@provos/ironcurtain 0.6.0 → 0.7.1

package/dist/pipeline/pipeline-runner.js

@@ -0,0 +1,547 @@
+/**
+ * PipelineRunner -- Encapsulates the full policy compilation pipeline.
+ *
+ * Provides a reusable abstraction over the compile-verify-repair loop.
+ * Used by both:
+ * - compile.ts CLI (constitutionKind: 'constitution')
+ * - compileTaskPolicy() (constitutionKind: 'task-policy')
+ *
+ * The two constitutionKind variants differ only in the LLM prompt:
+ * - 'constitution': broad-principle compilation from a constitution doc
+ * - 'task-policy': whitelist-generation from an English task description
+ */
+import { resolve } from 'node:path';
+import chalk from 'chalk';
+import { extractServerDomainAllowlists } from '../config/index.js';
+import { PolicyEngine } from '../trusted-process/policy-engine.js';
+import { buildCompilerSystemPrompt, ConstitutionCompilerSession, formatAnnotationsSummary, validateCompiledRules, } from './constitution-compiler.js';
+import { getHandwrittenScenarios } from './handwritten-scenarios.js';
+import { resolveAllLists } from './list-resolver.js';
+import { computeHash, loadExistingArtifact, loadToolAnnotationsFile, mergeReplacements, resolveRulePaths, writeArtifact, withSpinner, showCached, createPipelineLlm, } from './pipeline-shared.js';
+import { applyScenarioCorrections, buildJudgeSystemPrompt, extractScenarioCorrections, filterStructuralConflicts, PolicyVerifierSession, verifyPolicy, } from './policy-verifier.js';
+import { buildGeneratorSystemPrompt, ScenarioGeneratorSession } from './scenario-generator.js';
+import { connectMcpServersForLists, disconnectMcpServers } from './mcp-connections.js';
+/** Creates PipelineModels from user config. Delegates to shared createPipelineLlm. */
+export async function createPipelineModels(logDir) {
+    const effectiveLogDir = logDir ?? resolve(process.cwd(), 'generated');
+    const llm = await createPipelineLlm(effectiveLogDir, 'unknown');
+    return {
+        compilationModel: llm.model,
+        cacheStrategy: llm.cacheStrategy,
+        logContext: llm.logContext,
+        logPath: llm.logPath,
+    };
+}
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+function computePolicyHash(systemPrompt, annotations) {
+    return computeHash(systemPrompt, JSON.stringify(annotations));
+}
+function computeScenariosHash(systemPrompt, handwrittenScenarios) {
+    return computeHash(systemPrompt, JSON.stringify(handwrittenScenarios));
+}
+function extractPermittedDirectories(rules) {
+    const dirs = new Set();
+    for (const rule of rules) {
+        if (rule.if.paths?.within) {
+            dirs.add(rule.if.paths.within);
+        }
+    }
+    return [...dirs].sort();
+}
+function collectProbeScenarios(result) {
+    return result.rounds.flatMap((round) => round.newScenarios);
+}
+function filterAndLogStructuralConflicts(engine, scenarios, label = 'Discarded scenario (structural conflict)') {
+    const { valid, discarded } = filterStructuralConflicts(engine, scenarios);
+    for (const d of discarded) {
+        const prefix = d.scenario.source === 'handwritten'
+            ? chalk.yellow('Warning: handwritten scenario conflicts with structural invariant:')
+            : chalk.dim(`${label}:`);
+        console.error(`  ${prefix} "${d.scenario.description}" — ${d.rule} always returns ${d.actual}`);
+    }
+    return { valid, discarded };
+}
+class RuleValidationError extends Error {
+    errors;
+    constructor(errors) {
+        super('Compiled rule validation failed');
+        this.errors = errors;
+        this.name = 'RuleValidationError';
+    }
+}
+function validateRulesOrThrow(rules, listDefinitions = []) {
+    const ruleValidation = validateCompiledRules(rules, listDefinitions);
+    if (ruleValidation.warnings.length > 0) {
+        for (const w of ruleValidation.warnings) {
+            console.error(`  ${chalk.yellow('Warning:')} ${w}`);
+        }
+    }
+    if (!ruleValidation.valid) {
+        throw new RuleValidationError(ruleValidation.errors);
+    }
+}
+function buildPolicyArtifact(constitutionHash, rules, listDefinitions, inputHash) {
+    const artifact = {
+        generatedAt: new Date().toISOString(),
+        constitutionHash,
+        inputHash,
+        rules,
+    };
+    if (listDefinitions.length > 0) {
+        artifact.listDefinitions = listDefinitions;
+    }
+    return artifact;
+}
+/**
+ * Builds the task-policy system prompt for per-job compilation.
+ * Instructs the LLM to generate a strict whitelist from the task.
+ */
+function buildTaskCompilerSystemPrompt(taskDescription, annotations, protectedPaths, allowedDirectory) {
+    const annotationsSummary = formatAnnotationsSummary(annotations);
+    return `You are compiling a task-scoped security policy for an automated scheduled job. The job runs unattended on a schedule. Your goal is to generate the MINIMUM set of policy rules required for this specific task -- nothing more.
+
+## Task Description
+
+${taskDescription}
+
+## Tool Annotations
+
+These are the available tools and their classified capabilities:
+
+${annotationsSummary}
+
+## Structural Invariants (handled automatically -- do NOT generate rules for these)
+
+1. **Protected paths** -- reads/writes/deletes to these paths are automatically denied:
+${protectedPaths.map((p) => `- ${p}`).join('\n')}
+
+2. **Workspace containment** -- operations within the job's workspace (${allowedDirectory}) are automatically allowed.
+
+3. **Default deny** -- if no compiled rule matches, the operation is DENIED. You do NOT need catch-all rules.
+
+## Instructions
+
+Generate an ORDERED list of policy rules (first match wins) that allow EXACTLY the operations this task needs. Be a strict whitelist:
+
+1. **Allow** operations the task explicitly describes or clearly requires.
+   - "label each issue by type" -> allow github.add_label
+   - "add a comment" -> allow github.create_comment
+   - "close issues with no response for 30+ days" -> allow github.close_issue (the task explicitly authorizes this)
+
+2. **Escalate** operations that are consequential AND only implicitly needed.
+   - If the task says "fix bugs" but doesn't mention specific files, escalate write operations.
+   - If an operation could cause data loss and the task doesn't explicitly authorize it, escalate.
+
+3. **Omit** operations the task does not need. Default deny handles them.
+   - Do NOT generate rules for tools unrelated to the task.
+   - Do NOT generate broad "allow all reads" rules unless the task requires broad read access.
+
+4. **Filesystem access**: The agent's workspace is automatically allowed. Only generate rules for filesystem access OUTSIDE the workspace if the task requires it.
+
+5. **Side-effect-free operations**: Reading and listing operations for tools the task uses should generally be allowed. The task cannot operate without discovering available data.
+
+## Rule Format
+
+Produce an ORDERED list of policy rules (first match wins). Each rule has:
+- "name": a kebab-case identifier
+- "description": what the rule does
+- "principle": which task requirement this implements
+- "if": conditions that must ALL be true for the rule to fire:
+  - "roles": array of argument roles to match. Omit = any tool.
+  - "server": array of server names (omit = any server)
+  - "tool": array of specific tool names (omit = any matching tool)
+  - "sideEffects": match on the tool's sideEffects annotation (omit = don't filter)
+  - "paths": path condition with "roles" and "within" (concrete absolute directory)
+  - "domains": domain condition with "roles" and "allowed" (list of allowed domain patterns). For git-remote-url roles, use hostname/owner/repo patterns for specific repos (e.g., "github.com/provos/ironcurtain") or hostname-only for any repo on that host (e.g., "github.com"). Git tools with both path and URL roles need "domains" conditions for git-remote-url (path roles get sandbox-resolved separately).
+  - "lists": array of list conditions with "roles", "allowed", and "matchType"
+- "then": "allow" or "escalate" (deny is implicit via default-deny)
+- "reason": human-readable explanation
+
+CRITICAL RULES:
+1. Do NOT generate rules for protected path checking, unknown tool denial, or sandbox containment.
+2. Use CONCRETE ABSOLUTE paths when needed.
+3. Order matters: more specific rules before more general ones.
+4. Only output "allow" and "escalate" rules.
+5. Be concise in descriptions and reasons -- one sentence each.`;
+}
+// ---------------------------------------------------------------------------
+// PipelineRunner
+// ---------------------------------------------------------------------------
+/**
+ * Encapsulates the full policy compilation pipeline:
+ * compile rules -> generate scenarios -> verify -> repair loop.
+ */
+export class PipelineRunner {
+    model;
+    cacheStrategy;
+    logContext;
+    constructor(models) {
+        this.model = models.compilationModel;
+        this.cacheStrategy = models.cacheStrategy;
+        this.logContext = models.logContext;
+    }
+    /**
+     * Runs the full pipeline. Returns the compiled policy on success.
+     */
+    async run(config) {
+        const toolAnnotationsFile = config.preloadedToolAnnotations ??
+            loadToolAnnotationsFile(config.toolAnnotationsDir, config.toolAnnotationsFallbackDir);
+        if (!toolAnnotationsFile) {
+            throw new Error("tool-annotations.json not found. Run 'ironcurtain annotate-tools' first.");
+        }
+        const allAnnotations = Object.values(toolAnnotationsFile.servers).flatMap((server) => server.tools);
+        const serverDomainAllowlists = config.mcpServers ? extractServerDomainAllowlists(config.mcpServers) : undefined;
+        const includeHandwritten = config.includeHandwrittenScenarios ?? config.constitutionKind === 'constitution';
+        const constitutionHash = computeHash(config.constitutionInput);
+        // Build the system prompt based on constitutionKind
+        const handwrittenScenarios = includeHandwritten ? getHandwrittenScenarios(config.allowedDirectory) : [];
+        const compilerPrompt = config.constitutionKind === 'task-policy'
+            ? buildTaskCompilerSystemPrompt(config.constitutionInput, allAnnotations, config.protectedPaths, config.allowedDirectory)
+            : buildCompilerSystemPrompt(config.constitutionInput, allAnnotations, { protectedPaths: config.protectedPaths }, handwrittenScenarios.length > 0 ? handwrittenScenarios : undefined);
+        const compilerHash = computePolicyHash(compilerPrompt, allAnnotations);
+        const compilerSystem = this.cacheStrategy.wrapSystemPrompt(compilerPrompt);
+        // Load existing artifacts for cache comparison
+        const existingPolicy = loadExistingArtifact(config.outputDir, 'compiled-policy.json');
+        const existingScenarios = loadExistingArtifact(config.outputDir, 'test-scenarios.json');
+        // Step 1: Compile constitution/task into policy rules
+        this.logContext.stepName = 'compile-constitution';
+        let { rules, listDefinitions, inputHash, session: compilerSession, } = await this.compilePolicyRules(allAnnotations, compilerHash, existingPolicy, compilerSystem);
+        let compiledPolicyFile = buildPolicyArtifact(constitutionHash, rules, listDefinitions, inputHash);
+        writeArtifact(config.outputDir, 'compiled-policy.json', compiledPolicyFile);
+        // Resolve dynamic lists if the compiler emitted list definitions
+        const hasLists = listDefinitions.length > 0;
+        const totalSteps = hasLists ? 4 : 3;
+        let dynamicLists;
+        if (hasLists) {
+            this.logContext.stepName = 'resolve-lists';
+            const existingLists = loadExistingArtifact(config.outputDir, 'dynamic-lists.json');
+            const needsMcp = listDefinitions.some((d) => d.requiresMcp);
+            let mcpConnections;
+            if (needsMcp && config.mcpServers) {
+                mcpConnections = await connectMcpServersForLists(listDefinitions, config.mcpServers);
+            }
+            const listStepText = `[2/${totalSteps}] Resolving dynamic lists`;
+            try {
+                const { result: resolvedLists } = await withSpinner(listStepText, async (spinner) => resolveAllLists(listDefinitions, { model: this.model, mcpConnections }, existingLists, (msg) => {
+                    spinner.text = `${listStepText} — ${msg}`;
+                }), (result, elapsed) => {
+                    const count = Object.keys(result.lists).length;
+                    return `${listStepText}: ${count} list(s) resolved (${elapsed.toFixed(1)}s)`;
+                });
+                dynamicLists = resolvedLists;
+                writeArtifact(config.outputDir, 'dynamic-lists.json', dynamicLists);
+            }
+            finally {
+                if (mcpConnections) {
+                    await disconnectMcpServers(mcpConnections);
+                }
+            }
+        }
+        // Extract permitted directories from compiled rules
+        const permittedDirectories = extractPermittedDirectories(rules);
+        // Step 2: Generate test scenarios
+        const scenarioStepLabel = `[${hasLists ? 3 : 2}/${totalSteps}]`;
+        this.logContext.stepName = 'generate-scenarios';
+        const scenarioPrompt = buildGeneratorSystemPrompt(config.constitutionInput, allAnnotations, config.allowedDirectory, permittedDirectories, dynamicLists);
+        const scenarioHash = computeScenariosHash(scenarioPrompt, handwrittenScenarios);
+        const scenarioSystem = this.cacheStrategy.wrapSystemPrompt(scenarioPrompt);
+        const scenarioResult = await this.generateTestScenarios(allAnnotations, config.allowedDirectory, handwrittenScenarios, scenarioHash, existingScenarios, scenarioStepLabel, scenarioSystem);
+        writeArtifact(config.outputDir, 'test-scenarios.json', {
+            generatedAt: new Date().toISOString(),
+            constitutionHash,
+            inputHash: scenarioResult.inputHash,
+            scenarios: scenarioResult.scenarios,
+        });
+        // Filter scenarios against structural invariants
+        const filterEngine = new PolicyEngine(compiledPolicyFile, toolAnnotationsFile, config.protectedPaths, config.allowedDirectory, undefined, dynamicLists);
+        const { valid: initialValid, discarded: discardedScenarios } = filterAndLogStructuralConflicts(filterEngine, scenarioResult.scenarios);
+        let filteredScenarios = initialValid;
+        // Step 3: Verify compiled policy against scenarios
+        const verifyStepLabel = `[${totalSteps}/${totalSteps}]`;
+        this.logContext.stepName = 'verify-policy';
+        const allAvailableTools = allAnnotations.map((a) => ({ serverName: a.serverName, toolName: a.toolName }));
+        const serverNamesList = [...new Set(allAnnotations.map((a) => a.serverName))];
+        const toolNamesList = [...new Set(allAnnotations.map((a) => a.toolName))];
+        let verifierSystem = this.cacheStrategy.wrapSystemPrompt(buildJudgeSystemPrompt(config.constitutionInput, compiledPolicyFile, config.protectedPaths, allAvailableTools, dynamicLists, config.allowedDirectory));
+        let verifierSession = new PolicyVerifierSession({
+            system: verifierSystem,
+            model: this.model,
+            serverNames: serverNamesList,
+            toolNames: toolNamesList,
+        });
+        const { result: verificationResultInitial } = await withSpinner(`${verifyStepLabel} Verifying policy`, async (spinner) => verifyPolicy(config.constitutionInput, compiledPolicyFile, toolAnnotationsFile, config.protectedPaths, filteredScenarios, this.model, 3, config.allowedDirectory, (msg) => {
+            spinner.text = `${verifyStepLabel} Verifying policy — ${msg}`;
+        }, serverDomainAllowlists, dynamicLists, verifierSystem, verifierSession), (r, elapsed) => r.pass
+            ? `${verifyStepLabel} Verified policy: ${r.rounds.length} round(s) (${elapsed.toFixed(1)}s)`
+            : `${verifyStepLabel} Verification completed with failures (${elapsed.toFixed(1)}s)`);
+        let verificationResult = verificationResultInitial;
+        if (!verificationResult.pass) {
+            this.logVerboseFailures(verificationResult);
+        }
+        // Collect probe scenarios from verifier
+        const { valid: filteredInitialProbes } = filterAndLogStructuralConflicts(filterEngine, collectProbeScenarios(verificationResult), 'Discarded probe (structural conflict)');
+        const accumulatedProbes = filteredInitialProbes;
+        // Compile-verify-repair loop (up to 2 repair attempts)
+        const MAX_REPAIRS = 2;
+        let repairAttempts = 0;
+        let scenarioCorrectionsApplied = 0;
+        if (!verificationResult.pass) {
+            const baseInputHash = inputHash;
+            for (let attempt = 1; attempt <= MAX_REPAIRS; attempt++) {
+                console.error('');
+                const lastRound = verificationResult.rounds[verificationResult.rounds.length - 1];
+                const judgeAnalysis = lastRound?.llmAnalysis ?? verificationResult.summary;
+                const attributedFailures = lastRound?.attributedFailures ?? [];
+                const allScenarios = [...scenarioResult.scenarios, ...accumulatedProbes];
+                const { corrections, handwrittenWarnings } = extractScenarioCorrections(attributedFailures, allScenarios);
+                for (const warning of handwrittenWarnings) {
+                    console.error(`  ${chalk.yellow('Warning:')} ${warning}`);
+                }
+                if (corrections.length > 0) {
+                    scenarioResult.scenarios = applyScenarioCorrections(scenarioResult.scenarios, corrections);
+                    const correctedProbes = applyScenarioCorrections(accumulatedProbes, corrections);
+                    accumulatedProbes.splice(0, accumulatedProbes.length, ...correctedProbes);
+                    scenarioCorrectionsApplied += corrections.length;
+                    console.error(`  ${chalk.dim(`Corrected ${corrections.length} scenario expectation(s)`)}`);
+                }
+                // Feed corrections back to the scenario generator session
+                const { session: scenarioSession } = scenarioResult;
+                if (scenarioSession &&
+                    (corrections.length > 0 || discardedScenarios.length > 0 || accumulatedProbes.length > 0)) {
+                    const feedback = {
+                        corrections,
+                        discardedScenarios,
+                        probeScenarios: accumulatedProbes,
+                    };
+                    this.logContext.stepName = `repair-regenerate-${attempt}`;
+                    const regenText = `Repair ${attempt}/${MAX_REPAIRS}: Regenerating scenarios`;
+                    const { result: replacements } = await withSpinner(regenText, async (spinner) => scenarioSession.regenerate(feedback, (msg) => {
+                        spinner.text = `${regenText} — ${msg}`;
+                    }), (r, elapsed) => `${regenText}: ${r.length} replacement(s) (${elapsed.toFixed(1)}s)`);
+                    scenarioResult.scenarios = mergeReplacements(scenarioResult.scenarios, replacements, corrections, discardedScenarios);
+                }
+                ({ valid: filteredScenarios } = filterAndLogStructuralConflicts(filterEngine, scenarioResult.scenarios));
+                const allRuleBlamedFailures = verificationResult.failedScenarios.filter((f) => {
+                    const attr = attributedFailures.find((a) => a.scenarioDescription === f.scenario.description);
+                    if (!attr || attr.blame.kind === 'rule' || attr.blame.kind === 'both')
+                        return true;
+                    return handwrittenWarnings.some((w) => w.includes(f.scenario.description));
+                });
+                if (allRuleBlamedFailures.length > 0) {
+                    const repairContext = {
+                        failedScenarios: allRuleBlamedFailures,
+                        judgeAnalysis,
+                        attemptNumber: attempt,
+                        existingListDefinitions: listDefinitions.length > 0 ? listDefinitions : undefined,
+                        handwrittenScenarios: includeHandwritten ? handwrittenScenarios : undefined,
+                    };
+                    this.logContext.stepName = `repair-compile-${attempt}`;
+                    const repairCompileText = `Repair ${attempt}/${MAX_REPAIRS}: Recompiling`;
+                    const { result: repairResult } = await withSpinner(repairCompileText, async (spinner) => this.compilePolicyRulesWithRepair(allAnnotations, config.protectedPaths, baseInputHash, repairContext, compilerSystem, compilerSession, (msg) => {
+                        spinner.text = `${repairCompileText} — ${msg}`;
+                    }), (r, elapsed) => `Repair ${attempt}/${MAX_REPAIRS}: Recompiled ${r.rules.length} rules (${elapsed.toFixed(1)}s)`);
+                    rules = repairResult.rules;
+                    listDefinitions = repairResult.listDefinitions;
+                    inputHash = repairResult.inputHash;
+                    compilerSession = repairResult.session;
+                    // Re-resolve dynamic lists if repair introduced new ones
+                    if (dynamicLists && listDefinitions.length > 0) {
+                        const currentLists = dynamicLists;
+                        const newListDefs = listDefinitions.filter((def) => !(def.name in currentLists.lists));
+                        if (newListDefs.length > 0) {
+                            const mcpRequired = newListDefs.filter((d) => d.requiresMcp);
+                            if (mcpRequired.length > 0) {
+                                console.error(`  ${chalk.yellow('Warning:')} Repair introduced ${mcpRequired.length} new MCP-requiring list(s) — skipping resolution`);
+                            }
+                            const knowledgeDefs = newListDefs.filter((d) => !d.requiresMcp);
+                            if (knowledgeDefs.length > 0) {
+                                console.error(`  ${chalk.dim(`Resolving ${knowledgeDefs.length} new list(s) from repair...`)}`);
+                                const resolved = await resolveAllLists(knowledgeDefs, { model: this.model }, currentLists);
+                                dynamicLists = {
+                                    ...resolved,
+                                    lists: { ...currentLists.lists, ...resolved.lists },
+                                };
+                                writeArtifact(config.outputDir, 'dynamic-lists.json', dynamicLists);
+                            }
+                        }
+                    }
+                    compiledPolicyFile = buildPolicyArtifact(constitutionHash, rules, listDefinitions, inputHash);
+                    writeArtifact(config.outputDir, 'compiled-policy.json', compiledPolicyFile);
+                    verifierSystem = this.cacheStrategy.wrapSystemPrompt(buildJudgeSystemPrompt(config.constitutionInput, compiledPolicyFile, config.protectedPaths, allAvailableTools, dynamicLists, config.allowedDirectory));
+                    verifierSession = new PolicyVerifierSession({
+                        system: verifierSystem,
+                        model: this.model,
+                        serverNames: serverNamesList,
+                        toolNames: toolNamesList,
+                    });
+                }
+                else {
+                    console.error(`  ${chalk.dim('No rule-blamed failures — skipping recompilation')}`);
+                }
+                this.logContext.stepName = `repair-verify-${attempt}`;
+                const repairScenarios = [...filteredScenarios, ...accumulatedProbes];
+                const repairVerifyText = `Repair ${attempt}/${MAX_REPAIRS}: Verifying`;
+                const { result: repairVerifyResult } = await withSpinner(repairVerifyText, async (spinner) => verifyPolicy(config.constitutionInput, compiledPolicyFile, toolAnnotationsFile, config.protectedPaths, repairScenarios, this.model, 1, config.allowedDirectory, (msg) => {
+                    spinner.text = `${repairVerifyText} — ${msg}`;
+                }, serverDomainAllowlists, dynamicLists, verifierSystem, verifierSession), (r, elapsed) => r.pass
+                    ? `Repair ${attempt}/${MAX_REPAIRS}: Verified (${elapsed.toFixed(1)}s)`
+                    : `Repair ${attempt}/${MAX_REPAIRS}: ${r.failedScenarios.length} failure(s) (${elapsed.toFixed(1)}s)`);
+                verificationResult = repairVerifyResult;
+                if (!verificationResult.pass) {
+                    this.logVerboseFailures(verificationResult);
+                }
+                const { valid: validRepairProbes } = filterAndLogStructuralConflicts(filterEngine, collectProbeScenarios(verificationResult), 'Discarded probe (structural conflict)');
+                accumulatedProbes.push(...validRepairProbes);
+                repairAttempts = attempt;
+                if (verificationResult.pass) {
+                    // Final full verification
+                    this.logContext.stepName = 'final-verify';
+                    const finalScenarios = [...filteredScenarios, ...accumulatedProbes];
+                    const finalSession = new PolicyVerifierSession({
+                        system: verifierSystem,
+                        model: this.model,
+                        serverNames: serverNamesList,
+                        toolNames: toolNamesList,
+                    });
+                    const { result: finalVerifyResult } = await withSpinner('Final full verification', async (spinner) => verifyPolicy(config.constitutionInput, compiledPolicyFile, toolAnnotationsFile, config.protectedPaths, finalScenarios, this.model, 3, config.allowedDirectory, (msg) => {
+                        spinner.text = `Final full verification — ${msg}`;
+                    }, serverDomainAllowlists, dynamicLists, verifierSystem, finalSession), (r, elapsed) => r.pass
+                        ? `Final full verification: passed (${elapsed.toFixed(1)}s)`
+                        : `Final full verification: ${r.failedScenarios.length} failure(s) (${elapsed.toFixed(1)}s)`);
+                    verificationResult = finalVerifyResult;
+                    const { valid: validFinalProbes } = filterAndLogStructuralConflicts(filterEngine, collectProbeScenarios(verificationResult), 'Discarded probe (structural conflict)');
+                    accumulatedProbes.push(...validFinalProbes);
+                    break;
+                }
+            }
+        }
+        // Re-write scenarios if the repair loop modified them
+        if (repairAttempts > 0) {
+            writeArtifact(config.outputDir, 'test-scenarios.json', {
+                generatedAt: new Date().toISOString(),
+                constitutionHash,
+                inputHash: scenarioResult.inputHash,
+                scenarios: scenarioResult.scenarios,
+            });
+        }
+        // Summary
+        const seenDescriptions = new Set(scenarioResult.scenarios.map((s) => s.description));
+        const uniqueProbes = accumulatedProbes.filter((s) => {
+            if (seenDescriptions.has(s.description))
+                return false;
+            seenDescriptions.add(s.description);
+            return true;
+        });
+        const totalScenariosTested = filteredScenarios.length + uniqueProbes.length;
+        console.error('');
+        console.error(`  Rules: ${rules.length}`);
+        console.error(`  Scenarios tested: ${totalScenariosTested}`);
+        if (discardedScenarios.length > 0) {
+            console.error(`  Scenarios discarded (structural conflicts): ${discardedScenarios.length}`);
+        }
+        if (uniqueProbes.length > 0) {
+            console.error(`  Probe scenarios accumulated: ${uniqueProbes.length}`);
+        }
+        if (repairAttempts > 0) {
+            console.error(`  Repair attempts: ${repairAttempts}`);
+        }
+        if (scenarioCorrectionsApplied > 0) {
+            console.error(`  Scenario corrections: ${scenarioCorrectionsApplied}`);
+        }
+        console.error(`  Artifacts written to: ${chalk.dim(config.outputDir + '/')}`);
+        if (config.llmLogPath) {
+            console.error(`  LLM interaction log: ${chalk.dim(config.llmLogPath)}`);
+        }
+        if (!verificationResult.pass) {
+            throw new Error('Verification FAILED — artifacts written but policy may need review.');
+        }
+        console.error('');
+        console.error(chalk.green.bold('Policy compilation successful!'));
+        return compiledPolicyFile;
+    }
+    // -----------------------------------------------------------------------
+    // Private compilation methods
+    // -----------------------------------------------------------------------
+    async compilePolicyRules(annotations, inputHash, existingPolicy, system) {
+        const stepText = '[1/3] Compiling constitution';
+        if (existingPolicy && existingPolicy.inputHash === inputHash) {
+            showCached(stepText);
+            return {
+                rules: resolveRulePaths(existingPolicy.rules),
+                listDefinitions: existingPolicy.listDefinitions ?? [],
+                inputHash,
+            };
+        }
+        const session = new ConstitutionCompilerSession({
+            system,
+            model: this.model,
+            annotations,
+        });
+        const { result: compilationOutput } = await withSpinner(stepText, async (spinner) => {
+            const output = await session.compile((msg) => {
+                spinner.text = `${stepText} — ${msg}`;
+            });
+            const compiledRules = resolveRulePaths(output.rules);
+            validateRulesOrThrow(compiledRules, output.listDefinitions);
+            return { rules: compiledRules, listDefinitions: output.listDefinitions };
+        }, (output, elapsed) => `${stepText}: ${output.rules.length} rules compiled (${elapsed.toFixed(1)}s)`);
+        return {
+            rules: compilationOutput.rules,
+            listDefinitions: compilationOutput.listDefinitions,
+            inputHash,
+            session,
+        };
+    }
+    async compilePolicyRulesWithRepair(annotations, protectedPaths, baseInputHash, repairContext, system, session, onProgress) {
+        let output;
+        if (session) {
+            output = await session.recompile(repairContext, onProgress);
+        }
+        else {
+            const { compileConstitution } = await import('./constitution-compiler.js');
+            output = await compileConstitution('', // Not needed when system prompt is provided
+            annotations, { protectedPaths }, this.model, repairContext, onProgress, system);
+        }
+        const compiledRules = resolveRulePaths(output.rules);
+        validateRulesOrThrow(compiledRules, output.listDefinitions);
+        return {
+            rules: compiledRules,
+            listDefinitions: output.listDefinitions,
+            inputHash: `${baseInputHash}-repair`,
+            session,
+        };
+    }
+    async generateTestScenarios(annotations, allowedDirectory, handwrittenScenarios, inputHash, existingScenarios, stepLabel, system) {
+        const stepText = `${stepLabel} Generating test scenarios`;
+        if (existingScenarios && existingScenarios.inputHash === inputHash) {
+            showCached(stepText);
+            return { scenarios: existingScenarios.scenarios, inputHash };
+        }
+        const session = new ScenarioGeneratorSession({
+            system,
+            model: this.model,
+            annotations,
+            handwrittenScenarios,
+        });
+        const { result: scenarios } = await withSpinner(stepText, async (spinner) => session.generate((msg) => {
+            spinner.text = `${stepText} — ${msg}`;
+        }), (scenarios, elapsed) => {
+            const generatedCount = scenarios.length - handwrittenScenarios.length;
+            return `${stepText}: ${scenarios.length} scenarios (${handwrittenScenarios.length} handwritten + ${generatedCount} generated) (${elapsed.toFixed(1)}s)`;
+        });
+        return { scenarios, inputHash, session };
+    }
+    logVerboseFailures(result) {
+        console.error('');
+        console.error(chalk.red('Verification FAILED:'));
+        console.error(result.summary);
+        console.error('');
+        for (const f of result.failedScenarios) {
+            console.error(`  ${chalk.red('FAIL:')} ${f.scenario.description}`);
+            console.error(`    Expected: ${f.scenario.expectedDecision}, Got: ${f.actualDecision} (rule: ${f.matchingRule})`);
+        }
+    }
+}
+//# sourceMappingURL=pipeline-runner.js.map

package/dist/pipeline/pipeline-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline-runner.js","sourceRoot":"","sources":["../../src/pipeline/pipeline-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,eAAe,EAA4B,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,UAAU,EACV,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,qBAAqB,EACrB,YAAY,GACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAG/F,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AA+EvF,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAe;IACxD,MAAM,eAAe,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IAChE,OAAO;QACL,gBAAgB,EAAE,GAAG,CAAC,KAAK;QAC3B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,iBAAiB,CAAC,YAAoB,EAAE,WAA6B;IAC5E,OAAO,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoB,EAAE,oBAAoC;IACtF,OAAO,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAqB;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA0B;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,+BAA+B,CACtC,MAAoB,EACpB,SAAyB,EACzB,QAAgB,0CAA0C;IAE1D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,yBAAyB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,MAAM,GACV,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,aAAa;YACjC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,oEAAoE,CAAC;YACpF,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,OAAO,CAAC,CAAC,IAAI,mBAAmB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,mBAAoB,SAAQ,KAAK;IACT;IAA5B,YAA4B,MAAgB;QAC1C,KAAK,CAAC,iCAAiC,CAAC,CAAC;QADf,WAAM,GAAN,MAAM,CAAU;QAE1C,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,SAAS,oBAAoB,CAAC,KAAqB,EAAE,kBAAoC,EAAE;IACzF,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACrE,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,mBAAmB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,gBAAwB,EACxB,KAAqB,EACrB,eAAiC,EACjC,SAAiB;IAEjB,MAAM,QAAQ,GAAuB;QACnC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,gBAAgB;QAChB,SAAS;QACT,KAAK;KACN,CAAC;IACF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,eAAe,GAAG,eAAe,CAAC;IAC7C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,6BAA6B,CACpC,eAAuB,EACvB,WAA6B,EAC7B,cAAwB,EACxB,gBAAwB;IAExB,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAEjE,OAAO;;;;EAIP,eAAe;;;;;;EAMf,kBAAkB;;;;;EAKlB,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;yEAEyB,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gEA+CzB,CAAC;AACjE,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,OAAO,cAAc;IACR,KAAK,CAAgB;IACrB,aAAa,CAAsB;IACnC,UAAU,CAAgB;IAE3C,YAAY,MAAsB;QAChC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,MAAyB;QACjC,MAAM,mBAAmB,GACvB,MAAM,CAAC,wBAAwB;YAC/B,uBAAuB,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAExF,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpG,MAAM,sBAAsB,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,6BAA6B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEhH,MAAM,kBAAkB,GAAG,MAAM,CAAC,2BAA2B,IAAI,MAAM,CAAC,gBAAgB,KAAK,cAAc,CAAC;QAE5G,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAE/D,oDAAoD;QACpD,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAExG,MAAM,cAAc,GAClB,MAAM,CAAC,gBAAgB,KAAK,aAAa;YACvC,CAAC,CAAC,6BAA6B,CAC3B,MAAM,CAAC,iBAAiB,EACxB,cAAc,EACd,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,gBAAgB,CACxB;YACH,CAAC,CAAC,yBAAyB,CACvB,MAAM,CAAC,iBAAiB,EACxB,cAAc,EACd,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,EACzC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CACnE,CAAC;QAER,MAAM,YAAY,GAAG,iBAAiB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QACvE,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAE3E,+CAA+C;QAC/C,MAAM,cAAc,GAAG,oBAAoB,CAAqB,MAAM,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;QAC1G,MAAM,iBAAiB,GAAG,oBAAoB,CAAoB,MAAM,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAE3G,sDAAsD;QACtD,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,sBAAsB,CAAC;QAClD,IAAI,EACF,KAAK,EACL,eAAe,EACf,SAAS,EACT,OAAO,EAAE,eAAe,GACzB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAEhG,IAAI,kBAAkB,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAClG,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;QAE5E,iEAAiE;QACjE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,YAA0C,CAAC;QAE/C,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,eAAe,CAAC;YAC3C,MAAM,aAAa,GAAG,oBAAoB,CAAmB,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;YAErG,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC5D,IAAI,cAA4D,CAAC;YACjE,IAAI,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBAClC,cAAc,GAAG,MAAM,yBAAyB,CAAC,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACvF,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,UAAU,2BAA2B,CAAC;YACjE,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,WAAW,CACjD,YAAY,EACZ,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,eAAe,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC7F,OAAO,CAAC,IAAI,GAAG,GAAG,YAAY,MAAM,GAAG,EAAE,CAAC;gBAC5C,CAAC,CAAC,EACJ,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;oBAClB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;oBAC/C,OAAO,GAAG,YAAY,KAAK,KAAK,sBAAsB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC/E,CAAC,CACF,CAAC;gBACF,YAAY,GAAG,aAAa,CAAC;gBAC7B,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC;YACtE,CAAC;oBAAS,CAAC;gBACT,IAAI,cAAc,EAAE,CAAC;oBACnB,MAAM,oBAAoB,CAAC,cAAc,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAEhE,kCAAkC;QAClC,MAAM,iBAAiB,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,GAAG,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,oBAAoB,CAAC;QAEhD,MAAM,cAAc,GAAG,0BAA0B,CAC/C,MAAM,CAAC,iBAAiB,EACxB,cAAc,EACd,MAAM,CAAC,gBAAgB,EACvB,oBAAoB,EACpB,YAAY,CACb,CAAC;QACF,MAAM,YAAY,GAAG,oBAAoB,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;QAChF,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAE3E,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACrD,cAAc,EACd,MAAM,CAAC,gBAAgB,EACvB,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,CACf,CAAC;QAEF,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,qBAAqB,EAAE;YACrD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,gBAAgB;YAChB,SAAS,EAAE,cAAc,CAAC,SAAS;YACnC,SAAS,EAAE,cAAc,CAAC,SAAS;SACR,CAAC,CAAC;QAE/B,iDAAiD;QACjD,MAAM,YAAY,GAAG,IAAI,YAAY,CACnC,kBAAkB,EAClB,mBAAmB,EACnB,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,gBAAgB,EACvB,SAAS,EACT,YAAY,CACb,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,GAAG,+BAA+B,CAC5F,YAAY,EACZ,cAAc,CAAC,SAAS,CACzB,CAAC;QACF,IAAI,iBAAiB,GAAG,YAAY,CAAC;QAErC,mDAAmD;QACnD,MAAM,eAAe,GAAG,IAAI,UAAU,IAAI,UAAU,GAAG,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,eAAe,CAAC;QAE3C,MAAM,iBAAiB,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1G,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAA0B,CAAC;QACvG,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAA0B,CAAC;QAEnG,IAAI,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CACtD,sBAAsB,CACpB,MAAM,CAAC,iBAAiB,EACxB,kBAAkB,EAClB,MAAM,CAAC,cAAc,EACrB,iBAAiB,EACjB,YAAY,EACZ,MAAM,CAAC,gBAAgB,CACxB,CACF,CAAC;QACF,IAAI,eAAe,GAAG,IAAI,qBAAqB,CAAC;YAC9C,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,eAAe;YAC5B,SAAS,EAAE,aAAa;SACzB,CAAC,CAAC;QAEH,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,WAAW,CAC7D,GAAG,eAAe,mBAAmB,EACrC,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,YAAY,CACV,MAAM,CAAC,iBAAiB,EACxB,kBAAkB,EAClB,mBAAmB,EACnB,MAAM,CAAC,cAAc,EACrB,iBAAiB,EACjB,IAAI,CAAC,KAAK,EACV,CAAC,EACD,MAAM,CAAC,gBAAgB,EACvB,CAAC,GAAG,EAAE,EAAE;YACN,OAAO,CAAC,IAAI,GAAG,GAAG,eAAe,uBAAuB,GAAG,EAAE,CAAC;QAChE,CAAC,EACD,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,eAAe,CAChB,EACH,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CACb,CAAC,CAAC,IAAI;YACJ,CAAC,CAAC,GAAG,eAAe,qBAAqB,CAAC,CAAC,MAAM,CAAC,MAAM,cAAc,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YAC5F,CAAC,CAAC,GAAG,eAAe,0CAA0C,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACzF,CAAC;QACF,IAAI,kBAAkB,GAAG,yBAAyB,CAAC;QAEnD,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QAC9C,CAAC;QAED,wCAAwC;QACxC,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,GAAG,+BAA+B,CACtE,YAAY,EACZ,qBAAqB,CAAC,kBAAkB,CAAC,EACzC,uCAAuC,CACxC,CAAC;QACF,MAAM,iBAAiB,GAAmB,qBAAqB,CAAC;QAEhE,uDAAuD;QACvD,MAAM,WAAW,GAAG,CAAC,CAAC;QACtB,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,0BAA0B,GAAG,CAAC,CAAC;QAEnC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,aAAa,GAAG,SAAS,CAAC;YAEhC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAElB,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAEnE,CAAC;gBACd,MAAM,aAAa,GAAG,SAAS,EAAE,WAAW,IAAI,kBAAkB,CAAC,OAAO,CAAC;gBAC3E,MAAM,kBAAkB,GAAG,SAAS,EAAE,kBAAkB,IAAI,EAAE,CAAC;gBAE/D,MAAM,YAAY,GAAG,CAAC,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,iBAAiB,CAAC,CAAC;gBACzE,MAAM,EAAE,WAAW,EAAE,mBAAmB,EAAE,GAAG,0BAA0B,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;gBAE1G,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;oBAC1C,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;gBAC5D,CAAC;gBAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3B,cAAc,CAAC,SAAS,GAAG,wBAAwB,CAAC,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;oBAC3F,MAAM,eAAe,GAAG,wBAAwB,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;oBACjF,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,iBAAiB,CAAC,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC;oBAC1E,0BAA0B,IAAI,WAAW,CAAC,MAAM,CAAC;oBACjD,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,aAAa,WAAW,CAAC,MAAM,0BAA0B,CAAC,EAAE,CAAC,CAAC;gBAC7F,CAAC;gBAED,0DAA0D;gBAC1D,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,cAAc,CAAC;gBACpD,IACE,eAAe;oBACf,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,EACzF,CAAC;oBACD,MAAM,QAAQ,GAAqB;wBACjC,WAAW;wBACX,kBAAkB;wBAClB,cAAc,EAAE,iBAAiB;qBAClC,CAAC;oBAEF,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,qBAAqB,OAAO,EAAE,CAAC;oBAC1D,MAAM,SAAS,GAAG,UAAU,OAAO,IAAI,WAAW,0BAA0B,CAAC;oBAC7E,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,WAAW,CAChD,SAAS,EACT,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,eAAe,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;wBAC3C,OAAO,CAAC,IAAI,GAAG,GAAG,SAAS,MAAM,GAAG,EAAE,CAAC;oBACzC,CAAC,CAAC,EACJ,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,SAAS,KAAK,CAAC,CAAC,MAAM,oBAAoB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACpF,CAAC;oBAEF,cAAc,CAAC,SAAS,GAAG,iBAAiB,CAC1C,cAAc,CAAC,SAAS,EACxB,YAAY,EACZ,WAAW,EACX,kBAAkB,CACnB,CAAC;gBACJ,CAAC;gBAED,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,+BAA+B,CAAC,YAAY,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;gBAEzG,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC5E,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;oBAC9F,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;wBAAE,OAAO,IAAI,CAAC;oBACnF,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC7E,CAAC,CAAC,CAAC;gBAEH,IAAI,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrC,MAAM,aAAa,GAAkB;wBACnC,eAAe,EAAE,qBAAqB;wBACtC,aAAa;wBACb,aAAa,EAAE,OAAO;wBACtB,uBAAuB,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;wBACjF,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;qBAC5E,CAAC;oBAEF,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,kBAAkB,OAAO,EAAE,CAAC;oBACvD,MAAM,iBAAiB,GAAG,UAAU,OAAO,IAAI,WAAW,eAAe,CAAC;oBAC1E,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,WAAW,CAChD,iBAAiB,EACjB,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,IAAI,CAAC,4BAA4B,CAC/B,cAAc,EACd,MAAM,CAAC,cAAc,EACrB,aAAa,EACb,aAAa,EACb,cAAc,EACd,eAAe,EACf,CAAC,GAAG,EAAE,EAAE;wBACN,OAAO,CAAC,IAAI,GAAG,GAAG,iBAAiB,MAAM,GAAG,EAAE,CAAC;oBACjD,CAAC,CACF,EACH,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CACb,UAAU,OAAO,IAAI,WAAW,gBAAgB,CAAC,CAAC,KAAK,CAAC,MAAM,WAAW,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAClG,CAAC;oBACF,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC;oBAC3B,eAAe,GAAG,YAAY,CAAC,eAAe,CAAC;oBAC/C,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC;oBACnC,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC;oBAEvC,yDAAyD;oBACzD,IAAI,YAAY,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC/C,MAAM,YAAY,GAAG,YAAY,CAAC;wBAClC,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;wBACvF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC3B,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;4BAC7D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCAC3B,OAAO,CAAC,KAAK,CACX,KAAK,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,sBAAsB,WAAW,CAAC,MAAM,kDAAkD,CACxH,CAAC;4BACJ,CAAC;4BACD,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;4BAChE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,aAAa,aAAa,CAAC,MAAM,6BAA6B,CAAC,EAAE,CAAC,CAAC;gCAChG,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,YAAY,CAAC,CAAC;gCAC3F,YAAY,GAAG;oCACb,GAAG,QAAQ;oCACX,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE;iCACpD,CAAC;gCACF,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC;4BACtE,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,kBAAkB,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;oBAC9F,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;oBAE5E,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAClD,sBAAsB,CACpB,MAAM,CAAC,iBAAiB,EACxB,kBAAkB,EAClB,MAAM,CAAC,cAAc,EACrB,iBAAiB,EACjB,YAAY,EACZ,MAAM,CAAC,gBAAgB,CACxB,CACF,CAAC;oBACF,eAAe,GAAG,IAAI,qBAAqB,CAAC;wBAC1C,MAAM,EAAE,cAAc;wBACtB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,WAAW,EAAE,eAAe;wBAC5B,SAAS,EAAE,aAAa;qBACzB,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,kDAAkD,CAAC,EAAE,CAAC,CAAC;gBACtF,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,iBAAiB,OAAO,EAAE,CAAC;gBACtD,MAAM,eAAe,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,iBAAiB,CAAC,CAAC;gBACrE,MAAM,gBAAgB,GAAG,UAAU,OAAO,IAAI,WAAW,aAAa,CAAC;gBACvE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,WAAW,CACtD,gBAAgB,EAChB,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,YAAY,CACV,MAAM,CAAC,iBAAiB,EACxB,kBAAkB,EAClB,mBAAmB,EACnB,MAAM,CAAC,cAAc,EACrB,eAAe,EACf,IAAI,CAAC,KAAK,EACV,CAAC,EACD,MAAM,CAAC,gBAAgB,EACvB,CAAC,GAAG,EAAE,EAAE;oBACN,OAAO,CAAC,IAAI,GAAG,GAAG,gBAAgB,MAAM,GAAG,EAAE,CAAC;gBAChD,CAAC,EACD,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,eAAe,CAChB,EACH,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CACb,CAAC,CAAC,IAAI;oBACJ,CAAC,CAAC,UAAU,OAAO,IAAI,WAAW,eAAe,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;oBACvE,CAAC,CAAC,UAAU,OAAO,IAAI,WAAW,KAAK,CAAC,CAAC,eAAe,CAAC,MAAM,gBAAgB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAC1G,CAAC;gBACF,kBAAkB,GAAG,kBAAkB,CAAC;gBAExC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;oBAC7B,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;gBAC9C,CAAC;gBAED,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,+BAA+B,CAClE,YAAY,EACZ,qBAAqB,CAAC,kBAAkB,CAAC,EACzC,uCAAuC,CACxC,CAAC;gBACF,iBAAiB,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,CAAC;gBAE7C,cAAc,GAAG,OAAO,CAAC;gBAEzB,IAAI,kBAAkB,CAAC,IAAI,EAAE,CAAC;oBAC5B,0BAA0B;oBAC1B,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,cAAc,CAAC;oBAC1C,MAAM,cAAc,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,iBAAiB,CAAC,CAAC;oBACpE,MAAM,YAAY,GAAG,IAAI,qBAAqB,CAAC;wBAC7C,MAAM,EAAE,cAAc;wBACtB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,WAAW,EAAE,eAAe;wBAC5B,SAAS,EAAE,aAAa;qBACzB,CAAC,CAAC;oBACH,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,WAAW,CACrD,yBAAyB,EACzB,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,YAAY,CACV,MAAM,CAAC,iBAAiB,EACxB,kBAAkB,EAClB,mBAAmB,EACnB,MAAM,CAAC,cAAc,EACrB,cAAc,EACd,IAAI,CAAC,KAAK,EACV,CAAC,EACD,MAAM,CAAC,gBAAgB,EACvB,CAAC,GAAG,EAAE,EAAE;wBACN,OAAO,CAAC,IAAI,GAAG,6BAA6B,GAAG,EAAE,CAAC;oBACpD,CAAC,EACD,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,YAAY,CACb,EACH,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CACb,CAAC,CAAC,IAAI;wBACJ,CAAC,CAAC,oCAAoC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;wBAC5D,CAAC,CAAC,4BAA4B,CAAC,CAAC,eAAe,CAAC,MAAM,gBAAgB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACjG,CAAC;oBACF,kBAAkB,GAAG,iBAAiB,CAAC;oBAEvC,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,+BAA+B,CACjE,YAAY,EACZ,qBAAqB,CAAC,kBAAkB,CAAC,EACzC,uCAAuC,CACxC,CAAC;oBACF,iBAAiB,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;oBAC5C,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACvB,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,qBAAqB,EAAE;gBACrD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,gBAAgB;gBAChB,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,SAAS,EAAE,cAAc,CAAC,SAAS;aACR,CAAC,CAAC;QACjC,CAAC;QAED,UAAU;QACV,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACrF,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAClD,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtD,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;QAE5E,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,uBAAuB,oBAAoB,EAAE,CAAC,CAAC;QAC7D,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,iDAAiD,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,kCAAkC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,sBAAsB,cAAc,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,0BAA0B,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,2BAA2B,0BAA0B,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,2BAA2B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAElE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,0EAA0E;IAC1E,8BAA8B;IAC9B,0EAA0E;IAElE,KAAK,CAAC,kBAAkB,CAC9B,WAA6B,EAC7B,SAAiB,EACjB,cAA8C,EAC9C,MAAmC;QAOnC,MAAM,QAAQ,GAAG,8BAA8B,CAAC;QAEhD,IAAI,cAAc,IAAI,cAAc,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC7D,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrB,OAAO;gBACL,KAAK,EAAE,gBAAgB,CAAC,cAAc,CAAC,KAAK,CAAC;gBAC7C,eAAe,EAAE,cAAc,CAAC,eAAe,IAAI,EAAE;gBACrD,SAAS;aACV,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,2BAA2B,CAAC;YAC9C,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW;SACZ,CAAC,CAAC;QAEH,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,WAAW,CACrD,QAAQ,EACR,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC3C,OAAO,CAAC,IAAI,GAAG,GAAG,QAAQ,MAAM,GAAG,EAAE,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrD,oBAAoB,CAAC,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;YAC5D,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3E,CAAC,EACD,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,oBAAoB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACnG,CAAC;QAEF,OAAO;YACL,KAAK,EAAE,iBAAiB,CAAC,KAAK;YAC9B,eAAe,EAAE,iBAAiB,CAAC,eAAe;YAClD,SAAS;YACT,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,4BAA4B,CACxC,WAA6B,EAC7B,cAAwB,EACxB,aAAqB,EACrB,aAA4B,EAC5B,MAAmC,EACnC,OAAgD,EAChD,UAAsC;QAOtC,IAAI,MAAM,CAAC;QACX,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;YAC3E,MAAM,GAAG,MAAM,mBAAmB,CAChC,EAAE,EAAE,4CAA4C;YAChD,WAAW,EACX,EAAE,cAAc,EAAE,EAClB,IAAI,CAAC,KAAK,EACV,aAAa,EACb,UAAU,EACV,MAAM,CACP,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrD,oBAAoB,CAAC,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAE5D,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,SAAS,EAAE,GAAG,aAAa,SAAS;YACpC,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,WAA6B,EAC7B,gBAAwB,EACxB,oBAAoC,EACpC,SAAiB,EACjB,iBAAgD,EAChD,SAAiB,EACjB,MAAmC;QAMnC,MAAM,QAAQ,GAAG,GAAG,SAAS,4BAA4B,CAAC;QAE1D,IAAI,iBAAiB,IAAI,iBAAiB,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnE,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrB,OAAO,EAAE,SAAS,EAAE,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC;QAC/D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC;YAC3C,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW;YACX,oBAAoB;SACrB,CAAC,CAAC;QAEH,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,WAAW,CAC7C,QAAQ,EACR,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC,IAAI,GAAG,GAAG,QAAQ,MAAM,GAAG,EAAE,CAAC;QACxC,CAAC,CAAC,EACJ,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC;YACtE,OAAO,GAAG,QAAQ,KAAK,SAAS,CAAC,MAAM,eAAe,oBAAoB,CAAC,MAAM,kBAAkB,cAAc,gBAAgB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1J,CAAC,CACF,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAC3C,CAAC;IAEO,kBAAkB,CAAC,MAA0B;QACnD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YACnE,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,gBAAgB,UAAU,CAAC,CAAC,cAAc,WAAW,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;CACF"}