agentic-engineering-harness 0.8.7 → 0.8.8

package/dist/releases/release-1790896196283-15710-31ca87e8/security/actionReconciliation.js

@@ -0,0 +1,470 @@
+import { sha256Canonical } from "../core/digest.js";
+import { resolveGithubTokenOptional } from "../delivery/handoff.js";
+import { runExecutable } from "../utils/process.js";
+const GITHUB_API_BASE_DEFAULT = "https://api.github.com";
+const GITHUB_REPOSITORY_PATTERN = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
+// Reconciliation compares object names for exact equality, so only full Git
+// object names are acceptable evidence: SHA-1 (40 hex) or SHA-256 (64 hex).
+// Abbreviated names are rejected as missing evidence instead of risking a
+// false FAILED from a prefix comparison.
+const GIT_COMMIT_PATTERN = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/i;
+const GIT_TIMEOUT_MS = 30_000;
+const MAX_SNIPPET_LENGTH = 500;
+/**
+ * Reconcile one tool action against observable state.
+ *
+ * `payload` is the action payload that the caller intends to verify; it is the
+ * same value whose canonical digest the gate stored as `intent.payloadDigest`,
+ * and it is a separate parameter because payloads are not embedded in the
+ * persisted intent. Reconciliation validates only the fields it needs per
+ * action; it never re-derives the intent identity from the payload.
+ *
+ * `root` is the repository root used for local Git observations
+ * (`git rev-parse`, `git ls-remote`). Provider actions (`github.*` and
+ * `paseo.workspace.create`) do not touch the local working tree. Paseo
+ * workspace creation is controller-owned local execution infrastructure;
+ * uncertainty remains HUMAN_REQUIRED unless provider identity can be proven.
+ */
+export async function reconcileToolAction(root, intent, payload, dependencies = {}) {
+    assertReconcilableIntent(intent);
+    const resolved = resolveDependenciesV1(dependencies);
+    switch (intent.action) {
+        case "git.branch.create":
+            return reconcileGitBranchCreate(root, intent, payload, resolved);
+        case "git.commit":
+            return reconcileGitCommit(root, intent, payload, resolved);
+        case "git.push":
+            return reconcileGitPush(root, intent, payload, resolved);
+        case "github.branch.create":
+            return reconcileGithubBranchCreate(intent, payload, resolved);
+        case "github.pull-request.create":
+            return reconcileGithubPullRequestCreate(intent, payload, resolved);
+        case "github.issue.create":
+            return reconcileGithubIssueCreate(intent, payload, resolved);
+        case "paseo.workspace.create":
+            return reconcilePaseoWorkspaceCreate(intent, payload, resolved);
+        default:
+            throw new Error(`ACTION_RECONCILIATION_ACTION_UNSUPPORTED: '${String(intent.action)}' is not a registered tool action.`);
+    }
+}
+/**
+ * Map a reconciliation result to the status that may be persisted as a
+ * terminal `ActionReceipt`. UNKNOWN and HUMAN_REQUIRED are deliberately not
+ * persistable: an unresolved action must remain at the intent stage so a
+ * later reconciliation can still change the conclusion.
+ */
+export function reconciliationReceiptOutcome(result) {
+    if (result.outcome === "SUCCEEDED" || result.outcome === "FAILED")
+        return result.outcome;
+    return undefined;
+}
+async function reconcileGitBranchCreate(root, intent, payload, dependencies) {
+    const record = asPayloadRecord(payload);
+    if (!record)
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, ["payload"]), dependencies.now);
+    const branch = nonEmptyString(record.branch);
+    const expectedCommit = nonEmptyString(record.expectedCommit);
+    const invalid = [];
+    if (!branch || branch.startsWith("refs/") || !isValidGitRef(branch))
+        invalid.push("branch");
+    if (!expectedCommit || !GIT_COMMIT_PATTERN.test(expectedCommit))
+        invalid.push("expectedCommit");
+    if (invalid.length || !branch || !expectedCommit)
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, invalid), dependencies.now);
+    const ref = `refs/heads/${branch}`;
+    const observed = await tryExecutable(dependencies.run, "git", ["for-each-ref", "--format=%(objectname)", ref], { cwd: root, timeoutMs: GIT_TIMEOUT_MS });
+    if (observed.kind === "error")
+        return buildResult(intent, "UNKNOWN", "git-unavailable", { branch, expectedCommit, error: observed.message }, dependencies.now);
+    if (observed.result.exitCode === 0 && !observed.result.stdout.trim())
+        return buildResult(intent, "FAILED", "local-branch-absent", { branch, expectedCommit }, dependencies.now);
+    if (observed.result.exitCode !== 0 || observed.result.timedOut)
+        return buildResult(intent, "UNKNOWN", "local-branch-unreadable", { branch, expectedCommit, exitCode: observed.result.exitCode, timedOut: observed.result.timedOut === true, stderr: snippet(observed.result.stderr) }, dependencies.now);
+    const observedCommit = observed.result.stdout.trim().toLowerCase();
+    if (!GIT_COMMIT_PATTERN.test(observedCommit))
+        return buildResult(intent, "UNKNOWN", "local-branch-unreadable", { branch, expectedCommit, stdout: snippet(observed.result.stdout) }, dependencies.now);
+    const evidence = { branch, expectedCommit: expectedCommit.toLowerCase(), observedCommit };
+    return buildResult(intent, observedCommit === expectedCommit.toLowerCase() ? "SUCCEEDED" : "FAILED", "local-branch-compared", evidence, dependencies.now);
+}
+async function reconcileGitCommit(root, intent, payload, dependencies) {
+    const record = asPayloadRecord(payload);
+    if (!record)
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, ["payload"]), dependencies.now);
+    if (record.expectedHead === undefined) {
+        const message = nonEmptyString(record.message);
+        if (!message)
+            return buildResult(intent, "UNKNOWN", "expected-head-absent", { expectedHeadPresent: false, messagePresent: false, payloadType: describedType(payload) }, dependencies.now);
+        const observed = await tryExecutable(dependencies.run, "git", ["log", "-1", "--pretty=%s"], { cwd: root, timeoutMs: GIT_TIMEOUT_MS });
+        if (observed.kind === "error")
+            return buildResult(intent, "UNKNOWN", "git-unavailable", { message, error: observed.message }, dependencies.now);
+        if (observed.result.exitCode !== 0)
+            return buildResult(intent, "UNKNOWN", "commit-unreadable", { message, exitCode: observed.result.exitCode, stderr: snippet(observed.result.stderr) }, dependencies.now);
+        const subject = observed.result.stdout.trim();
+        return buildResult(intent, subject === message ? "SUCCEEDED" : "FAILED", "commit-subject-observed", { expectedSubject: message, observedSubject: subject }, dependencies.now);
+    }
+    const expectedHead = nonEmptyString(record.expectedHead);
+    if (!expectedHead || !GIT_COMMIT_PATTERN.test(expectedHead)) {
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, ["expectedHead"]), dependencies.now);
+    }
+    const observed = await tryExecutable(dependencies.run, "git", ["rev-parse", "HEAD"], { cwd: root, timeoutMs: GIT_TIMEOUT_MS });
+    if (observed.kind === "error") {
+        return buildResult(intent, "UNKNOWN", "git-unavailable", { expectedHead, error: observed.message }, dependencies.now);
+    }
+    if (observed.result.exitCode !== 0) {
+        return buildResult(intent, "UNKNOWN", "head-unreadable", { expectedHead, exitCode: observed.result.exitCode, stderr: snippet(observed.result.stderr) }, dependencies.now);
+    }
+    const head = observed.result.stdout.trim();
+    if (!GIT_COMMIT_PATTERN.test(head)) {
+        return buildResult(intent, "UNKNOWN", "head-unreadable", { expectedHead, stdout: snippet(observed.result.stdout) }, dependencies.now);
+    }
+    const evidence = { expectedHead: expectedHead.toLowerCase(), observedHead: head.toLowerCase() };
+    return buildResult(intent, head.toLowerCase() === expectedHead.toLowerCase() ? "SUCCEEDED" : "FAILED", "head-observed", evidence, dependencies.now);
+}
+async function reconcileGitPush(root, intent, payload, dependencies) {
+    const record = asPayloadRecord(payload);
+    if (!record)
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, ["payload"]), dependencies.now);
+    const invalid = [];
+    const remote = nonEmptyString(record.remote);
+    if (!remote || !isValidGitRemote(remote))
+        invalid.push("remote");
+    const ref = nonEmptyString(record.ref);
+    if (!ref || !isValidGitRef(ref))
+        invalid.push("ref");
+    const expectedCommit = nonEmptyString(record.expectedCommit);
+    if (!expectedCommit || !GIT_COMMIT_PATTERN.test(expectedCommit))
+        invalid.push("expectedCommit");
+    if (invalid.length > 0 || !remote || !ref || !expectedCommit) {
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, invalid), dependencies.now);
+    }
+    const normalizedCommit = expectedCommit.toLowerCase();
+    const observed = await tryExecutable(dependencies.run, "git", ["ls-remote", "--", remote, ref], { cwd: root, timeoutMs: GIT_TIMEOUT_MS });
+    if (observed.kind === "error") {
+        return buildResult(intent, "UNKNOWN", "remote-inspection-unavailable", { remote, ref, expectedCommit: normalizedCommit, error: observed.message }, dependencies.now);
+    }
+    if (observed.result.exitCode !== 0 || observed.result.timedOut) {
+        return buildResult(intent, "UNKNOWN", "remote-inspection-failed", { remote, ref, expectedCommit: normalizedCommit, exitCode: observed.result.exitCode, timedOut: observed.result.timedOut === true, stderr: snippet(observed.result.stderr) }, dependencies.now);
+    }
+    const entries = parseLsRemote(observed.result.stdout);
+    const exact = entries.filter((entry) => entry.ref === ref);
+    const candidates = exact.length > 0 ? exact : entries.filter((entry) => entry.ref.endsWith(`/${ref}`));
+    const observedShas = [...new Set(candidates.map((entry) => entry.sha.toLowerCase()))].sort();
+    if (observedShas.length === 0) {
+        return buildResult(intent, "FAILED", "remote-ref-absent", { remote, ref, expectedCommit: normalizedCommit, observedShas }, dependencies.now);
+    }
+    if (observedShas.length > 1) {
+        return buildResult(intent, "UNKNOWN", "remote-ref-ambiguous", { remote, ref, expectedCommit: normalizedCommit, observedShas }, dependencies.now);
+    }
+    const observedSha = observedShas[0];
+    const evidence = { remote, ref, expectedCommit: normalizedCommit, observedSha };
+    return buildResult(intent, observedSha === normalizedCommit ? "SUCCEEDED" : "FAILED", "remote-ref-compared", evidence, dependencies.now);
+}
+async function reconcileGithubBranchCreate(intent, payload, dependencies) {
+    const record = asPayloadRecord(payload);
+    if (!record)
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, ["payload"]), dependencies.now);
+    const invalid = [];
+    const repository = nonEmptyString(record.repository);
+    if (!repository || !GITHUB_REPOSITORY_PATTERN.test(repository))
+        invalid.push("repository");
+    const branch = nonEmptyString(record.branch);
+    if (!branch)
+        invalid.push("branch");
+    const sha = nonEmptyString(record.sha);
+    if (!sha)
+        invalid.push("sha");
+    if (invalid.length > 0 || !repository || !branch || !sha) {
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, invalid), dependencies.now);
+    }
+    const apiBase = normalizeApiBase(record.apiBase);
+    const expectedSha = sha.toLowerCase();
+    const token = dependencies.token;
+    if (!token) {
+        return buildResult(intent, "HUMAN_REQUIRED", "github-token-unavailable", { repository, branch, expectedSha, apiBase }, dependencies.now);
+    }
+    const url = `${apiBase}/repos/${encodeRepository(repository)}/git/ref/heads/${encodeRef(branch)}`;
+    const observed = await observeGithub(dependencies.fetchJson, url, token);
+    if (observed.kind === "error") {
+        return buildResult(intent, "UNKNOWN", "github-api-unavailable", { repository, branch, expectedSha, apiBase, error: observed.message }, dependencies.now);
+    }
+    if (observed.status === 200) {
+        const observedSha = branchRefSha(observed.body);
+        if (!observedSha) {
+            return buildResult(intent, "UNKNOWN", "github-response-uninterpretable", { repository, branch, expectedSha, apiBase, status: 200 }, dependencies.now);
+        }
+        const evidence = { repository, branch, expectedSha, observedSha: observedSha.toLowerCase(), apiBase, status: 200 };
+        return buildResult(intent, observedSha.toLowerCase() === expectedSha ? "SUCCEEDED" : "FAILED", "github-branch-compared", evidence, dependencies.now);
+    }
+    if (observed.status === 404) {
+        return buildResult(intent, "FAILED", "github-branch-absent", { repository, branch, expectedSha, apiBase, status: 404 }, dependencies.now);
+    }
+    return buildResult(intent, "UNKNOWN", "github-api-unexpected-status", { repository, branch, expectedSha, apiBase, status: observed.status }, dependencies.now);
+}
+async function reconcileGithubPullRequestCreate(intent, payload, dependencies) {
+    const record = asPayloadRecord(payload);
+    if (!record)
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, ["payload"]), dependencies.now);
+    const invalid = [];
+    const repository = nonEmptyString(record.repository);
+    if (!repository || !GITHUB_REPOSITORY_PATTERN.test(repository))
+        invalid.push("repository");
+    const head = nonEmptyString(record.head);
+    if (!head)
+        invalid.push("head");
+    const base = nonEmptyString(record.base);
+    if (!base)
+        invalid.push("base");
+    if (invalid.length > 0 || !repository || !head || !base) {
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, invalid), dependencies.now);
+    }
+    const apiBase = normalizeApiBase(record.apiBase);
+    const headQualifier = head.includes(":") ? head : `${repository.split("/")[0]}:${head}`;
+    const headRef = head.includes(":") ? head.slice(head.indexOf(":") + 1) : head;
+    const token = dependencies.token;
+    if (!token) {
+        return buildResult(intent, "HUMAN_REQUIRED", "github-token-unavailable", { repository, head: headQualifier, base, apiBase }, dependencies.now);
+    }
+    const query = new URLSearchParams({ state: "open", head: headQualifier, base });
+    const url = `${apiBase}/repos/${encodeRepository(repository)}/pulls?${query.toString()}`;
+    const observed = await observeGithub(dependencies.fetchJson, url, token);
+    if (observed.kind === "error") {
+        return buildResult(intent, "UNKNOWN", "github-api-unavailable", { repository, head: headQualifier, base, apiBase, error: observed.message }, dependencies.now);
+    }
+    if (observed.status !== 200) {
+        return buildResult(intent, "UNKNOWN", "github-api-unexpected-status", { repository, head: headQualifier, base, apiBase, status: observed.status }, dependencies.now);
+    }
+    if (!Array.isArray(observed.body)) {
+        return buildResult(intent, "UNKNOWN", "github-response-uninterpretable", { repository, head: headQualifier, base, apiBase, status: 200 }, dependencies.now);
+    }
+    const matches = observed.body.map(asPayloadRecord).filter((item) => Boolean(item)).filter((item) => {
+        const observedHead = asPayloadRecord(item.head)?.ref;
+        const observedBase = asPayloadRecord(item.base)?.ref;
+        return observedHead === headRef && observedBase === base;
+    });
+    if (matches.length > 0) {
+        const first = matches[0];
+        const evidence = {
+            repository,
+            head: headQualifier,
+            base,
+            apiBase,
+            status: 200,
+            matchCount: matches.length,
+            pullRequestNumber: numberValue(first.number) ?? null,
+            pullRequestUrl: stringValue(first.html_url) ?? stringValue(first.url) ?? null
+        };
+        return buildResult(intent, "SUCCEEDED", "open-pull-request-observed", evidence, dependencies.now);
+    }
+    if (observed.body.length === 0) {
+        return buildResult(intent, "FAILED", "open-pull-request-not-observed", { repository, head: headQualifier, base, apiBase, status: 200, matchCount: 0 }, dependencies.now);
+    }
+    return buildResult(intent, "UNKNOWN", "github-response-mismatch", { repository, head: headQualifier, base, apiBase, status: 200, returned: observed.body.length }, dependencies.now);
+}
+async function reconcileGithubIssueCreate(intent, payload, dependencies) {
+    const record = asPayloadRecord(payload);
+    if (!record)
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, ["payload"]), dependencies.now);
+    const repository = nonEmptyString(record.repository);
+    const marker = nonEmptyString(record.marker, false);
+    if (!marker) {
+        const evidence = { markerPresent: false };
+        if (repository)
+            evidence.repository = repository;
+        return buildResult(intent, "HUMAN_REQUIRED", "issue-identity-marker-required", evidence, dependencies.now);
+    }
+    if (!repository || !GITHUB_REPOSITORY_PATTERN.test(repository)) {
+        return buildResult(intent, "UNKNOWN", "payload-missing-evidence", invalidPayloadEvidence(payload, ["repository"]), dependencies.now);
+    }
+    const apiBase = normalizeApiBase(record.apiBase);
+    const token = dependencies.token;
+    if (!token) {
+        return buildResult(intent, "HUMAN_REQUIRED", "github-token-unavailable", { repository, marker, apiBase }, dependencies.now);
+    }
+    const query = new URLSearchParams({ state: "all", per_page: "100" });
+    const url = `${apiBase}/repos/${encodeRepository(repository)}/issues?${query.toString()}`;
+    const observed = await observeGithub(dependencies.fetchJson, url, token);
+    if (observed.kind === "error") {
+        return buildResult(intent, "UNKNOWN", "github-api-unavailable", { repository, marker, apiBase, error: observed.message }, dependencies.now);
+    }
+    if (observed.status !== 200) {
+        return buildResult(intent, "UNKNOWN", "github-api-unexpected-status", { repository, marker, apiBase, status: observed.status }, dependencies.now);
+    }
+    if (!Array.isArray(observed.body)) {
+        return buildResult(intent, "UNKNOWN", "github-response-uninterpretable", { repository, marker, apiBase, status: 200 }, dependencies.now);
+    }
+    const match = observed.body.map(asPayloadRecord).filter((item) => Boolean(item)).find((item) => typeof item.body === "string" && item.body.includes(marker));
+    if (match) {
+        const evidence = {
+            repository,
+            marker,
+            apiBase,
+            status: 200,
+            scanned: observed.body.length,
+            issueNumber: numberValue(match.number) ?? null,
+            issueUrl: stringValue(match.html_url) ?? stringValue(match.url) ?? null
+        };
+        return buildResult(intent, "SUCCEEDED", "issue-marker-observed", evidence, dependencies.now);
+    }
+    return buildResult(intent, "UNKNOWN", "issue-marker-not-observed", { repository, marker, apiBase, status: 200, scanned: observed.body.length }, dependencies.now);
+}
+async function reconcilePaseoWorkspaceCreate(intent, payload, dependencies) {
+    const record = asPayloadRecord(payload);
+    const workspaceId = record ? nonEmptyString(record.workspaceId) : undefined;
+    if (!workspaceId) {
+        return buildResult(intent, "HUMAN_REQUIRED", "provider-identity-missing", invalidPayloadEvidence(payload, ["workspaceId"]), dependencies.now);
+    }
+    // Paseo workspace reconciliation boundary.
+    //
+    // The repository confirms exactly two Paseo workspace CLI contracts:
+    // - `paseo workspace create --isolation <mode> --path <root> ... --json`
+    //   (src/delivery/handoff.ts, src/operations/controller.ts)
+    // - `paseo workspace ls --json`
+    //   (src/delivery/handoff.ts, src/operations/controller.ts)
+    //
+    // Neither is a single-workspace inspection contract: `ls` output is an
+    // unbounded listing, not a durable identity lookup, and there is no
+    // `paseo workspace show <id> --json` (or SDK equivalent under src/paseo/**)
+    // that could prove a caller-supplied workspaceId exists. Inventing such a
+    // CLI contract here would make reconciliation non-deterministic, so a
+    // workspaceId alone is not treated as proof of external state.
+    return buildResult(intent, "HUMAN_REQUIRED", "provider-identity-inspection-unavailable", { workspaceId }, dependencies.now);
+}
+function resolveDependenciesV1(dependencies) {
+    const providedToken = dependencies.token?.trim();
+    return {
+        run: dependencies.runExecutable ?? runExecutable,
+        fetchJson: dependencies.fetchJson ?? defaultFetchJson,
+        token: providedToken || resolveGithubTokenOptional(),
+        now: dependencies.now ?? new Date()
+    };
+}
+async function defaultFetchJson(url, init) {
+    const response = await fetch(url, { method: init?.method ?? "GET", headers: init?.headers, body: init?.body });
+    const text = await response.text();
+    let body;
+    if (text) {
+        try {
+            body = JSON.parse(text);
+        }
+        catch {
+            body = text;
+        }
+    }
+    return { status: response.status, body };
+}
+async function observeGithub(fetchJson, url, token) {
+    try {
+        const response = await fetchJson(url, { method: "GET", headers: githubHeaders(token) });
+        return { kind: "response", status: response.status, body: response.body };
+    }
+    catch (error) {
+        return { kind: "error", message: errorMessage(error) };
+    }
+}
+async function tryExecutable(run, executable, args, options) {
+    try {
+        return { kind: "result", result: await run(executable, args, options) };
+    }
+    catch (error) {
+        return { kind: "error", message: errorMessage(error) };
+    }
+}
+function githubHeaders(token) {
+    // The token is a secret: it is sent to the provider but never included in
+    // reconciliation evidence or digests.
+    return {
+        Accept: "application/vnd.github+json",
+        "X-GitHub-Api-Version": "2022-11-28",
+        Authorization: `Bearer ${token}`
+    };
+}
+function buildResult(intent, outcome, detail, evidence, reconciledAt) {
+    return {
+        version: 1,
+        intentId: intent.intentId,
+        action: intent.action,
+        outcome,
+        detail,
+        evidenceDigest: sha256Canonical(evidence),
+        evidence,
+        reconciledAt: reconciledAt.toISOString()
+    };
+}
+function assertReconcilableIntent(intent) {
+    if (!intent || typeof intent !== "object" || intent.version !== 2 || typeof intent.intentId !== "string" || !intent.intentId.trim() || typeof intent.action !== "string") {
+        throw new Error("ACTION_RECONCILIATION_INTENT_INVALID: a version 2 ActionIntent with intentId and action is required.");
+    }
+}
+function asPayloadRecord(payload) {
+    if (!payload || typeof payload !== "object" || Array.isArray(payload))
+        return undefined;
+    return payload;
+}
+function nonEmptyString(value, trim = true) {
+    if (typeof value !== "string")
+        return undefined;
+    const text = trim ? value.trim() : value;
+    return text.length > 0 ? text : undefined;
+}
+function numberValue(value) {
+    return typeof value === "number" ? value : undefined;
+}
+function stringValue(value) {
+    return nonEmptyString(value);
+}
+function invalidPayloadEvidence(payload, invalidFields) {
+    return { invalidFields, payloadType: describedType(payload) };
+}
+function describedType(value) {
+    if (value === null)
+        return "null";
+    if (Array.isArray(value))
+        return "array";
+    return typeof value;
+}
+function normalizeApiBase(value) {
+    const configured = nonEmptyString(value);
+    return (configured ?? GITHUB_API_BASE_DEFAULT).replace(/\/+$/, "");
+}
+function encodeRepository(repository) {
+    return repository.split("/").map(encodeURIComponent).join("/");
+}
+function encodeRef(ref) {
+    return ref.split("/").map(encodeURIComponent).join("/");
+}
+function branchRefSha(body) {
+    const record = asPayloadRecord(body);
+    const object = record ? asPayloadRecord(record.object) : undefined;
+    return object ? nonEmptyString(object.sha) : undefined;
+}
+function parseLsRemote(output) {
+    const entries = [];
+    for (const line of output.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        const [sha, ref] = trimmed.split(/\s+/);
+        if (sha && ref)
+            entries.push({ sha, ref });
+    }
+    return entries;
+}
+function isValidGitRemote(remote) {
+    // Reject option-looking remotes and remote-helper URL schemes (`ext::` can
+    // execute a program). Real transports (ssh/https/file paths) never use `::`.
+    return !remote.startsWith("-") && !/\s/.test(remote) && !/^[a-z][a-z0-9+.-]*::/i.test(remote);
+}
+function isValidGitRef(ref) {
+    if (ref.startsWith("-") || ref.endsWith("/") || ref.endsWith(".") || ref.includes("//"))
+        return false;
+    if (ref.includes("..") || ref.includes("@{") || /[\x00-\x20~^:?*\\[]/.test(ref))
+        return false;
+    return true;
+}
+function snippet(value) {
+    const text = value.trim();
+    return text.length > MAX_SNIPPET_LENGTH ? `${text.slice(0, MAX_SNIPPET_LENGTH)}...` : text;
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=actionReconciliation.js.map

package/dist/releases/release-1790896196283-15710-31ca87e8/security/actionReconciliation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionReconciliation.js","sourceRoot":"","sources":["../../src/security/actionReconciliation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,aAAa,EAA2C,MAAM,qBAAqB,CAAC;AAqE7F,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AACzD,MAAM,yBAAyB,GAAG,oCAAoC,CAAC;AACvE,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,yCAAyC;AACzC,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAC9D,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,MAAsB,EACtB,OAAgB,EAChB,eAAmD,EAAE;IAErD,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IACrD,QAAQ,MAAM,CAAC,MAAgB,EAAE,CAAC;QAChC,KAAK,mBAAmB;YACtB,OAAO,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnE,KAAK,YAAY;YACf,OAAO,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7D,KAAK,UAAU;YACb,OAAO,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3D,KAAK,sBAAsB;YACzB,OAAO,2BAA2B,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChE,KAAK,4BAA4B;YAC/B,OAAO,gCAAgC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrE,KAAK,qBAAqB;YACxB,OAAO,0BAA0B,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/D,KAAK,wBAAwB;YAC3B,OAAO,6BAA6B,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClE;YACE,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC;IAC7H,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAoC;IAC/E,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IACzF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IAAY,EAAE,MAAsB,EAAE,OAAgB,EAAE,YAAoC;IAClI,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/I,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5F,IAAI,CAAC,cAAc,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAEhL,MAAM,GAAG,GAAG,cAAc,MAAM,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,wBAAwB,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;IACzJ,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/J,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAChL,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,yBAAyB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACzS,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,yBAAyB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACtM,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,WAAW,EAAE,EAAE,cAAc,EAAE,CAAC;IAC1F,OAAO,WAAW,CAAC,MAAM,EAAE,cAAc,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,uBAAuB,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;AAC5J,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,MAAsB,EAAE,OAAgB,EAAE,YAAoC;IAC5H,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/I,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;QAC1L,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;QACtI,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;QAChJ,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3M,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,WAAW,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,yBAAyB,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAChL,CAAC;IACD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,YAAY,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5D,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACzI,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;IAC/H,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5K,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACxI,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,YAAY,EAAE,YAAY,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IAChG,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;AACtJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAAsB,EAAE,OAAgB,EAAE,YAAoC;IAC1H,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAE/I,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,cAAc,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7D,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAChI,CAAC;IAED,MAAM,gBAAgB,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;IAC1I,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,+BAA+B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACvK,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/D,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACnQ,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACvG,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7F,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/I,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACnJ,CAAC;IACD,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC;IAChF,OAAO,WAAW,CAAC,MAAM,EAAE,WAAW,KAAK,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;AAC3I,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,MAAsB,EAAE,OAAgB,EAAE,YAAoC;IACvH,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAE/I,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QACzD,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAChI,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3I,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,OAAO,UAAU,gBAAgB,CAAC,UAAU,CAAC,kBAAkB,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAClG,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,wBAAwB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3J,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,iCAAiC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;QACxJ,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACnH,OAAO,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACvJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,sBAAsB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5I,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,8BAA8B,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;AACjK,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAC,MAAsB,EAAE,OAAgB,EAAE,YAAoC;IAC5H,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAE/I,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACxD,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAChI,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IACxF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACjJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,GAAG,OAAO,UAAU,gBAAgB,CAAC,UAAU,CAAC,UAAU,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IACzF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,wBAAwB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACjK,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,8BAA8B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACvK,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,iCAAiC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9J,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAyB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACxH,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QACrD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QACrD,OAAO,YAAY,KAAK,OAAO,IAAI,YAAY,KAAK,IAAI,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG;YACf,UAAU;YACV,IAAI,EAAE,aAAa;YACnB,IAAI;YACJ,OAAO;YACP,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,OAAO,CAAC,MAAM;YAC1B,iBAAiB,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI;YACpD,cAAc,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI;SAC9E,CAAC;QACF,OAAO,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,4BAA4B,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,gCAAgC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3K,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;AACvL,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,MAAsB,EAAE,OAAgB,EAAE,YAAoC;IACtH,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAE/I,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,QAAQ,GAA4B,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACnE,IAAI,UAAU;YAAE,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;QACjD,OAAO,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,CAAC,UAAU,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACvI,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9H,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,GAAG,OAAO,UAAU,gBAAgB,CAAC,UAAU,CAAC,WAAW,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC1F,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,wBAAwB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9I,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,8BAA8B,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACpJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,iCAAiC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3I,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAyB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACpL,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,QAAQ,GAAG;YACf,UAAU;YACV,MAAM;YACN,OAAO;YACP,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;YAC7B,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI;YAC9C,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI;SACxE,CAAC;QACF,OAAO,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,2BAA2B,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;AACpK,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,MAAsB,EAAE,OAAgB,EAAE,YAAoC;IACzH,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAChJ,CAAC;IACD,2CAA2C;IAC3C,EAAE;IACF,qEAAqE;IACrE,yEAAyE;IACzE,4DAA4D;IAC5D,gCAAgC;IAChC,4DAA4D;IAC5D,EAAE;IACF,uEAAuE;IACvE,oEAAoE;IACpE,4EAA4E;IAC5E,0EAA0E;IAC1E,sEAAsE;IACtE,+DAA+D;IAC/D,OAAO,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,0CAA0C,EAAE,EAAE,WAAW,EAAE,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;AAC9H,CAAC;AAED,SAAS,qBAAqB,CAAC,YAAgD;IAC7E,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACjD,OAAO;QACL,GAAG,EAAE,YAAY,CAAC,aAAa,IAAI,aAAa;QAChD,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,gBAAgB;QACrD,KAAK,EAAE,aAAa,IAAI,0BAA0B,EAAE;QACpD,GAAG,EAAE,YAAY,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAqC;IAChF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/G,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAa,CAAC;IAClB,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC;QAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,SAAuE,EAAE,GAAW,EAAE,KAAa;IAC9H,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAyB,EAAE,UAAkB,EAAE,IAAuB,EAAE,OAAuB;IAC1H,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,0EAA0E;IAC1E,sCAAsC;IACtC,OAAO;QACL,MAAM,EAAE,6BAA6B;QACrC,sBAAsB,EAAE,YAAY;QACpC,aAAa,EAAE,UAAU,KAAK,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAsB,EAAE,OAAsC,EAAE,MAAc,EAAE,QAAiC,EAAE,YAAkB;IACxJ,OAAO;QACL,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO;QACP,MAAM;QACN,cAAc,EAAE,eAAe,CAAC,QAAQ,CAAC;QACzC,QAAQ;QACR,YAAY,EAAE,YAAY,CAAC,WAAW,EAAE;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAsB;IACtD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzK,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAC;IAC1H,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACxF,OAAO,OAAwB,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAI,GAAG,IAAI;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACzC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgB,EAAE,aAAuB;IACvE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,OAAO,OAAO,KAAK,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,CAAC,UAAU,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,OAAO,GAAwC,EAAE,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,GAAG,IAAI,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,2EAA2E;IAC3E,6EAA6E;IAC7E,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,OAAO,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}