@shield-agent/kya 0.32.9 → 0.33.1

package/dist/ioc/spawn.d.ts

@@ -0,0 +1,26 @@
+export declare const IOC_SCAN_INTERVAL_MS: number;
+/** KYA_IOC=0 (or off/false) or ~/.kya/config.json {"ioc":{"enabled":false}} turns the background scan off. */
+export declare function iocEnabled(env: NodeJS.ProcessEnv): boolean;
+export declare function iocStampPath(env: NodeJS.ProcessEnv): string;
+type SpawnLike = (command: string, args: readonly string[], options: {
+    detached: boolean;
+    stdio: "ignore";
+    env: NodeJS.ProcessEnv;
+    cwd: string;
+    windowsHide: boolean;
+}) => {
+    unref(): void;
+    on(event: "error", listener: () => void): unknown;
+};
+/**
+ * Starts `kya ioc-scan` detached when the 24 h slot is free. Never throws, never waits.
+ * Returns whether a scan was started. A failed spawn keeps the slot claimed until tomorrow.
+ */
+export declare function maybeSpawnIocScan(deps: {
+    readonly env: NodeJS.ProcessEnv;
+    readonly entry?: string;
+    readonly spawnImpl?: SpawnLike;
+    readonly nowMs?: number;
+}): boolean;
+export {};
+//# sourceMappingURL=spawn.d.ts.map

package/dist/ioc/spawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../src/ioc/spawn.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AAErD,8GAA8G;AAC9G,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAS1D;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAE3D;AAED,KAAK,SAAS,GAAG,CACf,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,KACvG;IAAE,KAAK,IAAI,IAAI,CAAC;IAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAA;CAAE,CAAC;AAE1E;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAkBV"}

package/dist/ioc/spawn.js

@@ -0,0 +1,52 @@
+/**
+ * Hook-side throttle for the IoC scan. Lean on purpose: `kya hook` imports this module and nothing
+ * from ./scan.js, so the hook path loads no scan code. The scan itself runs in a detached child
+ * (`kya ioc-scan`) that the hook never waits for.
+ */
+import { spawn } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { isAbsolute, join } from "node:path";
+import { globalConfigDir } from "../config.js";
+import { claimDailySlot } from "../daily-slot.js";
+import { childCwd, childEnv } from "./exec.js";
+export const IOC_SCAN_INTERVAL_MS = 24 * 60 * 60_000;
+/** KYA_IOC=0 (or off/false) or ~/.kya/config.json {"ioc":{"enabled":false}} turns the background scan off. */
+export function iocEnabled(env) {
+    const flag = String(env["KYA_IOC"] ?? "").trim().toLowerCase();
+    if (flag === "0" || flag === "off" || flag === "false")
+        return false;
+    try {
+        const cfg = JSON.parse(readFileSync(join(globalConfigDir(env), "config.json"), "utf8"));
+        return cfg.ioc?.enabled !== false;
+    }
+    catch {
+        return true; // no config file (the usual case) or unreadable: the default is on
+    }
+}
+export function iocStampPath(env) {
+    return join(globalConfigDir(env), "ioc-scan-stamp");
+}
+/**
+ * Starts `kya ioc-scan` detached when the 24 h slot is free. Never throws, never waits.
+ * Returns whether a scan was started. A failed spawn keeps the slot claimed until tomorrow.
+ */
+export function maybeSpawnIocScan(deps) {
+    try {
+        if (!iocEnabled(deps.env))
+            return false;
+        const entry = deps.entry ?? process.argv[1];
+        // Absolute only: the child starts in the home directory, so a relative entry would not resolve.
+        if (entry === undefined || !isAbsolute(entry))
+            return false; // before claiming: a skipped spawn must not burn the slot
+        if (!claimDailySlot(iocStampPath(deps.env), IOC_SCAN_INTERVAL_MS, deps.nowMs))
+            return false;
+        const child = (deps.spawnImpl ?? spawn)(process.execPath, [entry, "ioc-scan"], { detached: true, stdio: "ignore", env: childEnv(deps.env), cwd: childCwd(), windowsHide: true });
+        child.on("error", () => undefined);
+        child.unref();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=spawn.js.map

package/dist/ioc/spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.js","sourceRoot":"","sources":["../../src/ioc/spawn.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAErD,8GAA8G;AAC9G,MAAM,UAAU,UAAU,CAAC,GAAsB;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAoC,CAAC;QAC3H,OAAO,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,KAAK,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,mEAAmE;IAClF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAsB;IACjD,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACtD,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAKjC;IACC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,gGAAgG;QAChG,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,0DAA0D;QACvH,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5F,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,SAAS,IAAK,KAA8B,CAAC,CAC/D,OAAO,CAAC,QAAQ,EAChB,CAAC,KAAK,EAAE,UAAU,CAAC,EACnB,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CACjG,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnC,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/map/build.d.ts

@@ -0,0 +1,58 @@
+import { type TargetFamily } from "./target-class.js";
+import { type MapGraph, type ToolClass, type TrailEventLike, type Verdicts } from "./types.js";
+export interface BuildOptions {
+    /** Per-install salt for sessionHash. Tests pass a fixed value. */
+    salt: string;
+    /** Needed when `days` is set. The builder reads no clock. */
+    now?: Date;
+    /** Hard node cap per view (schema section 7). Default 100. */
+    maxNodes?: number;
+    /** Keep only rows at or after now minus `days`. */
+    days?: number;
+    /** Full export: no grouping, no caps. */
+    uncapped?: boolean;
+    /** Counts from readTrailFile, added to the view. */
+    read?: {
+        rowsRead: number;
+        rowsSkipped: number;
+        rowsOutOfWindow: number;
+    };
+}
+export interface TrailRead {
+    events: TrailEventLike[];
+    rowsRead: number;
+    rowsSkipped: number;
+    rowsOutOfWindow: number;
+}
+type Bucket = keyof Verdicts;
+/** Shape check for one row. Bad rows are skipped and counted, never thrown. */
+export declare function isTrailRow(x: unknown): x is TrailEventLike;
+/** Verdict bucket, schema section 3. First match wins. */
+export declare function bucketOf(e: TrailEventLike): Bucket;
+/** Tool class, schema 4.1. First match wins. */
+export declare function toolClassOf(e: TrailEventLike): ToolClass;
+/** A stored class is trusted only when it has the shape the writer produces: short, printable, `family:rest` or `none`. */
+export declare const SAFE_CLASS: RegExp;
+export declare function targetOf(e: TrailEventLike): {
+    cls: string;
+    family: TargetFamily;
+};
+/** Salted hash of one session (16 hex). The raw session id can be a host product id, so it never leaves the machine. */
+export declare function sessionHash(salt: string, product: string, sessionId: string): string;
+/**
+ * Builds the map graph from trail rows. Pure: same rows and options give the same JSON.
+ * Caps (schema section 7): 25 agents, 20 tools, 40 targets shown; the rest fold into "other" nodes.
+ * Deny, hold and secret targets are always shown. The node and edge caps shrink the per-type caps until they fit.
+ */
+export declare function buildMap(events: Iterable<TrailEventLike>, opts: BuildOptions): MapGraph;
+/**
+ * Streams the whole trail file line by line. Unlike readTrail (tail read, 1 MB), this reads every row.
+ * Bad lines (not JSON, or wrong shape) are skipped and counted. Rows older than `days` are counted, not kept.
+ * A filter, not a stop: the file is not sorted (import rows dated 2025 come first).
+ */
+export declare function readTrailFile(path: string, opts?: {
+    days?: number;
+    now?: Date;
+}): Promise<TrailRead>;
+export {};
+//# sourceMappingURL=build.d.ts.map

package/dist/map/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/map/build.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAIL,KAAK,QAAQ,EAGb,KAAK,SAAS,EAEd,KAAK,cAAc,EACnB,KAAK,QAAQ,EACd,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,YAAY;IAC3B,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,oDAAoD;IACpD,IAAI,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB;AAYD,KAAK,MAAM,GAAG,MAAM,QAAQ,CAAC;AAE7B,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,cAAc,CAa1D;AAED,0DAA0D;AAC1D,wBAAgB,QAAQ,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAMlD;AAED,gDAAgD;AAChD,wBAAgB,WAAW,CAAC,CAAC,EAAE,cAAc,GAAG,SAAS,CAWxD;AAQD,2HAA2H;AAC3H,eAAO,MAAM,UAAU,QAAyC,CAAC;AAEjE,wBAAgB,QAAQ,CAAC,CAAC,EAAE,cAAc,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CAMjF;AAkGD,wHAAwH;AACxH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpF;AAgOD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,YAAY,GAAG,QAAQ,CA8DvF;AAaD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAA;CAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CA4B9G"}

package/dist/map/build.js

@@ -0,0 +1,439 @@
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { stat } from "node:fs/promises";
+import { classifyTarget } from "./target-class.js";
+import { MAP_SCHEMA_VERSION, } from "./types.js";
+const DAY_MS = 86_400_000;
+const DEFAULT_MAX_NODES = 100;
+const EDGE_CAP = 250;
+const MODES = new Set(["observe", "hold", "offline"]);
+const WRITE_VERB = /^(write|edit|update|create|put|patch|delete|rm|remove)$/;
+const READ_VERB = /^(read|grep|glob|search)$/;
+const URL_SCHEME = /^[a-z][a-z0-9+.-]*:\/\//i;
+const FAMILIES = new Set(["network", "secret", "tmp", "system", "project", "home", "command", "none"]);
+const KIND_ORDER = { device: 0, agent: 1, tool: 2, target: 3 };
+/** Shape check for one row. Bad rows are skipped and counted, never thrown. */
+export function isTrailRow(x) {
+    if (!x || typeof x !== "object")
+        return false;
+    const r = x;
+    return (typeof r.ts === "string" &&
+        !Number.isNaN(Date.parse(r.ts)) &&
+        typeof r.sessionId === "string" &&
+        typeof r.toolId === "string" &&
+        typeof r.verdict === "string" &&
+        typeof r.reasonCode === "string" &&
+        typeof r.mode === "string" &&
+        MODES.has(r.mode));
+}
+/** Verdict bucket, schema section 3. First match wins. */
+export function bucketOf(e) {
+    if (e.verdict === "DENY")
+        return "deny";
+    if (e.shadow === true)
+        return "observed";
+    if (e.verdict === "REQUIRE_APPROVE" && e.mode === "hold")
+        return "hold";
+    if (e.verdict === "ALLOW")
+        return "allow";
+    return "observed";
+}
+/** Tool class, schema 4.1. First match wins. */
+export function toolClassOf(e) {
+    const id = e.toolId;
+    const low = id.toLowerCase();
+    const last = id.split(/[./]/).filter(Boolean).pop()?.toLowerCase() ?? "";
+    if (id.startsWith("kya:"))
+        return "kya";
+    if (id.includes("__"))
+        return "mcp";
+    if ((e.summary ?? "").startsWith("shell ") || /shell|exec|bash/.test(low))
+        return "shell";
+    if (e.targetPath && URL_SCHEME.test(e.targetPath))
+        return "network";
+    if (WRITE_VERB.test(last) || /write|edit/.test(low))
+        return "write";
+    if (READ_VERB.test(last) || /read|grep|glob|search/.test(low))
+        return "read";
+    return "other";
+}
+/** Family from a class string (the part before the colon). Unknown heads are `other`. */
+function familyOf(cls) {
+    const head = cls.split(":")[0] ?? "";
+    return (FAMILIES.has(head) ? head : "other");
+}
+/** A stored class is trusted only when it has the shape the writer produces: short, printable, `family:rest` or `none`. */
+export const SAFE_CLASS = /^(?:none|[a-z]+:[\x20-\x7e]{0,120})$/;
+export function targetOf(e) {
+    if (typeof e.targetClass === "string" && e.targetClass.length <= 128 && SAFE_CLASS.test(e.targetClass)) {
+        return { cls: e.targetClass, family: familyOf(e.targetClass) };
+    }
+    const t = classifyTarget({ toolId: e.toolId, targetPath: e.targetPath, summary: e.summary, project: e.project });
+    return { cls: t.class, family: t.family };
+}
+function aggNew() {
+    return { count: 0, v: { allow: 0, deny: 0, hold: 0, observed: 0 }, first: "", firstMs: Infinity, last: "", lastMs: -Infinity };
+}
+function aggAdd(a, bucket, ts, ms) {
+    a.count += 1;
+    a.v[bucket] += 1;
+    if (ms < a.firstMs || (ms === a.firstMs && ts < a.first)) {
+        a.firstMs = ms;
+        a.first = ts;
+    }
+    if (ms > a.lastMs || (ms === a.lastMs && ts > a.last)) {
+        a.lastMs = ms;
+        a.last = ts;
+    }
+}
+function aggMerge(a, b) {
+    a.count += b.count;
+    a.v.allow += b.v.allow;
+    a.v.deny += b.v.deny;
+    a.v.hold += b.v.hold;
+    a.v.observed += b.v.observed;
+    if (b.firstMs < a.firstMs || (b.firstMs === a.firstMs && b.first < a.first)) {
+        a.firstMs = b.firstMs;
+        a.first = b.first;
+    }
+    if (b.lastMs > a.lastMs || (b.lastMs === a.lastMs && b.last > a.last)) {
+        a.lastMs = b.lastMs;
+        a.last = b.last;
+    }
+}
+function edgeKey(from, to, kind, tool) {
+    return `${from}\u0001${to}\u0001${kind}\u0001${tool ?? ""}`;
+}
+function getEnt(m, id, init) {
+    let e = m.ents.get(id);
+    if (!e) {
+        e = init();
+        m.ents.set(id, e);
+    }
+    return e;
+}
+function getEdge(m, from, to, kind, tool) {
+    const key = edgeKey(from, to, kind, tool);
+    let r = m.edges.get(key);
+    if (!r) {
+        r = { from, to, kind, tool, agg: aggNew() };
+        m.edges.set(key, r);
+    }
+    return r;
+}
+/** Salted hash of one session (16 hex). The raw session id can be a host product id, so it never leaves the machine. */
+export function sessionHash(salt, product, sessionId) {
+    return createHash("sha256").update(`${salt}|${product}|${sessionId}`).digest("hex").slice(0, 16);
+}
+/** Fills the aggregate from the rows that pass the shape check and the window. */
+function collect(events, opts, cutoff) {
+    const m = { ents: new Map(), edges: new Map(), legacyRows: 0 };
+    const hashes = new Map();
+    let kept = 0;
+    let invalid = 0;
+    let outOfWindow = 0;
+    for (const e of events) {
+        if (!isTrailRow(e)) {
+            invalid += 1;
+            continue;
+        }
+        const ms = Date.parse(e.ts);
+        if (ms < cutoff) {
+            outOfWindow += 1;
+            continue;
+        }
+        kept += 1;
+        const bucket = bucketOf(e);
+        const product = e.product ?? "unknown";
+        const cacheKey = `${product}\u0000${e.sessionId}`;
+        let sh = hashes.get(cacheKey);
+        if (sh === undefined) {
+            sh = sessionHash(opts.salt, product, e.sessionId);
+            hashes.set(cacheKey, sh);
+        }
+        if (e.product === undefined)
+            m.legacyRows += 1;
+        const devId = typeof e.deviceId === "string" && /^[0-9a-f]{16}$/.test(e.deviceId) ? `device:${e.deviceId}` : "device:local";
+        const dev = getEnt(m, devId, () => ({ id: devId, kind: "device", agg: aggNew(), label: null, labelMs: -Infinity }));
+        aggAdd(dev.agg, bucket, e.ts, ms);
+        const agentId = `agent:${sh}`;
+        const agent = getEnt(m, agentId, () => ({
+            id: agentId,
+            kind: "agent",
+            agg: aggNew(),
+            label: null,
+            labelMs: -Infinity,
+            product,
+            sessionHash: sh,
+            legacy: e.product === undefined,
+        }));
+        aggAdd(agent.agg, bucket, e.ts, ms);
+        if (e.project && (ms > agent.labelMs || (ms === agent.labelMs && e.project > (agent.label ?? "")))) {
+            agent.labelMs = ms;
+            agent.label = e.project;
+        }
+        const toolId = `tool:${e.toolId}`;
+        const tool = getEnt(m, toolId, () => ({ id: toolId, kind: "tool", agg: aggNew(), label: e.toolId, labelMs: 0, toolId: e.toolId, toolClasses: new Map() }));
+        aggAdd(tool.agg, bucket, e.ts, ms);
+        const tc = toolClassOf(e);
+        tool.toolClasses.set(tc, (tool.toolClasses.get(tc) ?? 0) + 1);
+        const tgt = targetOf(e);
+        const targetId = `target:${tgt.cls}`;
+        const target = getEnt(m, targetId, () => ({ id: targetId, kind: "target", agg: aggNew(), label: tgt.cls, labelMs: 0, cls: tgt.cls, family: tgt.family }));
+        aggAdd(target.agg, bucket, e.ts, ms);
+        aggAdd(getEdge(m, devId, agentId, "runs").agg, bucket, e.ts, ms);
+        aggAdd(getEdge(m, agentId, toolId, "uses").agg, bucket, e.ts, ms);
+        aggAdd(getEdge(m, agentId, targetId, "touches", e.toolId).agg, bucket, e.ts, ms);
+    }
+    return { m, kept, invalid, outOfWindow };
+}
+/** Rank: count desc, then last seen desc, then id asc. */
+function rank(a, b) {
+    return b.agg.count - a.agg.count || b.agg.lastMs - a.agg.lastMs || (a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
+}
+function verdictsOut(v) {
+    return { allow: v.allow, deny: v.deny, hold: v.hold, observed: v.observed };
+}
+function nodeFromEnt(e) {
+    const common = { id: e.id, label: e.label, count: e.agg.count, verdicts: verdictsOut(e.agg.v), firstTs: e.agg.first, lastTs: e.agg.last };
+    if (e.kind === "device") {
+        const label = e.id === "device:local" ? "this machine" : e.id.slice("device:".length);
+        return { kind: "device", ...common, label };
+    }
+    if (e.kind === "agent") {
+        return { kind: "agent", ...common, product: e.product, sessionHash: e.sessionHash, legacy: e.legacy };
+    }
+    if (e.kind === "tool") {
+        let best = "other";
+        let bestN = -1;
+        for (const [cls, n] of [...e.toolClasses].sort((a, b) => (a[0] < b[0] ? -1 : 1))) {
+            if (n > bestN) {
+                best = cls;
+                bestN = n;
+            }
+        }
+        return { kind: "tool", ...common, toolId: e.toolId, toolClass: best };
+    }
+    return { kind: "target", ...common, class: e.cls, family: e.family };
+}
+function nodeFromGroup(g) {
+    const common = { count: g.agg.count, verdicts: verdictsOut(g.agg.v), firstTs: g.agg.first, lastTs: g.agg.last, grouped: g.members };
+    if (g.kind === "agent") {
+        return { kind: "agent", id: g.id, label: `other agents (${g.members})`, product: g.product, sessionHash: null, legacy: false, ...common };
+    }
+    if (g.kind === "tool") {
+        const cls = g.toolClass;
+        return { kind: "tool", id: g.id, label: `other ${cls} tools (${g.members})`, toolId: `other:${cls}`, toolClass: cls, ...common };
+    }
+    return { kind: "target", id: g.id, label: `other ${g.family} (${g.members})`, class: `other:${g.family}`, family: g.family, ...common };
+}
+/** One layout for given caps. Shown items keep their id; the rest fold into one group node per product, class or family. */
+function layout(m, caps) {
+    const all = [...m.ents.values()];
+    const agents = all.filter((e) => e.kind === "agent").sort(rank);
+    const tools = all.filter((e) => e.kind === "tool").sort(rank);
+    const targets = all.filter((e) => e.kind === "target").sort(rank);
+    const shown = new Set();
+    agents.forEach((e, i) => {
+        if (i < caps.agents || e.agg.v.deny > 0)
+            shown.add(e.id);
+    });
+    tools.forEach((e, i) => {
+        if (i < caps.tools)
+            shown.add(e.id);
+    });
+    targets.forEach((e, i) => {
+        if (i < caps.targets || e.agg.v.deny > 0 || e.agg.v.hold > 0 || e.family === "secret")
+            shown.add(e.id);
+    });
+    const groups = new Map();
+    const grouped = { agents: 0, tools: 0, targets: 0 };
+    const groupIdOf = new Map();
+    for (const e of all) {
+        if (e.kind === "device" || shown.has(e.id))
+            continue;
+        let gid;
+        let g;
+        if (e.kind === "agent") {
+            gid = `agent:other:${e.product}`;
+            grouped.agents += 1;
+            g = groups.get(gid) ?? { id: gid, kind: "agent", product: e.product, agg: aggNew(), members: 0 };
+        }
+        else if (e.kind === "tool") {
+            const cls = [...e.toolClasses].sort((a, b) => b[1] - a[1] || (a[0] < b[0] ? -1 : 1))[0][0];
+            gid = `tool:other:${cls}`;
+            grouped.tools += 1;
+            g = groups.get(gid) ?? { id: gid, kind: "tool", toolClass: cls, agg: aggNew(), members: 0 };
+        }
+        else {
+            gid = `target:other:${e.family}`;
+            grouped.targets += 1;
+            g = groups.get(gid) ?? { id: gid, kind: "target", family: e.family, agg: aggNew(), members: 0 };
+        }
+        aggMerge(g.agg, e.agg);
+        g.members += 1;
+        groups.set(gid, g);
+        groupIdOf.set(e.id, gid);
+    }
+    const mapId = (id) => groupIdOf.get(id) ?? id;
+    const merged = new Map();
+    for (const r of m.edges.values()) {
+        const from = mapId(r.from);
+        const to = mapId(r.to);
+        let tool;
+        if (r.kind === "touches") {
+            const gid = groupIdOf.get(`tool:${r.tool}`);
+            tool = gid === undefined ? r.tool : `other:${gid.slice("tool:other:".length)}`;
+        }
+        const key = edgeKey(from, to, r.kind, tool);
+        let mr = merged.get(key);
+        if (!mr) {
+            mr = { from, to, kind: r.kind, tool, agg: aggNew() };
+            merged.set(key, mr);
+        }
+        aggMerge(mr.agg, r.agg);
+    }
+    const nodes = [];
+    for (const e of all)
+        if (e.kind === "device" || shown.has(e.id))
+            nodes.push(nodeFromEnt(e));
+    for (const g of groups.values())
+        nodes.push(nodeFromGroup(g));
+    const edges = [...merged.values()].map((r) => ({
+        from: r.from,
+        to: r.to,
+        kind: r.kind,
+        ...(r.tool !== undefined ? { tool: r.tool } : {}),
+        count: r.agg.count,
+        verdicts: verdictsOut(r.agg.v),
+        firstTs: r.agg.first,
+        lastTs: r.agg.last,
+    }));
+    return { nodes, edges, grouped };
+}
+function sortNodes(nodes) {
+    return nodes.sort((a, b) => KIND_ORDER[a.kind] - KIND_ORDER[b.kind] || (a.id < b.id ? -1 : a.id > b.id ? 1 : 0));
+}
+function sortEdges(edges) {
+    const k = (e) => `${e.from}\u0001${e.to}\u0001${e.kind}\u0001${e.tool ?? ""}`;
+    return edges.sort((a, b) => (k(a) < k(b) ? -1 : k(a) > k(b) ? 1 : 0));
+}
+/**
+ * Builds the map graph from trail rows. Pure: same rows and options give the same JSON.
+ * Caps (schema section 7): 25 agents, 20 tools, 40 targets shown; the rest fold into "other" nodes.
+ * Deny, hold and secret targets are always shown. The node and edge caps shrink the per-type caps until they fit.
+ */
+export function buildMap(events, opts) {
+    if (opts.days !== undefined && !opts.now)
+        throw new Error("buildMap: days needs now (the builder reads no clock)");
+    const cutoff = opts.days !== undefined ? opts.now.getTime() - opts.days * DAY_MS : -Infinity;
+    const maxNodes = opts.maxNodes ?? DEFAULT_MAX_NODES;
+    const uncapped = opts.uncapped === true;
+    const { m, kept, invalid, outOfWindow } = collect(events, opts, cutoff);
+    let lay;
+    if (uncapped) {
+        lay = layout(m, { agents: Infinity, tools: Infinity, targets: Infinity });
+    }
+    else {
+        // Step k shrinks targets (40), then tools (20), then agents (25). Binary search for the smallest step that fits.
+        const fits = (l) => l.nodes.length <= maxNodes && l.edges.length <= EDGE_CAP;
+        const at = (k) => ({
+            targets: Math.max(0, 40 - k),
+            tools: Math.max(0, 20 - Math.max(0, k - 40)),
+            agents: Math.max(0, 25 - Math.max(0, k - 60)),
+        });
+        lay = layout(m, at(85));
+        if (fits(lay)) {
+            let lo = 0;
+            let hi = 85;
+            while (lo < hi) {
+                const mid = (lo + hi) >> 1;
+                const l = layout(m, at(mid));
+                if (fits(l)) {
+                    hi = mid;
+                    lay = l;
+                }
+                else
+                    lo = mid + 1;
+            }
+        }
+    }
+    let edges = lay.edges;
+    let edgesDropped = 0;
+    if (!uncapped && edges.length > EDGE_CAP) {
+        // Sort by key first, so ties in the rank below never depend on input order.
+        const ranked = sortEdges([...edges]).sort((a, b) => {
+            const pa = a.verdicts.deny + a.verdicts.hold > 0 ? 0 : 1;
+            const pb = b.verdicts.deny + b.verdicts.hold > 0 ? 0 : 1;
+            return pa - pb || b.count - a.count || (a.lastTs < b.lastTs ? 1 : a.lastTs > b.lastTs ? -1 : 0);
+        });
+        edgesDropped = ranked.length - EDGE_CAP;
+        edges = ranked.slice(0, EDGE_CAP);
+    }
+    const nodes = sortNodes(lay.nodes);
+    const groupedTotal = lay.grouped.agents + lay.grouped.tools + lay.grouped.targets;
+    return {
+        schemaVersion: MAP_SCHEMA_VERSION,
+        view: {
+            source: "trail",
+            rowsRead: opts.read ? opts.read.rowsRead : kept + invalid + outOfWindow,
+            rowsSkipped: (opts.read?.rowsSkipped ?? 0) + invalid,
+            rowsOutOfWindow: (opts.read?.rowsOutOfWindow ?? 0) + outOfWindow,
+            legacyRows: m.legacyRows,
+            truncated: groupedTotal > 0 || edgesDropped > 0,
+            capExceeded: !uncapped && nodes.length > maxNodes,
+            grouped: lay.grouped,
+            edgesDropped,
+        },
+        nodes,
+        edges: sortEdges(edges),
+    };
+}
+/** Lines split on "\n" only. readline also splits on U+2028 and U+2029, so a tool name holding one would hide its own rows. */
+async function* jsonlLines(path) {
+    let rest = "";
+    for await (const chunk of createReadStream(path, { encoding: "utf8" })) {
+        const parts = (rest + chunk).split("\n");
+        rest = parts.pop() ?? "";
+        yield* parts;
+    }
+    if (rest !== "")
+        yield rest;
+}
+/**
+ * Streams the whole trail file line by line. Unlike readTrail (tail read, 1 MB), this reads every row.
+ * Bad lines (not JSON, or wrong shape) are skipped and counted. Rows older than `days` are counted, not kept.
+ * A filter, not a stop: the file is not sorted (import rows dated 2025 come first).
+ */
+export async function readTrailFile(path, opts = {}) {
+    await stat(path);
+    const cutoff = opts.days !== undefined ? (opts.now ?? new Date()).getTime() - opts.days * DAY_MS : -Infinity;
+    const events = [];
+    let rowsRead = 0;
+    let rowsSkipped = 0;
+    let rowsOutOfWindow = 0;
+    for await (const line of jsonlLines(path)) {
+        if (line.trim() === "")
+            continue;
+        rowsRead += 1;
+        let row;
+        try {
+            row = JSON.parse(line);
+        }
+        catch {
+            rowsSkipped += 1;
+            continue;
+        }
+        if (!isTrailRow(row)) {
+            rowsSkipped += 1;
+            continue;
+        }
+        if (Date.parse(row.ts) < cutoff) {
+            rowsOutOfWindow += 1;
+            continue;
+        }
+        events.push(row);
+    }
+    return { events, rowsRead, rowsSkipped, rowsOutOfWindow };
+}
+//# sourceMappingURL=build.js.map

package/dist/map/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/map/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,cAAc,EAAqB,MAAM,mBAAmB,CAAC;AACtE,OAAO,EACL,kBAAkB,GAUnB,MAAM,YAAY,CAAC;AAwBpB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AACtD,MAAM,UAAU,GAAG,yDAAyD,CAAC;AAC7E,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAC9C,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/G,MAAM,UAAU,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAW,CAAC;AAIxE,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAClB,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,QAAQ,CAAC,CAAiB;IACxC,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IACzC,IAAI,CAAC,CAAC,OAAO,KAAK,iBAAiB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACxE,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAC1C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,WAAW,CAAC,CAAiB;IAC3C,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC;IACpB,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACzE,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAC1F,IAAI,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACpE,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yFAAyF;AACzF,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAiB,CAAC;AAC/D,CAAC;AAED,2HAA2H;AAC3H,MAAM,CAAC,MAAM,UAAU,GAAG,sCAAsC,CAAC;AAEjE,MAAM,UAAU,QAAQ,CAAC,CAAiB;IACxC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;QACvG,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACjH,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5C,CAAC;AAWD,SAAS,MAAM;IACb,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AACjI,CAAC;AAED,SAAS,MAAM,CAAC,CAAM,EAAE,MAAc,EAAE,EAAU,EAAE,EAAU;IAC5D,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACb,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjB,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC;QACf,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;IACf,CAAC;IACD,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;QACd,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAM,EAAE,CAAM;IAC9B,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC;IACnB,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACvB,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrB,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrB,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7B,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QACtB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACpB,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IAClB,CAAC;AACH,CAAC;AAiCD,SAAS,OAAO,CAAC,IAAY,EAAE,EAAU,EAAE,IAAY,EAAE,IAAwB;IAC/E,OAAO,GAAG,IAAI,SAAS,EAAE,SAAS,IAAI,SAAS,IAAI,IAAI,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,MAAM,CAAC,CAAQ,EAAE,EAAU,EAAE,IAAe;IACnD,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG,IAAI,EAAE,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,CAAQ,EAAE,IAAY,EAAE,EAAU,EAAE,IAAqB,EAAE,IAAa;IACvF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC5C,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wHAAwH;AACxH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe,EAAE,SAAiB;IAC1E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,kFAAkF;AAClF,SAAS,OAAO,CAAC,MAAgC,EAAE,IAAkB,EAAE,MAAc;IACnF,MAAM,CAAC,GAAU,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;YAChB,WAAW,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,CAAC;QACV,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC;QACvC,MAAM,QAAQ,GAAG,GAAG,OAAO,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC;QAClD,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;QAE/C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;QAC5H,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACpH,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAElC,MAAM,OAAO,GAAG,SAAS,EAAE,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACtC,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,MAAM,EAAE;YACb,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,CAAC,QAAQ;YAClB,OAAO;YACP,WAAW,EAAE,EAAE;YACf,MAAM,EAAE,CAAC,CAAC,OAAO,KAAK,SAAS;SAChC,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;YACnB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC;QAC1B,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3J,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,WAAY,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAY,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEhE,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAG,UAAU,GAAG,CAAC,GAAG,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1J,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAErC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED,0DAA0D;AAC1D,SAAS,IAAI,CAAC,CAAM,EAAE,CAAM;IAC1B,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9G,CAAC;AAwBD,SAAS,WAAW,CAAC,CAAW;IAC9B,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,CAAM;IACzB,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1I,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAY,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,EAAsB,CAAC;IAC/H,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,IAAI,GAAc,OAAO,CAAC;QAC9B,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;gBACd,IAAI,GAAG,GAAG,CAAC;gBACX,KAAK,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,EAAE,SAAS,EAAE,IAAI,EAAqB,CAAC;IAC5F,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,GAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,EAAuB,CAAC;AAC9F,CAAC;AAED,SAAS,aAAa,CAAC,CAAQ;IAC7B,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACpI,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC,OAAO,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;IAC7I,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,CAAC,CAAC,SAAU,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,WAAW,CAAC,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,SAAS,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IACnI,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,EAAE,GAAG,MAAM,EAAE,CAAC;AAC3I,CAAC;AAED,4HAA4H;AAC5H,SAAS,MAAM,CAAC,CAAQ,EAAE,IAAU;IAClC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtB,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IACxC,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,SAAS;QACrD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAQ,CAAC;QACb,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACvB,GAAG,GAAG,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;YACpB,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACnG,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,WAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;YAC7F,GAAG,GAAG,cAAc,GAAG,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;YACnB,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC9F,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,gBAAgB,CAAC,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YACrB,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAClG,CAAC;QACD,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5C,IAAI,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACjF,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;YACrD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtB,CAAC;QACD,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAc,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK;QAClB,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK;QACpB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;KACnB,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,SAAS,CAAC,KAAgB;IACjC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnH,CAAC;AAED,SAAS,SAAS,CAAC,KAAgB;IACjC,MAAM,CAAC,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IACvF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAgC,EAAE,IAAkB;IAC3E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACnH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IACxC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAExE,IAAI,GAAW,CAAC;IAChB,IAAI,QAAQ,EAAE,CAAC;QACb,GAAG,GAAG,MAAM,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,iHAAiH;QACjH,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC;QACrF,MAAM,EAAE,GAAG,CAAC,CAAS,EAAQ,EAAE,CAAC,CAAC;YAC/B,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC5B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5C,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;SAC9C,CAAC,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACd,IAAI,EAAE,GAAG,CAAC,CAAC;YACX,IAAI,EAAE,GAAG,EAAE,CAAC;YACZ,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC7B,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBACZ,EAAE,GAAG,GAAG,CAAC;oBACT,GAAG,GAAG,CAAC,CAAC;gBACV,CAAC;;oBAAM,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACtB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QACzC,4EAA4E;QAC5E,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACjD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,CAAC,CAAC,CAAC;QACH,YAAY,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;QACxC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;IAClF,OAAO;QACL,aAAa,EAAE,kBAAkB;QACjC,IAAI,EAAE;YACJ,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,OAAO,GAAG,WAAW;YACvE,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,CAAC,GAAG,OAAO;YACpD,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,IAAI,CAAC,CAAC,GAAG,WAAW;YAChE,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,SAAS,EAAE,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC;YAC/C,WAAW,EAAE,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;YACjD,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,YAAY;SACb;QACD,KAAK;QACL,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,+HAA+H;AAC/H,KAAK,SAAS,CAAC,CAAC,UAAU,CAAC,IAAY;IACrC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,CAAC,IAAI,GAAI,KAAgB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACzB,KAAK,CAAC,CAAC,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,OAAsC,EAAE;IACxF,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7G,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,QAAQ,IAAI,CAAC,CAAC;QACd,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,WAAW,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC;YAChC,eAAe,IAAI,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;AAC5D,CAAC"}