@sentropic/h2a-runtime 0.98.7-rc.2 → 0.98.7-rc.4

package/dist/gateway-host/live-disclosure.js

@@ -0,0 +1,347 @@
+/** Δ-L7a: host-owned disclosure grants, independent of collection/read access.
+ * Evidence comes only from a host port (including cache provenance), never
+ * directly from an MCP caller. No content or old snapshot is retained; grants
+ * and their issuing proofs live only in memory and never resume after restart.
+ */
+import { randomUUID } from "node:crypto";
+import { refuse, } from "./live-auth.js";
+export const DISCLOSURE_SURFACES = ["prompt", "tool", "mcp", "summary", "symbol", "local-commit", "citation", "context"];
+const validPath = (path) => typeof path === "string" && path.length > 0
+    && !/[\\\0:*?\[\]{}]/.test(path) && path.split("/").every((p) => p !== "" && p !== "." && p !== "..");
+const validProvider = (v) => typeof v === "string" && /^[a-z0-9][a-z0-9._:/-]{0,199}$/.test(v);
+// Superset of engram e417c33c content-policy.ts L4b-2. Keep every normative
+// secret rule, basename/prefix/suffix/segment, and secret-bearing path bytes.
+const protectedPath = (p) => containsKnownSecret(p) || p.split("/").some((part) => /^\.env/i.test(part) || /^\.ssh$/i.test(part) || /^(id_(rsa|dsa|ecdsa|ed25519)|credentials)(\.|$)/i.test(part)
+    || /^(secret|secrets|secrets\.json|service-account\.json)$/i.test(part) || /\.(pem|key|p12|pfx)$/i.test(part));
+// Defence in depth; the current L4b policy remains mandatory. This cannot
+// establish the absence of unknown secrets, nor override withheld provenance.
+const containsKnownSecret = (text) => /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----|gh[pousr]_[A-Za-z0-9]{20,}|github_pat_[A-Za-z0-9_]{20,}|AKIA[A-Z0-9]{16}|sk-[A-Za-z0-9_-]{20,}/.test(text)
+    || /(password|passwd|pwd|secret|api[_-]?key)\s*[:=]\s*\S+/i.test(text)
+    || /:\/\/[^/\s:]+:[^/\s@]+@/.test(text);
+const copy = (value) => JSON.parse(JSON.stringify(value));
+export function createLiveDisclosureAuthority(options) {
+    const readNow = options.now ?? Date.now;
+    const now = () => { try {
+        return readNow();
+    }
+    catch {
+        return NaN;
+    } };
+    const grants = new Map();
+    const record = (action, grantId, reason, snapshotTime) => {
+        try {
+            if (!options.audit)
+                return false;
+            const at = snapshotTime ?? now();
+            if (!Number.isSafeInteger(at))
+                return false;
+            const receipt = options.audit(Object.freeze({ eventId: randomUUID(), at, action,
+                ...(grantId === undefined ? {} : { grantId }), ...(reason === undefined ? {} : { reason }) }));
+            if (receipt !== undefined) {
+                // A void-typed async callback is legal TypeScript but cannot attest a
+                // durable synchronous append. Contain its rejection as well.
+                if (receipt instanceof Promise)
+                    void receipt.catch(() => { });
+                return false;
+            }
+            return true;
+        }
+        catch {
+            return false;
+        }
+    };
+    const deny = (reason, requestedId) => record("refuse", requestedId !== undefined && grants.has(requestedId) ? requestedId : undefined, reason)
+        ? refuse(reason) : refuse("audit-unavailable");
+    const authorize = (capability, operation, repositoryId) => {
+        try {
+            return options.auth.authorize(capability, operation, repositoryId);
+        }
+        catch {
+            return refuse("authority-unavailable");
+        }
+    };
+    const check = (r) => {
+        const auth = authorize(r.capability, "emit", r.repositoryId);
+        if (!auth.ok)
+            return auth;
+        const g = r.grantId === undefined ? undefined : grants.get(r.grantId);
+        if (!g)
+            return refuse("grant-required");
+        const issuer = authorize(g.issuingCapability, "grant", r.repositoryId);
+        if (!issuer.ok)
+            return issuer;
+        if (g.claims.repositoryId !== r.repositoryId || g.claims.principal !== auth.claims.principal
+            || g.claims.hostId !== auth.claims.hostId || g.claims.tenant !== auth.claims.tenant
+            || g.claims.declarationId !== auth.claims.declarationId || g.claims.declarationRevision !== auth.claims.declarationRevision
+            || JSON.stringify(g.claims.authorizedRoots) !== JSON.stringify(auth.claims.authorizedRoots))
+            return refuse("scope-mismatch");
+        if (g.claims.policyVersion !== auth.claims.policyVersion)
+            return refuse("policy-changed");
+        if (g.revoked)
+            return refuse("grant-revoked");
+        const time = now();
+        if (!Number.isSafeInteger(time))
+            return refuse("authority-unavailable");
+        if (time >= g.expiresAt || time < g.startsAt)
+            return refuse("grant-expired");
+        if (g.providerId !== r.providerId)
+            return refuse("provider-mismatch");
+        try {
+            if (options.readAccess?.(Object.freeze({ principal: auth.claims.principal, repositoryId: r.repositoryId,
+                evidenceIds: Object.freeze([...r.evidenceIds]) })) !== true)
+                return refuse("read-denied");
+        }
+        catch {
+            return refuse("read-denied");
+        }
+        const lateIssuer = authorize(g.issuingCapability, "grant", r.repositoryId);
+        if (!lateIssuer.ok)
+            return lateIssuer;
+        const latest = authorize(r.capability, "emit", r.repositoryId);
+        if (!latest.ok)
+            return latest;
+        if (g.revoked)
+            return refuse("grant-revoked");
+        const finalTime = now();
+        if (!Number.isSafeInteger(finalTime))
+            return refuse("authority-unavailable");
+        if (finalTime >= g.expiresAt || finalTime < g.startsAt)
+            return refuse("grant-expired");
+        return { ok: true, grant: g, claims: latest.claims, stateRevision: latest.state.stateRevision };
+    };
+    return {
+        grant(input) {
+            let r;
+            try {
+                r = copy(input);
+            }
+            catch {
+                return deny("invalid-request");
+            }
+            if (!r || !validProvider(r.providerId) || !Number.isSafeInteger(r.expiresAt)
+                || !r.scope || !Array.isArray(r.scope.paths) || r.scope.paths.length === 0 || !r.scope.paths.every(validPath)
+                || !Array.isArray(r.scope.surfaces) || r.scope.surfaces.length === 0
+                || !r.scope.surfaces.every((s) => DISCLOSURE_SURFACES.includes(s)))
+                return deny("invalid-request");
+            const auth = authorize(r.capability, "grant", r.repositoryId);
+            if (!auth.ok)
+                return deny(auth.reason);
+            const time = now();
+            if (!Number.isSafeInteger(time) || r.expiresAt <= time || r.expiresAt > auth.claims.expiresAt)
+                return deny("invalid-request");
+            const id = randomUUID();
+            const g = { issuingCapability: r.capability, claims: copy(auth.claims), providerId: r.providerId,
+                startsAt: time, expiresAt: r.expiresAt,
+                scope: { paths: Object.freeze([...r.scope.paths]), surfaces: Object.freeze([...r.scope.surfaces]) }, revoked: false };
+            grants.set(id, g);
+            if (!record("grant", id)) {
+                grants.delete(id);
+                return refuse("audit-unavailable");
+            }
+            return Object.freeze({ ok: true, grantId: id, expiresAt: g.expiresAt });
+        },
+        revoke(capability, id) {
+            const auth = authorize(capability, "revoke");
+            if (!auth.ok)
+                return deny(auth.reason, id);
+            const g = grants.get(id);
+            if (!g)
+                return deny("grant-required");
+            if (auth.claims.repositoryId !== g.claims.repositoryId || auth.claims.principal !== g.claims.principal || auth.claims.hostId !== g.claims.hostId
+                || auth.claims.tenant !== g.claims.tenant)
+                return deny("scope-mismatch", id);
+            // Revocation takes effect even if its audit sink has failed.
+            g.revoked = true;
+            return record("revoke", id) ? Object.freeze({ ok: true }) : refuse("audit-unavailable");
+        },
+        async emit(input) {
+            let r;
+            try {
+                r = copy(input);
+            }
+            catch {
+                return deny("invalid-request");
+            }
+            const reject = (reason) => deny(reason, r?.grantId);
+            if (!r || !Array.isArray(r.evidenceIds) || r.evidenceIds.length === 0
+                || r.evidenceIds.some((id) => typeof id !== "string" || id.length === 0))
+                return reject("invalid-request");
+            Object.freeze(r.evidenceIds);
+            Object.freeze(r);
+            const permitted = check(r);
+            if (!permitted.ok)
+                return reject(permitted.reason);
+            let evidence;
+            try {
+                evidence = copy(await options.loadEvidence(Object.freeze([...r.evidenceIds])));
+            }
+            catch {
+                return reject("evidence-unavailable");
+            }
+            // Freeze evidence before any policy/transport callback can mutate it.
+            try {
+                if (!Array.isArray(evidence) || evidence.length === 0)
+                    return reject("evidence-unavailable");
+                for (const e of evidence) {
+                    if (!e || !r.evidenceIds.includes(e.evidenceId) || typeof e.text !== "string" || typeof e.excluded !== "boolean"
+                        || !Array.isArray(e.originPaths) || e.originPaths.length === 0 || !e.originPaths.every(validPath))
+                        return reject("evidence-unavailable");
+                    Object.freeze(e.originPaths);
+                    Object.freeze(e);
+                }
+                if (r.evidenceIds.some(id => !evidence.some(e => e.evidenceId === id)))
+                    return reject("evidence-unavailable");
+                Object.freeze(evidence);
+            }
+            catch {
+                return reject("evidence-unavailable");
+            }
+            const screen = () => {
+                const current = check(r);
+                if (!current.ok)
+                    return current;
+                const g = current.grant;
+                const policy = options.contentPolicy?.();
+                if (!policy || typeof policy.allows !== "function")
+                    return refuse("policy-unavailable");
+                if (policy.version !== g.claims.policyVersion)
+                    return refuse("policy-changed");
+                for (const e of evidence) {
+                    if (e.repositoryId !== r.repositoryId || e.declarationId !== g.claims.declarationId
+                        || e.declarationRevision !== g.claims.declarationRevision)
+                        return refuse("scope-mismatch");
+                    if (e.policyVersion !== g.claims.policyVersion)
+                        return refuse("policy-changed");
+                    if (e.stateRevision !== current.stateRevision)
+                        return refuse("stale-evidence");
+                    if (!g.scope.surfaces.includes(e.surface) || e.originPaths.some((p) => !g.scope.paths.includes(p)))
+                        return refuse("out-of-scope");
+                    if (e.excluded || e.originPaths.some(protectedPath) || containsKnownSecret(e.text) || policy.allows(e) !== true)
+                        return refuse("secret-excluded");
+                }
+                const text = evidence.map((e) => e.text).join("");
+                if (containsKnownSecret(text) || policy.allows(Object.freeze({ ...evidence[0], text,
+                    originPaths: Object.freeze([...new Set(evidence.flatMap(e => e.originPaths))]) })) !== true)
+                    return refuse("secret-excluded");
+                return undefined;
+            };
+            try {
+                const refusal = screen();
+                if (refusal)
+                    return reject(refusal.reason);
+            }
+            catch {
+                return reject("policy-unavailable");
+            }
+            let transport;
+            try {
+                transport = options.transport(r.providerId);
+                if (!transport || transport.providerId !== r.providerId || typeof transport.send !== "function")
+                    return reject("provider-mismatch");
+            }
+            catch {
+                return reject("transport-failed");
+            }
+            // Reordering mutable callbacks cannot make the decision atomic.
+            // Require a host snapshot lease; final validation uses data only.
+            if (!options.acquireEmissionSnapshot)
+                return reject("authority-unavailable");
+            let lease;
+            try {
+                const acquired = options.acquireEmissionSnapshot(Object.freeze({ request: r,
+                    issuingCapability: permitted.grant.issuingCapability, evidence, transport }));
+                if ("ok" in acquired)
+                    return reject(acquired.reason);
+                lease = acquired;
+            }
+            catch {
+                return reject("authority-unavailable");
+            }
+            let pending;
+            let releaseFailed = false;
+            try {
+                // Resolve accessors before validation, while the host fence is held.
+                const send = lease.send.bind(lease);
+                const snapshot = copy(lease.snapshot);
+                const auth = snapshot.authorization;
+                const issuer = snapshot.issuerAuthorization;
+                if (!auth.ok)
+                    return reject(auth.reason);
+                if (!issuer.ok)
+                    return reject(issuer.reason);
+                const g = permitted.grant;
+                if (auth.claims.id !== permitted.claims.id || issuer.claims.id !== g.claims.id)
+                    return reject("scope-mismatch");
+                // Bind both proofs and their states to this grant. No live authority,
+                // read, clock, policy or route callbacks run during this validation.
+                for (const verified of [auth, issuer]) {
+                    for (const key of ["principal", "hostId", "tenant", "repositoryId", "declarationId", "declarationRevision"]) {
+                        if (verified.claims[key] !== g.claims[key] || verified.state[key] !== g.claims[key])
+                            return reject("scope-mismatch");
+                    }
+                    if (JSON.stringify(verified.claims.authorizedRoots) !== JSON.stringify(g.claims.authorizedRoots)
+                        || JSON.stringify(verified.state.authorizedRoots) !== JSON.stringify(g.claims.authorizedRoots))
+                        return reject("scope-mismatch");
+                    if (verified.claims.policyVersion !== g.claims.policyVersion || verified.state.policyVersion !== g.claims.policyVersion)
+                        return reject("policy-changed");
+                    if (snapshot.at < verified.claims.issuedAt || snapshot.at >= verified.claims.expiresAt)
+                        return reject("capability-expired");
+                }
+                if (g.revoked)
+                    return reject("grant-revoked");
+                if (!Number.isSafeInteger(snapshot.at))
+                    return reject("authority-unavailable");
+                if (snapshot.at < g.startsAt || snapshot.at >= g.expiresAt)
+                    return reject("grant-expired");
+                if (snapshot.readAllowed !== true)
+                    return reject("read-denied");
+                if (snapshot.providerId !== r.providerId)
+                    return reject("provider-mismatch");
+                if (evidence.some(e => e.stateRevision !== auth.state.stateRevision || e.stateRevision !== issuer.state.stateRevision))
+                    return reject("stale-evidence");
+                const policy = snapshot.policy;
+                if (!policy)
+                    return reject("policy-unavailable");
+                if (policy.version !== g.claims.policyVersion)
+                    return reject("policy-changed");
+                if (policy.allowed.length !== evidence.length || policy.allowed.some(allowed => allowed !== true)
+                    || policy.compositionAllowed !== true)
+                    return reject("secret-excluded");
+                // All route/policy/state checks precede the receipt. The host fence
+                // covers audit; a reentrant revocation of our local grant still wins.
+                if (!record("emit-attempt", r.grantId, undefined, snapshot.at))
+                    return refuse("audit-unavailable");
+                if (g.revoked)
+                    return reject("grant-revoked");
+                try {
+                    pending = send(Object.freeze(evidence.map(e => e.text)));
+                }
+                catch {
+                    return reject("transport-failed");
+                }
+            }
+            catch {
+                return reject("authority-unavailable");
+            }
+            finally {
+                try {
+                    lease.release();
+                }
+                catch {
+                    releaseFailed = true;
+                }
+            }
+            try {
+                await pending;
+            }
+            catch {
+                return reject("transport-failed");
+            }
+            if (releaseFailed)
+                return reject("authority-unavailable");
+            return Object.freeze({ ok: true });
+        },
+        policyUnavailable: () => deny("policy-unavailable"),
+    };
+}
+//# sourceMappingURL=live-disclosure.js.map

package/dist/gateway-host/live-disclosure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-disclosure.js","sourceRoot":"","sources":["../../src/gateway-host/live-disclosure.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,MAAM,GAEP,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAkHlI,MAAM,SAAS,GAAG,CAAC,IAAa,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;OAC3F,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;AACxG,MAAM,aAAa,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrH,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,aAAa,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACjG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC;OAC3G,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjH,0EAA0E;AAC1E,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAW,EAAE,CACpD,sIAAsI,CAAC,IAAI,CAAC,IAAI,CAAC;OAC9I,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC;OACnE,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,MAAM,IAAI,GAAG,CAAI,KAAQ,EAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAExE,MAAM,UAAU,6BAA6B,CAAC,OAA8B;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,GAAW,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,GAAG,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,MAAsC,EAAE,OAAgB,EAAE,MAA0B,EAAE,YAAqB,EAAW,EAAE;QACtI,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACjC,MAAM,EAAE,GAAG,YAAY,IAAI,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9E,MAAM,OAAO,GAAY,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM;gBACtF,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACjG,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,sEAAsE;gBACtE,6DAA6D;gBAC7D,IAAI,OAAO,YAAY,OAAO;oBAAE,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC7D,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAyB,EAAE,WAAoB,EAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,EACxF,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC;QACvF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,UAAmB,EAAE,SAAsC,EAAE,YAAqB,EAA+B,EAAE;QACpI,IAAI,CAAC;YAAC,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAAC,CAAC;QAC3E,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAAC,CAAC;IACnD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,CAAwB,EAA6F,EAAE;QACpI,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS;eACvF,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM;eAChF,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,CAAC,mBAAmB,KAAK,IAAI,CAAC,MAAM,CAAC,mBAAmB;eACxH,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/H,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1F,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC5F,IAAI,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,GAAG,CAAC,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7E,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY;gBACrG,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9F,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;QAAC,CAAC;QACzC,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC7E,IAAI,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,GAAG,CAAC,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IAClG,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,KAAK;YACT,IAAI,CAAyB,CAAC;YAC9B,IAAI,CAAC;gBAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YAClE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;mBACvE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;mBAC1G,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;mBACjE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACrG,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9H,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,CAAC,GAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;gBACrG,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACxH,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;gBAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAAC,CAAC;YACpF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,UAAU,EAAE,EAAE;YACnB,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAChE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM;mBAC3I,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YAC/E,6DAA6D;YAC7D,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;YACjB,OAAO,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC1F,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,IAAI,CAAwB,CAAC;YAC7B,IAAI,CAAC;gBAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YAClE,MAAM,MAAM,GAAG,CAAC,MAAyB,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;YAChF,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;mBAChE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC7G,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/E,IAAI,QAA2C,CAAC;YAChD,IAAI,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACvF,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAAC,CAAC;YAChD,sEAAsE;YACtE,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBAC7F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS;2BAC3G,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;wBAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;oBAC3I,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;oBAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjD,CAAC;gBACD,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;oBAAE,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBAC9G,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAAC,CAAC;YAClD,MAAM,MAAM,GAAG,GAAwB,EAAE;gBACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,EAAE;oBAAE,OAAO,OAAO,CAAC;gBAC1D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;gBACxB,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU;oBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACxF,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC/E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;2BAC9E,CAAC,CAAC,mBAAmB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAC7F,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAChF,IAAI,CAAC,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAC/E,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;wBAAE,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;oBAC1I,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;wBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBACpJ,CAAC;gBACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClD,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAE,EAAE,IAAI;oBAClF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;oBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAChI,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;gBAAC,IAAI,OAAO;oBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAAC,CAAC;YAChD,IAAI,SAA4C,CAAC;YACjD,IAAI,CAAC;gBACH,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC5C,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU;oBAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACtI,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAAC,CAAC;YAC9C,gEAAgE;YAChE,kEAAkE;YAClE,IAAI,CAAC,OAAO,CAAC,uBAAuB;gBAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC7E,IAAI,KAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;oBACzE,iBAAiB,EAAE,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;gBAChF,IAAI,IAAI,IAAI,QAAQ;oBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrD,KAAK,GAAG,QAAQ,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAAC,CAAC;YACnD,IAAI,OAA6B,CAAC;YAClC,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,IAAI,CAAC;gBACH,qEAAqE;gBACrE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;gBACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,mBAAmB,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC7C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;gBAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAChH,sEAAsE;gBACtE,qEAAqE;gBACrE,KAAK,MAAM,QAAQ,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;oBACtC,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,qBAAqB,CAAU,EAAE,CAAC;wBACrH,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;4BAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBACvH,CAAC;oBACD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;2BAC3F,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAClI,IAAI,QAAQ,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;wBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBACzJ,IAAI,QAAQ,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS;wBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAC9H,CAAC;gBACD,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBAC/E,IAAI,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS;oBAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC3F,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI;oBAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;gBAChE,IAAI,QAAQ,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;oBAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBAC7E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,KAAK,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBACxJ,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC/B,IAAI,CAAC,MAAM;oBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACjD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;gBAC/E,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC;uBAC5F,MAAM,CAAC,kBAAkB,KAAK,IAAI;oBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBAC1E,oEAAoE;gBACpE,sEAAsE;gBACtE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBACnG,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC9C,IAAI,CAAC;oBAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACjE,MAAM,CAAC;oBAAC,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAAC,CAAC;oBAC3C,CAAC;gBAAC,IAAI,CAAC;oBAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,aAAa,GAAG,IAAI,CAAC;gBAAC,CAAC;YAAC,CAAC;YACpE,IAAI,CAAC;gBAAC,MAAM,OAAO,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAAC,CAAC;YACnE,IAAI,aAAa;gBAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/dist/gateway-host/live-host.d.ts

@@ -0,0 +1,20 @@
+/** G4 composition deliberately remains closed: the pinned dependencies have no
+ * L8 publication policy contract. Wiring a caller-supplied boolean here would
+ * manufacture authority. The collector and session gateway stay independent.
+ */
+import { type LiveDisclosureOptions } from "./live-disclosure.js";
+export declare function createLiveDisclosureHost(options: LiveDisclosureOptions): Readonly<{
+    grant: (request: import("./live-disclosure.js").GrantDisclosureRequest) => import("./live-auth.js").Refused | Readonly<{
+        ok: true;
+        grantId: string;
+        expiresAt: number;
+    }>;
+    revoke: (capability: unknown, grantId: string) => import("./live-auth.js").Refused | Readonly<{
+        ok: true;
+    }>;
+    emit: (_request: unknown) => Promise<Readonly<{
+        ok: false;
+        reason: import("./live-auth.js").DisclosureRefusal;
+    }>>;
+}>;
+//# sourceMappingURL=live-host.d.ts.map

package/dist/gateway-host/live-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-host.d.ts","sourceRoot":"","sources":["../../src/gateway-host/live-host.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAiC,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAEjG,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,qBAAqB;;;;;;;;;qBAK5C,OAAO;;;;GAEjC"}

package/dist/gateway-host/live-host.js

@@ -0,0 +1,14 @@
+/** G4 composition deliberately remains closed: the pinned dependencies have no
+ * L8 publication policy contract. Wiring a caller-supplied boolean here would
+ * manufacture authority. The collector and session gateway stay independent.
+ */
+import { createLiveDisclosureAuthority } from "./live-disclosure.js";
+export function createLiveDisclosureHost(options) {
+    const authority = createLiveDisclosureAuthority(options);
+    return Object.freeze({
+        grant: authority.grant,
+        revoke: authority.revoke,
+        emit: async (_request) => authority.policyUnavailable(),
+    });
+}
+//# sourceMappingURL=live-host.js.map

package/dist/gateway-host/live-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-host.js","sourceRoot":"","sources":["../../src/gateway-host/live-host.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,6BAA6B,EAA8B,MAAM,sBAAsB,CAAC;AAEjG,MAAM,UAAU,wBAAwB,CAAC,OAA8B;IACrE,MAAM,SAAS,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,IAAI,EAAE,KAAK,EAAE,QAAiB,EAAE,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE;KACjE,CAAC,CAAC;AACL,CAAC"}

package/dist/gateway-model-catalog/model-catalog.d.ts

@@ -0,0 +1,38 @@
+/**
+ * h2a embedded gateway model catalog — H0 mirror of the published #662
+ * surface (llm-mesh 0.26.0 / llm-gateway 0.20.0).
+ *
+ * Canonical routing knowledge stays in llm-mesh; this module only names the
+ * model ids `h2a run --model` accepts and normalizes readable aliases to
+ * their exact canonical id (identity-only normalization, no cross-model
+ * mapping). Unknown names resolve to undefined so the exact-model default
+ * never silently maps them.
+ */
+export declare const GEMINI_4_ARGON = "gemini-4-argon";
+export declare const GEMINI_3_8_FLASH = "gemini-3.8-flash";
+export declare const MUSE_SPARK_1_3 = "muse-spark-1.3";
+export declare const MUSE_SPARK_1_3_CONTRIBUTOR = "muse-spark-1.3-contributor";
+export declare const MUSE_WONDER_1_0 = "muse-wonder-1.0";
+export declare const MUSE_WONDER_FULL_1_0 = "muse-wonder-full-1.0";
+export declare const GATEWAY_MODEL_IDS: readonly ["gemini-4-argon", "gemini-3.8-flash", "muse-spark-1.3", "muse-spark-1.3-contributor", "muse-wonder-1.0", "muse-wonder-full-1.0"];
+export type GatewayModelId = (typeof GATEWAY_MODEL_IDS)[number];
+/** Readable aliases accepted by `h2a run --model` (spec §6.6). */
+export declare const GATEWAY_MODEL_ALIASES: Readonly<Record<string, GatewayModelId>>;
+export declare function isKnownGatewayModel(value: string): value is GatewayModelId;
+/** Identity-only normalization: alias → canonical id, else undefined. */
+export declare function resolveGatewayModelAlias(value: string): GatewayModelId | undefined;
+/**
+ * Claude-family gateway mapping (spec §6.6): requested alias family →
+ * cloud slot (Gemini) and Muse slot. Effort is advisory; the mesh validates
+ * it against transport capability. Unmentioned legacy families keep llm-mesh's
+ * own table and are absent here by design.
+ */
+export type ClaudeGatewaySlot = {
+    readonly cloud: GatewayModelId;
+    readonly cloudEffort: string;
+    readonly muse: GatewayModelId;
+    readonly museEffort: string;
+};
+export declare const CLAUDE_GATEWAY_MODEL_MAP: Readonly<Record<string, ClaudeGatewaySlot>>;
+export declare function claudeGatewaySlot(family: string): ClaudeGatewaySlot | undefined;
+//# sourceMappingURL=model-catalog.d.ts.map

package/dist/gateway-model-catalog/model-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-catalog.d.ts","sourceRoot":"","sources":["../../src/gateway-model-catalog/model-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAC/C,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAC/C,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AACvE,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAE3D,eAAO,MAAM,iBAAiB,4IAOpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,kEAAkE;AAClE,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAqBxE,CAAC;AAEJ,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAE1E;AAED,yEAAyE;AACzE,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,GACZ,cAAc,GAAG,SAAS,CAK5B;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAC7C,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAwGlC,CAAC;AAEF,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,GACb,iBAAiB,GAAG,SAAS,CAK/B"}

package/dist/gateway-model-catalog/model-catalog.js

@@ -0,0 +1,167 @@
+/**
+ * h2a embedded gateway model catalog — H0 mirror of the published #662
+ * surface (llm-mesh 0.26.0 / llm-gateway 0.20.0).
+ *
+ * Canonical routing knowledge stays in llm-mesh; this module only names the
+ * model ids `h2a run --model` accepts and normalizes readable aliases to
+ * their exact canonical id (identity-only normalization, no cross-model
+ * mapping). Unknown names resolve to undefined so the exact-model default
+ * never silently maps them.
+ */
+export const GEMINI_4_ARGON = "gemini-4-argon";
+export const GEMINI_3_8_FLASH = "gemini-3.8-flash";
+export const MUSE_SPARK_1_3 = "muse-spark-1.3";
+export const MUSE_SPARK_1_3_CONTRIBUTOR = "muse-spark-1.3-contributor";
+export const MUSE_WONDER_1_0 = "muse-wonder-1.0";
+export const MUSE_WONDER_FULL_1_0 = "muse-wonder-full-1.0";
+export const GATEWAY_MODEL_IDS = [
+    GEMINI_4_ARGON,
+    GEMINI_3_8_FLASH,
+    MUSE_SPARK_1_3,
+    MUSE_SPARK_1_3_CONTRIBUTOR,
+    MUSE_WONDER_1_0,
+    MUSE_WONDER_FULL_1_0,
+];
+/** Readable aliases accepted by `h2a run --model` (spec §6.6). */
+export const GATEWAY_MODEL_ALIASES = {
+    "gemini-4-argon": GEMINI_4_ARGON,
+    "gemini-4-argon-high": GEMINI_4_ARGON,
+    "gemini-argon": GEMINI_4_ARGON,
+    argon: GEMINI_4_ARGON,
+    "argon-high": GEMINI_4_ARGON,
+    "gemini-3.8-flash": GEMINI_3_8_FLASH,
+    "gemini-3.8-flash-high": GEMINI_3_8_FLASH,
+    flash: GEMINI_3_8_FLASH,
+    "flash-high": GEMINI_3_8_FLASH,
+    "muse-spark-1.3": MUSE_SPARK_1_3,
+    "muse-spark-1.3-contributor": MUSE_SPARK_1_3_CONTRIBUTOR,
+    "muse-spark": MUSE_SPARK_1_3,
+    spark: MUSE_SPARK_1_3,
+    "muse-wonder-1.0": MUSE_WONDER_1_0,
+    "muse-wonder": MUSE_WONDER_1_0,
+    wonder: MUSE_WONDER_1_0,
+    "muse-wonder-full-1.0": MUSE_WONDER_FULL_1_0,
+    "muse-wonder-full": MUSE_WONDER_FULL_1_0,
+    "wonder-full": MUSE_WONDER_FULL_1_0,
+};
+export function isKnownGatewayModel(value) {
+    return GATEWAY_MODEL_IDS.includes(value);
+}
+/** Identity-only normalization: alias → canonical id, else undefined. */
+export function resolveGatewayModelAlias(value) {
+    const key = value.trim().toLowerCase();
+    return Object.hasOwn(GATEWAY_MODEL_ALIASES, key)
+        ? GATEWAY_MODEL_ALIASES[key]
+        : undefined;
+}
+export const CLAUDE_GATEWAY_MODEL_MAP = {
+    "opus-5.5/base": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_1_0,
+        museEffort: "high",
+    },
+    "opus-5.5/medium": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_1_0,
+        museEffort: "high",
+    },
+    "opus-5.5/high": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_1_0,
+        museEffort: "xhigh",
+    },
+    "opus-5.5/xhigh": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_FULL_1_0,
+        museEffort: "max",
+    },
+    "opus-5.5/max": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_FULL_1_0,
+        museEffort: "max",
+    },
+    "opus-5.5/low": {
+        cloud: GEMINI_3_8_FLASH,
+        cloudEffort: "high",
+        muse: MUSE_SPARK_1_3_CONTRIBUTOR,
+        museEffort: "medium",
+    },
+    "sonnet-5.5/high": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_SPARK_1_3_CONTRIBUTOR,
+        museEffort: "xhigh",
+    },
+    "sonnet-5.5/xhigh": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_1_0,
+        museEffort: "max",
+    },
+    "sonnet-5.5/max": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_FULL_1_0,
+        museEffort: "max",
+    },
+    "sonnet-5.5/medium": {
+        cloud: GEMINI_3_8_FLASH,
+        cloudEffort: "high",
+        muse: MUSE_SPARK_1_3_CONTRIBUTOR,
+        museEffort: "high",
+    },
+    "sonnet-5.5/low": {
+        cloud: GEMINI_3_8_FLASH,
+        cloudEffort: "medium",
+        muse: MUSE_SPARK_1_3_CONTRIBUTOR,
+        museEffort: "medium",
+    },
+    "fable-5.1/base": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_1_0,
+        museEffort: "max",
+    },
+    "fable-5.1/medium": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_1_0,
+        museEffort: "high",
+    },
+    "fable-5.1/high": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_1_0,
+        museEffort: "max",
+    },
+    "fable-5.1/xhigh": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_1_0,
+        museEffort: "max",
+    },
+    "fable-5.1/max": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_1_0,
+        museEffort: "max",
+    },
+    "fable-5.1/low": {
+        cloud: GEMINI_4_ARGON,
+        cloudEffort: "high",
+        muse: MUSE_WONDER_1_0,
+        museEffort: "medium",
+    },
+};
+export function claudeGatewaySlot(family) {
+    const key = family.trim().toLowerCase();
+    return Object.hasOwn(CLAUDE_GATEWAY_MODEL_MAP, key)
+        ? CLAUDE_GATEWAY_MODEL_MAP[key]
+        : undefined;
+}
+//# sourceMappingURL=model-catalog.js.map

package/dist/gateway-model-catalog/model-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-catalog.js","sourceRoot":"","sources":["../../src/gateway-model-catalog/model-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAC/C,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AACjD,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,0BAA0B;IAC1B,eAAe;IACf,oBAAoB;CACZ,CAAC;AAIX,kEAAkE;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAChC;IACE,gBAAgB,EAAE,cAAc;IAChC,qBAAqB,EAAE,cAAc;IACrC,cAAc,EAAE,cAAc;IAC9B,KAAK,EAAE,cAAc;IACrB,YAAY,EAAE,cAAc;IAC5B,kBAAkB,EAAE,gBAAgB;IACpC,uBAAuB,EAAE,gBAAgB;IACzC,KAAK,EAAE,gBAAgB;IACvB,YAAY,EAAE,gBAAgB;IAC9B,gBAAgB,EAAE,cAAc;IAChC,4BAA4B,EAAE,0BAA0B;IACxD,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,cAAc;IACrB,iBAAiB,EAAE,eAAe;IAClC,aAAa,EAAE,eAAe;IAC9B,MAAM,EAAE,eAAe;IACvB,sBAAsB,EAAE,oBAAoB;IAC5C,kBAAkB,EAAE,oBAAoB;IACxC,aAAa,EAAE,oBAAoB;CACpC,CAAC;AAEJ,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAQ,iBAAuC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,wBAAwB,CACtC,KAAa;IAEb,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC;QAC9C,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC;QAC5B,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAeD,MAAM,CAAC,MAAM,wBAAwB,GAEjC;IACF,eAAe,EAAE;QACf,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,MAAM;KACnB;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,MAAM;KACnB;IACD,eAAe,EAAE;QACf,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,OAAO;KACpB;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,KAAK;KAClB;IACD,cAAc,EAAE;QACd,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,KAAK;KAClB;IACD,cAAc,EAAE;QACd,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,0BAA0B;QAChC,UAAU,EAAE,QAAQ;KACrB;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,0BAA0B;QAChC,UAAU,EAAE,OAAO;KACpB;IACD,kBAAkB,EAAE;QAClB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,KAAK;KAClB;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,KAAK;KAClB;IACD,mBAAmB,EAAE;QACnB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,0BAA0B;QAChC,UAAU,EAAE,MAAM;KACnB;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,0BAA0B;QAChC,UAAU,EAAE,QAAQ;KACrB;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,KAAK;KAClB;IACD,kBAAkB,EAAE;QAClB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,MAAM;KACnB;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,KAAK;KAClB;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,KAAK;KAClB;IACD,eAAe,EAAE;QACf,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,KAAK;KAClB;IACD,eAAe,EAAE;QACf,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,MAAM;QACnB,IAAI,EAAE,eAAe;QACrB,UAAU,EAAE,QAAQ;KACrB;CACF,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAC/B,MAAc;IAEd,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,GAAG,CAAC;QACjD,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC;QAC/B,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}