@telora/daemon 0.22.239 → 0.22.289

package/dist/verify/engine/verification-engine.js

@@ -0,0 +1,576 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: 26 tests -- run: npm run gen:pinned-by -- --list packages/daemon/src/verify/engine/verification-engine.ts
+// PINNED-BY-END
+import { emitObservedShortfallDrift } from '../../reality/injection-writeback.js';
+import { diagnoseEmptyDiffSource } from '../../resolvers/index.js';
+import { holdAwaitedDelivery, markAwaitingModel } from '../outcome-routing/verification-model-unavailable-hold.js';
+import { NOT_RECONCILED, runReconciliationStep } from './reconciliation-step.js';
+import { collectDefaultOnVerifications, resolveDaemonWideVerifyCap, resolveProductVerificationScopes, verificationSemaphore } from '../run-selection/verification-default-on.js';
+import { markDefaultOnRan } from '../run-selection/default-on-guards.js';
+import { dispatchDefaultOnCandidate, dispatchExplicitCandidate, invalidateSupersededExplicitVerdicts, judgeDelivery } from './verification-commit-sharing.js';
+import { collectRearmedExplicitVerifications } from '../run-selection/explicit-rearm.js';
+import { explicitRunIdOf, recordExplicitGateOutcome, registerGateRun } from '../gate-verdicts/gate-run-registry.js';
+import { explicitGateKeyOf } from '../gate-verdicts/commit-verdict-record.js';
+import { judgedShaOfRun } from '../gate-verdicts/gate-verdict-source.js';
+import { runVerdictOf } from '../outcome-routing/rework-judgment.js';
+import { applyShortfallRulings, withRulingEvidence, withShortfallRulingRearm } from '../shortfalls/shortfall-rulings.js';
+import { rulingEvidenceCheckFor } from '../shortfalls/ruling-evidence-resolution.js';
+import { readRulingsBeforeJudging } from '../shortfalls/pre-judge-rulings.js';
+import { resolveParkedShortfallReuse } from '../shortfalls/parked-shortfall-reuse.js';
+import { noteRelistedDispatch, selectDispatchableExplicitRows } from '../run-selection/explicit-row-selection.js';
+import { withCommitVerdictPull, commitVerdictPullDepsOf } from '../run-selection/commit-verdict-pull.js';
+import { retryLedgeredStamps, stampPassedInjection, stampWithheldNodeIds, supersedeLedgeredStamp, } from '../effect-reconciliation/injection-stamp.js';
+import { reportRecordedTargets } from '../effect-reconciliation/recorded-targets.js';
+import { evaluateFindingNoLongerPresent, escalateOnGateFail, } from '../../security/security-finding-gate.js';
+import { runInstallProbeTick } from '../install-probe/install-probe-tick.js';
+import { createLogger } from '../../log/daemon-log.js';
+const log = createLogger({ module: 'verification' });
+import { runBehavioralStrategy, runAiInspectionStrategy } from '../inspection-strategies/verification-strategies.js';
+import { runDeterministicAtFixedCommit } from '../deterministic-gate/verification-checkout.js';
+const STRATEGIES = {
+    // Judges a detached checkout of the focus HEAD, never the live worktree a team
+    // may be moving (verify/deterministic-gate/verification-checkout.ts).
+    deterministic: (deps, v) => runDeterministicAtFixedCommit(deps, v),
+    behavioral: () => runBehavioralStrategy(),
+    ai_inspection: (deps, v) => runAiInspectionStrategy(deps, v),
+};
+import { buildVerifyEvidence, summarizeEvidenceForInjection, describeMissingJudgeEvidence, assessRecordedCoverage, resolveDiffCwd, recordedMergeShaForVerify as recordedMergeShaForVerifyImpl, } from '../effect-reconciliation/verification-evidence.js';
+/**
+ * Record a verification outcome (a VERDICT only -- the reconciler owns the
+ * verify -> done edge) and log it by delivery NAME, so a pass is visible in the
+ * daemon log directly (not merely as a tick count) and the closing that follows
+ * on review evidence reads as a distinct, later event. A 'pending' is a finished
+ * run that rendered NO verdict (a discarded checkout run, an inconclusive
+ * inspection), so its line names the rationale recorded for it. A failed
+ * injection stamp is NOT one: the stamp is a post-verdict side effect
+ * (verify/effect-reconciliation/injection-stamp.ts). Extracted to keep runVerificationForDelivery under
+ * the daemon per-function line limit.
+ *
+ * An EXPLICIT-METHOD row's outcome is also kept as its gate verdict: its run may
+ * write no per-commit record, and the review exit reads the outcome in its place.
+ * It is kept in process (verify/gate-verdicts/gate-run-registry.ts) AND on the delivery's
+ * gate_state after recordOutcome's pass reset (verify/gate-verdicts/explicit-gate-outcome.ts),
+ * under the gate the row applied, so a daemon restart still reads the verdict the
+ * run rendered, and a gate the row names later does not.
+ *
+ * The judged commit rides along, so a pass keeps a review route's stamp of that
+ * same commit (verify/outcome-routing/verification-history-reset.ts).
+ */
+async function recordAndLogOutcome(deps, v, result) {
+    const { outcome, rationale } = result;
+    await deps.recordOutcome(v.deliveryId, outcome, judgedShaOfRun(result));
+    if (!v.defaultOnSource) {
+        const gateKey = explicitGateKeyOf(v.verificationMethod, v.verificationConfig);
+        recordExplicitGateOutcome(v.deliveryId, result, gateKey);
+        await deps.persistExplicitGateOutcome(v.deliveryId, result, gateKey, explicitRunIdOf(v));
+    }
+    const recorded = outcome !== 'pending' ? 'verdict only'
+        : `no verdict: ${rationale !== undefined && rationale.trim() !== '' ? rationale : '(no rationale recorded)'}`;
+    log.info(`[verification] recorded outcome '${outcome}' for delivery ` +
+        `"${v.deliveryName}" (${v.deliveryId}) -- ${recorded}; reconciler owns any status edge`);
+}
+/**
+ * The delivery's DURABLE attribution inputs for the evidence range: the commit
+ * set recorded for it (so the range is sourced from the record, not truncated
+ * live topology), and the recorded pre-merge boundary -- the FAST-FORWARD-safe
+ * source, used when the merge-back left no merge commit AND the per-delivery
+ * commit set came back empty.
+ *
+ * Both are best-effort: a lookup that fails is logged and answers with the empty
+ * set / null, which falls through to the topology sources. Neither ever holds the
+ * gate. Extracted to keep runVerificationForDelivery within its recorded size
+ * floor.
+ */
+async function resolveRecordedAttribution(v, deps) {
+    let recordedCommitShas = [];
+    try {
+        recordedCommitShas = await deps.resolveRecordedCommitShas(v);
+    }
+    catch (err) {
+        log.debug(`[verification] recorded commit-set lookup failed for ${v.deliveryId}:`, err.message);
+    }
+    let recordedPreMergeRef = null;
+    try {
+        recordedPreMergeRef = await deps.resolveRecordedPreMergeRef(v);
+    }
+    catch (err) {
+        log.debug(`[verification] recorded pre-merge boundary lookup failed for ${v.deliveryId}:`, err.message);
+    }
+    return { recordedCommitShas, recordedPreMergeRef };
+}
+/**
+ * Whether the delivery's recorded merge batch is a TOTAL ATTRIBUTION FAILURE (zero
+ * parseable trailers on a multi-delivery focus), as the dep reports it. Best-effort:
+ * a probe that throws is logged and answers null, which falls through to the
+ * ordinary coverage judgement -- it never holds the gate. Extracted to keep
+ * runVerificationForDelivery within its recorded size floor.
+ */
+async function resolveAttributionFailureBestEffort(v, deps) {
+    try {
+        return await deps.resolveAttributionFailure(v);
+    }
+    catch (err) {
+        log.debug(`[verification] attribution-failure check failed for ${v.deliveryId}:`, err.message);
+        return null;
+    }
+}
+/**
+ * The rulings weighed before the reconciliation, at the run's judged commit: the
+ * strategy's own read when it already weighed them (ai_inspection, at its pinned
+ * commit -- one read, one decision), else read now.
+ */
+async function rulingsWeighedFor(v, result, deps) {
+    if (result.preJudgeRulings)
+        return result.preJudgeRulings;
+    return readRulingsBeforeJudging(v, deps.readShortfallRulings, rulingEvidenceCheckFor(v, judgedShaOfRun(result), deps.resolveRulingEvidence));
+}
+/**
+ * Run verification for a single delivery.
+ *
+ * Ordering invariants:
+ *   1. Judge: run the strategy -- or, given `opts.reused`, take the verdict
+ *      already recorded for the commit the delivery is judged on.
+ *   2. On verdict 'passed' with an injection node: the gates that can still
+ *      demote the pass to 'failed' run (security finding, reconciliation
+ *      shortfall, blind evidence); a pass that survives them stamps the
+ *      injection (verifyInjection runs the reality_tree_verify_injection
+ *      compound op). The stamp is a POST-VERDICT side effect: its failure never
+ *      demotes the rendered verdict -- it is logged, surfaced separately, and
+ *      retried alone on later ticks (verify/effect-reconciliation/injection-stamp.ts), so a passed
+ *      HEAD is never re-run because a stamp failed.
+ *   3. Record the outcome (demoted only by the gates in 2, never by the stamp).
+ *   4. Emit any drift_observations the runner attached, regardless of
+ *      verdict. Each becomes a crt_drift_proposal in 'proposed' status.
+ *
+ * Drift emission is best-effort: a single failure logs and continues so
+ * one bad observation does not prevent the rest from being persisted.
+ */
+export async function runVerificationForDelivery(v, deps, opts) {
+    // Judge (verify/engine/verification-commit-sharing.ts): the strategy's verdict or the
+    // commit's recorded one, baseline-attributed, and recorded against the commit.
+    const judged = await judgeDelivery(v, deps, () => STRATEGIES[v.verificationMethod](deps, v), opts);
+    const result = judged.result;
+    // Left verify while its run was in flight: the verdict is the commit's (recorded above) and routes nothing.
+    if (!judged.routes)
+        return result;
+    // A newly rendered verdict supersedes any stamp an earlier pass left ledgered (verify/effect-reconciliation/injection-stamp.ts).
+    supersedeLedgeredStamp(v.deliveryId, result.outcome);
+    // Instrument-fault tracking: set when the verify path could render NO verdict
+    // about the WORK. Three origins share this hold and the SAME bounded
+    // verify_failed re-work (evidence-unavailable guard, files no escalation):
+    //   - an empty / half-blind / unattributable evidence bundle on the pass path
+    //     (below), and
+    //   - a DETERMINISTIC run that went blind -- exited non-zero but parsed zero
+    //     failing-test ids (a type-check crash / missing deps / a run that died
+    //     before any test ran), or was KILLED by its timeout before completing.
+    // A blind or timed-out deterministic run must NEVER be laundered into a
+    // differential pass; it routes here instead. The judge step's attribution
+    // seeds it.
+    let evidenceUnavailableHold = judged.evidenceUnavailableHold;
+    // Shortfall-origin tracking: set when the reconciliation demotes a PASSED
+    // outcome to 'failed' (its own guard), with the rulings fingerprint it applied.
+    let shortfallHold = [];
+    let rulingsFingerprint = null;
+    // Awaited judge: the reconciliation could not RUN (not a verdict, not a shortfall, not a fault).
+    let modelUnavailableHold = result.modelUnavailableHold ?? null;
+    // The targets the focus's ARM did not cover, as the reconciliation reported
+    // them: judged by nothing here, reported once everything else has settled
+    // (verify/effect-reconciliation/recorded-targets.ts). null while no reconciliation has run.
+    let recordedTargetNodeIds = null;
+    // Pass path FIRST: its gates can still demote the pass before it is recorded.
+    if (result.outcome === 'passed' && v.injectionNodeId) {
+        // Security workflow verify-closed gate: a security-linked injection
+        // cannot be retired unless the linked finding has flipped to
+        // 'resolved'. On failure, escalate the finding and demote the verify
+        // outcome to 'failed'. Non-security injections pass through as a no-op.
+        let securityGatePassed = true;
+        try {
+            const gate = await evaluateFindingNoLongerPresent(v.injectionNodeId, deps.securityFindingGate);
+            if (!gate.passed) {
+                securityGatePassed = false;
+                await escalateOnGateFail(gate.findingId, 'verify_gate_failed', deps.securityFindingGate);
+                result.outcome = 'failed';
+                result.rationale =
+                    `security verify-closed gate failed: ${gate.reason} ` +
+                        `(finding ${gate.findingId} escalated)`;
+            }
+        }
+        catch (err) {
+            log.warn(`[verification] security finding gate evaluation failed for ${v.injectionNodeId}:`, err.message);
+            // Gate eval failure does NOT block the verify path -- treat as
+            // no-op so a missing edge function does not silently quarantine
+            // every passing delivery. The gate is best-effort defense in depth.
+        }
+        if (securityGatePassed) {
+            // Reconcile declared intent vs achieved outcome for this injection's UDE
+            // targets. The achieved desired effect is authored from the CITED worktree
+            // EVIDENCE (diff/tests/inspection), NOT the UDE problem text; each target is
+            // classified match / legitimate_divergence / shortfall.
+            //
+            // ASYMMETRY: a shortfall is NEVER carried into verify and NEVER softens the
+            // declared DE. If ANY target falls short, we hold the gate (demote to
+            // 'failed'), skip the flip, and escalate the gap to a human. Reality is
+            // moved toward intent, never the reverse.
+            // The delivery's durable attribution inputs for the diff range: its
+            // recorded commit set and the fast-forward-safe pre-merge boundary. Both
+            // best-effort -- see resolveRecordedAttribution.
+            const { recordedCommitShas, recordedPreMergeRef } = await resolveRecordedAttribution(v, deps);
+            const evidence = buildVerifyEvidence(result, v, deps, recordedCommitShas, recordedPreMergeRef);
+            // COMPLETENESS: does the resolved range cover the delivery's recorded
+            // commits? A non-empty but truncated bundle is HALF-BLIND -- the gate must
+            // not vouch for a verdict rendered against only part of the work. When the
+            // record itself sourced the range this is complete by construction; the
+            // check bites only when attribution fell back to topology / a searched
+            // merge and that under-covers the recorded truth.
+            const coverage = assessRecordedCoverage(v, deps, recordedCommitShas);
+            // TOTAL ATTRIBUTION FAILURE (loud, not a legacy batch): a recorded batch
+            // with zero parseable trailers on a multi-delivery focus. Its coverage
+            // reports COMPLETE (the range covers the whole batch exactly) -- so unlike
+            // the half-blind case it slips past the coverage guard -- but the batch is
+            // the wrong evidence: this delivery would be judged against the combined
+            // sibling diff. Treat it as unjudgeable and force the same non-verdict path.
+            const attributionFailure = await resolveAttributionFailureBestEffort(v, deps);
+            // A PARKED shortfall is REUSED, not re-judged, while its commit set and
+            // rulings are unchanged (verify/shortfalls/parked-shortfall-reuse.ts, which states every
+            // refusal and what it deliberately leaves reachable): non-null only where the
+            // park PROVES this dispatch's judgement, and then the ~28s reconciliation
+            // model call below is the ONE thing skipped.
+            const reused = await resolveParkedShortfallReuse(v, judgedShaOfRun(result), deps);
+            // Rulings are weighed BEFORE the judge: a ruled target is not sent to it (verify/shortfalls/pre-judge-rulings.ts).
+            const preRuled = await rulingsWeighedFor(v, result, deps);
+            // The reconciliation, unless already decided: a ruled target or a standing incurable hold makes no model
+            // call (verify/engine/reconciliation-step.ts). A GATE MUST NOT REPORT ITS OWN BLINDNESS AS A VERDICT:
+            // `evidenceUnavailable` is the reconciliation declining a blind bundle, handled below as a non-verdict hold.
+            const step = reused ? NOT_RECONCILED : await runReconciliationStep(v, judgedShaOfRun(result), evidence, !coverage.complete || attributionFailure !== null, preRuled, deps);
+            let { restatements, shortfalls } = step;
+            const { realityTreeId, evidenceUnavailable } = step;
+            if (step.modelUnavailableHold)
+                modelUnavailableHold = step.modelUnavailableHold;
+            if (step.recordedTargetNodeIds)
+                recordedTargetNodeIds = step.recordedTargetNodeIds;
+            // Rulings (verify/shortfalls/shortfall-rulings.ts): a ruled node no longer holds the gate -- a review met only when its
+            // evidence resolves at the judged commit. A reused park IS a ruled reconciliation (its fingerprint names them).
+            let ruled = reused;
+            if (!ruled)
+                ruled = await applyShortfallRulings(v, { restatements, shortfalls }, preRuled.read, preRuled.evidenceCheck);
+            ({ restatements, shortfalls, rulingsFingerprint } = ruled);
+            if (modelUnavailableHold) {
+                markAwaitingModel(result, modelUnavailableHold, v.injectionNodeId); // no verdict of any kind
+            }
+            else if (evidenceUnavailable) {
+                // Instrument fault: the reconciliation had a declared DE to judge but
+                // could not vouch for the evidence handed to it -- EMPTY (nothing
+                // judgeable) or INCOMPLETE (half-blind: the range covered only part of
+                // the recorded commit set) -- so it rendered no verdict. It is NOT a
+                // shortfall (the gate is blind, not the work short) and -- per "A hold
+                // must name a human act" (2026-07-28) -- it is NOT an operator escalation
+                // either: "fix the diff range / confirm the merge" names no act only a
+                // human can perform. Route it into the EXISTING bounded verify_failed
+                // re-work cycle (below, via deps.requeueEvidenceUnavailableAsRework),
+                // demoting to 'failed' exactly as a shortfall does so the reconciler
+                // steps verify -> verify_failed and the iteration cap bounds it. Where the
+                // resolver CAN recover the diff (a real merge commit), this branch is
+                // never reached and a verdict is rendered instead.
+                const commitsAhead = deps.resolveCommitsAhead(v);
+                // HALF-BLIND (incomplete) vs fully blind (empty): when the resolved range
+                // covered only part of the recorded commit set, carry the coverage so the
+                // hold names the blind spot rather than reporting "no evidence".
+                const isIncomplete = !coverage.complete && coverage.recorded > 0;
+                // FULLY BLIND (no source at all): re-walk the four diff sources and record
+                // why each was empty, so a second fast-forward blinding is diagnosable from
+                // the daemon log alone (the 2026-08-15 investigation could not get past "the
+                // surviving source returned nothing"). Only for the empty-source case: a
+                // half-blind / attribution-failure hold DID resolve a source, so a four-
+                // source dry diagnosis would not describe its fault.
+                const isFullyBlind = !attributionFailure && !isIncomplete;
+                let sourceDiagnostics;
+                // INSTRUMENT-READ fault: did the durable record fail to READ (API
+                // unreachable), as opposed to reading fine and confirming nothing? Probed
+                // only on the fully-blind path, where it names WHICH seam went blind so a
+                // "could not determine" is never reported as "there is nothing here".
+                let instrumentUndetermined = null;
+                if (isFullyBlind) {
+                    try {
+                        sourceDiagnostics = diagnoseEmptyDiffSource(resolveDiffCwd(v, deps), deps.integrationBranch, recordedMergeShaForVerifyImpl(v), recordedCommitShas, recordedPreMergeRef, v.deliveryId).map((p) => ({ source: p.source, reason: p.reason }));
+                    }
+                    catch (err) {
+                        log.debug(`[verification] source diagnosis failed for delivery ${v.deliveryId}:`, err.message);
+                    }
+                    try {
+                        instrumentUndetermined = await deps.resolveEvidenceInstrumentFault(v);
+                    }
+                    catch (err) {
+                        log.debug(`[verification] instrument-fault probe failed for delivery ${v.deliveryId}:`, err.message);
+                    }
+                    // Prepend the read-fault as its own diagnostic source so the blind-source
+                    // line names the seam that could not be determined, distinctly from the
+                    // topology sources that were read and found empty.
+                    if (instrumentUndetermined) {
+                        sourceDiagnostics = [
+                            { source: instrumentUndetermined.seam, reason: `undetermined (could not read record: ${instrumentUndetermined.reason})` },
+                            ...(sourceDiagnostics ?? []),
+                        ];
+                    }
+                }
+                evidenceUnavailableHold = {
+                    missing: describeMissingJudgeEvidence(evidence),
+                    commitsAhead,
+                    ...(isIncomplete ? { coverage: { recorded: coverage.recorded, covered: coverage.covered } } : {}),
+                    ...(attributionFailure
+                        ? { attribution: { batch: attributionFailure.batch, parsed: 0, deliveries: attributionFailure.deliveries } }
+                        : {}),
+                    ...(sourceDiagnostics && sourceDiagnostics.length > 0 ? { sourceDiagnostics } : {}),
+                    ...(instrumentUndetermined ? { instrumentUndetermined } : {}),
+                };
+                result.outcome = 'failed';
+                result.rationale = attributionFailure
+                    ? `verify unattributable (total attribution failure): none of the ${attributionFailure.batch} ` +
+                        `merged-batch commit(s) carry a parseable Telora-Delivery trailer on a ` +
+                        `${attributionFailure.deliveries}-delivery focus, so the batch cannot be partitioned and this ` +
+                        `delivery would be judged against the combined sibling diff -- the gate renders no verdict; ` +
+                        `re-entering bounded re-work (injection ${v.injectionNodeId} not flipped)`
+                    : isIncomplete
+                        ? `verify half-blind (instrument fault): resolved diff covers only ${coverage.covered}/` +
+                            `${coverage.recorded} of the delivery's recorded commits -- the gate cannot vouch for a ` +
+                            `verdict rendered against part of the work; re-entering bounded re-work ` +
+                            `(injection ${v.injectionNodeId} not flipped)`
+                        : instrumentUndetermined
+                            ? `verify blind (instrument READ fault): could not read the durable record ` +
+                                `(${instrumentUndetermined.seam}: ${instrumentUndetermined.reason}) -- "could not determine", ` +
+                                `NOT "no evidence"; re-entering bounded re-work (injection ${v.injectionNodeId} not flipped)`
+                            : commitsAhead > 0
+                                ? `verify blind (instrument fault): delivery branch is ${commitsAhead} commit(s) ahead of ` +
+                                    `${deps.integrationBranch} but the resolved diff is empty -- broken diff measurement, ` +
+                                    `not a shortfall; re-entering bounded re-work (injection ${v.injectionNodeId} not flipped)`
+                                : `verify blind (instrument fault): no diff/changed-files/inspection evidence to judge the ` +
+                                    `work -- the gate is blind, not the work short; re-entering bounded re-work ` +
+                                    `(injection ${v.injectionNodeId} not flipped)`;
+                log.warn(`[verification] ${result.rationale} (delivery ${v.deliveryId})`);
+                // Diagnostic record: name each consulted source and why it was empty, at
+                // the SAME warn level as the rationale (no level bump), so a repeat
+                // fast-forward blinding is diagnosable via `telora-daemon logs` without
+                // database access.
+                if (sourceDiagnostics && sourceDiagnostics.length > 0) {
+                    const diag = sourceDiagnostics.map((p) => `${p.source}: ${p.reason}`).join('; ');
+                    log.warn(`[verification] blind-source diagnosis (delivery ${v.deliveryId}): ${diag}`);
+                }
+            }
+            else if (shortfalls.length > 0) {
+                // Hold the gate, do NOT flip. deps.deliverShortfallFeedback (below) routes by
+                // repetition (routeShortfallOutcome): bounded re-work, or a park once the
+                // same shortfall repeats on an unchanged commit set. The fork lives there.
+                shortfallHold = shortfalls;
+                result.outcome = 'failed';
+                result.rationale =
+                    `verify reconciliation found ${shortfalls.length} shortfall(s) vs declared intent; injection ${v.injectionNodeId} not flipped (re-entering bounded re-work)`;
+                await emitObservedShortfallDrift(deps.emitInwardDrift, v.injectionNodeId, shortfalls, realityTreeId);
+            }
+            else {
+                // The stamp is a post-verdict side effect (verify/effect-reconciliation/injection-stamp.ts): a
+                // failure is logged, surfaced, and retried alone -- the pass stands.
+                await stampPassedInjection(deps, v, {
+                    restatements,
+                    evidence: withRulingEvidence(summarizeEvidenceForInjection(evidence), ruled.honored),
+                    withheldNodeIds: stampWithheldNodeIds(ruled.withheldNodeIds, recordedTargetNodeIds),
+                    ...(realityTreeId !== undefined ? { realityTreeId } : {}),
+                });
+            }
+        }
+    }
+    await recordAndLogOutcome(deps, v, result);
+    // Feedback dispatch by FAILURE ORIGIN. The three origins are mutually
+    // exclusive: a shortfall / instrument-fault hold only demotes a PASSED
+    // outcome, so a deterministic-failed run carries neither.
+    //
+    // Instrument-fault re-work FIRST: the verify path was handed nothing to judge,
+    // so it re-enters the bounded verify_failed re-work cycle (carrying the
+    // instrument-fault context in gate_state under the evidence-unavailable guard)
+    // and files NO escalation -- an empty bundle names no human-only act, so it
+    // never reaches a human inbox. Distinct guard from the deterministic/shortfall
+    // holds; the iteration cap (verify_gate_unclearable) is the sole residue.
+    if (modelUnavailableHold) {
+        // Awaited judge FIRST: written at the delivery's own status, routes nothing.
+        await holdAwaitedDelivery(deps.holdForModelUnavailable, v, modelUnavailableHold);
+    }
+    else if (evidenceUnavailableHold) {
+        try {
+            await deps.requeueEvidenceUnavailableAsRework(v, evidenceUnavailableHold, judgedShaOfRun(result), runVerdictOf(result, judged.evidenceUnavailableHold !== null));
+        }
+        catch (err) {
+            log.warn(`[verification] evidence-unavailable re-work failed for delivery ${v.deliveryId}:`, err.message);
+        }
+    }
+    else if (shortfallHold.length > 0) {
+        try {
+            await deps.deliverShortfallFeedback(v, shortfallHold, judgedShaOfRun(result), runVerdictOf(result, judged.evidenceUnavailableHold !== null), rulingsFingerprint);
+        }
+        catch (err) {
+            log.warn(`[verification] shortfall feedback failed for delivery ${v.deliveryId}:`, err.message);
+        }
+    }
+    else if (result.outcome === 'failed' && v.verificationMethod === 'deterministic') {
+        // Genuine deterministic failure (the shell command actually failed): write
+        // gate_state under deterministic_verification + inject. Best-effort.
+        try {
+            await deps.deliverFailureFeedback(v, result);
+        }
+        catch (err) {
+            log.warn(`[verification] failure feedback failed for delivery ${v.deliveryId}:`, err.message);
+        }
+    }
+    // What the arm did not cover is REPORTED, not dropped: named in the log and
+    // recorded on the delivery's gate_state. Last, so it stamps its own key over
+    // the gate the writers above left (verify/effect-reconciliation/recorded-targets.ts).
+    await reportRecordedTargets(v, recordedTargetNodeIds, deps.persistRecordedTargets);
+    // Drift emission is independent of verdict — a 'passed' inspection can
+    // still observe contradictions to other CRT statements.
+    const inspection = result.inspection;
+    if (inspection && inspection.driftObservations.length > 0) {
+        for (const obs of inspection.driftObservations) {
+            try {
+                await deps.emitDriftProposal({
+                    focusId: v.focusId,
+                    productId: v.productId,
+                    injectionNodeId: v.injectionNodeId,
+                    observation: obs,
+                });
+            }
+            catch (err) {
+                log.warn(`[verification] drift proposal emit failed for delivery ${v.deliveryId}:`, err.message);
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Dispatch one product's selected candidates, one at a time under the shared
+ * semaphore. Every candidate is registered as a selected gate run BEFORE any of
+ * them waits on the semaphore (verify/gate-verdicts/gate-run-registry.ts) -- a review exit about
+ * to send its delivery's work back waits for that verdict -- and each registration
+ * ends when its own dispatch settles. Before any wait, an explicit candidate's
+ * previous verdict is also removed from gate_state, and one whose removal did not
+ * land is not started. Default-on candidates share one run per
+ * focus commit, and neither kind starts or routes a run for a delivery that left
+ * verify (verify/engine/verification-commit-sharing.ts).
+ */
+async function dispatchSelected(selected, explicitIds, deps, counts) {
+    const registrations = selected.map((v) => registerGateRun({ deliveryId: v.deliveryId, focusId: v.focusId, explicit: explicitIds.has(v.deliveryId) }));
+    try {
+        const startable = await invalidateSupersededExplicitVerdicts(selected, explicitIds, registrations, deps);
+        for (const [i, v] of selected.entries()) {
+            if (!startable[i])
+                continue;
+            counts.checked += 1;
+            // Mark default-on candidates as run BEFORE dispatch so a mid-run failure
+            // does not re-enqueue the same 30-min suite on the next tick.
+            const defaultOnCandidate = v.verificationOutcome === null && !explicitIds.has(v.deliveryId);
+            if (defaultOnCandidate)
+                markDefaultOnRan(v.deliveryId);
+            // Cap concurrent whole-repo runs across overlapping ticks.
+            await verificationSemaphore.acquire();
+            try {
+                const r = defaultOnCandidate
+                    ? await dispatchDefaultOnCandidate(v, deps, runVerificationForDelivery)
+                    : await dispatchExplicitCandidate(v, deps, runVerificationForDelivery);
+                if (!defaultOnCandidate)
+                    noteRelistedDispatch(v, r);
+                if (r)
+                    counts[r.outcome] = (counts[r.outcome] ?? 0) + 1;
+            }
+            catch (err) {
+                log.warn(`[verification] tick failed for delivery ${v.deliveryId}:`, err.message);
+            }
+            finally {
+                verificationSemaphore.release();
+                registrations[i]?.end();
+            }
+        }
+    }
+    finally {
+        for (const registration of registrations)
+            registration.end();
+    }
+}
+/**
+ * One tick: fetch pending verifications across products, dispatch each.
+ * Returns counts for telemetry. `deps` is required: production passes the
+ * context the composition root built (composition/verification-context.ts).
+ */
+export async function runVerificationTick(config, deps) {
+    const counts = { checked: 0, passed: 0, failed: 0, pending: 0, escalated: 0 };
+    // Resolve the default-on config PER PRODUCT, from each product's own scoped
+    // config -- the manifest layer is read from `config.repoPath`, so resolving
+    // once from the un-scoped top-level config made every product's gate a
+    // function of the daemon's launch directory (and silently dropped the
+    // per-product products[].defaultVerification override). A malformed manifest
+    // is contained to its own product there; see resolveProductVerificationScopes.
+    const scopes = resolveProductVerificationScopes(config, deps.resolveDefaultVerification);
+    // The concurrency cap is DAEMON-WIDE (the semaphore is a module-level
+    // singleton guarding this host's CPU/RAM), so it is set ONCE from a single
+    // order-independent value rather than per-product inside the loop, where the
+    // last product iterated would silently win. See resolveDaemonWideVerifyCap for
+    // the rule (min across products) and why.
+    verificationSemaphore.setLimit(resolveDaemonWideVerifyCap(scopes));
+    // A stamp a passed run could not land is retried alone, never by re-running its suite.
+    await retryLedgeredStamps(deps);
+    for (const { product, productConfig, resolved, judgedCommitOnly } of scopes) {
+        let pending;
+        try {
+            pending = await deps.getPendingVerifications(product.id);
+        }
+        catch (err) {
+            log.warn(`[verification] fetch failed for product ${product.id}:`, err.message);
+            continue;
+        }
+        // Default-on: append deterministic runs for verify deliveries with no
+        // explicit method (the whole-repo suite the daemon now owns). A product whose
+        // repoPath manifest is malformed (resolved === undefined, logged at ERROR
+        // above) still scans, arming only from judged commits (judgedCommitOnly).
+        const explicitIds = new Set(pending.map((p) => p.deliveryId));
+        // The edge re-lists an explicit-method row every tick while it is pending or
+        // failed, which is its own re-selection path -- and, unlike the default-on
+        // scan, no run mark suppresses it. A row whose shortfall park stands on
+        // unchanged facts is DROPPED here rather than dispatched (its listing is not a
+        // new ruling and not a new commit); a surviving row writes its re-selection
+        // line once per dispatch that routes a verdict (noteRelistedDispatch).
+        const listed = await selectDispatchableExplicitRows(pending, deps);
+        // An explicit row whose recorded pass judged an older commit is selected again (verify/run-selection/explicit-rearm.ts).
+        const rearmed = await collectRearmedExplicitVerifications(productConfig, explicitIds, deps);
+        for (const r of rearmed)
+            explicitIds.add(r.deliveryId);
+        const scanResolved = resolved ?? judgedCommitOnly;
+        let defaultOn = [];
+        if (scanResolved) {
+            try {
+                // Its delivery reads re-arm a park an operator ruling released (verify/shortfalls/shortfall-rulings.ts).
+                // Two re-arm seams compose over the same focus-deliveries read the scan takes:
+                // an operator ruling releases a shortfall park (verify/shortfalls/shortfall-rulings.ts), and a
+                // route held for a verdict pulls the run that produces it (verify/run-selection/commit-verdict-pull.ts).
+                // Both only DROP guards; the candidate is still built here, dispatched through the same
+                // semaphore and cap, and recorded under the same per-commit verdict record.
+                const rearmed = withShortfallRulingRearm(deps);
+                defaultOn = await collectDefaultOnVerifications(productConfig, scanResolved, explicitIds, withCommitVerdictPull(rearmed, commitVerdictPullDepsOf(rearmed, product.id)));
+            }
+            catch (err) {
+                log.warn(`[verification] default-on scan failed for product ${product.id}:`, err.message);
+            }
+        }
+        await dispatchSelected([...listed, ...rearmed, ...defaultOn], explicitIds, deps, counts);
+    }
+    // Clean-environment install probe (Review Gate Hardening, deferrable): an
+    // ADDITIONAL, out-of-band pass over manifest-touching verify deliveries,
+    // independent of verification_method. Writes the probe result into gate_state.
+    // Best-effort -- never aborts the verification tick.
+    try {
+        const probe = await runInstallProbeTick(config, deps.installProbe);
+        if (probe.probesRun > 0) {
+            log.info(`[install-probe] tick: focusesScanned=${probe.focusesScanned} probesRun=${probe.probesRun} ` +
+                `blocked=${probe.deliveriesBlocked} unverifiable=${probe.deliveriesUnverifiable}`);
+        }
+    }
+    catch (err) {
+        log.warn('[install-probe] tick failed:', err.message);
+    }
+    return counts;
+}
+//# sourceMappingURL=verification-engine.js.map

package/dist/verify/engine/verification-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-engine.js","sourceRoot":"","sources":["../../../src/verify/engine/verification-engine.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,uHAAuH;AACvH,gBAAgB;AAmChB,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAElF,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAGnE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,2DAA2D,CAAC;AACnH,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjF,OAAO,EAAE,6BAA6B,EAAE,0BAA0B,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACjL,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,oCAAoC,EAAE,aAAa,EAAqB,MAAM,kCAAkC,CAAC;AACjL,OAAO,EAAE,mCAAmC,EAAE,MAAM,oCAAoC,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACpH,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,wBAAwB,EAA4B,MAAM,oCAAoC,CAAC;AACnJ,OAAO,EAAE,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAwB,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AAClH,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AACzG,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAIrF,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,GACnB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAErH,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAE/F,MAAM,UAAU,GAA4G;IAC1H,+EAA+E;IAC/E,sEAAsE;IACtE,aAAa,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,UAAU,EAAE,GAAG,EAAE,CAAC,qBAAqB,EAAE;IACzC,aAAa,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC;CAC7D,CAAC;AAEF,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,4BAA4B,EAC5B,sBAAsB,EACtB,cAAc,EACd,yBAAyB,IAAI,6BAA6B,GAE3D,MAAM,mDAAmD,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAsB,EACtB,CAAsB,EACtB,MAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACtC,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC9E,yBAAyB,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc;QACrD,CAAC,CAAC,eAAe,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC;IAChH,GAAG,CAAC,IAAI,CACN,oCAAoC,OAAO,iBAAiB;QAC5D,IAAI,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,UAAU,QAAQ,QAAQ,mCAAmC,CACxF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,0BAA0B,CACvC,CAAsB,EACtB,IAAsB;IAEtB,IAAI,kBAAkB,GAAa,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,kBAAkB,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,mBAAmB,GAAkB,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,mBAAmB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IACrH,CAAC;IACD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mCAAmC,CAChD,CAAsB,EACtB,IAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC1G,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,CAAsB,EACtB,MAA8D,EAC9D,IAAsB;IAEtB,IAAI,MAAM,CAAC,eAAe;QAAE,OAAO,MAAM,CAAC,eAAe,CAAC;IAC1D,OAAO,wBAAwB,CAAC,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAC/I,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,CAAsB,EACtB,IAAsB,EACtB,IAAmB;IAEnB,sFAAsF;IACtF,+EAA+E;IAC/E,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,MAAM,CAAC,MAA+F,CAAC;IACtH,4GAA4G;IAC5G,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAClC,iIAAiI;IACjI,sBAAsB,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAErD,8EAA8E;IAC9E,qEAAqE;IACrE,2EAA2E;IAC3E,8EAA8E;IAC9E,mBAAmB;IACnB,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,YAAY;IACZ,IAAI,uBAAuB,GAAqD,MAAM,CAAC,uBAAuB,CAAC;IAE/G,0EAA0E;IAC1E,gFAAgF;IAChF,IAAI,aAAa,GAAsB,EAAE,CAAC;IAC1C,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAE7C,iGAAiG;IACjG,IAAI,oBAAoB,GAAkC,MAAM,CAAC,oBAAoB,IAAI,IAAI,CAAC;IAE9F,4EAA4E;IAC5E,0EAA0E;IAC1E,4FAA4F;IAC5F,IAAI,qBAAqB,GAAoB,IAAI,CAAC;IAElD,8EAA8E;IAC9E,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;QACrD,oEAAoE;QACpE,6DAA6D;QAC7D,qEAAqE;QACrE,wEAAwE;QACxE,IAAI,kBAAkB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,8BAA8B,CAC/C,CAAC,CAAC,eAAe,EACjB,IAAI,CAAC,mBAAmB,CACzB,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,kBAAkB,GAAG,KAAK,CAAC;gBAC3B,MAAM,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACzF,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC;gBAC1B,MAAM,CAAC,SAAS;oBACd,uCAAuC,IAAI,CAAC,MAAM,GAAG;wBACrD,YAAY,IAAI,CAAC,SAAS,aAAa,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,8DAA8D,CAAC,CAAC,eAAe,GAAG,EACjF,GAAa,CAAC,OAAO,CACvB,CAAC;YACF,+DAA+D;YAC/D,gEAAgE;YAChE,oEAAoE;QACtE,CAAC;QAED,IAAI,kBAAkB,EAAE,CAAC;YACvB,yEAAyE;YACzE,2EAA2E;YAC3E,6EAA6E;YAC7E,wDAAwD;YACxD,EAAE;YACF,4EAA4E;YAC5E,sEAAsE;YACtE,wEAAwE;YACxE,0CAA0C;YAC1C,oEAAoE;YACpE,yEAAyE;YACzE,iDAAiD;YACjD,MAAM,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,GAAG,MAAM,0BAA0B,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC9F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;YAE/F,sEAAsE;YACtE,2EAA2E;YAC3E,2EAA2E;YAC3E,wEAAwE;YACxE,uEAAuE;YACvE,kDAAkD;YAClD,MAAM,QAAQ,GAAqB,sBAAsB,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;YAEvF,yEAAyE;YACzE,uEAAuE;YACvE,2EAA2E;YAC3E,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,MAAM,kBAAkB,GAAG,MAAM,mCAAmC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAE9E,wEAAwE;YACxE,yFAAyF;YACzF,8EAA8E;YAC9E,0EAA0E;YAC1E,6CAA6C;YAC7C,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YAClF,mHAAmH;YACnH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1D,yGAAyG;YACzG,sGAAsG;YACtG,6GAA6G;YAC7G,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,QAAQ,EACpG,CAAC,QAAQ,CAAC,QAAQ,IAAI,kBAAkB,KAAK,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YACrE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;YACxC,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC;YACpD,IAAI,IAAI,CAAC,oBAAoB;gBAAE,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CAAC;YAChF,IAAI,IAAI,CAAC,qBAAqB;gBAAE,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,CAAC;YAEnF,wHAAwH;YACxH,gHAAgH;YAChH,IAAI,KAAK,GAA+B,MAAM,CAAC;YAC/C,IAAI,CAAC,KAAK;gBAAE,KAAK,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;YACxH,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,KAAK,CAAC,CAAC;YAE3D,IAAI,oBAAoB,EAAE,CAAC;gBACzB,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,yBAAyB;YAC/F,CAAC;iBAAM,IAAI,mBAAmB,EAAE,CAAC;gBAC/B,sEAAsE;gBACtE,kEAAkE;gBAClE,uEAAuE;gBACvE,qEAAqE;gBACrE,uEAAuE;gBACvE,0EAA0E;gBAC1E,uEAAuE;gBACvE,sEAAsE;gBACtE,sEAAsE;gBACtE,qEAAqE;gBACrE,2EAA2E;gBAC3E,sEAAsE;gBACtE,mDAAmD;gBACnD,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;gBACjD,0EAA0E;gBAC1E,0EAA0E;gBAC1E,iEAAiE;gBACjE,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACjE,2EAA2E;gBAC3E,4EAA4E;gBAC5E,6EAA6E;gBAC7E,yEAAyE;gBACzE,yEAAyE;gBACzE,qDAAqD;gBACrD,MAAM,YAAY,GAAG,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC;gBAC1D,IAAI,iBAAwE,CAAC;gBAC7E,kEAAkE;gBAClE,0EAA0E;gBAC1E,0EAA0E;gBAC1E,sEAAsE;gBACtE,IAAI,sBAAsB,GAA4C,IAAI,CAAC;gBAC3E,IAAI,YAAY,EAAE,CAAC;oBACjB,IAAI,CAAC;wBACH,iBAAiB,GAAG,uBAAuB,CACzC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,EACvB,IAAI,CAAC,iBAAiB,EACtB,6BAA6B,CAAC,CAAC,CAAC,EAChC,kBAAkB,EAClB,mBAAmB,EACnB,CAAC,CAAC,UAAU,CACb,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;oBACzD,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,GAAG,CAAC,KAAK,CACP,uDAAuD,CAAC,CAAC,UAAU,GAAG,EACrE,GAAa,CAAC,OAAO,CACvB,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC;wBACH,sBAAsB,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC;oBACxE,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,GAAG,CAAC,KAAK,CACP,6DAA6D,CAAC,CAAC,UAAU,GAAG,EAC3E,GAAa,CAAC,OAAO,CACvB,CAAC;oBACJ,CAAC;oBACD,0EAA0E;oBAC1E,wEAAwE;oBACxE,mDAAmD;oBACnD,IAAI,sBAAsB,EAAE,CAAC;wBAC3B,iBAAiB,GAAG;4BAClB,EAAE,MAAM,EAAE,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,wCAAwC,sBAAsB,CAAC,MAAM,GAAG,EAAE;4BACzH,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;yBAC7B,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,uBAAuB,GAAG;oBACxB,OAAO,EAAE,4BAA4B,CAAC,QAAQ,CAAC;oBAC/C,YAAY;oBACZ,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjG,GAAG,CAAC,kBAAkB;wBACpB,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,kBAAkB,CAAC,UAAU,EAAE,EAAE;wBAC5G,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnF,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9D,CAAC;gBACF,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC;gBAC1B,MAAM,CAAC,SAAS,GAAG,kBAAkB;oBACnC,CAAC,CAAC,kEAAkE,kBAAkB,CAAC,KAAK,GAAG;wBAC7F,wEAAwE;wBACxE,GAAG,kBAAkB,CAAC,UAAU,+DAA+D;wBAC/F,6FAA6F;wBAC7F,0CAA0C,CAAC,CAAC,eAAe,eAAe;oBAC5E,CAAC,CAAC,YAAY;wBACd,CAAC,CAAC,mEAAmE,QAAQ,CAAC,OAAO,GAAG;4BACtF,GAAG,QAAQ,CAAC,QAAQ,qEAAqE;4BACzF,yEAAyE;4BACzE,cAAc,CAAC,CAAC,eAAe,eAAe;wBAChD,CAAC,CAAC,sBAAsB;4BACxB,CAAC,CAAC,0EAA0E;gCAC1E,IAAI,sBAAsB,CAAC,IAAI,KAAK,sBAAsB,CAAC,MAAM,8BAA8B;gCAC/F,6DAA6D,CAAC,CAAC,eAAe,eAAe;4BAC/F,CAAC,CAAC,YAAY,GAAG,CAAC;gCAClB,CAAC,CAAC,uDAAuD,YAAY,sBAAsB;oCACzF,GAAG,IAAI,CAAC,iBAAiB,8DAA8D;oCACvF,2DAA2D,CAAC,CAAC,eAAe,eAAe;gCAC7F,CAAC,CAAC,0FAA0F;oCAC1F,6EAA6E;oCAC7E,cAAc,CAAC,CAAC,eAAe,eAAe,CAAC;gBACnD,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,SAAS,cAAc,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;gBAC1E,yEAAyE;gBACzE,oEAAoE;gBACpE,wEAAwE;gBACxE,mBAAmB;gBACnB,IAAI,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjF,GAAG,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC,UAAU,MAAM,IAAI,EAAE,CAAC,CAAC;gBACxF,CAAC;YACH,CAAC;iBAAM,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,8EAA8E;gBAC9E,0EAA0E;gBAC1E,2EAA2E;gBAC3E,aAAa,GAAG,UAAU,CAAC;gBAC3B,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC;gBAC1B,MAAM,CAAC,SAAS;oBACd,+BAA+B,UAAU,CAAC,MAAM,+CAA+C,CAAC,CAAC,eAAe,4CAA4C,CAAC;gBAC/J,MAAM,0BAA0B,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;YACvG,CAAC;iBAAM,CAAC;gBACN,+FAA+F;gBAC/F,qEAAqE;gBACrE,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAC,EAAE;oBAClC,YAAY;oBACZ,QAAQ,EAAE,kBAAkB,CAAC,6BAA6B,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC;oBACpF,eAAe,EAAE,oBAAoB,CAAC,KAAK,CAAC,eAAe,EAAE,qBAAqB,CAAC;oBACnF,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAE3C,sEAAsE;IACtE,uEAAuE;IACvE,0DAA0D;IAC1D,EAAE;IACF,+EAA+E;IAC/E,wEAAwE;IACxE,+EAA+E;IAC/E,4EAA4E;IAC5E,+EAA+E;IAC/E,0EAA0E;IAC1E,IAAI,oBAAoB,EAAE,CAAC;QACzB,6EAA6E;QAC7E,MAAM,mBAAmB,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACnF,CAAC;SAAM,IAAI,uBAAuB,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,kCAAkC,CAAC,CAAC,EAAE,uBAAuB,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,uBAAuB,KAAK,IAAI,CAAC,CAAC,CAAC;QACnK,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,mEAAmE,CAAC,CAAC,UAAU,GAAG,EACjF,GAAa,CAAC,OAAO,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,wBAAwB,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,uBAAuB,KAAK,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACnK,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,yDAAyD,CAAC,CAAC,UAAU,GAAG,EACvE,GAAa,CAAC,OAAO,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,kBAAkB,KAAK,eAAe,EAAE,CAAC;QACnF,2EAA2E;QAC3E,qEAAqE;QACrE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,uDAAuD,CAAC,CAAC,UAAU,GAAG,EACrE,GAAa,CAAC,OAAO,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,sFAAsF;IACtF,MAAM,qBAAqB,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAEnF,uEAAuE;IACvE,wDAAwD;IACxD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,IAAI,UAAU,IAAI,UAAU,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,iBAAiB,CAAC;oBAC3B,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,eAAe,EAAE,CAAC,CAAC,eAAe;oBAClC,WAAW,EAAE,GAAG;iBACjB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CACN,0DAA0D,CAAC,CAAC,UAAU,GAAG,EACxE,GAAa,CAAC,OAAO,CACvB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAKD;;;;;;;;;;GAUG;AACH,KAAK,UAAU,gBAAgB,CAC7B,QAAwC,EACxC,WAAgC,EAChC,IAAsB,EACtB,MAAkB;IAElB,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACvC,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9G,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,oCAAoC,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;QACzG,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC5B,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACpB,yEAAyE;YACzE,8DAA8D;YAC9D,MAAM,kBAAkB,GAAG,CAAC,CAAC,mBAAmB,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC5F,IAAI,kBAAkB;gBAAE,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACvD,2DAA2D;YAC3D,MAAM,qBAAqB,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,kBAAkB;oBAC1B,CAAC,CAAC,MAAM,0BAA0B,CAAC,CAAC,EAAE,IAAI,EAAE,0BAA0B,CAAC;oBACvE,CAAC,CAAC,MAAM,yBAAyB,CAAC,CAAC,EAAE,IAAI,EAAE,0BAA0B,CAAC,CAAC;gBACzE,IAAI,CAAC,kBAAkB;oBAAE,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpD,IAAI,CAAC;oBAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CACN,2CAA2C,CAAC,CAAC,UAAU,GAAG,EACzD,GAAa,CAAC,OAAO,CACvB,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,qBAAqB,CAAC,OAAO,EAAE,CAAC;gBAChC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,YAAY,IAAI,aAAa;YAAE,YAAY,CAAC,GAAG,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAoB,EACpB,IAAsB;IAEtB,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAE1F,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,sEAAsE;IACtE,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,gCAAgC,CAAC,MAAM,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACzF,sEAAsE;IACtE,2EAA2E;IAC3E,6EAA6E;IAC7E,+EAA+E;IAC/E,0CAA0C;IAC1C,qBAAqB,CAAC,QAAQ,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnE,uFAAuF;IACvF,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAEhC,KAAK,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,MAAM,EAAE,CAAC;QAC5E,IAAI,OAA8B,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,2CAA2C,OAAO,CAAC,EAAE,GAAG,EACvD,GAAa,CAAC,OAAO,CACvB,CAAC;YACF,SAAS;QACX,CAAC;QAED,sEAAsE;QACtE,8EAA8E;QAC9E,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9D,6EAA6E;QAC7E,2EAA2E;QAC3E,wEAAwE;QACxE,+EAA+E;QAC/E,4EAA4E;QAC5E,uEAAuE;QACvE,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnE,yHAAyH;QACzH,MAAM,OAAO,GAAG,MAAM,mCAAmC,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5F,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,QAAQ,IAAI,gBAAgB,CAAC;QAClD,IAAI,SAAS,GAA0B,EAAE,CAAC;QAC1C,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,yGAAyG;gBACzG,+EAA+E;gBAC/E,+FAA+F;gBAC/F,yGAAyG;gBACzG,wFAAwF;gBACxF,4EAA4E;gBAC5E,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;gBAC/C,SAAS,GAAG,MAAM,6BAA6B,CAC7C,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,qBAAqB,CAAC,OAAO,EAAE,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CACvH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CACN,qDAAqD,OAAO,CAAC,EAAE,GAAG,EACjE,GAAa,CAAC,OAAO,CACvB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,gBAAgB,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3F,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,+EAA+E;IAC/E,qDAAqD;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CACN,wCAAwC,KAAK,CAAC,cAAc,cAAc,KAAK,CAAC,SAAS,GAAG;gBAC5F,WAAW,KAAK,CAAC,iBAAiB,iBAAiB,KAAK,CAAC,sBAAsB,EAAE,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}