@sanoma-ai/workflows 0.1.0 → 0.2.0

package/dist/apply.js

@@ -0,0 +1,470 @@
+import { z } from "zod";
+import { defineWorkflow } from "./define.js";
+import { compare, importsOf, observeBy, observed, sourceUrl, } from "./drift.js";
+import { isRunControlError } from "./errors.js";
+import { fieldPathOf, holderOf, valueAt } from "./resource.js";
+import { errorMessage } from "./shared.js";
+import { SOURCE_RESOLVE } from "./source.js";
+export { APPLY_WORKFLOW } from "./shared.js";
+// The built-in `apply` workflow: it observes the declared resources as drift does, plans what
+// would make each match its declaration, asks one approval wherever the policy holds a change,
+// then makes the changes in dependency order, keeping the lockfile's bindings as it goes. It is a
+// workflow like any other, held to the same lint, so every vendor call goes through `ctx`. Only
+// it may call a writable type's change operations (`isChangeOp`).
+/** What a person answers for a bound object the vendor no longer has (`gone`), or a binding no declaration has (`orphan`). */
+export const PLAN_ANSWERS = ["recreate", "forget", "delete"];
+/**
+ * The apply workflow's input: `only` the declared ids (`<file>#<export>`) or orphaned lockfile
+ * keys to plan, else all; `bind`, a declared id to the vendor's id of the object to bind it to;
+ * `answers`, by declared id or orphaned key: `recreate` or `forget` a gone object, `forget` or
+ * `delete` an orphaned binding's.
+ */
+export const ApplyInput = z.strictObject({
+    only: z.array(z.string()).optional(),
+    bind: z.record(z.string(), z.string().min(1)).optional(),
+    answers: z.record(z.string(), z.enum(PLAN_ANSWERS)).optional(),
+});
+/** How long apply waits between calls of an `afterCreate` operation with `until`, and how many calls it makes. */
+const AFTER_CREATE_SECONDS = 5;
+const AFTER_CREATE_CALLS = 120;
+/** What a step's resource is called in a problem: its file, and its export. */
+const problemOf = (id, message) => ({
+    file: id.slice(0, id.indexOf("#")),
+    message: `${id.slice(id.indexOf("#") + 1)}: ${message}`,
+});
+/** Each resource after the ones it names, otherwise in the files' order. */
+function inDependencyOrder(list) {
+    const byId = new Map(list.map((r) => [r.id, r]));
+    const out = [];
+    const seen = new Set();
+    const visit = (r) => {
+        if (seen.has(r.id))
+            return;
+        seen.add(r.id);
+        for (const target of Object.values(r.refs)) {
+            const named = byId.get(target);
+            if (named)
+                visit(named);
+        }
+        out.push(r);
+    };
+    list.forEach(visit);
+    return out;
+}
+/**
+ * What a change operation is given of a declaration: its fields, where it names a resource the
+ * vendor may hold by another field (`by`, as a repository's node id), that resource's binding id
+ * when it has one, made in this run or before.
+ */
+function desiredOf(r, types, bindings, hosts) {
+    const { fields, host } = types.get(`${r.vendor}.${r.type}`);
+    const { references = {} } = fields;
+    const out = structuredClone(r.desired);
+    for (const [at, target] of Object.entries(r.refs)) {
+        const bound = bindings[target]?.id;
+        const place = holderOf(out, at);
+        if (references[fieldPathOf(at)]?.by?.length && bound !== undefined && place)
+            place.holder[place.key] = bound;
+    }
+    // A host is given its source's clone URL and the commit its ref names now.
+    const run = hosts.get(r.id);
+    if (host && run) {
+        for (const [path, value] of [
+            [host.inputs.source, run.source],
+            [host.revision, run.revision],
+        ]) {
+            const place = holderOf(out, path);
+            if (place)
+                place.holder[place.key] = value;
+        }
+    }
+    return out;
+}
+/** Why apply cannot `what` (create, update, delete) an object of a type. */
+const cannotChange = (type, what) => type?.writable
+    ? `apply cannot ${what} a ${type.vendor}.${type.type}: no driver does`
+    : `apply cannot ${what} it: ${type ? `a ${type.vendor}.${type.type}` : "its type"} is read-only`;
+/** The ids in `list` that `known` refuses, as problems of the input's field `what`. */
+const unknown = (what, list, known) => list.filter((id) => !known(id)).map((id) => ({ message: `${what}: ${id} is no declared resource` }));
+/** What the input names that is neither declared nor an orphaned binding. */
+function inputProblems(input, ids, orphans) {
+    return [
+        ...unknown("only", input.only ?? [], (id) => ids.has(id) || orphans.has(id)),
+        ...unknown("bind", Object.keys(input.bind ?? {}), (id) => ids.has(id)),
+        ...unknown("answers", Object.keys(input.answers ?? {}), (id) => ids.has(id) || orphans.has(id)),
+    ];
+}
+/**
+ * What to do with one declared resource, from what observing it found: a step, a problem, or
+ * both, or `ask`: the input to its type's `plan`, whose answer `fromPlan` reads.
+ */
+function decide(r, result, now, input, desired, types, usable) {
+    const head = { id: r.id, vendor: r.vendor, type: r.type };
+    const key = `${r.vendor}.${r.type}`;
+    const may = (name) => usable.has(`${key}.${name}`);
+    const cannot = (what) => problemOf(r.id, cannotChange(types.get(key), what));
+    const given = input.bind?.[r.id];
+    if (given !== undefined) {
+        if (!("state" in now))
+            return { problem: problemOf(r.id, "error" in now ? now.error : `no ${key} ${given} to bind`) };
+        return { step: { ...head, action: "bind", binding: types.get(key).bindingId(now.state), source: "given" } };
+    }
+    if (result.status === "error")
+        return { problem: problemOf(r.id, result.error ?? "could not be read") };
+    if (result.status === "absent") {
+        if (result.found !== undefined)
+            return { step: { ...head, action: "bind", binding: result.found, source: "found" } };
+        return may("create") ? { ask: { desired } } : { problem: cannot("create") };
+    }
+    const binding = result.binding;
+    if (result.status === "gone") {
+        const answer = input.answers?.[r.id];
+        // An object that holds no data is made again, unless answered otherwise; anything else, a person decides.
+        if (answer === undefined && types.get(key).stateless && may("create"))
+            return { ask: { desired } };
+        const step = { ...head, action: "gone", binding };
+        if (answer === "recreate" && !may("create"))
+            return { step, problem: cannot("create") };
+        if (answer === "recreate" || answer === "forget")
+            return { step: { ...step, answer } };
+        return answer === undefined
+            ? { step }
+            : { step, problem: problemOf(r.id, `a gone object is recreated or forgotten, not ${answer}d`) };
+    }
+    if (may("plan"))
+        return { ask: { id: binding, desired } };
+    const step = { ...head, action: "none", binding };
+    return result.status === "drifted" ? { step, problem: cannot("update") } : { step };
+}
+/** The step a `plan` answer makes of a declared resource: a create for one unbound or gone, else an update, a replace or none. */
+function fromPlan(r, result, p) {
+    const head = { id: r.id, vendor: r.vendor, type: r.type };
+    const creating = result.status === "absent" || result.status === "gone";
+    if (creating && p.action === "create") {
+        return { step: { ...head, action: "create", planned: p.planned ?? {}, unknown: p.unknown } };
+    }
+    if (!creating && (p.action === "update" || p.action === "replace")) {
+        return { step: { ...head, action: p.action, binding: result.binding, fields: result.fields, replace: p.replace } };
+    }
+    if (!creating && p.action === "none")
+        return { step: { ...head, action: "none", binding: result.binding } };
+    return { problem: problemOf(r.id, `the vendor plans to ${p.action} it, which apply does not do here`) };
+}
+/** Each orphaned binding the input wants, after the declarations, and the answers that cannot be done. */
+function orphansOf(orphans, input, wanted, usable, types) {
+    const steps = [];
+    const problems = [];
+    for (const { key, type, id } of orphans.filter((o) => wanted(o.key))) {
+        const answer = input.answers?.[key];
+        const [vendor = "", name = ""] = type.split(".");
+        const step = { id: key, vendor, type: name, action: "orphan", key, binding: id };
+        const why = answer === "recreate"
+            ? "an orphaned binding is forgotten or its object deleted, not recreated"
+            : answer === "delete" && !usable.has(`${type}.delete`)
+                ? cannotChange(types.get(type), "delete")
+                : undefined;
+        if (why)
+            problems.push(problemOf(key, why));
+        steps.push(answer === undefined || why ? step : { ...step, answer });
+    }
+    return { steps, problems };
+}
+/** What running a step does: a change operation, a change to the lockfile only, nothing, or nothing as it waits for an answer. */
+function runOf(step) {
+    switch (step.action) {
+        case "create":
+            return "create";
+        case "update":
+        case "replace":
+            return "update";
+        case "bind":
+        case "none":
+            return step.action;
+        case "gone":
+            return step.answer === "recreate" ? "create" : step.answer === "forget" ? "forget" : "skip";
+        case "orphan":
+            return step.answer === "delete" ? "delete" : step.answer === "forget" ? "forget" : "skip";
+    }
+}
+/**
+ * The change calls the plan would make, as the policy would see them, with the declarations'
+ * fields as planned: a create's `afterCreate` writes too, for an object with no id yet.
+ */
+function writesOf(plan, desired, types, ops) {
+    return plan.steps.flatMap((step) => {
+        const at = `${step.vendor}.${step.type}`;
+        const run = runOf(step);
+        if (run === "create") {
+            const made = { id: `new:${at}`, export: exportOf(keyOf(step)) };
+            const after = (types.get(at)?.afterCreate ?? [])
+                .filter((hook) => ops.get(hook.op)?.effect === "write")
+                .map((hook) => ({ op: hook.op, input: hook.input(made) }));
+            return [{ op: `${at}.create`, input: { desired: desired.get(step.id) } }, ...after];
+        }
+        if (run === "delete" && "binding" in step)
+            return [{ op: `${at}.delete`, input: { id: step.binding } }];
+        if (run !== "update" || (step.action !== "update" && step.action !== "replace"))
+            return [];
+        const expect = { action: step.action, replace: step.replace };
+        return [{ op: `${at}.update`, input: { id: step.binding, desired: desired.get(step.id), expect } }];
+    });
+}
+/** The lockfile's key a step binds: a declaration's id, or an orphan's key. */
+const keyOf = (step) => (step.action === "orphan" ? step.key : step.id);
+/** The export a lockfile key names: `store` of `resources/sanoma/infra.ts#store`. */
+const exportOf = (key) => key.slice(key.indexOf("#") + 1);
+/** The commit message for a step's change to the lockfile. */
+function messageOf(step, before, after) {
+    const key = keyOf(step);
+    if (!after)
+        return `Apply: unbind ${key} (${before?.type} ${before?.id})`;
+    const what = runOf(step) === "create" ? "create" : before ? "rebind" : "bind";
+    return `Apply: ${what} ${key} (${after.type} ${after.id})`;
+}
+/**
+ * The apply workflow for a config: it `uses` the `import` of every resource type the connectors
+ * declare that has a driver, and the change operations (`plan`, `create`, `update`, `delete`) of
+ * each writable one, and `approval`. `resolveConfig` adds it beside drift, with `steps`, the
+ * steps that read the data files, ask the policy and write the lockfile.
+ *
+ * A run reads the data files, the lockfile and its rebinds (`steps.declared`), and observes each
+ * declared resource as drift does: one import each, by the binding the input gives, else the
+ * lockfile's, else its identity. Then, for each resource the input wants (`only`), each after the
+ * ones it names, it plans:
+ *
+ * - `bind` when the input gives an object (`bind`) or, unbound, its identity finds one;
+ * - `create` when unbound and nothing is found, as its type's `plan` says (a gone object of a
+ *   `stateless` type too, unless answered);
+ * - `gone` when its bound object is no longer there: skipped unless `answers` says `recreate`
+ *   (created again) or `forget` (unbound);
+ * - `update`, `replace` or `none`, as its type's `plan` says for its bound object;
+ * - `orphan` for a binding no declaration has: skipped unless `answers` says `forget` (unbound) or
+ *   `delete` (deleted at the vendor, then unbound).
+ *
+ * What cannot be planned is a problem, and has no step. When the policy would hold any of the
+ * change calls the plan makes (`steps.holds`), one approval asks for them all, covering each
+ * change operation, with the plan as its details. Then each step runs in order: a change call,
+ * and right after one that changes a binding, the lockfile written and committed
+ * (`steps.write`), so an object made is never left unbound. An update is given the plan's action
+ * and replace (`expect`), and refuses (`plan_changed`) when the vendor now plans otherwise; a
+ * reference to a resource made in this run is given its new binding. A failed step is reported
+ * and the run goes on; a failure that ends the run (`isRunControlError`) ends it.
+ */
+export function applyWorkflow(types, ops, drivers, steps) {
+    const imports = importsOf(types, ops, drivers);
+    const changes = [...types.values()]
+        .filter((r) => r.writable)
+        .flatMap((r) => ["plan", "create", "update", "delete"].map((name) => ops.get(`${r.vendor}.${r.type}.${name}`)))
+        .filter((op) => op !== undefined && drivers.has(op.id))
+        .toSorted((a, b) => a.id.localeCompare(b.id));
+    const usable = new Set(changes.map((op) => op.id));
+    const resolve = ops.get(SOURCE_RESOLVE);
+    const hooks = [...new Set([...types.values()].flatMap((r) => (r.afterCreate ?? []).map((hook) => hook.op)))]
+        .toSorted()
+        .flatMap((id) => {
+        const op = ops.get(id);
+        return op && drivers.has(id) ? [op] : [];
+    });
+    return defineWorkflow({
+        // The literal, held to the one name: the outline finds a workflow by a string, or a const of its own file.
+        name: "apply",
+        title: "Apply resources",
+        trigger: "manual",
+        input: ApplyInput,
+        uses: [
+            ...imports,
+            ...changes,
+            ...(resolve ? [resolve] : []),
+            ...hooks,
+            "approval",
+            ...(hooks.length ? ["sleep"] : []),
+        ],
+        run: async (ctx, input) => {
+            const { resources, problems: read, bindings: locked, orphans, rebinds } = await steps.declared();
+            const wanted = (id) => input.only === undefined || input.only.includes(id);
+            const declarations = new Map(resources.map((r) => [r.id, r]));
+            const problems = [...read, ...inputProblems(input, declarations, new Set(orphans.map((o) => o.key)))];
+            // Observed as drift does, every import first, by the binding given before the lockfile's.
+            const found = new Map();
+            for (const resource of resources) {
+                const by = observeBy(resource, types, imports, input.bind?.[resource.id] ?? resource.binding ?? resource.identity);
+                if (!("id" in by))
+                    found.set(resource.id, by);
+                else {
+                    try {
+                        found.set(resource.id, observed(await ctx[resource.vendor][resource.type].import({ id: by.id })));
+                    }
+                    catch (err) {
+                        if (isRunControlError(err))
+                            throw err;
+                        found.set(resource.id, { error: errorMessage(err) });
+                    }
+                }
+            }
+            // A host wanted runs the commit its ref names now, resolved before planning: a merge is a change
+            // to it. One bound by the input needs none.
+            const revisions = new Map();
+            const hosts = new Map();
+            for (const { id, vendor, type, desired, refs } of resources.filter((r) => wanted(r.id) && input.bind?.[r.id] === undefined)) {
+                const resource = types.get(`${vendor}.${type}`);
+                const host = resource?.host;
+                const source = host && sourceUrl(desired, refs[host.inputs.source], resource, found);
+                const ref = host && valueAt(desired, host.inputs.ref);
+                if (host && source !== undefined && typeof ref === "string" && ref) {
+                    try {
+                        const { revision } = await ctx.sanoma.source.resolve({ url: source, ref });
+                        revisions.set(id, { revision });
+                        hosts.set(id, { source, revision });
+                    }
+                    catch (err) {
+                        if (isRunControlError(err))
+                            throw err;
+                        revisions.set(id, { error: errorMessage(err) });
+                    }
+                }
+                else if (host && source === undefined) {
+                    revisions.set(id, { error: "its source has no clone URL yet: apply the repository it names first" });
+                }
+            }
+            const drift = new Map(compare(types, resources, found, revisions).map((result) => [result.id, result]));
+            const desired = new Map(resources.map((r) => [r.id, desiredOf(r, types, locked, hosts)]));
+            const planned = [];
+            for (const resource of inDependencyOrder(resources).filter((r) => wanted(r.id))) {
+                const result = drift.get(resource.id);
+                const unresolved = revisions.get(resource.id);
+                // A host whose ref could not be resolved has no commit to run (compare says so only for one it found).
+                const next = unresolved && "error" in unresolved && result.status !== "error"
+                    ? { problem: problemOf(resource.id, unresolved.error) }
+                    : decide(resource, result, found.get(resource.id), input, desired.get(resource.id), types, usable);
+                if (next.ask !== undefined) {
+                    try {
+                        const answer = fromPlan(resource, result, await ctx[resource.vendor][resource.type].plan(next.ask));
+                        if (answer.step)
+                            planned.push(answer.step);
+                        if (answer.problem)
+                            problems.push(answer.problem);
+                    }
+                    catch (err) {
+                        if (isRunControlError(err))
+                            throw err;
+                        problems.push(problemOf(resource.id, `could not be planned: ${errorMessage(err)}`));
+                    }
+                }
+                if (next.step)
+                    planned.push(next.step);
+                if (next.problem)
+                    problems.push(next.problem);
+            }
+            const orphaned = orphansOf(orphans, input, wanted, usable, types);
+            const plan = {
+                problems: [...problems, ...orphaned.problems],
+                rebinds,
+                steps: [...planned, ...orphaned.steps],
+            };
+            const writes = writesOf(plan, desired, types, ops);
+            const approver = writes.length ? await steps.holds(writes) : undefined;
+            if (approver !== undefined) {
+                const covers = [...new Set(writes.map((w) => w.op))].map((id) => ops.get(id));
+                await ctx.approval("Apply resource changes", { approver, covers, details: JSON.stringify(plan, null, 2) });
+            }
+            const bindings = { ...locked };
+            const results = [];
+            let written = false;
+            let revision;
+            for (const step of plan.steps) {
+                const todo = runOf(step);
+                const key = keyOf(step);
+                const type = `${step.vendor}.${step.type}`;
+                const before = bindings[key];
+                const binding = "binding" in step ? step.binding : "";
+                const declared = declarations.get(step.id);
+                const spec = types.get(type);
+                let state;
+                try {
+                    if (todo === "create") {
+                        const made = await ctx[step.vendor][step.type].create({
+                            desired: desiredOf(declared, types, bindings, hosts),
+                        });
+                        bindings[key] = { type, id: made.id };
+                        state = made.state;
+                    }
+                    else if (todo === "update" && (step.action === "update" || step.action === "replace")) {
+                        const expect = { action: step.action, replace: step.replace };
+                        const changed = await ctx[step.vendor][step.type].update({
+                            id: binding,
+                            desired: desiredOf(declared, types, bindings, hosts),
+                            expect,
+                        });
+                        bindings[key] = { type, id: changed.id };
+                        state = changed.state;
+                    }
+                    else if (todo === "delete") {
+                        await ctx[step.vendor][step.type].delete({ id: binding });
+                        delete bindings[key];
+                    }
+                    else if (todo === "bind")
+                        bindings[key] = { type, id: binding };
+                    else if (todo === "forget")
+                        delete bindings[key];
+                    const after = bindings[key];
+                    if (after?.id !== before?.id) {
+                        const wrote = await steps.write(key, after, messageOf(step, before, after));
+                        written ||= wrote.written;
+                        revision = wrote.revision ?? revision;
+                    }
+                    // Bound first, so an object made is kept whatever its `afterCreate` calls do: each by its
+                    // id, again every few seconds until its output passes `until`; one that never does fails
+                    // the step, and the rest are not called.
+                    let stuck;
+                    for (const hook of todo === "create" ? (spec?.afterCreate ?? []) : []) {
+                        if (stuck === undefined) {
+                            const [vendor = "", group = "", name = ""] = hook.op.split(".");
+                            const given = hook.input({ id: after.id, export: exportOf(key) });
+                            // With `until`, a failure is one more call that did not pass (a new object's vendor may
+                            // not know it yet); without, it fails the step.
+                            let output;
+                            for (let call = 0; call < AFTER_CREATE_CALLS && (call === 0 || (hook.until && !hook.until(output))); call++) {
+                                if (call > 0)
+                                    await ctx.sleep({ seconds: AFTER_CREATE_SECONDS });
+                                try {
+                                    output = await ctx[vendor][group][name](given);
+                                }
+                                catch (err) {
+                                    if (isRunControlError(err) || !hook.until)
+                                        throw err;
+                                    output = undefined;
+                                }
+                            }
+                            if (hook.until && !hook.until(output)) {
+                                stuck = `${hook.op} did not pass in ${(AFTER_CREATE_CALLS * AFTER_CREATE_SECONDS) / 60} minutes`;
+                            }
+                        }
+                    }
+                    results.push({
+                        id: step.id,
+                        action: step.action,
+                        status: stuck !== undefined ? "failed" : todo === "skip" ? "skipped" : "done",
+                        ...(after && { binding: after.id }),
+                        ...(spec?.host && state && { host: spec.host.outputs(state) }),
+                        ...(stuck !== undefined && { error: stuck }),
+                    });
+                }
+                catch (err) {
+                    if (isRunControlError(err))
+                        throw err;
+                    const left = bindings[key];
+                    results.push({
+                        id: step.id,
+                        action: step.action,
+                        status: "failed",
+                        ...(left && { binding: left.id }),
+                        error: errorMessage(err),
+                    });
+                }
+            }
+            const lockfile = { written, ...(revision !== undefined && { revision }), bindings };
+            return { plan, results, lockfile };
+        },
+    });
+}
+//# sourceMappingURL=apply.js.map

package/dist/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../src/apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAiB,cAAc,EAA2B,MAAM,aAAa,CAAC;AACrF,OAAO,EACL,OAAO,EAKP,SAAS,EACT,SAAS,EACT,QAAQ,EAGR,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIhD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAkC,OAAO,EAAE,MAAM,eAAe,CAAC;AAE/F,OAAO,EAAuB,YAAY,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,8FAA8F;AAC9F,+FAA+F;AAC/F,kGAAkG;AAClG,gGAAgG;AAChG,kEAAkE;AAElE,8HAA8H;AAC9H,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGtE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC;AAqGH,kHAAkH;AAClH,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAI/B,+EAA+E;AAC/E,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,OAAe,EAAmB,EAAE,CAAC,CAAC;IACnE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,OAAO,EAAE;CACxD,CAAC,CAAC;AAEH,4EAA4E;AAC5E,SAAS,iBAAiB,CAAyD,IAAkB;IACnG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,GAAG,GAAQ,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,CAAI,EAAE,EAAE;QACrB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO;QAC3B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,KAAK;gBAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAChB,CAAc,EACd,KAAoC,EACpC,QAAkB,EAClB,KAAgE;IAEhE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAE,CAAC;IAC7D,MAAM,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;IACnC,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK;YAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/G,CAAC;IACD,2EAA2E;IAC3E,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;YAC1B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC;YAChC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC;SACrB,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,KAAK;gBAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,MAAM,YAAY,GAAG,CAAC,IAAgE,EAAE,IAAY,EAAE,EAAE,CACtG,IAAI,EAAE,QAAQ;IACZ,CAAC,CAAC,gBAAgB,IAAI,MAAM,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,kBAAkB;IACtE,CAAC,CAAC,gBAAgB,IAAI,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,eAAe,CAAC;AAErG,uFAAuF;AACvF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAuB,EAAE,KAA8B,EAAqB,EAAE,CAC3G,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC;AAEvG,6EAA6E;AAC7E,SAAS,aAAa,CACpB,KAAiB,EACjB,GAAiC,EACjC,OAA4B;IAE5B,OAAO;QACL,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5E,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,GAAG,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KAChG,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,MAAM,CACb,CAAc,EACd,MAAmB,EACnB,GAAU,EACV,KAAiB,EACjB,OAAc,EACd,KAAoC,EACpC,MAA2B;IAE3B,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QACjG,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,IAAI,mBAAmB,CAAC,EAAE,CAAC;IACxG,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAC5B,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QACvF,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAQ,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrC,0GAA0G;QAC1G,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QACpG,MAAM,IAAI,GAAa,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC5D,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;QACvF,OAAO,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE,IAAI,EAAE;YACV,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,gDAAgD,MAAM,GAAG,CAAC,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAa,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AACtF,CAAC;AAED,kIAAkI;AAClI,SAAS,QAAQ,CACf,CAAc,EACd,MAAmB,EACnB,CAAgF;IAEhF,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC;IACxE,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACtH,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAQ,EAAE,EAAE,CAAC;IAC7G,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC,MAAM,mCAAmC,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED,0GAA0G;AAC1G,SAAS,SAAS,CAChB,OAAiC,EACjC,KAAiB,EACjB,MAA+B,EAC/B,MAA2B,EAC3B,KAAoC;IAEpC,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAiB,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC1F,MAAM,GAAG,GACP,MAAM,KAAK,UAAU;YACnB,CAAC,CAAC,uEAAuE;YACzE,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,SAAS,CAAC;gBACpD,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;gBACzC,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,GAAG;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,kIAAkI;AAClI,SAAS,KAAK,CAAC,IAAc;IAC3B,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC;QAClB,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9F,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CACf,IAAe,EACf,OAAmC,EACnC,KAAoC,EACpC,GAA4B;IAE5B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAiB,EAAE;QAChD,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;iBAC7C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;iBACtD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxG,IAAI,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3F,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9D,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,KAAK,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAElF,qFAAqF;AACrF,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAElE,8DAA8D;AAC9D,SAAS,SAAS,CAAC,IAAc,EAAE,MAA2B,EAAE,KAA0B;IACxF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK;QAAE,OAAO,iBAAiB,GAAG,KAAK,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,EAAE,GAAG,CAAC;IAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9E,OAAO,UAAU,IAAI,IAAI,GAAG,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAoC,EACpC,GAA4B,EAC5B,OAAqC,EACrC,KAAiB;IAEjB,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;SACzB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;SAC9G,MAAM,CAAC,CAAC,EAAE,EAAY,EAAE,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SAChE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAA0B,CAAC;IACjE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;SACzG,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;QACd,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IACL,OAAO,cAAc,CAAC;QACpB,2GAA2G;QAC3G,IAAI,EAAE,OAAuC;QAC7C,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE;YACJ,GAAG,OAAO;YACV,GAAI,OAAuD;YAC3D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAI,KAAoB;YACxB,UAAU;YACV,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C;QACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACxB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjG,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACtG,0FAA0F;YAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;YACvC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,EAAE,GAAG,SAAS,CAClB,QAAQ,EACR,KAAK,EACL,OAAO,EACP,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,CACnE,CAAC;gBACF,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;qBACzC,CAAC;oBACJ,IAAI,CAAC;wBACH,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAE,CAAC,QAAQ,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;oBACtG,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,iBAAiB,CAAC,GAAG,CAAC;4BAAE,MAAM,GAAG,CAAC;wBACtC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;YACH,CAAC;YACD,iGAAiG;YACjG,4CAA4C;YAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgD,CAAC;YACtE,KAAK,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,MAAM,CAChE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,SAAS,CACxD,EAAE,CAAC;gBACF,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;gBAChD,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,CAAC;gBAC5B,MAAM,MAAM,GAAG,IAAI,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACrF,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtD,IAAI,IAAI,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,EAAE,CAAC;oBACnE,IAAI,CAAC;wBACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,GAAG,CAAC,MAAO,CAAC,MAAO,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;wBAC7E,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;wBAChC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACtC,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,iBAAiB,CAAC,GAAG,CAAC;4BAAE,MAAM,GAAG,CAAC;wBACtC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;qBAAM,IAAI,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACxC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,sEAAsE,EAAE,CAAC,CAAC;gBACvG,CAAC;YACH,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACxG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAE1F,MAAM,OAAO,GAAe,EAAE,CAAC;YAC/B,KAAK,MAAM,QAAQ,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAChF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC;gBACvC,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC9C,uGAAuG;gBACvG,MAAM,IAAI,GACR,UAAU,IAAI,OAAO,IAAI,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;oBAC9D,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE;oBACvD,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBACzG,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBAC3B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAE,CAAC,QAAQ,CAAC,IAAI,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;wBACtG,IAAI,MAAM,CAAC,IAAI;4BAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAC3C,IAAI,MAAM,CAAC,OAAO;4BAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACpD,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,iBAAiB,CAAC,GAAG,CAAC;4BAAE,MAAM,GAAG,CAAC;wBACtC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,yBAAyB,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBACtF,CAAC;gBACH,CAAC;gBACD,IAAI,IAAI,CAAC,IAAI;oBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,IAAI,CAAC,OAAO;oBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAClE,MAAM,IAAI,GAAc;gBACtB,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC;gBAC7C,OAAO;gBACP,KAAK,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;aACvC,CAAC;YAEF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;gBAC/E,MAAM,GAAG,CAAC,QAAQ,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7G,CAAC;YAED,MAAM,QAAQ,GAAa,EAAE,GAAG,MAAM,EAAE,CAAC;YACzC,MAAM,OAAO,GAAkB,EAAE,CAAC;YAClC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,QAA4B,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxB,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7B,MAAM,OAAO,GAAG,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,KAAwB,CAAC;gBAC7B,IAAI,CAAC;oBACH,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACtB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC;4BACtD,OAAO,EAAE,SAAS,CAAC,QAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC;yBACtD,CAAC,CAAC;wBACH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;wBACtC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;oBACrB,CAAC;yBAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;wBACxF,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;wBAC9D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC;4BACzD,EAAE,EAAE,OAAO;4BACX,OAAO,EAAE,SAAS,CAAC,QAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC;4BACrD,MAAM;yBACP,CAAC,CAAC;wBACH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;wBACzC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;oBACxB,CAAC;yBAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC7B,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;wBAC5D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACvB,CAAC;yBAAM,IAAI,IAAI,KAAK,MAAM;wBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;yBAC7D,IAAI,IAAI,KAAK,QAAQ;wBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAC5B,IAAI,KAAK,EAAE,EAAE,KAAK,MAAM,EAAE,EAAE,EAAE,CAAC;wBAC7B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;wBAC5E,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;wBAC1B,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC;oBACxC,CAAC;oBACD,0FAA0F;oBAC1F,yFAAyF;oBACzF,yCAAyC;oBACzC,IAAI,KAAyB,CAAC;oBAC9B,KAAK,MAAM,IAAI,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;wBACtE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;4BACxB,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;4BAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;4BACnE,wFAAwF;4BACxF,gDAAgD;4BAChD,IAAI,MAAe,CAAC;4BACpB,KACE,IAAI,IAAI,GAAG,CAAC,EACZ,IAAI,GAAG,kBAAkB,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAChF,IAAI,EAAE,EACN,CAAC;gCACD,IAAI,IAAI,GAAG,CAAC;oCAAE,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;gCACjE,IAAI,CAAC;oCACH,MAAM,GAAG,MAAO,GAAG,CAAC,MAAM,CAAE,CAAC,KAAK,CAAqC,CAAC,IAAI,CAAE,CAAC,KAAK,CAAC,CAAC;gCACxF,CAAC;gCAAC,OAAO,GAAG,EAAE,CAAC;oCACb,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;wCAAE,MAAM,GAAG,CAAC;oCACrD,MAAM,GAAG,SAAS,CAAC;gCACrB,CAAC;4BACH,CAAC;4BACD,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gCACtC,KAAK,GAAG,GAAG,IAAI,CAAC,EAAE,oBAAoB,CAAC,kBAAkB,GAAG,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC;4BACnG,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC;wBACX,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;wBAC7E,GAAG,CAAC,KAAK,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;wBACnC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,KAAK,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC9D,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;qBAC7C,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,iBAAiB,CAAC,GAAG,CAAC;wBAAE,MAAM,GAAG,CAAC;oBACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC;wBACX,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,MAAM,EAAE,QAAQ;wBAChB,GAAG,CAAC,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;wBACjC,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC;qBACzB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;YACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAwB,CAAC;QAC3D,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/call.d.ts

@@ -1,4 +1,6 @@
 import { type WorkflowDefinition } from "./define.ts";
+import { type Op } from "./op.ts";
+import { type RecordedDecision } from "./policy.ts";
 import type { Run, WorkerState } from "./run.ts";
 /**
  * True for a failure that is not the run's outcome, so the ledger does not record it: DBOS
@@ -31,3 +33,5 @@ export interface Placed {
  * queued behind it, would never start.
  */
 export declare function buildCtx(wf: WorkflowDefinition<any, any>, run: Run): any;
+/** Asks the policy about one call, and checks its answer. Runs inside a step, so it must have no side effects of its own. */
+export declare function decide(run: Run, op: Op, input: unknown): Promise<RecordedDecision>;

package/dist/call.js

@@ -8,7 +8,8 @@ import { shown } from "./log.js";
 import { isOp } from "./op.js";
 import { callAt, callName } from "./outline.js";
 import { DecisionSchema, policyOpOf } from "./policy.js";
-import { approverLabel, errorMessage, fitsOp } from "./shared.js";
+import { isChangeOp } from "./resource.js";
+import { APPLY_WORKFLOW, approverLabel, errorMessage, fitsOp } from "./shared.js";
 /** DBOS took the run from this execution: it cancelled the run, or another process took it over. */
 const takenByDbos = (err) => causes(err).some((e) => e instanceof DBOSErrors.DBOSWorkflowCancelledError || e instanceof DBOSWorkflowConflictError);
 /**
@@ -212,8 +213,8 @@ function targetOf(op, input) {
     }
     return { target };
 }
-/** Asks the policy. Runs inside a step, so it must have no side effects of its own. */
-async function decide(run, op, input) {
+/** Asks the policy about one call, and checks its answer. Runs inside a step, so it must have no side effects of its own. */
+export async function decide(run, op, input) {
     const call = {
         op: policyOpOf(op),
         effect: op.effect,
@@ -247,6 +248,13 @@ async function callOp(run, id, input, place) {
             ? `No connector or driver for ${id} in this worker`
             : `No connector or fake for ${id} in this worker: no fake its connectors attach implements it`);
     }
+    // Only apply changes a declared resource; `resolveConfig` refuses any other workflow that uses such an operation.
+    if (isChangeOp(op, run.state.types) && run.workflow !== APPLY_WORKFLOW) {
+        throw new SanomaError("invalid_input", `${op.id} changes a declared resource, which only ${APPLY_WORKFLOW} does`, {
+            op: op.id,
+            workflow: run.workflow,
+        });
+    }
     const parsed = parseOrThrow(op.input, input, `The input to ${op.id} does not match its schema`, { op: op.id });
     // The call's identity (its ledger seq and id, and the driver's idempotency key) is taken
     // before the first await, so it depends only on the order the workflow made its calls. A
@@ -293,7 +301,14 @@ async function callOp(run, id, input, place) {
         result = await DBOS.runStep(async () => {
             const at = Date.now();
             attempt = DBOS.stepStatus?.currentAttempt ?? 1;
-            const context = { idempotencyKey: `${run.id}:${seq}`, runId: run.id, opId: op.id, attempt };
+            const secrets = run.sandbox === undefined ? run.state.secrets : run.fakeSecrets;
+            const context = {
+                idempotencyKey: `${run.id}:${seq}`,
+                runId: run.id,
+                opId: op.id,
+                attempt,
+                secrets,
+            };
             // A live driver's `env` is checked here, inside the step, by the guard `indexDrivers` put
             // on its function: the refusal is the call's failure, recorded and never retried.
             const output = op.output.parse(await fn(parsed, context));