@sema-ai/core 1.275.1

package/dist/core/exec-output-tail.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Bounded rolling-TAIL accumulator for streaming exec output (sema D2) — FIRST-PARTY, vendor-independent.
+ *
+ * A model-driven `yes` / `cat big.bin` over a 120s/600s shell can emit gigabytes; accumulating it unbounded OOMs
+ * a durable worker. We keep only the LAST `maxBytes` — the tail (errors + the exit code are at the end, which is
+ * what the model needs) — dropping the head as it overflows, plus a count of dropped bytes for a visible marker.
+ *
+ * This lives in `src/core/` — NOT `src/vendor/` — on purpose: it is OUR robustness invariant, shared by the
+ * (currently-vendored) NodeExecutionEnv AND a downstream exec adapter (service host/ssh/adb/docker/k8s, [267]).
+ * One implementation + ONE model-facing marker text = zero drift, and the public export points at a STABLE path
+ * that survives the planned de-vendoring (when NodeExecutionEnv is naturalized out of `src/vendor/`, nothing rebinds).
+ */
+export declare const MAX_EXEC_OUTPUT_BYTES: number;
+/**
+ * Push-based bounded tail: feed it raw output chunks (Buffers); it retains only the last `maxBytes`, dropping the
+ * head incrementally so memory is O(maxBytes) regardless of total output. Byte-precise (the OOM bound is bytes).
+ */
+export declare class RollingTailBuffer {
+    private readonly maxBytes;
+    private readonly chunks;
+    private size;
+    private dropped;
+    constructor(maxBytes?: number);
+    /** Append a chunk; evict head bytes (whole or partial chunks) until within `maxBytes`. */
+    push(chunk: Buffer): void;
+    /** The retained tail decoded as UTF-8, plus how many bytes were dropped off the head. */
+    result(): {
+        text: string;
+        droppedBytes: number;
+    };
+}
+/**
+ * Prepend a model-visible marker when `droppedBytes > 0` (only the TAIL was kept). The SINGLE source of the
+ * marker wording so the engine and any downstream adapter show the model the SAME thing.
+ */
+export declare function markTruncated(text: string, droppedBytes: number): string;
+//# sourceMappingURL=exec-output-tail.d.ts.map

package/dist/core/exec-output-tail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-output-tail.d.ts","sourceRoot":"","sources":["../../src/core/exec-output-tail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,qBAAqB,QAAkB,CAAC;AAErD;;;GAGG;AACH,qBAAa,iBAAiB;IAKhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,OAAO,CAAK;gBAES,QAAQ,GAAE,MAA8B;IAErE,0FAA0F;IAC1F,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAqBzB,yFAAyF;IACzF,MAAM,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE;CAGjD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAIxE"}

package/dist/core/exec-output-tail.js

@@ -0,0 +1,63 @@
+/**
+ * Bounded rolling-TAIL accumulator for streaming exec output (sema D2) — FIRST-PARTY, vendor-independent.
+ *
+ * A model-driven `yes` / `cat big.bin` over a 120s/600s shell can emit gigabytes; accumulating it unbounded OOMs
+ * a durable worker. We keep only the LAST `maxBytes` — the tail (errors + the exit code are at the end, which is
+ * what the model needs) — dropping the head as it overflows, plus a count of dropped bytes for a visible marker.
+ *
+ * This lives in `src/core/` — NOT `src/vendor/` — on purpose: it is OUR robustness invariant, shared by the
+ * (currently-vendored) NodeExecutionEnv AND a downstream exec adapter (service host/ssh/adb/docker/k8s, [267]).
+ * One implementation + ONE model-facing marker text = zero drift, and the public export points at a STABLE path
+ * that survives the planned de-vendoring (when NodeExecutionEnv is naturalized out of `src/vendor/`, nothing rebinds).
+ */
+export const MAX_EXEC_OUTPUT_BYTES = 8 * 1024 * 1024;
+/**
+ * Push-based bounded tail: feed it raw output chunks (Buffers); it retains only the last `maxBytes`, dropping the
+ * head incrementally so memory is O(maxBytes) regardless of total output. Byte-precise (the OOM bound is bytes).
+ */
+export class RollingTailBuffer {
+    maxBytes;
+    chunks = [];
+    size = 0; // bytes currently retained (always ≤ maxBytes after a push)
+    dropped = 0; // bytes dropped off the head
+    constructor(maxBytes = MAX_EXEC_OUTPUT_BYTES) {
+        this.maxBytes = maxBytes;
+    }
+    /** Append a chunk; evict head bytes (whole or partial chunks) until within `maxBytes`. */
+    push(chunk) {
+        if (chunk.length === 0)
+            return;
+        this.chunks.push(chunk);
+        this.size += chunk.length;
+        while (this.size > this.maxBytes) {
+            const over = this.size - this.maxBytes;
+            const head = this.chunks[0];
+            if (over >= head.length) {
+                this.chunks.shift();
+                this.size -= head.length;
+                this.dropped += head.length;
+            }
+            else {
+                // trim `over` bytes off the head chunk's front (a partial drop; a multi-byte char split here decodes to
+                // one replacement char at the very start of the tail — harmless, the output is already marked truncated).
+                this.chunks[0] = head.subarray(over);
+                this.size -= over;
+                this.dropped += over;
+            }
+        }
+    }
+    /** The retained tail decoded as UTF-8, plus how many bytes were dropped off the head. */
+    result() {
+        return { text: Buffer.concat(this.chunks).toString("utf8"), droppedBytes: this.dropped };
+    }
+}
+/**
+ * Prepend a model-visible marker when `droppedBytes > 0` (only the TAIL was kept). The SINGLE source of the
+ * marker wording so the engine and any downstream adapter show the model the SAME thing.
+ */
+export function markTruncated(text, droppedBytes) {
+    return droppedBytes > 0
+        ? `[... ${droppedBytes} earlier byte(s) truncated; showing last ${MAX_EXEC_OUTPUT_BYTES} ...]\n${text}`
+        : text;
+}
+//# sourceMappingURL=exec-output-tail.js.map

package/dist/core/exec-output-tail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-output-tail.js","sourceRoot":"","sources":["../../src/core/exec-output-tail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IAKC;IAJZ,MAAM,GAAa,EAAE,CAAC;IAC/B,IAAI,GAAG,CAAC,CAAC,CAAC,4DAA4D;IACtE,OAAO,GAAG,CAAC,CAAC,CAAC,6BAA6B;IAElD,YAA6B,WAAmB,qBAAqB;QAAxC,aAAQ,GAAR,QAAQ,CAAgC;IAAG,CAAC;IAEzE,0FAA0F;IAC1F,IAAI,CAAC,KAAa;QAChB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;YAC7B,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACpB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;gBACzB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,wGAAwG;gBACxG,0GAA0G;gBAC1G,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;gBAClB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,yFAAyF;IACzF,MAAM;QACJ,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAC3F,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,YAAoB;IAC9D,OAAO,YAAY,GAAG,CAAC;QACrB,CAAC,CAAC,QAAQ,YAAY,4CAA4C,qBAAqB,UAAU,IAAI,EAAE;QACvG,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/dist/core/file-snapshot-store.d.ts

@@ -0,0 +1,137 @@
+import type { ExecutionEnv } from "../internal/harness.js";
+export interface FileSnapshotError {
+    /** `too_large` = the tree exceeded a bound (fail-CLOSED, NOT a silent partial snapshot); `not_found` = no
+     *  snapshot for that key; `aborted` = the signal fired; the rest = an underlying fs op failed. */
+    code: "too_large" | "enumerate_failed" | "read_failed" | "restore_failed" | "not_found" | "aborted";
+    message: string;
+}
+export type FileSnapshotResult = {
+    ok: true;
+} | {
+    ok: false;
+    error: FileSnapshotError;
+};
+/**
+ * Capture/restore a working-tree file set keyed by `(scope, key)` — `scope` = sessionId, `key` =
+ * `SessionTreeEntry.id` (same anchor as E18 resume-at). All methods are best-effort and NEVER throw — failures
+ * are encoded in the returned {@link FileSnapshotResult} (mirrors the ExecutionEnv FileSystem contract).
+ *
+ * **v1 fidelity bounds (design/101 §defer):** files only — symlinks are NOT captured and are REMOVED by
+ * `restore` (they are a path-escape vector); empty directories are not tracked; `restore` re-enumerates under
+ * the SAME bounds, so a tree that grew past a bound since the snapshot cannot be rewound (fail-closed).
+ */
+export interface FileSnapshotStore {
+    /** Capture the tree under `root` for `(scope, key)`. CREATE-ONCE: a second call for an existing key is a
+     *  no-op `{ok:true}` (a session entry id is immutable, so its tree state is too). */
+    snapshot(scope: string, key: string, env: ExecutionEnv, root: string, signal?: AbortSignal): Promise<FileSnapshotResult>;
+    /** Converge the tree under `root` back to the snapshot for `(scope, key)`: remove obstructions/strays
+     *  (symlinks + files created since), then write every captured file — so the tree MATCHES the snapshot. */
+    restore(scope: string, key: string, env: ExecutionEnv, root: string, signal?: AbortSignal): Promise<FileSnapshotResult>;
+    /** Whether a snapshot exists for `(scope, key)`. */
+    has(scope: string, key: string): Promise<boolean>;
+    /** GC: drop every snapshot in `scope` whose key is NOT in `keepKeys` (e.g. unreachable branches). Returns the
+     *  number of snapshots removed. */
+    reap(scope: string, keepKeys: string[]): Promise<number>;
+    /** Every snapshot key in `scope` (order unspecified). The enumeration counterpart of {@link reap} (which
+     *  already iterates the same set internally) — exposed for a cross-backend session EXPORT (service 2c
+     *  session-sync, [266]): list a session's snapshot keys to move its {entries + file snapshots} to another
+     *  backend. A durable backend implements it as a `SELECT key WHERE scope = ?`. */
+    listKeys(scope: string): Promise<string[]>;
+    /**
+     * 2c session-sync ([271]): the manifest (`relPath → blobHash`) for `(scope, key)`, or `null` if absent — to
+     * EXPORT a snapshot's content to another backend. Pairs with {@link getBlob} for CONTENT-ADDRESSED (deduped)
+     * blob transfer: the caller fetches each distinct hash ONCE across all of a session's snapshots. Optional — a
+     * backend that supports cross-backend snapshot export implements it.
+     */
+    exportManifest?(scope: string, key: string): Promise<Map<string, string> | null>;
+    /** 2c session-sync ([271]): the content-addressed bytes for `hash` (undefined if absent). */
+    getBlob?(hash: string): Promise<Uint8Array | undefined>;
+    /**
+     * 2c session-sync ([273]): STORE a snapshot INTO this store from another store's {@link exportManifest} +
+     * {@link getBlob} output — the import-side mirror that closes the cross-backend transfer loop. For each DISTINCT
+     * blob hash in `manifest`, fetch its bytes via `srcGetBlob`, VERIFY content-address integrity
+     * (`sha256(bytes) === hash`), and store it (content-addressed dedup); THEN record `(scope, key) → manifest`.
+     *
+     * - CREATE-ONCE: a second import for an existing key is a no-op `{ok:true}` (an entry id is immutable).
+     * - FAIL-CLOSED: a missing OR hash-mismatched source blob → `read_failed` and NO manifest is committed (never a
+     *   partial snapshot that a later {@link restore} would silently truncate). The manifest's relPaths are NOT
+     *   re-validated here — `restore` remains the path-escape gate (it already neutralizes unsafe relPaths).
+     * - Pure store→store: does NOT touch an `ExecutionEnv` (unlike `applyManifest`, which converges ONE snapshot to a
+     *   working tree; import preserves ALL historical snapshots in the dst store so a later rewind-to-past finds them).
+     *
+     * Optional — a backend that supports cross-backend snapshot import implements it.
+     */
+    importManifest?(scope: string, key: string, manifest: Map<string, string>, srcGetBlob: (hash: string) => Promise<Uint8Array | undefined>): Promise<FileSnapshotResult>;
+    /**
+     * 2c session-sync ([277]): STORE a single content-addressed blob — the symmetric WRITE side of {@link getBlob},
+     * for a two-phase PUSH (upload blobs, THEN import the manifest that references them). VERIFIES content-address
+     * integrity (`sha256(bytes) === hash`) so a corrupt/mismatched upload can never poison the store (a later
+     * getBlob/restore would otherwise return wrong content); a mismatch → `read_failed`, nothing stored. IMMUTABLE +
+     * content-addressed: a repeat putBlob for the same hash is a no-op (the bytes are identical by definition).
+     * Returns a {@link FileSnapshotResult} (NOT void) so the integrity failure is encodable under the never-throw
+     * contract. Optional — a backend that supports a two-phase push implements it.
+     *
+     * ⚠️ ORCHESTRATION CAVEAT: a pushed blob is NOT yet referenced by any manifest (the matching
+     * {@link importManifest} runs LATER), so — unlike `snapshot`/`importManifest`, which hold their blobs in an
+     * `inFlight` live-set across the whole store-then-commit — a `putBlob`'d blob is reap-ELIGIBLE in the window
+     * before its manifest is imported. The two-phase pusher MUST NOT `reap` the scope between PUT and import (a
+     * grace-window). This is fail-closed, not corrupting: blobs are content-addressed (re-push is always safe) and
+     * `importManifest` re-verifies+stores every blob before committing, so a reaped blob → `read_failed` with NO
+     * dangling-reference manifest, never wrong content.
+     */
+    putBlob?(hash: string, bytes: Uint8Array): Promise<FileSnapshotResult>;
+}
+/** Bounds for the reference enumerator — a deliberate, fail-CLOSED cost policy (NOT the grep walk's silent caps). */
+export interface FileSnapshotBounds {
+    /** Hard cap on file count; exceeding it REFUSES the snapshot (`too_large`) rather than silently truncating. */
+    maxFiles: number;
+    /** Hard cap on total bytes; exceeding it REFUSES the snapshot. */
+    maxBytes: number;
+    /** Directory BASENAMES skipped anywhere in the tree (cost bound). Default `.git` + `node_modules`. */
+    ignoreDirs: Set<string>;
+}
+export declare const DEFAULT_SNAPSHOT_BOUNDS: FileSnapshotBounds;
+/**
+ * Capture the working tree under `root` into a manifest `relPath → sha256`, handing each file's bytes to
+ * `putBlob` (the backend stores them content-addressed). **The env-operating + security-critical half a durable
+ * backend MUST reuse** (not re-implement — duplication risks re-introducing the symlink-escape / fail-closed
+ * bugs the dual-review fixed). Fail-CLOSED: an enumerate/read/bound failure returns an error and the caller must
+ * NOT persist a partial manifest. Never throws.
+ */
+export declare function captureManifest(env: ExecutionEnv, root: string, bounds: FileSnapshotBounds, signal: AbortSignal | undefined, putBlob: (hash: string, bytes: Uint8Array) => void | Promise<void>): Promise<{
+    ok: true;
+    value: Map<string, string>;
+} | {
+    ok: false;
+    error: FileSnapshotError;
+}>;
+/**
+ * CONVERGE the tree under `root` to `manifest`, loading each captured file's bytes via `getBlob`. **The
+ * env-operating + security-critical half a durable backend MUST reuse.** Order is load-bearing (codex BLOCKER +
+ * Opus M1): PHASE 1 removes every current symlink (neutralizes a `dir -> /outside` ancestor that writeFile would
+ * otherwise follow OUT of root) + every file created since; PHASE 2 writes each captured file, clearing a
+ * directory that now occupies a file's path first. Never throws.
+ */
+export declare function applyManifest(env: ExecutionEnv, root: string, bounds: FileSnapshotBounds, signal: AbortSignal | undefined, manifest: Map<string, string>, getBlob: (hash: string) => Uint8Array | undefined | Promise<Uint8Array | undefined>): Promise<FileSnapshotResult>;
+/**
+ * In-memory, content-addressed reference {@link FileSnapshotStore}. Blobs are deduplicated by sha256 ACROSS all
+ * snapshots (a file unchanged between turns is stored once); each snapshot keeps a manifest `relPath → hash`.
+ * Single-process (the default-deps reference; a durable/file-backed impl mirrors `src/stores/file/`).
+ */
+export declare class InMemoryFileSnapshotStore implements FileSnapshotStore {
+    private readonly blobs;
+    private readonly manifests;
+    private readonly inFlight;
+    private readonly bounds;
+    constructor(bounds?: Partial<FileSnapshotBounds>);
+    snapshot(scope: string, key: string, env: ExecutionEnv, root: string, signal?: AbortSignal): Promise<FileSnapshotResult>;
+    restore(scope: string, key: string, env: ExecutionEnv, root: string, signal?: AbortSignal): Promise<FileSnapshotResult>;
+    has(scope: string, key: string): Promise<boolean>;
+    listKeys(scope: string): Promise<string[]>;
+    exportManifest(scope: string, key: string): Promise<Map<string, string> | null>;
+    getBlob(hash: string): Promise<Uint8Array | undefined>;
+    putBlob(hash: string, bytes: Uint8Array): Promise<FileSnapshotResult>;
+    importManifest(scope: string, key: string, manifest: Map<string, string>, srcGetBlob: (hash: string) => Promise<Uint8Array | undefined>): Promise<FileSnapshotResult>;
+    reap(scope: string, keepKeys: string[]): Promise<number>;
+}
+//# sourceMappingURL=file-snapshot-store.d.ts.map

package/dist/core/file-snapshot-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-snapshot-store.d.ts","sourceRoot":"","sources":["../../src/core/file-snapshot-store.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAO3D,MAAM,WAAW,iBAAiB;IAChC;sGACkG;IAClG,IAAI,EAAE,WAAW,GAAG,kBAAkB,GAAG,aAAa,GAAG,gBAAgB,GAAG,WAAW,GAAG,SAAS,CAAC;IACpG,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,kBAAkB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAExF;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC;yFACqF;IACrF,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzH;+GAC2G;IAC3G,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxH,oDAAoD;IACpD,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD;uCACmC;IACnC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD;;;sFAGkF;IAClF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C;;;;;OAKG;IACH,cAAc,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IACjF,6FAA6F;IAC7F,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACxD;;;;;;;;;;;;;;OAcG;IACH,cAAc,CAAC,CACb,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,GAC5D,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACxE;AAED,qHAAqH;AACrH,MAAM,WAAW,kBAAkB;IACjC,+GAA+G;IAC/G,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,sGAAsG;IACtG,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,eAAO,MAAM,uBAAuB,EAAE,kBAOrC,CAAC;AA2DF;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACjE,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAa7F;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,GAClF,OAAO,CAAC,kBAAkB,CAAC,CA8C7B;AAED;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,iBAAiB;IACjE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IAIpE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;gBAEhC,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC;IAU1C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAoBxH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMvH,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIjD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAW1C,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAK/E,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAItD,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAUrE,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,GAC5D,OAAO,CAAC,kBAAkB,CAAC;IA+BxB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;CAmB/D"}

package/dist/core/file-snapshot-store.js

@@ -0,0 +1,319 @@
+import { createHash } from "node:crypto";
+// [K-PLATFORM-SWEEP] MAJOR#1: NO host node:path here — every path below comes from the ExecutionEnv and
+// may be of the OTHER family than the host (win engine × POSIX remote env, or the reverse). Family-aware
+// string helpers instead (same philosophy as tools/fs/safety.ts channel [384]/[385]).
+const normSlash = (p) => p.replace(/\\/g, "/");
+const stripTrailSep = (p) => p.replace(/[\\/]+$/, "");
+const foldDrive = (p) => (/^[A-Za-z]:(\/|$)/.test(p) ? p[0].toLowerCase() + p.slice(1) : p);
+/** codex 1.237 F7: family detector — fold "\" only under a WIN-family root; a POSIX tree may legally
+ *  contain literal backslashes in FILE NAMES, and folding them corrupted both the manifest key and the
+ *  restore target. Win-form = drive-rooted, UNC, or relative-with-backslash (never "/"-rooted). */
+const isWinFormPath = (p) => /^[A-Za-z]:[\\/]/.test(p) || p.startsWith("\\\\") || (!p.startsWith("/") && p.includes("\\"));
+/** rel path of `child` under `root` in "/" form (win root) / verbatim form (posix root); null when not under. */
+function relUnder(root, child) {
+    const fold = isWinFormPath(root) ? normSlash : (p) => p;
+    const r = foldDrive(fold(stripTrailSep(root)));
+    const c = foldDrive(fold(child));
+    if (c === r)
+        return "";
+    if (!c.startsWith(r + "/"))
+        return null;
+    return fold(child).slice(fold(stripTrailSep(root)).length + 1);
+}
+/** Join root + a "/"-form relPath using the ROOT's native separator (keys stay family-consistent). */
+function joinUnder(root, rel) {
+    const win = isWinFormPath(root);
+    return stripTrailSep(root) + (win ? "\\" : "/") + (win ? rel.replace(/\//g, "\\") : rel);
+}
+/** A manifest relPath is SAFE iff it is relative in both families and contains no ".." segment. */
+function isUnsafeRelPath(relN) {
+    return relN.startsWith("/") || /^[A-Za-z]:/.test(relN) || relN.split("/").includes("..");
+}
+export const DEFAULT_SNAPSHOT_BOUNDS = {
+    // clay (2026-06-26): raised from 2000/64MiB. Snapshot blobs go to OBJECT STORAGE (not a DB row), so there is no
+    // per-row size limit — a whole-tree snapshot can be larger. These are per-turn COST ceilings (bound the
+    // read+hash work each turn), not storage limits; a backend may raise them further per its object-store budget.
+    maxFiles: 10000,
+    maxBytes: 256 * 1024 * 1024,
+    ignoreDirs: new Set([".git", "node_modules"]),
+};
+/**
+ * Enumerate every FILE under `root` (DFS), plus the SYMLINKS at the level they appear (not traversed). Skips
+ * `ignoreDirs`. Fail-CLOSED: if a directory cannot be read OR a bound is exceeded, returns an error — a PARTIAL
+ * list would make `restore` data-lossy (leaving stray files / never restoring a dropped one). This is E19's OWN
+ * enumerator: unlike the grep `walk` it does NOT skip binary files or dotfiles (a `.env` is a real working-tree
+ * file) and does NOT honor `.gitignore` beyond the explicit `ignoreDirs` policy.
+ */
+async function enumerateTree(env, root, bounds, signal) {
+    const files = [];
+    const symlinks = [];
+    let totalBytes = 0;
+    const stack = [root];
+    while (stack.length > 0) {
+        if (signal?.aborted)
+            return { ok: false, error: { code: "aborted", message: "aborted" } };
+        const dir = stack.pop();
+        const ls = await env.listDir(dir, signal);
+        if (!ls.ok) {
+            return { ok: false, error: { code: "enumerate_failed", message: `listDir ${dir}: ${ls.error.code}` } };
+        }
+        for (const info of ls.value) {
+            if (info.kind === "symlink") {
+                // Record but do NOT traverse — listDir is no-follow, so we stop at the FIRST symlink in any path. That
+                // lets restore neutralize a symlink ANCESTOR (e.g. `dir -> /outside`) by removing it before any write.
+                symlinks.push(info.path);
+            }
+            else if (info.kind === "directory") {
+                if (!bounds.ignoreDirs.has(info.name))
+                    stack.push(info.path);
+            }
+            else if (info.kind === "file") {
+                // [K-PLATFORM-SWEEP]: family-agnostic rel key, stored in "/" form (portable across capture/restore
+                // families). walk guarantees descendants; a non-descendant here is a form anomaly → fail closed.
+                const relPath = relUnder(root, info.path);
+                if (relPath === null)
+                    return { ok: false, error: { code: "enumerate_failed", message: `path escapes root form: ${info.path}` } };
+                files.push({ relPath, absPath: info.path, size: info.size });
+                totalBytes += info.size;
+                if (files.length > bounds.maxFiles)
+                    return { ok: false, error: { code: "too_large", message: `> ${bounds.maxFiles} files` } };
+                if (totalBytes > bounds.maxBytes)
+                    return { ok: false, error: { code: "too_large", message: `> ${bounds.maxBytes} bytes` } };
+            }
+        }
+    }
+    return { ok: true, value: { files, symlinks } };
+}
+const SEP = String.fromCharCode(0); // NUL sep: scope/key are public strings; a space-bearing id must not mis-slice reap().
+const skey = (scope, key) => `${scope}${SEP}${key}`;
+/**
+ * Capture the working tree under `root` into a manifest `relPath → sha256`, handing each file's bytes to
+ * `putBlob` (the backend stores them content-addressed). **The env-operating + security-critical half a durable
+ * backend MUST reuse** (not re-implement — duplication risks re-introducing the symlink-escape / fail-closed
+ * bugs the dual-review fixed). Fail-CLOSED: an enumerate/read/bound failure returns an error and the caller must
+ * NOT persist a partial manifest. Never throws.
+ */
+export async function captureManifest(env, root, bounds, signal, putBlob) {
+    const enumerated = await enumerateTree(env, root, bounds, signal);
+    if (!enumerated.ok)
+        return enumerated;
+    const manifest = new Map();
+    for (const f of enumerated.value.files) {
+        if (signal?.aborted)
+            return { ok: false, error: { code: "aborted", message: "aborted" } };
+        const rb = await env.readBinaryFile(f.absPath, signal);
+        if (!rb.ok)
+            return { ok: false, error: { code: "read_failed", message: `read ${f.relPath}: ${rb.error.code}` } };
+        const hash = createHash("sha256").update(rb.value).digest("hex");
+        await putBlob(hash, rb.value);
+        manifest.set(f.relPath, hash);
+    }
+    return { ok: true, value: manifest };
+}
+/**
+ * CONVERGE the tree under `root` to `manifest`, loading each captured file's bytes via `getBlob`. **The
+ * env-operating + security-critical half a durable backend MUST reuse.** Order is load-bearing (codex BLOCKER +
+ * Opus M1): PHASE 1 removes every current symlink (neutralizes a `dir -> /outside` ancestor that writeFile would
+ * otherwise follow OUT of root) + every file created since; PHASE 2 writes each captured file, clearing a
+ * directory that now occupies a file's path first. Never throws.
+ */
+export async function applyManifest(env, root, bounds, signal, manifest, getBlob) {
+    const cur = await enumerateTree(env, root, bounds, signal);
+    if (!cur.ok)
+        return cur; // can't see the current tree → can't safely converge it (fail-closed)
+    // PHASE 1 — REMOVE before any write. (a) every current symlink — a snapshot never captures one, so each is a
+    // stray/obstruction (and a symlink ANCESTOR would make writeFile escape root).
+    for (const link of cur.value.symlinks) {
+        if (signal?.aborted)
+            return { ok: false, error: { code: "aborted", message: "aborted" } };
+        const rm = await env.remove(link, { force: true });
+        if (!rm.ok)
+            return { ok: false, error: { code: "restore_failed", message: `remove symlink ${link}: ${rm.error.code}` } };
+    }
+    // (b) every current file NOT in the snapshot (created since).
+    for (const f of cur.value.files) {
+        if (signal?.aborted)
+            return { ok: false, error: { code: "aborted", message: "aborted" } };
+        if (!manifest.has(f.relPath)) {
+            const rm = await env.remove(f.absPath, { force: true });
+            if (!rm.ok)
+                return { ok: false, error: { code: "restore_failed", message: `remove ${f.relPath}: ${rm.error.code}` } };
+        }
+    }
+    // PHASE 2 — WRITE every captured file (writeFile creates parent dirs). Clear a directory that now occupies a
+    // path the snapshot needs as a file (`rm x; mkdir x`) so writeFile does not EISDIR.
+    for (const [relPath, hash] of manifest) {
+        if (signal?.aborted)
+            return { ok: false, error: { code: "aborted", message: "aborted" } };
+        // Containment guard, orthogonal to the PHASE-1 symlink removal: reject a manifest entry whose path
+        // escapes root via `..` (or is absolute). Normal capture stores `relative(root, descendant)` so this only
+        // fires on a tampered/foreign/SDK-supplied manifest — fail-closed, matching the symlink posture.
+        // [K-PLATFORM-SWEEP]: pure-string family-agnostic containment — absolute (either family) or ANY ".."
+        // segment is rejected (normal capture never produces one; stricter than the old host-path normalize).
+        // codex F7: fold legacy win-form manifest keys ONLY when restoring onto a win-family root — under a
+        // POSIX root a backslash in the key is a literal file-name character (kept verbatim; a LEGACY win
+        // manifest restored cross-family onto POSIX is out of scope — new win captures already store "/" keys).
+        const relN = isWinFormPath(root) ? normSlash(relPath) : relPath;
+        if (isUnsafeRelPath(relN)) {
+            return { ok: false, error: { code: "restore_failed", message: `unsafe relPath escapes root: ${relPath}` } };
+        }
+        const blob = await getBlob(hash);
+        if (!blob)
+            return { ok: false, error: { code: "restore_failed", message: `missing blob for ${relPath}` } };
+        const target = joinUnder(root, relN);
+        const fi = await env.fileInfo(target);
+        if (fi.ok && fi.value.kind === "directory") {
+            const rm = await env.remove(target, { recursive: true, force: true });
+            if (!rm.ok)
+                return { ok: false, error: { code: "restore_failed", message: `clear dir ${relPath}: ${rm.error.code}` } };
+        }
+        const w = await env.writeFile(target, blob);
+        if (!w.ok)
+            return { ok: false, error: { code: "restore_failed", message: `write ${relPath}: ${w.error.code}` } };
+    }
+    return { ok: true };
+}
+/**
+ * In-memory, content-addressed reference {@link FileSnapshotStore}. Blobs are deduplicated by sha256 ACROSS all
+ * snapshots (a file unchanged between turns is stored once); each snapshot keeps a manifest `relPath → hash`.
+ * Single-process (the default-deps reference; a durable/file-backed impl mirrors `src/stores/file/`).
+ */
+export class InMemoryFileSnapshotStore {
+    blobs = new Map(); // sha256(hex) → bytes (shared, dedup)
+    manifests = new Map(); // skey → (relPath → hash)
+    // skey → the blob hashes its mid-capture snapshot has written (create-once atomicity AND reap-safety: an
+    // in-flight snapshot's blobs are not yet in any manifest, so reap must treat them as LIVE — bug-hunt MAJOR-1,
+    // mirrors the File store at src/stores/file/file-snapshot-store.ts).
+    inFlight = new Map();
+    bounds;
+    constructor(bounds) {
+        // COPY ignoreDirs (codex review): the caller's Set is theirs — store our own so a later external mutation
+        // cannot change which dirs a restore enumerates (which could then delete a now-included dir's files).
+        this.bounds = {
+            maxFiles: bounds?.maxFiles ?? DEFAULT_SNAPSHOT_BOUNDS.maxFiles,
+            maxBytes: bounds?.maxBytes ?? DEFAULT_SNAPSHOT_BOUNDS.maxBytes,
+            ignoreDirs: new Set(bounds?.ignoreDirs ?? DEFAULT_SNAPSHOT_BOUNDS.ignoreDirs),
+        };
+    }
+    async snapshot(scope, key, env, root, signal) {
+        const sk = skey(scope, key);
+        // create-once + atomic: an existing OR in-flight snapshot for this immutable entry is a no-op.
+        if (this.manifests.has(sk) || this.inFlight.has(sk))
+            return { ok: true };
+        const written = new Set(); // hashes this capture has stored (reap treats them as live)
+        this.inFlight.set(sk, written);
+        try {
+            const captured = await captureManifest(env, root, this.bounds, signal, (hash, bytes) => {
+                written.add(hash); // record BEFORE the store so a racing reap never GCs a blob we are about to/just did set
+                if (!this.blobs.has(hash))
+                    this.blobs.set(hash, bytes);
+            });
+            if (!captured.ok)
+                return captured;
+            // Commit ONLY after the full enumerate+read succeeds — never a partial manifest (fail-closed).
+            this.manifests.set(sk, captured.value);
+            return { ok: true };
+        }
+        finally {
+            this.inFlight.delete(sk);
+        }
+    }
+    async restore(scope, key, env, root, signal) {
+        const manifest = this.manifests.get(skey(scope, key));
+        if (!manifest)
+            return { ok: false, error: { code: "not_found", message: `no snapshot for key ${key}` } };
+        return applyManifest(env, root, this.bounds, signal, manifest, (hash) => this.blobs.get(hash));
+    }
+    async has(scope, key) {
+        return this.manifests.has(skey(scope, key));
+    }
+    async listKeys(scope) {
+        // [266]: the enumeration half of reap — every committed snapshot key for this scope (NUL-sep prefix slice,
+        // same as reap). In-flight (not-yet-committed) snapshots are deliberately NOT listed (no manifest yet).
+        const prefix = `${scope}${SEP}`;
+        const keys = [];
+        for (const sk of this.manifests.keys()) {
+            if (sk.startsWith(prefix))
+                keys.push(sk.slice(prefix.length));
+        }
+        return keys;
+    }
+    async exportManifest(scope, key) {
+        const m = this.manifests.get(skey(scope, key));
+        return m ? new Map(m) : null; // detached copy — the caller must not mutate stored state
+    }
+    async getBlob(hash) {
+        return this.blobs.get(hash);
+    }
+    async putBlob(hash, bytes) {
+        // content-address integrity: storing bytes under a non-matching hash would poison the store (a later
+        // getBlob/restore returns wrong content) — verify, like importManifest. Mismatch → read_failed, store nothing.
+        if (createHash("sha256").update(bytes).digest("hex") !== hash) {
+            return { ok: false, error: { code: "read_failed", message: `blob bytes fail content-address integrity for ${hash}` } };
+        }
+        if (!this.blobs.has(hash))
+            this.blobs.set(hash, bytes); // immutable: same hash ⇒ same bytes (repeat = no-op)
+        return { ok: true };
+    }
+    async importManifest(scope, key, manifest, srcGetBlob) {
+        const sk = skey(scope, key);
+        // create-once + atomic: an existing OR in-flight snapshot for this immutable entry is a no-op.
+        if (this.manifests.has(sk) || this.inFlight.has(sk))
+            return { ok: true };
+        const written = new Set(); // hashes this import has stored (reap treats them as live, mirrors snapshot())
+        this.inFlight.set(sk, written);
+        try {
+            for (const hash of new Set(manifest.values())) {
+                written.add(hash); // record BEFORE the fetch so a racing reap never GCs a blob we are about to store
+                if (this.blobs.has(hash))
+                    continue; // already present (content-addressed dedup across snapshots)
+                const bytes = await srcGetBlob(hash);
+                if (!bytes)
+                    return { ok: false, error: { code: "read_failed", message: `missing source blob ${hash}` } };
+                if (createHash("sha256").update(bytes).digest("hex") !== hash) {
+                    return { ok: false, error: { code: "read_failed", message: `source blob ${hash} fails content-address integrity` } };
+                }
+                this.blobs.set(hash, bytes);
+            }
+            // Commit ONLY after every blob is stored+verified — never a manifest referencing a missing blob (fail-closed,
+            // mirrors snapshot(): a partial import would make a later restore silently truncate the tree).
+            this.manifests.set(sk, new Map(manifest)); // detached copy — the caller must not mutate stored state
+            return { ok: true };
+        }
+        catch (err) {
+            // NEVER throw out of the seam: `srcGetBlob` is a caller-supplied cross-backend fetch (durable/remote) that
+            // CAN reject (timeout/ECONNRESET/query error), not just resolve to undefined. Encode it as a typed
+            // `read_failed` — the SAME code the File backend now returns for a rejecting fetch (cross-backend equivalence).
+            return { ok: false, error: { code: "read_failed", message: `source blob fetch failed: ${err.message}` } };
+        }
+        finally {
+            this.inFlight.delete(sk);
+        }
+    }
+    async reap(scope, keepKeys) {
+        const keep = new Set(keepKeys);
+        const prefix = `${scope}${SEP}`;
+        let removed = 0;
+        for (const sk of [...this.manifests.keys()]) {
+            if (sk.startsWith(prefix) && !keep.has(sk.slice(prefix.length))) {
+                this.manifests.delete(sk);
+                removed++;
+            }
+        }
+        // GC blobs no longer referenced by ANY surviving manifest OR any IN-FLIGHT snapshot (whose blobs are stored
+        // but not yet committed to a manifest — bug-hunt MAJOR-1). This whole method is synchronous (no await) so it
+        // runs atomically vs an in-flight snapshot parked at an await.
+        const live = new Set();
+        for (const hs of this.inFlight.values())
+            for (const h of hs)
+                live.add(h);
+        for (const m of this.manifests.values())
+            for (const h of m.values())
+                live.add(h);
+        for (const h of [...this.blobs.keys()])
+            if (!live.has(h))
+                this.blobs.delete(h);
+        return removed;
+    }
+}
+//# sourceMappingURL=file-snapshot-store.js.map

package/dist/core/file-snapshot-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-snapshot-store.js","sourceRoot":"","sources":["../../src/core/file-snapshot-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,wGAAwG;AACxG,yGAAyG;AACzG,sFAAsF;AAEtF,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/D,MAAM,aAAa,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACtE,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5G;;mGAEmG;AACnG,MAAM,aAAa,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5I,iHAAiH;AACjH,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjE,CAAC;AACD,sGAAsG;AACtG,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC3F,CAAC;AACD,mGAAmG;AACnG,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3F,CAAC;AAwGD,MAAM,CAAC,MAAM,uBAAuB,GAAuB;IACzD,gHAAgH;IAChH,wGAAwG;IACxG,+GAA+G;IAC/G,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IAC3B,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC9C,CAAC;AAeF;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAAC,GAAiB,EAAE,IAAY,EAAE,MAA0B,EAAE,MAAoB;IAC5G,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1F,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,WAAW,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACzG,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5B,uGAAuG;gBACvG,uGAAuG;gBACvG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACrC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAChC,mGAAmG;gBACnG,iGAAiG;gBACjG,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;gBACjI,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC;gBACxB,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,MAAM,CAAC,QAAQ,QAAQ,EAAE,EAAE,CAAC;gBAC9H,IAAI,UAAU,GAAG,MAAM,CAAC,QAAQ;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,MAAM,CAAC,QAAQ,QAAQ,EAAE,EAAE,CAAC;YAC9H,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,uFAAuF;AAC3H,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,GAAW,EAAU,EAAE,CAAC,GAAG,KAAK,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAiB,EACjB,IAAY,EACZ,MAA0B,EAC1B,MAA+B,EAC/B,OAAkE;IAElE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1F,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACjH,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAiB,EACjB,IAAY,EACZ,MAA0B,EAC1B,MAA+B,EAC/B,QAA6B,EAC7B,OAAmF;IAEnF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,CAAC,sEAAsE;IAC/F,6GAA6G;IAC7G,+EAA+E;IAC/E,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1F,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,IAAI,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IAC3H,CAAC;IACD,8DAA8D;IAC9D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,EAAE,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACxH,CAAC;IACH,CAAC;IACD,6GAA6G;IAC7G,oFAAoF;IACpF,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1F,mGAAmG;QACnG,0GAA0G;QAC1G,iGAAiG;QACjG,qGAAqG;QACrG,sGAAsG;QACtG,oGAAoG;QACpG,kGAAkG;QAClG,wGAAwG;QACxG,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAChE,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gCAAgC,OAAO,EAAE,EAAE,EAAE,CAAC;QAC9G,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,oBAAoB,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3G,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,EAAE,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,aAAa,OAAO,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACzH,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IACnH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IACnB,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC,CAAC,sCAAsC;IAC7E,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC,CAAC,0BAA0B;IAC/F,yGAAyG;IACzG,8GAA8G;IAC9G,qEAAqE;IACpD,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1C,MAAM,CAAqB;IAE5C,YAAY,MAAoC;QAC9C,0GAA0G;QAC1G,sGAAsG;QACtG,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,uBAAuB,CAAC,QAAQ;YAC9D,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,uBAAuB,CAAC,QAAQ;YAC9D,UAAU,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,uBAAuB,CAAC,UAAU,CAAC;SAC9E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,GAAW,EAAE,GAAiB,EAAE,IAAY,EAAE,MAAoB;QAC9F,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5B,+FAA+F;QAC/F,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,4DAA4D;QAC/F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBACrF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,yFAAyF;gBAC5G,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,QAAQ,CAAC;YAClC,+FAA+F;YAC/F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACvC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,GAAW,EAAE,GAAiB,EAAE,IAAY,EAAE,MAAoB;QAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,GAAG,EAAE,EAAE,EAAE,CAAC;QACzG,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,GAAW;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,2GAA2G;QAC3G,wGAAwG;QACxG,MAAM,MAAM,GAAG,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,GAAW;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,0DAA0D;IAC1F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAiB;QAC3C,qGAAqG;QACrG,+GAA+G;QAC/G,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,iDAAiD,IAAI,EAAE,EAAE,EAAE,CAAC;QACzH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,qDAAqD;QAC7G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAa,EACb,GAAW,EACX,QAA6B,EAC7B,UAA6D;QAE7D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5B,+FAA+F;QAC/F,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,+EAA+E;QAClH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,kFAAkF;gBACrG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS,CAAC,6DAA6D;gBACjG,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,CAAC,KAAK;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,IAAI,EAAE,EAAE,EAAE,CAAC;gBACzG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,IAAI,kCAAkC,EAAE,EAAE,CAAC;gBACvH,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,8GAA8G;YAC9G,+FAA+F;YAC/F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,0DAA0D;YACrG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2GAA2G;YAC3G,mGAAmG;YACnG,gHAAgH;YAChH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,6BAA8B,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;QACvH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,QAAkB;QAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC1B,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,4GAA4G;QAC5G,6GAA6G;QAC7G,+DAA+D;QAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,KAAK,MAAM,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;YAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}