@songsid/agend 2.3.5-alpha.3 → 2.3.5-alpha.5

package/dist/hub/init/wizard.js

@@ -0,0 +1,554 @@
+/**
+ * `agend hub init` (S-48 / S5a; #3095 "Installing a Hub" addendum, hub.md §5). Steps:
+ *   same-account check → name and addresses → browser HTTPS certificate → directory (LDAPS) and first-admin lookup
+ *   → local confirmation of that immutable identity → retention → confirm → commit (enabled last)
+ *   → optional service install (explicit) → member pairing instructions.
+ * No Hub is installed before final confirmation. Explicit certificate generation uses private temporary staging.
+ */
+import { hubHandoffLines } from "./handoff.js";
+import { readHubInstallationInventory } from "./inventory.js";
+import { isIP } from "node:net";
+import { HUB_RETENTION_DEFAULTS } from "../../hub-retention-policy.js";
+import { HubDirectoryConfigError, resolveDirectoryConfig } from "../directory/index.js";
+import { checkBrowserTls } from "./browser-tls.js";
+import { listenProblems, originProblems } from "./initializer.js";
+import { BIND_PASSWORD_REF } from "./layout.js";
+import { WizardCancelled } from "./prompt.js";
+import { ht } from "./text.js";
+import { HubInitError } from "./types.js";
+import { directoryCaInfo, sameDirectoryFingerprint } from "./directory-certificate.js";
+import { checkHubInitNetworkForHome } from "./network.js";
+const MAX_LOOKUP_ATTEMPTS = 5;
+const yes = (answer) => /^(y|yes|是)$/i.test(answer.trim());
+function isLoopback(origin) {
+    const host = new URL(origin).hostname.replace(/^\[(.*)\]$/, "$1");
+    return host === "localhost" || host.endsWith(".localhost") || host === "::1" || /^127\./.test(host);
+}
+function parseListen(text) {
+    const m = /^\[([^\]]+)\]:(\d{1,5})$/.exec(text) ?? /^([^:\s]+):(\d{1,5})$/.exec(text);
+    return m ? { host: m[1], port: Number(m[2]) } : undefined;
+}
+function defaultListen(origin) {
+    const url = new URL(origin);
+    const host = url.hostname.replace(/^\[(.*)\]$/, "$1");
+    const port = url.port || "443";
+    if (!isIP(host))
+        return "";
+    return isIP(host) === 6 ? `[${host}]:${port}` : `${host}:${port}`;
+}
+export async function runHubInitWizard(deps) {
+    const { io } = deps;
+    const generated = [];
+    try {
+        return await wizard({ ...deps, ...(deps.createBrowserCertificate ? { createBrowserCertificate: async (origin) => {
+                    const material = await deps.createBrowserCertificate(origin);
+                    generated.push(material);
+                    return material;
+                } } : {}), ...(deps.recoverBrowserCertificate ? { recoverBrowserCertificate: (plan) => {
+                    const material = deps.recoverBrowserCertificate(plan);
+                    if (material)
+                        generated.push(material);
+                    return material;
+                } } : {}) });
+    }
+    catch (err) {
+        if (err instanceof WizardCancelled) {
+            io.say();
+            io.say(ht("cancelled"));
+            return "cancelled";
+        }
+        throw err;
+    }
+    finally {
+        if (generated.length) {
+            let pending, uncertain = false;
+            try {
+                pending = (await deps.initializer.inspect()).incomplete?.plan.webTls.certFile;
+            }
+            catch {
+                uncertain = true;
+            }
+            for (const material of generated) {
+                // Interrupted initialization must retain its exact material for the existing same-plan resume.
+                if (uncertain || pending === material.certFile)
+                    io.say(ht("tls_stage_kept", material.certFile));
+                else
+                    try {
+                        material.cleanup();
+                    }
+                    catch {
+                        io.say(ht("tls_stage_kept", material.certFile));
+                    }
+            }
+        }
+    }
+}
+async function wizard(deps) {
+    const { io, initializer } = deps;
+    io.say();
+    io.say(ht("title"));
+    io.say(ht("intro"));
+    io.say();
+    const inspection = await initializer.inspect();
+    if (inspection.existingHub) {
+        io.say(ht("hub_exists", deps.home));
+        return "refused";
+    }
+    if (inspection.incomplete) {
+        io.say(ht("incomplete", inspection.incomplete.startedAt, inspection.incomplete.stage));
+        if (!yes(await io.ask(ht("resume_q")))) {
+            io.say(ht("restart_how", `${deps.home}/hub`));
+            return "cancelled";
+        }
+        try {
+            deps.recoverBrowserCertificate?.(inspection.incomplete.plan);
+        }
+        catch {
+            io.say(ht("tls_stage_kept", inspection.incomplete.plan.webTls.certFile));
+        }
+        if (!await checkNetwork(deps, inspection.incomplete.plan))
+            return "refused";
+        const bindPassword = await askBindSecret(deps);
+        if (bindPassword === undefined)
+            return "cancelled";
+        return confirmAndCommit(deps, inspection.incomplete.plan, bindPassword);
+    }
+    let coexistence = "dedicated";
+    if (inspection.existingFleet) {
+        io.say(ht("fleet_warn_title"));
+        for (const e of inspection.fleetEvidence)
+            io.say(`  • ${e}`);
+        io.say(ht("fleet_warn_body"));
+        if ((await io.ask(ht("fleet_confirm"))).trim() !== ht("fleet_confirm_word")) {
+            io.say(ht("cancelled"));
+            return "cancelled";
+        }
+        coexistence = "same-user-pilot";
+    }
+    // 1. Name and addresses.
+    let name = "";
+    while (!name)
+        name = (await io.ask(ht("name_q"))).trim().slice(0, 64);
+    const webOrigin = await askOrigin(deps, ht("web_origin_q"), undefined, coexistence);
+    if (!webOrigin)
+        return "cancelled";
+    const suggestedMember = `https://${new URL(webOrigin).host.replace(/:\d+$/, "")}:9443`;
+    const memberOrigin = await askOrigin(deps, ht("member_origin_q", suggestedMember), suggestedMember, coexistence, webOrigin);
+    if (!memberOrigin)
+        return "cancelled";
+    let webListen, memberListen;
+    for (;;) {
+        webListen = await askListen(io, "web_listen_q", defaultListen(webOrigin));
+        memberListen = await askListen(io, "member_listen_q", defaultListen(memberOrigin), webListen);
+        if (await checkNetwork(deps, { webListen, memberListen }))
+            break;
+        if ((await io.ask(ht("retry_q"))).trim().toLowerCase() === "q")
+            return "cancelled";
+    }
+    // 2. Browser HTTPS certificate (separate from the member certificate S1 generates).
+    io.say();
+    io.say(ht("tls_title"));
+    io.say(ht("tls_intro", webOrigin));
+    const webTls = await askBrowserTls(deps, webOrigin);
+    if (!webTls)
+        return "cancelled";
+    // 3. Service-account lookup only; the designated person signs in later in their own browser.
+    const selected = await askDirectoryAndAdministrator(deps);
+    if (!selected)
+        return "cancelled";
+    const { directory, bindPassword, person } = selected;
+    // 4. The local host owner approves the exact directory identity, not a mutable login label.
+    const label = person.displayName ?? person.login;
+    if (!yes(await io.ask(ht("admin_q", label, `${person.key.realm}/${person.key.objectId}`)))) {
+        io.say(ht("cancelled"));
+        return "cancelled";
+    }
+    // 5. Suggested retention is still included in the exact plan the owner confirms.
+    io.say();
+    io.say(ht("retention_title"));
+    const contentDays = await askDays(io, "retention_content_q");
+    const eventDays = await askDays(io, "retention_event_q");
+    const plan = {
+        name,
+        webOrigin,
+        memberOrigin,
+        directory,
+        bindPasswordRef: BIND_PASSWORD_REF,
+        administrator: { realm: person.key.realm, objectId: person.key.objectId },
+        retention: { contentDays, eventDays },
+        coexistence,
+        memberListen,
+        webListen,
+        webTls,
+    };
+    return confirmAndCommit(deps, plan, bindPassword);
+}
+async function askOrigin(deps, question, fallback, coexistence, differentFrom) {
+    const { io } = deps;
+    for (;;) {
+        const raw = (await io.ask(question)).trim();
+        const text = (raw || fallback || "").replace(/\/$/, "");
+        if (!text)
+            continue;
+        const problems = originProblems("address", text);
+        if (problems.length > 0) {
+            io.say(problems.join("\n"));
+            continue;
+        }
+        if (differentFrom && text === differentFrom) {
+            io.say("the member address must differ from the web address");
+            continue;
+        }
+        if (coexistence === "dedicated" && isLoopback(text) && !yes(await io.ask(ht("loopback_warn", text))))
+            continue;
+        return text;
+    }
+}
+async function askListen(io, key, fallback, differentFrom) {
+    for (;;) {
+        const raw = (await io.ask(ht(key, fallback))).trim() || fallback;
+        const listen = parseListen(raw);
+        const problems = listen ? listenProblems("listener", listen) : [ht("listen_need")];
+        if (listen && differentFrom && listen.host === differentFrom.host && listen.port === differentFrom.port)
+            problems.push("the two listeners must differ");
+        if (listen && problems.length === 0)
+            return listen;
+        io.say(problems.join("\n"));
+        if (!listen)
+            continue;
+        io.say(ht("listen_need"));
+    }
+}
+async function askBrowserTls(deps, webOrigin) {
+    const { io } = deps;
+    for (;;) {
+        let certFile = (await io.ask(ht("tls_cert_q"))).trim();
+        if (!certFile) {
+            io.say(ht("tls_needed", webOrigin, new URL(webOrigin).hostname));
+            return undefined;
+        }
+        let keyFile, generated = false;
+        if (certFile.toLowerCase() === "generate") {
+            if (!deps.createBrowserCertificate) {
+                io.say(ht("tls_generate_unavailable"));
+                continue;
+            }
+            try {
+                const material = await deps.createBrowserCertificate(webOrigin);
+                certFile = material.certFile;
+                keyFile = material.keyFile;
+                generated = true;
+            }
+            catch {
+                io.say(ht("tls_generate_failed"));
+                return undefined;
+            }
+        }
+        else
+            keyFile = (await io.ask(ht("tls_key_q"))).trim();
+        let certPem = "";
+        let keyPem = "";
+        try {
+            certPem = deps.readFile(certFile);
+            keyPem = deps.readFile(keyFile);
+        }
+        catch (err) {
+            io.say(`${ht("tls_problem")} ${err.message}`);
+            if ((await io.ask(ht("retry_q"))).trim().toLowerCase() === "q")
+                return undefined;
+            continue;
+        }
+        const check = checkBrowserTls(certPem, keyPem, webOrigin, (deps.now ?? Date.now)());
+        if (!check.ok) {
+            io.say(ht("tls_problem"));
+            for (const p of check.problems)
+                io.say(`  • ${p}`);
+            if ((await io.ask(ht("retry_q"))).trim().toLowerCase() === "q")
+                return undefined;
+            continue;
+        }
+        io.say(ht("tls_fingerprint", check.fingerprint256 ?? ""));
+        io.say(ht("tls_ok", new URL(webOrigin).hostname, check.validTo ?? ""));
+        if (check.selfSigned) {
+            if (!yes(await io.ask(ht("tls_self_signed"))))
+                continue;
+        }
+        return { certFile, keyFile, ...(generated ? { generated: true } : {}) };
+    }
+}
+async function askDirectoryAndAdministrator(deps) {
+    const { io } = deps;
+    let attempts = 0;
+    for (;;) {
+        io.say();
+        io.say(ht("dir_title"));
+        const settings = await askDirectorySettings(deps);
+        if (!settings)
+            return undefined;
+        io.say();
+        io.say(ht("signin_title"));
+        for (;;) {
+            attempts += 1;
+            const login = (await io.ask(ht("signin_login_q"))).trim();
+            let diagnostic;
+            const directory = deps.createDirectory(settings.directory, { bindPassword: settings.bindPassword }, { onDiagnostic: (d) => (diagnostic = d) });
+            let result;
+            try {
+                result = await directory.lookupForInitialization?.(login) ?? { ok: false, reason: "unavailable" };
+            }
+            finally {
+                await directory.close();
+            }
+            if (result.ok) {
+                io.say(ht("signin_ok", result.person.displayName ?? result.person.login, result.person.login));
+                return { directory: settings.directory, bindPassword: settings.bindPassword, person: result.person };
+            }
+            if (result.reason === "not-found")
+                io.say(ht("signin_invalid"));
+            else if (result.reason === "not-eligible")
+                io.say(ht("signin_not_eligible"));
+            else if (result.reason === "bad-input")
+                io.say(ht("signin_bad_input"));
+            else
+                io.say(ht("signin_unavailable", diagnostic?.error ?? "no answer"));
+            if (attempts >= MAX_LOOKUP_ATTEMPTS) {
+                io.say(ht("signin_too_many"));
+                return undefined;
+            }
+            const next = (await io.ask(ht("signin_retry_q"))).trim().toLowerCase();
+            if (next === "e")
+                break;
+            if (next !== "r")
+                return undefined;
+        }
+    }
+}
+async function confirmDirectoryCa(io, pem) {
+    const bundle = directoryCaInfo(pem);
+    io.say(ht("dir_ca_compare"));
+    for (const c of bundle.certificates)
+        io.say(ht("dir_ca_details", c.subject, c.fingerprint256, c.validTo));
+    return yes(await io.ask(ht("dir_ca_confirm_q")));
+}
+async function askBindSecret(deps) {
+    const { io } = deps;
+    for (;;) {
+        if (!deps.readSecretFile)
+            return io.askHidden(ht("dir_bind_pw_q"));
+        const choice = (await io.ask(ht("dir_bind_source_q"))).trim();
+        if (!choice || choice === "1")
+            return io.askHidden(ht("dir_bind_pw_q"));
+        if (choice !== "2") {
+            io.say(ht("dir_bind_source_invalid"));
+            continue;
+        }
+        const path = (await io.ask(ht("dir_bind_file_q"))).trim();
+        try {
+            return deps.readSecretFile(path);
+        }
+        catch (err) {
+            if (err instanceof WizardCancelled)
+                throw err;
+            io.say(ht("dir_bind_file_invalid"));
+            if ((await io.ask(ht("retry_q"))).trim().toLowerCase() === "q")
+                return undefined;
+        }
+    }
+}
+async function askDirectorySettings(deps) {
+    const { io } = deps;
+    for (;;) {
+        const realm = (await io.ask(ht("dir_realm_q"))).trim();
+        const url = (await io.ask(ht("dir_url_q"))).trim();
+        const caFile = (await io.ask(ht("dir_ca_q"))).trim();
+        let caPem, pending;
+        if (caFile.toLowerCase() === "fetch") {
+            try {
+                if (!deps.directoryCertificates)
+                    throw Error("directory_ca_unsupported");
+                const probe = await deps.directoryCertificates.inspect(url);
+                io.say(ht("dir_leaf_unverified"));
+                io.say(ht("dir_ca_details", probe.certificate.subject, probe.certificate.fingerprint256, probe.certificate.validTo));
+                const pin = await io.ask(ht("dir_leaf_confirm_q"));
+                if (!sameDirectoryFingerprint(probe.certificate.fingerprint256, pin)) {
+                    io.say(ht("dir_leaf_refused"));
+                    return undefined;
+                }
+                try {
+                    const bundle = await deps.directoryCertificates.fetch(probe, pin);
+                    if (!await confirmDirectoryCa(io, bundle.pem))
+                        return undefined;
+                    caPem = bundle.pem;
+                }
+                catch (err) {
+                    if (err instanceof Error && err.message === "directory_ca_auth_required")
+                        pending = { probe, pin };
+                    else
+                        throw err;
+                }
+            }
+            catch (err) {
+                if (err instanceof WizardCancelled)
+                    throw err;
+                io.say(ht("dir_ca_fetch_failed"));
+                if ((await io.ask(ht("retry_q"))).trim().toLowerCase() === "q")
+                    return undefined;
+                continue;
+            }
+        }
+        else if (caFile) {
+            try {
+                caPem = deps.readFile(caFile);
+                if (!await confirmDirectoryCa(io, caPem))
+                    return undefined;
+            }
+            catch (err) {
+                if (err instanceof WizardCancelled)
+                    throw err;
+                io.say(ht("dir_ca_unreadable"));
+                if ((await io.ask(ht("retry_q"))).trim().toLowerCase() === "q")
+                    return undefined;
+                continue;
+            }
+        }
+        const profile = (await io.ask(ht("dir_profile_q"))).trim() === "2" ? "openldap" : "ad";
+        const baseDn = (await io.ask(ht("dir_base_q"))).trim();
+        const bindDn = (await io.ask(ht("dir_bind_q"))).trim();
+        let directory = { realm, url, ...(caPem ? { caPem } : {}), baseDn, bindDn, profile };
+        try {
+            resolveDirectoryConfig(directory);
+        }
+        catch (err) {
+            io.say(ht("dir_invalid", err instanceof HubDirectoryConfigError ? err.message : String(err)));
+            if ((await io.ask(ht("retry_q"))).trim().toLowerCase() === "q")
+                return undefined;
+            continue;
+        }
+        if (pending)
+            io.say(ht("dir_ca_bind_needed"));
+        const bindPassword = await askBindSecret(deps);
+        if (bindPassword === undefined)
+            return undefined;
+        if (!bindPassword) {
+            io.say(ht("dir_bind_empty"));
+            continue;
+        }
+        if (pending) {
+            try {
+                const bundle = await deps.directoryCertificates.fetch(pending.probe, pending.pin, { bindDn, password: bindPassword });
+                if (!await confirmDirectoryCa(io, bundle.pem))
+                    return undefined;
+                directory = { ...directory, caPem: bundle.pem };
+                resolveDirectoryConfig(directory);
+            }
+            catch (err) {
+                if (err instanceof WizardCancelled)
+                    throw err;
+                io.say(ht("dir_ca_fetch_failed"));
+                if ((await io.ask(ht("retry_q"))).trim().toLowerCase() === "q")
+                    return undefined;
+                continue;
+            }
+        }
+        return { directory, bindPassword };
+    }
+}
+async function askDays(io, key) {
+    for (;;) {
+        const suggested = key === "retention_content_q" ? HUB_RETENTION_DEFAULTS.contentDays : HUB_RETENTION_DEFAULTS.eventDays;
+        const text = (await io.ask(ht(key, suggested))).trim();
+        if (!text)
+            return suggested;
+        if (/^\d{1,4}$/.test(text) && Number(text) >= 1 && Number(text) <= 3650)
+            return Number(text);
+        io.say(ht("retention_need"));
+    }
+}
+async function confirmAndCommit(deps, plan, bindPassword) {
+    const { io, initializer } = deps;
+    let confirmation;
+    try {
+        confirmation = await initializer.prepareConfirmation(plan, { bindPassword });
+    }
+    catch (err) {
+        return refused(io, err);
+    }
+    io.say();
+    io.say(ht("summary_title"));
+    for (const line of confirmation.summary.split("\n"))
+        io.say(`  ${line}`);
+    if (plan.coexistence === "same-user-pilot")
+        io.say(`  ${ht("pilot_reminder")}`);
+    if ((await io.ask(ht("confirm_q"))).trim() !== ht("confirm_word")) {
+        io.say(ht("cancelled"));
+        return "cancelled";
+    }
+    if (!await checkNetwork(deps, plan))
+        return "refused";
+    let result;
+    try {
+        result = await initializer.commit(plan, confirmation.reference);
+    }
+    catch (err) {
+        return refused(io, err);
+    }
+    io.say();
+    io.say(ht("done", result.hubId));
+    io.say(ht("admin_browser_next", plan.webOrigin));
+    // Service: never implied by the setup itself; an exact word installs it.
+    io.say();
+    if (deps.service.installed()) {
+        io.say(ht("service_installed"));
+    }
+    else if ((await io.ask(ht("service_q"))).trim() === ht("service_word")) {
+        try {
+            await deps.service.install();
+            io.say(ht("service_ok"));
+        }
+        catch (err) {
+            io.say(ht("service_failed", err.message));
+        }
+    }
+    else {
+        io.say(ht("service_skipped"));
+    }
+    io.say();
+    try {
+        for (const line of hubHandoffLines(deps.home, readHubInstallationInventory(deps.home)))
+            io.say(line);
+    }
+    catch {
+        // A completed initialization remains committed if an informational record cannot be read/displayed.
+        io.say(ht("handoff_unavailable"));
+        io.say(ht("pairing_title"));
+        io.say(ht("pairing_steps", plan.webOrigin, plan.memberOrigin, result.spkiSha256));
+    }
+    return "initialized";
+}
+async function checkNetwork(deps, listeners) {
+    const { io } = deps;
+    io.say(ht("network_check"));
+    try {
+        const problems = await (deps.checkNetwork ? deps.checkNetwork(listeners) : checkHubInitNetworkForHome(deps.home, listeners));
+        for (const p of problems)
+            io.say(ht(`network_${p.reason}`, ht(`network_${p.listener}`)));
+        if (!problems.length) {
+            io.say(ht("network_ok"));
+            return true;
+        }
+    }
+    catch {
+        io.say(ht("network_unavailable", ht("network_both")));
+    }
+    io.say(ht("network_unchanged"));
+    return false;
+}
+function refused(io, err) {
+    io.say(ht("failed"));
+    const problems = err instanceof HubInitError ? err.problems : [err.message];
+    for (const p of problems)
+        io.say(`  • ${p}`);
+    io.say(ht("stays_off"));
+    return "refused";
+}
+//# sourceMappingURL=wizard.js.map

package/dist/hub/init/wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wizard.js","sourceRoot":"","sources":["../../../src/hub/init/wizard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,eAAe,EAAmB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,eAAe,EAAiB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAE,YAAY,EAA8E,MAAM,YAAY,CAAC;AACtH,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAA0D,MAAM,4BAA4B,CAAC;AAE/I,OAAO,EAAE,0BAA0B,EAA+C,MAAM,cAAc,CAAC;AA6BvG,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAEnE,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAClE,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,KAAK,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAmB;IACxD,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAc,EAAE,EAAE;oBACtH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,wBAAyB,CAAC,MAAM,CAAC,CAAC;oBAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAAC,OAAO,QAAQ,CAAC;gBAC3G,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,CAAC,IAAiB,EAAE,EAAE;oBACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,yBAA0B,CAAC,IAAI,CAAC,CAAC;oBAAC,IAAI,QAAQ;wBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAAC,OAAO,QAAQ,CAAC;gBAClH,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;YACnC,EAAE,CAAC,GAAG,EAAE,CAAC;YACT,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YACxB,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACrB,IAAI,OAA2B,EAAE,SAAS,GAAG,KAAK,CAAC;YACnD,IAAI,CAAC;gBAAC,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC;YAAC,CAAC;YAClH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,+FAA+F;gBAC/F,IAAI,SAAS,IAAI,OAAO,KAAK,QAAQ,CAAC,QAAQ;oBAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;;oBAC3F,IAAI,CAAC;wBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAAC,CAAC;YAC7F,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAmB;IACvC,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACjC,EAAE,CAAC,GAAG,EAAE,CAAC;IACT,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACpB,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACpB,EAAE,CAAC,GAAG,EAAE,CAAC;IAET,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;IAC/C,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAC3B,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC;YAC9C,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,CAAC;YAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACrE,MAAM,CAAC;YAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,CAAC;QACnF,IAAI,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC;QACnD,OAAO,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,WAAW,GAAmB,WAAW,CAAC;IAC9C,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC7B,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,aAAa;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7D,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC5E,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YACxB,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,WAAW,GAAG,iBAAiB,CAAC;IAClC,CAAC;IAED,yBAAyB;IACzB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,IAAI;QAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACpF,IAAI,CAAC,SAAS;QAAE,OAAO,WAAW,CAAC;IACnC,MAAM,eAAe,GAAG,WAAW,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC;IACvF,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC5H,IAAI,CAAC,YAAY;QAAE,OAAO,WAAW,CAAC;IACtC,IAAI,SAAoB,EAAE,YAAuB,CAAC;IAClD,SAAS,CAAC;QACR,SAAS,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,cAAc,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1E,YAAY,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,iBAAiB,EAAE,aAAa,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9F,IAAI,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;YAAE,MAAM;QACjE,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG;YAAE,OAAO,WAAW,CAAC;IACrF,CAAC;IAED,oFAAoF;IACpF,EAAE,CAAC,GAAG,EAAE,CAAC;IACT,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACxB,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,WAAW,CAAC;IAEhC,6FAA6F;IAC7F,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC;IAClC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IAErD,4FAA4F;IAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC;IACjD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACxB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,iFAAiF;IACjF,EAAE,CAAC,GAAG,EAAE,CAAC;IACT,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC9B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAEzD,MAAM,IAAI,GAAgB;QACxB,IAAI;QACJ,SAAS;QACT,YAAY;QACZ,SAAS;QACT,eAAe,EAAE,iBAAiB;QAClC,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;QACzE,SAAS,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE;QACrC,WAAW;QACX,YAAY;QACZ,SAAS;QACT,MAAM;KACP,CAAC;IACF,OAAO,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAmB,EAAE,QAAgB,EAAE,QAA4B,EAAE,WAA2B,EAAE,aAAsB;IAC/I,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,aAAa,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC5C,EAAE,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,IAAI,WAAW,KAAK,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC;YAAE,SAAS;QAC/G,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,EAAY,EAAE,GAAuC,EAAE,QAAgB,EAAE,aAAyB;IACzH,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC;QACjE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;QACnF,IAAI,MAAM,IAAI,aAAa,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACxJ,IAAI,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QACnD,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAmB,EAAE,SAAiB;IACjE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,SAAS,CAAC;QACR,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,OAAe,EAAE,SAAS,GAAG,KAAK,CAAC;QACvC,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACzF,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;gBAChE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;gBAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC;YAC7E,CAAC;YAAC,MAAM,CAAC;gBAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;QAClE,CAAC;;YAAM,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAClC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAK,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YACjF,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ;gBAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YACjF,SAAS;QACX,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1D,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBAAE,SAAS;QAC1D,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACnF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,IAAmB;IAEnB,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,SAAS,CAAC;QACR,EAAE,CAAC,GAAG,EAAE,CAAC;QACT,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,EAAE,CAAC,GAAG,EAAE,CAAC;QACT,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QAC3B,SAAS,CAAC;YACR,QAAQ,IAAI,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,UAA8C,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/I,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,KAAc,EAAE,MAAM,EAAE,aAAsB,EAAE,CAAC;YACtH,CAAC;oBAAS,CAAC;gBACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/F,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACvG,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;gBAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;iBAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc;gBAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC;iBACxE,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;gBAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;;gBAClE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,EAAE,UAAU,EAAE,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC;YACxE,IAAI,QAAQ,IAAI,mBAAmB,EAAE,CAAC;gBACpC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBAC9B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACvE,IAAI,IAAI,KAAK,GAAG;gBAAE,MAAM;YACxB,IAAI,IAAI,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,EAAY,EAAE,GAAW;IACzD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY;QAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1G,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAmB;IAC9C,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,SAAS,CAAC;QACR,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QACxE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACxE,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACzC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,YAAY,eAAe;gBAAE,MAAM,GAAG,CAAC;YAC9C,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;QACnF,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAmB;IACrD,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,KAAyB,EAAE,OAAsE,CAAC;QACtG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,qBAAqB;oBAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBACzE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC5D,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAClC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,EAAE,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;gBACrH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;gBACnD,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;oBAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;oBAAC,OAAO,SAAS,CAAC;gBAAC,CAAC;gBAC3H,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAClE,IAAI,CAAC,MAAM,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;wBAAE,OAAO,SAAS,CAAC;oBAChE,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC;gBACrB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,KAAK,4BAA4B;wBAAE,OAAO,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;;wBAC9F,MAAM,GAAG,CAAC;gBACjB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,eAAe;oBAAE,MAAM,GAAG,CAAC;gBAC9C,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAClC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG;oBAAE,OAAO,SAAS,CAAC;gBACjF,SAAS;YACX,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC;oBAAE,OAAO,SAAS,CAAC;YAC7D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,eAAe;oBAAE,MAAM,GAAG,CAAC;gBAC9C,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBAChC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG;oBAAE,OAAO,SAAS,CAAC;gBACjF,SAAS;YACX,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,SAAS,GAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACzG,IAAI,CAAC;YAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAC1C,OAAO,GAAG,EAAE,CAAC;YACX,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,YAAY,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9F,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YACjF,SAAS;QACX,CAAC;QACD,IAAI,OAAO;YAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACjD,IAAI,CAAC,YAAY,EAAE,CAAC;YAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9D,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;gBACvH,IAAI,CAAC,MAAM,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;oBAAE,OAAO,SAAS,CAAC;gBAChE,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;gBAChD,sBAAsB,CAAC,SAAS,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,eAAe;oBAAE,MAAM,GAAG,CAAC;gBAC9C,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAClC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG;oBAAE,OAAO,SAAS,CAAC;gBACjF,SAAS;YACX,CAAC;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IACrC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,EAAY,EAAE,GAAgD;IACnF,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,GAAG,KAAK,qBAAqB,CAAC,CAAC,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,SAAS,CAAC;QACxH,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7F,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAmB,EAAE,IAAiB,EAAE,YAAoB;IAC1F,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACjC,IAAI,YAAY,CAAC;IACjB,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,WAAW,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,EAAE,CAAC,GAAG,EAAE,CAAC;IACT,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,WAAW,KAAK,iBAAiB;QAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QAClE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACxB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,EAAE,CAAC,GAAG,EAAE,CAAC;IACT,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAEjD,yEAAyE;IACzE,EAAE,CAAC,GAAG,EAAE,CAAC;IACT,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;QAC7B,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC7B,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChC,CAAC;IAED,EAAE,CAAC,GAAG,EAAE,CAAC;IACT,IAAI,CAAC;QAAC,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC7G,MAAM,CAAC;QACL,oGAAoG;QACpG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAClC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAC5B,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAmB,EAAE,SAA2B;IAC1E,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7H,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,qBAAqB,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAClE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,EAAY,EAAE,GAAY;IACzC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAG,GAAG,YAAY,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7C,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACxB,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/hub/initialization.d.ts

@@ -0,0 +1,23 @@
+import { z } from "zod";
+declare const schema: z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    hubId: z.ZodString;
+    planDigest: z.ZodString;
+    committedAt: z.ZodString;
+    confirmationId: z.ZodString;
+    signature: z.ZodString;
+}, z.core.$strict>;
+export type HubInitializationManifest = z.infer<typeof schema>;
+export declare function sealHubInitialization(input: {
+    home: string;
+    planDigest: string;
+    confirmationId: string;
+    committedAt: string;
+}): string;
+export declare function verifyHubInitialization(input: {
+    home: string;
+    hubId: string;
+    memberOrigin: string;
+    planDigest: string;
+}): HubInitializationManifest;
+export {};

package/dist/hub/initialization.js

@@ -0,0 +1,28 @@
+/** Read-only seal helper; only S5's confirmed initialization transaction writes the manifest. */
+import { createPrivateKey, createPublicKey, sign, verify } from "node:crypto";
+import { z } from "zod";
+import { hash, uuid, validated, parseStrictJson } from "./validation.js";
+import { readPrivateFile } from "./private-files.js";
+import { readHubIdentity } from "./tls.js";
+const schema = z.strictObject({ v: z.literal(1), hubId: uuid, planDigest: hash, committedAt: z.string().regex(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/).refine(v => Number.isFinite(Date.parse(v)) && new Date(v).toISOString() === v),
+    confirmationId: z.string().regex(/^[a-f0-9]{32}$/), signature: z.string().regex(/^[A-Za-z0-9_-]{86}$/) });
+function bytes(m) {
+    return Buffer.from(JSON.stringify(["agend-hub-init-v1", 1, m.hubId, m.planDigest, m.committedAt, m.confirmationId]));
+}
+export function sealHubInitialization(input) {
+    const metadata = parseStrictJson(readPrivateFile(input.home, "hub/keys/identity.json"));
+    if (typeof metadata.memberOrigin !== "string")
+        throw Error("Hub identity is invalid");
+    const identity = readHubIdentity({ home: input.home, memberOrigin: metadata.memberOrigin });
+    const manifest = validated(schema, { v: 1, hubId: identity.hubId, planDigest: input.planDigest, committedAt: input.committedAt, confirmationId: input.confirmationId, signature: "A".repeat(86) });
+    return sign(null, bytes(manifest), createPrivateKey(readPrivateFile(input.home, "hub/keys/issuer-key.pem"))).toString("base64url");
+}
+export function verifyHubInitialization(input) {
+    const identity = readHubIdentity(input), manifest = validated(schema, parseStrictJson(readPrivateFile(input.home, "hub/init-manifest.json")));
+    if (manifest.hubId !== identity.hubId || manifest.hubId !== input.hubId || manifest.planDigest !== validated(hash, input.planDigest)
+        || Buffer.from(manifest.signature, "base64url").toString("base64url") !== manifest.signature
+        || !verify(null, bytes(manifest), createPublicKey(identity.issuerPublicKey), Buffer.from(manifest.signature, "base64url")))
+        throw Error("Hub initialization confirmation differs");
+    return manifest;
+}
+//# sourceMappingURL=initialization.js.map

package/dist/hub/initialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialization.js","sourceRoot":"","sources":["../../src/hub/initialization.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC3O,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;AAE5G,SAAS,KAAK,CAAC,CAA+C;IAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;AACvH,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAwF;IAC5H,MAAM,QAAQ,GAAG,eAAe,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAA+B,CAAC;IACtH,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ;QAAE,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACnM,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrI,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,KAAgF;IACtH,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,eAAe,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC;IAC9I,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC;WAC/H,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,SAAS;WACzF,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACrL,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/hub/member/agent-mode.d.ts

@@ -0,0 +1,6 @@
+import type { HubLocalExposure } from "../execution/service.js";
+export declare const HUB_AGENT_MODE: "agent";
+/** The policy digest of `agent`'s representative exposure. */
+export declare function agentPolicyDigest(agent: string): string;
+/** True only for the exact representative tuple of its own agent (S5 delivers on nothing else). */
+export declare function isAgentDescriptor(local: Pick<HubLocalExposure, "agent" | "providerId" | "exposure">): boolean;