@synoikia/core 0.16.0 → 0.17.0

package/dist/testing/compliance/steps.js

@@ -0,0 +1,465 @@
+import { existsSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { checkManifest, parsePluginSettings } from '@synoikia/plugin-sdk';
+import * as quickpickle from 'quickpickle';
+import { afterAll, inject } from 'vitest';
+import { parse } from 'yaml';
+import { startPluginHarness } from '../index.js';
+import { startsAndAnswers } from '../repository.js';
+import { loadProfile } from './profile.js';
+import { currentRun, startRun } from './run.js';
+import { FAILED_RULE } from './verdict.js';
+let subject;
+async function boot() {
+    const pluginDir = inject('synoikiaPluginDir');
+    const { profile, fake } = await loadProfile(pluginDir);
+    try {
+        const harness = await startPluginHarness({ pluginDir, connection: profile.connection }).catch(async (err) => {
+            throw new Error(`${FAILED_RULE}the plugin does not start: ${await startError(pluginDir, err)}`);
+        });
+        await harness.ctx.instances.update(harness.instanceId, {
+            settings: { executePerMinute: 10_000, writesPerMinute: 10_000 },
+        });
+        return { pluginDir, profile, fake, harness };
+    }
+    catch (err) {
+        await fake?.close();
+        throw err;
+    }
+}
+/** Why the plugin did not start: what the bundle printed when it exited, as the release check shows it, on one line. */
+async function startError(pluginDir, err) {
+    const manifest = JSON.parse(readFileSync(path.join(pluginDir, 'manifest.json'), 'utf8'));
+    try {
+        await startsAndAnswers(pluginDir, manifest.entry, 'the plugin');
+    }
+    catch (startErr) {
+        return startErr.message
+            .replace(/^the plugin does not start: /, '')
+            .split('\n')
+            .join(' / ');
+    }
+    return err instanceof Error ? err.message : String(err);
+}
+const subjectOf = () => (subject ??= boot());
+// The feature files share one process (config.ts), and this file loads once for each of them. The first load
+// registers the steps and owns the plugin; the last feature file to end stops it.
+const firstLoad = !currentRun();
+const run = startRun({
+    ended: 0,
+    subject: subjectOf,
+    async stop() {
+        const s = await subject?.catch(() => undefined);
+        await s?.harness.stop();
+        await s?.fake?.close();
+    },
+});
+const once = (define) => (firstLoad ? define : (() => undefined));
+const Given = once(quickpickle.Given);
+const When = once(quickpickle.When);
+const Then = once(quickpickle.Then);
+const Before = once(quickpickle.Before);
+afterAll(async () => {
+    if (++run.ended === inject('synoikiaFeatureFiles'))
+        await run.stop();
+});
+// Feature files share the plugin, so each scenario starts with every group off and no operation level of its own.
+Before(async () => {
+    const s = await subject?.catch(() => undefined);
+    if (!s)
+        return;
+    for (const op of s.harness.operations())
+        if (op.levelOverride !== null)
+            s.harness.setOperationLevel(op.key, null);
+    for (const group of new Set(s.harness.operations().map((o) => o.pluginGroup)))
+        s.harness.setGroupLevel(group, 'none');
+    await s.fake?.reset?.();
+});
+/** Fails the step with one line for each broken rule, as the verdict lists them. */
+function report(issues) {
+    if (issues.length)
+        throw new Error(issues.map((i) => `${FAILED_RULE}${i}`).join('\n'));
+}
+const shared = new WeakMap();
+const seen = (world) => {
+    let s = shared.get(world);
+    if (!s)
+        shared.set(world, (s = {}));
+    return s;
+};
+const syncIssues = (harness) => {
+    const status = harness.instance()?.lastSyncStatus;
+    return status === 'ok' ? [] : [`the catalog did not sync (${String(status)})`];
+};
+Given('core synced the catalog of the plugin', async () => {
+    report(syncIssues((await subjectOf()).harness));
+});
+When('core reads the manifest of the plugin', (world) => {
+    const manifest = JSON.parse(readFileSync(path.join(inject('synoikiaPluginDir'), 'manifest.json'), 'utf8'));
+    seen(world).manifestIssues = checkManifest(manifest);
+});
+Then('each secret field is write-only, uses the secret widget and is a sensitive key', (world) => {
+    report((seen(world).manifestIssues ?? []).filter((i) => i.startsWith('connection.') || i.startsWith('manifest:')));
+});
+Then('the manifest names at least one network host', (world) => {
+    report((seen(world).manifestIssues ?? []).filter((i) => i.startsWith('network.')));
+});
+Then('the profile has a case for each locked operation', async () => {
+    const { harness, profile } = await subjectOf();
+    const locked = harness.operations().filter((o) => o.locked && !o.stale);
+    report(locked.filter((o) => !profile.locks[o.key]).map((o) => `${o.key} is locked and the profile has no case for it`));
+});
+When('the agent reads the guide of each operation that requires one', async (world) => {
+    const { harness } = await subjectOf();
+    const issues = [];
+    for (const op of harness.operations().filter((o) => o.attestationRequired && !o.stale)) {
+        const read = await harness.search(`return await guides.get(${JSON.stringify(op.key)});`);
+        const content = read.ok ? read.value?.content : undefined;
+        if (typeof content !== 'string' || !content.trim())
+            issues.push(`the guide of ${op.key} is not provided`);
+    }
+    seen(world).guideIssues = issues;
+});
+Then('each guide has content', (world) => {
+    report(seen(world).guideIssues ?? []);
+});
+When('core starts the plugin', async () => {
+    await subjectOf();
+});
+Then('the catalog of the plugin has operations', async () => {
+    const { harness } = await subjectOf();
+    report(syncIssues(harness));
+    report(harness.operations().some((o) => !o.stale) ? [] : ['the catalog is empty']);
+});
+Then('each operation has a description', async () => {
+    const { harness } = await subjectOf();
+    const described = (docs) => ['summary', 'description'].some((k) => {
+        const text = docs?.[k];
+        return typeof text === 'string' && text.trim() !== '';
+    });
+    report(harness
+        .operations()
+        .filter((o) => !o.stale && !described(o.docs))
+        .map((o) => `${o.key} has no description`));
+});
+When('core reads the locks of plugin.yaml', async (world) => {
+    const { harness, pluginDir } = await subjectOf();
+    const file = path.join(pluginDir, 'plugin.yaml');
+    const settings = existsSync(file) ? parsePluginSettings(parse(readFileSync(file, 'utf8'))) : undefined;
+    const keys = new Set(harness
+        .operations()
+        .filter((o) => !o.stale)
+        .map((o) => o.key));
+    const named = (settings?.rules ?? [])
+        .filter((r) => r.locked)
+        .flatMap((r) => (Array.isArray(r.match) ? r.match : [r.match]))
+        .filter((m) => !m.includes('*'));
+    seen(world).lockIssues = named.filter((key) => !keys.has(key)).map((key) => `the lock ${key} names no operation`);
+});
+Then('each lock names an operation of the catalog', (world) => {
+    report(seen(world).lockIssues ?? []);
+});
+/** Sandbox code that makes one profile call through the plugin's binding. */
+const codeOf = (h, call) => `return await ${h.manifest.binding.namespace}.${call.fn}(...${JSON.stringify(call.args)});`;
+const label = (call) => `${call.fn}(${JSON.stringify(call.args).slice(1, -1)})`;
+/** Sets the group of each call's operation; a call whose key is not in the catalog is an issue. */
+function setGroups(h, calls, level) {
+    const issues = [];
+    for (const call of calls) {
+        if (!call.key)
+            issues.push(`${label(call)} names no operation key in the profile`);
+        else if (!h.operations().some((o) => o.key === call.key))
+            issues.push(`the catalog has no ${call.key}`);
+        else
+            h.setGroupLevel(h.operation(call.key).pluginGroup, level);
+    }
+    report(issues);
+}
+async function makeCalls(world, calls) {
+    const { harness } = await subjectOf();
+    const results = [];
+    for (const call of calls)
+        results.push({ call, result: await harness.execute(codeOf(harness, call)) });
+    seen(world).results = results;
+}
+const errorOf = (r) => (r.ok ? undefined : r.error);
+Given('the groups of the sample reads are at level read', async () => {
+    const { harness, profile } = await subjectOf();
+    if (profile.reads.length === 0)
+        report(['the profile names no sample read']);
+    setGroups(harness, profile.reads, 'read');
+});
+Given('the groups of the sample writes are at level read', async () => {
+    const { harness, profile } = await subjectOf();
+    if (profile.writes.length === 0)
+        report(['the profile names no sample write']);
+    setGroups(harness, profile.writes, 'read');
+});
+When('the agent makes each sample read', async (world) => {
+    await makeCalls(world, (await subjectOf()).profile.reads);
+});
+When('the agent makes each sample write', async (world) => {
+    await makeCalls(world, (await subjectOf()).profile.writes);
+});
+When('the agent makes each call that the profile names as unknown', async (world) => {
+    const { profile } = await subjectOf();
+    if (profile.rejects.length === 0)
+        report(['the profile names no unknown call']);
+    await makeCalls(world, profile.rejects);
+});
+Then('each sample read returns a result', async (world) => {
+    const { harness } = await subjectOf();
+    report((seen(world).results ?? []).flatMap(({ call, result }) => {
+        if (!result.ok)
+            return [`${call.key} failed at level read (${JSON.stringify(errorOf(result))})`];
+        return harness.audit({ operationKey: call.key }).length ? [] : [`${call.key} ran but is not in the audit log`];
+    }));
+});
+Then('core refuses each sample write, because the operation is off', (world) => {
+    report((seen(world).results ?? []).flatMap(({ call, result }) => result.ok
+        ? [`${call.key} ran at level read`]
+        : errorOf(result)?.code === 'OPERATION_DISABLED'
+            ? []
+            : [`${call.key} failed at level read with ${JSON.stringify(errorOf(result))}, not because it is off`]));
+});
+Then('core refuses each of those calls', (world) => {
+    report((seen(world).results ?? []).flatMap(({ call, result }) => result.ok || errorOf(result)?.code !== 'UNKNOWN_OPERATION'
+        ? [`the plugin accepted a call that is not in its catalog: ${label(call)}`]
+        : []));
+});
+const lockCases = (profile) => Object.entries(profile.locks).map(([key, c]) => ({ ...c, key }));
+Given('the groups of the locked operations are at level write', async () => {
+    const { harness, profile } = await subjectOf();
+    setGroups(harness, lockCases(profile), 'write');
+    for (const c of lockCases(profile))
+        harness.setOperationLevel(c.key, null);
+});
+When('the agent makes the call of each lock case', async (world) => {
+    await makeCalls(world, lockCases((await subjectOf()).profile));
+});
+Then('core refuses each call, because the operation is off', async (world) => {
+    const { harness } = await subjectOf();
+    report((seen(world).results ?? []).flatMap(({ call, result }) => !harness.operation(call.key).locked || result.ok || errorOf(result)?.code !== 'OPERATION_DISABLED'
+        ? [`${call.key} is not off by default`]
+        : []));
+});
+Given('each locked operation is at level ask', async () => {
+    const { harness, profile } = await subjectOf();
+    const cases = lockCases(profile);
+    setGroups(harness, cases, 'ask');
+    for (const c of cases)
+        harness.setOperationLevel(c.key, 'ask');
+});
+let lockRun;
+/** Runs each lock case once for each feature file, as a human decides it: a wrong literal first, then the right one. */
+async function approveLocks(world) {
+    seen(world).approvals = await (lockRun ??= runLocks());
+}
+async function runLocks() {
+    const { harness, profile } = await subjectOf();
+    setGroups(harness, lockCases(profile), 'ask');
+    for (const c of lockCases(profile))
+        harness.setOperationLevel(c.key, 'ask');
+    const approvals = [];
+    for (const c of lockCases(profile)) {
+        // Each case starts from the fake's seed: an earlier case may have changed what this one acts on.
+        await (await subjectOf()).fake?.reset?.();
+        const seenBy = { wrongRefused: false };
+        const result = await harness.execute(codeOf(harness, c), {
+            onApproval: (a) => {
+                seenBy.literal = a.pending.confirmLiteral;
+                seenBy.message = a.message;
+                seenBy.pending = JSON.stringify(a.pending);
+                try {
+                    a.approve(`${c.confirm} (wrong)`);
+                }
+                catch {
+                    seenBy.wrongRefused = true;
+                    a.approve(c.confirm);
+                }
+            },
+        });
+        approvals.push({ key: c.key, confirm: c.confirm, target: c.target, wrongRefused: false, ...seenBy, result });
+    }
+    return approvals;
+}
+When('the agent makes the call of each lock case, and the human types a wrong literal and then the right one', approveLocks);
+When('the agent makes the call of each lock case, and the human reads the approval', approveLocks);
+Then('core refused the wrong literal and ran the call with the literal of its case', (world) => {
+    report((seen(world).approvals ?? []).flatMap((a) => {
+        if (a.literal !== a.confirm)
+            return [`${a.key} asks to type ${JSON.stringify(a.literal ?? null)} in place of ${JSON.stringify(a.confirm)}`];
+        if (!a.wrongRefused)
+            return [`${a.key} accepted a wrong confirmation literal`];
+        return a.result.ok ? [] : [`${a.key} failed after approval (${JSON.stringify(errorOf(a.result))})`];
+    }));
+});
+Then('the approval shows the target of each lock case', (world) => {
+    report((seen(world).approvals ?? []).flatMap((a) => {
+        if (a.message === undefined)
+            return [`${a.key} ran without an approval`];
+        if (!a.target)
+            return [`the lock case of ${a.key} names no target`];
+        return a.message.includes(a.target) ? [] : [`the approval of ${a.key} does not show ${JSON.stringify(a.target)}`];
+    }));
+});
+/** The secret values that must never be seen: those of the profile and the secret fields of the connection. */
+const secretFields = ({ harness }) => Object.entries((harness.manifest.connection.schema.properties ?? {}))
+    .filter(([, p]) => p?.writeOnly)
+    .map(([name]) => name);
+function secretValues(s) {
+    const { profile } = s;
+    const fromConnection = secretFields(s)
+        .map((name) => profile.connection[name])
+        .filter((v) => typeof v === 'string' && v !== '');
+    const values = [...profile.secrets.flatMap((s) => s.values), ...fromConnection];
+    report(values.filter((v) => typeof v !== 'string' || v === '').map(() => 'a secret value of the profile is empty'));
+    return [...new Set(values)];
+}
+const leaks = (text, values, where) => values
+    .filter((v) => text.includes(v))
+    .map((v) => `a secret value of the profile reached ${where}: "${v.slice(0, 4)}…"`);
+Given('the groups of the secret reads are at level read', async () => {
+    const { harness, profile } = await subjectOf();
+    if (profile.secrets.length === 0)
+        report(['the profile names no secret read']);
+    setGroups(harness, profile.secrets, 'read');
+});
+When('the agent makes each secret read', async (world) => {
+    await makeCalls(world, (await subjectOf()).profile.secrets);
+});
+Then('no secret value of the profile reaches the agent or the audit log', async (world) => {
+    const s = await subjectOf();
+    const values = secretValues(s);
+    const results = seen(world).results ?? [];
+    report([
+        ...results.flatMap(({ call, result }) => result.ok ? [] : [`${call.key} failed at level read (${JSON.stringify(errorOf(result))})`]),
+        ...leaks(JSON.stringify(results.map((r) => r.result)), values, 'the agent'),
+        ...leaks(JSON.stringify(s.harness.audit()), values, 'the audit log'),
+    ]);
+});
+Given('the groups of the sample writes are at level ask', async () => {
+    const { harness, profile } = await subjectOf();
+    if (profile.writes.length === 0)
+        report(['the profile names no sample write']);
+    setGroups(harness, profile.writes, 'ask');
+});
+When('the agent makes each sample write, and the human reads the approval', async (world) => {
+    const { harness, profile } = await subjectOf();
+    const shown = [];
+    for (const call of profile.writes) {
+        const seenBy = { key: call.key };
+        await harness.execute(codeOf(harness, call), {
+            onApproval: (a) => {
+                seenBy.shown = `${a.message}\n${JSON.stringify(a.pending)}`;
+                a.deny();
+            },
+        });
+        shown.push(seenBy);
+    }
+    seen(world).writeApprovals = shown;
+});
+Then('no secret value of the profile reaches the approval', async (world) => {
+    const values = secretValues(await subjectOf());
+    const locks = await (lockRun ??= runLocks());
+    report([
+        ...(seen(world).writeApprovals ?? []).flatMap((a) => a.shown === undefined
+            ? [`${a.key ?? 'a sample write'} asked for no approval`]
+            : leaks(a.shown, values, `the approval of ${a.key ?? 'a sample write'}`)),
+        ...locks.flatMap((a) => leaks(`${a.message ?? ''}\n${a.pending ?? ''}`, values, `the approval of ${a.key}`)),
+    ]);
+});
+When('an admin tests the connection with the wrong credentials of the profile', async (world) => {
+    const s = await subjectOf();
+    const { harness, profile } = s;
+    if (!profile.connectionTest) {
+        // A connection with no secret field has no credentials that the upstream could refuse.
+        if (secretFields(s).length === 0)
+            return void (seen(world).connectionTest = { ok: false });
+        report(['the profile names no wrong credentials for the connection test']);
+    }
+    seen(world).connectionTest = await harness
+        .testConnection({ ...profile.connection, ...profile.connectionTest.wrong })
+        .catch((err) => ({ ok: false, message: String(err) }));
+});
+Then('the connection test fails', (world) => {
+    const result = seen(world).connectionTest;
+    report(result?.ok === false ? [] : ['the connection test passed with the wrong credentials of the profile']);
+});
+// ── Steps for a plugin's own feature files, on the named calls of the profile ──
+const own = new WeakMap();
+const ownOf = (world) => {
+    let o = own.get(world);
+    if (!o)
+        own.set(world, (o = {}));
+    return o;
+};
+async function namedCall(name) {
+    const s = await subjectOf();
+    const call = s.profile.calls[name];
+    if (!call)
+        throw new Error(`test/compliance.yaml names no call "${name}" under calls`);
+    return { ...s, call };
+}
+const LEVELS = ['none', 'read', 'ask', 'write'];
+const levelOf = (level) => {
+    if (!LEVELS.includes(level))
+        throw new Error(`"${level}" is not one of ${LEVELS.join(', ')}`);
+    return level;
+};
+Given('the group of {string} is at level {word}', async (_world, name, level) => {
+    const { harness, call } = await namedCall(name);
+    if (!call.key)
+        throw new Error(`the call "${name}" names no operation key`);
+    harness.setGroupLevel(harness.operation(call.key).pluginGroup, levelOf(level));
+});
+Given('the operation of {string} is at level {word}', async (_world, name, level) => {
+    const { harness, call } = await namedCall(name);
+    if (!call.key)
+        throw new Error(`the call "${name}" names no operation key`);
+    harness.setOperationLevel(call.key, levelOf(level));
+});
+async function runNamed(world, name, decide) {
+    const { harness, call } = await namedCall(name);
+    const o = ownOf(world);
+    o.result = await harness.execute(codeOf(harness, call), {
+        onApproval: decide
+            ? (a) => {
+                o.message = a.message;
+                o.literal = a.pending.confirmLiteral;
+                decide(a);
+            }
+            : undefined,
+    });
+}
+When('the agent runs {string}', (world, name) => runNamed(world, name));
+When('the agent runs {string}, and the human approves it', (world, name) => runNamed(world, name, (a) => a.approve()));
+When('the agent runs {string}, and the human types {string}', (world, name, literal) => runNamed(world, name, (a) => a.approve(literal)));
+When('the agent runs {string}, and the human denies it', (world, name) => runNamed(world, name, (a) => a.deny()));
+Then('the agent gets a result that contains {string}', (world, text) => {
+    const { result } = ownOf(world);
+    if (!result?.ok)
+        throw new Error(`the call failed: ${JSON.stringify(result && errorOf(result))}`);
+    if (!JSON.stringify(result.value).includes(text))
+        throw new Error(`the result does not contain "${text}"`);
+});
+Then('core refuses the call with the code {string}', (world, code) => {
+    const { result } = ownOf(world);
+    if (result?.ok)
+        throw new Error('the call ran');
+    if (errorOf(result)?.code !== code)
+        throw new Error(`the call failed with ${JSON.stringify(errorOf(result))}`);
+});
+Then('the approval shows {string}', (world, text) => {
+    const { message } = ownOf(world);
+    if (message === undefined)
+        throw new Error('no approval was asked');
+    if (!message.includes(text))
+        throw new Error(`the approval "${message}" does not show "${text}"`);
+});
+Then('the approval asks to type {string}', (world, literal) => {
+    const { literal: asked } = ownOf(world);
+    if (asked !== literal)
+        throw new Error(`the approval asks to type ${JSON.stringify(asked ?? null)}`);
+});
+//# sourceMappingURL=steps.js.map

package/dist/testing/compliance/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../../src/testing/compliance/steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,KAAK,WAAW,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAI3C,IAAI,OAAqC,CAAC;AAE1C,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC9C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAC3F,KAAK,EAAE,GAAY,EAAE,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,8BAA8B,MAAM,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC,CACF,CAAC;QACF,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE;YACrD,QAAQ,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE;SAChE,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QACpB,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,wHAAwH;AACxH,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,GAAY;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAsB,CAAC;IAC9G,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,QAAQ,EAAE,CAAC;QAClB,OAAQ,QAAkB,CAAC,OAAO;aAC/B,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC;aAC3C,KAAK,CAAC,IAAI,CAAC;aACX,IAAI,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;AAE7C,6GAA6G;AAC7G,kFAAkF;AAClF,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,CAAC;AAChC,MAAM,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,SAAS;IAClB,KAAK,CAAC,IAAI;QACR,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;CACF,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,CAAI,MAAS,EAAK,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAO,CAAC,CAAC;AAClF,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AACtC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AACpC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AACpC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AAExC,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,sBAAsB,CAAC;QAAE,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;AACvE,CAAC,CAAC,CAAC;AAEH,kHAAkH;AAClH,MAAM,CAAC,KAAK,IAAI,EAAE;IAChB,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,CAAC;QAAE,OAAO;IACf,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE;QAAE,IAAI,EAAE,CAAC,aAAa,KAAK,IAAI;YAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClH,KAAK,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtH,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEH,oFAAoF;AACpF,SAAS,MAAM,CAAC,MAAgB;IAC9B,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,OAAO,EAWvB,CAAC;AAaJ,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE;IAC7B,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,OAAsB,EAAE,EAAE;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,cAAc,CAAC;IAClD,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,6BAA6B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACjF,CAAC,CAAC;AAEF,KAAK,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;IACxD,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,CAAC,KAAa,EAAE,EAAE;IAC9D,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACpH,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,CAAC,KAAa,EAAE,EAAE;IACvG,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACrH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,CAAC,KAAa,EAAE,EAAE;IACrE,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IAClE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,CACJ,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,+CAA+C,CAAC,CAChH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IAC5F,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,KAA2C,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QACjG,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,CAAC;AACnC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wBAAwB,EAAE,CAAC,KAAa,EAAE,EAAE;IAC/C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;IACxC,MAAM,SAAS,EAAE,CAAC;AACpB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;IAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IACtC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5B,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;IAClD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,IAAa,EAAE,EAAE,CAClC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACpC,MAAM,IAAI,GAAI,IAAmD,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IACL,MAAM,CACJ,OAAO;SACJ,UAAU,EAAE;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAC7C,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qCAAqC,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IAClE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,OAAO;SACJ,UAAU,EAAE;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CACrB,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;SACvB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;SAC9D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,GAAG,qBAAqB,CAAC,CAAC;AACpH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6CAA6C,EAAE,CAAC,KAAa,EAAE,EAAE;IACpE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,MAAM,GAAG,CAAC,CAAgB,EAAE,IAAqC,EAAE,EAAE,CACzE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAE9F,MAAM,KAAK,GAAG,CAAC,IAAqC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAEjH,mGAAmG;AACnG,SAAS,SAAS,CAAC,CAAgB,EAAE,KAAuB,EAAE,KAA+B;IAC3F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;aAC9E,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;;YACnG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,KAA2B;IACjE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IACtC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IACvG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;AAChC,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,KAAyD,CAAC,CAAC;AAExH,KAAK,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC;IAC7E,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,KAAK,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;IACpE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC/E,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kCAAkC,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IAC/D,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IAChE,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IAC1F,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IACtC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAChF,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IAChE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IACtC,MAAM,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACvD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,0BAA0B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;QACjG,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,kCAAkC,CAAC,CAAC;IACjH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,CAAC,KAAa,EAAE,EAAE;IACrF,MAAM,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CACvD,MAAM,CAAC,EAAE;QACP,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,oBAAoB,CAAC;QACnC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,oBAAoB;YAC9C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,8BAA8B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAC1G,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kCAAkC,EAAE,CAAC,KAAa,EAAE,EAAE;IACzD,MAAM,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CACvD,MAAM,CAAC,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,mBAAmB;QACxD,CAAC,CAAC,CAAC,0DAA0D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,CAAC,CAAC,EAAE,CACP,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,OAA0B,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AAEnH,KAAK,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/C,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4CAA4C,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IACzE,MAAM,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IACnF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IACtC,MAAM,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CACvD,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,oBAAoB;QACjG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,wBAAwB,CAAC;QACvC,CAAC,CAAC,EAAE,CACP,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,KAAK,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;IACxD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,OAA4C,CAAC;AAEjD,wHAAwH;AACxH,KAAK,UAAU,YAAY,CAAC,KAAa;IACvC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/C,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAmB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,iGAAiG;QACjG,MAAM,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,MAAM,GAA0B,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE;YACvD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;gBAC1C,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;gBAC3B,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,CAAC;oBACH,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;oBAC3B,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,IAAI,CACF,wGAAwG,EACxG,YAAY,CACb,CAAC;AAEF,IAAI,CAAC,8EAA8E,EAAE,YAAY,CAAC,CAAC;AAEnG,IAAI,CAAC,8EAA8E,EAAE,CAAC,KAAa,EAAE,EAAE;IACrG,MAAM,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1C,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;YACzB,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,iBAAiB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjH,IAAI,CAAC,CAAC,CAAC,YAAY;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,wCAAwC,CAAC,CAAC;QAC/E,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,2BAA2B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IACtG,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,CAAC,KAAa,EAAE,EAAE;IACxE,MAAM,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1C,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,0BAA0B,CAAC,CAAC;QACzE,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,GAAG,kBAAkB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,+GAA+G;AAC/G,MAAM,YAAY,GAAG,CAAC,EAAE,OAAO,EAAW,EAAE,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAA4C,CAAC;KAC7G,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC;KAC/B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AAE3B,SAAS,YAAY,CAAC,CAAU;IAC9B,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACtB,MAAM,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC;IAChF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,wCAAwC,CAAC,CAAC,CAAC;IACpH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,MAAgB,EAAE,KAAa,EAAE,EAAE,CAC9D,MAAM;KACH,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;KAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yCAAyC,KAAK,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAEvF,KAAK,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC;IAC/E,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kCAAkC,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IAC/D,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IAChG,MAAM,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1C,MAAM,CAAC;QACL,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CACtC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,0BAA0B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAC3F;QACD,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC;QAC3E,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC;KACrE,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,KAAK,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC/E,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IAClG,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAuC,EAAE,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,MAAM,GAAqC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACnE,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YAC3C,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5D,CAAC,CAAC,IAAI,EAAE,CAAC;YACX,CAAC;SACF,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,GAAG,KAAK,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qDAAqD,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IAClF,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC7C,MAAM,CAAC;QACL,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAClD,CAAC,CAAC,KAAK,KAAK,SAAS;YACnB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,gBAAgB,wBAAwB,CAAC;YACxD,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,GAAG,IAAI,gBAAgB,EAAE,CAAC,CAC3E;QACD,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;KAC7G,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;IACtG,MAAM,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC;IAC5B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,uFAAuF;QACvF,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,CAAC,gEAAgE,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,GAAG,MAAM,OAAO;SACvC,cAAc,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,cAAe,CAAC,KAAK,EAAE,CAAC;SAC3E,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2BAA2B,EAAE,CAAC,KAAa,EAAE,EAAE;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,cAA8C,CAAC;IAC1E,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,sEAAsE,CAAC,CAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AAEH,kFAAkF;AAElF,MAAM,GAAG,GAAG,IAAI,OAAO,EAAiF,CAAC;AACzG,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE;IAC9B,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,eAAe,CAAC,CAAC;IACvF,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAU,CAAC;AACzD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE;IAChC,IAAI,CAAE,MAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrH,OAAO,KAAgC,CAAC;AAC1C,CAAC,CAAC;AAEF,KAAK,CAAC,0CAA0C,EAAE,KAAK,EAAE,MAAc,EAAE,IAAY,EAAE,KAAa,EAAE,EAAE;IACtG,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,0BAA0B,CAAC,CAAC;IAC5E,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,KAAK,CAAC,8CAA8C,EAAE,KAAK,EAAE,MAAc,EAAE,IAAY,EAAE,KAAa,EAAE,EAAE;IAC1G,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,0BAA0B,CAAC,CAAC;IAC5E,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,QAAQ,CAAC,KAAa,EAAE,IAAY,EAAE,MAAqC;IACxF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC,CAAC,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;QACtD,UAAU,EAAE,MAAM;YAChB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;gBACJ,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;gBACtB,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;gBACrC,MAAM,CAAC,CAAC,CAAC,CAAC;YACZ,CAAC;YACH,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC,yBAAyB,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAExF,IAAI,CAAC,oDAAoD,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CACzF,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAC1C,CAAC;AAEF,IAAI,CAAC,uDAAuD,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,OAAe,EAAE,EAAE,CAC7G,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CACjD,CAAC;AAEF,IAAI,CAAC,kDAAkD,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CACvF,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CACvC,CAAC;AAEF,IAAI,CAAC,gDAAgD,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE;IACrF,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,GAAG,CAAC,CAAC;AAC7G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE;IACnF,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,MAAM,EAAE,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,MAAO,CAAC,EAAE,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC,EAAE,CAAC,CAAC;AACnH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6BAA6B,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE;IAClE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,oBAAoB,IAAI,GAAG,CAAC,CAAC;AACpG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oCAAoC,EAAE,CAAC,KAAa,EAAE,OAAe,EAAE,EAAE;IAC5E,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;AACvG,CAAC,CAAC,CAAC"}

package/dist/testing/compliance/suite/access.feature

@@ -0,0 +1,20 @@
+@id:compliance-access
+Feature: Access levels
+  An admin sets the access level of each group of operations. Core reads at level read and runs a write only at level write or ask.
+  Core can do this only when the plugin classifies each operation correctly and refuses each call that is not in its catalog.
+
+  Rule: Access levels decide each call of the plugin
+
+    Scenario: Each sample read runs at level read
+      Given the groups of the sample reads are at level read
+      When the agent makes each sample read
+      Then each sample read returns a result
+
+    Scenario: Each sample write is off at level read
+      Given the groups of the sample writes are at level read
+      When the agent makes each sample write
+      Then core refuses each sample write, because the operation is off
+
+    Scenario: A call that is not in the catalog is refused
+      When the agent makes each call that the profile names as unknown
+      Then core refuses each of those calls

package/dist/testing/compliance/suite/catalog.feature

@@ -0,0 +1,19 @@
+@id:compliance-catalog
+Feature: A valid catalog
+  Core lists, classifies and describes each operation of the plugin from the catalog that the plugin syncs.
+  An admin sets the access level of an operation by its key, and an agent finds it by its description.
+
+  Rule: The plugin starts in core and syncs a valid catalog
+
+    Scenario: The plugin starts and syncs a catalog with operations
+      When core starts the plugin
+      Then the catalog of the plugin has operations
+
+    Scenario: Each operation has a description
+      Given core synced the catalog of the plugin
+      Then each operation has a description
+
+    Scenario: Each lock of plugin.yaml names an operation of the catalog
+      Given core synced the catalog of the plugin
+      When core reads the locks of plugin.yaml
+      Then each lock names an operation of the catalog

package/dist/testing/compliance/suite/connection-secrets.feature

@@ -0,0 +1,10 @@
+@id:compliance-connection-secrets
+Feature: Connection secrets
+  An admin types a connection secret once. Core keeps it encrypted, never shows it again and keeps it out of results.
+  Core knows a secret field only from the manifest of the plugin.
+
+  Rule: The manifest marks each secret field of the connection
+
+    Scenario: Each secret field is write-only, hidden and sensitive
+      When core reads the manifest of the plugin
+      Then each secret field is write-only, uses the secret widget and is a sensitive key

package/dist/testing/compliance/suite/guides.feature

@@ -0,0 +1,11 @@
+@id:compliance-guides
+Feature: Best-practice guides
+  An operation can require that the agent reads its guide before the agent calls it.
+  The plugin gives core the guide of each such operation.
+
+  Rule: The plugin provides the guide of each operation that requires one
+
+    Scenario: The agent reads the guide of each operation that requires one
+      Given core synced the catalog of the plugin
+      When the agent reads the guide of each operation that requires one
+      Then each guide has content

package/dist/testing/compliance/suite/lock-cases.feature

@@ -0,0 +1,10 @@
+@id:compliance-lock-cases
+Feature: A case for each locked operation
+  Core runs a locked operation only after a human types its confirmation.
+  The suite proves this for each locked operation, so the profile needs a case for each one.
+
+  Rule: The profile has a case for each locked operation of the catalog
+
+    Scenario: Each locked operation of the synced catalog has a case in the profile
+      Given core synced the catalog of the plugin
+      Then the profile has a case for each locked operation

package/dist/testing/compliance/suite/locks.feature

@@ -0,0 +1,21 @@
+@id:compliance-locks
+Feature: Locked operations
+  A locked operation can delete or move data that core cannot restore. Core runs it only after a human types its confirmation.
+  The plugin locks the operation, names its target in the approval and gives core the literal to type.
+
+  Rule: A locked operation runs only with its typed confirmation
+
+    Scenario: Each locked operation is off at the level of its group
+      Given the groups of the locked operations are at level write
+      When the agent makes the call of each lock case
+      Then core refuses each call, because the operation is off
+
+    Scenario: Each locked operation asks to type the literal of its case
+      Given each locked operation is at level ask
+      When the agent makes the call of each lock case, and the human types a wrong literal and then the right one
+      Then core refused the wrong literal and ran the call with the literal of its case
+
+    Scenario: The approval of each locked operation names its target
+      Given each locked operation is at level ask
+      When the agent makes the call of each lock case, and the human reads the approval
+      Then the approval shows the target of each lock case

package/dist/testing/compliance/suite/secrets.feature

@@ -0,0 +1,24 @@
+@id:compliance-secrets
+Feature: Secrets stay hidden
+  Core redacts each secret that it knows before a result reaches the agent, the approver or the audit log.
+  Core knows a secret only when the plugin declares it, so a secret that the plugin does not declare can leak.
+
+  Rule: No secret reaches the agent, the approver or the audit log
+
+    Scenario: The secret values of the fake do not reach the agent
+      Given the groups of the secret reads are at level read
+      When the agent makes each secret read
+      Then no secret value of the profile reaches the agent or the audit log
+
+    Scenario: No secret value reaches the approver of a write
+      Given the groups of the sample writes are at level ask
+      When the agent makes each sample write, and the human reads the approval
+      Then no secret value of the profile reaches the approval
+
+    Scenario: The connection test refuses wrong credentials
+      When an admin tests the connection with the wrong credentials of the profile
+      Then the connection test fails
+
+    Scenario: The manifest names the hosts that the plugin connects to
+      When core reads the manifest of the plugin
+      Then the manifest names at least one network host

package/dist/testing/compliance/verdict.d.ts

@@ -0,0 +1,12 @@
+import type { Reporter, TestModule, Vitest } from 'vitest/node';
+/** The line a failed step of the suite gives for each broken rule. */
+export declare const FAILED_RULE = "Failed rule: ";
+/** Prints core's verdict once the run ends: fit for production only when every scenario of the suite passed. */
+export declare class VerdictReporter implements Reporter {
+    private readonly pluginDir;
+    private readonly suiteDir;
+    private vitest?;
+    constructor(pluginDir: string, suiteDir: string);
+    onInit(vitest: Vitest): void;
+    onTestRunEnd(testModules: ReadonlyArray<TestModule>): void;
+}