@msn-control/liftoff 0.10.4 → 0.11.2

package/dist/domain/governance/activation/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../../../src/domain/governance/activation/capabilities.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAW,CAAC;AACjE,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAW,CAAC;AACzE,MAAM,WAAW,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,sCAAsC,EAAW,CAAC;AACzH,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,sFAAsF,EAAW,CAAC;AAExK,MAAM,CAAC,MAAM,iBAAiB,GAA+C;IAC3E,YAAY,EAAE,KAAK;IACnB,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;IACtB,SAAS,EAAE,OAAO;IAClB,MAAM,EAAE,OAAO;IACf,kBAAkB,EAAE,OAAO;IAC3B,qBAAqB,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,oGAAoG,EAAE;IACpJ,kBAAkB,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,mFAAmF,EAAE;IAChI,gBAAgB,EAAE,WAAW;IAC7B,qBAAqB,EAAE,WAAW;IAClC,uBAAuB,EAAE,WAAW;IACpC,iBAAiB,EAAE,WAAW;IAC9B,cAAc,EAAE,WAAW;IAC3B,uBAAuB,EAAE,WAAW;IACpC,wBAAwB,EAAE,WAAW;IACrC,cAAc,EAAE,OAAO;IACvB,wBAAwB,EAAE,WAAW;IACrC,uBAAuB,EAAE,WAAW;IACpC,WAAW,EAAE,WAAW;IACxB,mBAAmB,EAAE,WAAW;IAChC,sBAAsB,EAAE,WAAW;IACnC,iBAAiB,EAAE,WAAW;IAC9B,sBAAsB,EAAE,WAAW;IACnC,kBAAkB,EAAE,QAAQ;IAC5B,eAAe,EAAE,QAAQ;IACzB,0BAA0B,EAAE,OAAO;CACpC,CAAC"}

package/dist/domain/governance/activation/evidence.d.ts

@@ -0,0 +1,63 @@
+import type { ActivationIdentity, EvidenceHeader, EvidenceTransitionIdentity, LiveReadbackProof, LiveReadbackProvider, ManagedPhaseGraph, PhaseEvidenceRecord, PhaseGraphNode, PhaseId, EvidenceReference, SavedTransitionPlan } from './types.js';
+export interface PhaseEvidenceSource {
+    evidence: readonly PhaseEvidenceRecord[];
+    contexts: Record<PhaseId, EvidenceFreshnessContext>;
+}
+export declare function rulesetSourceDigestFromEvidence(inspection: PhaseEvidenceSource): string | null;
+export declare function latestRecordWithPayload(inspection: PhaseEvidenceSource, phaseId: PhaseId): PhaseEvidenceRecord | null;
+export interface EvidenceValidationIssue {
+    evidenceId?: string;
+    field: string;
+    expected?: string | number | boolean;
+    actual?: string | number | boolean;
+    message: string;
+}
+export interface EvidenceFreshnessContext {
+    repositoryId: string;
+    identity: ActivationIdentity;
+    phaseGraphHash: string;
+    phaseId: PhaseId;
+    phaseContractDigest: string;
+    baselineSha: string;
+    inputDigest: string;
+    transition: EvidenceTransitionIdentity;
+    remoteBindingDigest?: string;
+    evidenceReferences?: readonly EvidenceReference[];
+    reviewedPlans?: readonly SavedTransitionPlan[];
+    workflowSpecDigest?: string;
+    publicationDestination?: string;
+    now?: Date;
+    liveReadbackProviders?: readonly LiveReadbackProvider[];
+}
+export interface ValidatedPhaseEvidenceRecord {
+    evidenceId: string;
+    header: EvidenceHeader;
+    headerDigest: string;
+    producedAtEpochMs: number;
+    liveReadback: readonly LiveReadbackProof[];
+    payload?: unknown;
+}
+export interface EvidenceSelectionResult {
+    selected: ValidatedPhaseEvidenceRecord | null;
+    issues: readonly EvidenceValidationIssue[];
+    ignoredOlderContradictions: readonly string[];
+    historicalIssues?: readonly EvidenceValidationIssue[];
+}
+export declare function evidenceHeaderDigest(header: EvidenceHeader): string;
+export declare function evidenceBodyDigest(payload: unknown, liveReadback?: readonly LiveReadbackProof[]): string;
+export declare function validateEvidenceFreshness(record: PhaseEvidenceRecord, context: EvidenceFreshnessContext): {
+    valid: true;
+    record: ValidatedPhaseEvidenceRecord;
+} | {
+    valid: false;
+    issues: readonly EvidenceValidationIssue[];
+};
+export declare function selectLatestPhaseEvidence(records: readonly PhaseEvidenceRecord[], context: EvidenceFreshnessContext): EvidenceSelectionResult;
+export declare function evidenceContextForPhase(phaseId: PhaseId, overrides?: Partial<Omit<EvidenceFreshnessContext, 'phaseId' | 'phaseContractDigest' | 'transition'>> & {
+    transitionDigest?: string;
+}): EvidenceFreshnessContext;
+export declare function requiredLiveReadbackProviders(node: PhaseGraphNode): readonly LiveReadbackProvider[];
+export declare function phaseRequiresLiveReadback(node: PhaseGraphNode): boolean;
+export declare function phaseNode(graph: ManagedPhaseGraph, phaseId: PhaseId): PhaseGraphNode;
+export declare function canonicalEvidenceContextForPhase(phaseId: PhaseId): EvidenceFreshnessContext;
+export declare function emptyEvidenceRecordsByPhase(): Record<PhaseId, readonly PhaseEvidenceRecord[]>;

package/dist/domain/governance/activation/evidence.js

@@ -0,0 +1,444 @@
+import { canonicalPhaseContractDigests, canonicalPhaseGraph, canonicalPhaseGraphHash, currentActivationIdentity } from './graph.js';
+import { canonicalSha256, isRecord } from './canonical-json.js';
+import { phaseIds } from './types.js';
+import { validateEvidenceHeader, validateLiveReadbackProof, validateSavedTransitionPlan } from './validators.js';
+import { assertPlanOperationsAllowed, planDigestFor } from './operations.js';
+export function rulesetSourceDigestFromEvidence(inspection) {
+    const record = latestRecordWithPayload(inspection, 'workflow-source-ready');
+    if (!record || !isRecord(record.payload) || record.payload.kind !== 'workflow-source-ready.v1')
+        return null;
+    const digest = record.payload.rulesetSourceDigest;
+    return typeof digest === 'string' && /^[a-f0-9]{64}$/u.test(digest) ? digest : null;
+}
+export function latestRecordWithPayload(inspection, phaseId) {
+    const records = inspection.evidence.filter((record) => record.header.phaseId === phaseId);
+    const selection = selectLatestPhaseEvidence(records, inspection.contexts[phaseId]);
+    if (!selection.selected)
+        return null;
+    return {
+        evidenceId: selection.selected.evidenceId,
+        header: selection.selected.header,
+        liveReadback: selection.selected.liveReadback,
+        payload: selection.selected.payload
+    };
+}
+const identityFields = [
+    'liftoffVersion',
+    'manifestArtifactVersion',
+    'policyVersion',
+    'activationContractVersion',
+    'phaseGraphSchemaVersion',
+    'phaseGraphHash',
+    'activationStateSchemaVersion',
+    'evidenceHeaderSchemaVersion',
+    'approvalEnvelopeSchemaVersion',
+    'supersessionSchemaVersion',
+    'credentialPolicySchemaVersion'
+];
+export function evidenceHeaderDigest(header) {
+    return canonicalSha256(header);
+}
+export function evidenceBodyDigest(payload, liveReadback = []) {
+    const normalized = [...liveReadback].map((proof) => validateLiveReadbackProof(proof))
+        .sort((a, b) => canonicalSha256(a).localeCompare(canonicalSha256(b), 'en'));
+    return canonicalSha256({ payload: payload ?? null, liveReadback: normalized });
+}
+function validatePhasePayload(record) {
+    if (record.header.result === 'failed' || record.header.result === 'inapplicable')
+        return [];
+    const payload = record.payload;
+    if (typeof payload !== 'object' || payload === null || Array.isArray(payload)) {
+        return [`${record.header.phaseId} requires a phase-specific evidence payload.`];
+    }
+    const value = payload;
+    const expected = record.header.phaseId === 'phase-0-complete' ? 'phase-0-discovery.v1' : `${record.header.phaseId}.v1`;
+    const issues = value.kind === expected ? [] : [`${record.header.phaseId} payload kind must be ${expected}.`];
+    if (record.header.phaseId === 'seed-verified') {
+        if (!Array.isArray(value.checks) || value.checks.length === 0 || value.checks.some((check) => typeof check !== 'object' || check === null || !['passed', 'inapplicable'].includes(String(check.status)))) {
+            issues.push('Local baseline evidence requires successful applicable check outcomes.');
+        }
+    }
+    if (record.header.phaseId === 'phase-0-complete') {
+        if (!Array.isArray(value.facts) || !['repository.id', 'repository.nameWithOwner', 'repository.defaultBranch']
+            .every((id) => value.facts.some((fact) => fact.id === id && typeof fact.value === 'string' && fact.value))) {
+            issues.push('Phase 0 requires independently observed repository identity facts.');
+        }
+    }
+    if (['committed', 'pushed'].includes(record.header.phaseId) &&
+        (typeof value.head !== 'string' || !/^[a-f0-9]{40,64}$/.test(value.head))) {
+        issues.push('Publication evidence must record the actual Git HEAD separately from the SHA-256 baseline.');
+    }
+    if (record.header.phaseId === 'runner-ready') {
+        if (typeof value.organization !== 'string' || !Number.isInteger(value.runnerId) || Number(value.runnerId) <= 0 ||
+            !(value.groupId === null || Number.isInteger(value.groupId)) ||
+            !(value.networkConfigurationId === null || typeof value.networkConfigurationId === 'string')) {
+            issues.push('Runner proof requires an explicit organization, runner ID, group, and network-configuration binding.');
+        }
+        if (!(record.liveReadback ?? []).some((proof) => proof.provider === 'github' &&
+            (proof.resourceId === String(value.runnerId) || proof.resourceId.endsWith(`/hosted-runners/${value.runnerId}`)))) {
+            issues.push('Runner payload ID has no matching independent runner resource readback.');
+        }
+    }
+    if (record.header.phaseId === 'state-path-selected' && !['existing-private', 'bootstrap-local'].includes(String(value.statePath))) {
+        issues.push('State-path selection requires an explicit applicable backend path.');
+    }
+    if (record.header.phaseId === 'workflow-source-ready' && (typeof value.rulesetSourceDigest !== 'string' || !/^[a-f0-9]{64}$/.test(value.rulesetSourceDigest))) {
+        issues.push('Workflow-source evidence must bind the reviewed ruleset source digest.');
+    }
+    if (record.header.phaseId === 'credential-ready' && (typeof value.policyDigest !== 'string' || !/^[a-f0-9]{64}$/.test(value.policyDigest))) {
+        issues.push('Credential evidence must bind the public credential policy and independent readback.');
+    }
+    const scope = typeof value.assessmentScope === 'object' && value.assessmentScope !== null
+        ? value.assessmentScope : undefined;
+    if (scope?.azure !== undefined) {
+        if (!Array.isArray(scope.azure))
+            issues.push('Azure evidence scope must be an explicit resource inventory.');
+        else
+            for (const resource of scope.azure) {
+                if (typeof resource !== 'object' || resource === null ||
+                    typeof resource.resourceId !== 'string' || typeof resource.resourceType !== 'string' ||
+                    !['dev', 'staging', 'prod'].includes(resource.environment) || typeof resource.role !== 'string' ||
+                    !(record.liveReadback ?? []).some((proof) => proof.provider === 'azure' && proof.resourceId === resource.resourceId && proof.resourceType === resource.resourceType)) {
+                    issues.push('Azure payload scope requires an explicit environment/role and matching resource readback.');
+                }
+            }
+    }
+    return issues;
+}
+function issue(field, message, expected, actual, evidenceId) {
+    return { field, message, expected, actual, evidenceId };
+}
+function compareIdentity(actual, expected, evidenceId) {
+    const issues = [];
+    for (const field of identityFields) {
+        if (actual[field] !== expected[field]) {
+            issues.push(issue(`identity.${field}`, `Evidence activation identity field ${field} is stale or mismatched.`, expected[field], actual[field], evidenceId));
+        }
+    }
+    return issues;
+}
+function compareTransition(actual, expected, path, evidenceId) {
+    const issues = [];
+    if (actual.phaseId !== expected.phaseId) {
+        issues.push(issue(`${path}.phaseId`, 'Evidence transition phase does not match the current transition.', expected.phaseId, actual.phaseId, evidenceId));
+    }
+    if (actual.baselineSha !== expected.baselineSha) {
+        issues.push(issue(`${path}.baselineSha`, 'Evidence transition baseline SHA does not match the current transition.', expected.baselineSha, actual.baselineSha, evidenceId));
+    }
+    if (actual.inputDigest !== expected.inputDigest) {
+        issues.push(issue(`${path}.inputDigest`, 'Evidence transition input digest does not match the current transition.', expected.inputDigest, actual.inputDigest, evidenceId));
+    }
+    if (actual.transitionDigest !== expected.transitionDigest) {
+        issues.push(issue(`${path}.transitionDigest`, 'Evidence transition digest does not match the current transition.', expected.transitionDigest, actual.transitionDigest, evidenceId));
+    }
+    return issues;
+}
+export function validateEvidenceFreshness(record, context) {
+    const issues = [];
+    let header;
+    const inspectedAt = context.now ?? new Date();
+    try {
+        header = validateEvidenceHeader(record.header);
+    }
+    catch (error) {
+        return {
+            valid: false,
+            issues: [issue('schema', error instanceof Error ? error.message : String(error), undefined, undefined, record.evidenceId)]
+        };
+    }
+    try {
+        if (header.bodyDigest !== evidenceBodyDigest(record.payload, record.liveReadback)) {
+            issues.push(issue('bodyDigest', 'Evidence payload or normalized readback body commitment does not match.', undefined, undefined, record.evidenceId));
+        }
+    }
+    catch (error) {
+        issues.push(issue('bodyDigest', error instanceof Error ? error.message : String(error), undefined, undefined, record.evidenceId));
+    }
+    issues.push(...validatePhasePayload(record).map((message) => issue('payload', message, undefined, undefined, record.evidenceId)));
+    if (header.phaseId === 'seed-archived' && typeof record.payload === 'object' && record.payload !== null) {
+        const payload = record.payload;
+        if ((context.workflowSpecDigest !== undefined || payload.synchronizedSpecDigest !== undefined) &&
+            payload.synchronizedSpecDigest !== context.workflowSpecDigest) {
+            issues.push(issue('payload.synchronizedSpecDigest', 'The archived seed receipt does not bind the current synchronized main capability.', undefined, undefined, record.evidenceId));
+        }
+    }
+    if (header.remoteBindingDigest !== undefined && header.remoteBindingDigest !== context.remoteBindingDigest) {
+        issues.push(issue('remoteBindingDigest', 'Evidence verified remote binding does not match the current binding.', context.remoteBindingDigest, header.remoteBindingDigest, record.evidenceId));
+    }
+    if (context.evidenceReferences && !['seed-valid', 'seed-verified', 'seed-archived', 'committed', 'pushed'].includes(header.phaseId) &&
+        (!context.remoteBindingDigest || header.remoteBindingDigest !== context.remoteBindingDigest)) {
+        issues.push(issue('remoteBindingDigest', 'Remote evidence requires a matching verified binding separate from the immutable local anchor.', undefined, undefined, record.evidenceId));
+    }
+    if (context.evidenceReferences && !context.evidenceReferences.some((reference) => reference.evidenceId === record.evidenceId && reference.headerDigest === evidenceHeaderDigest(header) &&
+        reference.phaseId === header.phaseId && reference.result === header.result)) {
+        issues.push(issue('reference', 'Evidence body/header is not bound by an authoritative state reference.', undefined, undefined, record.evidenceId));
+    }
+    if (context.reviewedPlans) {
+        const payload = typeof record.payload === 'object' && record.payload !== null ? record.payload : {};
+        const saved = context.reviewedPlans.find((plan) => plan.planDigest === payload.planDigest &&
+            canonicalSha256(plan) === payload.savedPlanDigest);
+        if (!saved) {
+            issues.push(issue('plan', 'Evidence does not reference an independently loaded reviewed transition plan.', undefined, undefined, record.evidenceId));
+        }
+        else {
+            let plan;
+            try {
+                plan = validateSavedTransitionPlan(saved);
+                const phase = phaseNode(canonicalPhaseGraph, header.phaseId);
+                assertPlanOperationsAllowed(plan, phase);
+                const approvalPlanDigest = canonicalSha256({
+                    phaseId: phase.id, gateKind: phase.approvalGate.kind, transitionDigest: plan.transitionDigest,
+                    allowedMutations: phase.allowedMutations
+                });
+                if (plan.planDigest !== planDigestFor({ phase, transitionDigest: plan.transitionDigest, approvalPlanDigest, operations: plan.operations })) {
+                    throw new Error('Reviewed transition plan digest does not commit its actual operations.');
+                }
+            }
+            catch (error) {
+                return { valid: false, issues: [issue('plan', error instanceof Error ? error.message : String(error), undefined, undefined, record.evidenceId)] };
+            }
+            if (plan.phaseId !== header.phaseId || plan.baselineDigest !== context.baselineSha ||
+                plan.inputDigest !== context.inputDigest || plan.transitionDigest !== header.transition.transitionDigest ||
+                Date.parse(header.producedAt) < Date.parse(plan.createdAt) || Date.parse(header.producedAt) >= Date.parse(plan.expiresAt)) {
+                issues.push(issue('plan', 'Evidence phase, current inputs, or timing differ from the reviewed transition plan.', undefined, undefined, record.evidenceId));
+            }
+            if (header.phaseId === 'seed-verified') {
+                const expected = plan.operations.find((operation) => operation.actionId === 'openspec.seed.baseline-verify')?.inputs.checks;
+                const actual = payload.checks;
+                if (!Array.isArray(expected) || !Array.isArray(actual) || expected.length !== actual.length ||
+                    expected.some((check) => !actual.some((outcome) => outcome.id === check.id &&
+                        outcome.taskId === check.taskId && outcome.status === (check.applicable ? 'passed' : 'inapplicable')))) {
+                    issues.push(issue('payload.checks', 'Baseline outcome must cover every planned applicable check exactly once.', undefined, undefined, record.evidenceId));
+                }
+            }
+            for (const proof of record.liveReadback ?? []) {
+                if (Date.parse(proof.observedAt) < Date.parse(plan.createdAt)) {
+                    issues.push(issue('liveReadback.observedAt', 'Independent readback predates the reviewed transition plan.', undefined, undefined, record.evidenceId));
+                }
+                const operations = plan.operations.filter((operation) => operation.remote &&
+                    (proof.provider === 'github' ? operation.adapter === 'github' || operation.adapter === 'git' : operation.adapter === 'azure-opentofu'));
+                if (!operations.some((operation) => {
+                    const destination = operation.destination;
+                    const scopeMatches = destination.identity === proof.resourceId ||
+                        destination.repository === proof.resourceId ||
+                        (destination.repository && (proof.resourceId.startsWith(`/repos/${destination.repository}/`) ||
+                            proof.resourceId.startsWith(`https://api.github.com/repos/${destination.repository}/`))) ||
+                        (destination.subscriptionId && proof.resourceId.toLowerCase().startsWith(`/subscriptions/${destination.subscriptionId.toLowerCase()}/`));
+                    return scopeMatches && (operation.inputs.sourceDigest === undefined || operation.inputs.sourceDigest === proof.sourceDigest);
+                })) {
+                    issues.push(issue('liveReadback.destination', 'Readback resource or source is outside the reviewed plan destinations.', undefined, undefined, record.evidenceId));
+                }
+            }
+        }
+    }
+    if (header.repositoryId !== context.repositoryId) {
+        issues.push(issue('repositoryId', 'Evidence repository ID does not match the active repository.', context.repositoryId, header.repositoryId, record.evidenceId));
+    }
+    issues.push(...compareIdentity(header.identity, context.identity, record.evidenceId));
+    if (header.phaseGraphHash !== context.phaseGraphHash) {
+        issues.push(issue('phaseGraphHash', 'Evidence phase graph hash is stale or mismatched.', context.phaseGraphHash, header.phaseGraphHash, record.evidenceId));
+    }
+    if (header.phaseId !== context.phaseId) {
+        issues.push(issue('phaseId', 'Evidence phase ID does not match the requested phase.', context.phaseId, header.phaseId, record.evidenceId));
+    }
+    if (header.phaseContractDigest !== context.phaseContractDigest) {
+        issues.push(issue('phaseContractDigest', 'Evidence phase contract digest is stale or mismatched.', context.phaseContractDigest, header.phaseContractDigest, record.evidenceId));
+    }
+    if (header.baselineSha !== context.baselineSha) {
+        issues.push(issue('baselineSha', 'Evidence baseline SHA is stale or mismatched.', context.baselineSha, header.baselineSha, record.evidenceId));
+    }
+    if (header.inputDigest !== context.inputDigest) {
+        issues.push(issue('inputDigest', 'Evidence phase input digest is stale or mismatched.', context.inputDigest, header.inputDigest, record.evidenceId));
+    }
+    issues.push(...compareTransition(header.transition, context.transition, 'transition', record.evidenceId));
+    const producedAtEpochMs = Date.parse(header.producedAt);
+    if (Number.isNaN(producedAtEpochMs)) {
+        issues.push(issue('producedAt', 'Evidence timestamp is not a valid ISO timestamp.', undefined, header.producedAt, record.evidenceId));
+    }
+    else if (producedAtEpochMs > inspectedAt.getTime()) {
+        issues.push(issue('producedAt', 'Evidence timestamp is in the future.', inspectedAt.toISOString(), header.producedAt, record.evidenceId));
+    }
+    const requiredProviders = ['failed', 'inapplicable'].includes(header.result) ? [] : [...new Set([
+            ...phaseNode(canonicalPhaseGraph, context.phaseId).evidence.liveReadbackProviders,
+            ...(context.liveReadbackProviders ?? [])
+        ])];
+    const liveReadback = record.liveReadback ?? [];
+    const validatedProofs = [];
+    for (const proof of liveReadback) {
+        try {
+            validatedProofs.push(validateLiveReadbackProof(proof));
+        }
+        catch (error) {
+            issues.push(issue('liveReadback', error instanceof Error ? error.message : String(error), undefined, undefined, record.evidenceId));
+        }
+        for (const proof of validatedProofs) {
+            if (Date.parse(proof.observedAt) > producedAtEpochMs ||
+                Date.parse(proof.observedAt) > inspectedAt.getTime() ||
+                producedAtEpochMs - Date.parse(proof.observedAt) > 15 * 60 * 1000) {
+                issues.push(issue('liveReadback.observedAt', 'Independent readback must occur within the transition interval and not after the receipt.', undefined, undefined, record.evidenceId));
+            }
+            if (!proof.matches || proof.sourceDigest !== proof.readbackDigest) {
+                issues.push(issue('liveReadback.matches', 'Readback must independently match its normalized reviewed source digest.', undefined, undefined, record.evidenceId));
+            }
+            if (proof.repositoryId !== header.repositoryId || proof.phaseId !== header.phaseId ||
+                proof.baselineSha !== header.baselineSha || proof.inputDigest !== header.inputDigest ||
+                proof.phaseGraphHash !== header.phaseGraphHash) {
+                issues.push(issue('liveReadback.binding', 'Every readback must bind this repository, phase, and current inputs.', undefined, undefined, record.evidenceId));
+            }
+            issues.push(...compareIdentity(proof.identity, header.identity, record.evidenceId));
+            issues.push(...compareTransition(proof.transition, header.transition, 'liveReadback.transition', record.evidenceId));
+        }
+    }
+    for (const provider of requiredProviders) {
+        const matchingProof = validatedProofs.find((proof) => proof.provider === provider);
+        if (!matchingProof) {
+            issues.push(issue('liveReadback', `Evidence for ${context.phaseId} requires ${provider} live readback proof.`, provider, undefined, record.evidenceId));
+            continue;
+        }
+        if (matchingProof.repositoryId !== header.repositoryId) {
+            issues.push(issue('liveReadback.repositoryId', 'Live readback repository ID must match evidence.', header.repositoryId, matchingProof.repositoryId, record.evidenceId));
+        }
+        issues.push(...compareIdentity(matchingProof.identity, header.identity, record.evidenceId).map((entry) => ({
+            ...entry,
+            field: `liveReadback.${entry.field}`
+        })));
+        if (matchingProof.phaseGraphHash !== header.phaseGraphHash) {
+            issues.push(issue('liveReadback.phaseGraphHash', 'Live readback graph hash must match evidence.', header.phaseGraphHash, matchingProof.phaseGraphHash, record.evidenceId));
+        }
+        if (matchingProof.phaseId !== header.phaseId) {
+            issues.push(issue('liveReadback.phaseId', 'Live readback phase must match evidence.', header.phaseId, matchingProof.phaseId, record.evidenceId));
+        }
+        if (matchingProof.baselineSha !== header.baselineSha) {
+            issues.push(issue('liveReadback.baselineSha', 'Live readback baseline must match evidence.', header.baselineSha, matchingProof.baselineSha, record.evidenceId));
+        }
+        if (matchingProof.inputDigest !== header.inputDigest) {
+            issues.push(issue('liveReadback.inputDigest', 'Live readback input digest must match evidence.', header.inputDigest, matchingProof.inputDigest, record.evidenceId));
+        }
+        issues.push(...compareTransition(matchingProof.transition, header.transition, 'liveReadback.transition', record.evidenceId));
+        if (!matchingProof.matches) {
+            issues.push(issue('liveReadback.matches', 'Live readback must match the reviewed source or plan.', true, false, record.evidenceId));
+        }
+    }
+    if (issues.length > 0 || Number.isNaN(producedAtEpochMs)) {
+        return { valid: false, issues };
+    }
+    return {
+        valid: true,
+        record: {
+            evidenceId: record.evidenceId,
+            header,
+            headerDigest: evidenceHeaderDigest(header),
+            producedAtEpochMs,
+            liveReadback: validatedProofs,
+            payload: record.payload
+        }
+    };
+}
+function sortEvidence(left, right) {
+    if (left.producedAtEpochMs !== right.producedAtEpochMs) {
+        return right.producedAtEpochMs - left.producedAtEpochMs;
+    }
+    const evidenceId = right.evidenceId.localeCompare(left.evidenceId);
+    if (evidenceId !== 0) {
+        return evidenceId;
+    }
+    return right.headerDigest.localeCompare(left.headerDigest);
+}
+export function selectLatestPhaseEvidence(records, context) {
+    const issues = [];
+    const validRecords = [];
+    const seen = new Set();
+    for (const record of records) {
+        const validation = validateEvidenceFreshness(record, context);
+        if (!validation.valid) {
+            issues.push(...validation.issues);
+            continue;
+        }
+        const duplicateKey = `${validation.record.evidenceId}\0${validation.record.headerDigest}`;
+        if (seen.has(duplicateKey)) {
+            continue;
+        }
+        seen.add(duplicateKey);
+        validRecords.push(validation.record);
+    }
+    if (validRecords.length === 0) {
+        return { selected: null, issues, ignoredOlderContradictions: [] };
+    }
+    validRecords.sort(sortEvidence);
+    const latestTimestamp = validRecords[0].producedAtEpochMs;
+    const latestTies = validRecords.filter((record) => record.producedAtEpochMs === latestTimestamp);
+    const latestResults = new Set(latestTies.map((record) => record.header.result));
+    if (latestResults.size > 1 || new Set(latestTies.map((record) => record.header.bodyDigest)).size > 1) {
+        return {
+            selected: null,
+            issues: [
+                ...issues,
+                issue('producedAt', `Latest evidence for ${context.phaseId} has a contradictory deterministic tie at ${latestTies[0].header.producedAt}.`, undefined, Array.from(latestResults).sort().join(','))
+            ],
+            ignoredOlderContradictions: []
+        };
+    }
+    const selected = validRecords[0];
+    const ignoredOlderContradictions = validRecords
+        .filter((record) => record.producedAtEpochMs < selected.producedAtEpochMs &&
+        record.header.result !== selected.header.result)
+        .map((record) => record.evidenceId);
+    return { selected, issues: [], historicalIssues: issues, ignoredOlderContradictions };
+}
+export function evidenceContextForPhase(phaseId, overrides = {}) {
+    if (!overrides.baselineSha || !overrides.inputDigest || !overrides.repositoryId) {
+        throw new Error('Current explicit repository, baseline SHA-256, and phase input SHA-256 bindings are required; placeholder contexts are not executable.');
+    }
+    const baselineSha = overrides.baselineSha;
+    const inputDigest = overrides.inputDigest;
+    const transition = {
+        phaseId,
+        baselineSha,
+        inputDigest,
+        transitionDigest: overrides.transitionDigest ?? canonicalSha256({
+            baselineSha,
+            inputDigest,
+            phaseId
+        })
+    };
+    return {
+        repositoryId: overrides.repositoryId,
+        identity: overrides.identity ?? currentActivationIdentity,
+        phaseGraphHash: overrides.phaseGraphHash ?? canonicalPhaseGraphHash,
+        phaseId,
+        phaseContractDigest: canonicalPhaseContractDigests[phaseId],
+        baselineSha,
+        inputDigest,
+        transition,
+        now: overrides.now,
+        liveReadbackProviders: overrides.liveReadbackProviders,
+        remoteBindingDigest: overrides.remoteBindingDigest
+    };
+}
+export function requiredLiveReadbackProviders(node) {
+    return node.evidence.liveReadbackProviders;
+}
+export function phaseRequiresLiveReadback(node) {
+    return requiredLiveReadbackProviders(node).length > 0;
+}
+export function phaseNode(graph, phaseId) {
+    const node = graph.phases.find((candidate) => candidate.id === phaseId);
+    if (!node) {
+        throw new Error(`Unknown phase ${phaseId}.`);
+    }
+    return node;
+}
+export function canonicalEvidenceContextForPhase(phaseId) {
+    const node = phaseNode(canonicalPhaseGraph, phaseId);
+    return evidenceContextForPhase(phaseId, {
+        liveReadbackProviders: requiredLiveReadbackProviders(node)
+    });
+}
+export function emptyEvidenceRecordsByPhase() {
+    const records = {};
+    for (const phaseId of phaseIds) {
+        records[phaseId] = [];
+    }
+    return records;
+}
+//# sourceMappingURL=evidence.js.map

package/dist/domain/governance/activation/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../../src/domain/governance/activation/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAchE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACjH,OAAO,EAAE,2BAA2B,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAO7E,MAAM,UAAU,+BAA+B,CAAC,UAA+B;IAC7E,MAAM,MAAM,GAAG,uBAAuB,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,0BAA0B;QAAE,OAAO,IAAI,CAAC;IAC5G,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAClD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAA+B,EAAE,OAAgB;IACvF,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC,SAAS,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO;QACL,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,UAAU;QACzC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;QACjC,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC,YAAY;QAC7C,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG;IACrB,gBAAgB;IAChB,yBAAyB;IACzB,eAAe;IACf,2BAA2B;IAC3B,yBAAyB;IACzB,gBAAgB;IAChB,8BAA8B;IAC9B,6BAA6B;IAC7B,+BAA+B;IAC/B,2BAA2B;IAC3B,+BAA+B;CACvB,CAAC;AA4CX,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,YAAY,GAAiC,EAAE;IAClG,MAAM,UAAU,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;SAClF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,OAAO,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,oBAAoB,CAAC,MAA2B;IACvD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,cAAc;QAAE,OAAO,EAAE,CAAC;IAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,8CAA8C,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,KAAK,GAAG,OAAkC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC;IACvH,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,yBAAyB,QAAQ,GAAG,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3F,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7G,MAAM,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,0BAA0B,EAAE,0BAA0B,CAAC;aAC1G,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAE,KAAK,CAAC,KAAkD,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3J,MAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACzD,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC5G,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5D,CAAC,CAAC,KAAK,CAAC,sBAAsB,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,sBAAsB,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC/F,MAAM,CAAC,IAAI,CAAC,sGAAsG,CAAC,CAAC;QACtH,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAC1E,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,mBAAmB,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnH,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,qBAAqB,IAAI,CAAC,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAClI,MAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,uBAAuB,IAAI,CAAC,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;QAC9J,MAAM,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,kBAAkB,IAAI,CAAC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC3I,MAAM,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI;QACvF,CAAC,CAAC,KAAK,CAAC,eAA0C,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,IAAI,KAAK,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;;YACxG,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;oBACnD,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ;oBACpF,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;oBAC/F,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBACvK,MAAM,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;gBAC3G,CAAC;YACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CACZ,KAAa,EACb,OAAe,EACf,QAAoC,EACpC,MAAkC,EAClC,UAAmB;IAEnB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CACtB,MAA0B,EAC1B,QAA4B,EAC5B,UAAmB;IAEnB,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,KAAK,CACf,YAAY,KAAK,EAAE,EACnB,sCAAsC,KAAK,0BAA0B,EACrE,QAAQ,CAAC,KAAK,CAAC,EACf,MAAM,CAAC,KAAK,CAAC,EACb,UAAU,CACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAkC,EAClC,QAAoC,EACpC,IAAY,EACZ,UAAmB;IAEnB,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE,kEAAkE,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1J,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,cAAc,EAAE,yEAAyE,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7K,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,cAAc,EAAE,yEAAyE,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7K,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,mBAAmB,EAAE,mEAAmE,EAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC;IACtL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAA2B,EAC3B,OAAiC;IAEjC,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,IAAI,MAAsB,CAAC;IAC3B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;SAC3H,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,UAAU,KAAK,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAClF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,yEAAyE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACvJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACpI,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClI,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACxG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAkC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS,IAAI,OAAO,CAAC,sBAAsB,KAAK,SAAS,CAAC;YAC5F,OAAO,CAAC,sBAAsB,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gCAAgC,EAAE,mFAAmF,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACrL,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,IAAI,MAAM,CAAC,mBAAmB,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC3G,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,sEAAsE,EAAE,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAChM,CAAC;IACD,IAAI,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;QACjI,CAAC,CAAC,OAAO,CAAC,mBAAmB,IAAI,MAAM,CAAC,mBAAmB,KAAK,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,gGAAgG,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACvL,CAAC;IACD,IAAI,OAAO,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC/E,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC,YAAY,KAAK,oBAAoB,CAAC,MAAM,CAAC;QACrG,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,wEAAwE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACrJ,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/H,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;YACvF,eAAe,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,+EAA+E,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACvJ,CAAC;aAAM,CAAC;YACN,IAAI,IAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7D,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACzC,MAAM,kBAAkB,GAAG,eAAe,CAAC;oBACzC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBAC7F,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;iBACzC,CAAC,CAAC;gBACH,IAAI,IAAI,CAAC,UAAU,KAAK,aAAa,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;oBAC3I,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpJ,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,KAAK,OAAO,CAAC,WAAW;gBAChF,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,CAAC,UAAU,CAAC,gBAAgB;gBACxG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5H,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,qFAAqF,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7J,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,+BAA+B,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;gBAC5H,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;oBACzF,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;wBACxE,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3G,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,0EAA0E,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC5J,CAAC;YACH,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;gBAC9C,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,6DAA6D,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;gBACxJ,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM;oBACvE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBAC1I,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;oBACjC,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;oBAC1C,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,UAAU;wBAC5D,WAAW,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;wBAC3C,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,WAAW,CAAC,UAAU,GAAG,CAAC;4BAC1F,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,gCAAgC,WAAW,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;wBAC1F,CAAC,WAAW,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,kBAAkB,WAAW,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;oBAC3I,OAAO,YAAY,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC/H,CAAC,CAAC,EAAE,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,wEAAwE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;gBACpK,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,8DAA8D,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACnK,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,mDAAmD,EAAE,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9J,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,uDAAuD,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7I,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,KAAK,CACf,qBAAqB,EACrB,wDAAwD,EACxD,OAAO,CAAC,mBAAmB,EAC3B,MAAM,CAAC,mBAAmB,EAC1B,MAAM,CAAC,UAAU,CAClB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,+CAA+C,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACjJ,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,qDAAqD,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACvJ,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1G,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,kDAAkD,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACxI,CAAC;SAAM,IAAI,iBAAiB,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,sCAAsC,EAAE,WAAW,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5I,CAAC;IAED,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;YAC9F,GAAG,SAAS,CAAC,mBAAmB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,qBAAqB;YACjF,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC;SACzC,CAAC,CAAC,CAAC;IACJ,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;IAC/C,MAAM,eAAe,GAAwB,EAAE,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,eAAe,CAAC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACtI,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,iBAAiB;gBAClD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE;gBACpD,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,2FAA2F,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACtL,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;gBAClE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,0EAA0E,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAClK,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;gBAChF,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBACpF,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,sEAAsE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAC9J,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACpF,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,yBAAyB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACnF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,OAAO,CAAC,OAAO,aAAa,QAAQ,uBAAuB,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACxJ,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,2BAA2B,EAAE,kDAAkD,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1K,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACzG,GAAG,KAAK;YACR,KAAK,EAAE,gBAAgB,KAAK,CAAC,KAAK,EAAE;SACrC,CAAC,CAAC,CAAC,CAAC;QACL,IAAI,aAAa,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,6BAA6B,EAAE,+CAA+C,EAAE,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7K,CAAC;QACD,IAAI,aAAa,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,0CAA0C,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACnJ,CAAC;QACD,IAAI,aAAa,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,6CAA6C,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAClK,CAAC;QACD,IAAI,aAAa,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,iDAAiD,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACtK,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,yBAAyB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7H,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,uDAAuD,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACtI,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IACD,OAAO;QACL,KAAK,EAAE,IAAI;QACX,MAAM,EAAE;YACN,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM;YACN,YAAY,EAAE,oBAAoB,CAAC,MAAM,CAAC;YAC1C,iBAAiB;YACjB,YAAY,EAAE,eAAe;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAkC,EAAE,KAAmC;IAC3F,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACvD,OAAO,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAuC,EACvC,OAAiC;IAEjC,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAmC,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAC1F,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAChC,MAAM,eAAe,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC,iBAAiB,CAAC;IAC3D,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,KAAK,eAAe,CAAC,CAAC;IACjG,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACrG,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE;gBACN,GAAG,MAAM;gBACT,KAAK,CACH,YAAY,EACZ,uBAAuB,OAAO,CAAC,OAAO,6CAA6C,UAAU,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,UAAU,GAAG,EACtH,SAAS,EACT,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAC3C;aACF;YACD,0BAA0B,EAAE,EAAE;SAC/B,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC;IAClC,MAAM,0BAA0B,GAAG,YAAY;SAC5C,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB;QACrD,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,CAChD;SACA,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAgB,EAChB,SAAS,GAEL,EAAE;IAEN,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,wIAAwI,CAAC,CAAC;IAC5J,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;IAC1C,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;IAC1C,MAAM,UAAU,GAA+B;QAC7C,OAAO;QACP,WAAW;QACX,WAAW;QACX,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,IAAI,eAAe,CAAC;YAC9D,WAAW;YACX,WAAW;YACX,OAAO;SACR,CAAC;KACH,CAAC;IACF,OAAO;QACL,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,yBAAyB;QACzD,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,uBAAuB;QACnE,OAAO;QACP,mBAAmB,EAAE,6BAA6B,CAAC,OAAO,CAAC;QAC3D,WAAW;QACX,WAAW;QACX,UAAU;QACV,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;QACtD,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAoB;IAChE,OAAO,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAoB;IAC5D,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAwB,EAAE,OAAgB;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,OAAgB;IAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACrD,OAAO,uBAAuB,CAAC,OAAO,EAAE;QACtC,qBAAqB,EAAE,6BAA6B,CAAC,IAAI,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,MAAM,OAAO,GAAG,EAAqD,CAAC;IACtE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}