
+                (last > currentPage && next === null) || (last <= currentPage && next !== null))) {
+            throw new LiveFailure('incomplete-pagination', 'The next and final page links were incomplete or contradictory.');
+        }
+        return { next, last };
+    }
+    async getGitHub(url) {
+        return this.request({
+            executable: 'gh',
+            args: [
+                'api', '--method', 'GET', '--hostname', githubCliHost,
+                '--header', 'Accept: application/vnd.github+json',
+                '--header', `X-GitHub-Api-Version: ${githubApiVersion}`, '--include', url.href
+            ]
+        }, parseGitHub);
+    }
+    async azure(url) {
+        if (!this.verified || !this.azureUrls.has(url) || !url.startsWith(`${armHost}/subscriptions/`)) {
+            throw new LiveFailure('unsafe-scope', 'The ARM URL was not an explicitly bound metadata read.');
+        }
+        return this.request({
+            executable: 'az',
+            args: ['rest', '--method', 'GET', '--url', url, '--output', 'json', '--only-show-errors']
+        }, (stdout) => {
+            const value = parseJson(stdout);
+            if (isRecord(value) && (value.nextLink !== undefined || value['@odata.nextLink'] !== undefined)) {
+                throw new LiveFailure('incomplete-pagination', 'A bound ARM object unexpectedly returned a continuation; it was not followed.');
+            }
+            return value;
+        });
+    }
+    async request(command, decode) {
+        for (let attempt = 0;; attempt += 1) {
+            if (this.unavailable.has(command.executable)) {
+                throw new LiveFailure('tool-unavailable', 'The required CLI is unavailable; dependent reads were withheld.');
+            }
+            const remaining = this.remaining();
+            const timeoutMs = Math.min(assessmentLimits.requestTimeoutMs, remaining);
+            const controller = new AbortController();
+            this.active.add(controller);
+            const cancellationFailure = () => controller.signal.reason instanceof LiveFailure ? controller.signal.reason
+                : new LiveFailure('request-cancelled', 'The scoped read was cancelled.');
+            let onAbort;
+            const cancelled = new Promise((_, reject) => {
+                onAbort = () => reject(cancellationFailure());
+                controller.signal.addEventListener('abort', onAbort, { once: true });
+            });
+            let timer;
+            let completed = false;
+            try {
+                timer = setTimeout(() => {
+                    if (remaining <= assessmentLimits.requestTimeoutMs)
+                        this.expireDeadline();
+                    else
+                        controller.abort(new LiveFailure('request-timeout', 'The scoped read exceeded its request timeout.', true));
+                }, timeoutMs);
+                const running = Promise.resolve().then(() => {
+                    if (controller.signal.aborted)
+                        throw cancellationFailure();
+                    this.remaining();
+                    return this.runner.run(command, {
+                        stream: false, timeoutMs, maxOutputBytes: assessmentLimits.responseBytes, signal: controller.signal,
+                        env: {
+                            GH_HOST: githubCliHost, GH_REPO: '', GH_DEBUG: '', GH_PROMPT_DISABLED: '1',
+                            GH_NO_UPDATE_NOTIFIER: '1', GH_NO_EXTENSION_UPDATE_NOTIFIER: '1',
+                            GH_FORCE_TTY: '', NO_COLOR: '1',
+                            AZURE_CORE_COLLECT_TELEMETRY: 'false', AZURE_CORE_ONLY_SHOW_ERRORS: 'true',
+                            AZURE_LOGGING_ENABLE_LOG_FILE: 'false', AZURE_EXTENSION_USE_DYNAMIC_INSTALL: 'no'
+                        }
+                    });
+                }).finally(() => { completed = true; });
+                const result = await Promise.race([running, cancelled]);
+                if (controller.signal.aborted)
+                    throw cancellationFailure();
+                this.remaining();
+                if (result.outputLimitExceeded ||
+                    Buffer.byteLength(result.stdout) + Buffer.byteLength(result.stderr) > assessmentLimits.responseBytes) {
+                    throw new LiveFailure('size-limit', 'The provider response exceeded the byte limit; its body was discarded.');
+                }
+                if (result.timedOut)
+                    throw new LiveFailure('request-timeout', 'The scoped read exceeded its request timeout.', true);
+                if (result.aborted)
+                    throw new LiveFailure('request-cancelled', 'The scoped read was cancelled.');
+                if (result.status !== 0 || result.errorCode) {
+                    if (command.executable === 'gh' && /^HTTP\/[0-9.]+\s/u.test(result.stdout)) {
+                        parseGitHub(result.stdout);
+                    }
+                    throw httpError(result);
+                }
+                return decode(result.stdout);
+            }
+            catch (error) {
+                const failure = error instanceof LiveFailure ? error
+                    : new LiveFailure('transport-failed', 'The read-only transport failed; error details were withheld.');
+                if (failure.code === 'tool-unavailable')
+                    this.unavailable.add(command.executable);
+                if (!failure.transient || attempt >= assessmentLimits.retries)
+                    throw failure;
+                this.remaining();
+                this.diagnostic({
+                    code: 'live-retried-request', severity: 'info',
+                    source: command.executable === 'gh' ? 'github' : 'azure',
+                    message: 'A transient scoped read failed; the single permitted retry was attempted.'
+                });
+            }
+            finally {
+                if (timer !== undefined)
+                    clearTimeout(timer);
+                this.active.delete(controller);
+                controller.signal.removeEventListener('abort', onAbort);
+                if (!completed && !controller.signal.aborted) {
+                    controller.abort(new LiveFailure('request-cancelled', 'The scoped read was cancelled.'));
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=live-transport.js.map

package/dist/governance-assessment/live-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-transport.js","sourceRoot":"","sources":["../../src/governance-assessment/live-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAuD,MAAM,YAAY,CAAC;AAEnG,MAAM,aAAa,GAAG,YAAY,CAAC;AACnC,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACjD,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAC/C,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAE7C,MAAM,OAAO,WAAY,SAAQ,KAAK;IACf,IAAI;IAAoC,SAAS;IAAtE,YAAqB,IAAY,EAAE,OAAe,EAAW,SAAS,GAAG,KAAK;QAC5E,KAAK,CAAC,OAAO,CAAC,CAAC;oBADI,IAAI;yBAAoC,SAAS;IAEtE,CAAC;CACF;AAYD,SAAS,gBAAgB,CAAC,MAAc;IACtC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,WAAW,CAAC,gBAAgB,EAAE,qDAAqD,CAAC,CAAC;IACpH,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,WAAW,CAAC,QAAQ,EAAE,4DAA4D,CAAC,CAAC;IACnH,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,WAAW,CAAC,kBAAkB,EAAE,4EAA4E,CAAC,CAAC;IAC7I,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,WAAW,CAAC,YAAY,EAAE,4CAA4C,EAAE,IAAI,CAAC,CAAC;IAC7G,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,WAAW,CAAC,sBAAsB,EAAE,kDAAkD,EAAE,IAAI,CAAC,CAAC;IAC7I,OAAO,IAAI,WAAW,CAAC,YAAY,EAAE,sDAAsD,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,sDAAsD,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACzC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,0EAA0E,CAAC,CAAC;IACrI,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAC;IACpG,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,6CAA6C,CAAC,CAAC;QACxG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,6CAA6C,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,GAAG;QAAE,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACxD,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,gEAAgE,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,SAAS,CAAC,MAAqB;IACtC,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,WAAW,CAAC,kBAAkB,EAAE,iEAAiE,CAAC,CAAC;IACjJ,MAAM,IAAI,GAAG,4CAA4C,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,mEAAmE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,IAAI,IAAI;QAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,qDAAqD,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC5G,IAAI,gFAAgF,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvI,IAAI,oCAAoC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC3F,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9E,OAAO,IAAI,WAAW,CAAC,uBAAuB,EAAE,4DAA4D,EAAE,IAAI,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,IAAI,WAAW,CAAC,gBAAgB,EAAE,yEAAyE,CAAC,CAAC;AACtH,CAAC;AAED,MAAM,OAAO,aAAa;IAUL,MAAM;IACN,GAAG;IACH,KAAK;IACL,SAAS;IACT,UAAU;IAbZ,UAAU,CAAS;IACnB,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC5C,QAAQ,GAAG,KAAK,CAAC;IACR,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IACzB,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC7C,eAAe,CAA0B;IAEjD,YACmB,MAAqB,EACrB,GAAe,EACf,KAA0B,EAC1B,SAA8B,EAC9B,UAAiD;sBAJjD,MAAM;mBACN,GAAG;qBACH,KAAK;yBACL,SAAS;0BACT,UAAU;QAE3B,IAAI,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IACpC,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,GAAW;QACjB,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,eAAe;YAAE,MAAM,IAAI,CAAC,eAAe,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1G,MAAM,SAAS,GAAG,gBAAgB,CAAC,cAAc,GAAG,OAAO,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5C,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC,eAAe,KAAK,IAAI,WAAW,CAAC,UAAU,EAAE,8EAA8E,CAAC,CAAC;QACrI,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,MAAM;YAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,MAAoB,EAAE,QAA0B;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,8DAA8D,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACjC,IAAI,QAAgB,CAAC;QACrB,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,YAAY;gBAAE,QAAQ,GAAG,IAAI,CAAC;gBAAC,MAAM;YAC1C,KAAK,aAAa;gBAAE,QAAQ,GAAG,sBAAsB,CAAC;gBAAC,MAAM;YAC7D,KAAK,UAAU;gBAAE,QAAQ,GAAG,GAAG,IAAI,WAAW,CAAC;gBAAC,MAAM;YACtD,KAAK,SAAS;gBACZ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;oBACpF,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,yDAAyD,CAAC,CAAC;gBACnG,CAAC;gBACD,QAAQ,GAAG,GAAG,IAAI,aAAa,QAAQ,EAAE,CAAC;gBAC1C,MAAM;YACR,KAAK,QAAQ,CAAC;YACd,KAAK,YAAY,CAAC;YAClB,KAAK,cAAc;gBACjB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxE,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,sDAAsD,CAAC,CAAC;gBAChG,CAAC;gBACD,QAAQ,GAAG,MAAM,KAAK,cAAc;oBAClC,CAAC,CAAC,GAAG,IAAI,mBAAmB,kBAAkB,CAAC,QAAQ,CAAC,EAAE;oBAC1D,CAAC,CAAC,GAAG,IAAI,aAAa,kBAAkB,CAAC,QAAQ,CAAC,GAAG,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACtG,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7D,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,sDAAsD,CAAC,CAAC;gBACpG,CAAC;gBACD,QAAQ,GAAG,GAAG,IAAI,YAAY,QAAQ,aAAa,CAAC;gBACpD,MAAM;YACR,KAAK,cAAc;gBAAE,QAAQ,GAAG,GAAG,IAAI,eAAe,CAAC;gBAAC,MAAM;YAC9D,KAAK,sBAAsB;gBACzB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAChF,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,iDAAiD,CAAC,CAAC;gBAC3F,CAAC;gBACD,QAAQ,GAAG,GAAG,IAAI,iBAAiB,kBAAkB,CAAC,QAAQ,CAAC,6BAA6B,CAAC;gBAC7F,MAAM;YACR,KAAK,WAAW;gBAAE,QAAQ,GAAG,GAAG,IAAI,oBAAoB,CAAC;gBAAC,MAAM;YAChE,KAAK,QAAQ,CAAC;YACd,KAAK,cAAc,CAAC;YACpB,KAAK,mBAAmB,CAAC;YACzB,KAAK,gBAAgB;gBACnB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE;oBAC/E,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC;oBAC9D,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;oBACpE,OAAO,MAAM,CAAC,sBAAsB,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC;oBACxH,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,oEAAoE,CAAC,CAAC;gBAC9G,CAAC;gBACD,QAAQ,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,KAAK,2BAA2B,MAAM,CAAC,QAAQ,EAAE;oBACpG,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,KAAK,0BAA0B,MAAM,CAAC,OAAO,EAAE;wBAC/F,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,KAAK,oCAAoC,MAAM,CAAC,sBAAsB,EAAE;4BAC1H,CAAC,CAAC,SAAS,UAAU,CAAC,KAAK,wBAAwB,CAAC;gBAC1D,MAAM;YACR,SAAS,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,uDAAuD,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACpG,IAAI,MAAM,KAAK,QAAQ;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,MAAM,KAAK,mBAAmB;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACnG,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,QAA0B;QAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,wDAAwD,CAAC,CAAC;QAC3G,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,KAAK,CACT,MAAoB,EACpB,KAAoB,EACpB,SAAwD,EACxD,QAA0B;QAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,aAAiC,CAAC;QACtC,IAAI,YAAgC,CAAC;QACrC,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,IAAI,GAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,gBAAgB,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC;YACjC,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,KAAK,IAAI,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI;gBAC7F,SAAS,CAAC,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,iBAAiB,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;gBACpF,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,6FAA6F,CAAC,CAAC;YAChJ,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBACzD,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,kDAAkD,CAAC,CAAC;YAC5F,CAAC;YACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtD,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,yDAAyD,CAAC,CAAC;gBACnG,CAAC;gBACD,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;oBAC3D,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,wDAAwD,CAAC,CAAC;gBAC3G,CAAC;gBACD,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC9B,IAAI,aAAa,GAAG,gBAAgB,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC;oBACzD,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,qDAAqD,CAAC,CAAC;gBAC7F,CAAC;YACH,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,+CAA+C,CAAC,CAAC;gBAClG,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACzB,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC7D,IAAI,KAAK,GAAG,gBAAgB,CAAC,aAAa,EAAE,CAAC;oBAC3C,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,wDAAwD,CAAC,CAAC;gBAChG,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;gBAC/D,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,kDAAkD,CAAC,CAAC;YACrG,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;gBACzE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;YAC3E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;oBACxD,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,gEAAgE,CAAC,CAAC;gBACnH,CAAC;gBACD,YAAY,GAAG,IAAI,CAAC;gBACpB,IAAI,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC;oBACrC,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,gEAAgE,CAAC,CAAC;gBACxG,CAAC;YACH,CAAC;YACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,aAAa,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,YAAY,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC;gBACrG,IAAI,IAAI,GAAG,YAAY,IAAI,CAAC,IAAI,GAAG,YAAY,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBAC9G,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,yEAAyE,CAAC,CAAC;gBAC5H,CAAC;YACH,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,EAAE,CAAC;oBAC1F,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,4DAA4D,CAAC,CAAC;gBAC/G,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,aAAa,GAAG,KAAK,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBAChC,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;wBAClC,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,sDAAsD,CAAC,CAAC;oBACzG,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,IAAI,IAAI,KAAK,YAAY;oBAAE,OAAO,IAAI,CAAC;gBACpE,kFAAkF;gBAClF,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxB,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;gBACnD,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,6DAA6D,CAAC,CAAC;IACrG,CAAC;IAEO,QAAQ,CACd,IAAY,EAAE,IAAS,EAAE,WAAmB,EAAE,kBAA2B;QAEzE,IAAI,IAAI,GAAe,IAAI,CAAC;QAC5B,IAAI,IAAwB,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/E,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,kEAAkE,CAAC,CAAC;YACnH,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YACzB,IAAI,GAAQ,CAAC;YACb,IAAI,CAAC;gBAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBACvC,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,oDAAoD,CAAC,CAAC;YACrG,CAAC;YACD,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,eAAe,GAAG,IAAI,CAAC,QAAQ,EAAE;gBAChE,GAAG,CAAC,MAAM,KAAK,eAAe,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjH,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,4EAA4E,CAAC,CAAC;YAC7H,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;YACrC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;gBAC1D,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM;gBAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;gBACrF,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,qDAAqD,CAAC,CAAC;YACtG,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW,GAAG,CAAC,CAAC;gBAChF,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC9F,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,uDAAuD,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;gBAAE,IAAI,GAAG,GAAG,CAAC;YACpC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;gBAAE,IAAI,GAAG,IAAI,CAAC;QACvC,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAClB,CAAC,CAAC,IAAI,GAAG,WAAW,IAAI,CAAC,CAAC,kBAAkB,IAAI,IAAI,KAAK,WAAW,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC;gBAC1F,CAAC,IAAI,GAAG,WAAW,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,iEAAiE,CAAC,CAAC;QACpH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,GAAQ;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE;gBACJ,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa;gBACrD,UAAU,EAAE,qCAAqC;gBACjD,UAAU,EAAE,yBAAyB,gBAAgB,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI;aAC/E;SACF,EAAE,WAAW,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,OAAO,iBAAiB,CAAC,EAAE,CAAC;YAC/F,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,wDAAwD,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,oBAAoB,CAAC;SAC1F,EAAE,CAAC,MAAM,EAAE,EAAE;YACZ,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,iBAAiB,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;gBAChG,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,+EAA+E,CAAC,CAAC;YAClI,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,OAAwB,EAAE,MAA6B;QAC9E,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,iEAAiE,CAAC,CAAC;YAC/G,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;YACzE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC5B,MAAM,mBAAmB,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,YAAY,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM;gBAC1G,CAAC,CAAC,IAAI,WAAW,CAAC,mBAAmB,EAAE,gCAAgC,CAAC,CAAC;YAC3E,IAAI,OAAmB,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACjD,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC;gBAC9C,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC;YACH,IAAI,KAAgD,CAAC;YACrD,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,CAAC;gBACH,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,IAAI,SAAS,IAAI,gBAAgB,CAAC,gBAAgB;wBAAE,IAAI,CAAC,cAAc,EAAE,CAAC;;wBACrE,UAAU,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,iBAAiB,EAAE,+CAA+C,EAAE,IAAI,CAAC,CAAC,CAAC;gBACnH,CAAC,EAAE,SAAS,CAAC,CAAC;gBACd,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;oBAC1C,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;wBAAE,MAAM,mBAAmB,EAAE,CAAC;oBAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;oBACjB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE;wBAC9B,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM;wBACnG,GAAG,EAAE;4BACH,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,kBAAkB,EAAE,GAAG;4BAC1E,qBAAqB,EAAE,GAAG,EAAE,+BAA+B,EAAE,GAAG;4BAChE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG;4BAC/B,4BAA4B,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM;4BAC1E,6BAA6B,EAAE,OAAO,EAAE,mCAAmC,EAAE,IAAI;yBAClF;qBACF,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;gBACxD,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,mBAAmB,EAAE,CAAC;gBAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjB,IAAI,MAAM,CAAC,mBAAmB;oBAC1B,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAAC,aAAa,EAAE,CAAC;oBACzG,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,wEAAwE,CAAC,CAAC;gBAChH,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ;oBAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,+CAA+C,EAAE,IAAI,CAAC,CAAC;gBACrH,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,gCAAgC,CAAC,CAAC;gBACjG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBAC5C,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC3E,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAC7B,CAAC;oBACD,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC1B,CAAC;gBACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK;oBAClD,CAAC,CAAC,IAAI,WAAW,CAAC,kBAAkB,EAAE,8DAA8D,CAAC,CAAC;gBACxG,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB;oBAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAClF,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,IAAI,gBAAgB,CAAC,OAAO;oBAAE,MAAM,OAAO,CAAC;gBAC7E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjB,IAAI,CAAC,UAAU,CAAC;oBACd,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM;oBAC9C,MAAM,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;oBACxD,OAAO,EAAE,2EAA2E;iBACrF,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,IAAI,KAAK,KAAK,SAAS;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC7C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC/B,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAQ,CAAC,CAAC;gBACzD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC7C,UAAU,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,mBAAmB,EAAE,gCAAgC,CAAC,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/governance-assessment/live.d.ts

@@ -0,0 +1,2 @@
+import { type LiveAssessmentOptions, type LiveAssessmentResult, type LiveAssessmentScope } from './types.js';
+export declare function collectLiveAssessment(scope: LiveAssessmentScope, options?: LiveAssessmentOptions): Promise<LiveAssessmentResult>;