@stll/oxlint-config 0.10.0 → 0.11.0

package/dist/toolchain-check-cli.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"toolchain-check-cli.cjs","names":["path"],"sources":["../src/toolchain-check.ts","../src/toolchain-check-cli.ts"],"sourcesContent":["import { execFileSync } from \"node:child_process\";\nimport { readFileSync } from \"node:fs\";\nimport path from \"node:path\";\n\nexport type ToolchainDiagnostic = {\n  path: string;\n  line: number;\n  message: string;\n};\n\nexport type CheckToolchainOptions = {\n  root: string;\n  bunVersion: string;\n  allowNonBunPackageManagers?: readonly string[];\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst scalar = (value: string) =>\n  value\n    .trim()\n    .replace(/\\s+#.*$/, \"\")\n    .replace(/^[\"']|[\"']$/g, \"\");\n\nconst trackedPath = (file: string) =>\n  !file.split(\"/\").some((part) => part === \"node_modules\" || part === \"vendor\");\n\n/** Check tracked consumer files without traversing dependencies or the working tree. */\nexport const checkToolchain = ({\n  root,\n  bunVersion,\n  allowNonBunPackageManagers = [],\n}: CheckToolchainOptions): ToolchainDiagnostic[] => {\n  const files = execFileSync(\"git\", [\"ls-files\", \"-z\", \"--cached\"], {\n    cwd: root,\n    encoding: \"utf8\",\n  })\n    .split(\"\\0\")\n    .filter((file) => file !== \"\" && trackedPath(file));\n  const tracked = new Set(files);\n  const diagnostics: ToolchainDiagnostic[] = [];\n  const add = (file: string, line: number, message: string) => {\n    diagnostics.push({ path: file, line, message });\n  };\n  const read = (file: string): string | undefined => {\n    try {\n      return readFileSync(path.join(root, file), \"utf8\");\n    } catch {\n      add(file, 1, \"cannot read tracked file\");\n      return undefined;\n    }\n  };\n  const checkVersion = (\n    file: string,\n    line: number,\n    value: unknown,\n    label: string,\n  ) => {\n    if (value !== bunVersion) {\n      add(file, line, `${label} must be ${bunVersion}, found ${String(value)}`);\n    }\n  };\n  const packages = new Map<\n    string,\n    { manager: unknown; json: Record<string, unknown>; text: string }\n  >();\n  for (const file of files.filter(\n    (entry) => path.basename(entry) === \"package.json\",\n  )) {\n    const text = read(file);\n    if (text === undefined) continue;\n    let json: unknown;\n    try {\n      json = JSON.parse(text);\n    } catch {\n      add(file, 1, \"invalid package.json\");\n      continue;\n    }\n    if (!isRecord(json)) {\n      add(file, 1, \"package.json must contain an object\");\n      continue;\n    }\n    packages.set(file, { manager: json[\"packageManager\"], json, text });\n  }\n  const catalogSource = (json: Record<string, unknown>) =>\n    isRecord(json[\"workspaces\"]) ? json[\"workspaces\"] : json;\n  const rootCatalogs = catalogSource(packages.get(\"package.json\")?.json ?? {});\n  for (const [file, { json, text }] of packages) {\n    const lines = text.split(/\\r?\\n/);\n    const reportedLines = new Map<string, number>();\n    const propertyLine = (key: string, value?: unknown) => {\n      const serialized =\n        value === undefined ? undefined : JSON.stringify(value);\n      const matchKey = `${key}:${serialized ?? \"\"}`;\n      const previous = reportedLines.get(matchKey) ?? -1;\n      const index = lines.findIndex(\n        (line, lineIndex) =>\n          lineIndex > previous &&\n          line.includes(`\"${key}\"`) &&\n          (serialized === undefined || line.includes(serialized)),\n      );\n      if (index >= 0) reportedLines.set(matchKey, index);\n      return Math.max(1, index + 1);\n    };\n    if (json[\"packageManager\"] !== undefined) {\n      if (\n        typeof json[\"packageManager\"] === \"string\" &&\n        json[\"packageManager\"].startsWith(\"bun@\")\n      ) {\n        checkVersion(\n          file,\n          propertyLine(\"packageManager\"),\n          json[\"packageManager\"].slice(4),\n          \"packageManager Bun version\",\n        );\n      } else if (!allowNonBunPackageManagers.includes(file)) {\n        add(\n          file,\n          propertyLine(\"packageManager\"),\n          \"packageManager is not Bun; use --allow-non-bun-package-manager with this path to allow it\",\n        );\n      }\n    }\n    const checkDependencies = (value: unknown, resolveCatalog = false) => {\n      if (!isRecord(value) || value[\"bun-types\"] === undefined) return;\n      const specifier = value[\"bun-types\"];\n      const resolveVersion = () => {\n        if (\n          !resolveCatalog ||\n          typeof specifier !== \"string\" ||\n          !specifier.startsWith(\"catalog:\")\n        )\n          return specifier;\n        const catalogName = specifier.slice(\"catalog:\".length);\n        const source =\n          file === \"package.json\" ? catalogSource(json) : rootCatalogs;\n        const catalog =\n          catalogName === \"\"\n            ? source[\"catalog\"]\n            : isRecord(source[\"catalogs\"]) && source[\"catalogs\"][catalogName];\n        return isRecord(catalog) ? catalog[\"bun-types\"] : undefined;\n      };\n      checkVersion(\n        file,\n        propertyLine(\"bun-types\", specifier),\n        resolveVersion(),\n        \"bun-types\",\n      );\n    };\n    checkDependencies(json[\"dependencies\"], true);\n    checkDependencies(json[\"devDependencies\"], true);\n    checkDependencies(json[\"catalog\"]);\n    if (isRecord(json[\"catalogs\"])) {\n      for (const catalog of Object.values(json[\"catalogs\"]))\n        checkDependencies(catalog);\n    }\n    if (isRecord(json[\"workspaces\"])) {\n      checkDependencies(json[\"workspaces\"][\"catalog\"]);\n      if (isRecord(json[\"workspaces\"][\"catalogs\"])) {\n        for (const catalog of Object.values(json[\"workspaces\"][\"catalogs\"]))\n          checkDependencies(catalog);\n      }\n    }\n  }\n  for (const file of files) {\n    const name = path.basename(file);\n    const workflow =\n      /^\\.github\\/workflows\\/[^/]+\\.ya?ml$/.test(file) ||\n      /^\\.github\\/actions\\/.+\\/action\\.ya?ml$/.test(file);\n    const dockerfile =\n      name.startsWith(\"Dockerfile\") || name === \"Containerfile\";\n    const versionFile = name === \".bun-version\" || name === \".tool-versions\";\n    const mise = name === \"mise.toml\" || name === \".mise.toml\";\n    if (!workflow && !dockerfile && !versionFile && !mise) continue;\n    const text = read(file);\n    if (text === undefined) continue;\n    if (name === \".bun-version\")\n      checkVersion(file, 1, scalar(text), \".bun-version\");\n    let section = \"\";\n    for (const [index, original] of text.split(/\\r?\\n/).entries()) {\n      const line = index + 1;\n      if (/^\\s*#/.test(original) || original.trim() === \"\") continue;\n      if (workflow) {\n        const pin = original.match(\n          /(?:^\\s*(?:-\\s*)?|[{,]\\s*)[\"']?bun-version[\"']?\\s*:/,\n        );\n        if (pin !== null)\n          add(\n            file,\n            line,\n            \"bun-version literals are forbidden; use bun-version-file pointing to a package.json with the shared Bun pin\",\n          );\n        const reference = original.match(\n          /(?:^\\s*(?:-\\s*)?|[{,]\\s*)[\"']?bun-version-file[\"']?\\s*:\\s*(?:\"([^\"]*)\"|'([^']*)'|([^,}]*))/,\n        );\n        if (reference !== null) {\n          const target = scalar(\n            reference[1] ?? reference[2] ?? reference[3] ?? \"\",\n          );\n          const normalized = path.posix.normalize(target);\n          const pkg = packages.get(normalized);\n          if (\n            target === \"\" ||\n            path.posix.isAbsolute(target) ||\n            normalized.startsWith(\"../\") ||\n            !tracked.has(normalized) ||\n            path.basename(normalized) !== \"package.json\" ||\n            pkg?.manager !== `bun@${bunVersion}`\n          ) {\n            add(\n              file,\n              line,\n              `bun-version-file must reference a tracked package.json with packageManager bun@${bunVersion}, found ${target}`,\n            );\n          }\n        }\n      }\n      if (dockerfile) {\n        const image = original.match(\n          /^\\s*FROM\\s+(?:--\\S+\\s+)*oven\\/bun(?::([^\\s@]+))?(?:@\\S+)?(?:\\s|$)/i,\n        );\n        if (image !== null) {\n          const tag = image[1];\n          if (tag !== undefined) {\n            const version = tag.match(/^(\\d+\\.\\d+\\.\\d+)(?:-|$)/)?.[1];\n            checkVersion(file, line, version ?? tag, \"oven/bun version\");\n          } else if (!/oven\\/bun@/i.test(original)) {\n            add(file, line, `oven/bun must use a ${bunVersion} version tag`);\n          }\n        }\n      }\n      if (name === \".tool-versions\") {\n        const entry = original.match(/^\\s*bun\\s+(.+)$/);\n        if (entry !== null)\n          checkVersion(\n            file,\n            line,\n            scalar(entry[1] ?? \"\"),\n            \".tool-versions Bun version\",\n          );\n      }\n      if (mise) {\n        const heading = original.match(/^\\s*\\[([^\\]]+)\\]/);\n        if (heading !== null) section = heading[1] ?? \"\";\n        const checkMiseVersion = (value: string) => {\n          const inlineVersion = [\n            ...value.matchAll(\n              /[,{]\\s*([\\w-]+|\"[^\"]+\"|'[^']+')\\s*=\\s*(\"(?:\\\\.|[^\"\\\\])*\"|'[^']*'|[^,{}]+)\\s*(?=[,}])/g,\n            ),\n          ].find((field) => scalar(field[1] ?? \"\") === \"version\");\n          checkVersion(\n            file,\n            line,\n            scalar(inlineVersion?.[2] ?? value),\n            \"mise Bun version\",\n          );\n        };\n        const entry = original.match(/^\\s*[\"']?bun[\"']?\\s*=\\s*(.+)$/);\n        if (entry !== null && section === \"tools\")\n          checkMiseVersion(entry[1] ?? \"\");\n        const dotted = original.match(\n          /^\\s*tools\\.bun(?:\\.version)?\\s*=\\s*(.+)$/,\n        );\n        if (dotted !== null && section === \"\")\n          checkMiseVersion(dotted[1] ?? \"\");\n        const tableVersion = original.match(/^\\s*version\\s*=\\s*(.+)$/);\n        if (tableVersion !== null && section === \"tools.bun\")\n          checkMiseVersion(tableVersion[1] ?? \"\");\n        const inlineTools = original.match(/^\\s*tools\\s*=\\s*\\{(.*)\\}/);\n        if (inlineTools !== null && section === \"\") {\n          const inlineBun = inlineTools[1]?.match(\n            /(?:^|,)\\s*[\"']?bun[\"']?\\s*=\\s*(\\{[^}]*\\}|[^,}]+)/,\n          );\n          if (inlineBun !== null && inlineBun !== undefined)\n            checkMiseVersion(inlineBun[1] ?? \"\");\n        }\n      }\n    }\n  }\n  return diagnostics;\n};\n","#!/usr/bin/env node\nimport { readFileSync } from \"node:fs\";\n\nimport { checkToolchain } from \"./toolchain-check\";\n\ntry {\n  const allowNonBunPackageManagers: string[] = [];\n  const args = process.argv.slice(2);\n  for (let index = 0; index < args.length; index += 1) {\n    const argument = args[index];\n    if (argument === \"--help\") {\n      process.stdout.write(\n        \"Usage: stll-toolchain-check [--allow-non-bun-package-manager <tracked package.json path>]\\n\",\n      );\n      process.exit(0);\n    }\n    const value = args.at(index + 1);\n    if (\n      argument !== \"--allow-non-bun-package-manager\" ||\n      value === undefined ||\n      value.startsWith(\"--\")\n    ) {\n      throw new Error(`unexpected or incomplete argument: ${argument}`);\n    }\n    allowNonBunPackageManagers.push(value);\n    index += 1;\n  }\n  const toolchain: unknown = JSON.parse(\n    readFileSync(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n  );\n  if (\n    typeof toolchain !== \"object\" ||\n    toolchain === null ||\n    !(\"bun\" in toolchain) ||\n    typeof toolchain.bun !== \"string\"\n  ) {\n    throw new Error(\"installed toolchain.json must define a Bun version\");\n  }\n  const diagnostics = checkToolchain({\n    root: process.cwd(),\n    bunVersion: toolchain.bun,\n    allowNonBunPackageManagers,\n  });\n  for (const diagnostic of diagnostics)\n    process.stderr.write(\n      `${diagnostic.path}:${diagnostic.line}: ${diagnostic.message}\\n`,\n    );\n  if (diagnostics.length > 0) process.exitCode = 1;\n} catch (error) {\n  process.stderr.write(\n    `toolchain-check:1: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAM,YAAY,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,MAAM,UAAU,UACd,MACG,KAAK,CAAC,CACN,QAAQ,WAAW,EAAE,CAAC,CACtB,QAAQ,gBAAgB,EAAE;AAE/B,MAAM,eAAe,SACnB,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,MAAM,SAAS,SAAS,kBAAkB,SAAS,QAAQ;;AAG9E,MAAa,kBAAkB,EAC7B,MACA,YACA,6BAA6B,CAAC,QACoB;CAClD,MAAM,SAAA,GAAA,mBAAA,aAAA,CAAqB,OAAO;EAAC;EAAY;EAAM;CAAU,GAAG;EAChE,KAAK;EACL,UAAU;CACZ,CAAC,CAAC,CACC,MAAM,IAAI,CAAC,CACX,QAAQ,SAAS,SAAS,MAAM,YAAY,IAAI,CAAC;CACpD,MAAM,UAAU,IAAI,IAAI,KAAK;CAC7B,MAAM,cAAqC,CAAC;CAC5C,MAAM,OAAO,MAAc,MAAc,YAAoB;EAC3D,YAAY,KAAK;GAAE,MAAM;GAAM;GAAM;EAAQ,CAAC;CAChD;CACA,MAAM,QAAQ,SAAqC;EACjD,IAAI;GACF,QAAA,GAAA,QAAA,aAAA,CAAoBA,UAAAA,QAAK,KAAK,MAAM,IAAI,GAAG,MAAM;EACnD,QAAQ;GACN,IAAI,MAAM,GAAG,0BAA0B;GACvC;EACF;CACF;CACA,MAAM,gBACJ,MACA,MACA,OACA,UACG;EACH,IAAI,UAAU,YACZ,IAAI,MAAM,MAAM,GAAG,MAAM,WAAW,WAAW,UAAU,OAAO,KAAK,GAAG;CAE5E;CACA,MAAM,2BAAW,IAAI,IAGnB;CACF,KAAK,MAAM,QAAQ,MAAM,QACtB,UAAUA,UAAAA,QAAK,SAAS,KAAK,MAAM,cACtC,GAAG;EACD,MAAM,OAAO,KAAK,IAAI;EACtB,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI;EACJ,IAAI;GACF,OAAO,KAAK,MAAM,IAAI;EACxB,QAAQ;GACN,IAAI,MAAM,GAAG,sBAAsB;GACnC;EACF;EACA,IAAI,CAAC,SAAS,IAAI,GAAG;GACnB,IAAI,MAAM,GAAG,qCAAqC;GAClD;EACF;EACA,SAAS,IAAI,MAAM;GAAE,SAAS,KAAK;GAAmB;GAAM;EAAK,CAAC;CACpE;CACA,MAAM,iBAAiB,SACrB,SAAS,KAAK,aAAa,IAAI,KAAK,gBAAgB;CACtD,MAAM,eAAe,cAAc,SAAS,IAAI,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC;CAC3E,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,WAAW,UAAU;EAC7C,MAAM,QAAQ,KAAK,MAAM,OAAO;EAChC,MAAM,gCAAgB,IAAI,IAAoB;EAC9C,MAAM,gBAAgB,KAAa,UAAoB;GACrD,MAAM,aACJ,UAAU,KAAA,IAAY,KAAA,IAAY,KAAK,UAAU,KAAK;GACxD,MAAM,WAAW,GAAG,IAAI,GAAG,cAAc;GACzC,MAAM,WAAW,cAAc,IAAI,QAAQ,KAAK;GAChD,MAAM,QAAQ,MAAM,WACjB,MAAM,cACL,YAAY,YACZ,KAAK,SAAS,IAAI,IAAI,EAAE,MACvB,eAAe,KAAA,KAAa,KAAK,SAAS,UAAU,EACzD;GACA,IAAI,SAAS,GAAG,cAAc,IAAI,UAAU,KAAK;GACjD,OAAO,KAAK,IAAI,GAAG,QAAQ,CAAC;EAC9B;EACA,IAAI,KAAK,sBAAsB,KAAA,GAE3B;OAAA,OAAO,KAAK,sBAAsB,YAClC,KAAK,iBAAiB,CAAC,WAAW,MAAM,GAExC,aACE,MACA,aAAa,gBAAgB,GAC7B,KAAK,iBAAiB,CAAC,MAAM,CAAC,GAC9B,4BACF;QACK,IAAI,CAAC,2BAA2B,SAAS,IAAI,GAClD,IACE,MACA,aAAa,gBAAgB,GAC7B,2FACF;EAAA;EAGJ,MAAM,qBAAqB,OAAgB,iBAAiB,UAAU;GACpE,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,iBAAiB,KAAA,GAAW;GAC1D,MAAM,YAAY,MAAM;GACxB,MAAM,uBAAuB;IAC3B,IACE,CAAC,kBACD,OAAO,cAAc,YACrB,CAAC,UAAU,WAAW,UAAU,GAEhC,OAAO;IACT,MAAM,cAAc,UAAU,MAAM,CAAiB;IACrD,MAAM,SACJ,SAAS,iBAAiB,cAAc,IAAI,IAAI;IAClD,MAAM,UACJ,gBAAgB,KACZ,OAAO,aACP,SAAS,OAAO,WAAW,KAAK,OAAO,WAAW,CAAC;IACzD,OAAO,SAAS,OAAO,IAAI,QAAQ,eAAe,KAAA;GACpD;GACA,aACE,MACA,aAAa,aAAa,SAAS,GACnC,eAAe,GACf,WACF;EACF;EACA,kBAAkB,KAAK,iBAAiB,IAAI;EAC5C,kBAAkB,KAAK,oBAAoB,IAAI;EAC/C,kBAAkB,KAAK,UAAU;EACjC,IAAI,SAAS,KAAK,WAAW,GAC3B,KAAK,MAAM,WAAW,OAAO,OAAO,KAAK,WAAW,GAClD,kBAAkB,OAAO;EAE7B,IAAI,SAAS,KAAK,aAAa,GAAG;GAChC,kBAAkB,KAAK,aAAa,CAAC,UAAU;GAC/C,IAAI,SAAS,KAAK,aAAa,CAAC,WAAW,GACzC,KAAK,MAAM,WAAW,OAAO,OAAO,KAAK,aAAa,CAAC,WAAW,GAChE,kBAAkB,OAAO;EAE/B;CACF;CACA,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OAAOA,UAAAA,QAAK,SAAS,IAAI;EAC/B,MAAM,WACJ,sCAAsC,KAAK,IAAI,KAC/C,yCAAyC,KAAK,IAAI;EACpD,MAAM,aACJ,KAAK,WAAW,YAAY,KAAK,SAAS;EAC5C,MAAM,cAAc,SAAS,kBAAkB,SAAS;EACxD,MAAM,OAAO,SAAS,eAAe,SAAS;EAC9C,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,eAAe,CAAC,MAAM;EACvD,MAAM,OAAO,KAAK,IAAI;EACtB,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,SAAS,gBACX,aAAa,MAAM,GAAG,OAAO,IAAI,GAAG,cAAc;EACpD,IAAI,UAAU;EACd,KAAK,MAAM,CAAC,OAAO,aAAa,KAAK,MAAM,OAAO,CAAC,CAAC,QAAQ,GAAG;GAC7D,MAAM,OAAO,QAAQ;GACrB,IAAI,QAAQ,KAAK,QAAQ,KAAK,SAAS,KAAK,MAAM,IAAI;GACtD,IAAI,UAAU;IAIZ,IAHY,SAAS,MACnB,oDAEI,MAAM,MACV,IACE,MACA,MACA,6GACF;IACF,MAAM,YAAY,SAAS,MACzB,4FACF;IACA,IAAI,cAAc,MAAM;KACtB,MAAM,SAAS,OACb,UAAU,MAAM,UAAU,MAAM,UAAU,MAAM,EAClD;KACA,MAAM,aAAaA,UAAAA,QAAK,MAAM,UAAU,MAAM;KAC9C,MAAM,MAAM,SAAS,IAAI,UAAU;KACnC,IACE,WAAW,MACXA,UAAAA,QAAK,MAAM,WAAW,MAAM,KAC5B,WAAW,WAAW,KAAK,KAC3B,CAAC,QAAQ,IAAI,UAAU,KACvBA,UAAAA,QAAK,SAAS,UAAU,MAAM,kBAC9B,KAAK,YAAY,OAAO,cAExB,IACE,MACA,MACA,kFAAkF,WAAW,UAAU,QACzG;IAEJ;GACF;GACA,IAAI,YAAY;IACd,MAAM,QAAQ,SAAS,MACrB,oEACF;IACA,IAAI,UAAU,MAAM;KAClB,MAAM,MAAM,MAAM;KAClB,IAAI,QAAQ,KAAA,GAAW;MACrB,MAAM,UAAU,IAAI,MAAM,yBAAyB,CAAC,GAAG;MACvD,aAAa,MAAM,MAAM,WAAW,KAAK,kBAAkB;KAC7D,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,GACrC,IAAI,MAAM,MAAM,uBAAuB,WAAW,aAAa;IAEnE;GACF;GACA,IAAI,SAAS,kBAAkB;IAC7B,MAAM,QAAQ,SAAS,MAAM,iBAAiB;IAC9C,IAAI,UAAU,MACZ,aACE,MACA,MACA,OAAO,MAAM,MAAM,EAAE,GACrB,4BACF;GACJ;GACA,IAAI,MAAM;IACR,MAAM,UAAU,SAAS,MAAM,kBAAkB;IACjD,IAAI,YAAY,MAAM,UAAU,QAAQ,MAAM;IAC9C,MAAM,oBAAoB,UAAkB;KAC1C,MAAM,gBAAgB,CACpB,GAAG,MAAM,SACP,uFACF,CACF,CAAC,CAAC,MAAM,UAAU,OAAO,MAAM,MAAM,EAAE,MAAM,SAAS;KACtD,aACE,MACA,MACA,OAAO,gBAAgB,MAAM,KAAK,GAClC,kBACF;IACF;IACA,MAAM,QAAQ,SAAS,MAAM,+BAA+B;IAC5D,IAAI,UAAU,QAAQ,YAAY,SAChC,iBAAiB,MAAM,MAAM,EAAE;IACjC,MAAM,SAAS,SAAS,MACtB,0CACF;IACA,IAAI,WAAW,QAAQ,YAAY,IACjC,iBAAiB,OAAO,MAAM,EAAE;IAClC,MAAM,eAAe,SAAS,MAAM,yBAAyB;IAC7D,IAAI,iBAAiB,QAAQ,YAAY,aACvC,iBAAiB,aAAa,MAAM,EAAE;IACxC,MAAM,cAAc,SAAS,MAAM,0BAA0B;IAC7D,IAAI,gBAAgB,QAAQ,YAAY,IAAI;KAC1C,MAAM,YAAY,YAAY,EAAE,EAAE,MAChC,kDACF;KACA,IAAI,cAAc,QAAQ,cAAc,KAAA,GACtC,iBAAiB,UAAU,MAAM,EAAE;IACvC;GACF;EACF;CACF;CACA,OAAO;AACT;;;ACpRA,IAAI;CACF,MAAM,6BAAuC,CAAC;CAC9C,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;EACnD,MAAM,WAAW,KAAK;EACtB,IAAI,aAAa,UAAU;GACzB,QAAQ,OAAO,MACb,6FACF;GACA,QAAQ,KAAK,CAAC;EAChB;EACA,MAAM,QAAQ,KAAK,GAAG,QAAQ,CAAC;EAC/B,IACE,aAAa,qCACb,UAAU,KAAA,KACV,MAAM,WAAW,IAAI,GAErB,MAAM,IAAI,MAAM,sCAAsC,UAAU;EAElE,2BAA2B,KAAK,KAAK;EACrC,SAAS;CACX;CACA,MAAM,YAAqB,KAAK,OAAA,GAAA,QAAA,aAAA,CACjB,IAAI,IAAI,qBAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAoC,GAAG,MAAM,CACpE;CACA,IACE,OAAO,cAAc,YACrB,cAAc,QACd,EAAE,SAAS,cACX,OAAO,UAAU,QAAQ,UAEzB,MAAM,IAAI,MAAM,oDAAoD;CAEtE,MAAM,cAAc,eAAe;EACjC,MAAM,QAAQ,IAAI;EAClB,YAAY,UAAU;EACtB;CACF,CAAC;CACD,KAAK,MAAM,cAAc,aACvB,QAAQ,OAAO,MACb,GAAG,WAAW,KAAK,GAAG,WAAW,KAAK,IAAI,WAAW,QAAQ,GAC/D;CACF,IAAI,YAAY,SAAS,GAAG,QAAQ,WAAW;AACjD,SAAS,OAAO;CACd,QAAQ,OAAO,MACb,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAC/E;CACA,QAAQ,WAAW;AACrB"}
+{"version":3,"file":"toolchain-check-cli.cjs","names":["record","record","path","unexpected","LineCounter","record","path","LineCounter","record","path","LineCounter","record","path"],"sources":["../src/toolchain-container-inputs.ts","../src/toolchain-images.ts","../src/toolchain-inputs.ts","../src/toolchain-dependabot.ts","../src/toolchain-node.ts","../src/toolchain-packages.ts","../src/toolchain-runtime.ts","../src/toolchain-schema.ts","../src/toolchain-guard.ts","../src/toolchain-check-cli.ts"],"sourcesContent":["const record = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\n/** Filename class recognized by Dependabot's Docker Compose fetcher. */\nexport const isComposeDefinitionPath = (file: string) =>\n  /^\\.?(?:docker-)?compose(?:-[\\w]+)?(?:\\.[\\w-]+)?\\.ya?ml$/i.test(\n    file.split(\"/\").at(-1) ?? \"\",\n  );\n\n/** Candidate YAML files are classified by their document shape after reading. */\nexport const isKubernetesDefinitionPath = (file: string) =>\n  /^[^.].*\\.ya?ml$/i.test(file.split(\"/\").at(-1) ?? \"\");\n\ntype ContainerImage = { image: unknown; path: (string | number)[] };\ntype ContainerDocument = {\n  ecosystem: \"docker-compose\" | \"docker\";\n  images: ContainerImage[];\n};\n\nexport const kubernetesPodSpecPaths = {\n  Pod: [\"spec\"],\n  Deployment: [\"spec\", \"template\", \"spec\"],\n  DaemonSet: [\"spec\", \"template\", \"spec\"],\n  StatefulSet: [\"spec\", \"template\", \"spec\"],\n  ReplicaSet: [\"spec\", \"template\", \"spec\"],\n  ReplicationController: [\"spec\", \"template\", \"spec\"],\n  Job: [\"spec\", \"template\", \"spec\"],\n  CronJob: [\"spec\", \"jobTemplate\", \"spec\", \"template\", \"spec\"],\n} as const;\n\n/** Shared semantic image enumeration for runtime checks and update-root generation. */\nexport const containerDocumentImages = (\n  document: unknown,\n  file: string,\n): ContainerDocument | undefined => {\n  if (!record(document)) return undefined;\n  const services = document[\"services\"];\n  if (isComposeDefinitionPath(file) && record(services)) {\n    const images: ContainerImage[] = [];\n    for (const [name, service] of Object.entries(services)) {\n      if (record(service) && service[\"image\"] !== undefined)\n        images.push({\n          image: service[\"image\"],\n          path: [\"services\", name, \"image\"],\n        });\n    }\n    return { ecosystem: \"docker-compose\", images };\n  }\n  if (\n    typeof document[\"apiVersion\"] !== \"string\" ||\n    typeof document[\"kind\"] !== \"string\"\n  )\n    return undefined;\n  const images: ContainerImage[] = [];\n  const visited = new Set<Record<string, unknown>>();\n  const walkResource = (\n    resource: Record<string, unknown>,\n    prefix: (string | number)[],\n  ) => {\n    if (visited.has(resource)) return;\n    visited.add(resource);\n    if (\n      typeof resource[\"apiVersion\"] !== \"string\" ||\n      typeof resource[\"kind\"] !== \"string\"\n    )\n      return;\n    if (resource[\"kind\"] === \"List\" && Array.isArray(resource[\"items\"])) {\n      for (const [index, item] of resource[\"items\"].entries())\n        if (record(item)) walkResource(item, [...prefix, \"items\", index]);\n      return;\n    }\n    const specPath = Object.entries(kubernetesPodSpecPaths).find(\n      ([kind]) => kind === resource[\"kind\"],\n    )?.[1];\n    if (specPath === undefined) return;\n    let spec: unknown = resource;\n    for (const key of specPath) spec = record(spec) ? spec[key] : undefined;\n    if (!record(spec)) return;\n    for (const key of [\"containers\", \"initContainers\", \"ephemeralContainers\"]) {\n      const containers = spec[key];\n      if (!Array.isArray(containers)) continue;\n      for (const [index, container] of containers.entries()) {\n        if (record(container) && container[\"image\"] !== undefined)\n          images.push({\n            image: container[\"image\"],\n            path: [...prefix, ...specPath, key, index, \"image\"],\n          });\n      }\n    }\n  };\n  walkResource(document, []);\n  return images.length === 0 ? undefined : { ecosystem: \"docker\", images };\n};\n","/** Docker Hub spellings accepted by the shared runtime policy. */\nexport const dockerHubRegistries = [\n  \"docker.io\",\n  \"index.docker.io\",\n  \"registry-1.docker.io\",\n] as const;\n\n/** Expand the full accepted repository alias class without parsing Dockerfile instructions. */\nexport const ownedDockerImageAliases = (images: readonly string[]) => {\n  const aliases = new Set<string>();\n  for (const image of images) {\n    for (const repository of [image, `library/${image}`]) {\n      aliases.add(repository);\n      for (const registry of dockerHubRegistries)\n        aliases.add(`${registry}/${repository}`);\n    }\n  }\n  return [...aliases].sort();\n};\n\n/** Preserve tag/digest spelling while normalizing registry and namespace aliases. */\nexport const canonicalDockerRuntime = (image: string) => {\n  const registry = dockerHubRegistries.find((entry) =>\n    image.toLowerCase().startsWith(`${entry}/`),\n  );\n  const repository =\n    registry === undefined ? image : image.slice(registry.length + 1);\n  return repository.replace(/^library\\//i, \"\");\n};\n","import {\n  isComposeDefinitionPath,\n  isKubernetesDefinitionPath,\n} from \"./toolchain-container-inputs\";\n\nconst excludedInputPath = (file: string) =>\n  file === \"\" ||\n  file.split(\"/\").some((part) => part === \"node_modules\" || part === \"vendor\");\n\n/** Match project, environment, local, and fragment filenames recognized by mise. */\nexport const isMiseConfigPath = (file: string) =>\n  !excludedInputPath(file) &&\n  (/(?:^|\\/)\\.?mise(?:\\.[^./][^/]*)?\\.toml$/.test(file) ||\n    /(?:^|\\/)(?:\\.?mise|\\.config\\/mise)\\/config(?:\\.[^./][^/]*)?\\.toml$/.test(\n      file,\n    ) ||\n    /(?:^|\\/)(?:\\.?mise|\\.config\\/mise)\\/conf\\.d\\/[^./][^/]*\\.toml$/.test(\n      file,\n    ));\n\n/** GitHub action metadata may live at the repository root or in any directory. */\nexport const githubAutomationFileKind = (file: string) => {\n  if (file === \"\") return undefined;\n  if (/^\\.github\\/workflows\\/[^/]+\\.ya?ml$/.test(file)) return \"workflow\";\n  if (/(?:^|\\/)action\\.ya?ml$/.test(file)) return \"action\";\n  return undefined;\n};\n\n/** Dependabot updates workflows and repository-root action metadata. */\nexport const isDependabotGithubActionsPath = (file: string) => {\n  const kind = githubAutomationFileKind(file);\n  return kind === \"workflow\" || (kind === \"action\" && !file.includes(\"/\"));\n};\n\n/** Use one filename discriminator for reader selection and Python ecosystem decisions. */\nexport const pythonDependencyManifestKind = (file: string) => {\n  if (excludedInputPath(file)) return undefined;\n  const name = file.split(\"/\").at(-1);\n  if (name === \"pyproject.toml\") return \"project\";\n  if (name === \"Pipfile\") return \"pipfile\";\n  if (name === \"Pipfile.lock\") return \"pipfile-lock\";\n  if (name === \"setup.py\" || name === \"setup.cfg\") return \"setup\";\n  if (name !== undefined && /^requirements[^/]*\\.(?:txt|in)$/.test(name))\n    return \"requirements\";\n  return undefined;\n};\n\nexport const isPythonDependencyManifest = (file: string) =>\n  pythonDependencyManifestKind(file) !== undefined;\n\n/** Docker definition names use dot-delimited variants, excluding source and documentation. */\nexport const isDockerDefinitionPath = (file: string) => {\n  if (excludedInputPath(file)) return false;\n  const name = file.split(\"/\").at(-1) ?? \"\";\n  if (\n    /\\.(?:[cm]?[jt]sx?|mdx?|rst|txt|html?|py|rs|go|java|sh|c|cc|cpp|cxx|h|hpp|cs|rb|php|swift|kt|css|scss)$/i.test(\n      name,\n    )\n  )\n    return false;\n  return /^(?:[^./]+\\.)*(?:dockerfile|containerfile)(?:\\.[^./]+)*$/i.test(name);\n};\n\n/** Lockfiles establish ecosystem presence without reading their dependency graphs. */\nexport const toolchainInputKind = (file: string) => {\n  if (githubAutomationFileKind(file) !== undefined) return \"config\";\n  if (excludedInputPath(file)) return undefined;\n  if (\n    pythonDependencyManifestKind(file) === \"pipfile-lock\" ||\n    /(?:^|\\/)(?:bun\\.lock|uv\\.lock)$/.test(file)\n  )\n    return \"presence\";\n  if (\n    githubAutomationFileKind(file) !== undefined ||\n    isMiseConfigPath(file) ||\n    isPythonDependencyManifest(file) ||\n    isDockerDefinitionPath(file) ||\n    isComposeDefinitionPath(file) ||\n    isKubernetesDefinitionPath(file) ||\n    /(?:^|\\/)(?:package\\.json|pnpm-workspace\\.yaml|stll-toolchain\\.json|\\.bun-version|\\.node-version|\\.nvmrc|\\.python-version|rust-toolchain(?:\\.toml)?|\\.tool-versions|\\.?mise\\.toml|uv\\.toml|\\.uv\\.toml|\\.github\\/dependabot\\.ya?ml|Cargo\\.toml)$/.test(\n      file,\n    )\n  )\n    return \"config\";\n  return undefined;\n};\n","import path from \"node:path\";\nimport picomatch from \"picomatch\";\nimport { parse as parseToml } from \"smol-toml\";\nimport {\n  isNode,\n  LineCounter,\n  parseAllDocuments,\n  parseDocument,\n  Scalar,\n  stringify,\n} from \"yaml\";\n\nimport {\n  containerDocumentImages,\n  isComposeDefinitionPath,\n  isKubernetesDefinitionPath,\n} from \"./toolchain-container-inputs\";\nimport { ownedDockerImageAliases } from \"./toolchain-images\";\nimport {\n  isDependabotGithubActionsPath,\n  isDockerDefinitionPath,\n  pythonDependencyManifestKind,\n  isPythonDependencyManifest,\n} from \"./toolchain-inputs\";\n\nexport const dependabotRules = [\"dependabot-policy\"] as const;\n\ntype DependabotPolicy = {\n  schedule: { interval: string; day: string; time: string; timezone: string };\n  cooldown: { defaultDays: number };\n  groups: Record<\n    string,\n    { patterns: readonly string[]; updateTypes: readonly string[] }\n  >;\n  ignoredPackages: readonly string[];\n  ignoredActions: readonly string[];\n  ignoredImages: readonly string[];\n};\n\ntype Diagnostic = {\n  rule: (typeof dependabotRules)[number];\n  path: string;\n  line: number;\n  message: string;\n};\n\nconst record = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst strings = (value: unknown): value is string[] =>\n  Array.isArray(value) &&\n  value.every((entry: unknown) => typeof entry === \"string\");\n\nconst sameStrings = (value: unknown, expected: readonly string[]) => {\n  if (!strings(value) || value.length !== expected.length) return false;\n  const sortedExpected = [...expected].sort();\n  return [...value]\n    .sort()\n    .every((entry, index) => entry === sortedExpected[index]);\n};\n\nconst directoryOf = (file: string) => {\n  const directory = path.posix.dirname(file);\n  return directory === \".\" ? \"/\" : `/${directory}`;\n};\n\nconst workspaceManifests = {\n  npm: \"package.json\",\n  cargo: \"Cargo.toml\",\n  uv: \"pyproject.toml\",\n} as const;\n\nconst workspaceTable = (\n  parsed: Record<string, unknown>,\n  ecosystem: keyof typeof workspaceManifests,\n) => {\n  switch (ecosystem) {\n    case \"npm\":\n      return parsed[\"workspaces\"];\n    case \"cargo\":\n      return parsed[\"workspace\"];\n    case \"uv\": {\n      const tool = parsed[\"tool\"];\n      const uv = record(tool) ? tool[\"uv\"] : undefined;\n      return record(uv) ? uv[\"workspace\"] : undefined;\n    }\n    default: {\n      const unexpected: never = ecosystem;\n      throw new Error(\"unknown workspace ecosystem\", { cause: unexpected });\n    }\n  }\n};\n\n/** Workspace members share their update root; independent manifests keep their own. */\nconst workspaceRoots = (\n  files: Record<string, string>,\n  ecosystem: keyof typeof workspaceManifests,\n) => {\n  const manifests = Object.keys(files).filter(\n    (file) =>\n      path.posix.basename(file) === workspaceManifests[ecosystem] ||\n      (ecosystem === \"npm\" &&\n        path.posix.basename(file) === \"pnpm-workspace.yaml\"),\n  );\n  const workspaces = new Map<string, string[]>();\n  for (const file of manifests) {\n    if (ecosystem === \"npm\") {\n      const directory = path.posix.dirname(file);\n      const workspaceFile = path.posix.join(directory, \"pnpm-workspace.yaml\");\n      const text = files[workspaceFile];\n      if (text !== undefined) {\n        const document = parseDocument(text);\n        if (document.errors.length > 0)\n          throw new Error(`${workspaceFile}:1: invalid pnpm workspace YAML`);\n        const parsed: unknown = document.toJS({ maxAliasCount: 100 });\n        if (!record(parsed))\n          throw new Error(\n            `${workspaceFile}:1: pnpm workspace must contain an object`,\n          );\n        const patterns = parsed[\"packages\"] ?? [];\n        if (!strings(patterns))\n          throw new Error(\n            `${workspaceFile}:1: pnpm packages must be a string array`,\n          );\n        workspaces.set(\n          directory,\n          patterns.map((pattern) =>\n            pattern.startsWith(\"!\")\n              ? `!${path.posix.normalize(pattern.slice(1))}`\n              : path.posix.normalize(pattern),\n          ),\n        );\n        continue;\n      }\n    }\n    try {\n      const parsed: unknown =\n        ecosystem === \"npm\"\n          ? JSON.parse(files[file] ?? \"\")\n          : parseToml(files[file] ?? \"\");\n      if (!record(parsed)) continue;\n      if (\n        ecosystem === \"npm\" &&\n        typeof parsed[\"packageManager\"] === \"string\" &&\n        parsed[\"packageManager\"].startsWith(\"pnpm@\")\n      )\n        continue;\n      const value = workspaceTable(parsed, ecosystem);\n      const patterns = record(value)\n        ? value[ecosystem === \"npm\" ? \"packages\" : \"members\"]\n        : value;\n      const members =\n        ecosystem === \"cargo\" && record(value) && patterns === undefined\n          ? []\n          : patterns;\n      if (strings(members)) {\n        const excluded =\n          ecosystem !== \"npm\" && record(value) && strings(value[\"exclude\"])\n            ? value[\"exclude\"].map((pattern) => `!${pattern}`)\n            : [];\n        workspaces.set(path.posix.dirname(file), [...members, ...excluded]);\n      }\n    } catch {\n      // Other toolchain rules validate manifests; retain the update root here.\n    }\n  }\n  const implicitCargoMembers = new Map<string, Set<string>>();\n  if (ecosystem === \"cargo\") {\n    for (const [root, patterns] of workspaces) {\n      const includes = patterns.filter((pattern) => !pattern.startsWith(\"!\"));\n      const excludes = patterns.filter((pattern) => pattern.startsWith(\"!\"));\n      const memberDirectories = new Set([root]);\n      for (const file of manifests) {\n        const directory = path.posix.dirname(file);\n        const relative = path.posix.relative(root, directory);\n        if (\n          includes.some((pattern) => picomatch.isMatch(relative, pattern)) &&\n          !excludes.some((pattern) =>\n            picomatch.isMatch(relative, pattern.slice(1)),\n          )\n        )\n          memberDirectories.add(directory);\n      }\n      for (const directory of memberDirectories) {\n        try {\n          const parsed = parseToml(\n            files[path.posix.join(directory, \"Cargo.toml\")] ?? \"\",\n          );\n          const rootParsed = parseToml(\n            files[path.posix.join(root, \"Cargo.toml\")] ?? \"\",\n          );\n          const workspace = rootParsed[\"workspace\"];\n          const inherited = record(workspace)\n            ? workspace[\"dependencies\"]\n            : undefined;\n          const dependencyOwners = [parsed];\n          const targets = parsed[\"target\"];\n          if (record(targets)) {\n            for (const target of Object.values(targets))\n              if (record(target)) dependencyOwners.push(target);\n          }\n          for (const owner of dependencyOwners) {\n            for (const key of [\n              \"dependencies\",\n              \"dev-dependencies\",\n              \"build-dependencies\",\n            ]) {\n              const dependencies = owner[key];\n              if (!record(dependencies)) continue;\n              for (const [name, dependency] of Object.entries(dependencies)) {\n                if (!record(dependency)) continue;\n                const isInherited = dependency[\"workspace\"] === true;\n                const resolved =\n                  isInherited && record(inherited)\n                    ? inherited[name]\n                    : dependency;\n                if (!record(resolved) || typeof resolved[\"path\"] !== \"string\")\n                  continue;\n                if (\n                  path.posix.isAbsolute(resolved[\"path\"]) ||\n                  /\\\\|\\$|^[A-Za-z]:/.test(resolved[\"path\"])\n                )\n                  continue;\n                const target = path.posix.normalize(\n                  path.posix.join(\n                    isInherited ? root : directory,\n                    resolved[\"path\"],\n                  ),\n                );\n                const relative = path.posix.relative(root, target);\n                if (\n                  relative.startsWith(\"../\") ||\n                  relative === \"..\" ||\n                  files[path.posix.join(target, \"Cargo.toml\")] === undefined ||\n                  excludes.some((pattern) =>\n                    picomatch.isMatch(relative, pattern.slice(1)),\n                  )\n                )\n                  continue;\n                memberDirectories.add(target);\n              }\n            }\n          }\n        } catch {\n          // Manifest validation diagnoses malformed TOML independently.\n        }\n      }\n      implicitCargoMembers.set(root, memberDirectories);\n    }\n  }\n  return manifests\n    .filter((file) => {\n      const directory = path.posix.dirname(file);\n      return ![...workspaces].some(([root, patterns]) => {\n        const relative = path.posix.relative(root, directory);\n        if (relative === \"\" || relative.startsWith(\"../\")) return false;\n        const includes = patterns.filter((pattern) => !pattern.startsWith(\"!\"));\n        const excludes = patterns.filter((pattern) => pattern.startsWith(\"!\"));\n        return (\n          (implicitCargoMembers.get(root)?.has(directory) === true ||\n            includes.some((pattern) => picomatch.isMatch(relative, pattern))) &&\n          !excludes.some((pattern) =>\n            picomatch.isMatch(relative, pattern.slice(1)),\n          )\n        );\n      });\n    })\n    .map(directoryOf)\n    .filter((directory, index, values) => values.indexOf(directory) === index);\n};\n\ntype CheckDependabotOptions = {\n  files: Record<string, string>;\n  policy: DependabotPolicy;\n};\n\nconst javascriptEcosystem = (\n  directory: string,\n  files: Record<string, string>,\n) => {\n  const root = directory === \"/\" ? \".\" : directory.slice(1);\n  if (files[path.posix.join(root, \"bun.lock\")] !== undefined) return \"bun\";\n  try {\n    const manifest: unknown = JSON.parse(\n      files[path.posix.join(root, \"package.json\")] ?? \"{}\",\n    );\n    if (\n      record(manifest) &&\n      typeof manifest[\"packageManager\"] === \"string\" &&\n      manifest[\"packageManager\"].startsWith(\"bun@\")\n    )\n      return \"bun\";\n  } catch {\n    // Package rules diagnose malformed JSON; the root still needs update coverage.\n  }\n  return \"npm\";\n};\n\nconst pythonEcosystem = (file: string, files: Record<string, string>) => {\n  const manifestKind = pythonDependencyManifestKind(file);\n  if (\n    manifestKind === \"pipfile\" ||\n    manifestKind === \"pipfile-lock\" ||\n    manifestKind === \"setup\"\n  )\n    return \"pip\";\n  const root = path.posix.dirname(file);\n  if (\n    files[path.posix.join(root, \"uv.lock\")] !== undefined ||\n    files[path.posix.join(root, \"uv.toml\")] !== undefined\n  )\n    return \"uv\";\n  const pyproject = files[path.posix.join(root, \"pyproject.toml\")];\n  if (pyproject !== undefined) {\n    try {\n      const parsed = parseToml(pyproject);\n      const tool = parsed[\"tool\"];\n      if (record(tool) && record(tool[\"uv\"])) return \"uv\";\n    } catch {\n      // Runtime rules diagnose malformed TOML; retain its update coverage.\n    }\n  }\n  return \"pip\";\n};\n\nconst ecosystemRoots = (files: Record<string, string>) => {\n  const roots = new Map<string, Set<string>>();\n  const requireRoot = (ecosystem: string, directory: string) => {\n    const directories = roots.get(ecosystem) ?? new Set<string>();\n    directories.add(directory);\n    roots.set(ecosystem, directories);\n  };\n  for (const directory of workspaceRoots(files, \"npm\"))\n    requireRoot(javascriptEcosystem(directory, files), directory);\n  for (const directory of workspaceRoots(files, \"cargo\"))\n    requireRoot(\"cargo\", directory);\n  for (const directory of workspaceRoots(files, \"uv\")) {\n    const root = directory === \"/\" ? \".\" : directory.slice(1);\n    requireRoot(\n      pythonEcosystem(path.posix.join(root, \"pyproject.toml\"), files),\n      directory,\n    );\n  }\n  for (const file of Object.keys(files)) {\n    if (isDependabotGithubActionsPath(file)) requireRoot(\"github-actions\", \"/\");\n    const name = path.posix.basename(file);\n    if (isDockerDefinitionPath(file)) requireRoot(\"docker\", directoryOf(file));\n    if (isComposeDefinitionPath(file) || isKubernetesDefinitionPath(file)) {\n      for (const document of parseAllDocuments(files[file] ?? \"\", {\n        merge: true,\n      })) {\n        if (document.errors.length > 0) continue;\n        try {\n          const classified = containerDocumentImages(\n            document.toJS({ maxAliasCount: 100 }),\n            file,\n          );\n          if (classified !== undefined)\n            requireRoot(classified.ecosystem, directoryOf(file));\n        } catch {\n          // Runtime validation reports malformed or excessive YAML aliases.\n        }\n      }\n    }\n    if (\n      name === \"uv.lock\" ||\n      name === \"uv.toml\" ||\n      (name !== \"pyproject.toml\" && isPythonDependencyManifest(file))\n    )\n      requireRoot(pythonEcosystem(file, files), directoryOf(file));\n  }\n  return roots;\n};\n\nconst ignoredFor = (ecosystem: string, policy: DependabotPolicy) => {\n  if (ecosystem === \"npm\" || ecosystem === \"bun\") return policy.ignoredPackages;\n  if (ecosystem === \"github-actions\") return policy.ignoredActions;\n  if (ecosystem === \"docker\" || ecosystem === \"docker-compose\")\n    return ownedDockerImageAliases(policy.ignoredImages);\n  return [];\n};\n\n/** Generate canonical YAML from the same ecosystem enumeration used by the guard. */\nexport const generateDependabotConfig = ({\n  files,\n  policy,\n}: CheckDependabotOptions) => {\n  const updates = [...ecosystemRoots(files)]\n    .sort(([left], [right]) => left.localeCompare(right))\n    .map(([ecosystem, roots]) => {\n      const directories = [...roots].sort();\n      const ignored = ignoredFor(ecosystem, policy);\n      const time = new Scalar(policy.schedule.time);\n      time.type = Scalar.QUOTE_DOUBLE;\n      return {\n        \"package-ecosystem\": ecosystem,\n        directory: directories.length === 1 ? directories.at(0) : undefined,\n        directories: directories.length > 1 ? directories : undefined,\n        schedule: {\n          interval: policy.schedule.interval,\n          day: policy.schedule.day,\n          time,\n          timezone: policy.schedule.timezone,\n        },\n        cooldown: { \"default-days\": policy.cooldown.defaultDays },\n        groups: Object.fromEntries(\n          Object.entries(policy.groups).map(([name, group]) => [\n            name,\n            { patterns: group.patterns, \"update-types\": group.updateTypes },\n          ]),\n        ),\n        ignore:\n          ignored.length > 0\n            ? ignored.map((name) => ({ \"dependency-name\": name }))\n            : undefined,\n      };\n    });\n  return stringify({ version: 2, updates }, { aliasDuplicateObjects: false });\n};\n\n/** Validate the shared update policy against a hermetic tracked-file snapshot. */\nexport const checkDependabot = ({\n  files,\n  policy,\n}: CheckDependabotOptions): Diagnostic[] => {\n  const roots = ecosystemRoots(files);\n  const paths = [\".github/dependabot.yml\", \".github/dependabot.yaml\"].filter(\n    (file) => files[file] !== undefined,\n  );\n  if (roots.size === 0 && paths.length === 0) return [];\n  const file = paths.at(0) ?? \".github/dependabot.yml\";\n  const diagnostics: Diagnostic[] = [];\n  const add = (message: string, line = 1) => {\n    diagnostics.push({ rule: \"dependabot-policy\", path: file, line, message });\n  };\n  if (paths.length === 0) {\n    add(\n      \"add a Dependabot configuration for the repository's package ecosystems\",\n    );\n    return diagnostics;\n  }\n  if (paths.length > 1) add(\"keep one Dependabot configuration file\");\n  const lineCounter = new LineCounter();\n  const document = parseDocument(files[file] ?? \"\", {\n    lineCounter,\n  });\n  if (document.errors.length > 0) {\n    for (const error of document.errors)\n      add(\n        `invalid Dependabot YAML: ${error.message}`,\n        lineCounter.linePos(error.pos[0]).line,\n      );\n    return diagnostics;\n  }\n  let parsed: unknown;\n  try {\n    parsed = document.toJS({ maxAliasCount: 100 });\n  } catch {\n    add(\"cannot resolve Dependabot YAML aliases\");\n    return diagnostics;\n  }\n  if (\n    !record(parsed) ||\n    parsed[\"version\"] !== 2 ||\n    !Array.isArray(parsed[\"updates\"])\n  ) {\n    add(\"Dependabot must declare version: 2 and an updates array\");\n    return diagnostics;\n  }\n  const covered = new Map<string, Set<string>>();\n  let legacy: unknown;\n  try {\n    const legacyDocument = parseDocument(files[file] ?? \"\", {\n      version: \"1.1\",\n      schema: \"yaml-1.1\",\n    });\n    if (legacyDocument.errors.length === 0)\n      legacy = legacyDocument.toJS({ maxAliasCount: 100 });\n  } catch {\n    // The canonical parser reports invalid aliases; incompatible times fail below.\n  }\n  const legacyUpdates =\n    record(legacy) && Array.isArray(legacy[\"updates\"]) ? legacy[\"updates\"] : [];\n  const rootClaims = new Map<string, Map<string, number>>();\n  const directoryClaims = new Map<string, Map<string, number>>();\n  for (const [index, update] of parsed[\"updates\"].entries()) {\n    const lineOf = (key: string) => {\n      const node: unknown = document.getIn([\"updates\", index, key], true);\n      const offset = isNode(node) ? node.range?.[0] : undefined;\n      return offset === undefined ? 1 : lineCounter.linePos(offset).line;\n    };\n    const report = (key: string, message: string) => add(message, lineOf(key));\n    if (!record(update) || typeof update[\"package-ecosystem\"] !== \"string\") {\n      report(\n        \"package-ecosystem\",\n        \"each Dependabot update must declare a package ecosystem\",\n      );\n      continue;\n    }\n    const ecosystem = update[\"package-ecosystem\"];\n    if (update[\"target-branch\"] !== undefined)\n      report(\n        \"target-branch\",\n        `${ecosystem}: shared updates must target the default branch`,\n      );\n    if (update[\"open-pull-requests-limit\"] === 0)\n      report(\n        \"open-pull-requests-limit\",\n        `${ecosystem}: version updates must remain enabled`,\n      );\n    const single = update[\"directory\"];\n    const multiple = update[\"directories\"];\n    let directories: string[] = [];\n    if (typeof single === \"string\" && multiple === undefined)\n      directories = [single];\n    else if (single === undefined && strings(multiple)) directories = multiple;\n    const validDirectories = directories.filter(\n      (directory) =>\n        directory.startsWith(\"/\") && !directory.split(\"/\").includes(\"..\"),\n    );\n    if (\n      directories.length === 0 ||\n      validDirectories.length !== directories.length\n    ) {\n      report(\n        \"directory\",\n        `${ecosystem}: declare directory or nonempty directories with absolute repository paths`,\n      );\n    }\n    const normalizedDirectories = Array.from(\n      new Set(\n        validDirectories.map(\n          (value) => path.posix.normalize(value).replace(/\\/+$/, \"\") || \"/\",\n        ),\n      ),\n    );\n    const matches = covered.get(ecosystem) ?? new Set<string>();\n    const claimedDirectories =\n      directoryClaims.get(ecosystem) ?? new Map<string, number>();\n    for (const directory of normalizedDirectories) {\n      const previous = claimedDirectories.get(directory);\n      if (previous !== undefined)\n        report(\n          multiple === undefined ? \"directory\" : \"directories\",\n          `${ecosystem}: directory ${directory} overlaps update entry ${previous + 1}`,\n        );\n      else claimedDirectories.set(directory, index);\n    }\n    directoryClaims.set(ecosystem, claimedDirectories);\n    const claimedRoots = rootClaims.get(ecosystem) ?? new Map<string, number>();\n    for (const root of roots.get(ecosystem) ?? []) {\n      if (\n        normalizedDirectories.some(\n          (directory) =>\n            directory === root ||\n            (multiple !== undefined && picomatch.isMatch(root, directory)),\n        )\n      ) {\n        const previous = claimedRoots.get(root);\n        if (previous !== undefined)\n          report(\n            multiple === undefined ? \"directory\" : \"directories\",\n            `${ecosystem}: update root ${root} overlaps update entry ${previous + 1}`,\n          );\n        else claimedRoots.set(root, index);\n        matches.add(root);\n      }\n    }\n    rootClaims.set(ecosystem, claimedRoots);\n    covered.set(ecosystem, matches);\n    const schedule = update[\"schedule\"];\n    const legacyUpdate: unknown = legacyUpdates.at(index);\n    const legacySchedule = record(legacyUpdate)\n      ? legacyUpdate[\"schedule\"]\n      : undefined;\n    if (\n      record(schedule) &&\n      schedule[\"time\"] === policy.schedule.time &&\n      (!record(legacySchedule) ||\n        legacySchedule[\"time\"] !== policy.schedule.time)\n    )\n      report(\n        \"schedule\",\n        `${ecosystem}: quote schedule time to preserve its string value in YAML 1.1`,\n      );\n    if (\n      !record(schedule) ||\n      Object.keys(schedule).length !== Object.keys(policy.schedule).length ||\n      Object.entries(policy.schedule).some(\n        ([key, value]) => schedule[key] !== value,\n      )\n    )\n      report(\"schedule\", `${ecosystem}: schedule must match the shared policy`);\n    const cooldown = update[\"cooldown\"];\n    if (\n      !record(cooldown) ||\n      Object.keys(cooldown).length !== 1 ||\n      cooldown[\"default-days\"] !== policy.cooldown.defaultDays\n    )\n      report(\n        \"cooldown\",\n        `${ecosystem}: cooldown must contain only default-days: ${policy.cooldown.defaultDays}`,\n      );\n    const groups = update[\"groups\"];\n    if (\n      !record(groups) ||\n      Object.keys(groups).length !== Object.keys(policy.groups).length ||\n      Object.entries(policy.groups).some(([name, expected]) => {\n        const group = groups[name];\n        return (\n          !record(group) ||\n          Object.keys(group).length !== 2 ||\n          !sameStrings(group[\"patterns\"], expected.patterns) ||\n          !sameStrings(group[\"update-types\"], expected.updateTypes)\n        );\n      })\n    )\n      report(\"groups\", `${ecosystem}: groups must match the shared policy`);\n    const ignored = ignoredFor(ecosystem, policy);\n    const ignore = update[\"ignore\"];\n    if (ignore !== undefined && (!Array.isArray(ignore) || ignore.length === 0))\n      report(\"ignore\", `${ecosystem}: omit ignore or provide a nonempty array`);\n    if (\n      Array.isArray(ignore) &&\n      ignore.some(\n        (entry: unknown) =>\n          !record(entry) ||\n          typeof entry[\"dependency-name\"] !== \"string\" ||\n          !ignored.includes(entry[\"dependency-name\"]),\n      )\n    )\n      report(\n        \"ignore\",\n        `${ecosystem}: ignore only packages owned by the shared policy`,\n      );\n    for (const name of ignored) {\n      if (\n        !Array.isArray(ignore) ||\n        !ignore.some(\n          (entry: unknown) =>\n            record(entry) &&\n            entry[\"dependency-name\"] === name &&\n            Object.keys(entry).length === 1,\n        )\n      )\n        report(\n          \"ignore\",\n          `${ecosystem}: ignore all updates for shared pin ${name}`,\n        );\n    }\n  }\n  for (const [ecosystem, directories] of roots) {\n    for (const directory of directories) {\n      if (!covered.get(ecosystem)?.has(directory))\n        add(`add a ${ecosystem} update entry covering ${directory}`);\n    }\n  }\n  return diagnostics;\n};\n","import { subset, validRange } from \"semver\";\n\nconst numericComponent = \"(?:0|[1-9]\\\\d*)\";\nconst policyPattern = new RegExp(`^${numericComponent}\\\\.x$`);\nconst selectorPattern = new RegExp(\n  `^(${numericComponent})(?:\\\\.(?:x|${numericComponent}(?:\\\\.${numericComponent})?))?$`,\n);\n\n/** A Node policy selects the complete stable release series of one major. */\nexport const nodePolicyValid = (value: string) =>\n  policyPattern.test(value) && validRange(value) !== null;\n\n/** Static selectors may narrow that series, but cannot float across majors. */\nexport const nodeSelectorMatches = (value: unknown, policy: string) => {\n  if (!nodePolicyValid(policy) || typeof value !== \"string\") return false;\n  const major = selectorPattern.exec(value)?.[1];\n  return (\n    major !== undefined &&\n    major === policy.slice(0, -2) &&\n    validRange(value) !== null\n  );\n};\n\n/** Engines must support every stable release in the approved major series. */\nexport const nodeSupportRangeMatches = (policy: string, range: string) => {\n  if (!nodePolicyValid(policy)) return false;\n  try {\n    return subset(policy, range);\n  } catch {\n    return false;\n  }\n};\n","import path from \"node:path\";\nimport picomatch from \"picomatch\";\nimport { satisfies, valid, validRange } from \"semver\";\nimport { isNode, LineCounter, parseDocument } from \"yaml\";\n\nimport { nodeSupportRangeMatches } from \"./toolchain-node\";\n\nexport const packageRules = [\n  \"bun-pins\",\n  \"package-pins\",\n  \"typescript-layout\",\n  \"node-engine\",\n] as const;\n\ntype Layout =\n  | {\n      type: \"direct\";\n      compilerPackage: string;\n      compilerSpecifier: string;\n      typecheckCommand: string;\n    }\n  | {\n      type: \"split-compatibility\";\n      compilerPackage: string;\n      compilerSpecifier: string;\n      compatibilityPackage: string;\n      compatibilitySpecifier: string;\n      typecheckCommand: string;\n    };\n\ntype PackagePolicy = {\n  bun: string;\n  packages: Record<string, string>;\n  typescriptInstallLayouts: readonly Layout[];\n  typescript6Compatibility: { version: string; packageAlias: string };\n  node: string;\n};\n\ntype Diagnostic = {\n  rule: (typeof packageRules)[number];\n  path: string;\n  line: number;\n  message: string;\n};\n\nconst record = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\n// Inspect explicit substitution bodies without evaluating shell expressions.\nconst shellSubstitutions = (command: string) => {\n  type Frame = {\n    kind: \"root\" | \"parentheses\" | \"backticks\";\n    start: number;\n    depth: number;\n    quote: \"'\" | '\"' | undefined;\n  };\n  const frames: Frame[] = [\n    { kind: \"root\", start: 0, depth: 0, quote: undefined },\n  ];\n  const bodies: string[] = [];\n  for (let index = 0; index < command.length; index += 1) {\n    const frame = frames.at(-1);\n    if (frame === undefined) break;\n    const character = command.at(index);\n    if (character === \"\\\\\" && frame.quote !== \"'\") {\n      index += 1;\n      continue;\n    }\n    if (character === \"`\" && frame.kind === \"backticks\") {\n      bodies.push(command.slice(frame.start, index));\n      frames.pop();\n      continue;\n    }\n    if (character === frame.quote) {\n      frame.quote = undefined;\n      continue;\n    }\n    if (frame.quote === \"'\") continue;\n    if (character === \"$\" && command.at(index + 1) === \"(\") {\n      frames.push({\n        kind: \"parentheses\",\n        start: index + 2,\n        depth: 1,\n        quote: undefined,\n      });\n      index += 1;\n      continue;\n    }\n    if (character === \"`\") {\n      frames.push({\n        kind: \"backticks\",\n        start: index + 1,\n        depth: 0,\n        quote: undefined,\n      });\n      continue;\n    }\n    if (frame.quote !== undefined) continue;\n    if (character === \"'\" || character === '\"') {\n      frame.quote = character;\n      continue;\n    }\n    if (frame.kind !== \"parentheses\") continue;\n    if (character === \"(\") frame.depth += 1;\n    if (character === \")\" && --frame.depth === 0) {\n      bodies.push(command.slice(frame.start, index));\n      frames.pop();\n    }\n  }\n  for (const frame of frames.slice(1)) bodies.push(command.slice(frame.start));\n  return bodies;\n};\n\n// Preserve quoted assignment values when separating direct shell commands.\nconst compilerCommandSegments = (command: string) => {\n  const segments: string[][] = [[]];\n  for (const source of [command, ...shellSubstitutions(command)]) {\n    segments.push([]);\n    const shellWords = source.match(\n      /(?:[^\\s\"'\\\\;&|()]|\\\\[^\\n]|\"(?:[^\"\\\\]|\\\\.)*\"|'[^']*')+|&&|\\|\\||[();&|\\n]/g,\n    );\n    for (const word of shellWords ?? []) {\n      if (/^(?:&&|\\|\\||[;&|\\n])$/.test(word)) segments.push([]);\n      else segments.at(-1)?.push(word);\n    }\n  }\n  return segments.map((words) => {\n    let start = 0;\n    const skipAssignments = () => {\n      while (/^[A-Za-z_][A-Za-z\\d_]*=/.test(words.at(start) ?? \"\")) start += 1;\n    };\n    skipAssignments();\n    while (/^(?:\\/usr\\/bin\\/|\\/bin\\/)?env$/.test(words.at(start) ?? \"\")) {\n      start += 1;\n      while (start < words.length) {\n        const option = words.at(start);\n        if (option === \"--\") {\n          start += 1;\n          break;\n        }\n        if (option === \"-u\" || option === \"--unset\") {\n          start += 2;\n          continue;\n        }\n        if (\n          option === \"-\" ||\n          option === \"-i\" ||\n          option === \"--ignore-environment\" ||\n          /^--unset=.+|^-u.+/.test(option ?? \"\")\n        ) {\n          start += 1;\n          continue;\n        }\n        break;\n      }\n      skipAssignments();\n    }\n    return words.slice(start);\n  });\n};\n\nconst launcherValueOptions = new Map(\n  Object.entries({\n    npx: [\n      \"-p\",\n      \"--package\",\n      \"-c\",\n      \"--call\",\n      \"--cache\",\n      \"--registry\",\n      \"--userconfig\",\n    ],\n    bunx: [\"-p\", \"--package\"],\n    pnpm: [\"--filter\", \"-F\", \"--dir\", \"-C\", \"--package\"],\n    yarn: [\n      \"--cwd\",\n      \"--cache-folder\",\n      \"--mutex\",\n      \"--use-yarnrc\",\n      \"--modules-folder\",\n      \"--registry\",\n    ],\n    bun: [\n      \"--cwd\",\n      \"--filter\",\n      \"-F\",\n      \"--config\",\n      \"-c\",\n      \"--env-file\",\n      \"-e\",\n      \"--eval\",\n      \"-p\",\n      \"--print\",\n    ],\n    node: [\n      \"-e\",\n      \"--eval\",\n      \"-p\",\n      \"--print\",\n      \"--conditions\",\n      \"-C\",\n      \"--inspect-port\",\n      \"--max-old-space-size\",\n      \"--stack-size\",\n      \"--title\",\n      \"--icu-data-dir\",\n      \"--openssl-config\",\n      \"--input-type\",\n    ],\n  }).map(([launcher, options]) => [launcher, new Set(options)]),\n);\n\n// Classification sees launcher arguments; acceptance still uses the declared command.\nconst invokesCompiler = (words: string[]) => {\n  const literal = (word: string) => {\n    let result = \"\";\n    let quote: \"'\" | '\"' | undefined;\n    for (let index = 0; index < word.length; index += 1) {\n      const character = word.at(index);\n      if (character === quote) {\n        quote = undefined;\n        continue;\n      }\n      if (quote === undefined && (character === \"'\" || character === '\"')) {\n        quote = character;\n        continue;\n      }\n      const next = word.at(index + 1);\n      if (\n        character === \"\\\\\" &&\n        next !== undefined &&\n        quote !== \"'\" &&\n        (quote === undefined || /[$`\"\\\\\\n]/.test(next))\n      ) {\n        result += next;\n        index += 1;\n      } else result += character;\n    }\n    return result;\n  };\n  const tokens = words.map(literal);\n  const compiler = (word: string) =>\n    /(?:^|\\/)(?:tsc|tsgo)(?:\\.js)?$/.test(word);\n  let start = 0;\n  const skipOptions = (index: number, launcher: string) => {\n    while (tokens.at(index)?.startsWith(\"-\")) {\n      const option = tokens.at(index);\n      index += 1;\n      if (option === \"--\") break;\n      if (\n        option !== undefined &&\n        launcherValueOptions.get(launcher)?.has(option)\n      )\n        index += 1;\n    }\n    return index;\n  };\n  while (start < tokens.length) {\n    const launcher = tokens.at(start);\n    if (launcher === undefined || !launcherValueOptions.has(launcher)) break;\n    start = skipOptions(start + 1, launcher);\n    if (launcher === \"bun\" && tokens.at(start) === \"check\") return true;\n    const subcommand = tokens.at(start);\n    if (\n      (launcher === \"bun\" && (subcommand === \"x\" || subcommand === \"run\")) ||\n      (launcher === \"pnpm\" &&\n        (subcommand === \"exec\" || subcommand === \"dlx\")) ||\n      (launcher === \"yarn\" &&\n        (subcommand === \"exec\" || subcommand === \"dlx\" || subcommand === \"run\"))\n    ) {\n      start = skipOptions(start + 1, launcher);\n    }\n  }\n  // Explicit compiler tokens behind unsupported launchers fail closed.\n  const remaining = tokens.slice(start);\n  return remaining.some(\n    (word, index) =>\n      compiler(word) ||\n      (word === \"bun\" &&\n        tokens.at(skipOptions(start + index + 1, \"bun\")) === \"check\"),\n  );\n};\n\ntype CheckPackageFilesOptions = {\n  files: Record<string, string>;\n  policy: PackagePolicy;\n};\n\ntype AddDiagnosticOptions = {\n  file: string;\n  rule: Diagnostic[\"rule\"];\n  key: string;\n  value?: unknown;\n  message: string;\n};\n\n/** Validate manifests and catalog resolutions from a tracked-file snapshot. */\nexport const checkPackageFiles = ({\n  files,\n  policy,\n}: CheckPackageFilesOptions) => {\n  const sources = new Map(Object.entries(files));\n  const diagnostics: Diagnostic[] = [];\n  const pins = new Map(\n    Object.entries({ ...policy.packages, \"bun-types\": policy.bun }),\n  );\n  const manifests = new Map<string, Record<string, unknown>>();\n  const yamlLocations = new Map<string, number[]>();\n  const reportedLines = new Map<string, number>();\n  const add = ({ file, rule, key, value, message }: AddDiagnosticOptions) => {\n    const source = sources.get(file);\n    if (source === undefined)\n      throw new Error(`Missing package diagnostic source: ${file}`);\n    const serialized = value === undefined ? undefined : JSON.stringify(value);\n    const locationKey = `${file}:${key}:${serialized ?? \"\"}`;\n    const previous = reportedLines.get(locationKey) ?? -1;\n    const yamlLine = yamlLocations.get(locationKey)?.shift();\n    const index = source\n      .split(/\\r?\\n/)\n      .findIndex(\n        (line, lineIndex) =>\n          lineIndex > previous &&\n          line.includes(JSON.stringify(key)) &&\n          (serialized === undefined || line.includes(serialized)),\n      );\n    if (index >= 0) reportedLines.set(locationKey, index);\n    diagnostics.push({\n      rule,\n      path: file,\n      line: yamlLine ?? Math.max(1, index + 1),\n      message,\n    });\n  };\n  for (const [file, text] of sources) {\n    const pnpm = path.posix.basename(file) === \"pnpm-workspace.yaml\";\n    if (!pnpm && path.posix.basename(file) !== \"package.json\") continue;\n    try {\n      const lineCounter = new LineCounter();\n      const document = pnpm ? parseDocument(text, { lineCounter }) : undefined;\n      if (document !== undefined && document.errors.length > 0)\n        throw new Error(\"invalid YAML\");\n      const json: unknown =\n        document === undefined ? JSON.parse(text) : document.toJS();\n      if (!record(json)) throw new Error(\"manifest must be an object\");\n      if (pnpm) {\n        if (json[\"catalog\"] !== undefined && !record(json[\"catalog\"]))\n          throw new Error(\"catalog must be a mapping\");\n        if (\n          json[\"catalogs\"] !== undefined &&\n          (!record(json[\"catalogs\"]) ||\n            Object.values(json[\"catalogs\"]).some((catalog) => !record(catalog)))\n        )\n          throw new Error(\"named catalogs must be mappings\");\n        if (\n          json[\"packages\"] !== undefined &&\n          (!Array.isArray(json[\"packages\"]) ||\n            !json[\"packages\"].every(\n              (pattern: unknown) => typeof pattern === \"string\",\n            ))\n        )\n          throw new Error(\"workspace packages must be patterns\");\n      }\n      manifests.set(file, json);\n      if (document === undefined) continue;\n      const catalogEntries = [\n        { catalog: json[\"catalog\"], prefix: [\"catalog\"] },\n        { catalog: json[\"overrides\"], prefix: [\"overrides\"] },\n        ...(record(json[\"catalogs\"])\n          ? Object.entries(json[\"catalogs\"]).map(([name, catalog]) => ({\n              catalog,\n              prefix: [\"catalogs\", name],\n            }))\n          : []),\n      ];\n      for (const { catalog, prefix } of catalogEntries) {\n        if (!record(catalog)) continue;\n        for (const [name, value] of Object.entries(catalog)) {\n          const node = document.getIn([...prefix, name], true);\n          if (!isNode(node) || node.range === undefined || node.range === null)\n            continue;\n          const key = `${file}:${name}:${JSON.stringify(value)}`;\n          const lines = yamlLocations.get(key) ?? [];\n          lines.push(lineCounter.linePos(node.range[0]).line);\n          yamlLocations.set(key, lines);\n        }\n      }\n    } catch {\n      add({\n        file,\n        rule: \"package-pins\",\n        key: \"\",\n        message: pnpm\n          ? \"invalid pnpm-workspace.yaml object\"\n          : \"invalid package.json object\",\n      });\n    }\n  }\n  const catalogSources = (json: Record<string, unknown>) => [\n    json,\n    ...(record(json[\"workspaces\"]) ? [json[\"workspaces\"]] : []),\n  ];\n  const pnpmWorkspaceFor = (file: string) => {\n    let directory = path.posix.dirname(file);\n    while (true) {\n      const workspace = manifests.get(\n        path.posix.join(directory, \"pnpm-workspace.yaml\"),\n      );\n      if (workspace !== undefined) return { directory, workspace };\n      if (directory === \".\") return undefined;\n      directory = path.posix.dirname(directory);\n    }\n  };\n  const catalogFor = (file: string, name: string): unknown => {\n    const owner = pnpmWorkspaceFor(file);\n    if (owner !== undefined) {\n      const { directory, workspace } = owner;\n      if (\n        path.posix.basename(file) === \"package.json\" &&\n        !workspaceContains({\n          directory,\n          file,\n          patterns: workspace[\"packages\"],\n          rootMembership: \"implicit\",\n        })\n      )\n        return undefined;\n      if (name === \"\" || name === \"default\")\n        return (\n          workspace[\"catalog\"] ??\n          (record(workspace[\"catalogs\"])\n            ? workspace[\"catalogs\"][\"default\"]\n            : undefined)\n        );\n      return record(workspace[\"catalogs\"])\n        ? workspace[\"catalogs\"][name]\n        : undefined;\n    }\n    let directory = path.posix.dirname(file);\n    while (true) {\n      const manifest = manifests.get(\n        path.posix.join(directory, \"package.json\"),\n      );\n      if (manifest !== undefined) {\n        for (const source of catalogSources(manifest)) {\n          if (name === \"\" && source[\"catalog\"] !== undefined)\n            return source[\"catalog\"];\n          if (\n            record(source[\"catalogs\"]) &&\n            source[\"catalogs\"][name] !== undefined\n          )\n            return source[\"catalogs\"][name];\n        }\n        // A workspace owns catalog resolution even when the requested catalog is absent.\n        if (manifest[\"workspaces\"] !== undefined) return undefined;\n      }\n      if (directory === \".\") return undefined;\n      directory = path.posix.dirname(directory);\n    }\n  };\n  const workspaceContains = ({\n    directory,\n    file,\n    patterns,\n    rootMembership,\n  }: {\n    directory: string;\n    file: string;\n    patterns: unknown;\n    rootMembership: \"implicit\" | \"patterns\";\n  }) => {\n    const relative = path.posix.relative(directory, path.posix.dirname(file));\n    if (relative === \"\" && rootMembership === \"implicit\") return true;\n    if (relative === \"..\" || relative.startsWith(\"../\")) return false;\n    if (!Array.isArray(patterns)) return false;\n    const normalize = (pattern: string) => path.posix.normalize(pattern);\n    const selected = patterns.filter(\n      (value: unknown): value is string => typeof value === \"string\",\n    );\n    return (\n      picomatch(\n        selected.filter((pattern) => !pattern.startsWith(\"!\")).map(normalize),\n      )(relative) &&\n      !picomatch(\n        selected\n          .filter((pattern) => pattern.startsWith(\"!\"))\n          .map((pattern) => normalize(pattern.slice(1))),\n      )(relative)\n    );\n  };\n  const resolve = (file: string, name: string, value: unknown): unknown => {\n    const visited = new Set<string>();\n    while (typeof value === \"string\" && value.startsWith(\"catalog:\")) {\n      if (visited.has(value)) return undefined;\n      visited.add(value);\n      const catalog = catalogFor(file, value.slice(\"catalog:\".length));\n      value = record(catalog) ? catalog[name] : undefined;\n    }\n    return value;\n  };\n  const workspaceOwnerFor = (file: string) => {\n    const pnpm = pnpmWorkspaceFor(file);\n    if (pnpm !== undefined)\n      return {\n        directory: pnpm.directory,\n        patterns: pnpm.workspace[\"packages\"],\n        source: \"pnpm\" as const,\n      };\n    let directory = path.posix.dirname(file);\n    while (true) {\n      const root = manifests.get(path.posix.join(directory, \"package.json\"));\n      const workspaces = root?.[\"workspaces\"];\n      if (workspaces !== undefined)\n        return {\n          directory,\n          patterns: record(workspaces) ? workspaces[\"packages\"] : workspaces,\n          source: \"json\" as const,\n        };\n      if (directory === \".\") return undefined;\n      directory = path.posix.dirname(directory);\n    }\n  };\n  type WorkspaceResolution = \"matched\" | \"nonmember\" | \"mismatch\";\n  const workspaceResolution = ({\n    file,\n    name,\n    pin,\n  }: {\n    file: string;\n    name: string;\n    pin: string;\n  }): WorkspaceResolution => {\n    const owner = workspaceOwnerFor(file);\n    if (owner === undefined) return \"nonmember\";\n    const { directory, patterns, source } = owner;\n    if (source === \"json\" && !Array.isArray(patterns)) return \"mismatch\";\n    if (\n      !workspaceContains({\n        directory,\n        file,\n        patterns,\n        rootMembership: \"implicit\",\n      })\n    )\n      return \"nonmember\";\n    const candidates = [...manifests.entries()].filter(\n      ([candidate, json]) =>\n        path.posix.basename(candidate) === \"package.json\" &&\n        json[\"name\"] === name &&\n        workspaceContains({\n          directory,\n          file: candidate,\n          patterns,\n          rootMembership: source === \"json\" ? \"patterns\" : \"implicit\",\n        }),\n    );\n    return candidates.length === 1 &&\n      candidates.every(([, json]) => json[\"version\"] === pin)\n      ? \"matched\"\n      : \"mismatch\";\n  };\n  const tsSpecifiers = new Map<string, Set<string>>();\n  for (const layout of policy.typescriptInstallLayouts) {\n    const values =\n      tsSpecifiers.get(layout.compilerPackage) ?? new Set<string>();\n    values.add(layout.compilerSpecifier);\n    tsSpecifiers.set(layout.compilerPackage, values);\n    if (layout.type !== \"split-compatibility\") continue;\n    const compatibility =\n      tsSpecifiers.get(layout.compatibilityPackage) ?? new Set<string>();\n    compatibility.add(layout.compatibilitySpecifier);\n    tsSpecifiers.set(layout.compatibilityPackage, compatibility);\n  }\n  tsSpecifiers.set(\n    policy.typescript6Compatibility.packageAlias,\n    new Set([`npm:typescript@${policy.typescript6Compatibility.version}`]),\n  );\n  for (const [file, json] of manifests) {\n    const manager = json[\"packageManager\"];\n    if (manager !== undefined && manager !== `bun@${policy.bun}`)\n      add({\n        file,\n        rule: \"bun-pins\",\n        key: \"packageManager\",\n        value: manager,\n        message: `packageManager Bun version must be ${policy.bun}, found ${JSON.stringify(manager)}`,\n      });\n    const dependencies: Record<string, unknown> = {};\n    const checkEntries = (\n      entries: unknown,\n      installed: boolean,\n      location?: { key: string; value: unknown },\n    ) => {\n      if (!record(entries)) return;\n      for (const [name, raw] of Object.entries(entries)) {\n        const value = resolve(file, name, raw);\n        if (installed) dependencies[name] = value;\n        const tsAllowed = tsSpecifiers.get(name);\n        if (tsAllowed !== undefined) {\n          if (typeof value !== \"string\" || !tsAllowed.has(value))\n            add({\n              file,\n              rule: \"typescript-layout\",\n              key: location?.key ?? name,\n              value: location === undefined ? raw : location.value,\n              message: `${name} must use a declared TypeScript specifier, found ${String(value)}`,\n            });\n          continue;\n        }\n        const pin = pins.get(name);\n        if (pin === undefined) continue;\n        if (value === pin) continue;\n        const workspace =\n          value === \"workspace:*\"\n            ? workspaceResolution({ file, name, pin })\n            : undefined;\n        if (workspace === \"matched\") continue;\n        add({\n          file,\n          rule: name === \"bun-types\" ? \"bun-pins\" : \"package-pins\",\n          key: location?.key ?? name,\n          value: location === undefined ? raw : location.value,\n          message:\n            workspace === \"nonmember\"\n              ? `${name} workspace:* consumer is not a member of its nearest workspace`\n              : `${name} must be ${pin}, found ${String(value)}`,\n        });\n      }\n    };\n    for (const key of [\n      \"dependencies\",\n      \"devDependencies\",\n      \"optionalDependencies\",\n    ])\n      checkEntries(json[key], true);\n    for (const source of catalogSources(json)) {\n      checkEntries(source[\"catalog\"], false);\n      if (!record(source[\"catalogs\"])) continue;\n      for (const catalog of Object.values(source[\"catalogs\"]))\n        checkEntries(catalog, false);\n    }\n    const ownedNames = new Set([...pins.keys(), ...tsSpecifiers.keys()]);\n    const resolutionDependencies: Record<string, unknown> = {};\n    const resolutionRoot = manifests.get(\n      path.posix.join(path.posix.dirname(file), \"package.json\"),\n    );\n    if (resolutionRoot !== undefined)\n      for (const section of [\n        \"dependencies\",\n        \"devDependencies\",\n        \"optionalDependencies\",\n      ]) {\n        const entries = resolutionRoot[section];\n        if (!record(entries)) continue;\n        for (const [name, value] of Object.entries(entries))\n          resolutionDependencies[name] = resolve(file, name, value);\n      }\n    const affectedSpecifiers = new Map<string, Set<unknown>>();\n    const owner = workspaceOwnerFor(file);\n    for (const [candidate, member] of manifests) {\n      if (path.posix.basename(candidate) !== \"package.json\") continue;\n      const memberOwner = workspaceOwnerFor(candidate);\n      const ownManifest =\n        candidate === path.posix.join(path.posix.dirname(file), \"package.json\");\n      if (\n        !ownManifest &&\n        !(\n          owner !== undefined &&\n          owner.directory === path.posix.dirname(file) &&\n          memberOwner?.directory === owner.directory &&\n          memberOwner.source === owner.source &&\n          workspaceContains({\n            directory: owner.directory,\n            file: candidate,\n            patterns: owner.patterns,\n            rootMembership: \"implicit\",\n          })\n        )\n      )\n        continue;\n      for (const section of [\n        \"dependencies\",\n        \"devDependencies\",\n        \"optionalDependencies\",\n      ]) {\n        const entries = member[section];\n        if (!record(entries)) continue;\n        for (const [name, value] of Object.entries(entries)) {\n          if (!tsSpecifiers.has(name)) continue;\n          const values = affectedSpecifiers.get(name) ?? new Set<unknown>();\n          values.add(resolve(candidate, name, value));\n          affectedSpecifiers.set(name, values);\n        }\n      }\n    }\n    const checkResolutionMap = (entries: unknown, parent?: string) => {\n      if (!record(entries)) return;\n      for (const [selector, replacement] of Object.entries(entries)) {\n        // npm's nested '.' replaces the enclosing package; Yarn and pnpm\n        // qualify a target with a dependency path or a parent selector.\n        const target = selector === \".\" ? parent : selector;\n        if (target === undefined) continue;\n        let pattern =\n          target\n            .split(/>\\s*(?=[@A-Za-z_*]|$)/)\n            .at(-1)\n            ?.trim() ?? \"\";\n        const version = pattern.lastIndexOf(\"@\");\n        let qualifier: string | undefined;\n        if (version > pattern.lastIndexOf(\"/\")) {\n          qualifier = pattern.slice(version + 1).replace(/^npm:/, \"\");\n          pattern = pattern.slice(0, version);\n        }\n        const parts = pattern.split(\"/\");\n        pattern = parts.at(-2)?.startsWith(\"@\")\n          ? parts.slice(-2).join(\"/\")\n          : (parts.at(-1) ?? \"\");\n        if (pattern === \"\") {\n          add({\n            file,\n            rule: \"package-pins\",\n            key: selector,\n            value: replacement,\n            message: \"resolution selector must name a package\",\n          });\n          continue;\n        }\n        if (record(replacement)) {\n          checkResolutionMap(replacement, target);\n          continue;\n        }\n        for (const name of ownedNames) {\n          if (!picomatch(pattern)(name)) continue;\n          let value = replacement;\n          if (typeof replacement === \"string\" && replacement.startsWith(\"$\")) {\n            const reference = replacement.slice(1);\n            value = resolutionDependencies[reference];\n          }\n          const resolved = resolve(file, name, value);\n          checkEntries({ [name]: value }, false, {\n            key: selector,\n            value: replacement,\n          });\n          if (\n            tsSpecifiers.has(name) &&\n            [...(affectedSpecifiers.get(name) ?? [])].some((specifier) => {\n              if (resolved === specifier) return false;\n              if (qualifier === undefined || validRange(qualifier) === null)\n                return true;\n              if (typeof specifier !== \"string\") return false;\n              const versionSpecifier = specifier.startsWith(\"npm:\")\n                ? specifier.slice(specifier.lastIndexOf(\"@\") + 1)\n                : specifier;\n              const release = valid(versionSpecifier);\n              return release !== null && satisfies(release, qualifier);\n            }) &&\n            typeof resolved === \"string\" &&\n            tsSpecifiers.get(name)?.has(resolved)\n          )\n            add({\n              file,\n              rule: \"typescript-layout\",\n              key: selector,\n              value: replacement,\n              message: `${name} resolution must preserve its declared TypeScript install specifier`,\n            });\n        }\n      }\n    };\n    checkResolutionMap(json[\"overrides\"]);\n    checkResolutionMap(json[\"resolutions\"]);\n    if (record(json[\"pnpm\"])) checkResolutionMap(json[\"pnpm\"][\"overrides\"]);\n    const usesCompiler = policy.typescriptInstallLayouts.some(\n      (layout) => dependencies[layout.compilerPackage] !== undefined,\n    );\n    if (usesCompiler) {\n      const selectedLayout = policy.typescriptInstallLayouts.find((layout) => {\n        if (dependencies[layout.compilerPackage] !== layout.compilerSpecifier)\n          return false;\n        if (layout.type === \"split-compatibility\")\n          return (\n            dependencies[layout.compatibilityPackage] ===\n            layout.compatibilitySpecifier\n          );\n        return policy.typescriptInstallLayouts.every(\n          (other) =>\n            other.compilerPackage === layout.compilerPackage ||\n            dependencies[other.compilerPackage] === undefined,\n        );\n      });\n      if (selectedLayout === undefined)\n        add({\n          file,\n          rule: \"typescript-layout\",\n          key: \"dependencies\",\n          message:\n            \"TypeScript compiler and compatibility packages must match one complete declared install layout\",\n        });\n      const command = record(json[\"scripts\"])\n        ? json[\"scripts\"][\"typecheck\"]\n        : undefined;\n      if (selectedLayout !== undefined && typeof command === \"string\") {\n        const normalizedExpected = selectedLayout.typecheckCommand\n          .replace(/\\s+/g, \" \")\n          .trim();\n        for (const words of compilerCommandSegments(command)) {\n          if (!invokesCompiler(words)) continue;\n          const normalized = words.join(\" \");\n          if (\n            !words.some((word) => word === \"(\" || word === \")\") &&\n            shellSubstitutions(normalized).length === 0 &&\n            (normalized === normalizedExpected ||\n              normalized.startsWith(`${normalizedExpected} `))\n          )\n            continue;\n          add({\n            file,\n            rule: \"typescript-layout\",\n            key: \"typecheck\",\n            value: command,\n            message: `typecheck compiler invocation must use ${selectedLayout.typecheckCommand}`,\n          });\n          break;\n        }\n      }\n    }\n    if (\n      record(json[\"engines\"]) &&\n      json[\"engines\"][\"node\"] !== undefined &&\n      (typeof json[\"engines\"][\"node\"] !== \"string\" ||\n        !nodeSupportRangeMatches(policy.node, json[\"engines\"][\"node\"]))\n    )\n      add({\n        file,\n        rule: \"node-engine\",\n        key: \"node\",\n        value: json[\"engines\"][\"node\"],\n        message: `engines.node must support ${policy.node}, found ${JSON.stringify(json[\"engines\"][\"node\"])}`,\n      });\n  }\n  return diagnostics;\n};\n","import path from \"node:path\";\nimport { parse as parseToml } from \"smol-toml\";\nimport {\n  isAlias,\n  isMap,\n  isScalar,\n  isSeq,\n  LineCounter,\n  parseAllDocuments,\n  parseDocument,\n} from \"yaml\";\n\nimport {\n  containerDocumentImages,\n  isComposeDefinitionPath,\n  isKubernetesDefinitionPath,\n} from \"./toolchain-container-inputs\";\nimport { canonicalDockerRuntime } from \"./toolchain-images\";\nimport {\n  githubAutomationFileKind,\n  isMiseConfigPath,\n  isDockerDefinitionPath,\n} from \"./toolchain-inputs\";\nimport { nodeSelectorMatches } from \"./toolchain-node\";\n\nexport const runtimeRules = [\n  \"bun-pins\",\n  \"node-version\",\n  \"python-version\",\n  \"rust-version\",\n  \"runtime-manager\",\n  \"runtime-docker\",\n  \"runtime-workflow\",\n  \"action-pins\",\n] as const;\n\ntype RuntimeRule = (typeof runtimeRules)[number];\n\ntype RuntimePolicy = {\n  node: string;\n  python: string;\n  rust: string;\n  rustCompilerDevelopment: string;\n  bun: string;\n  packages: Record<string, string>;\n  actions: Record<string, { sha: string; version: string }>;\n};\n\ntype RuntimeDiagnostic = {\n  rule: RuntimeRule;\n  path: string;\n  line: number;\n  message: string;\n};\n\nexport type RuntimeDelegation = {\n  path: string;\n  line: number;\n  tool: \"node\" | \"python\" | \"bun\";\n  selector: string;\n  checkoutPath: string;\n  ref: string;\n};\n\ntype CheckRuntimeFileOptions = {\n  file: string;\n  text: string;\n  policy: RuntimePolicy;\n  trackedFiles: ReadonlySet<string>;\n  readFile: (file: string) => string | undefined;\n  repository?: string | undefined;\n  onDelegated?: ((report: RuntimeDelegation) => void) | undefined;\n};\n\nconst record = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst pythonSelectorMatches = (value: unknown, expected: string) =>\n  value === expected ||\n  (typeof value === \"string\" &&\n    /^\\d+\\.\\d+$/.test(expected) &&\n    value.startsWith(`${expected}.`) &&\n    /^\\d+\\.\\d+\\.\\d+$/.test(value));\n\nconst compareRelease = (left: readonly number[], right: readonly number[]) => {\n  for (let index = 0; index < Math.max(left.length, right.length); index++) {\n    const difference = (left.at(index) ?? 0) - (right.at(index) ?? 0);\n    if (difference !== 0) return Math.sign(difference);\n  }\n  return 0;\n};\n\n/** A minor policy covers every nonnegative patch in that release series. */\ntype PythonSeriesRequirementOptions = {\n  current: readonly number[];\n  operator: string;\n  target: readonly number[];\n  wildcard: boolean;\n};\nconst pythonSeriesRequirementMatches = ({\n  current,\n  operator,\n  target,\n  wildcard,\n}: PythonSeriesRequirementOptions) => {\n  const prefixCovers = (prefix: readonly number[]) =>\n    prefix.length <= 2 &&\n    prefix.every((part, index) => current.at(index) === part);\n  const prefixOverlaps =\n    target.slice(0, 2).every((part, index) => current.at(index) === part) &&\n    target.slice(3).every((part) => part === 0);\n  if (wildcard) {\n    if (operator === \"==\") return prefixCovers(target);\n    if (operator === \"!=\") return !prefixOverlaps;\n    return false;\n  }\n  const minimumComparison = compareRelease(current, target);\n  const seriesComparison = compareRelease(\n    current.slice(0, 2),\n    target.slice(0, 2),\n  );\n  switch (operator) {\n    case \"==\":\n      return false;\n    case \"!=\":\n      return !(\n        seriesComparison === 0 && target.slice(3).every((part) => part === 0)\n      );\n    case \">=\":\n      return minimumComparison >= 0;\n    case \">\":\n      return minimumComparison > 0;\n    case \"<=\":\n    case \"<\":\n      return seriesComparison < 0;\n    case \"~=\":\n      return (\n        target.length >= 2 &&\n        minimumComparison >= 0 &&\n        prefixCovers(target.slice(0, -1))\n      );\n    default:\n      return false;\n  }\n};\n\n/** Evaluate final-release Python constraints against the complete selected version set. */\nconst pythonRequirementMatches = (requirement: unknown, version: string) => {\n  if (typeof requirement !== \"string\" || requirement.trim() === \"\")\n    return false;\n  const current = version.split(\".\").map(Number);\n  return requirement.split(\",\").every((clause) => {\n    const match = /^(~=|==|!=|<=|>=|<|>)\\s*(\\d+(?:\\.\\d+)*)(\\.\\*)?$/.exec(\n      clause.trim(),\n    );\n    if (match === null) return false;\n    const operator = match[1];\n    const release = match[2];\n    if (release === undefined || operator === undefined) return false;\n    const target = release.split(\".\").map(Number);\n    if (current.length === 2)\n      return pythonSeriesRequirementMatches({\n        current,\n        operator,\n        target,\n        wildcard: match[3] !== undefined,\n      });\n    const comparison = compareRelease(current, target);\n    if (match[3] !== undefined) {\n      if (operator !== \"==\" && operator !== \"!=\") return false;\n      const prefix = target.every(\n        (part, index) => (current.at(index) ?? 0) === part,\n      );\n      return operator === \"==\" ? prefix : !prefix;\n    }\n    switch (operator) {\n      case \"==\":\n        return comparison === 0;\n      case \"!=\":\n        return comparison !== 0;\n      case \"<=\":\n        return comparison <= 0;\n      case \">=\":\n        return comparison >= 0;\n      case \"<\":\n        return comparison < 0;\n      case \">\":\n        return comparison > 0;\n      case \"~=\": {\n        if (target.length < 2) return false;\n        const prefix = target.slice(0, -1);\n        return (\n          comparison >= 0 &&\n          prefix.every((part, index) => (current.at(index) ?? 0) === part)\n        );\n      }\n      default:\n        return false;\n    }\n  });\n};\n\n/** Check runtime declarations only in the files that declare or configure them. */\nexport const checkRuntimeFile = ({\n  file,\n  text,\n  policy,\n  trackedFiles,\n  readFile,\n  repository,\n  onDelegated,\n}: CheckRuntimeFileOptions): RuntimeDiagnostic[] => {\n  const diagnostics: RuntimeDiagnostic[] = [];\n  const name = path.posix.basename(file);\n  const lines = text.split(/\\r?\\n/);\n  type RuntimeDiagnosticOptions = Pick<\n    RuntimeDiagnostic,\n    \"rule\" | \"line\" | \"message\"\n  >;\n  const add = ({ rule, line, message }: RuntimeDiagnosticOptions) => {\n    diagnostics.push({ rule, path: file, line, message });\n  };\n  const lineOf = (key: string) =>\n    Math.max(1, lines.findIndex((line) => line.includes(key)) + 1);\n  type RuntimePinOptions = {\n    rule: RuntimeRule;\n    value: unknown;\n    expected: string;\n    label: string;\n    line?: number;\n    selector?: \"node\" | undefined;\n  };\n  const pin = ({\n    rule,\n    value,\n    expected,\n    label,\n    line = 1,\n    selector,\n  }: RuntimePinOptions) => {\n    let matches = value === expected;\n    if (selector === \"node\") matches = nodeSelectorMatches(value, expected);\n    else if (label.includes(\"python\"))\n      matches = pythonSelectorMatches(value, expected);\n    if (!matches)\n      add({\n        rule,\n        line,\n        message: `${label} must be ${expected}, found ${String(value)}`,\n      });\n  };\n  const toml = (rule: RuntimeRule) => {\n    try {\n      return parseToml(text);\n    } catch {\n      add({\n        rule,\n        line: 1,\n        message: \"invalid TOML\",\n      });\n      return undefined;\n    }\n  };\n  const versions = {\n    ...policy.packages,\n    ...Object.fromEntries(\n      Object.entries(policy.packages).map(([tool, version]) => [\n        `npm:${tool}`,\n        version,\n      ]),\n    ),\n    bun: policy.bun,\n    node: policy.node,\n    nodejs: policy.node,\n    python: policy.python,\n    rust: policy.rust,\n    \"core:node\": policy.node,\n    \"core:python\": policy.python,\n    \"core:rust\": policy.rust,\n    \"core:bun\": policy.bun,\n  };\n  const nodeTools = new Set([\"node\", \"nodejs\", \"core:node\"]);\n  if (name === \".bun-version\")\n    pin({\n      rule: \"bun-pins\",\n      value: text.trim(),\n      expected: policy.bun,\n      label: name,\n    });\n  if (name === \".node-version\" || name === \".nvmrc\")\n    pin({\n      rule: \"node-version\",\n      selector: \"node\",\n      value: text.trim(),\n      expected: policy.node,\n      label: name,\n    });\n  if (name === \".python-version\")\n    pin({\n      rule: \"python-version\",\n      value: text.trim(),\n      expected: policy.python,\n      label: name,\n    });\n  const firstContent = lines.find(\n    (line) => line.trim() !== \"\" && !line.trimStart().startsWith(\"#\"),\n  );\n  const rustToml =\n    name === \"rust-toolchain.toml\" ||\n    (name === \"rust-toolchain\" && firstContent?.trimStart().startsWith(\"[\"));\n  if (name === \"rust-toolchain\" && !rustToml)\n    pin({\n      rule: \"rust-version\",\n      value: text.trim(),\n      expected: policy.rust,\n      label: name,\n    });\n  if (rustToml) {\n    const parsed = toml(\"rust-version\");\n    if (parsed !== undefined) {\n      const toolchain = parsed[\"toolchain\"];\n      const components = record(toolchain)\n        ? toolchain[\"components\"]\n        : undefined;\n      const expected =\n        Array.isArray(components) && components.includes(\"rustc-dev\")\n          ? policy.rustCompilerDevelopment\n          : policy.rust;\n      pin({\n        rule: \"rust-version\",\n        value: record(toolchain) ? toolchain[\"channel\"] : undefined,\n        expected,\n        label: \"Rust channel\",\n        line: lineOf(\"channel\"),\n      });\n    }\n  }\n  if (name === \"Cargo.toml\") {\n    const parsed = toml(\"rust-version\");\n    const rustFloor = (value: unknown) => {\n      const parts =\n        typeof value === \"string\" &&\n        /^(?:0|[1-9]\\d*)(?:\\.(?:0|[1-9]\\d*)){0,2}$/.test(value)\n          ? value.split(\".\").map(Number)\n          : undefined;\n      if (\n        parts === undefined ||\n        !parts.every(Number.isSafeInteger) ||\n        compareRelease(parts, policy.rust.split(\".\").map(Number)) > 0\n      )\n        add({\n          rule: \"rust-version\",\n          line: lineOf(\"rust-version\"),\n          message: `Cargo rust-version must be a bare support floor at or below Rust ${policy.rust}`,\n        });\n    };\n    const readManifest = (candidate: string) => {\n      if (candidate === file) return parsed;\n      if (!trackedFiles.has(candidate)) return undefined;\n      try {\n        return parseToml(readFile(candidate) ?? \"\");\n      } catch {\n        return undefined;\n      }\n    };\n    if (parsed !== undefined) {\n      const workspace = parsed[\"workspace\"];\n      const defaults = record(workspace) ? workspace[\"package\"] : undefined;\n      if (record(defaults) && defaults[\"rust-version\"] !== undefined)\n        rustFloor(defaults[\"rust-version\"]);\n      const pkg = parsed[\"package\"];\n      const version = record(pkg) ? pkg[\"rust-version\"] : undefined;\n      if (version !== undefined) {\n        if (!record(version)) rustFloor(version);\n        else {\n          let inherited: unknown;\n          if (version[\"workspace\"] === true && record(pkg)) {\n            const explicit = pkg[\"workspace\"];\n            let directory = path.posix.dirname(file);\n            const explicitPath =\n              typeof explicit === \"string\" &&\n              !explicit.includes(\"\\\\\") &&\n              !explicit.includes(\":\") &&\n              !explicit.includes(\"${{\") &&\n              !path.posix.isAbsolute(explicit)\n                ? path.posix.normalize(path.posix.join(directory, explicit))\n                : undefined;\n            if (\n              explicit === undefined ||\n              (explicitPath !== undefined &&\n                explicitPath !== \"..\" &&\n                !explicitPath.startsWith(\"../\"))\n            ) {\n              if (explicitPath !== undefined) directory = explicitPath;\n              while (true) {\n                const owner = readManifest(\n                  path.posix.join(directory, \"Cargo.toml\"),\n                );\n                const table = owner?.[\"workspace\"];\n                if (record(table)) {\n                  const fields = table[\"package\"];\n                  inherited = record(fields)\n                    ? fields[\"rust-version\"]\n                    : undefined;\n                  break;\n                }\n                if (explicit !== undefined || directory === \".\") break;\n                directory = path.posix.dirname(directory);\n              }\n            }\n          }\n          rustFloor(inherited);\n        }\n      }\n    }\n  }\n  if (name === \"Pipfile\") {\n    const parsed = toml(\"python-version\");\n    const requires = parsed?.[\"requires\"];\n    if (record(requires)) {\n      const minor = requires[\"python_version\"];\n      if (\n        minor !== undefined &&\n        minor !== policy.python.split(\".\").slice(0, 2).join(\".\")\n      )\n        add({\n          rule: \"python-version\",\n          line: lineOf(\"python_version\"),\n          message: `Pipfile python_version must select Python ${policy.python}`,\n        });\n      const full = requires[\"python_full_version\"];\n      if (\n        full !== undefined &&\n        !(\n          typeof full === \"string\" &&\n          /^\\d+\\.\\d+\\.\\d+$/.test(full) &&\n          pythonSelectorMatches(full, policy.python)\n        )\n      )\n        add({\n          rule: \"python-version\",\n          line: lineOf(\"python_full_version\"),\n          message: `Pipfile python_full_version must select Python ${policy.python}`,\n        });\n    }\n  }\n  if (name === \"pyproject.toml\" || name === \"uv.toml\") {\n    const parsed = toml(\"python-version\");\n    if (parsed !== undefined) {\n      const project = parsed[\"project\"];\n      if (record(project) && project[\"requires-python\"] !== undefined)\n        if (\n          !pythonRequirementMatches(project[\"requires-python\"], policy.python)\n        )\n          add({\n            rule: \"python-version\",\n            line: lineOf(\"requires-python\"),\n            message: `requires-python must include Python ${policy.python}; unsupported constraints must use final-release version specifiers`,\n          });\n      const tool = parsed[\"tool\"];\n      const configuredUv = record(tool) ? tool[\"uv\"] : undefined;\n      const uv = name === \"uv.toml\" ? parsed : configuredUv;\n      if (record(uv) && uv[\"python\"] !== undefined)\n        pin({\n          rule: \"python-version\",\n          value: uv[\"python\"],\n          expected: policy.python,\n          label: \"uv python\",\n          line: lineOf(\"python\"),\n        });\n    }\n  }\n  if (isMiseConfigPath(file)) {\n    const parsed = toml(\"runtime-manager\");\n    const tools = parsed?.[\"tools\"];\n    if (record(tools)) {\n      for (const [tool, expected] of Object.entries(versions)) {\n        const configured = tools[tool];\n        if (configured !== undefined)\n          pin({\n            rule: \"runtime-manager\",\n            value: record(configured) ? configured[\"version\"] : configured,\n            expected,\n            selector: nodeTools.has(tool) ? \"node\" : undefined,\n            label: `mise ${tool}`,\n            line: lineOf(tool),\n          });\n      }\n    }\n  }\n  if (name === \".tool-versions\") {\n    lines.forEach((line, index) => {\n      const fields = line.replace(/#.*$/, \"\").trim().split(/\\s+/);\n      const tool = fields.at(0);\n      if (tool === undefined || !(tool in versions)) return;\n      const expected = Object.entries(versions).find(\n        ([key]) => key === tool,\n      )?.[1];\n      if (expected !== undefined)\n        pin({\n          rule: \"runtime-manager\",\n          value: fields.slice(1).join(\" \"),\n          expected,\n          selector: nodeTools.has(tool) ? \"node\" : undefined,\n          label: `.tool-versions ${tool}`,\n          line: index + 1,\n        });\n    });\n  }\n  type RuntimeImageOptions = {\n    image: unknown;\n    line: number;\n    label: string;\n  };\n  const checkRuntimeImage = ({ image, line, label }: RuntimeImageOptions) => {\n    if (typeof image !== \"string\" || image.includes(\"$\")) {\n      add({\n        rule: \"runtime-docker\",\n        line,\n        message: `cannot determine ${label} runtime; use a static image or a reasoned runtime-docker opt-out`,\n      });\n      return;\n    }\n    const runtime = /^(node|python|oven\\/bun)(?::([^@]+))?(?:@.*)?$/i.exec(\n      canonicalDockerRuntime(image),\n    );\n    if (runtime === null) return;\n    const tool = runtime[1]?.toLowerCase();\n    if (image.includes(\"@\")) {\n      add({\n        rule: tool === \"oven/bun\" ? \"bun-pins\" : \"runtime-docker\",\n        line,\n        message: `${label} ${tool} digest requires an approved digest policy; use a tag-only runtime image`,\n      });\n      return;\n    }\n    const tag = runtime[2];\n    const variantSuffix =\n      tool === \"oven/bun\"\n        ? /-(?:alpine|slim|debian)$/\n        : /-(?:alpine(?:\\d+(?:\\.\\d+)*)?|(?:bookworm|bullseye|trixie|buster)(?:-slim)?|slim)$/;\n    // Strip only supported image variants; prerelease qualifiers remain invalid pins.\n    const version = tag?.replace(variantSuffix, \"\");\n    let expected = policy.bun;\n    if (tool === \"node\") expected = policy.node;\n    else if (tool === \"python\") expected = policy.python;\n    pin({\n      rule: tool === \"oven/bun\" ? \"bun-pins\" : \"runtime-docker\",\n      value: version,\n      expected,\n      selector: tool === \"node\" ? \"node\" : undefined,\n      label: `${label} ${tool}`,\n      line,\n    });\n  };\n  if (isDockerDefinitionPath(file)) {\n    const variables = new Map<string, string>();\n    const escape = /^\\s*#\\s*escape\\s*=\\s*([\\\\`])\\s*$/m.exec(text)?.[1] ?? \"\\\\\";\n    const continuation = new RegExp(`${escape === \"`\" ? \"`\" : \"\\\\\\\\\"}\\\\s*$`);\n    const stages = new Set<string>();\n    let argumentScope: \"global\" | \"stage\" = \"global\";\n    const heredocs: { delimiter: string; stripTabs: boolean; line: number }[] =\n      [];\n    let instruction = \"\";\n    let startLine = 1;\n    const expand = (value: string) => {\n      for (let count = 0; count <= variables.size; count++) {\n        const next = value.replace(\n          /\\$(?:\\{([A-Za-z_][A-Za-z_\\d]*)\\}|([A-Za-z_][A-Za-z_\\d]*))/g,\n          (reference, braced: string | undefined, plain: string | undefined) =>\n            variables.get(braced ?? plain ?? \"\") ?? reference,\n        );\n        if (next === value) return next;\n        value = next;\n      }\n      return value;\n    };\n    const collectHeredocs = (content: string, line: number) => {\n      let quote: \"'\" | '\"' | undefined;\n      for (let index = 0; index < content.length; index++) {\n        const character = content.at(index);\n        if (quote !== undefined) {\n          if (character === quote) quote = undefined;\n          else if (quote === '\"' && character === \"\\\\\") index++;\n          continue;\n        }\n        if (character === \"\\\\\") {\n          index++;\n          continue;\n        }\n        if (character === \"'\" || character === '\"') {\n          quote = character;\n          continue;\n        }\n        if (\n          character === \"#\" &&\n          (index === 0 || /[\\s;&|()]/.test(content.at(index - 1) ?? \"\"))\n        )\n          break;\n        if (character !== \"<\" || content.at(index + 1) !== \"<\") continue;\n        if (content.at(index + 2) === \"<\") {\n          index += 2;\n          continue;\n        }\n        index += 2;\n        const stripTabs = content.at(index) === \"-\";\n        if (stripTabs) index++;\n        while (/\\s/.test(content.at(index) ?? \"\")) index++;\n        if (content.at(index) === \"#\") {\n          add({\n            rule: \"runtime-docker\",\n            line,\n            message: \"invalid Docker heredoc delimiter\",\n          });\n          break;\n        }\n        let delimiter = \"\";\n        let delimiterQuote: \"'\" | '\"' | undefined;\n        for (; index < content.length; index++) {\n          const part = content.at(index);\n          if (delimiterQuote !== undefined) {\n            if (part === delimiterQuote) delimiterQuote = undefined;\n            else if (\n              delimiterQuote === '\"' &&\n              part === \"\\\\\" &&\n              /[$\"\\\\]/.test(content.at(index + 1) ?? \"\")\n            )\n              delimiter += content.at(++index);\n            else delimiter += part;\n            continue;\n          }\n          if (part === \"'\" || part === '\"') {\n            delimiterQuote = part;\n            continue;\n          }\n          if (part === \"\\\\\" && content.at(index + 1) !== undefined) {\n            delimiter += content.at(++index);\n            continue;\n          }\n          if (/[\\s;&|<>()]/.test(part ?? \"\")) break;\n          delimiter += part;\n        }\n        if (delimiter !== \"\" && delimiterQuote === undefined)\n          heredocs.push({ delimiter, stripTabs, line });\n        else\n          add({\n            rule: \"runtime-docker\",\n            line,\n            message: \"invalid Docker heredoc delimiter\",\n          });\n        index--;\n      }\n    };\n    const checkInstruction = (content: string, line: number) => {\n      const argument = /^\\s*ARG\\s+([A-Za-z_][A-Za-z_\\d]*)(?:=(.*))?$/i.exec(\n        content,\n      );\n      if (argument !== null) {\n        if (argumentScope === \"stage\") return;\n        const key = argument[1];\n        const value = argument[2];\n        if (key !== undefined && value !== undefined)\n          variables.set(key, expand(value.replace(/^([\"'])(.*)\\1$/, \"$2\")));\n        return;\n      }\n      if (/^\\s*(?:RUN|COPY)\\s+/i.test(content)) {\n        collectHeredocs(content, line);\n        return;\n      }\n      const from =\n        /^\\s*FROM\\s+(?:--platform=\\S+\\s+)?(\\S+)(?:\\s+AS\\s+(\\S+))?/i.exec(\n          content,\n        );\n      if (from === null || from[1] === undefined) return;\n      argumentScope = \"stage\";\n      const image = expand(from[1]);\n      if (image.includes(\"$\")) {\n        add({\n          rule: \"runtime-docker\",\n          line,\n          message:\n            \"cannot determine FROM runtime; declare an image ARG default or a reasoned runtime-docker opt-out\",\n        });\n        return;\n      }\n      const stage = from[2]?.toLowerCase();\n      const previousStage = stages.has(image.toLowerCase());\n      if (stage !== undefined) stages.add(stage);\n      if (previousStage) return;\n      checkRuntimeImage({ image, line, label: \"FROM\" });\n    };\n    lines.forEach((line, index) => {\n      const heredoc = heredocs.at(0);\n      if (heredoc !== undefined) {\n        if (\n          (heredoc.stripTabs ? line.replace(/^\\t+/, \"\") : line) ===\n          heredoc.delimiter\n        )\n          heredocs.shift();\n        return;\n      }\n      if (line.trimStart().startsWith(\"#\")) return;\n      if (instruction === \"\") startLine = index + 1;\n      instruction += line.replace(continuation, \" \");\n      if (continuation.test(line)) return;\n      checkInstruction(instruction, startLine);\n      instruction = \"\";\n    });\n    if (instruction !== \"\") checkInstruction(instruction, startLine);\n    for (const heredoc of heredocs)\n      add({\n        rule: \"runtime-docker\",\n        line: heredoc.line,\n        message: `unterminated Docker heredoc ${heredoc.delimiter}`,\n      });\n  }\n  if (isComposeDefinitionPath(file) || isKubernetesDefinitionPath(file)) {\n    const lineCounter = new LineCounter();\n    for (const containerDocument of parseAllDocuments(text, {\n      lineCounter,\n      merge: true,\n      uniqueKeys: true,\n    })) {\n      const contents = containerDocument.contents;\n      const declaredResource =\n        isMap(contents) &&\n        isScalar(contents.get(\"apiVersion\", true)) &&\n        isScalar(contents.get(\"kind\", true));\n      const recognizedContainer =\n        isComposeDefinitionPath(file) || declaredResource;\n      if (containerDocument.errors.length > 0) {\n        if (recognizedContainer)\n          add({\n            rule: \"runtime-docker\",\n            line: 1,\n            message: \"invalid container YAML\",\n          });\n        continue;\n      }\n      try {\n        const classified = containerDocumentImages(\n          containerDocument.toJS({ maxAliasCount: 100 }),\n          file,\n        );\n        for (const entry of classified?.images ?? []) {\n          const node = containerDocument.getIn(entry.path, true);\n          const line =\n            (isMap(node) || isScalar(node) || isSeq(node) || isAlias(node)) &&\n            node.range !== undefined &&\n            node.range !== null\n              ? lineCounter.linePos(node.range[0]).line\n              : 1;\n          checkRuntimeImage({\n            image: entry.image,\n            line,\n            label:\n              classified?.ecosystem === \"docker-compose\"\n                ? \"Compose image\"\n                : \"Kubernetes image\",\n          });\n        }\n      } catch {\n        if (recognizedContainer)\n          add({\n            rule: \"runtime-docker\",\n            line: 1,\n            message: \"invalid container YAML aliases\",\n          });\n      }\n    }\n  }\n  const automationKind = githubAutomationFileKind(file);\n  if (automationKind === undefined) return diagnostics;\n  const document = parseDocument(text, { uniqueKeys: true, merge: true });\n  if (document.errors.length > 0) {\n    add({\n      rule: \"runtime-workflow\",\n      line: 1,\n      message: \"invalid workflow YAML\",\n    });\n    return diagnostics;\n  }\n  const nodeLine = (node: unknown) => {\n    if (!record(node) || !Array.isArray(node[\"range\"])) return 1;\n    const offset: unknown = node[\"range\"].at(0);\n    return typeof offset === \"number\"\n      ? text.slice(0, offset).split(\"\\n\").length\n      : 1;\n  };\n  type SparseCheckout =\n    | { mode: \"all\" }\n    | { mode: \"files\"; paths: ReadonlySet<string> }\n    | { mode: \"invalid\" };\n  type CheckoutBinding = { path: string; sparse: SparseCheckout } & (\n    | { source: \"tracked\" | \"untrusted\" }\n    | { source: \"delegated\"; ref: string }\n  );\n  let checkoutBindings: CheckoutBinding[] = [];\n  let checkoutDestinations = new Map<string, number>();\n  let unknownCheckoutDestination = false;\n  const staticRepositoryPath = (value: unknown): value is string =>\n    typeof value === \"string\" &&\n    value !== \"\" &&\n    !value.includes(\"${{\") &&\n    !value.includes(\"\\\\\") &&\n    !value.includes(\":\") &&\n    !path.posix.isAbsolute(value) &&\n    !value.split(\"/\").includes(\"..\");\n  const normalizeCheckoutPath = (prefix: string) =>\n    path.posix.normalize(prefix).replace(/\\/$/, \"\") || \".\";\n  type RuntimeReferenceOptions = {\n    value: unknown;\n    tool: \"node\" | \"python\" | \"bun\";\n    line: number;\n  };\n  const checkReference = ({ value, tool, line }: RuntimeReferenceOptions) => {\n    const selectors = {\n      node: [\".node-version\", \".nvmrc\"],\n      python: [\".python-version\"],\n      bun: [\"package.json\"],\n    };\n    const allowed = selectors[tool];\n    const rule = tool === \"bun\" ? \"bun-pins\" : \"runtime-workflow\";\n    const selector = staticRepositoryPath(value)\n      ? path.posix.normalize(value)\n      : undefined;\n    const binding =\n      selector === undefined\n        ? undefined\n        : checkoutBindings.findLast(\n            (entry) =>\n              entry.path === \".\" ||\n              selector === entry.path ||\n              selector.startsWith(`${entry.path}/`),\n          );\n    let target: string | undefined;\n    if (\n      !(\n        selector === undefined ||\n        unknownCheckoutDestination ||\n        binding?.source === \"untrusted\" ||\n        [...checkoutDestinations].some(\n          ([prefix, count]) =>\n            count > 1 &&\n            (prefix === \".\" ||\n              selector === prefix ||\n              selector.startsWith(`${prefix}/`)),\n        )\n      )\n    )\n      target =\n        binding === undefined || binding.path === \".\"\n          ? selector\n          : path.posix.relative(binding.path, selector);\n    if (\n      target === undefined ||\n      !allowed.includes(path.posix.basename(target)) ||\n      (binding?.source !== \"delegated\" && !trackedFiles.has(target))\n    ) {\n      add({\n        rule,\n        line,\n        message: `setup-${tool} must reference a tracked ${allowed.join(\" or \")}`,\n      });\n      return;\n    }\n    if (\n      binding !== undefined &&\n      (binding.sparse.mode === \"invalid\" ||\n        (binding.sparse.mode === \"files\" && !binding.sparse.paths.has(target)))\n    ) {\n      add({\n        rule,\n        line,\n        message: `checkout sparse-checkout must explicitly list ${target} without dynamic, glob, or negation patterns`,\n      });\n      return;\n    }\n    if (binding?.source === \"delegated\" && selector !== undefined) {\n      onDelegated?.({\n        path: file,\n        line,\n        tool,\n        selector,\n        checkoutPath: binding.path,\n        ref: binding.ref,\n      });\n      return;\n    }\n    const content = readFile(target);\n    if (tool === \"bun\") {\n      try {\n        const manifest: unknown = JSON.parse(content ?? \"\");\n        pin({\n          rule,\n          value: record(manifest) ? manifest[\"packageManager\"] : undefined,\n          expected: `bun@${policy.bun}`,\n          label: \"setup-bun version file packageManager\",\n          line,\n        });\n      } catch {\n        add({\n          rule,\n          line,\n          message:\n            \"bun-version-file must reference a readable package.json object\",\n        });\n      }\n      return;\n    }\n    pin({\n      rule,\n      value: content?.trim(),\n      expected: policy[tool],\n      selector: tool === \"node\" ? \"node\" : undefined,\n      label: `setup-${tool} version file`,\n      line,\n    });\n  };\n  const resolveNode = (node: unknown) => {\n    const visited = new Set<unknown>();\n    while (isAlias(node)) {\n      if (visited.has(node)) throw new Error(\"cyclic YAML alias\");\n      visited.add(node);\n      node = node.resolve(document);\n    }\n    return node;\n  };\n  const approvedActions = new Map(\n    Object.entries(policy.actions).map(([action, approved]) => [\n      action.toLowerCase(),\n      approved,\n    ]),\n  );\n  const mergedMaps = (node: unknown) => {\n    node = resolveNode(node);\n    if (!isMap(node)) return [];\n    const maps: unknown[] = [];\n    for (const pair of node.items) {\n      if (\n        !isScalar(pair.key) ||\n        typeof pair.key.value !== \"symbol\" ||\n        pair.key.source !== \"<<\"\n      )\n        continue;\n      const merge = resolveNode(pair.value);\n      maps.push(...(isSeq(merge) ? merge.items : [merge]));\n    }\n    return maps;\n  };\n  const keysOf = (node: unknown, visited = new Set<unknown>()): Set<string> => {\n    node = resolveNode(node);\n    if (!isMap(node)) return new Set();\n    if (visited.has(node)) throw new Error(\"cyclic YAML merge\");\n    const next = new Set(visited);\n    next.add(node);\n    const keys = new Set(\n      node.items.flatMap((pair) =>\n        isScalar(pair.key) && typeof pair.key.value === \"string\"\n          ? [pair.key.value]\n          : [],\n      ),\n    );\n    for (const merged of mergedMaps(node))\n      for (const key of keysOf(merged, next)) keys.add(key);\n    return keys;\n  };\n  type SourceMapOptions = {\n    node: unknown;\n    key: string;\n    visited?: ReadonlySet<unknown>;\n  };\n  const sourceMap = ({\n    node,\n    key,\n    visited = new Set(),\n  }: SourceMapOptions): unknown => {\n    node = resolveNode(node);\n    if (!isMap(node)) return undefined;\n    if (node.has(key)) return node;\n    if (visited.has(node)) throw new Error(\"cyclic YAML merge\");\n    const next = new Set(visited);\n    next.add(node);\n    for (const merged of mergedMaps(node)) {\n      const source = sourceMap({ node: merged, key, visited: next });\n      if (source !== undefined) return source;\n    }\n    return undefined;\n  };\n  const getNode = (node: unknown, key: string) => {\n    const source = sourceMap({ node, key });\n    return isMap(source) ? resolveNode(source.get(key, true)) : undefined;\n  };\n  const actionInputs = new Map<unknown, Map<string, unknown>>();\n  const inputsOf = (node: unknown) => {\n    node = resolveNode(node);\n    const cached = actionInputs.get(node);\n    if (cached !== undefined) return cached;\n    const options = getNode(node, \"with\");\n    const inputs = new Map<string, unknown>();\n    for (const key of keysOf(options)) {\n      const folded = key.toUpperCase();\n      const value = getNode(options, key);\n      if (inputs.has(folded))\n        add({\n          rule: \"action-pins\",\n          line: nodeLine(value),\n          message: `action input ${key} collides after case-folding`,\n        });\n      if (\n        /(?:^|-)VERSION(?:-FILE)?$/.test(folded) &&\n        key !== folded.toLowerCase()\n      )\n        add({\n          rule: \"action-pins\",\n          line: nodeLine(value),\n          message: `selector input ${key} must use canonical lowercase casing`,\n        });\n      inputs.set(folded, value);\n    }\n    actionInputs.set(node, inputs);\n    return inputs;\n  };\n  const getInput = (node: unknown, key: string) =>\n    inputsOf(node).get(key.toUpperCase());\n  const dynamicRefBody = (value: unknown) => {\n    if (typeof value !== \"string\" || !value.startsWith(\"${{\")) return undefined;\n    let quote: \"'\" | '\"' | undefined;\n    for (let index = 3; index < value.length; index++) {\n      const character = value.at(index);\n      if (quote !== undefined) {\n        if (character === quote) {\n          if (quote === \"'\" && value.at(index + 1) === \"'\") index++;\n          else quote = undefined;\n        } else if (quote === '\"' && character === \"\\\\\") index++;\n        continue;\n      }\n      if (character === \"'\" || character === '\"') quote = character;\n      else if (value.startsWith(\"${{\", index)) return undefined;\n      else if (character === \"}\" && value.at(index + 1) === \"}\")\n        return index === value.length - 2\n          ? value.slice(3, index).trim()\n          : undefined;\n    }\n    return undefined;\n  };\n  const checkoutPrefixOf = (node: unknown) => {\n    const destination = getInput(node, \"path\");\n    if (destination === undefined) return \".\";\n    return isScalar(destination) ? destination.value : undefined;\n  };\n  const sparseCheckoutOf = (node: unknown): SparseCheckout => {\n    const sparseKeys = [...inputsOf(node).keys()].filter((key) =>\n      key.startsWith(\"SPARSE-CHECKOUT\"),\n    );\n    if (sparseKeys.length === 0) return { mode: \"all\" };\n    if (\n      sparseKeys.some(\n        (key) =>\n          key !== \"SPARSE-CHECKOUT\" && key !== \"SPARSE-CHECKOUT-CONE-MODE\",\n      )\n    )\n      return { mode: \"invalid\" };\n    const value = getInput(node, \"sparse-checkout\");\n    const cone = getInput(node, \"sparse-checkout-cone-mode\");\n    if (\n      !isScalar(value) ||\n      typeof value.value !== \"string\" ||\n      (cone !== undefined &&\n        (!isScalar(cone) ||\n          (cone.value !== true &&\n            cone.value !== false &&\n            cone.value !== \"true\" &&\n            cone.value !== \"false\")))\n    )\n      return { mode: \"invalid\" };\n    const paths = value.value\n      .split(/\\r?\\n/)\n      .map((entry) => entry.trim())\n      .filter((entry) => entry !== \"\");\n    if (\n      paths.length === 0 ||\n      paths.some(\n        (entry) =>\n          !staticRepositoryPath(entry) ||\n          entry.startsWith(\"!\") ||\n          /[*?[\\]]/.test(entry),\n      )\n    )\n      return { mode: \"invalid\" };\n    return { mode: \"files\", paths: new Set(paths) };\n  };\n  const checkAction = (node: unknown) => {\n    node = resolveNode(node);\n    if (!isMap(node)) return;\n    inputsOf(node);\n    const uses = getNode(node, \"uses\");\n    if (uses === undefined) return;\n    const line = nodeLine(uses);\n    if (!isScalar(uses) || typeof uses.value !== \"string\") {\n      add({\n        rule: \"action-pins\",\n        line,\n        message: \"action uses must be a string containing a full commit SHA\",\n      });\n      return;\n    }\n    const value = uses.value;\n    if (value.startsWith(\"$/\")) {\n      if (\n        value.length === 2 ||\n        /\\s/.test(value) ||\n        value.includes(\"@\") ||\n        value.includes(\"${{\") ||\n        value.includes(\"\\\\\") ||\n        value.split(\"/\").includes(\"..\")\n      )\n        add({\n          rule: \"action-pins\",\n          line,\n          message:\n            \"self-repository actions must use a static repository path without a ref suffix\",\n        });\n      return;\n    }\n    if (value.startsWith(\"./\")) {\n      const selector = staticRepositoryPath(value)\n        ? path.posix.normalize(value)\n        : undefined;\n      const binding =\n        selector === undefined\n          ? undefined\n          : checkoutBindings.findLast(\n              (entry) =>\n                entry.path === \".\" ||\n                selector === entry.path ||\n                selector.startsWith(`${entry.path}/`),\n            );\n      if (\n        selector === undefined ||\n        unknownCheckoutDestination ||\n        (binding !== undefined && binding.source !== \"tracked\") ||\n        [...checkoutDestinations].some(\n          ([prefix, count]) =>\n            count > 1 &&\n            (prefix === \".\" ||\n              selector === prefix ||\n              selector.startsWith(`${prefix}/`)),\n        )\n      )\n        add({\n          rule: \"action-pins\",\n          line,\n          message:\n            \"local actions require an unambiguous checkout of the current source snapshot\",\n        });\n      return;\n    }\n    if (value.startsWith(\"docker://\")) {\n      add({\n        rule: \"action-pins\",\n        line,\n        message: \"Docker image actions require a reasoned action-pins opt-out\",\n      });\n      checkRuntimeImage({\n        image: value.slice(\"docker://\".length),\n        line,\n        label: \"Docker action image\",\n      });\n      return;\n    }\n    const remote = /^([^./][^\\s@]*\\/[^\\s@]+)@([^\\s]+)$/.exec(value);\n    if (remote === null) {\n      add({\n        rule: \"action-pins\",\n        line,\n        message: \"remote actions must use a full commit SHA\",\n      });\n      return;\n    }\n    const action = remote[1]?.toLowerCase();\n    const ref = remote[2];\n    const approved =\n      action === undefined\n        ? undefined\n        : (approvedActions.get(action) ??\n          approvedActions.get(action.split(\"/\").slice(0, 2).join(\"/\")));\n    if (ref === undefined || !/^[a-f0-9]{40}$/.test(ref))\n      add({\n        rule: \"action-pins\",\n        line,\n        message: \"remote actions must use a full commit SHA\",\n      });\n    else if (approved !== undefined && ref !== approved.sha)\n      add({\n        rule: \"action-pins\",\n        line,\n        message: `${action} must use ${approved.sha}`,\n      });\n    const declaration = sourceMap({ node, key: \"uses\" });\n    const comment =\n      uses.comment ??\n      (isMap(declaration) ? declaration.comment : undefined) ??\n      \"\";\n    if (\n      approved !== undefined &&\n      !comment.trim().split(/\\s+/).includes(approved.version)\n    )\n      add({\n        rule: \"action-pins\",\n        line,\n        message: `${action} requires a # ${approved.version} version comment`,\n      });\n    if (action === \"actions/checkout\") {\n      const checkoutRepository = getInput(node, \"repository\");\n      const checkoutRef = getInput(node, \"ref\");\n      const prefix = checkoutPrefixOf(node);\n      let repo: unknown;\n      if (checkoutRepository !== undefined)\n        repo = isScalar(checkoutRepository) ? checkoutRepository.value : null;\n      const self =\n        repo === undefined ||\n        repo === \"${{ github.repository }}\" ||\n        (typeof repo === \"string\" &&\n          repository !== undefined &&\n          repo.toLowerCase() === repository.toLowerCase());\n      const workflowSource =\n        repo === \"${{ job.workflow_repository }}\" &&\n        isScalar(checkoutRef) &&\n        checkoutRef.value === \"${{ job.workflow_sha }}\";\n      const currentSource = self && checkoutRef === undefined;\n      const refValue = isScalar(checkoutRef) ? checkoutRef.value : undefined;\n      const dynamicRef = dynamicRefBody(refValue);\n      const delegatedSource =\n        (self || repo === \"${{ job.workflow_repository }}\") &&\n        dynamicRef !== undefined &&\n        dynamicRef !== \"\" &&\n        !/^(?:'(?:[^']|'')*'|\"(?:[^\"\\\\]|\\\\.)*\"|(?:true|false|null)|-?(?:0x[\\da-f]+|(?:\\d+(?:\\.\\d*)?|\\.\\d+)(?:e[+-]?\\d+)?))$/i.test(\n          dynamicRef,\n        ) &&\n        !/^(?:github\\s*(?:\\.\\s*sha|\\[\\s*['\"]sha['\"]\\s*\\])|job\\s*(?:\\.\\s*workflow_sha|\\[\\s*['\"]workflow_sha['\"]\\s*\\]))$/i.test(\n          dynamicRef,\n        );\n\n      if (!staticRepositoryPath(prefix)) {\n        // Unknown checkout destinations may shadow any tracked selector.\n        checkoutBindings.push({\n          path: \".\",\n          source: \"untrusted\",\n          sparse: { mode: \"invalid\" },\n        });\n      } else {\n        const destination = normalizeCheckoutPath(prefix);\n        const trustedWriter =\n          ref === approved?.sha &&\n          sourceMap({ node, key: \"if\" }) === undefined &&\n          sourceMap({ node, key: \"continue-on-error\" }) === undefined &&\n          checkoutDestinations.get(destination) === 1 &&\n          !unknownCheckoutDestination;\n        if (trustedWriter && delegatedSource && typeof refValue === \"string\")\n          checkoutBindings.push({\n            path: destination,\n            sparse: sparseCheckoutOf(node),\n            source: \"delegated\",\n            ref: refValue,\n          });\n        else\n          checkoutBindings.push({\n            path: destination,\n            sparse: sparseCheckoutOf(node),\n            source:\n              trustedWriter && (workflowSource || currentSource)\n                ? \"tracked\"\n                : \"untrusted\",\n          });\n      }\n    }\n    let tool: RuntimeDelegation[\"tool\"];\n    switch (action) {\n      case \"actions/setup-node\":\n        tool = \"node\";\n        break;\n      case \"actions/setup-python\":\n        tool = \"python\";\n        break;\n      case \"oven-sh/setup-bun\":\n        tool = \"bun\";\n        break;\n      default:\n        return;\n    }\n    const literal = getInput(node, `${tool}-version`);\n    if (literal !== undefined)\n      add({\n        rule: tool === \"bun\" ? \"bun-pins\" : \"runtime-workflow\",\n        line: nodeLine(literal),\n        message: `setup-${tool} must use ${tool}-version-file`,\n      });\n    const reference = getInput(node, `${tool}-version-file`);\n    checkReference({\n      value: isScalar(reference) ? reference.value : undefined,\n      tool,\n      line: reference === undefined ? line : nodeLine(reference),\n    });\n  };\n  const checkContainer = (node: unknown) => {\n    node = resolveNode(node);\n    if (node === undefined) return;\n    const image = isMap(node) ? getNode(node, \"image\") : node;\n    checkRuntimeImage({\n      image: isScalar(image) ? image.value : undefined,\n      line: nodeLine(image ?? node),\n      label: \"container image\",\n    });\n  };\n  const checkSteps = (node: unknown) => {\n    checkoutBindings = [];\n    checkoutDestinations = new Map();\n    unknownCheckoutDestination = false;\n    node = resolveNode(node);\n    if (!isSeq(node)) return;\n    for (const step of node.items) {\n      const uses = getNode(step, \"uses\");\n      if (\n        !isScalar(uses) ||\n        typeof uses.value !== \"string\" ||\n        !uses.value.toLowerCase().startsWith(\"actions/checkout@\")\n      )\n        continue;\n      const prefix = checkoutPrefixOf(step);\n      if (!staticRepositoryPath(prefix)) {\n        unknownCheckoutDestination = true;\n        continue;\n      }\n      const destination = normalizeCheckoutPath(prefix);\n      checkoutDestinations.set(\n        destination,\n        (checkoutDestinations.get(destination) ?? 0) + 1,\n      );\n    }\n    for (const step of node.items) checkAction(step);\n  };\n  try {\n    // Resolve aliases first with an expansion bound before visiting executable fields.\n    document.toJS({ maxAliasCount: 100 });\n    if (automationKind === \"workflow\") {\n      const jobs = getNode(document.contents, \"jobs\");\n      if (isMap(jobs))\n        for (const key of keysOf(jobs)) {\n          checkoutBindings = [];\n          checkoutDestinations = new Map();\n          unknownCheckoutDestination = false;\n          const job = getNode(jobs, key);\n          checkAction(job);\n          checkContainer(getNode(job, \"container\"));\n          const services = getNode(job, \"services\");\n          if (isMap(services))\n            for (const service of keysOf(services))\n              checkContainer(getNode(services, service));\n          checkSteps(getNode(job, \"steps\"));\n        }\n    } else {\n      const runs = getNode(document.contents, \"runs\");\n      const using = getNode(runs, \"using\");\n      if (isScalar(using) && using.value === \"composite\")\n        checkSteps(getNode(runs, \"steps\"));\n      if (isScalar(using) && using.value === \"docker\") {\n        const image = getNode(runs, \"image\");\n        const value = isScalar(image) ? image.value : undefined;\n        if (typeof value === \"string\" && value.startsWith(\"docker://\")) {\n          add({\n            rule: \"action-pins\",\n            line: nodeLine(image),\n            message:\n              \"Docker image actions require a reasoned action-pins opt-out\",\n          });\n          checkRuntimeImage({\n            image: value.slice(\"docker://\".length),\n            line: nodeLine(image),\n            label: \"Docker action image\",\n          });\n        } else if (\n          typeof value !== \"string\" ||\n          value.includes(\"${{\") ||\n          value.includes(\"\\\\\") ||\n          value.includes(\":\") ||\n          path.posix.isAbsolute(value) ||\n          path.posix\n            .normalize(path.posix.join(path.posix.dirname(file), value))\n            .split(\"/\")\n            .at(0) === \"..\" ||\n          path.posix.basename(value) !== \"Dockerfile\"\n        ) {\n          add({\n            rule: \"action-pins\",\n            line: nodeLine(image),\n            message:\n              \"Docker actions must reference a local Dockerfile or declare a reasoned action-pins opt-out for an external image\",\n          });\n        }\n      }\n    }\n  } catch {\n    add({\n      rule: \"runtime-workflow\",\n      line: 1,\n      message: \"cannot resolve workflow YAML aliases\",\n    });\n  }\n  return diagnostics;\n};\n","import { valid } from \"semver\";\n\nimport { nodePolicyValid } from \"./toolchain-node\";\n\nexport const packagePinKeys = [\n  \"oxlint\",\n  \"oxlint-tsgolint\",\n  \"@oxlint/plugins\",\n  \"@stll/oxlint-plugin\",\n  \"oxfmt\",\n  \"lefthook\",\n] as const;\n\nconst record = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\n/** Reject unsupported or incomplete installed policies before inspecting a consumer. */\nexport const parseToolchainPolicy = (input: unknown) => {\n  if (!record(input) || input[\"schemaVersion\"] !== 1)\n    throw new Error(\"toolchain.json must use schemaVersion 1\");\n  const string = (object: Record<string, unknown>, key: string) => {\n    const value = object[key];\n    if (typeof value !== \"string\" || value.trim() === \"\")\n      throw new Error(`toolchain.json requires a nonempty ${key}`);\n    return value;\n  };\n  const packages: Record<string, string> = {};\n  for (const key of packagePinKeys) packages[key] = string(input, key);\n  const bun = string(input, \"bun\");\n  const typescript = string(input, \"typescript\");\n  const node = string(input, \"node\");\n  const python = string(input, \"python\");\n  const rust = string(input, \"rust\");\n  const rustCompilerDevelopment = string(input, \"rustCompilerDevelopment\");\n  for (const [name, value] of Object.entries({\n    ...packages,\n    bun,\n    typescript,\n  }))\n    if (valid(value) !== value)\n      throw new Error(`toolchain.json ${name} must be an exact release`);\n  if (!nodePolicyValid(node))\n    throw new Error(\"Node must be a canonical major N.x series\");\n  if (!/^\\d+\\.\\d+(?:\\.\\d+)?$/.test(python))\n    throw new Error(\"Python must be an exact minor or patch release\");\n  if (!/^\\d+\\.\\d+\\.\\d+$/.test(rust))\n    throw new Error(\"Rust must be an exact stable release\");\n  if (!/^nightly-\\d{4}-\\d{2}-\\d{2}$/.test(rustCompilerDevelopment))\n    throw new Error(\"Rust compiler development must be a dated nightly\");\n  const compatibility = input[\"typescript6Compatibility\"];\n  if (!record(compatibility))\n    throw new Error(\"missing TypeScript compatibility policy\");\n  const version = string(compatibility, \"version\");\n  const packageAlias = string(compatibility, \"packageAlias\");\n  if (valid(version) !== version)\n    throw new Error(\"TypeScript compatibility must be an exact release\");\n  const layouts = input[\"typescriptInstallLayouts\"];\n  if (!Array.isArray(layouts) || layouts.length === 0)\n    throw new Error(\"missing TypeScript install layouts\");\n  const typescriptInstallLayouts = layouts.map((layout: unknown) => {\n    if (!record(layout)) throw new Error(\"invalid TypeScript install layout\");\n    const compilerPackage = string(layout, \"compilerPackage\");\n    const compilerSpecifier = string(layout, \"compilerSpecifier\");\n    const typecheckCommand = string(layout, \"typecheckCommand\");\n    switch (layout[\"type\"]) {\n      case \"direct\":\n        if (\n          compilerSpecifier !== typescript ||\n          compilerPackage !== \"typescript\"\n        )\n          throw new Error(\n            \"direct TypeScript layout differs from shared version\",\n          );\n        return {\n          type: \"direct\",\n          compilerPackage,\n          compilerSpecifier,\n          typecheckCommand,\n        } as const;\n      case \"split-compatibility\": {\n        const compatibilityPackage = string(layout, \"compatibilityPackage\");\n        const compatibilitySpecifier = string(layout, \"compatibilitySpecifier\");\n        if (\n          compilerSpecifier !== `npm:typescript@${typescript}` ||\n          compatibilitySpecifier !== version\n        )\n          throw new Error(\n            \"split TypeScript layout differs from shared versions\",\n          );\n        return {\n          type: \"split-compatibility\",\n          compilerPackage,\n          compilerSpecifier,\n          compatibilityPackage,\n          compatibilitySpecifier,\n          typecheckCommand,\n        } as const;\n      }\n      default:\n        throw new Error(\"unsupported TypeScript install layout\");\n    }\n  });\n  const actionsInput = input[\"actions\"];\n  if (!record(actionsInput) || Object.keys(actionsInput).length === 0)\n    throw new Error(\"missing approved actions\");\n  const actions: Record<string, { sha: string; version: string }> = {};\n  for (const [name, action] of Object.entries(actionsInput)) {\n    if (!record(action)) throw new Error(`invalid action policy: ${name}`);\n    const sha = string(action, \"sha\");\n    const actionVersion = string(action, \"version\");\n    if (!/^[a-f0-9]{40}$/.test(sha) || !/^v\\d+(?:\\.\\d+)*$/.test(actionVersion))\n      throw new Error(`invalid action SHA/version: ${name}`);\n    actions[name] = { sha, version: actionVersion };\n  }\n  const dependabotInput = input[\"dependabot\"];\n  if (\n    !record(dependabotInput) ||\n    !record(dependabotInput[\"schedule\"]) ||\n    !record(dependabotInput[\"cooldown\"]) ||\n    !record(dependabotInput[\"groups\"])\n  )\n    throw new Error(\"missing Dependabot policy\");\n  const scheduleInput = dependabotInput[\"schedule\"];\n  const schedule = {\n    interval: string(scheduleInput, \"interval\"),\n    day: string(scheduleInput, \"day\"),\n    time: string(scheduleInput, \"time\"),\n    timezone: string(scheduleInput, \"timezone\"),\n  };\n  const defaultDays = dependabotInput[\"cooldown\"][\"defaultDays\"];\n  if (\n    typeof defaultDays !== \"number\" ||\n    !Number.isInteger(defaultDays) ||\n    defaultDays < 5\n  )\n    throw new Error(\"Dependabot cooldown must be at least five days\");\n  const strings = (value: unknown): string[] => {\n    if (\n      !Array.isArray(value) ||\n      !value.every((entry: unknown) => typeof entry === \"string\")\n    )\n      throw new Error(\"Dependabot group values must be string arrays\");\n    return value;\n  };\n  const groups: Record<string, { patterns: string[]; updateTypes: string[] }> =\n    {};\n  for (const [name, group] of Object.entries(dependabotInput[\"groups\"])) {\n    if (!record(group)) throw new Error(`invalid Dependabot group: ${name}`);\n    groups[name] = {\n      patterns: strings(group[\"patterns\"]),\n      updateTypes: strings(group[\"updateTypes\"]),\n    };\n  }\n  return {\n    bun,\n    typescript,\n    node,\n    python,\n    rust,\n    rustCompilerDevelopment,\n    packages,\n    actions,\n    typescriptInstallLayouts,\n    typescript6Compatibility: { version, packageAlias },\n    dependabot: {\n      schedule,\n      cooldown: { defaultDays },\n      groups,\n      ignoredPackages: [\n        ...new Set([\n          ...Object.keys(packages),\n          ...typescriptInstallLayouts.flatMap((layout) =>\n            layout.type === \"direct\"\n              ? [layout.compilerPackage]\n              : [layout.compilerPackage, layout.compatibilityPackage],\n          ),\n          packageAlias,\n          \"bun-types\",\n        ]),\n      ],\n      ignoredActions: Object.keys(actions),\n      ignoredImages: [\"node\", \"python\", \"oven/bun\"],\n    },\n  };\n};\n","import { execFileSync } from \"node:child_process\";\nimport { readFileSync, realpathSync } from \"node:fs\";\nimport path from \"node:path\";\n\nimport { checkDependabot, dependabotRules } from \"./toolchain-dependabot\";\nimport { toolchainInputKind } from \"./toolchain-inputs\";\nimport { checkPackageFiles, packageRules } from \"./toolchain-packages\";\nimport {\n  checkRuntimeFile,\n  runtimeRules,\n  type RuntimeDelegation,\n} from \"./toolchain-runtime\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\nexport const toolchainRules = [\n  ...new Set([...packageRules, ...runtimeRules, ...dependabotRules]),\n] as const;\nexport type ToolchainRule = (typeof toolchainRules)[number];\nexport type SharedToolchainDiagnostic = {\n  rule: ToolchainRule | \"configuration\";\n  path: string;\n  line: number;\n  message: string;\n};\n\nconst record = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst array = (value: unknown): value is readonly unknown[] =>\n  Array.isArray(value);\n\n/** Opt-outs are repository-owned, tracked decisions; malformed decisions fail closed. */\nexport const parseToolchainOptOuts = (input: unknown) => {\n  if (\n    !record(input) ||\n    Object.keys(input).some((key) => key !== \"optOuts\") ||\n    !array(input[\"optOuts\"])\n  )\n    throw new Error('stll-toolchain.json must contain only an \"optOuts\" array');\n  const disabled = new Set<string>();\n  for (const entry of input[\"optOuts\"]) {\n    if (\n      !record(entry) ||\n      Object.keys(entry).some((key) => key !== \"rule\" && key !== \"reason\") ||\n      typeof entry[\"rule\"] !== \"string\" ||\n      !toolchainRules.some((rule) => rule === entry[\"rule\"]) ||\n      typeof entry[\"reason\"] !== \"string\" ||\n      entry[\"reason\"].trim() === \"\" ||\n      disabled.has(entry[\"rule\"])\n    )\n      throw new Error(\n        \"each opt-out requires a unique known rule and a nonempty reason\",\n      );\n    if (entry[\"rule\"] === \"node-engine\")\n      throw new Error(\n        \"node-engine cannot be opted out; engines.node must support the shared Node series\",\n      );\n    disabled.add(entry[\"rule\"]);\n  }\n  return disabled;\n};\n\n/** Read one tracked configuration snapshot for guards and policy generation. */\nexport const readToolchainInputs = (root: string) => {\n  const diagnostics: SharedToolchainDiagnostic[] = [];\n  const tracked = execFileSync(\"git\", [\"ls-files\", \"-z\", \"--cached\"], {\n    cwd: root,\n    encoding: \"utf8\",\n  })\n    .split(\"\\0\")\n    .filter((file) => file !== \"\");\n  const files: Record<string, string> = {};\n  const trackedFiles = new Set(tracked);\n  const resolvedRoot = realpathSync(root);\n  for (const file of tracked) {\n    // Only configuration inputs are read; source files can contain arbitrary examples.\n    const kind = toolchainInputKind(file);\n    if (kind === undefined) continue;\n    if (kind === \"presence\") {\n      files[file] = \"\";\n      continue;\n    }\n    try {\n      const resolvedFile = realpathSync(path.join(resolvedRoot, file));\n      const relative = path.relative(resolvedRoot, resolvedFile);\n      if (\n        path.isAbsolute(relative) ||\n        relative.split(path.sep).at(0) === \"..\" ||\n        !trackedFiles.has(relative.split(path.sep).join(\"/\"))\n      )\n        throw new Error(\"Configuration target is outside the tracked tree\");\n      files[file] = readFileSync(resolvedFile, \"utf8\");\n    } catch {\n      diagnostics.push({\n        rule: \"configuration\",\n        path: file,\n        line: 1,\n        message: \"cannot read tracked configuration file\",\n      });\n    }\n  }\n  return { files, trackedFiles, diagnostics };\n};\n\ntype CheckSharedToolchainOptions = {\n  root: string;\n  policy: ReturnType<typeof parseToolchainPolicy>;\n  onDelegated?: ((report: RuntimeDelegation) => void) | undefined;\n};\n\nexport const checkToolchain = ({\n  root,\n  policy,\n  onDelegated,\n}: CheckSharedToolchainOptions) => {\n  const { files, trackedFiles, diagnostics } = readToolchainInputs(root);\n  let repository: string | undefined;\n  try {\n    const origin = execFileSync(\"git\", [\"remote\", \"get-url\", \"origin\"], {\n      cwd: root,\n      encoding: \"utf8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n    }).trim();\n    repository =\n      /^(?:https?:\\/\\/github\\.com\\/|git@github\\.com:|ssh:\\/\\/git@github\\.com\\/)([^/]+\\/[^/]+?)(?:\\.git)?\\/?$/.exec(\n        origin,\n      )?.[1];\n  } catch {\n    // Repositories without a GitHub origin can still use github.repository.\n  }\n\n  let disabled = new Set<string>();\n  if (files[\"stll-toolchain.json\"] !== undefined) {\n    try {\n      disabled = parseToolchainOptOuts(\n        JSON.parse(files[\"stll-toolchain.json\"]),\n      );\n    } catch (error) {\n      diagnostics.push({\n        rule: \"configuration\",\n        path: \"stll-toolchain.json\",\n        line: 1,\n        message: error instanceof Error ? error.message : String(error),\n      });\n    }\n  }\n  diagnostics.push(...checkPackageFiles({ files, policy }));\n  for (const [file, text] of Object.entries(files))\n    diagnostics.push(\n      ...checkRuntimeFile({\n        file,\n        text,\n        policy: {\n          ...policy,\n          packages: { ...policy.packages, typescript: policy.typescript },\n        },\n        trackedFiles,\n        repository,\n        onDelegated,\n        readFile: (target) => files[target],\n      }),\n    );\n  diagnostics.push(...checkDependabot({ files, policy: policy.dependabot }));\n  return diagnostics.filter((diagnostic) => !disabled.has(diagnostic.rule));\n};\n","#!/usr/bin/env node\nimport { readFileSync } from \"node:fs\";\n\nimport { checkToolchain } from \"./toolchain-guard\";\nimport { parseToolchainPolicy } from \"./toolchain-schema\";\n\ntry {\n  const args = process.argv.slice(2);\n  if (args.length === 1 && args[0] === \"--help\") {\n    process.stdout.write(\n      \"Usage: stll-toolchain-check (opt-outs: tracked stll-toolchain.json)\\n\",\n    );\n    process.exit(0);\n  }\n  if (args.length !== 0) throw new Error(`unexpected argument: ${args.at(0)}`);\n  const policy = parseToolchainPolicy(\n    JSON.parse(\n      readFileSync(new URL(\"../toolchain.json\", import.meta.url), \"utf8\"),\n    ),\n  );\n  const diagnostics = checkToolchain({\n    root: process.cwd(),\n    policy,\n    onDelegated: ({ path, line, tool, selector, ref }) =>\n      process.stdout.write(\n        `${path}:${line}: [runtime-delegated] setup-${tool} ${selector} delegates its version to checkout ref ${ref}\\n`,\n      ),\n  });\n  for (const diagnostic of diagnostics)\n    process.stderr.write(\n      `${diagnostic.path}:${diagnostic.line}: [${diagnostic.rule}] ${diagnostic.message}\\n`,\n    );\n  if (diagnostics.length > 0) process.exitCode = 1;\n} catch (error) {\n  process.stderr.write(\n    `toolchain-check:1: ${error instanceof Error ? error.message : String(error)}\\n`,\n  );\n  process.exitCode = 1;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAMA,YAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;;AAGrE,MAAa,2BAA2B,SACtC,2DAA2D,KACzD,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAC5B;;AAGF,MAAa,8BAA8B,SACzC,mBAAmB,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE;AAQtD,MAAa,yBAAyB;CACpC,KAAK,CAAC,MAAM;CACZ,YAAY;EAAC;EAAQ;EAAY;CAAM;CACvC,WAAW;EAAC;EAAQ;EAAY;CAAM;CACtC,aAAa;EAAC;EAAQ;EAAY;CAAM;CACxC,YAAY;EAAC;EAAQ;EAAY;CAAM;CACvC,uBAAuB;EAAC;EAAQ;EAAY;CAAM;CAClD,KAAK;EAAC;EAAQ;EAAY;CAAM;CAChC,SAAS;EAAC;EAAQ;EAAe;EAAQ;EAAY;CAAM;AAC7D;;AAGA,MAAa,2BACX,UACA,SACkC;CAClC,IAAI,CAACA,SAAO,QAAQ,GAAG,OAAO,KAAA;CAC9B,MAAM,WAAW,SAAS;CAC1B,IAAI,wBAAwB,IAAI,KAAKA,SAAO,QAAQ,GAAG;EACrD,MAAM,SAA2B,CAAC;EAClC,KAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,QAAQ,GACnD,IAAIA,SAAO,OAAO,KAAK,QAAQ,aAAa,KAAA,GAC1C,OAAO,KAAK;GACV,OAAO,QAAQ;GACf,MAAM;IAAC;IAAY;IAAM;GAAO;EAClC,CAAC;EAEL,OAAO;GAAE,WAAW;GAAkB;EAAO;CAC/C;CACA,IACE,OAAO,SAAS,kBAAkB,YAClC,OAAO,SAAS,YAAY,UAE5B,OAAO,KAAA;CACT,MAAM,SAA2B,CAAC;CAClC,MAAM,0BAAU,IAAI,IAA6B;CACjD,MAAM,gBACJ,UACA,WACG;EACH,IAAI,QAAQ,IAAI,QAAQ,GAAG;EAC3B,QAAQ,IAAI,QAAQ;EACpB,IACE,OAAO,SAAS,kBAAkB,YAClC,OAAO,SAAS,YAAY,UAE5B;EACF,IAAI,SAAS,YAAY,UAAU,MAAM,QAAQ,SAAS,QAAQ,GAAG;GACnE,KAAK,MAAM,CAAC,OAAO,SAAS,SAAS,QAAQ,CAAC,QAAQ,GACpD,IAAIA,SAAO,IAAI,GAAG,aAAa,MAAM;IAAC,GAAG;IAAQ;IAAS;GAAK,CAAC;GAClE;EACF;EACA,MAAM,WAAW,OAAO,QAAQ,sBAAsB,CAAC,CAAC,MACrD,CAAC,UAAU,SAAS,SAAS,OAChC,CAAC,GAAG;EACJ,IAAI,aAAa,KAAA,GAAW;EAC5B,IAAI,OAAgB;EACpB,KAAK,MAAM,OAAO,UAAU,OAAOA,SAAO,IAAI,IAAI,KAAK,OAAO,KAAA;EAC9D,IAAI,CAACA,SAAO,IAAI,GAAG;EACnB,KAAK,MAAM,OAAO;GAAC;GAAc;GAAkB;EAAqB,GAAG;GACzE,MAAM,aAAa,KAAK;GACxB,IAAI,CAAC,MAAM,QAAQ,UAAU,GAAG;GAChC,KAAK,MAAM,CAAC,OAAO,cAAc,WAAW,QAAQ,GAClD,IAAIA,SAAO,SAAS,KAAK,UAAU,aAAa,KAAA,GAC9C,OAAO,KAAK;IACV,OAAO,UAAU;IACjB,MAAM;KAAC,GAAG;KAAQ,GAAG;KAAU;KAAK;KAAO;IAAO;GACpD,CAAC;EAEP;CACF;CACA,aAAa,UAAU,CAAC,CAAC;CACzB,OAAO,OAAO,WAAW,IAAI,KAAA,IAAY;EAAE,WAAW;EAAU;CAAO;AACzE;;;;AC3FA,MAAa,sBAAsB;CACjC;CACA;CACA;AACF;;AAGA,MAAa,2BAA2B,WAA8B;CACpE,MAAM,0BAAU,IAAI,IAAY;CAChC,KAAK,MAAM,SAAS,QAClB,KAAK,MAAM,cAAc,CAAC,OAAO,WAAW,OAAO,GAAG;EACpD,QAAQ,IAAI,UAAU;EACtB,KAAK,MAAM,YAAY,qBACrB,QAAQ,IAAI,GAAG,SAAS,GAAG,YAAY;CAC3C;CAEF,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,KAAK;AAC3B;;AAGA,MAAa,0BAA0B,UAAkB;CACvD,MAAM,WAAW,oBAAoB,MAAM,UACzC,MAAM,YAAY,CAAC,CAAC,WAAW,GAAG,MAAM,EAAE,CAC5C;CAGA,QADE,aAAa,KAAA,IAAY,QAAQ,MAAM,MAAM,SAAS,SAAS,CAAC,EAAA,CAChD,QAAQ,eAAe,EAAE;AAC7C;;;ACvBA,MAAM,qBAAqB,SACzB,SAAS,MACT,KAAK,MAAM,GAAG,CAAC,CAAC,MAAM,SAAS,SAAS,kBAAkB,SAAS,QAAQ;;AAG7E,MAAa,oBAAoB,SAC/B,CAAC,kBAAkB,IAAI,MACtB,0CAA0C,KAAK,IAAI,KAClD,qEAAqE,KACnE,IACF,KACA,iEAAiE,KAC/D,IACF;;AAGJ,MAAa,4BAA4B,SAAiB;CACxD,IAAI,SAAS,IAAI,OAAO,KAAA;CACxB,IAAI,sCAAsC,KAAK,IAAI,GAAG,OAAO;CAC7D,IAAI,yBAAyB,KAAK,IAAI,GAAG,OAAO;AAElD;;AAGA,MAAa,iCAAiC,SAAiB;CAC7D,MAAM,OAAO,yBAAyB,IAAI;CAC1C,OAAO,SAAS,cAAe,SAAS,YAAY,CAAC,KAAK,SAAS,GAAG;AACxE;;AAGA,MAAa,gCAAgC,SAAiB;CAC5D,IAAI,kBAAkB,IAAI,GAAG,OAAO,KAAA;CACpC,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE;CAClC,IAAI,SAAS,kBAAkB,OAAO;CACtC,IAAI,SAAS,WAAW,OAAO;CAC/B,IAAI,SAAS,gBAAgB,OAAO;CACpC,IAAI,SAAS,cAAc,SAAS,aAAa,OAAO;CACxD,IAAI,SAAS,KAAA,KAAa,kCAAkC,KAAK,IAAI,GACnE,OAAO;AAEX;AAEA,MAAa,8BAA8B,SACzC,6BAA6B,IAAI,MAAM,KAAA;;AAGzC,MAAa,0BAA0B,SAAiB;CACtD,IAAI,kBAAkB,IAAI,GAAG,OAAO;CACpC,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK;CACvC,IACE,0GAA0G,KACxG,IACF,GAEA,OAAO;CACT,OAAO,4DAA4D,KAAK,IAAI;AAC9E;;AAGA,MAAa,sBAAsB,SAAiB;CAClD,IAAI,yBAAyB,IAAI,MAAM,KAAA,GAAW,OAAO;CACzD,IAAI,kBAAkB,IAAI,GAAG,OAAO,KAAA;CACpC,IACE,6BAA6B,IAAI,MAAM,kBACvC,kCAAkC,KAAK,IAAI,GAE3C,OAAO;CACT,IACE,yBAAyB,IAAI,MAAM,KAAA,KACnC,iBAAiB,IAAI,KACrB,2BAA2B,IAAI,KAC/B,uBAAuB,IAAI,KAC3B,wBAAwB,IAAI,KAC5B,2BAA2B,IAAI,KAC/B,iPAAiP,KAC/O,IACF,GAEA,OAAO;AAEX;;;AC5DA,MAAa,kBAAkB,CAAC,mBAAmB;AAqBnD,MAAMC,YAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,MAAM,WAAW,UACf,MAAM,QAAQ,KAAK,KACnB,MAAM,OAAO,UAAmB,OAAO,UAAU,QAAQ;AAE3D,MAAM,eAAe,OAAgB,aAAgC;CACnE,IAAI,CAAC,QAAQ,KAAK,KAAK,MAAM,WAAW,SAAS,QAAQ,OAAO;CAChE,MAAM,iBAAiB,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK;CAC1C,OAAO,CAAC,GAAG,KAAK,CAAC,CACd,KAAK,CAAC,CACN,OAAO,OAAO,UAAU,UAAU,eAAe,MAAM;AAC5D;AAEA,MAAM,eAAe,SAAiB;CACpC,MAAM,YAAYC,UAAAA,QAAK,MAAM,QAAQ,IAAI;CACzC,OAAO,cAAc,MAAM,MAAM,IAAI;AACvC;AAEA,MAAM,qBAAqB;CACzB,KAAK;CACL,OAAO;CACP,IAAI;AACN;AAEA,MAAM,kBACJ,QACA,cACG;CACH,QAAQ,WAAR;EACE,KAAK,OACH,OAAO,OAAO;EAChB,KAAK,SACH,OAAO,OAAO;EAChB,KAAK,MAAM;GACT,MAAM,OAAO,OAAO;GACpB,MAAM,KAAKD,SAAO,IAAI,IAAI,KAAK,QAAQ,KAAA;GACvC,OAAOA,SAAO,EAAE,IAAI,GAAG,eAAe,KAAA;EACxC;EACA,SAEE,MAAM,IAAI,MAAM,+BAA+B,EAAE,OAAOE,UAAW,CAAC;CAExE;AACF;;AAGA,MAAM,kBACJ,OACA,cACG;CACH,MAAM,YAAY,OAAO,KAAK,KAAK,CAAC,CAAC,QAClC,SACCD,UAAAA,QAAK,MAAM,SAAS,IAAI,MAAM,mBAAmB,cAChD,cAAc,SACbA,UAAAA,QAAK,MAAM,SAAS,IAAI,MAAM,qBACpC;CACA,MAAM,6BAAa,IAAI,IAAsB;CAC7C,KAAK,MAAM,QAAQ,WAAW;EAC5B,IAAI,cAAc,OAAO;GACvB,MAAM,YAAYA,UAAAA,QAAK,MAAM,QAAQ,IAAI;GACzC,MAAM,gBAAgBA,UAAAA,QAAK,MAAM,KAAK,WAAW,qBAAqB;GACtE,MAAM,OAAO,MAAM;GACnB,IAAI,SAAS,KAAA,GAAW;IACtB,MAAM,YAAA,GAAA,KAAA,cAAA,CAAyB,IAAI;IACnC,IAAI,SAAS,OAAO,SAAS,GAC3B,MAAM,IAAI,MAAM,GAAG,cAAc,gCAAgC;IACnE,MAAM,SAAkB,SAAS,KAAK,EAAE,eAAe,IAAI,CAAC;IAC5D,IAAI,CAACD,SAAO,MAAM,GAChB,MAAM,IAAI,MACR,GAAG,cAAc,0CACnB;IACF,MAAM,WAAW,OAAO,eAAe,CAAC;IACxC,IAAI,CAAC,QAAQ,QAAQ,GACnB,MAAM,IAAI,MACR,GAAG,cAAc,yCACnB;IACF,WAAW,IACT,WACA,SAAS,KAAK,YACZ,QAAQ,WAAW,GAAG,IAClB,IAAIC,UAAAA,QAAK,MAAM,UAAU,QAAQ,MAAM,CAAC,CAAC,MACzCA,UAAAA,QAAK,MAAM,UAAU,OAAO,CAClC,CACF;IACA;GACF;EACF;EACA,IAAI;GACF,MAAM,SACJ,cAAc,QACV,KAAK,MAAM,MAAM,SAAS,EAAE,KAAA,GAAA,UAAA,MAAA,CAClB,MAAM,SAAS,EAAE;GACjC,IAAI,CAACD,SAAO,MAAM,GAAG;GACrB,IACE,cAAc,SACd,OAAO,OAAO,sBAAsB,YACpC,OAAO,iBAAiB,CAAC,WAAW,OAAO,GAE3C;GACF,MAAM,QAAQ,eAAe,QAAQ,SAAS;GAC9C,MAAM,WAAWA,SAAO,KAAK,IACzB,MAAM,cAAc,QAAQ,aAAa,aACzC;GACJ,MAAM,UACJ,cAAc,WAAWA,SAAO,KAAK,KAAK,aAAa,KAAA,IACnD,CAAC,IACD;GACN,IAAI,QAAQ,OAAO,GAAG;IACpB,MAAM,WACJ,cAAc,SAASA,SAAO,KAAK,KAAK,QAAQ,MAAM,UAAU,IAC5D,MAAM,UAAU,CAAC,KAAK,YAAY,IAAI,SAAS,IAC/C,CAAC;IACP,WAAW,IAAIC,UAAAA,QAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,GAAG,SAAS,GAAG,QAAQ,CAAC;GACpE;EACF,QAAQ,CAER;CACF;CACA,MAAM,uCAAuB,IAAI,IAAyB;CAC1D,IAAI,cAAc,SAChB,KAAK,MAAM,CAAC,MAAM,aAAa,YAAY;EACzC,MAAM,WAAW,SAAS,QAAQ,YAAY,CAAC,QAAQ,WAAW,GAAG,CAAC;EACtE,MAAM,WAAW,SAAS,QAAQ,YAAY,QAAQ,WAAW,GAAG,CAAC;EACrE,MAAM,oCAAoB,IAAI,IAAI,CAAC,IAAI,CAAC;EACxC,KAAK,MAAM,QAAQ,WAAW;GAC5B,MAAM,YAAYA,UAAAA,QAAK,MAAM,QAAQ,IAAI;GACzC,MAAM,WAAWA,UAAAA,QAAK,MAAM,SAAS,MAAM,SAAS;GACpD,IACE,SAAS,MAAM,YAAY,UAAA,QAAU,QAAQ,UAAU,OAAO,CAAC,KAC/D,CAAC,SAAS,MAAM,YACd,UAAA,QAAU,QAAQ,UAAU,QAAQ,MAAM,CAAC,CAAC,CAC9C,GAEA,kBAAkB,IAAI,SAAS;EACnC;EACA,KAAK,MAAM,aAAa,mBACtB,IAAI;GACF,MAAM,UAAA,GAAA,UAAA,MAAA,CACJ,MAAMA,UAAAA,QAAK,MAAM,KAAK,WAAW,YAAY,MAAM,EACrD;GAIA,MAAM,aAAA,GAAA,UAAA,MAAA,CAFJ,MAAMA,UAAAA,QAAK,MAAM,KAAK,MAAM,YAAY,MAAM,EAErB,CAAC,CAAC;GAC7B,MAAM,YAAYD,SAAO,SAAS,IAC9B,UAAU,kBACV,KAAA;GACJ,MAAM,mBAAmB,CAAC,MAAM;GAChC,MAAM,UAAU,OAAO;GACvB,IAAIA,SAAO,OAAO,GACX;SAAA,MAAM,UAAU,OAAO,OAAO,OAAO,GACxC,IAAIA,SAAO,MAAM,GAAG,iBAAiB,KAAK,MAAM;GAAA;GAEpD,KAAK,MAAM,SAAS,kBAClB,KAAK,MAAM,OAAO;IAChB;IACA;IACA;GACF,GAAG;IACD,MAAM,eAAe,MAAM;IAC3B,IAAI,CAACA,SAAO,YAAY,GAAG;IAC3B,KAAK,MAAM,CAAC,MAAM,eAAe,OAAO,QAAQ,YAAY,GAAG;KAC7D,IAAI,CAACA,SAAO,UAAU,GAAG;KACzB,MAAM,cAAc,WAAW,iBAAiB;KAChD,MAAM,WACJ,eAAeA,SAAO,SAAS,IAC3B,UAAU,QACV;KACN,IAAI,CAACA,SAAO,QAAQ,KAAK,OAAO,SAAS,YAAY,UACnD;KACF,IACEC,UAAAA,QAAK,MAAM,WAAW,SAAS,OAAO,KACtC,mBAAmB,KAAK,SAAS,OAAO,GAExC;KACF,MAAM,SAASA,UAAAA,QAAK,MAAM,UACxBA,UAAAA,QAAK,MAAM,KACT,cAAc,OAAO,WACrB,SAAS,OACX,CACF;KACA,MAAM,WAAWA,UAAAA,QAAK,MAAM,SAAS,MAAM,MAAM;KACjD,IACE,SAAS,WAAW,KAAK,KACzB,aAAa,QACb,MAAMA,UAAAA,QAAK,MAAM,KAAK,QAAQ,YAAY,OAAO,KAAA,KACjD,SAAS,MAAM,YACb,UAAA,QAAU,QAAQ,UAAU,QAAQ,MAAM,CAAC,CAAC,CAC9C,GAEA;KACF,kBAAkB,IAAI,MAAM;IAC9B;GACF;EAEJ,QAAQ,CAER;EAEF,qBAAqB,IAAI,MAAM,iBAAiB;CAClD;CAEF,OAAO,UACJ,QAAQ,SAAS;EAChB,MAAM,YAAYA,UAAAA,QAAK,MAAM,QAAQ,IAAI;EACzC,OAAO,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,cAAc;GACjD,MAAM,WAAWA,UAAAA,QAAK,MAAM,SAAS,MAAM,SAAS;GACpD,IAAI,aAAa,MAAM,SAAS,WAAW,KAAK,GAAG,OAAO;GAC1D,MAAM,WAAW,SAAS,QAAQ,YAAY,CAAC,QAAQ,WAAW,GAAG,CAAC;GACtE,MAAM,WAAW,SAAS,QAAQ,YAAY,QAAQ,WAAW,GAAG,CAAC;GACrE,QACG,qBAAqB,IAAI,IAAI,CAAC,EAAE,IAAI,SAAS,MAAM,QAClD,SAAS,MAAM,YAAY,UAAA,QAAU,QAAQ,UAAU,OAAO,CAAC,MACjE,CAAC,SAAS,MAAM,YACd,UAAA,QAAU,QAAQ,UAAU,QAAQ,MAAM,CAAC,CAAC,CAC9C;EAEJ,CAAC;CACH,CAAC,CAAC,CACD,IAAI,WAAW,CAAC,CAChB,QAAQ,WAAW,OAAO,WAAW,OAAO,QAAQ,SAAS,MAAM,KAAK;AAC7E;AAOA,MAAM,uBACJ,WACA,UACG;CACH,MAAM,OAAO,cAAc,MAAM,MAAM,UAAU,MAAM,CAAC;CACxD,IAAI,MAAMA,UAAAA,QAAK,MAAM,KAAK,MAAM,UAAU,OAAO,KAAA,GAAW,OAAO;CACnE,IAAI;EACF,MAAM,WAAoB,KAAK,MAC7B,MAAMA,UAAAA,QAAK,MAAM,KAAK,MAAM,cAAc,MAAM,IAClD;EACA,IACED,SAAO,QAAQ,KACf,OAAO,SAAS,sBAAsB,YACtC,SAAS,iBAAiB,CAAC,WAAW,MAAM,GAE5C,OAAO;CACX,QAAQ,CAER;CACA,OAAO;AACT;AAEA,MAAM,mBAAmB,MAAc,UAAkC;CACvE,MAAM,eAAe,6BAA6B,IAAI;CACtD,IACE,iBAAiB,aACjB,iBAAiB,kBACjB,iBAAiB,SAEjB,OAAO;CACT,MAAM,OAAOC,UAAAA,QAAK,MAAM,QAAQ,IAAI;CACpC,IACE,MAAMA,UAAAA,QAAK,MAAM,KAAK,MAAM,SAAS,OAAO,KAAA,KAC5C,MAAMA,UAAAA,QAAK,MAAM,KAAK,MAAM,SAAS,OAAO,KAAA,GAE5C,OAAO;CACT,MAAM,YAAY,MAAMA,UAAAA,QAAK,MAAM,KAAK,MAAM,gBAAgB;CAC9D,IAAI,cAAc,KAAA,GAChB,IAAI;EAEF,MAAM,QAAA,GAAA,UAAA,MAAA,CADmB,SACP,CAAC,CAAC;EACpB,IAAID,SAAO,IAAI,KAAKA,SAAO,KAAK,KAAK,GAAG,OAAO;CACjD,QAAQ,CAER;CAEF,OAAO;AACT;AAEA,MAAM,kBAAkB,UAAkC;CACxD,MAAM,wBAAQ,IAAI,IAAyB;CAC3C,MAAM,eAAe,WAAmB,cAAsB;EAC5D,MAAM,cAAc,MAAM,IAAI,SAAS,qBAAK,IAAI,IAAY;EAC5D,YAAY,IAAI,SAAS;EACzB,MAAM,IAAI,WAAW,WAAW;CAClC;CACA,KAAK,MAAM,aAAa,eAAe,OAAO,KAAK,GACjD,YAAY,oBAAoB,WAAW,KAAK,GAAG,SAAS;CAC9D,KAAK,MAAM,aAAa,eAAe,OAAO,OAAO,GACnD,YAAY,SAAS,SAAS;CAChC,KAAK,MAAM,aAAa,eAAe,OAAO,IAAI,GAAG;EACnD,MAAM,OAAO,cAAc,MAAM,MAAM,UAAU,MAAM,CAAC;EACxD,YACE,gBAAgBC,UAAAA,QAAK,MAAM,KAAK,MAAM,gBAAgB,GAAG,KAAK,GAC9D,SACF;CACF;CACA,KAAK,MAAM,QAAQ,OAAO,KAAK,KAAK,GAAG;EACrC,IAAI,8BAA8B,IAAI,GAAG,YAAY,kBAAkB,GAAG;EAC1E,MAAM,OAAOA,UAAAA,QAAK,MAAM,SAAS,IAAI;EACrC,IAAI,uBAAuB,IAAI,GAAG,YAAY,UAAU,YAAY,IAAI,CAAC;EACzE,IAAI,wBAAwB,IAAI,KAAK,2BAA2B,IAAI,GAClE,KAAK,MAAM,aAAA,GAAA,KAAA,kBAAA,CAA8B,MAAM,SAAS,IAAI,EAC1D,OAAO,KACT,CAAC,GAAG;GACF,IAAI,SAAS,OAAO,SAAS,GAAG;GAChC,IAAI;IACF,MAAM,aAAa,wBACjB,SAAS,KAAK,EAAE,eAAe,IAAI,CAAC,GACpC,IACF;IACA,IAAI,eAAe,KAAA,GACjB,YAAY,WAAW,WAAW,YAAY,IAAI,CAAC;GACvD,QAAQ,CAER;EACF;EAEF,IACE,SAAS,aACT,SAAS,aACR,SAAS,oBAAoB,2BAA2B,IAAI,GAE7D,YAAY,gBAAgB,MAAM,KAAK,GAAG,YAAY,IAAI,CAAC;CAC/D;CACA,OAAO;AACT;AAEA,MAAM,cAAc,WAAmB,WAA6B;CAClE,IAAI,cAAc,SAAS,cAAc,OAAO,OAAO,OAAO;CAC9D,IAAI,cAAc,kBAAkB,OAAO,OAAO;CAClD,IAAI,cAAc,YAAY,cAAc,kBAC1C,OAAO,wBAAwB,OAAO,aAAa;CACrD,OAAO,CAAC;AACV;;AAyCA,MAAa,mBAAmB,EAC9B,OACA,aAC0C;CAC1C,MAAM,QAAQ,eAAe,KAAK;CAClC,MAAM,QAAQ,CAAC,0BAA0B,yBAAyB,CAAC,CAAC,QACjE,SAAS,MAAM,UAAU,KAAA,CAC5B;CACA,IAAI,MAAM,SAAS,KAAK,MAAM,WAAW,GAAG,OAAO,CAAC;CACpD,MAAM,OAAO,MAAM,GAAG,CAAC,KAAK;CAC5B,MAAM,cAA4B,CAAC;CACnC,MAAM,OAAO,SAAiB,OAAO,MAAM;EACzC,YAAY,KAAK;GAAE,MAAM;GAAqB,MAAM;GAAM;GAAM;EAAQ,CAAC;CAC3E;CACA,IAAI,MAAM,WAAW,GAAG;EACtB,IACE,wEACF;EACA,OAAO;CACT;CACA,IAAI,MAAM,SAAS,GAAG,IAAI,wCAAwC;CAClE,MAAM,cAAc,IAAIE,KAAAA,YAAY;CACpC,MAAM,YAAA,GAAA,KAAA,cAAA,CAAyB,MAAM,SAAS,IAAI,EAChD,YACF,CAAC;CACD,IAAI,SAAS,OAAO,SAAS,GAAG;EAC9B,KAAK,MAAM,SAAS,SAAS,QAC3B,IACE,4BAA4B,MAAM,WAClC,YAAY,QAAQ,MAAM,IAAI,EAAE,CAAC,CAAC,IACpC;EACF,OAAO;CACT;CACA,IAAI;CACJ,IAAI;EACF,SAAS,SAAS,KAAK,EAAE,eAAe,IAAI,CAAC;CAC/C,QAAQ;EACN,IAAI,wCAAwC;EAC5C,OAAO;CACT;CACA,IACE,CAACH,SAAO,MAAM,KACd,OAAO,eAAe,KACtB,CAAC,MAAM,QAAQ,OAAO,UAAU,GAChC;EACA,IAAI,yDAAyD;EAC7D,OAAO;CACT;CACA,MAAM,0BAAU,IAAI,IAAyB;CAC7C,IAAI;CACJ,IAAI;EACF,MAAM,kBAAA,GAAA,KAAA,cAAA,CAA+B,MAAM,SAAS,IAAI;GACtD,SAAS;GACT,QAAQ;EACV,CAAC;EACD,IAAI,eAAe,OAAO,WAAW,GACnC,SAAS,eAAe,KAAK,EAAE,eAAe,IAAI,CAAC;CACvD,QAAQ,CAER;CACA,MAAM,gBACJA,SAAO,MAAM,KAAK,MAAM,QAAQ,OAAO,UAAU,IAAI,OAAO,aAAa,CAAC;CAC5E,MAAM,6BAAa,IAAI,IAAiC;CACxD,MAAM,kCAAkB,IAAI,IAAiC;CAC7D,KAAK,MAAM,CAAC,OAAO,WAAW,OAAO,UAAU,CAAC,QAAQ,GAAG;EACzD,MAAM,UAAU,QAAgB;GAC9B,MAAM,OAAgB,SAAS,MAAM;IAAC;IAAW;IAAO;GAAG,GAAG,IAAI;GAClE,MAAM,UAAA,GAAA,KAAA,OAAA,CAAgB,IAAI,IAAI,KAAK,QAAQ,KAAK,KAAA;GAChD,OAAO,WAAW,KAAA,IAAY,IAAI,YAAY,QAAQ,MAAM,CAAC,CAAC;EAChE;EACA,MAAM,UAAU,KAAa,YAAoB,IAAI,SAAS,OAAO,GAAG,CAAC;EACzE,IAAI,CAACA,SAAO,MAAM,KAAK,OAAO,OAAO,yBAAyB,UAAU;GACtE,OACE,qBACA,yDACF;GACA;EACF;EACA,MAAM,YAAY,OAAO;EACzB,IAAI,OAAO,qBAAqB,KAAA,GAC9B,OACE,iBACA,GAAG,UAAU,gDACf;EACF,IAAI,OAAO,gCAAgC,GACzC,OACE,4BACA,GAAG,UAAU,sCACf;EACF,MAAM,SAAS,OAAO;EACtB,MAAM,WAAW,OAAO;EACxB,IAAI,cAAwB,CAAC;EAC7B,IAAI,OAAO,WAAW,YAAY,aAAa,KAAA,GAC7C,cAAc,CAAC,MAAM;OAClB,IAAI,WAAW,KAAA,KAAa,QAAQ,QAAQ,GAAG,cAAc;EAClE,MAAM,mBAAmB,YAAY,QAClC,cACC,UAAU,WAAW,GAAG,KAAK,CAAC,UAAU,MAAM,GAAG,CAAC,CAAC,SAAS,IAAI,CACpE;EACA,IACE,YAAY,WAAW,KACvB,iBAAiB,WAAW,YAAY,QAExC,OACE,aACA,GAAG,UAAU,2EACf;EAEF,MAAM,wBAAwB,MAAM,KAClC,IAAI,IACF,iBAAiB,KACd,UAAUC,UAAAA,QAAK,MAAM,UAAU,KAAK,CAAC,CAAC,QAAQ,QAAQ,EAAE,KAAK,GAChE,CACF,CACF;EACA,MAAM,UAAU,QAAQ,IAAI,SAAS,qBAAK,IAAI,IAAY;EAC1D,MAAM,qBACJ,gBAAgB,IAAI,SAAS,qBAAK,IAAI,IAAoB;EAC5D,KAAK,MAAM,aAAa,uBAAuB;GAC7C,MAAM,WAAW,mBAAmB,IAAI,SAAS;GACjD,IAAI,aAAa,KAAA,GACf,OACE,aAAa,KAAA,IAAY,cAAc,eACvC,GAAG,UAAU,cAAc,UAAU,yBAAyB,WAAW,GAC3E;QACG,mBAAmB,IAAI,WAAW,KAAK;EAC9C;EACA,gBAAgB,IAAI,WAAW,kBAAkB;EACjD,MAAM,eAAe,WAAW,IAAI,SAAS,qBAAK,IAAI,IAAoB;EAC1E,KAAK,MAAM,QAAQ,MAAM,IAAI,SAAS,KAAK,CAAC,GAC1C,IACE,sBAAsB,MACnB,cACC,cAAc,QACb,aAAa,KAAA,KAAa,UAAA,QAAU,QAAQ,MAAM,SAAS,CAChE,GACA;GACA,MAAM,WAAW,aAAa,IAAI,IAAI;GACtC,IAAI,aAAa,KAAA,GACf,OACE,aAAa,KAAA,IAAY,cAAc,eACvC,GAAG,UAAU,gBAAgB,KAAK,yBAAyB,WAAW,GACxE;QACG,aAAa,IAAI,MAAM,KAAK;GACjC,QAAQ,IAAI,IAAI;EAClB;EAEF,WAAW,IAAI,WAAW,YAAY;EACtC,QAAQ,IAAI,WAAW,OAAO;EAC9B,MAAM,WAAW,OAAO;EACxB,MAAM,eAAwB,cAAc,GAAG,KAAK;EACpD,MAAM,iBAAiBD,SAAO,YAAY,IACtC,aAAa,cACb,KAAA;EACJ,IACEA,SAAO,QAAQ,KACf,SAAS,YAAY,OAAO,SAAS,SACpC,CAACA,SAAO,cAAc,KACrB,eAAe,YAAY,OAAO,SAAS,OAE7C,OACE,YACA,GAAG,UAAU,+DACf;EACF,IACE,CAACA,SAAO,QAAQ,KAChB,OAAO,KAAK,QAAQ,CAAC,CAAC,WAAW,OAAO,KAAK,OAAO,QAAQ,CAAC,CAAC,UAC9D,OAAO,QAAQ,OAAO,QAAQ,CAAC,CAAC,MAC7B,CAAC,KAAK,WAAW,SAAS,SAAS,KACtC,GAEA,OAAO,YAAY,GAAG,UAAU,wCAAwC;EAC1E,MAAM,WAAW,OAAO;EACxB,IACE,CAACA,SAAO,QAAQ,KAChB,OAAO,KAAK,QAAQ,CAAC,CAAC,WAAW,KACjC,SAAS,oBAAoB,OAAO,SAAS,aAE7C,OACE,YACA,GAAG,UAAU,6CAA6C,OAAO,SAAS,aAC5E;EACF,MAAM,SAAS,OAAO;EACtB,IACE,CAACA,SAAO,MAAM,KACd,OAAO,KAAK,MAAM,CAAC,CAAC,WAAW,OAAO,KAAK,OAAO,MAAM,CAAC,CAAC,UAC1D,OAAO,QAAQ,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,cAAc;GACvD,MAAM,QAAQ,OAAO;GACrB,OACE,CAACA,SAAO,KAAK,KACb,OAAO,KAAK,KAAK,CAAC,CAAC,WAAW,KAC9B,CAAC,YAAY,MAAM,aAAa,SAAS,QAAQ,KACjD,CAAC,YAAY,MAAM,iBAAiB,SAAS,WAAW;EAE5D,CAAC,GAED,OAAO,UAAU,GAAG,UAAU,sCAAsC;EACtE,MAAM,UAAU,WAAW,WAAW,MAAM;EAC5C,MAAM,SAAS,OAAO;EACtB,IAAI,WAAW,KAAA,MAAc,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,IACvE,OAAO,UAAU,GAAG,UAAU,0CAA0C;EAC1E,IACE,MAAM,QAAQ,MAAM,KACpB,OAAO,MACJ,UACC,CAACA,SAAO,KAAK,KACb,OAAO,MAAM,uBAAuB,YACpC,CAAC,QAAQ,SAAS,MAAM,kBAAkB,CAC9C,GAEA,OACE,UACA,GAAG,UAAU,kDACf;EACF,KAAK,MAAM,QAAQ,SACjB,IACE,CAAC,MAAM,QAAQ,MAAM,KACrB,CAAC,OAAO,MACL,UACCA,SAAO,KAAK,KACZ,MAAM,uBAAuB,QAC7B,OAAO,KAAK,KAAK,CAAC,CAAC,WAAW,CAClC,GAEA,OACE,UACA,GAAG,UAAU,sCAAsC,MACrD;CAEN;CACA,KAAK,MAAM,CAAC,WAAW,gBAAgB,OACrC,KAAK,MAAM,aAAa,aACtB,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,EAAE,IAAI,SAAS,GACxC,IAAI,SAAS,UAAU,yBAAyB,WAAW;CAGjE,OAAO;AACT;;;AChpBA,MAAM,mBAAmB;AACzB,MAAM,gBAAgB,IAAI,OAAO,IAAI,iBAAiB,MAAM;AAC5D,MAAM,kBAAkB,IAAI,OAC1B,KAAK,iBAAiB,cAAc,iBAAiB,QAAQ,iBAAiB,OAChF;;AAGA,MAAa,mBAAmB,UAC9B,cAAc,KAAK,KAAK,MAAA,GAAA,OAAA,WAAA,CAAgB,KAAK,MAAM;;AAGrD,MAAa,uBAAuB,OAAgB,WAAmB;CACrE,IAAI,CAAC,gBAAgB,MAAM,KAAK,OAAO,UAAU,UAAU,OAAO;CAClE,MAAM,QAAQ,gBAAgB,KAAK,KAAK,CAAC,GAAG;CAC5C,OACE,UAAU,KAAA,KACV,UAAU,OAAO,MAAM,GAAG,EAAE,MAAA,GAAA,OAAA,WAAA,CACjB,KAAK,MAAM;AAE1B;;AAGA,MAAa,2BAA2B,QAAgB,UAAkB;CACxE,IAAI,CAAC,gBAAgB,MAAM,GAAG,OAAO;CACrC,IAAI;EACF,QAAA,GAAA,OAAA,OAAA,CAAc,QAAQ,KAAK;CAC7B,QAAQ;EACN,OAAO;CACT;AACF;;;ACxBA,MAAa,eAAe;CAC1B;CACA;CACA;CACA;AACF;AAiCA,MAAMI,YAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAGrE,MAAM,sBAAsB,YAAoB;CAO9C,MAAM,SAAkB,CACtB;EAAE,MAAM;EAAQ,OAAO;EAAG,OAAO;EAAG,OAAO,KAAA;CAAU,CACvD;CACA,MAAM,SAAmB,CAAC;CAC1B,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;EACtD,MAAM,QAAQ,OAAO,GAAG,EAAE;EAC1B,IAAI,UAAU,KAAA,GAAW;EACzB,MAAM,YAAY,QAAQ,GAAG,KAAK;EAClC,IAAI,cAAc,QAAQ,MAAM,UAAU,KAAK;GAC7C,SAAS;GACT;EACF;EACA,IAAI,cAAc,OAAO,MAAM,SAAS,aAAa;GACnD,OAAO,KAAK,QAAQ,MAAM,MAAM,OAAO,KAAK,CAAC;GAC7C,OAAO,IAAI;GACX;EACF;EACA,IAAI,cAAc,MAAM,OAAO;GAC7B,MAAM,QAAQ,KAAA;GACd;EACF;EACA,IAAI,MAAM,UAAU,KAAK;EACzB,IAAI,cAAc,OAAO,QAAQ,GAAG,QAAQ,CAAC,MAAM,KAAK;GACtD,OAAO,KAAK;IACV,MAAM;IACN,OAAO,QAAQ;IACf,OAAO;IACP,OAAO,KAAA;GACT,CAAC;GACD,SAAS;GACT;EACF;EACA,IAAI,cAAc,KAAK;GACrB,OAAO,KAAK;IACV,MAAM;IACN,OAAO,QAAQ;IACf,OAAO;IACP,OAAO,KAAA;GACT,CAAC;GACD;EACF;EACA,IAAI,MAAM,UAAU,KAAA,GAAW;EAC/B,IAAI,cAAc,OAAO,cAAc,MAAK;GAC1C,MAAM,QAAQ;GACd;EACF;EACA,IAAI,MAAM,SAAS,eAAe;EAClC,IAAI,cAAc,KAAK,MAAM,SAAS;EACtC,IAAI,cAAc,OAAO,EAAE,MAAM,UAAU,GAAG;GAC5C,OAAO,KAAK,QAAQ,MAAM,MAAM,OAAO,KAAK,CAAC;GAC7C,OAAO,IAAI;EACb;CACF;CACA,KAAK,MAAM,SAAS,OAAO,MAAM,CAAC,GAAG,OAAO,KAAK,QAAQ,MAAM,MAAM,KAAK,CAAC;CAC3E,OAAO;AACT;AAGA,MAAM,2BAA2B,YAAoB;CACnD,MAAM,WAAuB,CAAC,CAAC,CAAC;CAChC,KAAK,MAAM,UAAU,CAAC,SAAS,GAAG,mBAAmB,OAAO,CAAC,GAAG;EAC9D,SAAS,KAAK,CAAC,CAAC;EAChB,MAAM,aAAa,OAAO,MACxB,0EACF;EACA,KAAK,MAAM,QAAQ,cAAc,CAAC,GAChC,IAAI,wBAAwB,KAAK,IAAI,GAAG,SAAS,KAAK,CAAC,CAAC;OACnD,SAAS,GAAG,EAAE,CAAC,EAAE,KAAK,IAAI;CAEnC;CACA,OAAO,SAAS,KAAK,UAAU;EAC7B,IAAI,QAAQ;EACZ,MAAM,wBAAwB;GAC5B,OAAO,0BAA0B,KAAK,MAAM,GAAG,KAAK,KAAK,EAAE,GAAG,SAAS;EACzE;EACA,gBAAgB;EAChB,OAAO,iCAAiC,KAAK,MAAM,GAAG,KAAK,KAAK,EAAE,GAAG;GACnE,SAAS;GACT,OAAO,QAAQ,MAAM,QAAQ;IAC3B,MAAM,SAAS,MAAM,GAAG,KAAK;IAC7B,IAAI,WAAW,MAAM;KACnB,SAAS;KACT;IACF;IACA,IAAI,WAAW,QAAQ,WAAW,WAAW;KAC3C,SAAS;KACT;IACF;IACA,IACE,WAAW,OACX,WAAW,QACX,WAAW,0BACX,oBAAoB,KAAK,UAAU,EAAE,GACrC;KACA,SAAS;KACT;IACF;IACA;GACF;GACA,gBAAgB;EAClB;EACA,OAAO,MAAM,MAAM,KAAK;CAC1B,CAAC;AACH;AAEA,MAAM,uBAAuB,IAAI,IAC/B,OAAO,QAAQ;CACb,KAAK;EACH;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CACA,MAAM,CAAC,MAAM,WAAW;CACxB,MAAM;EAAC;EAAY;EAAM;EAAS;EAAM;CAAW;CACnD,MAAM;EACJ;EACA;EACA;EACA;EACA;EACA;CACF;CACA,KAAK;EACH;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CACA,MAAM;EACJ;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,aAAa,CAAC,UAAU,IAAI,IAAI,OAAO,CAAC,CAAC,CAC9D;AAGA,MAAM,mBAAmB,UAAoB;CAC3C,MAAM,WAAW,SAAiB;EAChC,IAAI,SAAS;EACb,IAAI;EACJ,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;GACnD,MAAM,YAAY,KAAK,GAAG,KAAK;GAC/B,IAAI,cAAc,OAAO;IACvB,QAAQ,KAAA;IACR;GACF;GACA,IAAI,UAAU,KAAA,MAAc,cAAc,OAAO,cAAc,OAAM;IACnE,QAAQ;IACR;GACF;GACA,MAAM,OAAO,KAAK,GAAG,QAAQ,CAAC;GAC9B,IACE,cAAc,QACd,SAAS,KAAA,KACT,UAAU,QACT,UAAU,KAAA,KAAa,YAAY,KAAK,IAAI,IAC7C;IACA,UAAU;IACV,SAAS;GACX,OAAO,UAAU;EACnB;EACA,OAAO;CACT;CACA,MAAM,SAAS,MAAM,IAAI,OAAO;CAChC,MAAM,YAAY,SAChB,iCAAiC,KAAK,IAAI;CAC5C,IAAI,QAAQ;CACZ,MAAM,eAAe,OAAe,aAAqB;EACvD,OAAO,OAAO,GAAG,KAAK,CAAC,EAAE,WAAW,GAAG,GAAG;GACxC,MAAM,SAAS,OAAO,GAAG,KAAK;GAC9B,SAAS;GACT,IAAI,WAAW,MAAM;GACrB,IACE,WAAW,KAAA,KACX,qBAAqB,IAAI,QAAQ,CAAC,EAAE,IAAI,MAAM,GAE9C,SAAS;EACb;EACA,OAAO;CACT;CACA,OAAO,QAAQ,OAAO,QAAQ;EAC5B,MAAM,WAAW,OAAO,GAAG,KAAK;EAChC,IAAI,aAAa,KAAA,KAAa,CAAC,qBAAqB,IAAI,QAAQ,GAAG;EACnE,QAAQ,YAAY,QAAQ,GAAG,QAAQ;EACvC,IAAI,aAAa,SAAS,OAAO,GAAG,KAAK,MAAM,SAAS,OAAO;EAC/D,MAAM,aAAa,OAAO,GAAG,KAAK;EAClC,IACG,aAAa,UAAU,eAAe,OAAO,eAAe,UAC5D,aAAa,WACX,eAAe,UAAU,eAAe,UAC1C,aAAa,WACX,eAAe,UAAU,eAAe,SAAS,eAAe,QAEnE,QAAQ,YAAY,QAAQ,GAAG,QAAQ;CAE3C;CAGA,OADkB,OAAO,MAAM,KAChB,CAAC,CAAC,MACd,MAAM,UACL,SAAS,IAAI,KACZ,SAAS,SACR,OAAO,GAAG,YAAY,QAAQ,QAAQ,GAAG,KAAK,CAAC,MAAM,OAC3D;AACF;;AAgBA,MAAa,qBAAqB,EAChC,OACA,aAC8B;CAC9B,MAAM,UAAU,IAAI,IAAI,OAAO,QAAQ,KAAK,CAAC;CAC7C,MAAM,cAA4B,CAAC;CACnC,MAAM,OAAO,IAAI,IACf,OAAO,QAAQ;EAAE,GAAG,OAAO;EAAU,aAAa,OAAO;CAAI,CAAC,CAChE;CACA,MAAM,4BAAY,IAAI,IAAqC;CAC3D,MAAM,gCAAgB,IAAI,IAAsB;CAChD,MAAM,gCAAgB,IAAI,IAAoB;CAC9C,MAAM,OAAO,EAAE,MAAM,MAAM,KAAK,OAAO,cAAoC;EACzE,MAAM,SAAS,QAAQ,IAAI,IAAI;EAC/B,IAAI,WAAW,KAAA,GACb,MAAM,IAAI,MAAM,sCAAsC,MAAM;EAC9D,MAAM,aAAa,UAAU,KAAA,IAAY,KAAA,IAAY,KAAK,UAAU,KAAK;EACzE,MAAM,cAAc,GAAG,KAAK,GAAG,IAAI,GAAG,cAAc;EACpD,MAAM,WAAW,cAAc,IAAI,WAAW,KAAK;EACnD,MAAM,WAAW,cAAc,IAAI,WAAW,CAAC,EAAE,MAAM;EACvD,MAAM,QAAQ,OACX,MAAM,OAAO,CAAC,CACd,WACE,MAAM,cACL,YAAY,YACZ,KAAK,SAAS,KAAK,UAAU,GAAG,CAAC,MAChC,eAAe,KAAA,KAAa,KAAK,SAAS,UAAU,EACzD;EACF,IAAI,SAAS,GAAG,cAAc,IAAI,aAAa,KAAK;EACpD,YAAY,KAAK;GACf;GACA,MAAM;GACN,MAAM,YAAY,KAAK,IAAI,GAAG,QAAQ,CAAC;GACvC;EACF,CAAC;CACH;CACA,KAAK,MAAM,CAAC,MAAM,SAAS,SAAS;EAClC,MAAM,OAAOC,UAAAA,QAAK,MAAM,SAAS,IAAI,MAAM;EAC3C,IAAI,CAAC,QAAQA,UAAAA,QAAK,MAAM,SAAS,IAAI,MAAM,gBAAgB;EAC3D,IAAI;GACF,MAAM,cAAc,IAAIC,KAAAA,YAAY;GACpC,MAAM,WAAW,QAAA,GAAA,KAAA,cAAA,CAAqB,MAAM,EAAE,YAAY,CAAC,IAAI,KAAA;GAC/D,IAAI,aAAa,KAAA,KAAa,SAAS,OAAO,SAAS,GACrD,MAAM,IAAI,MAAM,cAAc;GAChC,MAAM,OACJ,aAAa,KAAA,IAAY,KAAK,MAAM,IAAI,IAAI,SAAS,KAAK;GAC5D,IAAI,CAACF,SAAO,IAAI,GAAG,MAAM,IAAI,MAAM,4BAA4B;GAC/D,IAAI,MAAM;IACR,IAAI,KAAK,eAAe,KAAA,KAAa,CAACA,SAAO,KAAK,UAAU,GAC1D,MAAM,IAAI,MAAM,2BAA2B;IAC7C,IACE,KAAK,gBAAgB,KAAA,MACpB,CAACA,SAAO,KAAK,WAAW,KACvB,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,MAAM,YAAY,CAACA,SAAO,OAAO,CAAC,IAEpE,MAAM,IAAI,MAAM,iCAAiC;IACnD,IACE,KAAK,gBAAgB,KAAA,MACpB,CAAC,MAAM,QAAQ,KAAK,WAAW,KAC9B,CAAC,KAAK,WAAW,CAAC,OACf,YAAqB,OAAO,YAAY,QAC3C,IAEF,MAAM,IAAI,MAAM,qCAAqC;GACzD;GACA,UAAU,IAAI,MAAM,IAAI;GACxB,IAAI,aAAa,KAAA,GAAW;GAC5B,MAAM,iBAAiB;IACrB;KAAE,SAAS,KAAK;KAAY,QAAQ,CAAC,SAAS;IAAE;IAChD;KAAE,SAAS,KAAK;KAAc,QAAQ,CAAC,WAAW;IAAE;IACpD,GAAIA,SAAO,KAAK,WAAW,IACvB,OAAO,QAAQ,KAAK,WAAW,CAAC,CAAC,KAAK,CAAC,MAAM,cAAc;KACzD;KACA,QAAQ,CAAC,YAAY,IAAI;IAC3B,EAAE,IACF,CAAC;GACP;GACA,KAAK,MAAM,EAAE,SAAS,YAAY,gBAAgB;IAChD,IAAI,CAACA,SAAO,OAAO,GAAG;IACtB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,OAAO,GAAG;KACnD,MAAM,OAAO,SAAS,MAAM,CAAC,GAAG,QAAQ,IAAI,GAAG,IAAI;KACnD,IAAI,EAAA,GAAA,KAAA,OAAA,CAAQ,IAAI,KAAK,KAAK,UAAU,KAAA,KAAa,KAAK,UAAU,MAC9D;KACF,MAAM,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,UAAU,KAAK;KACnD,MAAM,QAAQ,cAAc,IAAI,GAAG,KAAK,CAAC;KACzC,MAAM,KAAK,YAAY,QAAQ,KAAK,MAAM,EAAE,CAAC,CAAC,IAAI;KAClD,cAAc,IAAI,KAAK,KAAK;IAC9B;GACF;EACF,QAAQ;GACN,IAAI;IACF;IACA,MAAM;IACN,KAAK;IACL,SAAS,OACL,uCACA;GACN,CAAC;EACH;CACF;CACA,MAAM,kBAAkB,SAAkC,CACxD,MACA,GAAIA,SAAO,KAAK,aAAa,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,CAC3D;CACA,MAAM,oBAAoB,SAAiB;EACzC,IAAI,YAAYC,UAAAA,QAAK,MAAM,QAAQ,IAAI;EACvC,OAAO,MAAM;GACX,MAAM,YAAY,UAAU,IAC1BA,UAAAA,QAAK,MAAM,KAAK,WAAW,qBAAqB,CAClD;GACA,IAAI,cAAc,KAAA,GAAW,OAAO;IAAE;IAAW;GAAU;GAC3D,IAAI,cAAc,KAAK,OAAO,KAAA;GAC9B,YAAYA,UAAAA,QAAK,MAAM,QAAQ,SAAS;EAC1C;CACF;CACA,MAAM,cAAc,MAAc,SAA0B;EAC1D,MAAM,QAAQ,iBAAiB,IAAI;EACnC,IAAI,UAAU,KAAA,GAAW;GACvB,MAAM,EAAE,WAAW,cAAc;GACjC,IACEA,UAAAA,QAAK,MAAM,SAAS,IAAI,MAAM,kBAC9B,CAAC,kBAAkB;IACjB;IACA;IACA,UAAU,UAAU;IACpB,gBAAgB;GAClB,CAAC,GAED,OAAO,KAAA;GACT,IAAI,SAAS,MAAM,SAAS,WAC1B,OACE,UAAU,eACTD,SAAO,UAAU,WAAW,IACzB,UAAU,WAAW,CAAC,aACtB,KAAA;GAER,OAAOA,SAAO,UAAU,WAAW,IAC/B,UAAU,WAAW,CAAC,QACtB,KAAA;EACN;EACA,IAAI,YAAYC,UAAAA,QAAK,MAAM,QAAQ,IAAI;EACvC,OAAO,MAAM;GACX,MAAM,WAAW,UAAU,IACzBA,UAAAA,QAAK,MAAM,KAAK,WAAW,cAAc,CAC3C;GACA,IAAI,aAAa,KAAA,GAAW;IAC1B,KAAK,MAAM,UAAU,eAAe,QAAQ,GAAG;KAC7C,IAAI,SAAS,MAAM,OAAO,eAAe,KAAA,GACvC,OAAO,OAAO;KAChB,IACED,SAAO,OAAO,WAAW,KACzB,OAAO,WAAW,CAAC,UAAU,KAAA,GAE7B,OAAO,OAAO,WAAW,CAAC;IAC9B;IAEA,IAAI,SAAS,kBAAkB,KAAA,GAAW,OAAO,KAAA;GACnD;GACA,IAAI,cAAc,KAAK,OAAO,KAAA;GAC9B,YAAYC,UAAAA,QAAK,MAAM,QAAQ,SAAS;EAC1C;CACF;CACA,MAAM,qBAAqB,EACzB,WACA,MACA,UACA,qBAMI;EACJ,MAAM,WAAWA,UAAAA,QAAK,MAAM,SAAS,WAAWA,UAAAA,QAAK,MAAM,QAAQ,IAAI,CAAC;EACxE,IAAI,aAAa,MAAM,mBAAmB,YAAY,OAAO;EAC7D,IAAI,aAAa,QAAQ,SAAS,WAAW,KAAK,GAAG,OAAO;EAC5D,IAAI,CAAC,MAAM,QAAQ,QAAQ,GAAG,OAAO;EACrC,MAAM,aAAa,YAAoBA,UAAAA,QAAK,MAAM,UAAU,OAAO;EACnE,MAAM,WAAW,SAAS,QACvB,UAAoC,OAAO,UAAU,QACxD;EACA,QAAA,GAAA,UAAA,QAAA,CAEI,SAAS,QAAQ,YAAY,CAAC,QAAQ,WAAW,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CACtE,CAAC,CAAC,QAAQ,KACV,EAAA,GAAA,UAAA,QAAA,CACE,SACG,QAAQ,YAAY,QAAQ,WAAW,GAAG,CAAC,CAAC,CAC5C,KAAK,YAAY,UAAU,QAAQ,MAAM,CAAC,CAAC,CAAC,CACjD,CAAC,CAAC,QAAQ;CAEd;CACA,MAAM,WAAW,MAAc,MAAc,UAA4B;EACvE,MAAM,0BAAU,IAAI,IAAY;EAChC,OAAO,OAAO,UAAU,YAAY,MAAM,WAAW,UAAU,GAAG;GAChE,IAAI,QAAQ,IAAI,KAAK,GAAG,OAAO,KAAA;GAC/B,QAAQ,IAAI,KAAK;GACjB,MAAM,UAAU,WAAW,MAAM,MAAM,MAAM,CAAiB,CAAC;GAC/D,QAAQD,SAAO,OAAO,IAAI,QAAQ,QAAQ,KAAA;EAC5C;EACA,OAAO;CACT;CACA,MAAM,qBAAqB,SAAiB;EAC1C,MAAM,OAAO,iBAAiB,IAAI;EAClC,IAAI,SAAS,KAAA,GACX,OAAO;GACL,WAAW,KAAK;GAChB,UAAU,KAAK,UAAU;GACzB,QAAQ;EACV;EACF,IAAI,YAAYC,UAAAA,QAAK,MAAM,QAAQ,IAAI;EACvC,OAAO,MAAM;GAEX,MAAM,aADO,UAAU,IAAIA,UAAAA,QAAK,MAAM,KAAK,WAAW,cAAc,CAC9C,CAAC,GAAG;GAC1B,IAAI,eAAe,KAAA,GACjB,OAAO;IACL;IACA,UAAUD,SAAO,UAAU,IAAI,WAAW,cAAc;IACxD,QAAQ;GACV;GACF,IAAI,cAAc,KAAK,OAAO,KAAA;GAC9B,YAAYC,UAAAA,QAAK,MAAM,QAAQ,SAAS;EAC1C;CACF;CAEA,MAAM,uBAAuB,EAC3B,MACA,MACA,UAKyB;EACzB,MAAM,QAAQ,kBAAkB,IAAI;EACpC,IAAI,UAAU,KAAA,GAAW,OAAO;EAChC,MAAM,EAAE,WAAW,UAAU,WAAW;EACxC,IAAI,WAAW,UAAU,CAAC,MAAM,QAAQ,QAAQ,GAAG,OAAO;EAC1D,IACE,CAAC,kBAAkB;GACjB;GACA;GACA;GACA,gBAAgB;EAClB,CAAC,GAED,OAAO;EACT,MAAM,aAAa,CAAC,GAAG,UAAU,QAAQ,CAAC,CAAC,CAAC,QACzC,CAAC,WAAW,UACXA,UAAAA,QAAK,MAAM,SAAS,SAAS,MAAM,kBACnC,KAAK,YAAY,QACjB,kBAAkB;GAChB;GACA,MAAM;GACN;GACA,gBAAgB,WAAW,SAAS,aAAa;EACnD,CAAC,CACL;EACA,OAAO,WAAW,WAAW,KAC3B,WAAW,OAAO,GAAG,UAAU,KAAK,eAAe,GAAG,IACpD,YACA;CACN;CACA,MAAM,+BAAe,IAAI,IAAyB;CAClD,KAAK,MAAM,UAAU,OAAO,0BAA0B;EACpD,MAAM,SACJ,aAAa,IAAI,OAAO,eAAe,qBAAK,IAAI,IAAY;EAC9D,OAAO,IAAI,OAAO,iBAAiB;EACnC,aAAa,IAAI,OAAO,iBAAiB,MAAM;EAC/C,IAAI,OAAO,SAAS,uBAAuB;EAC3C,MAAM,gBACJ,aAAa,IAAI,OAAO,oBAAoB,qBAAK,IAAI,IAAY;EACnE,cAAc,IAAI,OAAO,sBAAsB;EAC/C,aAAa,IAAI,OAAO,sBAAsB,aAAa;CAC7D;CACA,aAAa,IACX,OAAO,yBAAyB,8BAChC,IAAI,IAAI,CAAC,kBAAkB,OAAO,yBAAyB,SAAS,CAAC,CACvE;CACA,KAAK,MAAM,CAAC,MAAM,SAAS,WAAW;EACpC,MAAM,UAAU,KAAK;EACrB,IAAI,YAAY,KAAA,KAAa,YAAY,OAAO,OAAO,OACrD,IAAI;GACF;GACA,MAAM;GACN,KAAK;GACL,OAAO;GACP,SAAS,sCAAsC,OAAO,IAAI,UAAU,KAAK,UAAU,OAAO;EAC5F,CAAC;EACH,MAAM,eAAwC,CAAC;EAC/C,MAAM,gBACJ,SACA,WACA,aACG;GACH,IAAI,CAACD,SAAO,OAAO,GAAG;GACtB,KAAK,MAAM,CAAC,MAAM,QAAQ,OAAO,QAAQ,OAAO,GAAG;IACjD,MAAM,QAAQ,QAAQ,MAAM,MAAM,GAAG;IACrC,IAAI,WAAW,aAAa,QAAQ;IACpC,MAAM,YAAY,aAAa,IAAI,IAAI;IACvC,IAAI,cAAc,KAAA,GAAW;KAC3B,IAAI,OAAO,UAAU,YAAY,CAAC,UAAU,IAAI,KAAK,GACnD,IAAI;MACF;MACA,MAAM;MACN,KAAK,UAAU,OAAO;MACtB,OAAO,aAAa,KAAA,IAAY,MAAM,SAAS;MAC/C,SAAS,GAAG,KAAK,mDAAmD,OAAO,KAAK;KAClF,CAAC;KACH;IACF;IACA,MAAM,MAAM,KAAK,IAAI,IAAI;IACzB,IAAI,QAAQ,KAAA,GAAW;IACvB,IAAI,UAAU,KAAK;IACnB,MAAM,YACJ,UAAU,gBACN,oBAAoB;KAAE;KAAM;KAAM;IAAI,CAAC,IACvC,KAAA;IACN,IAAI,cAAc,WAAW;IAC7B,IAAI;KACF;KACA,MAAM,SAAS,cAAc,aAAa;KAC1C,KAAK,UAAU,OAAO;KACtB,OAAO,aAAa,KAAA,IAAY,MAAM,SAAS;KAC/C,SACE,cAAc,cACV,GAAG,KAAK,kEACR,GAAG,KAAK,WAAW,IAAI,UAAU,OAAO,KAAK;IACrD,CAAC;GACH;EACF;EACA,KAAK,MAAM,OAAO;GAChB;GACA;GACA;EACF,GACE,aAAa,KAAK,MAAM,IAAI;EAC9B,KAAK,MAAM,UAAU,eAAe,IAAI,GAAG;GACzC,aAAa,OAAO,YAAY,KAAK;GACrC,IAAI,CAACA,SAAO,OAAO,WAAW,GAAG;GACjC,KAAK,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,GACpD,aAAa,SAAS,KAAK;EAC/B;EACA,MAAM,6BAAa,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,GAAG,GAAG,aAAa,KAAK,CAAC,CAAC;EACnE,MAAM,yBAAkD,CAAC;EACzD,MAAM,iBAAiB,UAAU,IAC/BC,UAAAA,QAAK,MAAM,KAAKA,UAAAA,QAAK,MAAM,QAAQ,IAAI,GAAG,cAAc,CAC1D;EACA,IAAI,mBAAmB,KAAA,GACrB,KAAK,MAAM,WAAW;GACpB;GACA;GACA;EACF,GAAG;GACD,MAAM,UAAU,eAAe;GAC/B,IAAI,CAACD,SAAO,OAAO,GAAG;GACtB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,OAAO,GAChD,uBAAuB,QAAQ,QAAQ,MAAM,MAAM,KAAK;EAC5D;EACF,MAAM,qCAAqB,IAAI,IAA0B;EACzD,MAAM,QAAQ,kBAAkB,IAAI;EACpC,KAAK,MAAM,CAAC,WAAW,WAAW,WAAW;GAC3C,IAAIC,UAAAA,QAAK,MAAM,SAAS,SAAS,MAAM,gBAAgB;GACvD,MAAM,cAAc,kBAAkB,SAAS;GAG/C,IACE,EAFA,cAAcA,UAAAA,QAAK,MAAM,KAAKA,UAAAA,QAAK,MAAM,QAAQ,IAAI,GAAG,cAAc,MAGtE,EACE,UAAU,KAAA,KACV,MAAM,cAAcA,UAAAA,QAAK,MAAM,QAAQ,IAAI,KAC3C,aAAa,cAAc,MAAM,aACjC,YAAY,WAAW,MAAM,UAC7B,kBAAkB;IAChB,WAAW,MAAM;IACjB,MAAM;IACN,UAAU,MAAM;IAChB,gBAAgB;GAClB,CAAC,IAGH;GACF,KAAK,MAAM,WAAW;IACpB;IACA;IACA;GACF,GAAG;IACD,MAAM,UAAU,OAAO;IACvB,IAAI,CAACD,SAAO,OAAO,GAAG;IACtB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,OAAO,GAAG;KACnD,IAAI,CAAC,aAAa,IAAI,IAAI,GAAG;KAC7B,MAAM,SAAS,mBAAmB,IAAI,IAAI,qBAAK,IAAI,IAAa;KAChE,OAAO,IAAI,QAAQ,WAAW,MAAM,KAAK,CAAC;KAC1C,mBAAmB,IAAI,MAAM,MAAM;IACrC;GACF;EACF;EACA,MAAM,sBAAsB,SAAkB,WAAoB;GAChE,IAAI,CAACA,SAAO,OAAO,GAAG;GACtB,KAAK,MAAM,CAAC,UAAU,gBAAgB,OAAO,QAAQ,OAAO,GAAG;IAG7D,MAAM,SAAS,aAAa,MAAM,SAAS;IAC3C,IAAI,WAAW,KAAA,GAAW;IAC1B,IAAI,UACF,OACG,MAAM,uBAAuB,CAAC,CAC9B,GAAG,EAAE,CAAC,EACL,KAAK,KAAK;IAChB,MAAM,UAAU,QAAQ,YAAY,GAAG;IACvC,IAAI;IACJ,IAAI,UAAU,QAAQ,YAAY,GAAG,GAAG;KACtC,YAAY,QAAQ,MAAM,UAAU,CAAC,CAAC,CAAC,QAAQ,SAAS,EAAE;KAC1D,UAAU,QAAQ,MAAM,GAAG,OAAO;IACpC;IACA,MAAM,QAAQ,QAAQ,MAAM,GAAG;IAC/B,UAAU,MAAM,GAAG,EAAE,CAAC,EAAE,WAAW,GAAG,IAClC,MAAM,MAAM,EAAE,CAAC,CAAC,KAAK,GAAG,IACvB,MAAM,GAAG,EAAE,KAAK;IACrB,IAAI,YAAY,IAAI;KAClB,IAAI;MACF;MACA,MAAM;MACN,KAAK;MACL,OAAO;MACP,SAAS;KACX,CAAC;KACD;IACF;IACA,IAAIA,SAAO,WAAW,GAAG;KACvB,mBAAmB,aAAa,MAAM;KACtC;IACF;IACA,KAAK,MAAM,QAAQ,YAAY;KAC7B,IAAI,EAAA,GAAA,UAAA,QAAA,CAAW,OAAO,CAAC,CAAC,IAAI,GAAG;KAC/B,IAAI,QAAQ;KACZ,IAAI,OAAO,gBAAgB,YAAY,YAAY,WAAW,GAAG,GAAG;MAClE,MAAM,YAAY,YAAY,MAAM,CAAC;MACrC,QAAQ,uBAAuB;KACjC;KACA,MAAM,WAAW,QAAQ,MAAM,MAAM,KAAK;KAC1C,aAAa,GAAG,OAAO,MAAM,GAAG,OAAO;MACrC,KAAK;MACL,OAAO;KACT,CAAC;KACD,IACE,aAAa,IAAI,IAAI,KACrB,CAAC,GAAI,mBAAmB,IAAI,IAAI,KAAK,CAAC,CAAE,CAAC,CAAC,MAAM,cAAc;MAC5D,IAAI,aAAa,WAAW,OAAO;MACnC,IAAI,cAAc,KAAA,MAAA,GAAA,OAAA,WAAA,CAAwB,SAAS,MAAM,MACvD,OAAO;MACT,IAAI,OAAO,cAAc,UAAU,OAAO;MAI1C,MAAM,WAAA,GAAA,OAAA,MAAA,CAHmB,UAAU,WAAW,MAAM,IAChD,UAAU,MAAM,UAAU,YAAY,GAAG,IAAI,CAAC,IAC9C,SACkC;MACtC,OAAO,YAAY,SAAA,GAAA,OAAA,UAAA,CAAkB,SAAS,SAAS;KACzD,CAAC,KACD,OAAO,aAAa,YACpB,aAAa,IAAI,IAAI,CAAC,EAAE,IAAI,QAAQ,GAEpC,IAAI;MACF;MACA,MAAM;MACN,KAAK;MACL,OAAO;MACP,SAAS,GAAG,KAAK;KACnB,CAAC;IACL;GACF;EACF;EACA,mBAAmB,KAAK,YAAY;EACpC,mBAAmB,KAAK,cAAc;EACtC,IAAIA,SAAO,KAAK,OAAO,GAAG,mBAAmB,KAAK,OAAO,CAAC,YAAY;EAItE,IAHqB,OAAO,yBAAyB,MAClD,WAAW,aAAa,OAAO,qBAAqB,KAAA,CAExC,GAAG;GAChB,MAAM,iBAAiB,OAAO,yBAAyB,MAAM,WAAW;IACtE,IAAI,aAAa,OAAO,qBAAqB,OAAO,mBAClD,OAAO;IACT,IAAI,OAAO,SAAS,uBAClB,OACE,aAAa,OAAO,0BACpB,OAAO;IAEX,OAAO,OAAO,yBAAyB,OACpC,UACC,MAAM,oBAAoB,OAAO,mBACjC,aAAa,MAAM,qBAAqB,KAAA,CAC5C;GACF,CAAC;GACD,IAAI,mBAAmB,KAAA,GACrB,IAAI;IACF;IACA,MAAM;IACN,KAAK;IACL,SACE;GACJ,CAAC;GACH,MAAM,UAAUA,SAAO,KAAK,UAAU,IAClC,KAAK,UAAU,CAAC,eAChB,KAAA;GACJ,IAAI,mBAAmB,KAAA,KAAa,OAAO,YAAY,UAAU;IAC/D,MAAM,qBAAqB,eAAe,iBACvC,QAAQ,QAAQ,GAAG,CAAC,CACpB,KAAK;IACR,KAAK,MAAM,SAAS,wBAAwB,OAAO,GAAG;KACpD,IAAI,CAAC,gBAAgB,KAAK,GAAG;KAC7B,MAAM,aAAa,MAAM,KAAK,GAAG;KACjC,IACE,CAAC,MAAM,MAAM,SAAS,SAAS,OAAO,SAAS,GAAG,KAClD,mBAAmB,UAAU,CAAC,CAAC,WAAW,MACzC,eAAe,sBACd,WAAW,WAAW,GAAG,mBAAmB,EAAE,IAEhD;KACF,IAAI;MACF;MACA,MAAM;MACN,KAAK;MACL,OAAO;MACP,SAAS,0CAA0C,eAAe;KACpE,CAAC;KACD;IACF;GACF;EACF;EACA,IACEA,SAAO,KAAK,UAAU,KACtB,KAAK,UAAU,CAAC,YAAY,KAAA,MAC3B,OAAO,KAAK,UAAU,CAAC,YAAY,YAClC,CAAC,wBAAwB,OAAO,MAAM,KAAK,UAAU,CAAC,OAAO,IAE/D,IAAI;GACF;GACA,MAAM;GACN,KAAK;GACL,OAAO,KAAK,UAAU,CAAC;GACvB,SAAS,6BAA6B,OAAO,KAAK,UAAU,KAAK,UAAU,KAAK,UAAU,CAAC,OAAO;EACpG,CAAC;CACL;CACA,OAAO;AACT;;;AC/yBA,MAAa,eAAe;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAwCA,MAAMG,YAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,MAAM,yBAAyB,OAAgB,aAC7C,UAAU,YACT,OAAO,UAAU,YAChB,aAAa,KAAK,QAAQ,KAC1B,MAAM,WAAW,GAAG,SAAS,EAAE,KAC/B,kBAAkB,KAAK,KAAK;AAEhC,MAAM,kBAAkB,MAAyB,UAA6B;CAC5E,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,IAAI,KAAK,QAAQ,MAAM,MAAM,GAAG,SAAS;EACxE,MAAM,cAAc,KAAK,GAAG,KAAK,KAAK,MAAM,MAAM,GAAG,KAAK,KAAK;EAC/D,IAAI,eAAe,GAAG,OAAO,KAAK,KAAK,UAAU;CACnD;CACA,OAAO;AACT;AASA,MAAM,kCAAkC,EACtC,SACA,UACA,QACA,eACoC;CACpC,MAAM,gBAAgB,WACpB,OAAO,UAAU,KACjB,OAAO,OAAO,MAAM,UAAU,QAAQ,GAAG,KAAK,MAAM,IAAI;CAC1D,MAAM,iBACJ,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,MAAM,UAAU,QAAQ,GAAG,KAAK,MAAM,IAAI,KACpE,OAAO,MAAM,CAAC,CAAC,CAAC,OAAO,SAAS,SAAS,CAAC;CAC5C,IAAI,UAAU;EACZ,IAAI,aAAa,MAAM,OAAO,aAAa,MAAM;EACjD,IAAI,aAAa,MAAM,OAAO,CAAC;EAC/B,OAAO;CACT;CACA,MAAM,oBAAoB,eAAe,SAAS,MAAM;CACxD,MAAM,mBAAmB,eACvB,QAAQ,MAAM,GAAG,CAAC,GAClB,OAAO,MAAM,GAAG,CAAC,CACnB;CACA,QAAQ,UAAR;EACE,KAAK,MACH,OAAO;EACT,KAAK,MACH,OAAO,EACL,qBAAqB,KAAK,OAAO,MAAM,CAAC,CAAC,CAAC,OAAO,SAAS,SAAS,CAAC;EAExE,KAAK,MACH,OAAO,qBAAqB;EAC9B,KAAK,KACH,OAAO,oBAAoB;EAC7B,KAAK;EACL,KAAK,KACH,OAAO,mBAAmB;EAC5B,KAAK,MACH,OACE,OAAO,UAAU,KACjB,qBAAqB,KACrB,aAAa,OAAO,MAAM,GAAG,EAAE,CAAC;EAEpC,SACE,OAAO;CACX;AACF;;AAGA,MAAM,4BAA4B,aAAsB,YAAoB;CAC1E,IAAI,OAAO,gBAAgB,YAAY,YAAY,KAAK,MAAM,IAC5D,OAAO;CACT,MAAM,UAAU,QAAQ,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM;CAC7C,OAAO,YAAY,MAAM,GAAG,CAAC,CAAC,OAAO,WAAW;EAC9C,MAAM,QAAQ,kDAAkD,KAC9D,OAAO,KAAK,CACd;EACA,IAAI,UAAU,MAAM,OAAO;EAC3B,MAAM,WAAW,MAAM;EACvB,MAAM,UAAU,MAAM;EACtB,IAAI,YAAY,KAAA,KAAa,aAAa,KAAA,GAAW,OAAO;EAC5D,MAAM,SAAS,QAAQ,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM;EAC5C,IAAI,QAAQ,WAAW,GACrB,OAAO,+BAA+B;GACpC;GACA;GACA;GACA,UAAU,MAAM,OAAO,KAAA;EACzB,CAAC;EACH,MAAM,aAAa,eAAe,SAAS,MAAM;EACjD,IAAI,MAAM,OAAO,KAAA,GAAW;GAC1B,IAAI,aAAa,QAAQ,aAAa,MAAM,OAAO;GACnD,MAAM,SAAS,OAAO,OACnB,MAAM,WAAW,QAAQ,GAAG,KAAK,KAAK,OAAO,IAChD;GACA,OAAO,aAAa,OAAO,SAAS,CAAC;EACvC;EACA,QAAQ,UAAR;GACE,KAAK,MACH,OAAO,eAAe;GACxB,KAAK,MACH,OAAO,eAAe;GACxB,KAAK,MACH,OAAO,cAAc;GACvB,KAAK,MACH,OAAO,cAAc;GACvB,KAAK,KACH,OAAO,aAAa;GACtB,KAAK,KACH,OAAO,aAAa;GACtB,KAAK,MAAM;IACT,IAAI,OAAO,SAAS,GAAG,OAAO;IAC9B,MAAM,SAAS,OAAO,MAAM,GAAG,EAAE;IACjC,OACE,cAAc,KACd,OAAO,OAAO,MAAM,WAAW,QAAQ,GAAG,KAAK,KAAK,OAAO,IAAI;GAEnE;GACA,SACE,OAAO;EACX;CACF,CAAC;AACH;;AAGA,MAAa,oBAAoB,EAC/B,MACA,MACA,QACA,cACA,UACA,YACA,kBACkD;CAClD,MAAM,cAAmC,CAAC;CAC1C,MAAM,OAAOC,UAAAA,QAAK,MAAM,SAAS,IAAI;CACrC,MAAM,QAAQ,KAAK,MAAM,OAAO;CAKhC,MAAM,OAAO,EAAE,MAAM,MAAM,cAAwC;EACjE,YAAY,KAAK;GAAE;GAAM,MAAM;GAAM;GAAM;EAAQ,CAAC;CACtD;CACA,MAAM,UAAU,QACd,KAAK,IAAI,GAAG,MAAM,WAAW,SAAS,KAAK,SAAS,GAAG,CAAC,IAAI,CAAC;CAS/D,MAAM,OAAO,EACX,MACA,OACA,UACA,OACA,OAAO,GACP,eACuB;EACvB,IAAI,UAAU,UAAU;EACxB,IAAI,aAAa,QAAQ,UAAU,oBAAoB,OAAO,QAAQ;OACjE,IAAI,MAAM,SAAS,QAAQ,GAC9B,UAAU,sBAAsB,OAAO,QAAQ;EACjD,IAAI,CAAC,SACH,IAAI;GACF;GACA;GACA,SAAS,GAAG,MAAM,WAAW,SAAS,UAAU,OAAO,KAAK;EAC9D,CAAC;CACL;CACA,MAAM,QAAQ,SAAsB;EAClC,IAAI;GACF,QAAA,GAAA,UAAA,MAAA,CAAiB,IAAI;EACvB,QAAQ;GACN,IAAI;IACF;IACA,MAAM;IACN,SAAS;GACX,CAAC;GACD;EACF;CACF;CACA,MAAM,WAAW;EACf,GAAG,OAAO;EACV,GAAG,OAAO,YACR,OAAO,QAAQ,OAAO,QAAQ,CAAC,CAAC,KAAK,CAAC,MAAM,aAAa,CACvD,OAAO,QACP,OACF,CAAC,CACH;EACA,KAAK,OAAO;EACZ,MAAM,OAAO;EACb,QAAQ,OAAO;EACf,QAAQ,OAAO;EACf,MAAM,OAAO;EACb,aAAa,OAAO;EACpB,eAAe,OAAO;EACtB,aAAa,OAAO;EACpB,YAAY,OAAO;CACrB;CACA,MAAM,4BAAY,IAAI,IAAI;EAAC;EAAQ;EAAU;CAAW,CAAC;CACzD,IAAI,SAAS,gBACX,IAAI;EACF,MAAM;EACN,OAAO,KAAK,KAAK;EACjB,UAAU,OAAO;EACjB,OAAO;CACT,CAAC;CACH,IAAI,SAAS,mBAAmB,SAAS,UACvC,IAAI;EACF,MAAM;EACN,UAAU;EACV,OAAO,KAAK,KAAK;EACjB,UAAU,OAAO;EACjB,OAAO;CACT,CAAC;CACH,IAAI,SAAS,mBACX,IAAI;EACF,MAAM;EACN,OAAO,KAAK,KAAK;EACjB,UAAU,OAAO;EACjB,OAAO;CACT,CAAC;CACH,MAAM,eAAe,MAAM,MACxB,SAAS,KAAK,KAAK,MAAM,MAAM,CAAC,KAAK,UAAU,CAAC,CAAC,WAAW,GAAG,CAClE;CACA,MAAM,WACJ,SAAS,yBACR,SAAS,oBAAoB,cAAc,UAAU,CAAC,CAAC,WAAW,GAAG;CACxE,IAAI,SAAS,oBAAoB,CAAC,UAChC,IAAI;EACF,MAAM;EACN,OAAO,KAAK,KAAK;EACjB,UAAU,OAAO;EACjB,OAAO;CACT,CAAC;CACH,IAAI,UAAU;EACZ,MAAM,SAAS,KAAK,cAAc;EAClC,IAAI,WAAW,KAAA,GAAW;GACxB,MAAM,YAAY,OAAO;GACzB,MAAM,aAAaD,SAAO,SAAS,IAC/B,UAAU,gBACV,KAAA;GACJ,MAAM,WACJ,MAAM,QAAQ,UAAU,KAAK,WAAW,SAAS,WAAW,IACxD,OAAO,0BACP,OAAO;GACb,IAAI;IACF,MAAM;IACN,OAAOA,SAAO,SAAS,IAAI,UAAU,aAAa,KAAA;IAClD;IACA,OAAO;IACP,MAAM,OAAO,SAAS;GACxB,CAAC;EACH;CACF;CACA,IAAI,SAAS,cAAc;EACzB,MAAM,SAAS,KAAK,cAAc;EAClC,MAAM,aAAa,UAAmB;GACpC,MAAM,QACJ,OAAO,UAAU,YACjB,4CAA4C,KAAK,KAAK,IAClD,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,IAC3B,KAAA;GACN,IACE,UAAU,KAAA,KACV,CAAC,MAAM,MAAM,OAAO,aAAa,KACjC,eAAe,OAAO,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,GAE5D,IAAI;IACF,MAAM;IACN,MAAM,OAAO,cAAc;IAC3B,SAAS,oEAAoE,OAAO;GACtF,CAAC;EACL;EACA,MAAM,gBAAgB,cAAsB;GAC1C,IAAI,cAAc,MAAM,OAAO;GAC/B,IAAI,CAAC,aAAa,IAAI,SAAS,GAAG,OAAO,KAAA;GACzC,IAAI;IACF,QAAA,GAAA,UAAA,MAAA,CAAiB,SAAS,SAAS,KAAK,EAAE;GAC5C,QAAQ;IACN;GACF;EACF;EACA,IAAI,WAAW,KAAA,GAAW;GACxB,MAAM,YAAY,OAAO;GACzB,MAAM,WAAWA,SAAO,SAAS,IAAI,UAAU,aAAa,KAAA;GAC5D,IAAIA,SAAO,QAAQ,KAAK,SAAS,oBAAoB,KAAA,GACnD,UAAU,SAAS,eAAe;GACpC,MAAM,MAAM,OAAO;GACnB,MAAM,UAAUA,SAAO,GAAG,IAAI,IAAI,kBAAkB,KAAA;GACpD,IAAI,YAAY,KAAA,GACd,IAAI,CAACA,SAAO,OAAO,GAAG,UAAU,OAAO;QAClC;IACH,IAAI;IACJ,IAAI,QAAQ,iBAAiB,QAAQA,SAAO,GAAG,GAAG;KAChD,MAAM,WAAW,IAAI;KACrB,IAAI,YAAYC,UAAAA,QAAK,MAAM,QAAQ,IAAI;KACvC,MAAM,eACJ,OAAO,aAAa,YACpB,CAAC,SAAS,SAAS,IAAI,KACvB,CAAC,SAAS,SAAS,GAAG,KACtB,CAAC,SAAS,SAAS,KAAK,KACxB,CAACA,UAAAA,QAAK,MAAM,WAAW,QAAQ,IAC3BA,UAAAA,QAAK,MAAM,UAAUA,UAAAA,QAAK,MAAM,KAAK,WAAW,QAAQ,CAAC,IACzD,KAAA;KACN,IACE,aAAa,KAAA,KACZ,iBAAiB,KAAA,KAChB,iBAAiB,QACjB,CAAC,aAAa,WAAW,KAAK,GAChC;MACA,IAAI,iBAAiB,KAAA,GAAW,YAAY;MAC5C,OAAO,MAAM;OAIX,MAAM,QAHQ,aACZA,UAAAA,QAAK,MAAM,KAAK,WAAW,YAAY,CAEvB,CAAC,GAAG;OACtB,IAAID,SAAO,KAAK,GAAG;QACjB,MAAM,SAAS,MAAM;QACrB,YAAYA,SAAO,MAAM,IACrB,OAAO,kBACP,KAAA;QACJ;OACF;OACA,IAAI,aAAa,KAAA,KAAa,cAAc,KAAK;OACjD,YAAYC,UAAAA,QAAK,MAAM,QAAQ,SAAS;MAC1C;KACF;IACF;IACA,UAAU,SAAS;GACrB;EAEJ;CACF;CACA,IAAI,SAAS,WAAW;EAEtB,MAAM,WADS,KAAK,gBACE,CAAC,GAAG;EAC1B,IAAID,SAAO,QAAQ,GAAG;GACpB,MAAM,QAAQ,SAAS;GACvB,IACE,UAAU,KAAA,KACV,UAAU,OAAO,OAAO,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,GAEvD,IAAI;IACF,MAAM;IACN,MAAM,OAAO,gBAAgB;IAC7B,SAAS,6CAA6C,OAAO;GAC/D,CAAC;GACH,MAAM,OAAO,SAAS;GACtB,IACE,SAAS,KAAA,KACT,EACE,OAAO,SAAS,YAChB,kBAAkB,KAAK,IAAI,KAC3B,sBAAsB,MAAM,OAAO,MAAM,IAG3C,IAAI;IACF,MAAM;IACN,MAAM,OAAO,qBAAqB;IAClC,SAAS,kDAAkD,OAAO;GACpE,CAAC;EACL;CACF;CACA,IAAI,SAAS,oBAAoB,SAAS,WAAW;EACnD,MAAM,SAAS,KAAK,gBAAgB;EACpC,IAAI,WAAW,KAAA,GAAW;GACxB,MAAM,UAAU,OAAO;GACvB,IAAIA,SAAO,OAAO,KAAK,QAAQ,uBAAuB,KAAA,GAElD;QAAA,CAAC,yBAAyB,QAAQ,oBAAoB,OAAO,MAAM,GAEnE,IAAI;KACF,MAAM;KACN,MAAM,OAAO,iBAAiB;KAC9B,SAAS,uCAAuC,OAAO,OAAO;IAChE,CAAC;GAAA;GACL,MAAM,OAAO,OAAO;GACpB,MAAM,eAAeA,SAAO,IAAI,IAAI,KAAK,QAAQ,KAAA;GACjD,MAAM,KAAK,SAAS,YAAY,SAAS;GACzC,IAAIA,SAAO,EAAE,KAAK,GAAG,cAAc,KAAA,GACjC,IAAI;IACF,MAAM;IACN,OAAO,GAAG;IACV,UAAU,OAAO;IACjB,OAAO;IACP,MAAM,OAAO,QAAQ;GACvB,CAAC;EACL;CACF;CACA,IAAI,iBAAiB,IAAI,GAAG;EAE1B,MAAM,QADS,KAAK,iBACD,CAAC,GAAG;EACvB,IAAIA,SAAO,KAAK,GACd,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,QAAQ,GAAG;GACvD,MAAM,aAAa,MAAM;GACzB,IAAI,eAAe,KAAA,GACjB,IAAI;IACF,MAAM;IACN,OAAOA,SAAO,UAAU,IAAI,WAAW,aAAa;IACpD;IACA,UAAU,UAAU,IAAI,IAAI,IAAI,SAAS,KAAA;IACzC,OAAO,QAAQ;IACf,MAAM,OAAO,IAAI;GACnB,CAAC;EACL;CAEJ;CACA,IAAI,SAAS,kBACX,MAAM,SAAS,MAAM,UAAU;EAC7B,MAAM,SAAS,KAAK,QAAQ,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK;EAC1D,MAAM,OAAO,OAAO,GAAG,CAAC;EACxB,IAAI,SAAS,KAAA,KAAa,EAAE,QAAQ,WAAW;EAC/C,MAAM,WAAW,OAAO,QAAQ,QAAQ,CAAC,CAAC,MACvC,CAAC,SAAS,QAAQ,IACrB,CAAC,GAAG;EACJ,IAAI,aAAa,KAAA,GACf,IAAI;GACF,MAAM;GACN,OAAO,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;GAC/B;GACA,UAAU,UAAU,IAAI,IAAI,IAAI,SAAS,KAAA;GACzC,OAAO,kBAAkB;GACzB,MAAM,QAAQ;EAChB,CAAC;CACL,CAAC;CAOH,MAAM,qBAAqB,EAAE,OAAO,MAAM,YAAiC;EACzE,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG,GAAG;GACpD,IAAI;IACF,MAAM;IACN;IACA,SAAS,oBAAoB,MAAM;GACrC,CAAC;GACD;EACF;EACA,MAAM,UAAU,kDAAkD,KAChE,uBAAuB,KAAK,CAC9B;EACA,IAAI,YAAY,MAAM;EACtB,MAAM,OAAO,QAAQ,EAAE,EAAE,YAAY;EACrC,IAAI,MAAM,SAAS,GAAG,GAAG;GACvB,IAAI;IACF,MAAM,SAAS,aAAa,aAAa;IACzC;IACA,SAAS,GAAG,MAAM,GAAG,KAAK;GAC5B,CAAC;GACD;EACF;EACA,MAAM,MAAM,QAAQ;EACpB,MAAM,gBACJ,SAAS,aACL,6BACA;EAEN,MAAM,UAAU,KAAK,QAAQ,eAAe,EAAE;EAC9C,IAAI,WAAW,OAAO;EACtB,IAAI,SAAS,QAAQ,WAAW,OAAO;OAClC,IAAI,SAAS,UAAU,WAAW,OAAO;EAC9C,IAAI;GACF,MAAM,SAAS,aAAa,aAAa;GACzC,OAAO;GACP;GACA,UAAU,SAAS,SAAS,SAAS,KAAA;GACrC,OAAO,GAAG,MAAM,GAAG;GACnB;EACF,CAAC;CACH;CACA,IAAI,uBAAuB,IAAI,GAAG;EAChC,MAAM,4BAAY,IAAI,IAAoB;EAC1C,MAAM,SAAS,oCAAoC,KAAK,IAAI,CAAC,GAAG,MAAM;EACtE,MAAM,eAAe,IAAI,OAAO,GAAG,WAAW,MAAM,MAAM,OAAO,MAAM;EACvE,MAAM,yBAAS,IAAI,IAAY;EAC/B,IAAI,gBAAoC;EACxC,MAAM,WACJ,CAAC;EACH,IAAI,cAAc;EAClB,IAAI,YAAY;EAChB,MAAM,UAAU,UAAkB;GAChC,KAAK,IAAI,QAAQ,GAAG,SAAS,UAAU,MAAM,SAAS;IACpD,MAAM,OAAO,MAAM,QACjB,+DACC,WAAW,QAA4B,UACtC,UAAU,IAAI,UAAU,SAAS,EAAE,KAAK,SAC5C;IACA,IAAI,SAAS,OAAO,OAAO;IAC3B,QAAQ;GACV;GACA,OAAO;EACT;EACA,MAAM,mBAAmB,SAAiB,SAAiB;GACzD,IAAI;GACJ,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS;IACnD,MAAM,YAAY,QAAQ,GAAG,KAAK;IAClC,IAAI,UAAU,KAAA,GAAW;KACvB,IAAI,cAAc,OAAO,QAAQ,KAAA;UAC5B,IAAI,UAAU,QAAO,cAAc,MAAM;KAC9C;IACF;IACA,IAAI,cAAc,MAAM;KACtB;KACA;IACF;IACA,IAAI,cAAc,OAAO,cAAc,MAAK;KAC1C,QAAQ;KACR;IACF;IACA,IACE,cAAc,QACb,UAAU,KAAK,YAAY,KAAK,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,IAE5D;IACF,IAAI,cAAc,OAAO,QAAQ,GAAG,QAAQ,CAAC,MAAM,KAAK;IACxD,IAAI,QAAQ,GAAG,QAAQ,CAAC,MAAM,KAAK;KACjC,SAAS;KACT;IACF;IACA,SAAS;IACT,MAAM,YAAY,QAAQ,GAAG,KAAK,MAAM;IACxC,IAAI,WAAW;IACf,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,KAAK,EAAE,GAAG;IAC3C,IAAI,QAAQ,GAAG,KAAK,MAAM,KAAK;KAC7B,IAAI;MACF,MAAM;MACN;MACA,SAAS;KACX,CAAC;KACD;IACF;IACA,IAAI,YAAY;IAChB,IAAI;IACJ,OAAO,QAAQ,QAAQ,QAAQ,SAAS;KACtC,MAAM,OAAO,QAAQ,GAAG,KAAK;KAC7B,IAAI,mBAAmB,KAAA,GAAW;MAChC,IAAI,SAAS,gBAAgB,iBAAiB,KAAA;WACzC,IACH,mBAAmB,QACnB,SAAS,QACT,SAAS,KAAK,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,GAEzC,aAAa,QAAQ,GAAG,EAAE,KAAK;WAC5B,aAAa;MAClB;KACF;KACA,IAAI,SAAS,OAAO,SAAS,MAAK;MAChC,iBAAiB;MACjB;KACF;KACA,IAAI,SAAS,QAAQ,QAAQ,GAAG,QAAQ,CAAC,MAAM,KAAA,GAAW;MACxD,aAAa,QAAQ,GAAG,EAAE,KAAK;MAC/B;KACF;KACA,IAAI,cAAc,KAAK,QAAQ,EAAE,GAAG;KACpC,aAAa;IACf;IACA,IAAI,cAAc,MAAM,mBAAmB,KAAA,GACzC,SAAS,KAAK;KAAE;KAAW;KAAW;IAAK,CAAC;SAE5C,IAAI;KACF,MAAM;KACN;KACA,SAAS;IACX,CAAC;IACH;GACF;EACF;EACA,MAAM,oBAAoB,SAAiB,SAAiB;GAC1D,MAAM,WAAW,gDAAgD,KAC/D,OACF;GACA,IAAI,aAAa,MAAM;IACrB,IAAI,kBAAkB,SAAS;IAC/B,MAAM,MAAM,SAAS;IACrB,MAAM,QAAQ,SAAS;IACvB,IAAI,QAAQ,KAAA,KAAa,UAAU,KAAA,GACjC,UAAU,IAAI,KAAK,OAAO,MAAM,QAAQ,kBAAkB,IAAI,CAAC,CAAC;IAClE;GACF;GACA,IAAI,uBAAuB,KAAK,OAAO,GAAG;IACxC,gBAAgB,SAAS,IAAI;IAC7B;GACF;GACA,MAAM,OACJ,4DAA4D,KAC1D,OACF;GACF,IAAI,SAAS,QAAQ,KAAK,OAAO,KAAA,GAAW;GAC5C,gBAAgB;GAChB,MAAM,QAAQ,OAAO,KAAK,EAAE;GAC5B,IAAI,MAAM,SAAS,GAAG,GAAG;IACvB,IAAI;KACF,MAAM;KACN;KACA,SACE;IACJ,CAAC;IACD;GACF;GACA,MAAM,QAAQ,KAAK,EAAE,EAAE,YAAY;GACnC,MAAM,gBAAgB,OAAO,IAAI,MAAM,YAAY,CAAC;GACpD,IAAI,UAAU,KAAA,GAAW,OAAO,IAAI,KAAK;GACzC,IAAI,eAAe;GACnB,kBAAkB;IAAE;IAAO;IAAM,OAAO;GAAO,CAAC;EAClD;EACA,MAAM,SAAS,MAAM,UAAU;GAC7B,MAAM,UAAU,SAAS,GAAG,CAAC;GAC7B,IAAI,YAAY,KAAA,GAAW;IACzB,KACG,QAAQ,YAAY,KAAK,QAAQ,QAAQ,EAAE,IAAI,UAChD,QAAQ,WAER,SAAS,MAAM;IACjB;GACF;GACA,IAAI,KAAK,UAAU,CAAC,CAAC,WAAW,GAAG,GAAG;GACtC,IAAI,gBAAgB,IAAI,YAAY,QAAQ;GAC5C,eAAe,KAAK,QAAQ,cAAc,GAAG;GAC7C,IAAI,aAAa,KAAK,IAAI,GAAG;GAC7B,iBAAiB,aAAa,SAAS;GACvC,cAAc;EAChB,CAAC;EACD,IAAI,gBAAgB,IAAI,iBAAiB,aAAa,SAAS;EAC/D,KAAK,MAAM,WAAW,UACpB,IAAI;GACF,MAAM;GACN,MAAM,QAAQ;GACd,SAAS,+BAA+B,QAAQ;EAClD,CAAC;CACL;CACA,IAAI,wBAAwB,IAAI,KAAK,2BAA2B,IAAI,GAAG;EACrE,MAAM,cAAc,IAAIE,KAAAA,YAAY;EACpC,KAAK,MAAM,sBAAA,GAAA,KAAA,kBAAA,CAAuC,MAAM;GACtD;GACA,OAAO;GACP,YAAY;EACd,CAAC,GAAG;GACF,MAAM,WAAW,kBAAkB;GACnC,MAAM,oBAAA,GAAA,KAAA,MAAA,CACE,QAAQ,MAAA,GAAA,KAAA,SAAA,CACL,SAAS,IAAI,cAAc,IAAI,CAAC,MAAA,GAAA,KAAA,SAAA,CAChC,SAAS,IAAI,QAAQ,IAAI,CAAC;GACrC,MAAM,sBACJ,wBAAwB,IAAI,KAAK;GACnC,IAAI,kBAAkB,OAAO,SAAS,GAAG;IACvC,IAAI,qBACF,IAAI;KACF,MAAM;KACN,MAAM;KACN,SAAS;IACX,CAAC;IACH;GACF;GACA,IAAI;IACF,MAAM,aAAa,wBACjB,kBAAkB,KAAK,EAAE,eAAe,IAAI,CAAC,GAC7C,IACF;IACA,KAAK,MAAM,SAAS,YAAY,UAAU,CAAC,GAAG;KAC5C,MAAM,OAAO,kBAAkB,MAAM,MAAM,MAAM,IAAI;KACrD,MAAM,SAAA,GAAA,KAAA,MAAA,CACG,IAAI,MAAA,GAAA,KAAA,SAAA,CAAc,IAAI,MAAA,GAAA,KAAA,MAAA,CAAW,IAAI,MAAA,GAAA,KAAA,QAAA,CAAa,IAAI,MAC7D,KAAK,UAAU,KAAA,KACf,KAAK,UAAU,OACX,YAAY,QAAQ,KAAK,MAAM,EAAE,CAAC,CAAC,OACnC;KACN,kBAAkB;MAChB,OAAO,MAAM;MACb;MACA,OACE,YAAY,cAAc,mBACtB,kBACA;KACR,CAAC;IACH;GACF,QAAQ;IACN,IAAI,qBACF,IAAI;KACF,MAAM;KACN,MAAM;KACN,SAAS;IACX,CAAC;GACL;EACF;CACF;CACA,MAAM,iBAAiB,yBAAyB,IAAI;CACpD,IAAI,mBAAmB,KAAA,GAAW,OAAO;CACzC,MAAM,YAAA,GAAA,KAAA,cAAA,CAAyB,MAAM;EAAE,YAAY;EAAM,OAAO;CAAK,CAAC;CACtE,IAAI,SAAS,OAAO,SAAS,GAAG;EAC9B,IAAI;GACF,MAAM;GACN,MAAM;GACN,SAAS;EACX,CAAC;EACD,OAAO;CACT;CACA,MAAM,YAAY,SAAkB;EAClC,IAAI,CAACF,SAAO,IAAI,KAAK,CAAC,MAAM,QAAQ,KAAK,QAAQ,GAAG,OAAO;EAC3D,MAAM,SAAkB,KAAK,QAAQ,CAAC,GAAG,CAAC;EAC1C,OAAO,OAAO,WAAW,WACrB,KAAK,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAClC;CACN;CASA,IAAI,mBAAsC,CAAC;CAC3C,IAAI,uCAAuB,IAAI,IAAoB;CACnD,IAAI,6BAA6B;CACjC,MAAM,wBAAwB,UAC5B,OAAO,UAAU,YACjB,UAAU,MACV,CAAC,MAAM,SAAS,KAAK,KACrB,CAAC,MAAM,SAAS,IAAI,KACpB,CAAC,MAAM,SAAS,GAAG,KACnB,CAACC,UAAAA,QAAK,MAAM,WAAW,KAAK,KAC5B,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,IAAI;CACjC,MAAM,yBAAyB,WAC7BA,UAAAA,QAAK,MAAM,UAAU,MAAM,CAAC,CAAC,QAAQ,OAAO,EAAE,KAAK;CAMrD,MAAM,kBAAkB,EAAE,OAAO,MAAM,WAAoC;EAMzE,MAAM,UAAU;GAJd,MAAM,CAAC,iBAAiB,QAAQ;GAChC,QAAQ,CAAC,iBAAiB;GAC1B,KAAK,CAAC,cAAc;EAEE,EAAE;EAC1B,MAAM,OAAO,SAAS,QAAQ,aAAa;EAC3C,MAAM,WAAW,qBAAqB,KAAK,IACvCA,UAAAA,QAAK,MAAM,UAAU,KAAK,IAC1B,KAAA;EACJ,MAAM,UACJ,aAAa,KAAA,IACT,KAAA,IACA,iBAAiB,UACd,UACC,MAAM,SAAS,OACf,aAAa,MAAM,QACnB,SAAS,WAAW,GAAG,MAAM,KAAK,EAAE,CACxC;EACN,IAAI;EACJ,IACE,EACE,aAAa,KAAA,KACb,8BACA,SAAS,WAAW,eACpB,CAAC,GAAG,oBAAoB,CAAC,CAAC,MACvB,CAAC,QAAQ,WACR,QAAQ,MACP,WAAW,OACV,aAAa,UACb,SAAS,WAAW,GAAG,OAAO,EAAE,EACtC,IAGF,SACE,YAAY,KAAA,KAAa,QAAQ,SAAS,MACtC,WACAA,UAAAA,QAAK,MAAM,SAAS,QAAQ,MAAM,QAAQ;EAClD,IACE,WAAW,KAAA,KACX,CAAC,QAAQ,SAASA,UAAAA,QAAK,MAAM,SAAS,MAAM,CAAC,KAC5C,SAAS,WAAW,eAAe,CAAC,aAAa,IAAI,MAAM,GAC5D;GACA,IAAI;IACF;IACA;IACA,SAAS,SAAS,KAAK,4BAA4B,QAAQ,KAAK,MAAM;GACxE,CAAC;GACD;EACF;EACA,IACE,YAAY,KAAA,MACX,QAAQ,OAAO,SAAS,aACtB,QAAQ,OAAO,SAAS,WAAW,CAAC,QAAQ,OAAO,MAAM,IAAI,MAAM,IACtE;GACA,IAAI;IACF;IACA;IACA,SAAS,iDAAiD,OAAO;GACnE,CAAC;GACD;EACF;EACA,IAAI,SAAS,WAAW,eAAe,aAAa,KAAA,GAAW;GAC7D,cAAc;IACZ,MAAM;IACN;IACA;IACA;IACA,cAAc,QAAQ;IACtB,KAAK,QAAQ;GACf,CAAC;GACD;EACF;EACA,MAAM,UAAU,SAAS,MAAM;EAC/B,IAAI,SAAS,OAAO;GAClB,IAAI;IACF,MAAM,WAAoB,KAAK,MAAM,WAAW,EAAE;IAClD,IAAI;KACF;KACA,OAAOD,SAAO,QAAQ,IAAI,SAAS,oBAAoB,KAAA;KACvD,UAAU,OAAO,OAAO;KACxB,OAAO;KACP;IACF,CAAC;GACH,QAAQ;IACN,IAAI;KACF;KACA;KACA,SACE;IACJ,CAAC;GACH;GACA;EACF;EACA,IAAI;GACF;GACA,OAAO,SAAS,KAAK;GACrB,UAAU,OAAO;GACjB,UAAU,SAAS,SAAS,SAAS,KAAA;GACrC,OAAO,SAAS,KAAK;GACrB;EACF,CAAC;CACH;CACA,MAAM,eAAe,SAAkB;EACrC,MAAM,0BAAU,IAAI,IAAa;EACjC,QAAA,GAAA,KAAA,QAAA,CAAe,IAAI,GAAG;GACpB,IAAI,QAAQ,IAAI,IAAI,GAAG,MAAM,IAAI,MAAM,mBAAmB;GAC1D,QAAQ,IAAI,IAAI;GAChB,OAAO,KAAK,QAAQ,QAAQ;EAC9B;EACA,OAAO;CACT;CACA,MAAM,kBAAkB,IAAI,IAC1B,OAAO,QAAQ,OAAO,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,cAAc,CACzD,OAAO,YAAY,GACnB,QACF,CAAC,CACH;CACA,MAAM,cAAc,SAAkB;EACpC,OAAO,YAAY,IAAI;EACvB,IAAI,EAAA,GAAA,KAAA,MAAA,CAAO,IAAI,GAAG,OAAO,CAAC;EAC1B,MAAM,OAAkB,CAAC;EACzB,KAAK,MAAM,QAAQ,KAAK,OAAO;GAC7B,IACE,EAAA,GAAA,KAAA,SAAA,CAAU,KAAK,GAAG,KAClB,OAAO,KAAK,IAAI,UAAU,YAC1B,KAAK,IAAI,WAAW,MAEpB;GACF,MAAM,QAAQ,YAAY,KAAK,KAAK;GACpC,KAAK,KAAK,IAAA,GAAA,KAAA,MAAA,CAAU,KAAK,IAAI,MAAM,QAAQ,CAAC,KAAK,CAAE;EACrD;EACA,OAAO;CACT;CACA,MAAM,UAAU,MAAe,0BAAU,IAAI,IAAa,MAAmB;EAC3E,OAAO,YAAY,IAAI;EACvB,IAAI,EAAA,GAAA,KAAA,MAAA,CAAO,IAAI,GAAG,uBAAO,IAAI,IAAI;EACjC,IAAI,QAAQ,IAAI,IAAI,GAAG,MAAM,IAAI,MAAM,mBAAmB;EAC1D,MAAM,OAAO,IAAI,IAAI,OAAO;EAC5B,KAAK,IAAI,IAAI;EACb,MAAM,OAAO,IAAI,IACf,KAAK,MAAM,SAAS,UAAA,GAAA,KAAA,SAAA,CACT,KAAK,GAAG,KAAK,OAAO,KAAK,IAAI,UAAU,WAC5C,CAAC,KAAK,IAAI,KAAK,IACf,CAAC,CACP,CACF;EACA,KAAK,MAAM,UAAU,WAAW,IAAI,GAClC,KAAK,MAAM,OAAO,OAAO,QAAQ,IAAI,GAAG,KAAK,IAAI,GAAG;EACtD,OAAO;CACT;CAMA,MAAM,aAAa,EACjB,MACA,KACA,0BAAU,IAAI,IAAI,QACa;EAC/B,OAAO,YAAY,IAAI;EACvB,IAAI,EAAA,GAAA,KAAA,MAAA,CAAO,IAAI,GAAG,OAAO,KAAA;EACzB,IAAI,KAAK,IAAI,GAAG,GAAG,OAAO;EAC1B,IAAI,QAAQ,IAAI,IAAI,GAAG,MAAM,IAAI,MAAM,mBAAmB;EAC1D,MAAM,OAAO,IAAI,IAAI,OAAO;EAC5B,KAAK,IAAI,IAAI;EACb,KAAK,MAAM,UAAU,WAAW,IAAI,GAAG;GACrC,MAAM,SAAS,UAAU;IAAE,MAAM;IAAQ;IAAK,SAAS;GAAK,CAAC;GAC7D,IAAI,WAAW,KAAA,GAAW,OAAO;EACnC;CAEF;CACA,MAAM,WAAW,MAAe,QAAgB;EAC9C,MAAM,SAAS,UAAU;GAAE;GAAM;EAAI,CAAC;EACtC,QAAA,GAAA,KAAA,MAAA,CAAa,MAAM,IAAI,YAAY,OAAO,IAAI,KAAK,IAAI,CAAC,IAAI,KAAA;CAC9D;CACA,MAAM,+BAAe,IAAI,IAAmC;CAC5D,MAAM,YAAY,SAAkB;EAClC,OAAO,YAAY,IAAI;EACvB,MAAM,SAAS,aAAa,IAAI,IAAI;EACpC,IAAI,WAAW,KAAA,GAAW,OAAO;EACjC,MAAM,UAAU,QAAQ,MAAM,MAAM;EACpC,MAAM,yBAAS,IAAI,IAAqB;EACxC,KAAK,MAAM,OAAO,OAAO,OAAO,GAAG;GACjC,MAAM,SAAS,IAAI,YAAY;GAC/B,MAAM,QAAQ,QAAQ,SAAS,GAAG;GAClC,IAAI,OAAO,IAAI,MAAM,GACnB,IAAI;IACF,MAAM;IACN,MAAM,SAAS,KAAK;IACpB,SAAS,gBAAgB,IAAI;GAC/B,CAAC;GACH,IACE,4BAA4B,KAAK,MAAM,KACvC,QAAQ,OAAO,YAAY,GAE3B,IAAI;IACF,MAAM;IACN,MAAM,SAAS,KAAK;IACpB,SAAS,kBAAkB,IAAI;GACjC,CAAC;GACH,OAAO,IAAI,QAAQ,KAAK;EAC1B;EACA,aAAa,IAAI,MAAM,MAAM;EAC7B,OAAO;CACT;CACA,MAAM,YAAY,MAAe,QAC/B,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,YAAY,CAAC;CACtC,MAAM,kBAAkB,UAAmB;EACzC,IAAI,OAAO,UAAU,YAAY,CAAC,MAAM,WAAW,KAAK,GAAG,OAAO,KAAA;EAClE,IAAI;EACJ,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS;GACjD,MAAM,YAAY,MAAM,GAAG,KAAK;GAChC,IAAI,UAAU,KAAA,GAAW;IACvB,IAAI,cAAc,OAChB,IAAI,UAAU,OAAO,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK;SAC7C,QAAQ,KAAA;SACR,IAAI,UAAU,QAAO,cAAc,MAAM;IAChD;GACF;GACA,IAAI,cAAc,OAAO,cAAc,MAAK,QAAQ;QAC/C,IAAI,MAAM,WAAW,OAAO,KAAK,GAAG,OAAO,KAAA;QAC3C,IAAI,cAAc,OAAO,MAAM,GAAG,QAAQ,CAAC,MAAM,KACpD,OAAO,UAAU,MAAM,SAAS,IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,IAC3B,KAAA;EACR;CAEF;CACA,MAAM,oBAAoB,SAAkB;EAC1C,MAAM,cAAc,SAAS,MAAM,MAAM;EACzC,IAAI,gBAAgB,KAAA,GAAW,OAAO;EACtC,QAAA,GAAA,KAAA,SAAA,CAAgB,WAAW,IAAI,YAAY,QAAQ,KAAA;CACrD;CACA,MAAM,oBAAoB,SAAkC;EAC1D,MAAM,aAAa,CAAC,GAAG,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,QACpD,IAAI,WAAW,iBAAiB,CAClC;EACA,IAAI,WAAW,WAAW,GAAG,OAAO,EAAE,MAAM,MAAM;EAClD,IACE,WAAW,MACR,QACC,QAAQ,qBAAqB,QAAQ,2BACzC,GAEA,OAAO,EAAE,MAAM,UAAU;EAC3B,MAAM,QAAQ,SAAS,MAAM,iBAAiB;EAC9C,MAAM,OAAO,SAAS,MAAM,2BAA2B;EACvD,IACE,EAAA,GAAA,KAAA,SAAA,CAAU,KAAK,KACf,OAAO,MAAM,UAAU,YACtB,SAAS,KAAA,MACP,EAAA,GAAA,KAAA,SAAA,CAAU,IAAI,KACZ,KAAK,UAAU,QACd,KAAK,UAAU,SACf,KAAK,UAAU,UACf,KAAK,UAAU,UAErB,OAAO,EAAE,MAAM,UAAU;EAC3B,MAAM,QAAQ,MAAM,MACjB,MAAM,OAAO,CAAC,CACd,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,QAAQ,UAAU,UAAU,EAAE;EACjC,IACE,MAAM,WAAW,KACjB,MAAM,MACH,UACC,CAAC,qBAAqB,KAAK,KAC3B,MAAM,WAAW,GAAG,KACpB,UAAU,KAAK,KAAK,CACxB,GAEA,OAAO,EAAE,MAAM,UAAU;EAC3B,OAAO;GAAE,MAAM;GAAS,OAAO,IAAI,IAAI,KAAK;EAAE;CAChD;CACA,MAAM,eAAe,SAAkB;EACrC,OAAO,YAAY,IAAI;EACvB,IAAI,EAAA,GAAA,KAAA,MAAA,CAAO,IAAI,GAAG;EAClB,SAAS,IAAI;EACb,MAAM,OAAO,QAAQ,MAAM,MAAM;EACjC,IAAI,SAAS,KAAA,GAAW;EACxB,MAAM,OAAO,SAAS,IAAI;EAC1B,IAAI,EAAA,GAAA,KAAA,SAAA,CAAU,IAAI,KAAK,OAAO,KAAK,UAAU,UAAU;GACrD,IAAI;IACF,MAAM;IACN;IACA,SAAS;GACX,CAAC;GACD;EACF;EACA,MAAM,QAAQ,KAAK;EACnB,IAAI,MAAM,WAAW,IAAI,GAAG;GAC1B,IACE,MAAM,WAAW,KACjB,KAAK,KAAK,KAAK,KACf,MAAM,SAAS,GAAG,KAClB,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,IAAI,KACnB,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,IAAI,GAE9B,IAAI;IACF,MAAM;IACN;IACA,SACE;GACJ,CAAC;GACH;EACF;EACA,IAAI,MAAM,WAAW,IAAI,GAAG;GAC1B,MAAM,WAAW,qBAAqB,KAAK,IACvCC,UAAAA,QAAK,MAAM,UAAU,KAAK,IAC1B,KAAA;GACJ,MAAM,UACJ,aAAa,KAAA,IACT,KAAA,IACA,iBAAiB,UACd,UACC,MAAM,SAAS,OACf,aAAa,MAAM,QACnB,SAAS,WAAW,GAAG,MAAM,KAAK,EAAE,CACxC;GACN,IACE,aAAa,KAAA,KACb,8BACC,YAAY,KAAA,KAAa,QAAQ,WAAW,aAC7C,CAAC,GAAG,oBAAoB,CAAC,CAAC,MACvB,CAAC,QAAQ,WACR,QAAQ,MACP,WAAW,OACV,aAAa,UACb,SAAS,WAAW,GAAG,OAAO,EAAE,EACtC,GAEA,IAAI;IACF,MAAM;IACN;IACA,SACE;GACJ,CAAC;GACH;EACF;EACA,IAAI,MAAM,WAAW,WAAW,GAAG;GACjC,IAAI;IACF,MAAM;IACN;IACA,SAAS;GACX,CAAC;GACD,kBAAkB;IAChB,OAAO,MAAM,MAAM,CAAkB;IACrC;IACA,OAAO;GACT,CAAC;GACD;EACF;EACA,MAAM,SAAS,qCAAqC,KAAK,KAAK;EAC9D,IAAI,WAAW,MAAM;GACnB,IAAI;IACF,MAAM;IACN;IACA,SAAS;GACX,CAAC;GACD;EACF;EACA,MAAM,SAAS,OAAO,EAAE,EAAE,YAAY;EACtC,MAAM,MAAM,OAAO;EACnB,MAAM,WACJ,WAAW,KAAA,IACP,KAAA,IACC,gBAAgB,IAAI,MAAM,KAC3B,gBAAgB,IAAI,OAAO,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;EACjE,IAAI,QAAQ,KAAA,KAAa,CAAC,iBAAiB,KAAK,GAAG,GACjD,IAAI;GACF,MAAM;GACN;GACA,SAAS;EACX,CAAC;OACE,IAAI,aAAa,KAAA,KAAa,QAAQ,SAAS,KAClD,IAAI;GACF,MAAM;GACN;GACA,SAAS,GAAG,OAAO,YAAY,SAAS;EAC1C,CAAC;EACH,MAAM,cAAc,UAAU;GAAE;GAAM,KAAK;EAAO,CAAC;EACnD,MAAM,UACJ,KAAK,aAAA,GAAA,KAAA,MAAA,CACE,WAAW,IAAI,YAAY,UAAU,KAAA,MAC5C;EACF,IACE,aAAa,KAAA,KACb,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,SAAS,OAAO,GAEtD,IAAI;GACF,MAAM;GACN;GACA,SAAS,GAAG,OAAO,gBAAgB,SAAS,QAAQ;EACtD,CAAC;EACH,IAAI,WAAW,oBAAoB;GACjC,MAAM,qBAAqB,SAAS,MAAM,YAAY;GACtD,MAAM,cAAc,SAAS,MAAM,KAAK;GACxC,MAAM,SAAS,iBAAiB,IAAI;GACpC,IAAI;GACJ,IAAI,uBAAuB,KAAA,GACzB,QAAA,GAAA,KAAA,SAAA,CAAgB,kBAAkB,IAAI,mBAAmB,QAAQ;GACnE,MAAM,OACJ,SAAS,KAAA,KACT,SAAS,8BACR,OAAO,SAAS,YACf,eAAe,KAAA,KACf,KAAK,YAAY,MAAM,WAAW,YAAY;GAClD,MAAM,iBACJ,SAAS,qCAAA,GAAA,KAAA,SAAA,CACA,WAAW,KACpB,YAAY,UAAU;GACxB,MAAM,gBAAgB,QAAQ,gBAAgB,KAAA;GAC9C,MAAM,YAAA,GAAA,KAAA,SAAA,CAAoB,WAAW,IAAI,YAAY,QAAQ,KAAA;GAC7D,MAAM,aAAa,eAAe,QAAQ;GAC1C,MAAM,mBACH,QAAQ,SAAS,qCAClB,eAAe,KAAA,KACf,eAAe,MACf,CAAC,qHAAqH,KACpH,UACF,KACA,CAAC,gHAAgH,KAC/G,UACF;GAEF,IAAI,CAAC,qBAAqB,MAAM,GAE9B,iBAAiB,KAAK;IACpB,MAAM;IACN,QAAQ;IACR,QAAQ,EAAE,MAAM,UAAU;GAC5B,CAAC;QACI;IACL,MAAM,cAAc,sBAAsB,MAAM;IAChD,MAAM,gBACJ,QAAQ,UAAU,OAClB,UAAU;KAAE;KAAM,KAAK;IAAK,CAAC,MAAM,KAAA,KACnC,UAAU;KAAE;KAAM,KAAK;IAAoB,CAAC,MAAM,KAAA,KAClD,qBAAqB,IAAI,WAAW,MAAM,KAC1C,CAAC;IACH,IAAI,iBAAiB,mBAAmB,OAAO,aAAa,UAC1D,iBAAiB,KAAK;KACpB,MAAM;KACN,QAAQ,iBAAiB,IAAI;KAC7B,QAAQ;KACR,KAAK;IACP,CAAC;SAED,iBAAiB,KAAK;KACpB,MAAM;KACN,QAAQ,iBAAiB,IAAI;KAC7B,QACE,kBAAkB,kBAAkB,iBAChC,YACA;IACR,CAAC;GACL;EACF;EACA,IAAI;EACJ,QAAQ,QAAR;GACE,KAAK;IACH,OAAO;IACP;GACF,KAAK;IACH,OAAO;IACP;GACF,KAAK;IACH,OAAO;IACP;GACF,SACE;EACJ;EACA,MAAM,UAAU,SAAS,MAAM,GAAG,KAAK,SAAS;EAChD,IAAI,YAAY,KAAA,GACd,IAAI;GACF,MAAM,SAAS,QAAQ,aAAa;GACpC,MAAM,SAAS,OAAO;GACtB,SAAS,SAAS,KAAK,YAAY,KAAK;EAC1C,CAAC;EACH,MAAM,YAAY,SAAS,MAAM,GAAG,KAAK,cAAc;EACvD,eAAe;GACb,QAAA,GAAA,KAAA,SAAA,CAAgB,SAAS,IAAI,UAAU,QAAQ,KAAA;GAC/C;GACA,MAAM,cAAc,KAAA,IAAY,OAAO,SAAS,SAAS;EAC3D,CAAC;CACH;CACA,MAAM,kBAAkB,SAAkB;EACxC,OAAO,YAAY,IAAI;EACvB,IAAI,SAAS,KAAA,GAAW;EACxB,MAAM,SAAA,GAAA,KAAA,MAAA,CAAc,IAAI,IAAI,QAAQ,MAAM,OAAO,IAAI;EACrD,kBAAkB;GAChB,QAAA,GAAA,KAAA,SAAA,CAAgB,KAAK,IAAI,MAAM,QAAQ,KAAA;GACvC,MAAM,SAAS,SAAS,IAAI;GAC5B,OAAO;EACT,CAAC;CACH;CACA,MAAM,cAAc,SAAkB;EACpC,mBAAmB,CAAC;EACpB,uCAAuB,IAAI,IAAI;EAC/B,6BAA6B;EAC7B,OAAO,YAAY,IAAI;EACvB,IAAI,EAAA,GAAA,KAAA,MAAA,CAAO,IAAI,GAAG;EAClB,KAAK,MAAM,QAAQ,KAAK,OAAO;GAC7B,MAAM,OAAO,QAAQ,MAAM,MAAM;GACjC,IACE,EAAA,GAAA,KAAA,SAAA,CAAU,IAAI,KACd,OAAO,KAAK,UAAU,YACtB,CAAC,KAAK,MAAM,YAAY,CAAC,CAAC,WAAW,mBAAmB,GAExD;GACF,MAAM,SAAS,iBAAiB,IAAI;GACpC,IAAI,CAAC,qBAAqB,MAAM,GAAG;IACjC,6BAA6B;IAC7B;GACF;GACA,MAAM,cAAc,sBAAsB,MAAM;GAChD,qBAAqB,IACnB,cACC,qBAAqB,IAAI,WAAW,KAAK,KAAK,CACjD;EACF;EACA,KAAK,MAAM,QAAQ,KAAK,OAAO,YAAY,IAAI;CACjD;CACA,IAAI;EAEF,SAAS,KAAK,EAAE,eAAe,IAAI,CAAC;EACpC,IAAI,mBAAmB,YAAY;GACjC,MAAM,OAAO,QAAQ,SAAS,UAAU,MAAM;GAC9C,KAAA,GAAA,KAAA,MAAA,CAAU,IAAI,GACZ,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG;IAC9B,mBAAmB,CAAC;IACpB,uCAAuB,IAAI,IAAI;IAC/B,6BAA6B;IAC7B,MAAM,MAAM,QAAQ,MAAM,GAAG;IAC7B,YAAY,GAAG;IACf,eAAe,QAAQ,KAAK,WAAW,CAAC;IACxC,MAAM,WAAW,QAAQ,KAAK,UAAU;IACxC,KAAA,GAAA,KAAA,MAAA,CAAU,QAAQ,GAChB,KAAK,MAAM,WAAW,OAAO,QAAQ,GACnC,eAAe,QAAQ,UAAU,OAAO,CAAC;IAC7C,WAAW,QAAQ,KAAK,OAAO,CAAC;GAClC;EACJ,OAAO;GACL,MAAM,OAAO,QAAQ,SAAS,UAAU,MAAM;GAC9C,MAAM,QAAQ,QAAQ,MAAM,OAAO;GACnC,KAAA,GAAA,KAAA,SAAA,CAAa,KAAK,KAAK,MAAM,UAAU,aACrC,WAAW,QAAQ,MAAM,OAAO,CAAC;GACnC,KAAA,GAAA,KAAA,SAAA,CAAa,KAAK,KAAK,MAAM,UAAU,UAAU;IAC/C,MAAM,QAAQ,QAAQ,MAAM,OAAO;IACnC,MAAM,SAAA,GAAA,KAAA,SAAA,CAAiB,KAAK,IAAI,MAAM,QAAQ,KAAA;IAC9C,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,WAAW,GAAG;KAC9D,IAAI;MACF,MAAM;MACN,MAAM,SAAS,KAAK;MACpB,SACE;KACJ,CAAC;KACD,kBAAkB;MAChB,OAAO,MAAM,MAAM,CAAkB;MACrC,MAAM,SAAS,KAAK;MACpB,OAAO;KACT,CAAC;IACH,OAAO,IACL,OAAO,UAAU,YACjB,MAAM,SAAS,KAAK,KACpB,MAAM,SAAS,IAAI,KACnB,MAAM,SAAS,GAAG,KAClBA,UAAAA,QAAK,MAAM,WAAW,KAAK,KAC3BA,UAAAA,QAAK,MACF,UAAUA,UAAAA,QAAK,MAAM,KAAKA,UAAAA,QAAK,MAAM,QAAQ,IAAI,GAAG,KAAK,CAAC,CAAC,CAC3D,MAAM,GAAG,CAAC,CACV,GAAG,CAAC,MAAM,QACbA,UAAAA,QAAK,MAAM,SAAS,KAAK,MAAM,cAE/B,IAAI;KACF,MAAM;KACN,MAAM,SAAS,KAAK;KACpB,SACE;IACJ,CAAC;GAEL;EACF;CACF,QAAQ;EACN,IAAI;GACF,MAAM;GACN,MAAM;GACN,SAAS;EACX,CAAC;CACH;CACA,OAAO;AACT;;;AC93CA,MAAa,iBAAiB;CAC5B;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAME,YAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;;AAGrE,MAAa,wBAAwB,UAAmB;CACtD,IAAI,CAACA,SAAO,KAAK,KAAK,MAAM,qBAAqB,GAC/C,MAAM,IAAI,MAAM,yCAAyC;CAC3D,MAAM,UAAU,QAAiC,QAAgB;EAC/D,MAAM,QAAQ,OAAO;EACrB,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAChD,MAAM,IAAI,MAAM,sCAAsC,KAAK;EAC7D,OAAO;CACT;CACA,MAAM,WAAmC,CAAC;CAC1C,KAAK,MAAM,OAAO,gBAAgB,SAAS,OAAO,OAAO,OAAO,GAAG;CACnE,MAAM,MAAM,OAAO,OAAO,KAAK;CAC/B,MAAM,aAAa,OAAO,OAAO,YAAY;CAC7C,MAAM,OAAO,OAAO,OAAO,MAAM;CACjC,MAAM,SAAS,OAAO,OAAO,QAAQ;CACrC,MAAM,OAAO,OAAO,OAAO,MAAM;CACjC,MAAM,0BAA0B,OAAO,OAAO,yBAAyB;CACvE,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ;EACzC,GAAG;EACH;EACA;CACF,CAAC,GACC,KAAA,GAAA,OAAA,MAAA,CAAU,KAAK,MAAM,OACnB,MAAM,IAAI,MAAM,kBAAkB,KAAK,0BAA0B;CACrE,IAAI,CAAC,gBAAgB,IAAI,GACvB,MAAM,IAAI,MAAM,2CAA2C;CAC7D,IAAI,CAAC,uBAAuB,KAAK,MAAM,GACrC,MAAM,IAAI,MAAM,gDAAgD;CAClE,IAAI,CAAC,kBAAkB,KAAK,IAAI,GAC9B,MAAM,IAAI,MAAM,sCAAsC;CACxD,IAAI,CAAC,8BAA8B,KAAK,uBAAuB,GAC7D,MAAM,IAAI,MAAM,mDAAmD;CACrE,MAAM,gBAAgB,MAAM;CAC5B,IAAI,CAACA,SAAO,aAAa,GACvB,MAAM,IAAI,MAAM,yCAAyC;CAC3D,MAAM,UAAU,OAAO,eAAe,SAAS;CAC/C,MAAM,eAAe,OAAO,eAAe,cAAc;CACzD,KAAA,GAAA,OAAA,MAAA,CAAU,OAAO,MAAM,SACrB,MAAM,IAAI,MAAM,mDAAmD;CACrE,MAAM,UAAU,MAAM;CACtB,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,QAAQ,WAAW,GAChD,MAAM,IAAI,MAAM,oCAAoC;CACtD,MAAM,2BAA2B,QAAQ,KAAK,WAAoB;EAChE,IAAI,CAACA,SAAO,MAAM,GAAG,MAAM,IAAI,MAAM,mCAAmC;EACxE,MAAM,kBAAkB,OAAO,QAAQ,iBAAiB;EACxD,MAAM,oBAAoB,OAAO,QAAQ,mBAAmB;EAC5D,MAAM,mBAAmB,OAAO,QAAQ,kBAAkB;EAC1D,QAAQ,OAAO,SAAf;GACE,KAAK;IACH,IACE,sBAAsB,cACtB,oBAAoB,cAEpB,MAAM,IAAI,MACR,sDACF;IACF,OAAO;KACL,MAAM;KACN;KACA;KACA;IACF;GACF,KAAK,uBAAuB;IAC1B,MAAM,uBAAuB,OAAO,QAAQ,sBAAsB;IAClE,MAAM,yBAAyB,OAAO,QAAQ,wBAAwB;IACtE,IACE,sBAAsB,kBAAkB,gBACxC,2BAA2B,SAE3B,MAAM,IAAI,MACR,sDACF;IACF,OAAO;KACL,MAAM;KACN;KACA;KACA;KACA;KACA;IACF;GACF;GACA,SACE,MAAM,IAAI,MAAM,uCAAuC;EAC3D;CACF,CAAC;CACD,MAAM,eAAe,MAAM;CAC3B,IAAI,CAACA,SAAO,YAAY,KAAK,OAAO,KAAK,YAAY,CAAC,CAAC,WAAW,GAChE,MAAM,IAAI,MAAM,0BAA0B;CAC5C,MAAM,UAA4D,CAAC;CACnE,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,YAAY,GAAG;EACzD,IAAI,CAACA,SAAO,MAAM,GAAG,MAAM,IAAI,MAAM,0BAA0B,MAAM;EACrE,MAAM,MAAM,OAAO,QAAQ,KAAK;EAChC,MAAM,gBAAgB,OAAO,QAAQ,SAAS;EAC9C,IAAI,CAAC,iBAAiB,KAAK,GAAG,KAAK,CAAC,mBAAmB,KAAK,aAAa,GACvE,MAAM,IAAI,MAAM,+BAA+B,MAAM;EACvD,QAAQ,QAAQ;GAAE;GAAK,SAAS;EAAc;CAChD;CACA,MAAM,kBAAkB,MAAM;CAC9B,IACE,CAACA,SAAO,eAAe,KACvB,CAACA,SAAO,gBAAgB,WAAW,KACnC,CAACA,SAAO,gBAAgB,WAAW,KACnC,CAACA,SAAO,gBAAgB,SAAS,GAEjC,MAAM,IAAI,MAAM,2BAA2B;CAC7C,MAAM,gBAAgB,gBAAgB;CACtC,MAAM,WAAW;EACf,UAAU,OAAO,eAAe,UAAU;EAC1C,KAAK,OAAO,eAAe,KAAK;EAChC,MAAM,OAAO,eAAe,MAAM;EAClC,UAAU,OAAO,eAAe,UAAU;CAC5C;CACA,MAAM,cAAc,gBAAgB,WAAW,CAAC;CAChD,IACE,OAAO,gBAAgB,YACvB,CAAC,OAAO,UAAU,WAAW,KAC7B,cAAc,GAEd,MAAM,IAAI,MAAM,gDAAgD;CAClE,MAAM,WAAW,UAA6B;EAC5C,IACE,CAAC,MAAM,QAAQ,KAAK,KACpB,CAAC,MAAM,OAAO,UAAmB,OAAO,UAAU,QAAQ,GAE1D,MAAM,IAAI,MAAM,+CAA+C;EACjE,OAAO;CACT;CACA,MAAM,SACJ,CAAC;CACH,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,gBAAgB,SAAS,GAAG;EACrE,IAAI,CAACA,SAAO,KAAK,GAAG,MAAM,IAAI,MAAM,6BAA6B,MAAM;EACvE,OAAO,QAAQ;GACb,UAAU,QAAQ,MAAM,WAAW;GACnC,aAAa,QAAQ,MAAM,cAAc;EAC3C;CACF;CACA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,0BAA0B;GAAE;GAAS;EAAa;EAClD,YAAY;GACV;GACA,UAAU,EAAE,YAAY;GACxB;GACA,iBAAiB,CACf,mBAAG,IAAI,IAAI;IACT,GAAG,OAAO,KAAK,QAAQ;IACvB,GAAG,yBAAyB,SAAS,WACnC,OAAO,SAAS,WACZ,CAAC,OAAO,eAAe,IACvB,CAAC,OAAO,iBAAiB,OAAO,oBAAoB,CAC1D;IACA;IACA;GACF,CAAC,CACH;GACA,gBAAgB,OAAO,KAAK,OAAO;GACnC,eAAe;IAAC;IAAQ;IAAU;GAAU;EAC9C;CACF;AACF;;;AC1KA,MAAa,iBAAiB,CAC5B,mBAAG,IAAI,IAAI;CAAC,GAAG;CAAc,GAAG;CAAc,GAAG;AAAe,CAAC,CACnE;AASA,MAAM,UAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,MAAM,SAAS,UACb,MAAM,QAAQ,KAAK;;AAGrB,MAAa,yBAAyB,UAAmB;CACvD,IACE,CAAC,OAAO,KAAK,KACb,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,QAAQ,SAAS,KAClD,CAAC,MAAM,MAAM,UAAU,GAEvB,MAAM,IAAI,MAAM,4DAA0D;CAC5E,MAAM,2BAAW,IAAI,IAAY;CACjC,KAAK,MAAM,SAAS,MAAM,YAAY;EACpC,IACE,CAAC,OAAO,KAAK,KACb,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,QAAQ,UAAU,QAAQ,QAAQ,KACnE,OAAO,MAAM,YAAY,YACzB,CAAC,eAAe,MAAM,SAAS,SAAS,MAAM,OAAO,KACrD,OAAO,MAAM,cAAc,YAC3B,MAAM,SAAS,CAAC,KAAK,MAAM,MAC3B,SAAS,IAAI,MAAM,OAAO,GAE1B,MAAM,IAAI,MACR,iEACF;EACF,IAAI,MAAM,YAAY,eACpB,MAAM,IAAI,MACR,mFACF;EACF,SAAS,IAAI,MAAM,OAAO;CAC5B;CACA,OAAO;AACT;;AAGA,MAAa,uBAAuB,SAAiB;CACnD,MAAM,cAA2C,CAAC;CAClD,MAAM,WAAA,GAAA,mBAAA,aAAA,CAAuB,OAAO;EAAC;EAAY;EAAM;CAAU,GAAG;EAClE,KAAK;EACL,UAAU;CACZ,CAAC,CAAC,CACC,MAAM,IAAI,CAAC,CACX,QAAQ,SAAS,SAAS,EAAE;CAC/B,MAAM,QAAgC,CAAC;CACvC,MAAM,eAAe,IAAI,IAAI,OAAO;CACpC,MAAM,gBAAA,GAAA,QAAA,aAAA,CAA4B,IAAI;CACtC,KAAK,MAAM,QAAQ,SAAS;EAE1B,MAAM,OAAO,mBAAmB,IAAI;EACpC,IAAI,SAAS,KAAA,GAAW;EACxB,IAAI,SAAS,YAAY;GACvB,MAAM,QAAQ;GACd;EACF;EACA,IAAI;GACF,MAAM,gBAAA,GAAA,QAAA,aAAA,CAA4BC,UAAAA,QAAK,KAAK,cAAc,IAAI,CAAC;GAC/D,MAAM,WAAWA,UAAAA,QAAK,SAAS,cAAc,YAAY;GACzD,IACEA,UAAAA,QAAK,WAAW,QAAQ,KACxB,SAAS,MAAMA,UAAAA,QAAK,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,QACnC,CAAC,aAAa,IAAI,SAAS,MAAMA,UAAAA,QAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,GAEpD,MAAM,IAAI,MAAM,kDAAkD;GACpE,MAAM,SAAA,GAAA,QAAA,aAAA,CAAqB,cAAc,MAAM;EACjD,QAAQ;GACN,YAAY,KAAK;IACf,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;GACX,CAAC;EACH;CACF;CACA,OAAO;EAAE;EAAO;EAAc;CAAY;AAC5C;AAQA,MAAa,kBAAkB,EAC7B,MACA,QACA,kBACiC;CACjC,MAAM,EAAE,OAAO,cAAc,gBAAgB,oBAAoB,IAAI;CACrE,IAAI;CACJ,IAAI;EACF,MAAM,UAAA,GAAA,mBAAA,aAAA,CAAsB,OAAO;GAAC;GAAU;GAAW;EAAQ,GAAG;GAClE,KAAK;GACL,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACpC,CAAC,CAAC,CAAC,KAAK;EACR,aACE,wGAAwG,KACtG,MACF,CAAC,GAAG;CACR,QAAQ,CAER;CAEA,IAAI,2BAAW,IAAI,IAAY;CAC/B,IAAI,MAAM,2BAA2B,KAAA,GACnC,IAAI;EACF,WAAW,sBACT,KAAK,MAAM,MAAM,sBAAsB,CACzC;CACF,SAAS,OAAO;EACd,YAAY,KAAK;GACf,MAAM;GACN,MAAM;GACN,MAAM;GACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAChE,CAAC;CACH;CAEF,YAAY,KAAK,GAAG,kBAAkB;EAAE;EAAO;CAAO,CAAC,CAAC;CACxD,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,KAAK,GAC7C,YAAY,KACV,GAAG,iBAAiB;EAClB;EACA;EACA,QAAQ;GACN,GAAG;GACH,UAAU;IAAE,GAAG,OAAO;IAAU,YAAY,OAAO;GAAW;EAChE;EACA;EACA;EACA;EACA,WAAW,WAAW,MAAM;CAC9B,CAAC,CACH;CACF,YAAY,KAAK,GAAG,gBAAgB;EAAE;EAAO,QAAQ,OAAO;CAAW,CAAC,CAAC;CACzE,OAAO,YAAY,QAAQ,eAAe,CAAC,SAAS,IAAI,WAAW,IAAI,CAAC;AAC1E;;;AC9JA,IAAI;CACF,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,IAAI,KAAK,WAAW,KAAK,KAAK,OAAO,UAAU;EAC7C,QAAQ,OAAO,MACb,uEACF;EACA,QAAQ,KAAK,CAAC;CAChB;CACA,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,MAAM,wBAAwB,KAAK,GAAG,CAAC,GAAG;CAC3E,MAAM,SAAS,qBACb,KAAK,OAAA,GAAA,QAAA,aAAA,CACU,IAAI,IAAI,qBAAA,QAAA,KAAA,CAAA,CAAA,cAAA,UAAA,CAAA,CAAA,IAAoC,GAAG,MAAM,CACpE,CACF;CACA,MAAM,cAAc,eAAe;EACjC,MAAM,QAAQ,IAAI;EAClB;EACA,cAAc,EAAE,MAAM,MAAM,MAAM,UAAU,UAC1C,QAAQ,OAAO,MACb,GAAG,KAAK,GAAG,KAAK,8BAA8B,KAAK,GAAG,SAAS,yCAAyC,IAAI,GAC9G;CACJ,CAAC;CACD,KAAK,MAAM,cAAc,aACvB,QAAQ,OAAO,MACb,GAAG,WAAW,KAAK,GAAG,WAAW,KAAK,KAAK,WAAW,KAAK,IAAI,WAAW,QAAQ,GACpF;CACF,IAAI,YAAY,SAAS,GAAG,QAAQ,WAAW;AACjD,SAAS,OAAO;CACd,QAAQ,OAAO,MACb,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,GAC/E;CACA,QAAQ,WAAW;AACrB"}