@msn-control/liftoff 0.6.2 → 0.8.0

package/docs/spec-workflows-and-agents.md

@@ -7,8 +7,8 @@ Liftoff workload.
 
 ### OpenSpec
 
-OpenSpec organizes proposed behavior changes as reviewable artifacts before
-implementation. Liftoff runs the pinned official OpenSpec initializer in
+OpenSpec 1.11.0 organizes proposed behavior changes as reviewable artifacts
+before implementation. Liftoff runs that pinned official initializer in
 temporary staging and passes every selected coding agent in stable order.
 
 Generated projects contain `openspec/` plus the selected agent integration
@@ -16,10 +16,9 @@ markers.
 
 ### Spec Kit
 
-Spec Kit provides a specification, planning, and implementation workflow.
-Liftoff initializes the selected default coding agent first, adds every
-secondary integration, and records the default separately from the full agent
-set.
+Spec Kit 1.0.1 provides a specification, planning, and implementation workflow.
+Liftoff initializes the selected default coding agent first, adds every secondary
+integration, and records the default separately from the full agent set.
 
 Generated projects contain `.specify/`, `specs/`, and the selected agent
 integration markers.
@@ -66,6 +65,20 @@ Framework files remain owned by the official initializer. Liftoff validates
 them but excludes framework-owned output from durable artifact hashes so a
 framework can manage its own lifecycle.
 
+Repository-governance launchers are separate durable Liftoff files at the exact
+Copilot prompt and Claude command paths documented in
+[repository governance](repository-governance.md). They reference one canonical
+policy and context rather than duplicating framework-owned content. After
+read-only Phase 0 and explicit approval, the agent creates a new change using
+the selected framework; Liftoff never pre-creates or restores that change.
+
+Install the exact selected framework release with its supported package manager:
+
+```bash
+npm install -g @fission-ai/openspec@1.11.0
+uv tool install specify-cli==1.0.1
+```
+
 ## Optional Code Apps plugin
 
 Power Apps projects can request Microsoft's
@@ -88,5 +101,6 @@ invoke `/create-code-app`. The plugin's connector and deployment skills remain
 available for post-creation work.
 
 Changing the valid plugin preference in `liftoff.config.json` is reconciled by
-`liftoff update`; it updates generated guidance and manifest intent without
-creating API or infrastructure artifacts.
+plain `liftoff update`; it immediately updates generated guidance and manifest
+intent without creating API or infrastructure artifacts. Use
+`liftoff update --check` to inspect that drift without writing.

package/docs/supported-stack.md

@@ -0,0 +1,89 @@
+# Supported stack baseline
+
+Each Liftoff release packages one tested dependency baseline in
+`assets/supported-stack.json`. Project generation and update use that committed
+file; they never resolve mutable `latest` versions.
+
+## Runtime and framework baseline
+
+| Surface | Tested release |
+| --- | --- |
+| Node.js | 24.20.0 LTS |
+| npm | 12.0.2 |
+| Python | 3.14.7 |
+| `uv` | 0.12.7 |
+| Go | 1.27.0 |
+| OpenTofu | 1.12.6 |
+| OpenSpec | 1.11.0 |
+| Spec Kit | 1.0.1 |
+| AzureRM provider | 5.3.0 |
+| Power Apps SDK | 1.2.7 |
+
+Power Apps SDK 1.2.7 is an explicit compatibility selection. Versions 1.2.12
+and newer remove the project-local `power-apps` CLI required by Liftoff's
+current workload contract. Moving to Microsoft's global `pa` CLI is a separate
+reviewed workload migration; the freshness check recognizes only the recorded
+1.3.0 exclusion and will reopen the decision when a newer candidate appears.
+
+Generated npm projects include `package-lock.json`. Python projects include
+`uv.lock` and use `uv sync --frozen`. Go projects include `go.mod` and
+`go.sum`. Generated OpenTofu includes a multi-platform `.terraform.lock.hcl`.
+
+Container references include a readable stable tag and an immutable
+multi-architecture digest. The optional Langfuse profile uses the v4 web and
+worker services with pinned ClickHouse, Redis, and MinIO dependencies.
+
+## Refresh policy
+
+Maintainers compare the committed baseline with canonical ecosystem sources:
+
+```bash
+npm run check:supported-stack
+npm run check:supported-stack-freshness
+```
+
+The first command verifies that package manifests and lockfiles match the
+committed baseline. The second is a networked, fail-closed freshness check.
+A newer release is not promoted automatically: update manifests and source for
+compatibility, regenerate ecosystem-native locks, review immutable image
+digests and upstream provenance, then run:
+
+```bash
+npm run refresh:supported-stack
+npm run check
+npm run verify:standard-node-templates
+npm run verify:power-apps-starter
+```
+
+Power Apps source is refreshed only through its reviewed immutable upstream
+commit workflow. Do not edit Microsoft-owned starter files independently.
+
+## Existing generated projects
+
+Upgrade the globally installed Liftoff CLI, then inspect project-managed changes
+as a separate operation:
+
+```bash
+liftoff upgrade --check
+liftoff upgrade
+liftoff update --check
+liftoff update
+liftoff validate
+liftoff doctor
+```
+
+Untouched managed files and new lockfiles can be updated automatically.
+Locally modified files remain conflicts unless explicitly reviewed with
+`liftoff update --force`. Liftoff never installs the updated project
+dependencies during `update`; run the generated `npm ci`, `uv sync --frozen`,
+or `go mod download` command afterward. CLI upgrade does not discover or modify
+the project.
+
+This baseline is a breaking release boundary: it raises the Node.js, Python, Go,
+and OpenTofu floors and includes major framework, provider, frontend, container,
+and dependency migrations. Commit or otherwise preserve local work, run
+`liftoff update --check`, and review every named upgrade and conflict before
+applying. Do not use an older Liftoff release as an automatic downgrade tool.
+After a successful update, recover unwanted changes through version control and
+then reinstall from the restored locks; Liftoff does not retain a post-success
+backup.

package/docs/telemetry.md

@@ -24,6 +24,12 @@ code. It is an exit-status class, not an error diagnosis. Help requests are
 recorded as `help`, and rejected input that never resolves to a recognized
 command is not recorded.
 
+`upgrade` is recorded only as the aggregate command value. Check/apply mode,
+target or configured-registry details, installation origin, paths, npm output,
+reason codes, and errors are not added. The replacement binary's verification
+process runs with telemetry and disclosure disabled, so at most the originally
+invoked parent command emits an event.
+
 Liftoff does **not** send:
 
 - An installation, user, device, or session identifier.

package/docs/troubleshooting.md

@@ -7,6 +7,8 @@ Check the canonical release:
 ```bash
 npm view @msn-control/liftoff@latest version --registry=https://registry.npmjs.org
 liftoff --version
+liftoff upgrade --check
+liftoff upgrade
 ```
 
 Versions before 0.3.0 are unsupported.
@@ -16,6 +18,40 @@ mirror owner to synchronize or approve the release. Liftoff does not modify
 `.npmrc`. A successful installation of an older mirrored package does not make
 that version supported.
 
+Versions that predate `liftoff upgrade` require one manual global installation:
+
+```bash
+npm install -g @msn-control/liftoff@latest --registry=https://registry.npmjs.org
+```
+
+## CLI upgrade is blocked by installation origin
+
+Automatic replacement supports only the canonical package at npm's effective
+global package root. A local dependency, `npx` cache copy, linked checkout, or
+another package-manager installation is intentionally refused. Use the manual
+global npm command shown by Liftoff; do not try to make upgrade replace a
+different installation.
+
+## CLI upgrade is blocked by a stale managed registry
+
+Canonical npm defines the exact stable target, but Liftoff installs through the
+configured registry. Ask the mirror owner to synchronize or approve that exact
+version, then rerun `liftoff upgrade --check`. Liftoff does not edit `.npmrc` or
+bypass the managed registry.
+
+## npm cannot write the global prefix
+
+Liftoff does not run `sudo`, request administrator credentials, or retry with
+elevation. Resolve Node/npm global-prefix ownership through the approved
+workstation process, then rerun the command.
+
+## CLI replacement verification fails
+
+Liftoff reports `failed` even when npm exited zero unless installed metadata and
+`liftoff --version` both match the exact target. Run the exact-version global npm
+repair command printed in the result. Liftoff does not claim an automatic
+rollback after npm may have partially changed global state.
+
 ## An installed tool is still reported missing
 
 Installers that change `PATH` may require a new terminal. Open one, rerun:
@@ -67,15 +103,13 @@ hand-edited unsafe path.
 
 ## Update reports conflicts or orphans
 
-In an interactive terminal, `liftoff update` shows an impact summary and asks
-before applying safe managed changes. The default answer is No.
+`liftoff update` applies safe managed changes immediately and skips conflicts.
 
-- Local or user-owned conflicts are listed separately and require their own
-  default-No overwrite confirmation.
-- With redirected input or output, review the report and apply safe changes
-  with `liftoff update --apply`.
-- For prompt-free conflict replacement, use `liftoff update --apply --force`
-  only after reviewing every listed path.
+- Use `liftoff update --check` for a read-only human report or
+  `liftoff update --check --json` for an automation drift gate.
+- Local or user-owned conflicts remain untouched by default.
+- Use `liftoff update --force` only after reviewing every listed path and
+  deciding that each overwrite is intended.
 - Orphans are never deleted automatically.
 - Update reports dependency-definition impact but does not install
   dependencies.
@@ -83,6 +117,48 @@ before applying safe managed changes. The default answer is No.
 Commit or copy local work before overwriting. Transaction rollback protects a
 failed update, but Liftoff keeps no backup after success.
 
+For a new governance policy or launcher conflict, review that exact local file
+before considering `liftoff update --force`; do not delete it or activate remote
+governance merely to make update pass. The schema-v5 manifest records
+`handoff-partial` and no ownership entry for each preserved unrecorded conflict.
+Run `liftoff update --check` to inspect the remaining paths. Once each path is
+absent or matches the current artifact, plain update promotes the handoff to
+`handoff-generated`. Setting `governanceProfile` to `none` turns previously
+managed handoff files into preserved orphans rather than deleting them; an
+unrecorded conflicting file remains user-owned and is not reported as an
+orphan.
+
+## Governance handoff exists but nothing is enforced
+
+That is the expected initial state. The manifest records `handoff-generated`,
+not active enforcement. Commit and push the repository, run the selected-agent
+launcher, review its read-only Phase 0 report, and explicitly approve the plan
+before the agent creates a governance change.
+
+Missing licenses, a private Staging runner, alert routes, parallel deployment,
+or sufficient canary traffic must be reported as blockers or inapplicable
+controls. Do not replace them with duplicate scanners or placeholder success.
+
+Do not run an older Liftoff release to reverse a completed baseline migration.
+Restore the affected generated files and `liftoff.manifest.json` through version
+control, then reinstall from the restored locks.
+
+## A frozen Python install cannot reach the package index
+
+Keep the committed `pyproject.toml` and `uv.lock` unchanged and retry the
+generated `uv sync --frozen` command when registry connectivity is restored.
+Do not regenerate the lock as a connectivity workaround.
+
+Python Dockerfiles also accept a credential-free PEP 503 mirror while retaining
+the lock's exact versions and hashes:
+
+```bash
+docker build --build-arg UV_DEFAULT_INDEX=https://packages.example.test/simple/ .
+```
+
+Do not place credentials in build arguments. Configure authenticated registries
+through an approved secret-aware build mechanism.
+
 ## Power Apps dependencies or CLI are missing
 
 From the project root:

package/docs/workloads.md

@@ -7,12 +7,12 @@ prerequisites, generated artifacts, and maintenance checks that apply to it.
 
 | Workload | Primary choices | Required runtime | Liftoff-generated platform areas |
 | --- | --- | --- | --- |
-| GenAI application | Pattern, Azure region, environments, optional frontend | Python 3.12 and Node.js 20.19+ | API, orchestration, data, messaging, Docker, Azure OpenTofu |
-| API application | Python, Node.js, or Go API stack; Azure region; environments; optional frontend | Selected API runtime and Node.js 20.19+ | API, data, Docker, Azure OpenTofu |
-| Power Apps code app | Spec workflow, agents, optional Code Apps plugin | Node.js 22.12+ | Official React/Vite starter and project-local Power Apps tooling |
+| GenAI application | Pattern, Azure region, environments, optional frontend | Python 3.14, `uv` 0.12.7+, and Node.js 24.20+ | API, orchestration, data, messaging, Docker, Azure OpenTofu |
+| API application | Python 3.14, Node.js 24, or Go 1.27 API stack; Azure region; environments; optional frontend | Selected API runtime and Node.js 24.20+ | API, data, Docker, Azure OpenTofu |
+| Power Apps code app | Spec workflow, agents, optional Code Apps plugin | Node.js 24.20+ | Official React/Vite starter and project-local Power Apps tooling |
 
 All three workloads continue into the common OpenSpec or Spec Kit and coding
-agent flow.
+agent flow and the default local repository-governance handoff.
 
 ## GenAI application
 
@@ -29,11 +29,14 @@ The selected pattern fixes the API stack to Python, FastAPI, and PydanticAI.
 ### Generated output
 
 - FastAPI backend and Scalar/OpenAPI integration.
+- A committed `uv.lock` consumed through `uv sync --frozen`.
 - PydanticAI orchestration, prompts, and model configuration boundaries.
 - PostgreSQL and pattern-specific Redis or Azure Service Bus boundaries.
 - Offline-testable tracing and integration adapters.
 - Docker Compose and Azure OpenTofu.
 - Optional Vue frontend and pattern-specific Azure Functions workers.
+- Versioned repository-governance policy, workload context, guide, and
+  selected-agent launcher unless `none` is selected.
 
 ### Deferred actions
 
@@ -55,9 +58,12 @@ infrastructure before applying it.
 ### Generated output
 
 - Stack-native API, OpenAPI, tests, and database migrations.
+- Ecosystem-native locked metadata: `uv.lock`, `package-lock.json`, or
+  `go.mod` plus `go.sum`.
 - PostgreSQL, Redis, Azurite, and Mailpit local services where applicable.
 - Docker Compose and Azure OpenTofu.
 - Optional Vue frontend.
+- Versioned local repository-governance handoff unless explicitly disabled.
 
 ### Deferred actions
 
@@ -87,9 +93,12 @@ environment, API frontend, Docker, or OpenTofu selection.
 - React, Vite, TypeScript, Tailwind, and the Power Apps SDK and Vite plugin.
 - Locked root `package.json` and `package-lock.json`.
 - Project-local `power-apps` CLI supplied by the generated dependency graph.
-- `liftoff.config.json`, schema-v4 `liftoff.manifest.json`, starter provenance,
+- `liftoff.config.json`, schema-v5 `liftoff.manifest.json`, starter provenance,
   and third-party attribution.
 - Official OpenSpec or Spec Kit output and every selected agent marker.
+- The common local governance policy and selected-agent launcher, with backend,
+  container, OpenTofu, custom deployment, and API DAST controls marked
+  inapplicable.
 
 Liftoff does not create an API backend, `docker-compose.yml`,
 `infrastructure/`, API environments, or an environment-bound
@@ -126,3 +135,7 @@ created the application.
 workload. It does not convert among GenAI, API, and Power Apps or change an API
 stack, GenAI pattern, or user-supplied starter identity. Initialize a fresh
 project or use a supported migration flow instead.
+
+Plain update applies safe changes immediately for every workload. Use
+`liftoff update --check` for read-only inspection and review all reported
+conflicts before using `liftoff update --force`; orphans remain untouched.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@msn-control/liftoff",
-  "version": "0.6.2",
+  "version": "0.8.0",
   "description": "Interactive CLI for governed GenAI, API, and Power Apps code app projects.",
   "type": "module",
   "license": "GPL-3.0-only",
@@ -32,7 +32,9 @@
   "files": [
     "dist",
     "assets/locks",
+    "assets/governance",
     "assets/power-apps-code-app",
+    "assets/supported-stack.json",
     "docs",
     "README.md",
     "LICENSE"
@@ -45,25 +47,31 @@
     "build": "tsc -p tsconfig.json",
     "test": "vitest run",
     "audit:template-dependencies": "node scripts/audit-template-dependencies.mjs",
+    "refresh:supported-stack": "node scripts/refresh-supported-stack-baseline.mjs --write",
+    "check:supported-stack": "node scripts/refresh-supported-stack-baseline.mjs",
+    "check:supported-stack-freshness": "node scripts/check-supported-stack-freshness.mjs",
+    "canonicalize:python-locks": "node scripts/canonicalize-uv-lock.mjs assets/locks/python-standard/uv.lock assets/locks/python-genai/uv.lock",
     "refresh:power-apps-starter": "node scripts/refresh-power-apps-starter.mjs",
     "smoke:package": "npm run build && node scripts/package-smoke-test.mjs",
     "verify:standard-node-templates": "npm run build && node scripts/verify-standard-node-templates.mjs",
+    "verify:generated-containers": "npm run build && node scripts/verify-generated-containers.mjs",
     "verify:power-apps-starter": "npm run build && node scripts/verify-power-apps-starter.mjs",
     "verify:release-identity": "npm run build && node scripts/verify-release-identity.mjs",
     "verify:published": "npm run build && node scripts/verify-published-package.mjs",
-    "check": "npm run build && npm test"
+    "check": "npm run check:supported-stack && npm run build && npm test"
   },
   "engines": {
-    "node": ">=20.19"
+    "node": ">=24.20"
   },
   "devDependencies": {
     "@types/cross-spawn": "^6.0.6",
-    "@types/node": "^20.14.10",
+    "@types/node": "^24.6.0",
     "typescript": "^7.0.2",
-    "vitest": "^4.1.9"
+    "vite": "8.2.2",
+    "vitest": "4.1.11"
   },
   "dependencies": {
-    "@inquirer/prompts": "^7.10.1",
+    "@inquirer/prompts": "^8.6.0",
     "cross-spawn": "^7.0.6",
     "picocolors": "^1.1.1"
   }

package/dist/update-impact.d.ts

@@ -1,23 +0,0 @@
-import type { ReconcileEntry } from './reconcile.js';
-export declare const dependencyDefinitionLogicalNames: readonly ["backend-pyproject", "function-worker-requirements", "node-backend-package", "node-backend-lock", "go-backend-module", "go-backend-checksums", "frontend-package", "frontend-lock", "power-apps-package", "power-apps-lock"];
-export interface UpdateImpact {
-    readonly creates: readonly string[];
-    readonly restores: readonly string[];
-    readonly replacements: readonly string[];
-    readonly moves: readonly string[];
-    readonly recordedStateRefreshes: readonly string[];
-    readonly conflicts: readonly string[];
-    readonly managedPathsRemoved: readonly string[];
-    readonly managedPathsRemovedOnOverwrite: readonly string[];
-    readonly orphansPreserved: readonly string[];
-    readonly dependencyDefinitions: readonly string[];
-    readonly safeActionCount: number;
-    readonly localOrUserOwnedFilesAtRisk: number;
-    readonly manifestWillUpdate: boolean;
-    readonly installsDependencies: false;
-    readonly deletesOrphans: false;
-    readonly retainsBackupAfterSuccess: false;
-    readonly hasSafeActions: boolean;
-    readonly hasActionableChanges: boolean;
-}
-export declare function buildUpdateImpact(entries: readonly ReconcileEntry[]): UpdateImpact;

package/dist/update-impact.js

@@ -1,127 +0,0 @@
-import { manifestDisplayPath } from './file-system.js';
-export const dependencyDefinitionLogicalNames = Object.freeze([
-    'backend-pyproject',
-    'function-worker-requirements',
-    'node-backend-package',
-    'node-backend-lock',
-    'go-backend-module',
-    'go-backend-checksums',
-    'frontend-package',
-    'frontend-lock',
-    'power-apps-package',
-    'power-apps-lock'
-]);
-const dependencyDefinitionLogicalNameSet = new Set(dependencyDefinitionLogicalNames);
-function comparePortable(left, right) {
-    return left < right ? -1 : left > right ? 1 : 0;
-}
-function displayEntry(entry) {
-    const current = manifestDisplayPath(entry.pathParts);
-    return entry.previousPathParts
-        ? `${manifestDisplayPath(entry.previousPathParts)} => ${current}`
-        : current;
-}
-function freezeSorted(values) {
-    return Object.freeze(values.sort(comparePortable));
-}
-function isActionable(entry) {
-    return entry.status !== 'orphan' &&
-        (entry.status !== 'unchanged' || entry.refreshHash === true);
-}
-export function buildUpdateImpact(entries) {
-    const creates = [];
-    const restores = [];
-    const replacements = [];
-    const moves = [];
-    const recordedStateRefreshes = [];
-    const conflicts = [];
-    const managedPathsRemoved = [];
-    const managedPathsRemovedOnOverwrite = [];
-    const orphansPreserved = [];
-    const dependencyDefinitions = [];
-    for (const entry of entries) {
-        switch (entry.status) {
-            case 'new':
-                creates.push(manifestDisplayPath(entry.pathParts));
-                break;
-            case 'missing':
-                restores.push(manifestDisplayPath(entry.pathParts));
-                break;
-            case 'upgrade':
-                replacements.push(manifestDisplayPath(entry.pathParts));
-                break;
-            case 'moved':
-                if (entry.cleanMove) {
-                    moves.push(displayEntry(entry));
-                    if (entry.previousPathParts) {
-                        managedPathsRemoved.push(manifestDisplayPath(entry.previousPathParts));
-                    }
-                }
-                else {
-                    if (entry.sourceModified && entry.previousPathParts) {
-                        conflicts.push(manifestDisplayPath(entry.previousPathParts));
-                    }
-                    if (entry.destinationOccupied && !entry.destinationMatches) {
-                        conflicts.push(manifestDisplayPath(entry.pathParts));
-                    }
-                    if (entry.previousPathParts) {
-                        managedPathsRemovedOnOverwrite.push(manifestDisplayPath(entry.previousPathParts));
-                    }
-                }
-                break;
-            case 'conflict':
-                conflicts.push(manifestDisplayPath(entry.pathParts));
-                break;
-            case 'orphan':
-                orphansPreserved.push(manifestDisplayPath(entry.pathParts));
-                break;
-            case 'unchanged':
-                if (entry.refreshHash) {
-                    recordedStateRefreshes.push(manifestDisplayPath(entry.pathParts));
-                }
-                break;
-        }
-        if (isActionable(entry) &&
-            dependencyDefinitionLogicalNameSet.has(entry.logicalName)) {
-            dependencyDefinitions.push(manifestDisplayPath(entry.pathParts));
-        }
-    }
-    const frozenCreates = freezeSorted(creates);
-    const frozenRestores = freezeSorted(restores);
-    const frozenReplacements = freezeSorted(replacements);
-    const frozenMoves = freezeSorted(moves);
-    const frozenRefreshes = freezeSorted(recordedStateRefreshes);
-    const frozenConflicts = freezeSorted(conflicts);
-    const frozenManagedPaths = freezeSorted(managedPathsRemoved);
-    const frozenManagedOverwritePaths = freezeSorted(managedPathsRemovedOnOverwrite);
-    const frozenOrphans = freezeSorted(orphansPreserved);
-    const frozenDependencyDefinitions = freezeSorted(dependencyDefinitions);
-    const safeActionCount = frozenCreates.length +
-        frozenRestores.length +
-        frozenReplacements.length +
-        frozenMoves.length +
-        frozenRefreshes.length;
-    const hasSafeActions = safeActionCount > 0;
-    const hasActionableChanges = hasSafeActions || frozenConflicts.length > 0;
-    return Object.freeze({
-        creates: frozenCreates,
-        restores: frozenRestores,
-        replacements: frozenReplacements,
-        moves: frozenMoves,
-        recordedStateRefreshes: frozenRefreshes,
-        conflicts: frozenConflicts,
-        managedPathsRemoved: frozenManagedPaths,
-        managedPathsRemovedOnOverwrite: frozenManagedOverwritePaths,
-        orphansPreserved: frozenOrphans,
-        dependencyDefinitions: frozenDependencyDefinitions,
-        safeActionCount,
-        localOrUserOwnedFilesAtRisk: frozenConflicts.length,
-        manifestWillUpdate: hasActionableChanges,
-        installsDependencies: false,
-        deletesOrphans: false,
-        retainsBackupAfterSuccess: false,
-        hasSafeActions,
-        hasActionableChanges
-    });
-}
-//# sourceMappingURL=update-impact.js.map

package/dist/update-impact.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"update-impact.js","sourceRoot":"","sources":["../src/update-impact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGvD,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5D,mBAAmB;IACnB,8BAA8B;IAC9B,sBAAsB;IACtB,mBAAmB;IACnB,mBAAmB;IACnB,sBAAsB;IACtB,kBAAkB;IAClB,eAAe;IACf,oBAAoB;IACpB,iBAAiB;CACT,CAAC,CAAC;AAEZ,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAChD,gCAAgC,CACjC,CAAC;AAuBF,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAqB;IACzC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,iBAAiB;QAC5B,CAAC,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,OAAO,EAAE;QACjE,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,MAAgB;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,KAAqB;IACzC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAC9B,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAkC;IAClE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,mBAAmB,GAAa,EAAE,CAAC;IACzC,MAAM,8BAA8B,GAAa,EAAE,CAAC;IACpD,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,MAAM,qBAAqB,GAAa,EAAE,CAAC;IAE3C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,KAAK;gBACR,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBACnD,MAAM;YACR,KAAK,SAAS;gBACZ,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBACpD,MAAM;YACR,KAAK,SAAS;gBACZ,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBACxD,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBACpB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;oBAChC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;wBAC5B,mBAAmB,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;oBACzE,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;wBACpD,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;oBAC/D,CAAC;oBACD,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;wBAC3D,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;oBACvD,CAAC;oBACD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;wBAC5B,8BAA8B,CAAC,IAAI,CACjC,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAC7C,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,KAAK,UAAU;gBACb,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBACrD,MAAM;YACR,KAAK,QAAQ;gBACX,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC5D,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;oBACtB,sBAAsB,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM;QACV,CAAC;QAED,IACE,YAAY,CAAC,KAAK,CAAC;YACnB,kCAAkC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EACzD,CAAC;YACD,qBAAqB,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,eAAe,GAAG,YAAY,CAAC,sBAAsB,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,kBAAkB,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;IAC7D,MAAM,2BAA2B,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;IACjF,MAAM,aAAa,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,2BAA2B,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACxE,MAAM,eAAe,GACnB,aAAa,CAAC,MAAM;QACpB,cAAc,CAAC,MAAM;QACrB,kBAAkB,CAAC,MAAM;QACzB,WAAW,CAAC,MAAM;QAClB,eAAe,CAAC,MAAM,CAAC;IACzB,MAAM,cAAc,GAAG,eAAe,GAAG,CAAC,CAAC;IAC3C,MAAM,oBAAoB,GAAG,cAAc,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,cAAc;QACxB,YAAY,EAAE,kBAAkB;QAChC,KAAK,EAAE,WAAW;QAClB,sBAAsB,EAAE,eAAe;QACvC,SAAS,EAAE,eAAe;QAC1B,mBAAmB,EAAE,kBAAkB;QACvC,8BAA8B,EAAE,2BAA2B;QAC3D,gBAAgB,EAAE,aAAa;QAC/B,qBAAqB,EAAE,2BAA2B;QAClD,eAAe;QACf,2BAA2B,EAAE,eAAe,CAAC,MAAM;QACnD,kBAAkB,EAAE,oBAAoB;QACxC,oBAAoB,EAAE,KAAK;QAC3B,cAAc,EAAE,KAAK;QACrB,yBAAyB,EAAE,KAAK;QAChC,cAAc;QACd,oBAAoB;KACrB,CAAC,CAAC;AACL,CAAC"}