@songsid/agend 2.1.12 → 2.2.0-alpha.2

package/dist/service-activation.d.ts

@@ -0,0 +1,152 @@
+/**
+ * Activating a verified install through its service manager (#1449 review r3).
+ *
+ * The update has proven an exact installed package: its bin target, and the Node that bin's shebang resolves to in the
+ * install environment (where the native probe ran). Before anything is stopped, the service manager's EFFECTIVE
+ * definition — what systemd has loaded (drop-ins and a failed reload included), what launchd has loaded — must start
+ * that exact bin, with `fleet start`, on that exact interpreter, with no environment that changes how Node runs. The
+ * disk file alone proves nothing: a drop-in can override `ExecStart`, a reload can fail, launchd keeps its cached job.
+ *
+ * Every manager command goes through an injected runner, so the sequences are testable without systemd or launchd.
+ */
+import type { CommandResult } from "./update-install.js";
+/** What a manager would execute: the program, its full argv (argv[0] included), and the environment it sets. */
+export interface ActivationTuple {
+    program: string;
+    argv: string[];
+    env: Record<string, string>;
+}
+/**
+ * The proven install; every path a realpath. `entry` is its canonical inner CLI, `<dir>/dist/cli.js` — what a service
+ * starts (#1450 C4). Before the launcher it was also the npm bin; since #1450 the bin is the sh launcher.
+ */
+export interface VerifiedTarget {
+    bin: string;
+    entry: string;
+    node: string;
+    dir: string;
+}
+export interface TupleDeps {
+    realpath(path: string): string | null;
+    /** First line of a file, or null. */
+    readFirstLine(path: string): string | null;
+    /** Is `path` an executable regular file? */
+    isExecutable(path: string): boolean;
+}
+/**
+ * Environment that changes which Node runs or what it loads: never accepted in a service definition AgEnD activates,
+ * nor in the service manager's own environment (design C6: absent, as `agend install` renders none of them).
+ * AGEND_NODE: the launcher's override — with it set, the launcher a definition starts would pick another Node.
+ */
+export declare const INTERPRETER_ENV: string[];
+/**
+ * launchd's own environment (`launchctl getenv`), which every job inherits: each interpreter variable must be read to
+ * completion and be unset. A failed or timed-out read is uncertainty, never "unset".
+ */
+export declare function launchdManagerEnvViolation(run: (command: string, args: string[]) => CommandResult): string | null;
+/**
+ * A PATH whose lookup depends on the working directory: an empty entry (the cwd, for execvp and `command -v`) or a
+ * relative one. Which `node` it finds cannot be proven from the definition alone: refused (#1473 review).
+ */
+export declare function cwdDependentPath(path: string): boolean;
+/** systemd's PATH when a unit sets none (systemd.exec, "Environment variables in spawned processes"). */
+export declare const SYSTEMD_DEFAULT_PATH = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
+/** launchd's PATH when a job sets none. */
+export declare const LAUNCHD_DEFAULT_PATH = "/usr/bin:/bin:/usr/sbin:/sbin";
+export interface LoadedUnit {
+    /** The one ExecStart, argv exactly as systemd holds it (lossless: D-Bus `as`, not `systemctl show`'s joined text). */
+    tuple: ActivationTuple;
+    needDaemonReload: boolean;
+}
+/**
+ * What systemd will execute for `unit`, read over D-Bus with `busctl --json=short` (#1449 review r4: `systemctl show`
+ * joins argv with spaces, so `"fleet start"` and `fleet start` print alike). The effective environment is the
+ * manager's environment, then the unit's `Environment=`, then `UnsetEnvironment=`. A unit that also reads
+ * `EnvironmentFile=` or uses `PassEnvironment=` cannot be proven from here: refused, never guessed.
+ */
+export declare function readLoadedUnit(run: (command: string, args: string[]) => CommandResult, user: boolean, unit: string): {
+    ok: true;
+    unit: LoadedUnit;
+} | {
+    ok: false;
+    reason: string;
+};
+/** A launchd plist on disk → the tuple it would run (ProgramArguments; EnvironmentVariables). */
+export declare function parsePlist(xml: string): ActivationTuple | null;
+/** `launchctl print gui/<uid>/<label>` → the loaded tuple, its pid and state. */
+export declare function parseLaunchctlPrint(text: string): {
+    tuple: ActivationTuple | null;
+    pid: number | null;
+    state: string | null;
+};
+/**
+ * Does this effective tuple start exactly the verified install? Two shapes are accepted:
+ * - the entry script itself (`<entry> fleet start`, what `agend install` writes today): its realpath is the verified
+ *   entry, and the interpreter its shebang resolves to on the definition's PATH is the verified Node;
+ * - the interpreter explicitly (`<node> <entry> fleet start`, the private runtime's format): both realpaths verified.
+ * Anything else — another entry inside the same package, another checkout, extra arguments, NODE_OPTIONS — is not.
+ */
+export declare function tupleStartsVerified(tuple: ActivationTuple, verified: VerifiedTarget, _defaultPath: string, deps: TupleDeps): {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+export type ServiceManager = {
+    kind: "systemd";
+    unit: string;
+    user: boolean; /** The unit file: its preimage is put back on a failure (C6). */
+    unitPath?: string;
+} | {
+    kind: "launchd";
+    label: string;
+    plistPath: string;
+    domain: string;
+} | {
+    kind: "detached";
+};
+export interface ActivationDeps extends TupleDeps {
+    run(command: string, args: string[]): CommandResult;
+    readFile(path: string): string | null;
+    writeFile(path: string, content: string): void;
+    /** `agend install --no-activate` through the verified binary. */
+    refresh(): CommandResult;
+    /** `agend restart` through the verified binary (systemd, detached). Returns its exit status. */
+    restart(): void;
+    log(message: string): void;
+    /**
+     * launchd planned activation (#1450 C6 path 2): the proven new plist is ALREADY on disk, so the job to roll back to
+     * is the recorded preimage plist, not the file. With this set, `refresh` is not called.
+     */
+    launchdPreimage?: string;
+    /**
+     * #1450 C6: put the previous PACKAGE back (its preimage, taken before npm). Called on every failure before the fleet
+     * runs the new install — and, on launchd, BEFORE the previous job is bootstrapped again, since that job's plist names
+     * files inside the package. Returns one line for the outcome.
+     */
+    restorePackage?(): string;
+    /** Blocking pause between launchd polls (default: Atomics.wait); tests pass a no-op. */
+    sleep?(ms: number): void;
+    /** A monotonic clock in ms for poll deadlines (default: performance.now). */
+    monotonicNow?(): number;
+}
+/** How long launchd may take to finish unloading a booted-out job, or to spawn a bootstrapped one. */
+export declare const LAUNCHD_SETTLE_MS = 10000;
+/** launchd states of a job that is being spawned (not yet `running`, not failed). */
+export declare const LAUNCHD_SPAWNING: string[];
+export type ActivationOutcome = {
+    ok: true;
+    via: "restart" | "launchd-activation";
+} | {
+    ok: false;
+    message: string;
+    stopped: boolean;
+};
+/**
+ * Refresh, prove, activate. Nothing is stopped before the effective definition is proven, except where the manager's
+ * reload IS the activation (launchd: bootout + bootstrap of a RunAtLoad/KeepAlive job), which is done once, then
+ * proven, and rolled back to the preimage job if the proof fails.
+ */
+export declare function activateService(manager: ServiceManager, verified: VerifiedTarget, deps: ActivationDeps): ActivationOutcome;
+/** Two launchd jobs are the same when their program and argv are identical and every variable the plist sets matches. */
+export declare function sameJob(loaded: ActivationTuple, plist: ActivationTuple): boolean;

package/dist/service-activation.js

@@ -0,0 +1,407 @@
+import { systemdWords } from "./service-installer.js";
+/**
+ * Environment that changes which Node runs or what it loads: never accepted in a service definition AgEnD activates,
+ * nor in the service manager's own environment (design C6: absent, as `agend install` renders none of them).
+ * AGEND_NODE: the launcher's override — with it set, the launcher a definition starts would pick another Node.
+ */
+export const INTERPRETER_ENV = ["NODE_OPTIONS", "NODE_PATH", "NODE_EXTRA_CA_CERTS", "AGEND_NODE"];
+/**
+ * launchd's own environment (`launchctl getenv`), which every job inherits: each interpreter variable must be read to
+ * completion and be unset. A failed or timed-out read is uncertainty, never "unset".
+ */
+export function launchdManagerEnvViolation(run) {
+    for (const key of INTERPRETER_ENV) {
+        const value = run("launchctl", ["getenv", key]);
+        if (value.status === null || value.signal !== null || value.status !== 0) {
+            return `launchd's ${key} could not be read (launchctl getenv ${value.signal ? `killed by ${value.signal}` : `exited ${value.status}`})`;
+        }
+        // Unset prints nothing; a set value prints itself and a newline — even " " (macOS 15). Never trimmed: a blank
+        // value is still set, and the launcher refuses it.
+        if (value.stdout !== "")
+            return `launchd's environment sets ${key} for every job, which changes how Node runs (launchctl unsetenv ${key})`;
+    }
+    return null;
+}
+/**
+ * A PATH whose lookup depends on the working directory: an empty entry (the cwd, for execvp and `command -v`) or a
+ * relative one. Which `node` it finds cannot be proven from the definition alone: refused (#1473 review).
+ */
+export function cwdDependentPath(path) {
+    return path.split(":").some(entry => entry === "" || !entry.startsWith("/"));
+}
+/** systemd's PATH when a unit sets none (systemd.exec, "Environment variables in spawned processes"). */
+export const SYSTEMD_DEFAULT_PATH = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
+/** launchd's PATH when a job sets none. */
+export const LAUNCHD_DEFAULT_PATH = "/usr/bin:/bin:/usr/sbin:/sbin";
+/** A busctl `--json=short` reply's `data`, or null. */
+function busData(result) {
+    if (result.status !== 0)
+        return null;
+    try {
+        return JSON.parse(result.stdout).data ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/** `KEY=VALUE` strings → a map (later entries win, as in systemd). */
+function assignments(list) {
+    if (!Array.isArray(list) || !list.every(item => typeof item === "string"))
+        return null;
+    const env = {};
+    for (const item of list) {
+        const eq = item.indexOf("=");
+        if (eq > 0)
+            env[item.slice(0, eq)] = item.slice(eq + 1);
+    }
+    return env;
+}
+/**
+ * What systemd will execute for `unit`, read over D-Bus with `busctl --json=short` (#1449 review r4: `systemctl show`
+ * joins argv with spaces, so `"fleet start"` and `fleet start` print alike). The effective environment is the
+ * manager's environment, then the unit's `Environment=`, then `UnsetEnvironment=`. A unit that also reads
+ * `EnvironmentFile=` or uses `PassEnvironment=` cannot be proven from here: refused, never guessed.
+ */
+export function readLoadedUnit(run, user, unit) {
+    const scope = user ? ["--user"] : [];
+    const name = unit.endsWith(".service") ? unit : `${unit}.service`;
+    const bus = (args) => busData(run("busctl", [...scope, "--json=short", ...args]));
+    const path = bus(["call", "org.freedesktop.systemd1", "/org/freedesktop/systemd1", "org.freedesktop.systemd1.Manager", "LoadUnit", "s", name]);
+    const objectPath = Array.isArray(path) && typeof path[0] === "string" ? path[0] : null;
+    if (!objectPath)
+        return { ok: false, reason: `systemd does not know ${name}` };
+    const prop = (iface, property) => bus(["get-property", "org.freedesktop.systemd1", objectPath, `org.freedesktop.systemd1.${iface}`, property]);
+    const exec = prop("Service", "ExecStart");
+    if (!Array.isArray(exec) || exec.length !== 1 || !Array.isArray(exec[0]) || typeof exec[0][0] !== "string" || !Array.isArray(exec[0][1])) {
+        return { ok: false, reason: `its ExecStart is not exactly one command (${Array.isArray(exec) ? exec.length : "unreadable"})` };
+    }
+    const argv = exec[0][1];
+    if (!argv.every(item => typeof item === "string"))
+        return { ok: false, reason: "its ExecStart argv is unreadable" };
+    const files = prop("Service", "EnvironmentFiles");
+    if (!Array.isArray(files))
+        return { ok: false, reason: "its EnvironmentFiles cannot be read" };
+    if (files.length > 0)
+        return { ok: false, reason: "it reads EnvironmentFile=, whose effect cannot be proven here" };
+    const pass = prop("Service", "PassEnvironment");
+    if (!Array.isArray(pass))
+        return { ok: false, reason: "its PassEnvironment cannot be read" };
+    if (pass.length > 0)
+        return { ok: false, reason: "it uses PassEnvironment=, whose effect cannot be proven here" };
+    const manager = assignments(bus(["get-property", "org.freedesktop.systemd1", "/org/freedesktop/systemd1", "org.freedesktop.systemd1.Manager", "Environment"]));
+    const own = assignments(prop("Service", "Environment"));
+    const unset = prop("Service", "UnsetEnvironment");
+    if (!manager || !own || !Array.isArray(unset) || !unset.every(item => typeof item === "string")) {
+        return { ok: false, reason: "its environment cannot be read" };
+    }
+    const env = { ...manager, ...own };
+    for (const item of unset) {
+        const eq = item.indexOf("=");
+        if (eq < 0)
+            delete env[item];
+        else if (env[item.slice(0, eq)] === item.slice(eq + 1))
+            delete env[item.slice(0, eq)];
+    }
+    const need = prop("Unit", "NeedDaemonReload");
+    if (typeof need !== "boolean")
+        return { ok: false, reason: "NeedDaemonReload cannot be read" };
+    return { ok: true, unit: { tuple: { program: exec[0][0], argv: argv, env }, needDaemonReload: need } };
+}
+/** XML character data → text: the five named entities and numeric references (EJS writes `"` as `&#34;`), in one pass. */
+const xmlUnescape = (text) => text.replace(/&(?:#(\d+)|#x([0-9a-fA-F]+)|(lt|gt|quot|apos|amp));/g, (whole, dec, hex, name) => {
+    if (dec !== undefined || hex !== undefined) {
+        const code = dec !== undefined ? Number.parseInt(dec, 10) : Number.parseInt(hex, 16);
+        return code <= 0x10ffff ? String.fromCodePoint(code) : whole;
+    }
+    return { lt: "<", gt: ">", quot: "\"", apos: "'", amp: "&" }[name];
+});
+/** A launchd plist on disk → the tuple it would run (ProgramArguments; EnvironmentVariables). */
+export function parsePlist(xml) {
+    const args = /<key>ProgramArguments<\/key>\s*<array>([\s\S]*?)<\/array>/.exec(xml);
+    if (!args)
+        return null;
+    const argv = [...args[1].matchAll(/<string>([\s\S]*?)<\/string>/g)].map(m => xmlUnescape(m[1]));
+    if (argv.length === 0)
+        return null;
+    const env = {};
+    const dict = /<key>EnvironmentVariables<\/key>\s*<dict>([\s\S]*?)<\/dict>/.exec(xml);
+    if (dict)
+        for (const m of dict[1].matchAll(/<key>([\s\S]*?)<\/key>\s*<string>([\s\S]*?)<\/string>/g))
+            env[xmlUnescape(m[1])] = xmlUnescape(m[2]);
+    const program = /<key>Program<\/key>\s*<string>([\s\S]*?)<\/string>/.exec(xml);
+    return { program: program ? xmlUnescape(program[1]) : argv[0], argv, env };
+}
+/** `launchctl print gui/<uid>/<label>` → the loaded tuple, its pid and state. */
+export function parseLaunchctlPrint(text) {
+    const lines = text.split("\n").map(l => l.trim());
+    const value = (key) => lines.find(l => l.startsWith(`${key} = `))?.slice(key.length + 3).trim() ?? null;
+    const block = (key) => {
+        const start = lines.findIndex(l => l === `${key} = {`);
+        if (start < 0)
+            return null;
+        const end = lines.findIndex((l, i) => i > start && l === "}");
+        return end < 0 ? null : lines.slice(start + 1, end);
+    };
+    const argv = block("arguments");
+    const env = {};
+    for (const l of block("environment") ?? []) {
+        const at = l.indexOf(" => ");
+        if (at > 0)
+            env[l.slice(0, at)] = l.slice(at + 4);
+    }
+    const program = value("program");
+    const pid = Number(value("pid"));
+    return {
+        tuple: program && argv && argv.length > 0 ? { program, argv, env } : null,
+        pid: Number.isInteger(pid) && pid > 0 ? pid : null,
+        state: value("state"),
+    };
+}
+/** The arguments `fleet start`, as two separate elements (never one "fleet start" argument). */
+const FLEET_START = ["fleet", "start"];
+const sameArgs = (args, want) => args.length === want.length && args.every((arg, i) => arg === want[i]);
+/** The interpreter a script runs on: its shebang, `env node` resolved on the definition's PATH. */
+function scriptInterpreter(script, path, deps) {
+    const line = deps.readFirstLine(script);
+    if (!line?.startsWith("#!"))
+        return null;
+    const parts = line.slice(2).trim().split(/\s+/);
+    let program = parts[0] ?? "";
+    if (/(^|\/)env$/.test(program)) {
+        const name = parts.slice(1).find(p => !p.startsWith("-"));
+        if (!name)
+            return null;
+        program = path.split(":").filter(Boolean).map(dir => `${dir}/${name}`).find(candidate => deps.isExecutable(candidate)) ?? "";
+    }
+    return program ? deps.realpath(program) : null;
+}
+/**
+ * Does this effective tuple start exactly the verified install? Two shapes are accepted:
+ * - the entry script itself (`<entry> fleet start`, what `agend install` writes today): its realpath is the verified
+ *   entry, and the interpreter its shebang resolves to on the definition's PATH is the verified Node;
+ * - the interpreter explicitly (`<node> <entry> fleet start`, the private runtime's format): both realpaths verified.
+ * Anything else — another entry inside the same package, another checkout, extra arguments, NODE_OPTIONS — is not.
+ */
+export function tupleStartsVerified(tuple, verified, _defaultPath, deps) {
+    for (const key of INTERPRETER_ENV) {
+        if (tuple.env[key] !== undefined)
+            return { ok: false, reason: `it sets ${key}` };
+    }
+    const program = deps.realpath(tuple.program);
+    const args = tuple.argv.slice(1);
+    // The package's sh launcher (#1450: a system Node is resolved at each start, never named): the Node its PATH finds
+    // must be the verified one — for a bundled runtime it never is (the runtime directory is on no PATH), so such a
+    // target is always named instead.
+    if (program === verified.bin && verified.bin !== verified.entry && /\/launcher\/agend$/.test(verified.bin)) {
+        if (!sameArgs(args, FLEET_START))
+            return { ok: false, reason: `its arguments are ${JSON.stringify(args)}, not ["fleet","start"]` };
+        if (tuple.env.PATH === undefined)
+            return { ok: false, reason: "its environment has no PATH, so the Node its launcher would find cannot be proven" };
+        if (cwdDependentPath(tuple.env.PATH))
+            return { ok: false, reason: "its PATH has an empty or relative entry, so the Node its launcher would find depends on the working directory" };
+        const found = tuple.env.PATH.split(":").filter(Boolean).map(dir => `${dir}/node`).find(candidate => deps.isExecutable(candidate));
+        const real = found ? deps.realpath(found) : null;
+        if (real !== verified.node)
+            return { ok: false, reason: `its launcher would find ${real ?? "no node"}, not the verified ${verified.node}` };
+        return { ok: true };
+    }
+    if (program === verified.entry) {
+        if (!sameArgs(args, FLEET_START))
+            return { ok: false, reason: `its arguments are ${JSON.stringify(args)}, not ["fleet","start"]` };
+        // PATH must be in the definition's effective environment: with none (e.g. UnsetEnvironment=PATH), `env node`
+        // searches execvp's built-in path (glibc: /bin:/usr/bin), not any manager default — unprovable here (#1449 r5).
+        if (tuple.env.PATH === undefined)
+            return { ok: false, reason: "its environment has no PATH, so the Node its `env node` would find cannot be proven" };
+        if (cwdDependentPath(tuple.env.PATH))
+            return { ok: false, reason: "its PATH has an empty or relative entry, so the Node its `env node` would find depends on the working directory" };
+        const interpreter = scriptInterpreter(verified.entry, tuple.env.PATH, deps);
+        if (interpreter !== verified.node)
+            return { ok: false, reason: `its Node is ${interpreter ?? "unresolvable"}, not the verified ${verified.node}` };
+        return { ok: true };
+    }
+    if (program === verified.node) {
+        const entry = args[0] ? deps.realpath(args[0]) : null;
+        if (entry !== verified.entry)
+            return { ok: false, reason: `it starts ${args[0] ?? "nothing"}, not ${verified.entry}` };
+        if (!sameArgs(args.slice(1), FLEET_START))
+            return { ok: false, reason: `its arguments are ${JSON.stringify(args.slice(1))}, not ["fleet","start"]` };
+        return { ok: true };
+    }
+    return { ok: false, reason: `it starts ${tuple.program} (${program ?? "missing"}), not ${verified.entry}` };
+}
+/** How long launchd may take to finish unloading a booted-out job, or to spawn a bootstrapped one. */
+export const LAUNCHD_SETTLE_MS = 10_000;
+/** launchd states of a job that is being spawned (not yet `running`, not failed). */
+export const LAUNCHD_SPAWNING = ["spawn scheduled", "xpcproxy"];
+/**
+ * Refresh, prove, activate. Nothing is stopped before the effective definition is proven, except where the manager's
+ * reload IS the activation (launchd: bootout + bootstrap of a RunAtLoad/KeepAlive job), which is done once, then
+ * proven, and rolled back to the preimage job if the proof fails.
+ */
+export function activateService(manager, verified, deps) {
+    if (manager.kind === "detached") {
+        const refreshed = deps.refresh();
+        if (refreshed.status !== 0)
+            deps.log("  ⚠ Service file refresh reported an error (no service installed; continuing)");
+        deps.restart();
+        return { ok: true, via: "restart" };
+    }
+    if (manager.kind === "systemd") {
+        const scope = manager.user ? ["--user"] : [];
+        const preimage = manager.unitPath ? deps.readFile(manager.unitPath) : null;
+        // C6 step 5, a failure before the restart: the unit preimage goes back and is reloaded, and the LOADED ExecStart
+        // must be the preimage's again; then the package preimage. The old fleet was never stopped.
+        const fail = (why) => {
+            const restored = [];
+            if (preimage !== null && manager.unitPath) {
+                deps.writeFile(manager.unitPath, preimage);
+                const reloaded = deps.run("systemctl", [...scope, "daemon-reload"]);
+                const back = reloaded.status === 0 ? readLoadedUnit(deps.run, manager.user, manager.unit) : null;
+                const want = systemdWords(/^ExecStart=(.*)$/m.exec(preimage)?.[1] ?? "");
+                restored.push(back?.ok && sameArgs(back.unit.tuple.argv, want)
+                    ? `the previous ${manager.unit} is back and loaded`
+                    : `the previous ${manager.unit} is back on disk but systemd does not show it loaded (run systemctl${manager.user ? " --user" : ""} daemon-reload)`);
+            }
+            if (deps.restorePackage)
+                restored.push(deps.restorePackage());
+            return { ok: false, stopped: false, message: `  ✗ ${why}. Not restarting the fleet.${restored.length ? ` ${restored.join("; ")}.` : ""}` };
+        };
+        const refreshed = deps.refresh();
+        if (refreshed.status !== 0)
+            deps.log(`  ⚠ Service file refresh failed: ${(refreshed.stderr || refreshed.stdout).trim()}`);
+        const reload = deps.run("systemctl", [...scope, "daemon-reload"]);
+        if (reload.status !== 0)
+            return fail(`systemctl${manager.user ? " --user" : ""} daemon-reload failed, so systemd still runs the old definition`);
+        const read = readLoadedUnit(deps.run, manager.user, manager.unit);
+        if (!read.ok)
+            return fail(`Cannot prove what systemd will run for ${manager.unit}: ${read.reason}`);
+        const loaded = read.unit;
+        if (loaded.needDaemonReload)
+            return fail(`systemd still needs a daemon-reload for ${manager.unit} (the loaded definition is not the file)`);
+        const match = tupleStartsVerified(loaded.tuple, verified, SYSTEMD_DEFAULT_PATH, deps);
+        if (!match.ok)
+            return fail(`systemd's loaded ${manager.unit} does not start the verified install: ${match.reason}`);
+        deps.restart();
+        return { ok: true, via: "restart" };
+    }
+    // launchd: the reload is the activation (#1449 review r4).
+    // Before anything is stopped: the job launchd has LOADED must be the one its plist on disk describes, so that this
+    // plist is a true preimage to roll back to; launchd's own environment must not inject NODE_OPTIONS/NODE_PATH; and
+    // the refreshed plist must start the verified install. Then one bootout + bootstrap, proven by the loaded tuple and
+    // a running pid. Recovery bootstraps the preimage and must prove ITS tuple is what runs — not just any pid.
+    const target = `${manager.domain}/${manager.label}`;
+    // Every read must COMPLETE (#1449 r5): a timed-out or failed query is uncertainty, never "unset" or "not loaded".
+    const completed = (r) => r.status !== null && r.signal === null;
+    // Every refusal below comes after npm replaced the package: each one puts the previous package back (C6).
+    const packageBack = () => (deps.restorePackage ? ` ${deps.restorePackage()}.` : "");
+    const managerEnv = launchdManagerEnvViolation(deps.run);
+    if (managerEnv)
+        return { ok: false, stopped: false, message: `  ✗ ${managerEnv}. Not activating; the service was not changed.${packageBack()}` };
+    const preimage = deps.launchdPreimage ?? deps.readFile(manager.plistPath);
+    const preimageTuple = preimage !== null ? parsePlist(preimage) : null;
+    // The loaded job, or a CONFIRMED absence: launchctl print exits 113 ("Could not find service") for a job that is not
+    // loaded. Anything else that is not a complete, readable job is uncertainty: refuse with nothing touched.
+    const before = deps.run("launchctl", ["print", target]);
+    let loadedBefore = null;
+    if (completed(before) && before.status === 0) {
+        loadedBefore = parseLaunchctlPrint(before.stdout);
+        if (!loadedBefore.tuple) {
+            return { ok: false, stopped: false, message: `  ✗ launchctl print of ${manager.label} could not be read. Not activating; the service was not changed.${packageBack()}` };
+        }
+    }
+    else if (!(completed(before) && before.status === 113)) {
+        return { ok: false, stopped: false, message: `  ✗ Could not tell whether ${manager.label} is loaded (launchctl print ${before.signal ? `killed by ${before.signal}` : `exited ${before.status}`}). Not activating; the service was not changed.${packageBack()}` };
+    }
+    if (loadedBefore && (!loadedBefore.tuple || !preimageTuple || !sameJob(loadedBefore.tuple, preimageTuple))) {
+        return { ok: false, stopped: false, message: `  ✗ The job launchd has loaded for ${manager.label} is not the one ${manager.plistPath} describes, so there is no job to roll back to safely. Not activating; reload it (agend install, agend restart) first.${packageBack()}` };
+    }
+    if (deps.launchdPreimage === undefined) {
+        const refreshed = deps.refresh();
+        if (refreshed.status !== 0)
+            deps.log(`  ⚠ Service file refresh failed: ${(refreshed.stderr || refreshed.stdout).trim()}`);
+    }
+    const onDisk = deps.readFile(manager.plistPath);
+    const diskTuple = onDisk ? parsePlist(onDisk) : null;
+    const diskMatch = diskTuple ? tupleStartsVerified(diskTuple, verified, LAUNCHD_DEFAULT_PATH, deps) : { ok: false, reason: "the plist cannot be read" };
+    if (!diskMatch.ok) {
+        if (preimage !== null && onDisk !== preimage)
+            deps.writeFile(manager.plistPath, preimage);
+        return { ok: false, stopped: false, message: `  ✗ ${manager.plistPath} does not start the verified install: ${diskMatch.reason}. Restored the previous plist; not restarting the fleet.${packageBack()}` };
+    }
+    // `launchctl bootout` returns before launchd has finished unloading the job (seen on macOS 15: a bootstrap right
+    // after it fails with 5, EIO, and a second bootout still finds the job). So: wait — bounded, on a monotonic clock —
+    // until launchd reports the job gone (print → 113) before bootstrapping; and after a bootstrap, wait out the brief
+    // spawning states (LAUNCHD_SPAWNING) before judging what runs.
+    const sleep = deps.sleep ?? ((ms) => { Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms); });
+    const clock = deps.monotonicNow ?? (() => performance.now());
+    const awaitUnloaded = () => {
+        const deadline = clock() + LAUNCHD_SETTLE_MS;
+        for (;;) {
+            const p = deps.run("launchctl", ["print", target]);
+            if (completed(p) && p.status === 113)
+                return true;
+            if (clock() >= deadline)
+                return false;
+            sleep(100);
+        }
+    };
+    const awaitStarted = () => {
+        const deadline = clock() + LAUNCHD_SETTLE_MS;
+        for (;;) {
+            const p = deps.run("launchctl", ["print", target]);
+            const state = completed(p) && p.status === 0 ? parseLaunchctlPrint(p.stdout) : null;
+            // Transitional states right after a bootstrap (macOS 15 shows `xpcproxy` with the pid for a few ms).
+            const settling = state !== null && (LAUNCHD_SPAWNING.includes(state.state ?? "") || (state.state === "running" && !state.pid));
+            if (!settling || clock() >= deadline)
+                return p;
+            sleep(100);
+        }
+    };
+    let unloaded = true;
+    if (loadedBefore) {
+        const out = deps.run("launchctl", ["bootout", target]);
+        if (!completed(out) || out.status !== 0) {
+            // The old job may well still be running: leave it, put its plist back.
+            if (preimage !== null)
+                deps.writeFile(manager.plistPath, preimage);
+            return { ok: false, stopped: false, message: `  ✗ launchctl bootout of ${manager.label} did not complete (${out.signal ? `killed by ${out.signal}` : `exit ${out.status}`}). Restored the previous plist; not activating.${packageBack()}` };
+        }
+        unloaded = awaitUnloaded();
+    }
+    const boot = unloaded ? deps.run("launchctl", ["bootstrap", manager.domain, manager.plistPath]) : null;
+    const after = boot && completed(boot) && boot.status === 0 ? awaitStarted() : null;
+    const printed = after && completed(after) && after.status === 0 ? parseLaunchctlPrint(after.stdout) : null;
+    const loadedMatch = printed?.tuple ? tupleStartsVerified(printed.tuple, verified, LAUNCHD_DEFAULT_PATH, deps) : null;
+    if (printed?.pid && printed.state === "running" && loadedMatch?.ok)
+        return { ok: true, via: "launchd-activation" };
+    // Roll back: whatever loaded goes; the preimage plist goes back on disk; the preimage job comes back only if one was
+    // running before, and only counts as restored when launchd runs exactly its tuple.
+    deps.run("launchctl", ["bootout", target]);
+    const goneForRecovery = awaitUnloaded();
+    if (preimage !== null)
+        deps.writeFile(manager.plistPath, preimage);
+    // The previous job's plist names files inside the package: the package goes back BEFORE that job is bootstrapped.
+    const pkgLine = packageBack();
+    let recovery = "No job was running before; the previous plist is back on disk.";
+    if (loadedBefore && preimageTuple) {
+        const reboot = goneForRecovery ? deps.run("launchctl", ["bootstrap", manager.domain, manager.plistPath]) : null;
+        const check = reboot && completed(reboot) && reboot.status === 0 ? awaitStarted() : null;
+        const back = check && completed(check) && check.status === 0 ? parseLaunchctlPrint(check.stdout) : null;
+        recovery = back?.tuple && back.pid && back.state === "running" && sameJob(back.tuple, preimageTuple)
+            ? "Rolled back to the previous job, which is running."
+            : "The previous job could NOT be restored: run agend install and agend start.";
+    }
+    const why = !boot ? `launchd did not finish unloading the previous job within ${LAUNCHD_SETTLE_MS / 1000}s`
+        : !completed(boot) || boot.status !== 0 ? "launchctl bootstrap failed"
+            : !printed ? "launchctl print of the new job did not complete"
+                : !printed.pid || printed.state !== "running" ? "the job did not start"
+                    : `launchd loaded a job that ${loadedMatch && !loadedMatch.ok ? loadedMatch.reason : "cannot be read"}`;
+    return { ok: false, stopped: loadedBefore !== null, message: `  ✗ Activating the new launchd job failed: ${why}. ${recovery}${pkgLine}` };
+}
+/** Two launchd jobs are the same when their program and argv are identical and every variable the plist sets matches. */
+export function sameJob(loaded, plist) {
+    return loaded.program === plist.program
+        && sameArgs(loaded.argv, plist.argv)
+        && Object.entries(plist.env).every(([key, value]) => loaded.env[key] === value);
+}
+//# sourceMappingURL=service-activation.js.map

package/dist/service-activation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-activation.js","sourceRoot":"","sources":["../src/service-activation.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AA4BtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,cAAc,EAAE,WAAW,EAAE,qBAAqB,EAAE,YAAY,CAAC,CAAC;AAElG;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAuD;IAChG,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzE,OAAO,aAAa,GAAG,wCAAwC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;QAC1I,CAAC;QACD,8GAA8G;QAC9G,mDAAmD;QACnD,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,8BAA8B,GAAG,mEAAmE,GAAG,GAAG,CAAC;IAC7I,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,MAAM,oBAAoB,GAAG,8DAA8D,CAAC;AACnG,2CAA2C;AAC3C,MAAM,CAAC,MAAM,oBAAoB,GAAG,+BAA+B,CAAC;AAEpE,uDAAuD;AACvD,SAAS,OAAO,CAAC,MAAqB;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC;QAAC,OAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAwB,CAAC,IAAI,IAAI,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACvG,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAAC,IAAa;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,IAAgB,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAuD,EAAE,IAAa,EAAE,IAAY;IACjH,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC;IAClE,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,kCAAkC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/I,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,IAAI,EAAE,EAAE,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,0BAA0B,EAAE,UAAU,EAAE,4BAA4B,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/J,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,GAAG,EAAE,CAAC;IACjI,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAc,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACpH,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IAC/F,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+DAA+D,EAAE,CAAC;IACpH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IAC7F,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8DAA8D,EAAE,CAAC;IAClH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,kCAAkC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAC/J,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAChG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;IAC3D,KAAK,MAAM,IAAI,IAAI,KAAiB,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;aACxB,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC9C,IAAI,OAAO,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAC/F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAW,EAAE,IAAI,EAAE,IAAgB,EAAE,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;AAC/H,CAAC;AAED,0HAA0H;AAC1H,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,sDAAsD,EAAE,CAAC,KAAK,EAAE,GAAY,EAAE,GAAY,EAAE,IAAa,EAAE,EAAE;IAC9J,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAI,EAAE,EAAE,CAAC,CAAC;QACtF,OAAO,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/D,CAAC;IACD,OAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAA6B,CAAC,IAAK,CAAE,CAAC;AACnG,CAAC,CAAC,CAAC;AAEH,iGAAiG;AACjG,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,IAAI,GAAG,2DAA2D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnF,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAClG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,6DAA6D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrF,IAAI,IAAI;QAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;YAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACpJ,MAAM,OAAO,GAAG,oDAAoD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC/E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAChH,MAAM,KAAK,GAAG,CAAC,GAAW,EAAmB,EAAE;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,GAAG,MAAM,CAAC,CAAC;QACvD,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QAC9D,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IAChC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACjC,OAAO;QACL,KAAK,EAAE,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI;QACzE,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QAClD,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;KACtB,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACvC,MAAM,QAAQ,GAAG,CAAC,IAAc,EAAE,IAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAE5H,mGAAmG;AACnG,SAAS,iBAAiB,CAAC,MAAc,EAAE,IAAY,EAAE,IAAe;IACtE,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/H,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsB,EACtB,QAAwB,EACxB,YAAoB,EACpB,IAAe;IAEf,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,GAAG,EAAE,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,mHAAmH;IACnH,gHAAgH;IAChH,kCAAkC;IAClC,IAAI,OAAO,KAAK,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3G,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACnI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mFAAmF,EAAE,CAAC;QACpJ,IAAI,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+GAA+G,EAAE,CAAC;QACpL,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QAClI,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,IAAI,IAAI,SAAS,sBAAsB,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5I,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACnI,6GAA6G;QAC7G,gHAAgH;QAChH,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qFAAqF,EAAE,CAAC;QACtJ,IAAI,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iHAAiH,EAAE,CAAC;QACtL,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5E,IAAI,WAAW,KAAK,QAAQ,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,WAAW,IAAI,cAAc,sBAAsB,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACnJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,IAAI,KAAK,KAAK,QAAQ,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS,SAAS,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QACvH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC;QACrJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,SAAS,UAAU,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;AAC9G,CAAC;AAiCD,sGAAsG;AACtG,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC,qFAAqF;AACrF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;AAMhE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAuB,EAAE,QAAwB,EAAE,IAAoB;IACrG,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;QACtH,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,iHAAiH;QACjH,4FAA4F;QAC5F,MAAM,IAAI,GAAG,CAAC,GAAW,EAAqB,EAAE;YAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC1C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;gBACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjG,MAAM,IAAI,GAAG,YAAY,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;oBAC5D,CAAC,CAAC,gBAAgB,OAAO,CAAC,IAAI,qBAAqB;oBACnD,CAAC,CAAC,gBAAgB,OAAO,CAAC,IAAI,sEAAsE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACxJ,CAAC;YACD,IAAI,IAAI,CAAC,cAAc;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,8BAA8B,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC7I,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,oCAAoC,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1H,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,YAAY,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,iEAAiE,CAAC,CAAC;QACjJ,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,0CAA0C,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACpG,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC,2CAA2C,OAAO,CAAC,IAAI,0CAA0C,CAAC,CAAC;QAC5I,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;QACtF,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,oBAAoB,OAAO,CAAC,IAAI,yCAAyC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACpH,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IACtC,CAAC;IAED,2DAA2D;IAC3D,mHAAmH;IACnH,kHAAkH;IAClH,oHAAoH;IACpH,4GAA4G;IAC5G,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;IACpD,kHAAkH;IAClH,MAAM,SAAS,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC;IAC/E,0GAA0G;IAC1G,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,UAAU,iDAAiD,WAAW,EAAE,EAAE,EAAE,CAAC;IACjJ,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,qHAAqH;IACrH,0GAA0G;IAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,IAAI,YAAY,GAAkD,IAAI,CAAC;IACvE,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,OAAO,CAAC,KAAK,mEAAmE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC3K,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,OAAO,CAAC,KAAK,+BAA+B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,kDAAkD,WAAW,EAAE,EAAE,EAAE,CAAC;IACrQ,CAAC;IACD,IAAI,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAC3G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sCAAsC,OAAO,CAAC,KAAK,mBAAmB,OAAO,CAAC,SAAS,yHAAyH,WAAW,EAAE,EAAE,EAAE,CAAC;IACjR,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,oCAAoC,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5H,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAChK,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,KAAK,QAAQ;YAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,OAAO,CAAC,SAAS,yCAAyC,SAAS,CAAC,MAAM,2DAA2D,WAAW,EAAE,EAAE,EAAE,CAAC;IAC7M,CAAC;IACD,iHAAiH;IACjH,oHAAoH;IACpH,mHAAmH;IACnH,+DAA+D;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpH,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,GAAY,EAAE;QAClC,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAG,iBAAiB,CAAC;QAC7C,SAAS,CAAC;YACR,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACnD,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAClD,IAAI,KAAK,EAAE,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACtC,KAAK,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,GAAkB,EAAE;QACvC,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAG,iBAAiB,CAAC;QAC7C,SAAS,CAAC;YACR,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACpF,qGAAqG;YACrG,MAAM,QAAQ,GAAG,KAAK,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/H,IAAI,CAAC,QAAQ,IAAI,KAAK,EAAE,IAAI,QAAQ;gBAAE,OAAO,CAAC,CAAC;YAC/C,KAAK,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IACF,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,uEAAuE;YACvE,IAAI,QAAQ,KAAK,IAAI;gBAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,OAAO,CAAC,KAAK,sBAAsB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,kDAAkD,WAAW,EAAE,EAAE,EAAE,CAAC;QAC/O,CAAC;QACD,QAAQ,GAAG,aAAa,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvG,MAAM,KAAK,GAAG,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3G,MAAM,WAAW,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrH,IAAI,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,EAAE,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC;IAEnH,qHAAqH;IACrH,mFAAmF;IACnF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,aAAa,EAAE,CAAC;IACxC,IAAI,QAAQ,KAAK,IAAI;QAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnE,kHAAkH;IAClH,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,QAAQ,GAAG,gEAAgE,CAAC;IAChF,IAAI,YAAY,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChH,MAAM,KAAK,GAAG,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzF,MAAM,IAAI,GAAG,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,QAAQ,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC;YAClG,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,4EAA4E,CAAC;IACnF,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,4DAA4D,iBAAiB,GAAG,IAAI,GAAG;QACzG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,4BAA4B;YACtE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iDAAiD;gBAC9D,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB;oBACvE,CAAC,CAAC,6BAA6B,WAAW,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC1G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,EAAE,OAAO,EAAE,8CAA8C,GAAG,KAAK,QAAQ,GAAG,OAAO,EAAE,EAAE,CAAC;AAC5I,CAAC;AAED,yHAAyH;AACzH,MAAM,UAAU,OAAO,CAAC,MAAuB,EAAE,KAAsB;IACrE,OAAO,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WAClC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;WACjC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC;AACpF,CAAC"}