@nac3/forge-cli 1.8.6 → 1.9.0

package/dist/core/operate_guard.js

@@ -0,0 +1,542 @@
+/**
+ * operate_guard -- OPERATE MODE for the Forge Embedded assistant
+ * (Pablo 2026-10-10, PND-205 "salir del modo read-only, acotado").
+ *
+ * The resident assistant was strictly DIAGNOSTIC: read, SELECT-only queries,
+ * reports. Pablo extended the scope to exactly THREE actions -- and to nothing
+ * more:
+ *
+ *   1. CONFIGURE the attended system through its configuration DATA FILES
+ *      (json / xml / txt / ini / env / yaml / toml / vaults ...).
+ *   2. CONFIGURE the attended system through its configuration TABLES
+ *      (structured UPDATE / INSERT on allowlisted tables).
+ *   3. CREATE new processes and SCHEDULE them in the system's orchestrator.
+ *
+ * Explicitly OUT, by Pablo's own words: the system's DATA tables, and the
+ * system's SOFTWARE (source, binaries, units, build definitions).
+ *
+ * This module is the MECHANICAL enforcement of that scope (same law as the
+ * read-only gate: rules are enforcement, not prompt -- brains ignore prompts).
+ * It is pure validation + journaling; the verb handlers call it and refuse on
+ * a non-ok decision.
+ *
+ * Three layers, in this order (a later layer can never widen an earlier one):
+ *
+ *   A. HARD INVARIANTS -- compiled in, not configurable: software extensions
+ *      are never writable, the OS and Forge control surfaces are never
+ *      writable, DB system schemas are never writable. An operator who writes
+ *      a sloppy allowlist still cannot touch software.
+ *   B. OPERATOR ALLOWLIST -- the profile's operate block declares WHICH config
+ *      files (globs) and WHICH tables may change. Default deny: no allowlist,
+ *      no writes.
+ *   C. PER-CALL VALIDATION -- size caps, immutable columns, mandatory WHERE,
+ *      affected-row preflight, cron grammar, command-arg sanitation.
+ *
+ * Every mutation is JOURNALED (<journal_dir>/changes.jsonl) and every file
+ * mutation keeps a timestamped BACKUP, so the operator can always see -- and
+ * revert -- what the assistant did.
+ *
+ * ASCII-only.
+ */
+import { createHash, randomBytes } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+export const DEFAULT_JOURNAL_DIR = '.forge/changes';
+export const DEFAULT_MAX_BYTES = 512 * 1024;
+export const DEFAULT_MAX_ROWS = 25;
+export const DEFAULT_IMMUTABLE_COLUMNS = ['id', 'created_at'];
+/* ========================= layer A: invariants ========================= */
+/** Extensions that are SOFTWARE (or compiled software): never writable here,
+ *  whatever the allowlist says. This is Pablo's rule 5, in code. */
+const CODE_EXT = new Set([
+    'js', 'mjs', 'cjs', 'jsx', 'ts', 'tsx', 'mts', 'cts', 'coffee',
+    'py', 'pyc', 'pyo', 'pyw', 'rb', 'php', 'phtml', 'php3', 'php4', 'php5', 'php7', 'phps',
+    'go', 'rs', 'java', 'class', 'jar', 'war', 'ear', 'kt', 'kts', 'scala', 'groovy',
+    'cs', 'vb', 'fs', 'c', 'cc', 'cpp', 'cxx', 'h', 'hh', 'hpp', 'hxx', 'm', 'mm',
+    'swift', 'dart', 'pl', 'pm', 'lua', 'r', 'jl', 'ex', 'exs', 'erl', 'hrl', 'clj',
+    'sh', 'bash', 'zsh', 'ksh', 'fish', 'bat', 'cmd', 'ps1', 'psm1', 'psd1', 'vbs', 'wsf',
+    'sql', 'ddl', 'pls', 'pkb', 'prc',
+    'exe', 'dll', 'so', 'dylib', 'bin', 'msi', 'app', 'deb', 'rpm', 'apk', 'ipa',
+    'html', 'htm', 'xhtml', 'jsp', 'asp', 'aspx', 'cshtml', 'razor', 'erb', 'twig',
+    'blade', 'hbs', 'handlebars', 'ejs', 'pug', 'jade', 'tpl', 'vue', 'svelte', 'astro',
+    'css', 'scss', 'sass', 'less', 'styl',
+    'service', 'timer', 'socket', 'mount', 'target', 'path',
+]);
+/** Exact basenames that are software / build / infrastructure definitions. */
+const CODE_BASENAME = new Set([
+    'dockerfile', 'containerfile', 'makefile', 'gnumakefile', 'cmakelists.txt',
+    'rakefile', 'gemfile', 'procfile', 'justfile', 'build.gradle', 'pom.xml',
+    'package.json', 'package-lock.json', 'pnpm-lock.yaml', 'yarn.lock', 'composer.json',
+    'composer.lock', 'requirements.txt', 'pyproject.toml', 'setup.py', 'setup.cfg',
+    'cargo.toml', 'cargo.lock', 'go.mod', 'go.sum', 'tsconfig.json', 'jsconfig.json',
+    'webpack.config.js', 'vite.config.ts', '.htaccess',
+    'docker-compose.yml', 'docker-compose.yaml', 'compose.yml', 'compose.yaml',
+]);
+/** Extensions that ARE configuration data -- the only writable ones.
+ *  A file whose extension is not here (a vault blob, an extensionless config)
+ *  can still be written, but ONLY if the allowlist names it LITERALLY (no
+ *  wildcard in the last path segment). */
+const CONFIG_EXT = new Set([
+    'json', 'jsonc', 'json5', 'xml', 'txt', 'ini', 'cfg', 'conf', 'config',
+    'properties', 'props', 'prop', 'yaml', 'yml', 'toml', 'env', 'vault', 'vlt',
+    'csv', 'tsv', 'list', 'params', 'settings', 'plist',
+]);
+/** Path segments that are never part of a configuration surface. */
+const DENY_SEGMENT = new Set([
+    '.git', '.hg', '.svn', 'node_modules', '__pycache__', '.ssh', '.gnupg', '.aws',
+    'site-packages', 'vendor', 'dist', 'build',
+]);
+/** Absolute prefixes that belong to the OPERATING SYSTEM, not to the attended
+ *  application. Cron dirs are deliberately here: scheduling goes through the
+ *  orchestrator verbs (which have their own declared dir), never through the
+ *  generic config writer. */
+const DENY_ABS_PREFIX = [
+    '/etc/passwd', '/etc/shadow', '/etc/group', '/etc/gshadow', '/etc/sudoers',
+    '/etc/ssh', '/etc/systemd', '/etc/init.d', '/etc/pam.d', '/etc/security',
+    '/etc/crontab', '/etc/cron.d', '/etc/cron.daily', '/etc/cron.hourly',
+    '/var/spool/cron', '/boot', '/bin', '/sbin', '/lib', '/lib64', '/usr/bin',
+    '/usr/sbin', '/usr/lib', '/proc', '/sys', '/dev',
+];
+/** DB schemas / objects that are never configuration of the attended system. */
+const DENY_SCHEMA = new Set(['information_schema', 'mysql', 'performance_schema', 'sys', 'sqlite_master']);
+/* ============================== utilities ============================== */
+/** Normalise to forward slashes, no trailing slash, for matching. */
+function norm(p) {
+    return String(p || '').replace(/\\/g, '/').replace(/\/+$/, '');
+}
+/** Minimal glob -> RegExp. Supports ** (any depth), * (one segment), ?. */
+function globToRegExp(glob) {
+    const g = norm(glob);
+    let re = '';
+    for (let i = 0; i < g.length; i++) {
+        const ch = g[i];
+        if (ch === '*') {
+            if (g[i + 1] === '*') {
+                /* '**' -> any depth; swallow the following slash so a/**''/b also
+                 * matches a/b. */
+                i++;
+                if (g[i + 1] === '/') {
+                    i++;
+                    re += '(?:.*/)?';
+                }
+                else {
+                    re += '.*';
+                }
+            }
+            else {
+                re += '[^/]*';
+            }
+        }
+        else if (ch === '?') {
+            re += '[^/]';
+        }
+        else if ('^$.|+()[]{}'.indexOf(ch) >= 0) {
+            re += '\\' + ch;
+        }
+        else if (ch === '\\') {
+            re += '\\\\';
+        }
+        else {
+            re += ch;
+        }
+    }
+    return new RegExp('^' + re + '$', process.platform === 'win32' ? 'i' : '');
+}
+/** True when the glob's LAST segment has no wildcard (the operator named the
+ *  exact file). Used to let unknown-extension config (vault blobs) through. */
+function globNamesFileLiterally(glob) {
+    const last = norm(glob).split('/').pop() || '';
+    return last.length > 0 && last.indexOf('*') < 0 && last.indexOf('?') < 0;
+}
+function extOf(p) {
+    const base = norm(p).split('/').pop() || '';
+    const dot = base.lastIndexOf('.');
+    if (dot <= 0)
+        return '';
+    return base.slice(dot + 1).toLowerCase();
+}
+function baseOf(p) {
+    return (norm(p).split('/').pop() || '').toLowerCase();
+}
+export function shortHash(text) {
+    return createHash('sha256').update(String(text ?? ''), 'utf8').digest('hex').slice(0, 16);
+}
+function no(reason) { return { ok: false, reason }; }
+/* ===================== 1. configuration DATA FILES ===================== */
+/**
+ * Decide whether `rawPath` may be WRITTEN as configuration data.
+ *
+ * Order: resolve -> hard invariants (segments, OS prefixes, Forge control
+ * surface, software extensions) -> operator allowlist -> deny list ->
+ * extension class. Returns the absolute path when ok.
+ */
+export function guardConfigFile(projectRoot, op, rawPath) {
+    const operate = op || {};
+    if (operate.enabled !== true) {
+        return no('operate mode is OFF in this deployment profile: configuration changes are not allowed. '
+            + 'Diagnose and emit the precise instruction for the operator instead.');
+    }
+    const raw = String(rawPath || '').trim();
+    if (!raw)
+        return no('path is required.');
+    if (raw.indexOf('\u0000') >= 0)
+        return no('invalid path.');
+    const root = path.resolve(projectRoot);
+    const abs = path.isAbsolute(raw) ? path.resolve(raw) : path.resolve(root, raw);
+    const absN = norm(abs);
+    const rootN = norm(root);
+    const inRoot = absN === rootN || absN.indexOf(rootN + '/') === 0;
+    const rel = inRoot ? absN.slice(rootN.length + 1) : '';
+    /* --- A. hard invariants --- */
+    for (const seg of absN.split('/')) {
+        if (DENY_SEGMENT.has(seg.toLowerCase())) {
+            return no('refused: "' + seg + '" is not a configuration surface (vcs / dependency / build / key dir).');
+        }
+    }
+    if (!inRoot) {
+        for (const pre of DENY_ABS_PREFIX) {
+            if (absN === pre || absN.indexOf(pre + '/') === 0) {
+                return no('refused: "' + pre + '" belongs to the operating system, not to the attended application. '
+                    + 'Emit the instruction for the operator (and schedule jobs with the orchestrator verbs, '
+                    + 'not by writing cron files by hand).');
+            }
+        }
+    }
+    /* Forge's own control surface: the profile that grants these powers, the DB
+     * credentials, the mission. Writing them would be self-escalation. */
+    if (inRoot && (rel === '.forge' || rel.indexOf('.forge/') === 0)) {
+        return no('refused: .forge/ is Forge\'s own control surface (profile, credentials, mission), '
+            + 'not the attended system\'s configuration. Reports go through the report dirs; '
+            + 'a profile change is the operator\'s call.');
+    }
+    const ext = extOf(absN);
+    const base = baseOf(absN);
+    if (CODE_EXT.has(ext) || CODE_BASENAME.has(base)) {
+        return no('refused: "' + base + '" is SOFTWARE (source / binary / unit / build definition). '
+            + 'This deployment CONFIGURES the system, it never MODIFIES it. For a code change, '
+            + 'open a ticket or record a pending with the analysis.');
+    }
+    /* --- B. operator allowlist --- */
+    const allow = Array.isArray(operate.config_files?.allow) ? operate.config_files.allow : [];
+    if (allow.length === 0) {
+        return no('no configuration files are allowlisted in this profile. Ask the operator to declare '
+            + 'operate.config_files.allow (globs) in .forge/profile.<env>.json.');
+    }
+    let matched = '';
+    for (const g of allow) {
+        if (!g || typeof g !== 'string')
+            continue;
+        const target = path.isAbsolute(g) ? absN : (inRoot ? rel : '');
+        if (!target)
+            continue;
+        if (globToRegExp(g).test(target)) {
+            matched = g;
+            break;
+        }
+    }
+    if (!matched) {
+        return no('refused: "' + (inRoot ? rel : absN) + '" is not in this deployment\'s configuration allowlist '
+            + '(operate.config_files.allow = ' + allow.join(', ') + ').');
+    }
+    const deny = Array.isArray(operate.config_files?.deny) ? operate.config_files.deny : [];
+    for (const g of deny) {
+        if (!g || typeof g !== 'string')
+            continue;
+        const target = path.isAbsolute(g) ? absN : (inRoot ? rel : absN);
+        if (globToRegExp(g).test(target)) {
+            return no('refused: "' + (inRoot ? rel : absN) + '" is excluded by operate.config_files.deny ("' + g + '").');
+        }
+    }
+    /* --- C. extension class --- */
+    if (!CONFIG_EXT.has(ext)) {
+        const literal = base.indexOf('.env') === 0 || globNamesFileLiterally(matched);
+        if (!literal) {
+            return no('refused: "' + base + '" is not a recognised configuration format and the allowlist entry '
+                + '("' + matched + '") does not name it literally. To allow a vault / extensionless config file, '
+                + 'the operator must list that exact path in operate.config_files.allow.');
+        }
+    }
+    return { ok: true, abs, shown: inRoot ? rel : absN };
+}
+/** Size + text-only cap for a config-file write. */
+export function guardConfigSize(op, content) {
+    const max = Math.max(1, Math.floor(Number(op?.config_files?.max_bytes) || DEFAULT_MAX_BYTES));
+    const text = String(content ?? '');
+    const bytes = Buffer.byteLength(text, 'utf8');
+    if (bytes > max) {
+        return { ok: false, reason: 'content too large (' + bytes + ' bytes, max ' + max + '). '
+                + 'A configuration file this big is probably not configuration -- check the path.' };
+    }
+    if (text.indexOf('\u0000') >= 0) {
+        return { ok: false, reason: 'binary content (NUL byte) rejected: the config writer is text-only.' };
+    }
+    return { ok: true };
+}
+/* ====================== 2. configuration TABLES ======================= */
+const IDENT_RE = /^[A-Za-z_][A-Za-z0-9_$]*$/;
+/** Validate a table/column name, optionally db-qualified ("db.table"). */
+export function guardIdentifier(name, what = 'identifier') {
+    const n = String(name || '').trim();
+    if (!n)
+        return { ok: false, reason: what + ' is required.' };
+    const parts = n.split('.');
+    if (parts.length > 2)
+        return { ok: false, reason: 'invalid ' + what + ' "' + n + '".' };
+    for (const p of parts) {
+        if (!IDENT_RE.test(p)) {
+            return { ok: false, reason: 'invalid ' + what + ' "' + n + '": letters, digits and _ only '
+                    + '(no quotes, spaces, parentheses or SQL expressions).' };
+        }
+    }
+    for (const p of parts) {
+        if (DENY_SCHEMA.has(p.toLowerCase())) {
+            return { ok: false, reason: 'refused: "' + n + '" is a DB system schema/object, not the attended system\'s configuration.' };
+        }
+    }
+    return { ok: true };
+}
+/**
+ * Decide whether a structured write on `table` is allowed. Pablo's rule 4
+ * (never touch the system's DATA tables) is enforced as DEFAULT DENY: only
+ * the tables the operator declared as configuration may change.
+ */
+export function guardConfigTable(op, table, tableOp, opts = {}) {
+    const operate = op || {};
+    if (operate.enabled !== true) {
+        return { ok: false, reason: 'operate mode is OFF in this deployment profile: table changes are not allowed. '
+                + 'Emit the precise instruction (table, column, value, WHERE) for the operator instead.' };
+    }
+    const idc = guardIdentifier(table, 'table name');
+    if (!idc.ok)
+        return idc;
+    const tbl = String(table).trim().toLowerCase();
+    const bare = tbl.split('.').pop();
+    const cfg = operate.config_tables || {};
+    const allow = [
+        ...(Array.isArray(cfg.allow) ? cfg.allow : []),
+        ...(opts.extraAllow || []),
+    ].filter((t) => typeof t === 'string' && t.trim()).map((t) => t.trim().toLowerCase());
+    if (allow.length === 0) {
+        return { ok: false, reason: 'no configuration tables are allowlisted in this profile. Ask the operator to declare '
+                + 'operate.config_tables.allow in .forge/profile.<env>.json -- and never to list DATA tables there.' };
+    }
+    const hit = allow.some((a) => a === tbl || a === bare || a.split('.').pop() === bare);
+    if (!hit) {
+        return { ok: false, reason: 'refused: "' + table + '" is not an allowlisted CONFIGURATION table. '
+                + 'This deployment may only change configuration tables (' + allow.join(', ') + '); '
+                + 'the system\'s DATA tables are off limits. For a data change, emit the instruction for the '
+                + 'operator or open a ticket.' };
+    }
+    const deny = (Array.isArray(cfg.deny) ? cfg.deny : []).filter((t) => typeof t === 'string').map((t) => t.trim().toLowerCase());
+    if (deny.some((d) => d === tbl || d === bare)) {
+        return { ok: false, reason: 'refused: "' + table + '" is excluded by operate.config_tables.deny.' };
+    }
+    if (tableOp === 'insert' && cfg.allow_insert === false) {
+        return { ok: false, reason: 'refused: INSERT is disabled in this profile (operate.config_tables.allow_insert=false).' };
+    }
+    if (tableOp === 'delete' && cfg.allow_delete !== true) {
+        return { ok: false, reason: 'refused: DELETE is disabled in this profile (operate.config_tables.allow_delete is not true). '
+                + 'Disable the row instead (set its enabled/active flag to 0) or ask the operator.' };
+    }
+    return { ok: true };
+}
+/** Columns that can never be set: the profile's list, or the default. */
+export function immutableColumns(op) {
+    const cfg = op?.config_tables || {};
+    const list = Array.isArray(cfg.immutable_columns) ? cfg.immutable_columns : [...DEFAULT_IMMUTABLE_COLUMNS];
+    return list.filter((c) => typeof c === 'string' && c.trim()).map((c) => c.trim().toLowerCase());
+}
+export function maxRows(op) {
+    const n = Math.floor(Number(op?.config_tables?.max_rows));
+    return n > 0 ? Math.min(n, 1000) : DEFAULT_MAX_ROWS;
+}
+/** Validate a {column: value} map: identifiers, scalars only, immutability. */
+export function guardColumnMap(op, map, what) {
+    const out = {};
+    const entries = Object.entries(map || {});
+    if (entries.length === 0) {
+        return { ok: false, reason: what + ' must name at least one column.' };
+    }
+    if (entries.length > 50)
+        return { ok: false, reason: what + ' has too many columns (max 50).' };
+    const immutable = what === 'where' ? [] : immutableColumns(op);
+    for (const [col, val] of entries) {
+        const idc = guardIdentifier(col, 'column name');
+        if (!idc.ok)
+            return { ok: false, reason: idc.reason };
+        if (immutable.indexOf(col.toLowerCase()) >= 0) {
+            return { ok: false, reason: 'refused: column "' + col + '" is immutable in this profile '
+                    + '(operate.config_tables.immutable_columns).' };
+        }
+        if (val === null) {
+            out[col] = null;
+            continue;
+        }
+        const t = typeof val;
+        if (t === 'number') {
+            if (!Number.isFinite(val))
+                return { ok: false, reason: 'column "' + col + '": non-finite number.' };
+            out[col] = val;
+            continue;
+        }
+        if (t === 'boolean') {
+            out[col] = val;
+            continue;
+        }
+        if (t === 'string') {
+            const s = val;
+            if (s.length > 65535)
+                return { ok: false, reason: 'column "' + col + '": value too long (max 65535).' };
+            if (s.indexOf('\u0000') >= 0)
+                return { ok: false, reason: 'column "' + col + '": NUL byte rejected.' };
+            out[col] = s;
+            continue;
+        }
+        return { ok: false, reason: 'column "' + col + '": only strings, numbers, booleans and null are accepted '
+                + '(no objects, no SQL expressions -- pass a JSON string if the column stores JSON).' };
+    }
+    return { ok: true, clean: out };
+}
+/* ======================= 3. orchestrator / cron ======================= */
+const CRON_BOUNDS = [[0, 59], [0, 23], [1, 31], [1, 12], [0, 7]];
+/**
+ * Validate a 5-field Linux cron expression (the grammar the orchestrators in
+ * this ecosystem speak: '*', value, lists, ranges, steps). Returns the
+ * normalised expression. Macros (@daily) are refused on purpose: the
+ * orchestrators store 5 fields.
+ */
+export function guardCron(expr) {
+    const raw = String(expr || '').trim().replace(/\s+/g, ' ');
+    if (!raw)
+        return { ok: false, reason: 'cron expression is required (5 Linux fields, e.g. "0 3 * * *").' };
+    if (raw.charAt(0) === '@') {
+        return { ok: false, reason: 'cron macros (@daily, @hourly) are not accepted: use the 5 fields, e.g. "0 0 * * *".' };
+    }
+    const fields = raw.split(' ');
+    if (fields.length !== 5) {
+        return { ok: false, reason: 'cron must have 5 fields (minute hour day-of-month month day-of-week); got '
+                + fields.length + ' in "' + raw + '".' };
+    }
+    for (let i = 0; i < 5; i++) {
+        const bounds = CRON_BOUNDS[i];
+        const min = bounds[0], max = bounds[1];
+        for (const token of fields[i].split(',')) {
+            const t = token.trim();
+            if (!t)
+                return { ok: false, reason: 'cron: empty token in field ' + (i + 1) + ' of "' + raw + '".' };
+            const m = t.match(/^(\*|\d+|\d+-\d+)(?:\/(\d+))?$/);
+            if (!m) {
+                return { ok: false, reason: 'cron: invalid token "' + t + '" in field ' + (i + 1)
+                        + ' (allowed: *, n, a-b, each with an optional /step).' };
+            }
+            if (m[2] !== undefined && Number(m[2]) === 0)
+                return { ok: false, reason: 'cron: step 0 in "' + t + '".' };
+            if (m[1] !== '*') {
+                const parts = m[1].split('-');
+                for (const v of parts.map((x) => Number(x))) {
+                    if (v < min || v > max) {
+                        return { ok: false, reason: 'cron: value ' + v + ' out of range [' + min + '-' + max + '] in field ' + (i + 1) + '.' };
+                    }
+                }
+                if (parts.length === 2 && Number(parts[0]) > Number(parts[1])) {
+                    return { ok: false, reason: 'cron: inverted range "' + m[1] + '" in field ' + (i + 1) + '.' };
+                }
+            }
+        }
+    }
+    return { ok: true, cron: raw };
+}
+/** A process name must be a plain slug: it ends up in a table, in a cron file
+ *  name and (templated) on a command line. No shell metacharacters, ever. */
+export function guardProcessName(name) {
+    const n = String(name || '').trim();
+    if (!n)
+        return { ok: false, reason: 'process name is required.' };
+    if (n.length > 80)
+        return { ok: false, reason: 'process name too long (max 80).' };
+    if (!/^[A-Za-z0-9][A-Za-z0-9 ._-]*$/.test(n)) {
+        return { ok: false, reason: 'invalid process name "' + n + '": letters, digits, space, dot, underscore and dash only '
+                + '(the name reaches a command line -- no shell metacharacters).' };
+    }
+    return { ok: true, name: n };
+}
+/** Sanitise one templated command argument. */
+export function guardCommandArg(value) {
+    const v = String(value ?? '').trim();
+    if (v.length > 200)
+        return { ok: false, reason: 'argument too long (max 200): "' + v.slice(0, 40) + '".' };
+    if (!/^[A-Za-z0-9 ._,:=@/+-]*$/.test(v)) {
+        return { ok: false, reason: 'refused argument "' + v + '": shell metacharacters are not allowed.' };
+    }
+    return { ok: true, value: v };
+}
+export function journalDirAbs(root, op) {
+    const d = (op?.journal_dir && String(op.journal_dir).trim()) || DEFAULT_JOURNAL_DIR;
+    return path.isAbsolute(d) ? d : path.join(root, d);
+}
+/** Copy a file into the journal's backup dir. Returns null when absent. */
+export async function backupFile(root, op, abs) {
+    let before = '';
+    try {
+        before = await fs.readFile(abs, 'utf8');
+    }
+    catch {
+        return null;
+    }
+    const dir = path.join(journalDirAbs(root, op), 'backups');
+    await fs.mkdir(dir, { recursive: true });
+    const stamp = new Date().toISOString().replace(/[-:T]/g, '').slice(0, 15);
+    const flat = norm(abs).replace(/^[A-Za-z]:/, '').replace(/[^A-Za-z0-9._-]+/g, '_').replace(/^_+/, '').slice(-80);
+    const id = stamp + '-' + randomBytes(3).toString('hex') + '__' + flat;
+    const bp = path.join(dir, id);
+    await fs.writeFile(bp, before, 'utf8');
+    return { backup_id: id, backup_path: bp, before };
+}
+/** Append one record to <journal_dir>/changes.jsonl. Never throws. */
+export async function journalChange(root, op, rec) {
+    const dir = journalDirAbs(root, op);
+    const file = path.join(dir, 'changes.jsonl');
+    try {
+        await fs.mkdir(dir, { recursive: true });
+        const line = JSON.stringify({ ts: new Date().toISOString(), ...rec }) + '\n';
+        await fs.appendFile(file, line, 'utf8');
+    }
+    catch { /* the change already happened; a journal failure must not mask it */ }
+    return file;
+}
+/** Read back a journal record by backup id (for file-revert). */
+export async function findBackup(root, op, backupId) {
+    const id = String(backupId || '').trim();
+    if (!id || !/^[A-Za-z0-9._-]+$/.test(id))
+        return null;
+    const bp = path.join(journalDirAbs(root, op), 'backups', id);
+    try {
+        await fs.access(bp);
+    }
+    catch {
+        return null;
+    }
+    let rec = null;
+    try {
+        const text = await fs.readFile(path.join(journalDirAbs(root, op), 'changes.jsonl'), 'utf8');
+        for (const line of text.split('\n')) {
+            if (!line.trim())
+                continue;
+            try {
+                const r = JSON.parse(line);
+                if (r.backup_id === id)
+                    rec = r;
+            }
+            catch { /* skip malformed */ }
+        }
+    }
+    catch { /* no journal -- the backup alone is enough to restore */ }
+    return { rec: rec || { kind: 'config_file', verb: 'unknown', target: '', backup_id: id }, backup_path: bp };
+}
+/** The journal dir as shown to humans (project-relative when inside root). */
+export function journalDirShown(root, op) {
+    const n = norm(journalDirAbs(root, op));
+    const r = norm(path.resolve(root));
+    return n.indexOf(r + '/') === 0 ? n.slice(r.length + 1) : n;
+}
+//# sourceMappingURL=operate_guard.js.map

package/dist/core/operate_guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operate_guard.js","sourceRoot":"","sources":["../../src/core/operate_guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAgE7B,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,IAAI,EAAE,YAAY,CAAU,CAAC;AAEvE,6EAA6E;AAE7E;oEACoE;AACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ;IAC9D,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACvF,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ;IAChF,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI;IAC7E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC/E,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;IACrF,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IACjC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC5E,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM;IAC9E,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO;IACnF,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACrC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM;CACxD,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB;IAC1E,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS;IACxE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,WAAW,EAAE,eAAe;IACnF,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW;IAC9E,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,eAAe;IAChF,mBAAmB,EAAE,gBAAgB,EAAE,WAAW;IAClD,oBAAoB,EAAE,qBAAqB,EAAE,aAAa,EAAE,cAAc;CAC3E,CAAC,CAAC;AAEH;;;0CAG0C;AAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ;IACtE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;IAC3E,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO;CACpD,CAAC,CAAC;AAEH,oEAAoE;AACpE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAC9E,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;CAC3C,CAAC,CAAC;AAEH;;;6BAG6B;AAC7B,MAAM,eAAe,GAAG;IACtB,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc;IAC1E,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe;IACxE,cAAc,EAAE,aAAa,EAAE,iBAAiB,EAAE,kBAAkB;IACpE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU;IACzE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;CACjD,CAAC;AAEF,gFAAgF;AAChF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AAE3G,6EAA6E;AAE7E,qEAAqE;AACrE,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAW,CAAC;QAC1B,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACrB;kCACkB;gBAClB,CAAC,EAAE,CAAC;gBACJ,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,EAAE,IAAI,UAAU,CAAC;gBAAC,CAAC;qBAAM,CAAC;oBAAC,EAAE,IAAI,IAAI,CAAC;gBAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACN,EAAE,IAAI,OAAO,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,EAAE,IAAI,MAAM,CAAC;QACf,CAAC;aAAM,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,EAAE,IAAI,IAAI,GAAG,EAAE,CAAC;QAClB,CAAC;aAAM,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACvB,EAAE,IAAI,MAAM,CAAC;QACf,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;+EAC+E;AAC/E,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5F,CAAC;AAeD,SAAS,EAAE,CAAC,MAAc,IAAkB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAE3E,6EAA6E;AAE7E;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,EAAoC,EACpC,OAAe;IAEf,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,CAAC;IACzB,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,yFAAyF;cAC/F,qEAAqE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IAE3D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvD,gCAAgC;IAChC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC,YAAY,GAAG,GAAG,GAAG,wEAAwE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,OAAO,EAAE,CAAC,YAAY,GAAG,GAAG,GAAG,sEAAsE;sBACjG,wFAAwF;sBACxF,qCAAqC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IACD;0EACsE;IACtE,IAAI,MAAM,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,CAAC,oFAAoF;cAC1F,gFAAgF;cAChF,2CAA2C,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,CAAC,YAAY,GAAG,IAAI,GAAG,6DAA6D;cACzF,kFAAkF;cAClF,sDAAsD,CAAC,CAAC;IAC9D,CAAC;IAED,mCAAmC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,YAAmC,CAAC,KAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/H,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC,sFAAsF;cAC5F,kEAAkE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,yDAAyD;cACtG,gCAAgC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,YAAmC,CAAC,IAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5H,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,+CAA+C,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,CAAC,YAAY,GAAG,IAAI,GAAG,qEAAqE;kBACjG,IAAI,GAAG,OAAO,GAAG,+EAA+E;kBAChG,uEAAuE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,eAAe,CAAC,EAAoC,EAAE,OAAe;IACnF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,GAAG,KAAK,GAAG,cAAc,GAAG,GAAG,GAAG,KAAK;kBACpF,gFAAgF,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qEAAqE,EAAE,CAAC;IACtG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,4EAA4E;AAE5E,MAAM,QAAQ,GAAG,2BAA2B,CAAC;AAE7C,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAI,GAAG,YAAY;IAC/D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,eAAe,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;IACxF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,gCAAgC;sBACvF,sDAAsD,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,GAAG,CAAC,GAAG,2EAA2E,EAAE,CAAC;QAC/H,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAoC,EACpC,KAAa,EACb,OAAgB,EAChB,OAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,CAAC;IACzB,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iFAAiF;kBACzG,sFAAsF,EAAE,CAAC;IAC/F,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAY,CAAC;IAE5C,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;KAC3B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uFAAuF;kBAC/G,kGAAkG,EAAE,CAAC;IAC3G,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAa,KAAK,IAAI,CAAC,CAAC;IAClG,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,GAAG,KAAK,GAAG,+CAA+C;kBAC9F,wDAAwD,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK;kBACnF,4FAA4F;kBAC5F,4BAA4B,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/H,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,GAAG,KAAK,GAAG,8CAA8C,EAAE,CAAC;IACtG,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yFAAyF,EAAE,CAAC;IAC1H,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gGAAgG;kBACxH,iFAAiF,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,EAAoC;IACnE,MAAM,GAAG,GAAG,EAAE,EAAE,aAAa,IAAI,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAAC,CAAC;IAC3G,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAoC;IAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACtD,CAAC;AAID,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAC5B,EAAoC,EACpC,GAAwC,EACxC,IAAgC;IAEhC,MAAM,GAAG,GAA8B,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,iCAAiC,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAG,iCAAiC,EAAE,CAAC;IAChG,MAAM,SAAS,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QACtD,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,GAAG,GAAG,GAAG,iCAAiC;sBACrF,4CAA4C,EAAE,CAAC;QACrD,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAChD,MAAM,CAAC,GAAG,OAAO,GAAG,CAAC;QACrB,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAa,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,GAAG,GAAG,GAAG,uBAAuB,EAAE,CAAC;YAC9G,GAAG,CAAC,GAAG,CAAC,GAAG,GAAa,CAAC;YAAC,SAAS;QACrC,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAc,CAAC;YAAC,SAAS;QAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,GAAa,CAAC;YACxB,IAAI,CAAC,CAAC,MAAM,GAAG,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,GAAG,GAAG,GAAG,gCAAgC,EAAE,CAAC;YACxG,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,GAAG,GAAG,GAAG,uBAAuB,EAAE,CAAC;YACvG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,SAAS;QACzB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,GAAG,GAAG,GAAG,2DAA2D;kBACtG,mFAAmF,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC;AAED,4EAA4E;AAE5E,MAAM,WAAW,GAA4B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAE1F;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC;IAC1G,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qFAAqF,EAAE,CAAC;IACtH,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4EAA4E;kBACpG,MAAM,CAAC,MAAM,GAAG,OAAO,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAqB,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvC,KAAK,MAAM,KAAK,IAAK,MAAM,CAAC,CAAC,CAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;YACrG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,GAAG,CAAC,GAAG,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;0BAC7E,qDAAqD,EAAE,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;YAC3G,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAI,CAAC,CAAC,CAAC,CAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;wBACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,GAAG,CAAC,GAAG,iBAAiB,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;oBACzH,CAAC;gBACH,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;gBAChG,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACjC,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAClE,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACnF,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,GAAG,CAAC,GAAG,2DAA2D;kBAClH,+DAA+D,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IAC3G,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,GAAG,CAAC,GAAG,0CAA0C,EAAE,CAAC;IACtG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAChC,CAAC;AAgBD,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,EAAoC;IAC9E,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,IAAI,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,mBAAmB,CAAC;IACpF,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,EAAoC,EACpC,GAAW;IAEX,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,EAAE,GAAG,KAAK,GAAG,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IACtE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,EAAoC,EACpC,GAAiB;IAEjB,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;QAC7E,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC,CAAC,qEAAqE,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,EAAoC,EACpC,QAAgB;IAEhB,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC;QAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACnD,IAAI,GAAG,GAAwB,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5F,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;gBAC3C,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE;oBAAE,GAAG,GAAG,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,yDAAyD,CAAC,CAAC;IACrE,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AAC9G,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,EAAoC;IAChF,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC"}