@neuralis/brain-core 0.1.0 → 0.2.0

package/skills/manage-sources/SKILL.md

@@ -70,7 +70,7 @@ server-side source rows rather than the index-count survey.)
 | Forget sync state (next tick re-walks; deletes nothing) | POST | `/sources/reset` | `drive.sync` | `reset.sh` |
 | Rescan changes (full re-walk now; unchanged files keep their vectors; 202 + job) | POST | `/sources/reindex` | `drive.sync` | `reindex.sh` |
 | Clean a file / folder / source index (estimate first) | POST | `/sources/purge` | `drive.mount` + `drive.sync` | `purge-index.sh` |
-| Re-embed a file / folder / source (estimate first) | POST | `/sources/reindex` + `force` | `drive.sync` | `reembed.sh` |
+| Catch up embedding debt; FORCE=1 re-embeds (estimate first) | POST | `/sources/reindex` + `embeddingOnly` or `force` | `drive.sync` | `reembed.sh` |
 
 > **`update` takes no `:slug`.** PATCH targets the bare `/sources` path; the
 > source to patch is the body `source` field (the handler ignores the path).
@@ -151,6 +151,8 @@ server-side sync queue. Poll `sync-status.sh` (`SOURCE=<slug>`) until
 with `SOURCE` stops one source's job mid-run; without it, every job on
 sources you can see.
 
+An embedding job can end `paused`: report `result.embedding.pausedReason` and partial counts. Resume is a new explicitly authorized `reembed.sh` request, using durable point debt; no saved job ID or automatic paid restart.
+
 `sync.sh` refuses in two ways worth telling apart. **404** — the slug does not
 resolve for you (it does not exist, or it is outside your scope; the two answer
 alike on purpose). **400** — the source exists but carries no `sync` block, so
@@ -167,11 +169,14 @@ Per-action:
   id or a UI label. An unregistered value is `404 Unknown kind "<x>"` for every caller.
 - `PATH_ARG` — for `browse.sh` (we don't reuse `PATH`).
 - `PURGE` — optional for `delete.sh`; `PURGE=1` (or `true`) enqueues an async
-  vector purge. Delete then returns **202 + `{purgeJob, …}`** (vs 200 normally).
+  vector purge. Delete then returns **202 + `{purgeJob, …}`** (vs 200 normally). Any delete
+  resolves the source's open notifications (its unread failure warnings) for you and its creator.
 - `SOURCE` — source name for `sync.sh`, `reindex.sh`, `reset.sh`, `reembed.sh` (required) and
   `cancel.sh`, `sync-status.sh` (optional).
 - `FOLDER` / `URI` — `reembed.sh` scope (one of them, inside `SOURCE`; neither = the whole
-  source). `CONFIRM=1` starts the re-embed; without it the script only ESTIMATES.
+  source). `CONFIRM=1` starts debt catchup; without it the script only ESTIMATES. `FORCE=1` selects a forced connector re-embed instead.
+  `SCOPE=platform` (catch-up only, whole source, needs `platform.vector.maintain`) catches up EVERY
+  writer's points of the source, not only yours — the way back after an operator dense clear.
 - `ENABLED` — `true | false | auto` for `set-enabled.sh`.
 - `BODY_JSON` — POST/PATCH bodies (`create.sh`, `update.sh`). Both MUST include
   `source` + `permissions`; create additionally requires `connection.kind`. May also
@@ -182,7 +187,7 @@ Per-action:
   means only matching files sync, and an exclude still wins. A `sync.media` object
   (`{"images":true,"pdf":true,"video":false,"audio":false}`, absent key = that default)
   picks which binary kinds a MULTIMODAL active model embeds; a text-only model embeds
-  none, and `lastSyncResult.mediaSkipped` counts what was left out. The `invalid` reason is a local PNG structural check before provider work; invalid input preserves existing indexed and recovery payloads. **`include` bounds the
+  none, and `lastSyncResult.mediaSkipped` counts what was left out; `lastSyncResult.binarySkipped` is the last count of binary files not indexed as text (a binary extension, or a NUL in the first `brainSyncBinarySniffChars` characters); `lastSyncResult.embeddingDegraded` lists the reasons (`quota`, `credentials`, `rate_limit`, …) when the embedder was unavailable during the pass — the files are indexed and text-searchable, their semantic embedding is owed and caught up by `reembed.sh` once the embedder answers. The `invalid` reason is a local PNG structural check before provider work; invalid input preserves existing indexed and recovery payloads. **`include` bounds the
   INDEX, never the read.** What an agent can `fs_read` is set by the source ROOT and by
   `permissions.paths[]` — so narrowing a wide source with `include` alone leaves every
   file under that root readable. Re-root it, or add a path deny, or both.
@@ -228,22 +233,18 @@ SOURCE=scratch-demo FOLDER=scratch-demo://docs OBSOLETE_ONLY=false bash ${SKILL_
 
 ## Re-embed (a file, a folder, a source)
 
-"Rescan changes" reuses unchanged indexed files, but rebuilds re-included recovery-only content. `reembed.sh` forces every file in the
-scope is read again and embedded with the ACTIVE model, and nothing else about the source
-changes. Run it WITHOUT `CONFIRM` first — it answers `{documents, estimate:{tokens,
-relStdErr, usd, seconds}}` and changes nothing (`usd` is `null` for an unpriced model; the
-count covers only files you may read). Show that to the user, then run it again with
-`CONFIRM=1` (202 + job; poll `sync-status.sh`). A single file you may not read answers
+"Rescan changes" reuses unchanged indexed files, but rebuilds re-included recovery-only content. `reembed.sh` catches up missing/stale indexed embeddings, including brain-only and unchanged legacy records. Its read-only estimate returns `estimate_kind:scope_upper_bound`: authorized indexed scope counts are an upper bound, not a provider quote; no provider call or job starts. Show the estimate before `CONFIRM=1` (202 + embedding job; poll `sync-status.sh`). Disabled embedding refuses: each `list.sh` row's `embedding_enabled` is the live platform switch, and while it is `false` `reembed.sh` answers 409 `embedding_disabled`; without an active dense generation the estimate refuses and a submitted job pauses as `metadata_only`, never activating a model. `FORCE=1` instead rereads and re-embeds the connector scope; its estimate includes `{documents,estimate:{tokens,relStdErr,usd,seconds}}` (`usd:null` for an unpriced model). A single file you may not read answers
 `404`, exactly like a missing one. Switching the platform to a DIFFERENT model is not this:
 that is the owner's rebuild in the admin Vector section.
 
 ## Package sources (`recognizesPackages`)
 
-`create.sh` / `update.sh` accept `recognizesPackages` (boolean) in `BODY_JSON`. When
-true, the source's markdown is discovered as **package contributions** (skill /
-instruction / rule / agent / docs — there is no `team` category via this path) — this is
-how a synced source feeds packages back (source packages, R2/R2b). Two server-side gates
-apply regardless of what you send (`src/routes/sources.ts`):
+`create.sh` / `update.sh` accept `recognizesPackages` (boolean) in `BODY_JSON`. It does
+NOT switch markdown discovery on — a synced source's markdown becomes source-package
+contributions (skill / instruction / rule / agent / docs) either way; the flag lets the host
+load the source as a runtime package source (create-package
+`references/connectors-and-uri-policies.md` §Declare source instances owns the details). Two
+server-side gates apply regardless of what you send (`src/routes/sources.ts`):
 
 - **Owner/admin-STRENGTH only, measured by PRIORITY — not by role name.** The
   gate passes a caller whose `priority` is at or above the built-in `admin`

package/skills/manage-sources/scripts/reembed.sh

@@ -2,19 +2,25 @@
 set -euo pipefail
 API_BASE="${NEURALIS_API:?NEURALIS_API not set; activate skill first}"
 TOKEN="${NEURALIS_SESSION_TOKEN:?missing session ticket; activate the skill via execute action=\"skill\"}"
-# Requires drive.sync (403 otherwise). Re-embeds with the ACTIVE model — a
+# Requires drive.sync (403 otherwise). FORCE=1 re-embeds with the ACTIVE model; otherwise catches up durable embedding debt — a
 # file (URI), a folder's indexed files (FOLDER) or, with neither, the whole
 # source — even when nothing changed. Default = the ESTIMATE only (changes
 # nothing); CONFIRM=1 starts it (202 + job). Only files you may read count.
+# SCOPE=platform (catch-up only, whole source, needs platform.vector.maintain)
+# catches up EVERY writer's points of the source — the way back after a dense clear.
 SOURCE="${SOURCE:?SOURCE is required}"
 FOLDER="${FOLDER:-}"
 URI="${URI:-}"
 CONFIRM="${CONFIRM:-}"
-BODY=$(jq -n --arg source "${SOURCE}" --arg folder "${FOLDER}" --arg uri "${URI}" --arg confirm "${CONFIRM}" \
+FORCE="${FORCE:-}"
+SCOPE="${SCOPE:-}"
+BODY=$(jq -n --arg source "${SOURCE}" --arg folder "${FOLDER}" --arg uri "${URI}" --arg confirm "${CONFIRM}" --arg force "${FORCE}" --arg scope "${SCOPE}" \
   '{ source: $source }
    + (if $folder == "" then {} else { folder: $folder } end)
    + (if $uri == "" then {} else { uri: $uri } end)
-   + (if $confirm == "1" then { force: true } else { estimate: true } end)')
+   + (if $force == "1" then {force: ($confirm == "1")} else {embeddingOnly: true} end)
+   + (if $scope == "" then {} else {scope: $scope} end)
+   + (if $confirm == "1" then {} else {estimate: true} end)')
 curl --fail-with-body -sS -X POST \
   -H "Authorization: Bearer ${TOKEN}" -H "X-Neuralis-Skill: manage-sources" \
   -H "Content-Type: application/json" -d "${BODY}" \

package/skills/sync/SKILL.md

@@ -13,20 +13,20 @@ Trigger a delta sync for the brain-core filesystem.
 
 1. Use `fs_list` with no `uri` first to identify configured sources, scopes, current sync status, and recent errors.
 2. Call the brain-core source sync route for the intended source. The route answers 202 + a queue job snapshot — the sync runs in the background. Explicit sync requires `drive.sync`; source create/update/delete uses `drive.mount`; file writes use `drive.write`.
-3. Poll `GET /sources/sync-status?source=<slug>` until the job finishes, then report the job `result` counts: `filesAdded`, `filesUpdated`, `filesRemoved`, `filesSkipped`, `filesMoved`, `chunksRemoved`, `chunksEmbedded` and `chunksSkipped` — and read the two flags that change what those counts mean before you report them. `cancelled: true` is not a failure, but the run stopped early: the counts are partial and a re-run converges. `truncated: true` means the walk stopped at `filesScanCap`, so files past the cap were never examined and no deletion or move was inferred — call that a partial pass, never a completed sync.
+3. Poll `GET /sources/sync-status?source=<slug>` until the job finishes, then report the job `result` counts: `filesAdded`, `filesUpdated`, `filesRemoved`, `filesSkipped`, `filesMoved`, `chunksRemoved`, `chunksEmbedded` and `chunksSkipped` plus `embeddingDegraded` (safe, deduplicated embedding stop reasons). Payload indexing can succeed with missing/stale embeddings; report that debt separately. Read the two flags before interpreting completion. `cancelled: true` is not a failure, but the run stopped early: the counts are partial and a re-run converges. `truncated: true` means the walk stopped at `filesScanCap`, so files past the cap were never examined and no deletion or move was inferred — call that a partial pass, never a completed sync.
 4. If any errors occur, list them clearly with the affected source, scope, and file path.
-5. Remind the user that `fs_read` and `fs_list` may already show live connector data before semantic/filter search catches up.
+5. Distinguish live connector data, indexed payload and embedding freshness. Provider outage or disabled embedding preserves metadata/full-text indexing; semantic results may be old, or the response may fall back to filter search. Ordinary sync completion does not settle all embedding debt. Use `manage-sources` explicit debt catchup; terminal `paused` carries `result.embedding.pausedReason`, and Resume creates a new authorized job from durable debt.
 
 ## What a sync will and will not index
 
-A file is embedded only when BOTH inputs allow it, and they are different kinds
+A file is indexed only when BOTH inputs allow it, and they are different kinds
 of thing — say which one you mean when you report a missing file:
 
 - the source's **exclude/include patterns** — a PREFERENCE the operator owns and
   can edit at any time (`manage-sources`). A file missing for this reason is a
   configuration answer, not a security one.
 - the immutable **uri-policy read floor** — the security half. *What cannot be
-  READ cannot be EMBEDDED*: a path a `floor:true` row denies `read` on is never
+  READ cannot be INDEXED*: a path a `floor:true` row denies `read` on is never
   newly embedded, on every source including ones attached long before the floor
   shipped, and no `include` whitelist resurrects it. There is no exclude entry to
   add and none to remove.

package/tools/fs_search.json

@@ -3,7 +3,7 @@
   "title": "Search Filesystem Nodes",
   "type": "object",
   "additionalProperties": false,
-  "description": "Find files by meaning, by indexed metadata, or by literal text in the live files. For a place you cannot name yet, pair semantic search with a scoped grep to cover index lag; grep needs a folder URI and answers with line anchors. Search before you create — and before you claim something is absent: every mode says when its set was cut.",
+  "description": "Find scoped files by meaning, indexed metadata/keywords or fixed-string live grep with line anchors (folder_uri required). Pair semantic and grep to cover index lag. Search before creating or claiming absence; every mode reports truncation.",
   "properties": {
     "search_mode": {
       "type": "string",
@@ -12,7 +12,7 @@
         "filter",
         "grep"
       ],
-      "description": "'semantic' (default) = embeddings + indexed text. 'filter' = indexed metadata/keyword, no embed cost. 'grep' = FIXED-STRING (never regex) over live files, needs folder_uri. `glob` alone → filter."
+      "description": "semantic (default): embeddings + indexed text; off/unavailable embedding → filter. Check effective_mode, embedding_degraded and row embedding_status (current/stale/missing/unknown). filter: metadata/keywords, no embed cost. grep: FIXED-STRING, never regex, needs folder_uri. glob alone → filter."
     },
     "query": {
       "type": "string",

package/dist/app/chunks/bash-M45GHPBQ.js

@@ -1 +0,0 @@
-import{a as e}from"./chunk-TY33BMKR.js";import"./chunk-DCANE7XH.js";export{e as default};

package/dist/app/chunks/c-X3REOAWD.js

@@ -1 +0,0 @@
-import{a}from"./chunk-QLBZ4JR2.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/cpp-VOWI743W.js

@@ -1 +0,0 @@
-import{a}from"./chunk-G4RZ3UNX.js";import"./chunk-XIFGTNRM.js";import"./chunk-QLBZ4JR2.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/css-2ZVPHE25.js

@@ -1 +0,0 @@
-import{a}from"./chunk-DKD2L57N.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/graphql-7V2NP54C.js

@@ -1 +0,0 @@
-import{a}from"./chunk-QXXJ73P5.js";import"./chunk-6TC3DVWV.js";import"./chunk-TRRUHDPN.js";import"./chunk-OLEIKJ3X.js";import"./chunk-KYH5EHHY.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/html-UF3LFLNA.js

@@ -1 +0,0 @@
-import{a}from"./chunk-RH3QY5LF.js";import"./chunk-DKD2L57N.js";import"./chunk-OLEIKJ3X.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/java-PNTAU4L3.js

@@ -1 +0,0 @@
-import{a}from"./chunk-BGRVFATT.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/javascript-4JJTQGEL.js

@@ -1 +0,0 @@
-import{a}from"./chunk-OLEIKJ3X.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/json-VLQ6D3JH.js

@@ -1 +0,0 @@
-import{a}from"./chunk-DZ5C5FKI.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/jsx-KQKSLAAH.js

@@ -1 +0,0 @@
-import{a}from"./chunk-KYH5EHHY.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/lua-UFPYUJ2O.js

@@ -1 +0,0 @@
-import{a}from"./chunk-5H7ZCOD3.js";import"./chunk-QLBZ4JR2.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/r-QEZB45SR.js

@@ -1 +0,0 @@
-import{a}from"./chunk-737Y24HS.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/sql-DTZHNUZP.js

@@ -1 +0,0 @@
-import{a}from"./chunk-4QNMHAIR.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/tsx-WPR2WRZD.js

@@ -1 +0,0 @@
-import{a}from"./chunk-TRRUHDPN.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/typescript-LWO362OA.js

@@ -1 +0,0 @@
-import{a}from"./chunk-6TC3DVWV.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/xml-A5H72RTS.js

@@ -1 +0,0 @@
-import{a}from"./chunk-3QLE7Y4L.js";import"./chunk-BGRVFATT.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/app/chunks/yaml-MXHSIJCI.js

@@ -1 +0,0 @@
-import{a}from"./chunk-SFUNBBEA.js";import"./chunk-DCANE7XH.js";export{a as default};

package/dist/src/services/purgePendingNodes.d.ts

@@ -1,32 +0,0 @@
-/**
- * One-time `_pending` boot self-heal (prudent-indexing-otter, Step C).
- *
- * The durable Pending-Changes journal + baseline blobs live under
- * `data://brain-core/_pending/**` — sync-EXCLUDED (the runtime floor) precisely
- * because the baseline blobs may hold sensitive file content that must NEVER be
- * vectorized. Before this increment the fs write path vectorized EVERY create,
- * so projects predating the floor can carry stale `_pending` nodes in Qdrant.
- *
- * This idempotent boot pass purges them per project — the proven `runPurge`
- * bounded `deleteByFilter` shape (no full-project scroll, no client matching):
- * a single server-side delete scoped to `projectId` + `folder_ancestors` =
- * `data://brain-core/_pending` (chunks carry `folder_ancestors` too, so they are
- * covered by the same filter). `_pending`-ONLY; general excluded-node cleanup
- * rides the existing sync config-change reconcile.
- */
-import type { SourceConfigPort } from '../connectors/types.js';
-import type { VectorIndexPort } from '../vector/types.js';
-import type { FilesystemNode } from '../domain/types.js';
-export type PurgePendingResult = {
-    projects: number;
-    removed: number;
-};
-export declare function purgeStalePendingNodes(deps: {
-    sourceConfigs: SourceConfigPort;
-    getVector: (projectId: string) => Promise<VectorIndexPort<FilesystemNode>>;
-    logger?: {
-        info?: (msg: string, meta?: Record<string, unknown>) => void;
-        warn?: (msg: string, meta?: Record<string, unknown>) => void;
-    };
-}): Promise<PurgePendingResult>;
-//# sourceMappingURL=purgePendingNodes.d.ts.map

package/dist/src/services/purgePendingNodes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"purgePendingNodes.d.ts","sourceRoot":"","sources":["../../../src/services/purgePendingNodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAKzD,MAAM,MAAM,kBAAkB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,aAAa,EAAE,gBAAgB,CAAC;IAChC,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,CAAC;CACzI,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAyC9B"}

package/dist/src/services/purgePendingNodes.js

@@ -1,61 +0,0 @@
-/**
- * One-time `_pending` boot self-heal (prudent-indexing-otter, Step C).
- *
- * The durable Pending-Changes journal + baseline blobs live under
- * `data://brain-core/_pending/**` — sync-EXCLUDED (the runtime floor) precisely
- * because the baseline blobs may hold sensitive file content that must NEVER be
- * vectorized. Before this increment the fs write path vectorized EVERY create,
- * so projects predating the floor can carry stale `_pending` nodes in Qdrant.
- *
- * This idempotent boot pass purges them per project — the proven `runPurge`
- * bounded `deleteByFilter` shape (no full-project scroll, no client matching):
- * a single server-side delete scoped to `projectId` + `folder_ancestors` =
- * `data://brain-core/_pending` (chunks carry `folder_ancestors` too, so they are
- * covered by the same filter). `_pending`-ONLY; general excluded-node cleanup
- * rides the existing sync config-change reconcile.
- */
-/** The folder-ancestor key the `_pending` journal + blob nodes carry. */
-const PENDING_FOLDER_ANCESTOR = 'data://brain-core/_pending';
-export async function purgeStalePendingNodes(deps) {
-    let scoped;
-    try {
-        scoped = await deps.sourceConfigs.listAll();
-    }
-    catch (err) {
-        deps.logger?.warn?.('pending purge: listAll failed', {
-            error: err instanceof Error ? err.message : String(err),
-        });
-        return { projects: 0, removed: 0 };
-    }
-    const projectIds = new Set();
-    for (const { scope } of scoped) {
-        if (scope.projectId)
-            projectIds.add(scope.projectId);
-    }
-    let removed = 0;
-    for (const projectId of projectIds) {
-        try {
-            const vector = await deps.getVector(projectId);
-            removed += await vector.deleteByFilter({
-                must: [
-                    { field: 'projectId', equals: projectId },
-                    { field: 'folder_ancestors', equals: PENDING_FOLDER_ANCESTOR },
-                ],
-            });
-        }
-        catch (err) {
-            deps.logger?.warn?.('pending purge failed for project', {
-                projectId,
-                error: err instanceof Error ? err.message : String(err),
-            });
-        }
-    }
-    if (removed > 0) {
-        deps.logger?.info?.('stale _pending nodes purged', {
-            projects: projectIds.size,
-            removed,
-        });
-    }
-    return { projects: projectIds.size, removed };
-}
-//# sourceMappingURL=purgePendingNodes.js.map

package/dist/src/services/purgePendingNodes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"purgePendingNodes.js","sourceRoot":"","sources":["../../../src/services/purgePendingNodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,yEAAyE;AACzE,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AAI7D,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAI5C;IACC,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,+BAA+B,EAAE;YACnD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC/C,OAAO,IAAI,MAAM,MAAM,CAAC,cAAc,CAAC;gBACrC,IAAI,EAAE;oBACJ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE;oBACzC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,uBAAuB,EAAE;iBAC/D;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,kCAAkC,EAAE;gBACtD,SAAS;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,6BAA6B,EAAE;YACjD,QAAQ,EAAE,UAAU,CAAC,IAAI;YACzB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC"}