@substrat-run/contract-tests 0.1.0

package/README.md

@@ -0,0 +1,45 @@
+# @substrat-run/contract-tests
+
+The conformance suite for [Substrat](https://github.com/substrat-run/substrat)
+scope-host adapters. Every adapter — pure SQLite, Cloudflare Durable Objects, and any
+future one — must pass this suite **unchanged**, forever. If an adapter needs the suite
+modified, the contract changed, and that is a decision, not a patch.
+
+This package exports test *suites* (built on [Vitest](https://vitest.dev)); it runs
+nothing itself. Each adapter runs the suite from its own `test/` folder.
+
+## Usage
+
+```ts
+// packages/adapter-yours/test/contract.test.ts
+import { scopeHostContractSuite } from '@substrat-run/contract-tests';
+import { YourScopeHost } from '../src/index.js';
+
+scopeHostContractSuite('adapter-yours', async () => {
+  const host = new YourScopeHost({ ... });
+  return {
+    host,
+    cleanup: async () => host.close(),
+  };
+});
+```
+
+## What the suite verifies
+
+- **Strict serialization per scope** — 10 concurrent read-await-write increments must
+  land on exactly 10.
+- **Structured-clone boundary** — mutating an input after `invoke()`, or a returned
+  result, must never affect scope state.
+- **Kernel-stamped envelopes** — tenant, scope, ULID id, and timestamp are stamped
+  below the API surface.
+- **PII classification enforced** — a PII-classed event without a `subjectId` is
+  rejected at emit.
+- **Isolation and fail-closed addressing** — writes in one scope are invisible in
+  another; a mismatched `(tenantId, scopeId)` pair throws.
+
+The suite grows with the kernel (migration journal, crash-mid-migration,
+duplicate-delivery harnesses); adapters inherit new checks by upgrading.
+
+## Status
+
+Pre-release (0.x): the suite expands as kernel contracts land.

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { scopeHostContractSuite } from './scope-host-suite.js';
+export type { ScopeHostFixture } from './scope-host-suite.js';
+export { permissionContractSuite } from './permission-suite.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { scopeHostContractSuite } from './scope-host-suite.js';
+export { permissionContractSuite } from './permission-suite.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/permission-suite.d.ts

@@ -0,0 +1,8 @@
+import type { ScopeHostFixture } from './scope-host-suite.js';
+/**
+ * Contract suite for the default (tuple) permission checker (design doc §4.2,
+ * D-23). The fixture host must use the adapter's DEFAULT checker — no
+ * UNSAFE_allowAllChecker.
+ */
+export declare function permissionContractSuite(adapterName: string, makeFixture: () => Promise<ScopeHostFixture>): void;
+//# sourceMappingURL=permission-suite.d.ts.map

package/dist/permission-suite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-suite.d.ts","sourceRoot":"","sources":["../src/permission-suite.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AA6B9D;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAC3C,IAAI,CAsHN"}

package/dist/permission-suite.js

@@ -0,0 +1,129 @@
+import { describe, it, expect, beforeAll, afterAll } from 'vitest';
+import { moduleManifest, permissionKey, principalId, scopeId, tenantId, } from '@substrat-run/contracts';
+import { ulid } from '@substrat-run/kernel';
+const permModManifest = moduleManifest.parse({
+    id: '@perm/mod',
+    version: '1.0.0',
+    kernelContract: '^0.0.1',
+    permissions: [
+        { key: 'perm:use', description: 'use the thing' },
+        { key: 'perm:read', description: 'read the thing' },
+    ],
+    events: { emits: [], consumes: [] },
+    migrations: { journalDir: './migrations', compatibleFrom: '1.0.0' },
+    attachmentTargets: [],
+    entityRelations: [{ entityType: 'item', parentType: 'box' }],
+    entitlementKey: 'perm',
+});
+const linkOp = (ctx, input) => {
+    ctx.link(input.child, input.parent);
+};
+const probeOp = (ctx, input) => ctx.check(input.permission, input.entity);
+const PERM_USE = permissionKey.parse('perm:use');
+const PERM_READ = permissionKey.parse('perm:read');
+/**
+ * Contract suite for the default (tuple) permission checker (design doc §4.2,
+ * D-23). The fixture host must use the adapter's DEFAULT checker — no
+ * UNSAFE_allowAllChecker.
+ */
+export function permissionContractSuite(adapterName, makeFixture) {
+    describe(`permission contract (tuple checker): ${adapterName}`, () => {
+        let fixture;
+        let host;
+        const t1 = tenantId.parse(ulid());
+        const s1 = scopeId.parse(ulid());
+        const s2 = scopeId.parse(ulid()); // same tenant, second scope
+        const alice = principalId.parse(ulid()); // tenant-level admin
+        const bob = principalId.parse(ulid()); // scope role at s1 only
+        const carol = principalId.parse(ulid()); // entity-narrowed grant
+        const dave = principalId.parse(ulid()); // expired grant
+        const erin = principalId.parse(ulid()); // via org membership
+        const probe = async (who, scope, permission, entity) => {
+            const stub = await host.getScope(who, t1, scope);
+            return stub.invoke('perm/probe', {
+                permission,
+                entity,
+            });
+        };
+        beforeAll(async () => {
+            fixture = await makeFixture();
+            host = fixture.host;
+            host.registerModule({
+                manifest: permModManifest,
+                operations: { 'perm/link': linkOp, 'perm/probe': probeOp },
+            });
+            await host.provisionScope({ tenantId: t1, scopeId: s1 });
+            await host.provisionScope({ tenantId: t1, scopeId: s2 });
+            host.admin.defineRole(t1, {
+                key: 'admin',
+                permissions: [PERM_USE, PERM_READ],
+                source: 'vertical',
+            });
+            host.admin.defineRole(t1, { key: 'tech', permissions: [PERM_READ], source: 'vertical' });
+            host.admin.assignRole({ principalId: alice, roleKey: 'admin', node: { tenantId: t1, scopeId: null } });
+            host.admin.assignRole({ principalId: bob, roleKey: 'tech', node: { tenantId: t1, scopeId: s1 } });
+            // Entity graph in s1: item i1 → box b1, item i2 → box b2.
+            const stub = await host.getScope(alice, t1, s1);
+            await stub.invoke('perm/link', {
+                child: { entityType: 'item', entityId: 'i1' },
+                parent: { entityType: 'box', entityId: 'b1' },
+            });
+            await stub.invoke('perm/link', {
+                child: { entityType: 'item', entityId: 'i2' },
+                parent: { entityType: 'box', entityId: 'b2' },
+            });
+            host.admin.grant({
+                principalId: carol,
+                permission: PERM_READ,
+                node: { tenantId: t1, scopeId: s1 },
+                entity: { entityType: 'box', entityId: 'b1' },
+                grantedBy: alice,
+            });
+            host.admin.grant({
+                principalId: dave,
+                permission: PERM_READ,
+                node: { tenantId: t1, scopeId: s1 },
+                expiresAt: (await import('@substrat-run/contracts')).instant.parse('2000-01-01T00:00:00Z'),
+                grantedBy: alice,
+            });
+            host.admin.grantToOrg('acme', PERM_READ, { tenantId: t1, scopeId: s1 });
+            host.admin.addMember(t1, erin, 'acme');
+        });
+        afterAll(async () => {
+            await fixture.cleanup();
+        });
+        it('denies by default with the checked permission and node', async () => {
+            const d = await probe(principalId.parse(ulid()), s1, PERM_READ);
+            expect(d.allowed).toBe(false);
+        });
+        it('tenant-level roles inherit downward into scopes (rule 2), with proof', async () => {
+            const d = await probe(alice, s1, PERM_USE);
+            expect(d.allowed).toBe(true);
+            expect(d.proof.length).toBeGreaterThanOrEqual(2);
+        });
+        it('scope roles are confined to their scope — no sideways leakage', async () => {
+            await expect(probe(bob, s1, PERM_READ)).resolves.toMatchObject({ allowed: true });
+            await expect(probe(bob, s2, PERM_READ)).resolves.toMatchObject({ allowed: false });
+        });
+        it('entity-narrowed grants resolve through declared parent edges (rule 3)', async () => {
+            const own = await probe(carol, s1, PERM_READ, { entityType: 'item', entityId: 'i1' });
+            expect(own.allowed).toBe(true);
+            // proof contains the parent tuple AND the grant — the walk shown
+            expect(JSON.stringify(own.proof)).toContain('"item:i1"');
+            expect(JSON.stringify(own.proof)).toContain('"box:b1"');
+            const other = await probe(carol, s1, PERM_READ, { entityType: 'item', entityId: 'i2' });
+            expect(other.allowed).toBe(false);
+            // No node-level access: the narrow grant does not widen.
+            await expect(probe(carol, s1, PERM_READ)).resolves.toMatchObject({ allowed: false });
+        });
+        it('expired grants are dead', async () => {
+            await expect(probe(dave, s1, PERM_READ)).resolves.toMatchObject({ allowed: false });
+        });
+        it('org membership reaches org grants (rule 4), membership tuple in the proof', async () => {
+            const d = await probe(erin, s1, PERM_READ);
+            expect(d.allowed).toBe(true);
+            expect(JSON.stringify(d.proof)).toContain('org:acme');
+        });
+    });
+}
+//# sourceMappingURL=permission-suite.js.map

package/dist/permission-suite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-suite.js","sourceRoot":"","sources":["../src/permission-suite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EACL,cAAc,EACd,aAAa,EACb,WAAW,EACX,OAAO,EACP,QAAQ,GAIT,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,IAAI,EAAyC,MAAM,sBAAsB,CAAC;AAGnF,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC;IAC3C,EAAE,EAAE,WAAW;IACf,OAAO,EAAE,OAAO;IAChB,cAAc,EAAE,QAAQ;IACxB,WAAW,EAAE;QACX,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE;QACjD,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE;KACpD;IACD,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;IACnC,UAAU,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE;IACnE,iBAAiB,EAAE,EAAE;IACrB,eAAe,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC5D,cAAc,EAAE,MAAM;CACvB,CAAC,CAAC;AAEH,MAAM,MAAM,GAAoE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;IAC7F,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC,CAAC;AAEF,MAAM,OAAO,GAAiF,CAC5F,GAAG,EACH,KAAK,EACL,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AAE/C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AACjD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,WAA4C;IAE5C,QAAQ,CAAC,wCAAwC,WAAW,EAAE,EAAE,GAAG,EAAE;QACnE,IAAI,OAAyB,CAAC;QAC9B,IAAI,IAAe,CAAC;QACpB,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,4BAA4B;QAC9D,MAAM,KAAK,GAAgB,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,qBAAqB;QAC3E,MAAM,GAAG,GAAgB,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,wBAAwB;QAC5E,MAAM,KAAK,GAAgB,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,wBAAwB;QAC9E,MAAM,IAAI,GAAgB,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,gBAAgB;QACrE,MAAM,IAAI,GAAgB,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,qBAAqB;QAE1E,MAAM,KAAK,GAAG,KAAK,EACjB,GAAgB,EAChB,KAAgB,EAChB,UAAyB,EACzB,MAAkB,EAClB,EAAE;YACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,MAAM,CAA0C,YAAY,EAAE;gBACxE,UAAU;gBACV,MAAM;aACP,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YACpB,IAAI,CAAC,cAAc,CAAC;gBAClB,QAAQ,EAAE,eAAe;gBACzB,UAAU,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE;aAC3D,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAEzD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE;gBACxB,GAAG,EAAE,OAAO;gBACZ,WAAW,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;gBAClC,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACvG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAElG,0DAA0D;YAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;gBAC7B,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC7C,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC9C,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;gBAC7B,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC7C,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC9C,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBACf,WAAW,EAAE,KAAK;gBAClB,UAAU,EAAE,SAAS;gBACrB,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBACnC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC7C,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBACf,WAAW,EAAE,IAAI;gBACjB,UAAU,EAAE,SAAS;gBACrB,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBACnC,SAAS,EAAE,CAAC,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC;gBAC1F,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;YAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;YAChE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC3C,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,CAAC,CAAC,CAAC,KAAM,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACtF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,iEAAiE;YACjE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAExD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAElC,yDAAyD;YACzD,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;YACzF,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;YAC3C,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/scope-host-suite.d.ts

@@ -0,0 +1,13 @@
+import { type ScopeHost } from '@substrat-run/kernel';
+export interface ScopeHostFixture {
+    host: ScopeHost;
+    cleanup(): Promise<void>;
+}
+/**
+ * The scope-host contract suite (design doc §11). Every adapter — pure SQLite,
+ * Cloudflare, and any future one — must pass this unchanged (D-14). If an
+ * adapter needs the suite modified, the contract changed and that is a
+ * decision, not a patch.
+ */
+export declare function scopeHostContractSuite(adapterName: string, makeFixture: () => Promise<ScopeHostFixture>): void;
+//# sourceMappingURL=scope-host-suite.d.ts.map

package/dist/scope-host-suite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-host-suite.d.ts","sourceRoot":"","sources":["../src/scope-host-suite.ts"],"names":[],"mappings":"AAWA,OAAO,EAA+B,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAiEnF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAYD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAC3C,IAAI,CAwVN"}

package/dist/scope-host-suite.js

@@ -0,0 +1,338 @@
+import { describe, it, expect, beforeAll, afterAll } from 'vitest';
+import { dataSubjectId, moduleManifest, principalId, scopeId, tenantId, } from '@substrat-run/contracts';
+import { ulid } from '@substrat-run/kernel';
+const testModManifest = moduleManifest.parse({
+    id: '@test/mod',
+    version: '1.0.0',
+    kernelContract: '^0.0.1',
+    permissions: [{ key: 'testmod:use', description: 'test permission' }],
+    events: { emits: [], consumes: [] },
+    migrations: { journalDir: './migrations', compatibleFrom: '1.0.0' },
+    attachmentTargets: [],
+    entityRelations: [{ entityType: 'item', parentType: 'box' }],
+    entitlementKey: 'testmod',
+});
+const flowModManifest = moduleManifest.parse({
+    id: '@test/flow',
+    version: '1.0.0',
+    kernelContract: '^0.0.1',
+    permissions: [{ key: 'flow:use', description: 'flow permission' }],
+    events: {
+        emits: [
+            { type: 'flow.step1', schemaVersion: 1 },
+            { type: 'flow.step2', schemaVersion: 1 },
+        ],
+        consumes: [
+            { type: 'flow.step1', schemaVersion: 1 },
+            { type: 'flow.step2', schemaVersion: 1 },
+        ],
+    },
+    migrations: { journalDir: './migrations', compatibleFrom: '1.0.0' },
+    attachmentTargets: [],
+    entitlementKey: 'flow',
+});
+const lateModManifest = moduleManifest.parse({
+    id: '@test/late',
+    version: '1.0.0',
+    kernelContract: '^0.0.1',
+    permissions: [{ key: 'late:use', description: 'late module permission' }],
+    events: { emits: [], consumes: [] },
+    migrations: { journalDir: './migrations', compatibleFrom: '1.0.0' },
+    attachmentTargets: [],
+    entitlementKey: 'late',
+});
+const addItem = (ctx, input) => {
+    ctx.sql.exec('INSERT INTO testmod_items (id, box) VALUES (?, ?)', [input.id, input.box]);
+    ctx.link({ entityType: 'item', entityId: input.id }, { entityType: 'box', entityId: input.box });
+};
+const relinkItem = (ctx, input) => {
+    ctx.link({ entityType: 'item', entityId: input.id }, { entityType: 'box', entityId: input.box });
+};
+const linkUndeclared = (ctx) => {
+    ctx.link({ entityType: 'box', entityId: 'b1' }, { entityType: 'item', entityId: 'i1' });
+};
+const readJournal = (ctx) => ctx.sql.query('SELECT module_id, version FROM _substrat_migrations ORDER BY module_id');
+const readTuples = (ctx) => ctx.sql.query('SELECT subject, relation, object FROM _substrat_tuples ORDER BY subject');
+/**
+ * The scope-host contract suite (design doc §11). Every adapter — pure SQLite,
+ * Cloudflare, and any future one — must pass this unchanged (D-14). If an
+ * adapter needs the suite modified, the contract changed and that is a
+ * decision, not a patch.
+ */
+export function scopeHostContractSuite(adapterName, makeFixture) {
+    describe(`scope-host contract: ${adapterName}`, () => {
+        let fixture;
+        let host;
+        const t1 = tenantId.parse(ulid());
+        const t2 = tenantId.parse(ulid());
+        const s1 = scopeId.parse(ulid());
+        const s2 = scopeId.parse(ulid());
+        const alice = principalId.parse(ulid());
+        beforeAll(async () => {
+            fixture = await makeFixture();
+            host = fixture.host;
+            host.defineOperation('test/init-counter', (ctx) => {
+                ctx.sql.exec('CREATE TABLE IF NOT EXISTS counter (n INTEGER NOT NULL)');
+                ctx.sql.exec('DELETE FROM counter');
+                ctx.sql.exec('INSERT INTO counter (n) VALUES (0)');
+            });
+            // Read → await → write. Under interleaving this loses updates; under
+            // strict serialization it cannot.
+            host.defineOperation('test/slow-increment', async (ctx) => {
+                const [row] = ctx.sql.query('SELECT n FROM counter');
+                await new Promise((r) => setTimeout(r, 5));
+                ctx.sql.exec('UPDATE counter SET n = ?', [row.n + 1]);
+            });
+            host.defineOperation('test/read-counter', (ctx) => {
+                const [row] = ctx.sql.query('SELECT n FROM counter');
+                return row.n;
+            });
+            const stash = {};
+            host.defineOperation('test/stash', (_ctx, input) => {
+                stash.value = input;
+            });
+            host.defineOperation('test/read-stash', () => {
+                return stash.value;
+            });
+            host.defineOperation('test/emit-event', (ctx, input) => {
+                ctx.emit({
+                    type: 'test.happened',
+                    schemaVersion: 1,
+                    entity: { entityType: 'test-thing', entityId: 'x1' },
+                    piiClass: input?.subject ? 'pseudonymous' : 'none',
+                    ...(input?.subject ? { subjectId: dataSubjectId.parse(input.subject) } : {}),
+                    payload: { hello: 'world' },
+                });
+            });
+            host.defineOperation('test/emit-unclassified-pii', (ctx) => {
+                // piiClass 'direct' without subjectId — must be rejected at emit (§6.1)
+                ctx.emit({
+                    type: 'test.bad',
+                    schemaVersion: 1,
+                    entity: { entityType: 'test-thing', entityId: 'x2' },
+                    piiClass: 'direct',
+                    payload: {},
+                });
+            });
+            host.defineOperation('test/read-outbox', (ctx) => ctx.sql.query('SELECT * FROM _substrat_outbox ORDER BY id'));
+            host.defineOperation('test/write-marker', (ctx, input) => {
+                ctx.sql.exec('CREATE TABLE IF NOT EXISTS marker (v TEXT NOT NULL)');
+                ctx.sql.exec('INSERT INTO marker (v) VALUES (?)', [input.v]);
+            });
+            host.defineOperation('test/read-markers', (ctx) => {
+                ctx.sql.exec('CREATE TABLE IF NOT EXISTS marker (v TEXT NOT NULL)');
+                return ctx.sql.query('SELECT v FROM marker').map((r) => r.v);
+            });
+            host.defineOperation('test/atomic-init', (ctx) => {
+                ctx.sql.exec('CREATE TABLE IF NOT EXISTS atomic_t (n INTEGER NOT NULL)');
+            });
+            host.defineOperation('test/atomic-fail', (ctx) => {
+                ctx.sql.exec('INSERT INTO atomic_t (n) VALUES (1)');
+                ctx.emit({
+                    type: 'test.atomic',
+                    schemaVersion: 1,
+                    entity: { entityType: 'test-thing', entityId: 'x9' },
+                    piiClass: 'none',
+                    payload: {},
+                });
+                throw new Error('boom');
+            });
+            host.defineOperation('test/atomic-read', (ctx) => ({
+                rows: ctx.sql.query('SELECT n FROM atomic_t').length,
+                events: ctx.sql.query('SELECT id FROM _substrat_outbox WHERE type = ?', ['test.atomic'])
+                    .length,
+            }));
+            host.registerModule({
+                manifest: testModManifest,
+                migrations: [
+                    {
+                        version: '0001-init',
+                        sql: 'CREATE TABLE testmod_items (id TEXT PRIMARY KEY, box TEXT NOT NULL)',
+                    },
+                ],
+                operations: {
+                    'testmod/add': addItem,
+                    'testmod/relink': relinkItem,
+                    'testmod/link-undeclared': linkUndeclared,
+                    'testmod/read-journal': readJournal,
+                    'testmod/read-tuples': readTuples,
+                },
+            });
+            host.registerModule({
+                manifest: flowModManifest,
+                migrations: [
+                    {
+                        version: '0001-init',
+                        sql: 'CREATE TABLE flow_log (event_id TEXT PRIMARY KEY, type TEXT NOT NULL)',
+                    },
+                ],
+                operations: {
+                    'flow/produce': ((ctx) => {
+                        ctx.emit({
+                            type: 'flow.step1',
+                            schemaVersion: 1,
+                            entity: { entityType: 'flow-thing', entityId: 'f1' },
+                            piiClass: 'none',
+                            payload: {},
+                        });
+                    }),
+                    'flow/log': ((ctx) => ctx.sql.query('SELECT event_id, type FROM flow_log ORDER BY event_id')),
+                    'flow/deliveries': ((ctx) => ctx.sql.query(`SELECT event_id, consumer_module, error FROM _substrat_deliveries
+               WHERE consumer_module = '@test/flow' ORDER BY event_id`)),
+                    'flow/step2-actors': ((ctx) => ctx.sql.query(`SELECT actor FROM _substrat_outbox WHERE type = 'flow.step2'`)),
+                },
+                consumers: {
+                    'flow.step1': (ctx, event) => {
+                        ctx.sql.exec('INSERT INTO flow_log (event_id, type) VALUES (?, ?)', [
+                            event.id,
+                            event.type,
+                        ]);
+                        ctx.emit({
+                            type: 'flow.step2',
+                            schemaVersion: 1,
+                            entity: event.entity,
+                            piiClass: 'none',
+                            payload: {},
+                        });
+                    },
+                    'flow.step2': (ctx, event) => {
+                        ctx.sql.exec('INSERT INTO flow_log (event_id, type) VALUES (?, ?)', [
+                            event.id,
+                            event.type,
+                        ]);
+                    },
+                },
+            });
+            await host.provisionScope({ tenantId: t1, scopeId: s1, jurisdiction: 'eu' });
+            await host.provisionScope({ tenantId: t2, scopeId: s2, jurisdiction: 'eu' });
+        });
+        afterAll(async () => {
+            await fixture.cleanup();
+        });
+        it('provisioning is idempotent', async () => {
+            await expect(host.provisionScope({ tenantId: t1, scopeId: s1, jurisdiction: 'eu' })).resolves.toBeUndefined();
+        });
+        it('fails closed on a mismatched (tenantId, scopeId) pair (K-3)', async () => {
+            await expect(host.getScope(alice, t2, s1)).rejects.toThrow();
+            await expect(host.getScope(alice, t1, scopeId.parse(ulid()))).rejects.toThrow();
+        });
+        it('serializes operations strictly per scope (K-6)', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            await stub.invoke('test/init-counter');
+            await Promise.all(Array.from({ length: 10 }, () => stub.invoke('test/slow-increment')));
+            await expect(stub.invoke('test/read-counter')).resolves.toBe(10);
+        });
+        it('clones inputs and results across the stub boundary (K-6)', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            const input = { items: ['a'] };
+            await stub.invoke('test/stash', input);
+            input.items.push('MUTATED-AFTER-CALL');
+            const first = await stub.invoke('test/read-stash');
+            expect(first.items).toEqual(['a']);
+            first.items.push('MUTATED-RESULT');
+            const second = await stub.invoke('test/read-stash');
+            expect(second.items).toEqual(['a']);
+        });
+        it('stamps the event envelope kernel-side (§6.1)', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            await stub.invoke('test/emit-event');
+            const rows = await stub.invoke('test/read-outbox');
+            expect(rows.length).toBeGreaterThan(0);
+            const row = rows[rows.length - 1];
+            expect(row.tenant_id).toBe(t1);
+            expect(row.scope_id).toBe(s1);
+            expect(row.id).toMatch(/^[0-9A-HJKMNP-TV-Z]{26}$/);
+            expect(new Date(row.occurred_at).getTime()).not.toBeNaN();
+            expect(row.pii_class).toBe('none');
+        });
+        it('rejects PII-classed events without a subjectId (§6.1)', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            await expect(stub.invoke('test/emit-unclassified-pii')).rejects.toThrow(/subjectId/);
+        });
+        it('accepts PII-classed events with a subjectId', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            await expect(stub.invoke('test/emit-event', { subject: ulid() })).resolves.toBeUndefined();
+        });
+        it('isolates scope storage: a write in one scope is invisible in another', async () => {
+            const stub1 = await host.getScope(alice, t1, s1);
+            const stub2 = await host.getScope(alice, t2, s2);
+            await stub1.invoke('test/write-marker', { v: 'only-in-s1' });
+            await expect(stub2.invoke('test/read-markers')).resolves.toEqual([]);
+            await expect(stub1.invoke('test/read-markers')).resolves.toEqual(['only-in-s1']);
+        });
+        it('rejects unknown operations', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            await expect(stub.invoke('test/does-not-exist')).rejects.toThrow(/unknown operation/);
+        });
+        it('rolls back the entire operation when the handler throws (K-4)', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            await stub.invoke('test/atomic-init');
+            await expect(stub.invoke('test/atomic-fail')).rejects.toThrow('boom');
+            // Neither the write NOR its emitted event survive — one transaction.
+            await expect(stub.invoke('test/atomic-read')).resolves.toEqual({ rows: 0, events: 0 });
+        });
+        it('applies module migrations lazily and journals them per (module, version)', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            const journal = await stub.invoke('testmod/read-journal');
+            expect(journal).toContainEqual({ module_id: '@test/mod', version: '0001-init' });
+            // Idempotent: another wake applies nothing twice.
+            const again = await host.getScope(alice, t1, s1);
+            const journal2 = await again.invoke('testmod/read-journal');
+            expect(journal2.filter((r) => r.module_id === '@test/mod')).toHaveLength(1);
+        });
+        it('applies migrations of modules registered after a scope was first accessed', async () => {
+            host.registerModule({
+                manifest: lateModManifest,
+                migrations: [
+                    { version: '0001-init', sql: 'CREATE TABLE late_t (id TEXT PRIMARY KEY)' },
+                ],
+                operations: {
+                    'late/check': ((ctx) => ctx.sql.query(`SELECT name FROM sqlite_master WHERE name = 'late_t'`)
+                        .length),
+                },
+            });
+            const stub = await host.getScope(alice, t1, s1);
+            await expect(stub.invoke('late/check')).resolves.toBe(1);
+            const journal = await stub.invoke('testmod/read-journal');
+            expect(journal).toContainEqual({ module_id: '@test/late', version: '0001-init' });
+        });
+        it('rejects duplicate module registration', () => {
+            expect(() => host.registerModule({ manifest: testModManifest })).toThrow(/already registered/);
+        });
+        it('links declared entity relations, idempotently (K-16)', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            await stub.invoke('testmod/add', { id: 'i1', box: 'b1' });
+            await stub.invoke('testmod/relink', { id: 'i1', box: 'b1' }); // no duplicate
+            const tuples = await stub.invoke('testmod/read-tuples');
+            expect(tuples.filter((t) => t.subject === 'item:i1')).toEqual([
+                { subject: 'item:i1', relation: 'parent', object: 'box:b1' },
+            ]);
+        });
+        it('rejects links for undeclared entity relations', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            await expect(stub.invoke('testmod/link-undeclared')).rejects.toThrow(/undeclared entity relation/);
+        });
+        it('dispatches events to consumers, cascading, exactly once per (event, consumer)', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            await stub.invoke('flow/produce');
+            const log = await stub.invoke('flow/log');
+            expect(log.map((r) => r.type).sort()).toEqual(['flow.step1', 'flow.step2']);
+            const deliveries = await stub.invoke('flow/deliveries');
+            expect(deliveries).toHaveLength(2);
+            expect(deliveries.every((d) => d.error === null)).toBe(true);
+            await stub.invoke('flow/produce');
+            const log2 = await stub.invoke('flow/log');
+            expect(log2).toHaveLength(4); // two new, none duplicated
+            await expect(stub.invoke('flow/deliveries')).resolves.toHaveLength(4);
+        });
+        it('runs consumers under a system actor — consumer-emitted events carry it', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            const actors = await stub.invoke('flow/step2-actors');
+            expect(actors.length).toBeGreaterThan(0);
+            for (const row of actors) {
+                expect(JSON.parse(row.actor)).toEqual({ system: '@test/flow' });
+            }
+        });
+    });
+}
+//# sourceMappingURL=scope-host-suite.js.map

package/dist/scope-host-suite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-host-suite.js","sourceRoot":"","sources":["../src/scope-host-suite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EACL,aAAa,EACb,cAAc,EACd,WAAW,EACX,OAAO,EACP,QAAQ,GAIT,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,IAAI,EAAyC,MAAM,sBAAsB,CAAC;AAEnF,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC;IAC3C,EAAE,EAAE,WAAW;IACf,OAAO,EAAE,OAAO;IAChB,cAAc,EAAE,QAAQ;IACxB,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACrE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;IACnC,UAAU,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE;IACnE,iBAAiB,EAAE,EAAE;IACrB,eAAe,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC5D,cAAc,EAAE,SAAS;CAC1B,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC;IAC3C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,OAAO;IAChB,cAAc,EAAE,QAAQ;IACxB,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAClE,MAAM,EAAE;QACN,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,EAAE;YACxC,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,EAAE;SACzC;QACD,QAAQ,EAAE;YACR,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,EAAE;YACxC,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,EAAE;SACzC;KACF;IACD,UAAU,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE;IACnE,iBAAiB,EAAE,EAAE;IACrB,cAAc,EAAE,MAAM;CACvB,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC;IAC3C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,OAAO;IAChB,cAAc,EAAE,QAAQ;IACxB,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACzE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;IACnC,UAAU,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE;IACnE,iBAAiB,EAAE,EAAE;IACrB,cAAc,EAAE,MAAM;CACvB,CAAC,CAAC;AAEH,MAAM,OAAO,GAAwD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;IAClF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,mDAAmD,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzF,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;AACnG,CAAC,CAAC;AAEF,MAAM,UAAU,GAAwD,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;IACrF,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;AACnG,CAAC,CAAC;AAEF,MAAM,cAAc,GAAsC,CAAC,GAAG,EAAE,EAAE;IAChE,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1F,CAAC,CAAC;AAEF,MAAM,WAAW,GAA0E,CACzF,GAAG,EACH,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;AAE7F,MAAM,UAAU,GACd,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;AAiBpG;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,WAA4C;IAE5C,QAAQ,CAAC,wBAAwB,WAAW,EAAE,EAAE,GAAG,EAAE;QACnD,IAAI,OAAyB,CAAC;QAC9B,IAAI,IAAe,CAAC;QACpB,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,KAAK,GAAgB,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAErD,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAEpB,IAAI,CAAC,eAAe,CAAkB,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;gBACjE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;gBACxE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;gBACpC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;YAEH,qEAAqE;YACrE,kCAAkC;YAClC,IAAI,CAAC,eAAe,CAAkB,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACzE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAgB,uBAAuB,CAAC,CAAC;gBACpE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC,GAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,eAAe,CAAoB,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;gBACnE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAgB,uBAAuB,CAAC,CAAC;gBACpE,OAAO,GAAI,CAAC,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,MAAM,KAAK,GAAoC,EAAE,CAAC;YAClD,IAAI,CAAC,eAAe,CAA4B,YAAY,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC5E,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YACtB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,eAAe,CAAiC,iBAAiB,EAAE,GAAG,EAAE;gBAC3E,OAAO,KAAK,CAAC,KAAM,CAAC;YACtB,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,eAAe,CAA6B,iBAAiB,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBACjF,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,eAAe;oBACrB,aAAa,EAAE,CAAC;oBAChB,MAAM,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACpD,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM;oBAClD,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5E,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;iBAC5B,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,eAAe,CAAkB,4BAA4B,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC1E,wEAAwE;gBACxE,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,UAAU;oBAChB,aAAa,EAAE,CAAC;oBAChB,MAAM,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACpD,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,EAAE;iBACZ,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,eAAe,CAAyB,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CACvE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAY,4CAA4C,CAAC,CACvE,CAAC;YAEF,IAAI,CAAC,eAAe,CAAsB,mBAAmB,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBAC5E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;gBACpE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,eAAe,CAAsB,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;gBACrE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;gBACpE,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAgB,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,eAAe,CAAkB,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE;gBAChE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YAC3E,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,eAAe,CAAkB,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE;gBAChE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;gBACpD,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,aAAa;oBACnB,aAAa,EAAE,CAAC;oBAChB,MAAM,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACpD,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,EAAE;iBACZ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,eAAe,CAClB,kBAAkB,EAClB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACR,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAgB,wBAAwB,CAAC,CAAC,MAAM;gBACnE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,gDAAgD,EAAE,CAAC,aAAa,CAAC,CAAC;qBACrF,MAAM;aACV,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,cAAc,CAAC;gBAClB,QAAQ,EAAE,eAAe;gBACzB,UAAU,EAAE;oBACV;wBACE,OAAO,EAAE,WAAW;wBACpB,GAAG,EAAE,qEAAqE;qBAC3E;iBACF;gBACD,UAAU,EAAE;oBACV,aAAa,EAAE,OAAO;oBACtB,gBAAgB,EAAE,UAAU;oBAC5B,yBAAyB,EAAE,cAAc;oBACzC,sBAAsB,EAAE,WAAW;oBACnC,qBAAqB,EAAE,UAAU;iBAClC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,cAAc,CAAC;gBAClB,QAAQ,EAAE,eAAe;gBACzB,UAAU,EAAE;oBACV;wBACE,OAAO,EAAE,WAAW;wBACpB,GAAG,EAAE,uEAAuE;qBAC7E;iBACF;gBACD,UAAU,EAAE;oBACV,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE;wBACvB,GAAG,CAAC,IAAI,CAAC;4BACP,IAAI,EAAE,YAAY;4BAClB,aAAa,EAAE,CAAC;4BAChB,MAAM,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;4BACpD,QAAQ,EAAE,MAAM;4BAChB,OAAO,EAAE,EAAE;yBACZ,CAAC,CAAC;oBACL,CAAC,CAAqC;oBACtC,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CACnB,GAAG,CAAC,GAAG,CAAC,KAAK,CACX,uDAAuD,CACxD,CAAqC;oBACxC,iBAAiB,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1B,GAAG,CAAC,GAAG,CAAC,KAAK,CACX;sEACwD,CACzD,CAAqC;oBACxC,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5B,GAAG,CAAC,GAAG,CAAC,KAAK,CACX,8DAA8D,CAC/D,CAAqC;iBACzC;gBACD,SAAS,EAAE;oBACT,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;wBAC3B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,qDAAqD,EAAE;4BAClE,KAAK,CAAC,EAAE;4BACR,KAAK,CAAC,IAAI;yBACX,CAAC,CAAC;wBACH,GAAG,CAAC,IAAI,CAAC;4BACP,IAAI,EAAE,YAAY;4BAClB,aAAa,EAAE,CAAC;4BAChB,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,QAAQ,EAAE,MAAM;4BAChB,OAAO,EAAE,EAAE;yBACZ,CAAC,CAAC;oBACL,CAAC;oBACD,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;wBAC3B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,qDAAqD,EAAE;4BAClE,KAAK,CAAC,EAAE;4BACR,KAAK,CAAC,IAAI;yBACX,CAAC,CAAC;oBACL,CAAC;iBACF;aACF,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;YAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,MAAM,CACV,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CACvE,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC7D,MAAM,MAAM,CACV,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAChD,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACvC,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CACrE,CAAC;YACF,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACvC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAsB,iBAAiB,CAAC,CAAC;YACxE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACnC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAsB,iBAAiB,CAAC,CAAC;YACzE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAc,kBAAkB,CAAC,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;YACnD,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,MAAM,CACV,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CACpD,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACjD,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;YAC7D,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACrE,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACtE,qEAAqE;YACrE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;YACxF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAC/B,sBAAsB,CACvB,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YACjF,kDAAkD;YAClD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CACjC,sBAAsB,CACvB,CAAC;YACF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;YACzF,IAAI,CAAC,cAAc,CAAC;gBAClB,QAAQ,EAAE,eAAe;gBACzB,UAAU,EAAE;oBACV,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,2CAA2C,EAAE;iBAC3E;gBACD,UAAU,EAAE;oBACV,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CACrB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,sDAAsD,CAAC;yBAClE,MAAM,CAAqC;iBACjD;aACF,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAC/B,sBAAsB,CACvB,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,OAAO,CACtE,oBAAoB,CACrB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe;YAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAC9B,qBAAqB,CACtB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC5D,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;aAC7D,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAClE,4BAA4B,CAC7B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;YAC7F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAuC,UAAU,CAAC,CAAC;YAChF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;YAC5E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAClC,iBAAiB,CAClB,CAAC;YACF,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE7D,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAuC,UAAU,CAAC,CAAC;YACjF,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,2BAA2B;YACzD,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;YACtF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAsB,mBAAmB,CAAC,CAAC;YAC3E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}