agentic-engineering-harness 0.8.8 → 0.8.10

package/dist/releases/release-1790997634971-16248-5dd74527/security/executionLease.js

@@ -0,0 +1,304 @@
+import { createHash } from "node:crypto";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { currentOperationContext, currentControllerEpoch, loadOperation, registerOperationAgent } from "../operations/state.js";
+import { candidateRevisionsEqual } from "../operations/v2Contracts.js";
+import { isCanonicalRole, roleProfile } from "../participants/index.js";
+import { createCapabilityLease } from "./authorityV2.js";
+import { assertParticipantScratchLeaseV1, compileParticipantScratchLease, participantScratchResourceName } from "../architecture/executionIdentity.js";
+import { operationResourceRegistryFile, registerOperationResource } from "../runtime/operationResources.js";
+import { sha256Canonical } from "../core/digest.js";
+/**
+ * Materialize one private temp directory only for a role whose frozen ToolPack
+ * includes repository writes and command execution. The path is registered as
+ * an operation-owned staging resource before it is projected into a provider.
+ */
+export async function provisionParticipantScratch(root, selection, authority, participantGeneration, options = {}) {
+    assertExecutionAuthority(authority);
+    if (selection.role === "Semantic Assessor")
+        return undefined;
+    const scratchResource = participantScratchResourceName(selection.role, authority.participantId);
+    if (!scratchResource)
+        return undefined;
+    const profile = roleProfile(selection.role);
+    if (!profile.authority.canWrite || !profile.toolPack.required.includes("repository-write") || !profile.toolPack.required.includes("command-execute") || selection.permissions.write !== "allow" || selection.permissions.shell !== "allow") {
+        throw new Error("PARTICIPANT_SCRATCH_AUTHORITY_DENIED: the frozen role and effective write/execute permissions do not authorize private scratch.");
+    }
+    if (!participantGeneration?.trim())
+        throw new Error("PARTICIPANT_SCRATCH_IDENTITY_REQUIRED: participant generation is required before scratch creation.");
+    const context = currentOperationContext();
+    if (context.id !== authority.operationId)
+        throw new Error("PARTICIPANT_SCRATCH_OPERATION_MISMATCH: scratch can be materialized only for the active authorized operation.");
+    const stateRoot = context.controlRoot ?? root;
+    const operation = await loadOperation(stateRoot, authority.operationId);
+    const candidate = operation.candidateRevision;
+    const controllerEpoch = currentControllerEpoch(operation);
+    if (!candidate || candidate.identityDigest !== authority.candidateDigest || !candidateRevisionsEqual(candidate, authority.candidateRevision) || controllerEpoch !== authority.controllerEpoch || !operation.operationExecutionRevision) {
+        throw new Error("PARTICIPANT_SCRATCH_IDENTITY_STALE: scratch request does not match the current operation, candidate, or controller epoch.");
+    }
+    const identityDigest = sha256Canonical({
+        operationId: operation.id,
+        operationExecutionRevision: operation.operationExecutionRevision,
+        candidateRevision: candidate.revision,
+        candidateDigest: candidate.identityDigest,
+        controllerEpoch,
+        participantId: authority.participantId,
+        participantGeneration
+    });
+    const directory = await fs.mkdtemp(path.join(os.tmpdir(), `aeh-scratch-${identityDigest.slice(0, 20)}-`));
+    await fs.chmod(directory, 0o700);
+    let resourceId;
+    try {
+        const resource = await registerOperationResource(stateRoot, operation.id, {
+            kind: "staging-root",
+            identity: directory,
+            path: directory,
+            label: `private participant scratch for ${authority.participantId}`,
+            reclaim: "REMOVE_ON_TERMINAL",
+            owner: {
+                source: "controller-registration",
+                candidateDigest: candidate.identityDigest,
+                operationExecutionRevision: operation.operationExecutionRevision,
+                controllerEpoch,
+                participantId: authority.participantId,
+                participantGeneration
+            }
+        });
+        resourceId = resource.resourceId;
+    }
+    catch (error) {
+        await fs.rm(directory, { recursive: true, force: true }).catch(() => undefined);
+        throw error;
+    }
+    const scope = [directory, `${directory}/*`, `${directory}/**`];
+    const now = options.now ?? new Date();
+    const hardDeadlineMs = operation.resolvedOperationPolicy?.executionLiveness.hardDeadlineMs ?? 8 * 60 * 60_000;
+    const createdAtMs = Date.parse(operation.createdAt);
+    const inheritedDeadlineAt = operation.origin ? Date.parse(operation.origin.rootHardDeadlineAt) : Number.POSITIVE_INFINITY;
+    if (!Number.isFinite(createdAtMs) || !Number.isFinite(inheritedDeadlineAt) && inheritedDeadlineAt !== Number.POSITIVE_INFINITY)
+        throw new Error("PARTICIPANT_SCRATCH_DEADLINE_INVALID: operation creation or inherited hard-deadline timestamp is invalid.");
+    const hardDeadlineAt = Math.min(createdAtMs + hardDeadlineMs, inheritedDeadlineAt);
+    const hardRemainingMs = hardDeadlineAt - now.getTime();
+    if (hardRemainingMs <= 0)
+        throw new Error("OPERATION_HARD_DEADLINE_REACHED: participant scratch authority cannot be issued beyond the frozen Owner deadline.");
+    const hardRemainingSeconds = Math.max(1, Math.floor(hardRemainingMs / 1000));
+    const leaseSeconds = Math.min(Math.max(1, options.leaseSeconds ?? hardRemainingSeconds), hardRemainingSeconds);
+    const expiresAt = new Date(Math.min(now.getTime() + leaseSeconds * 1000, hardDeadlineAt)).toISOString();
+    const scratchLeases = ["read", "write"].map((capability) => {
+        const request = {
+            version: 1,
+            requestId: `request:${operation.id}:${authority.participantId}:${capability}:scratch:${identityDigest.slice(0, 20)}`,
+            operationId: operation.id,
+            participantId: authority.participantId,
+            ...(candidate.projectId ? { projectId: candidate.projectId } : {}),
+            candidate,
+            capability: { capability, paths: scope },
+            requestedEnvelope: { version: 1, level: 50, capabilities: [capability], scope },
+            requestedAt: now.toISOString(),
+            expiresAt
+        };
+        return createCapabilityLease(request, { operationId: operation.id, projectId: candidate.projectId, candidate, now });
+    });
+    const scratchLease = compileParticipantScratchLease({
+        resourceId,
+        path: directory,
+        operationId: operation.id,
+        operationExecutionRevision: operation.operationExecutionRevision,
+        candidateRevision: candidate.revision,
+        candidateDigest: candidate.identityDigest,
+        controllerEpoch,
+        participantId: authority.participantId,
+        participantGeneration,
+        capabilityLeases: scratchLeases
+    });
+    const nextAuthority = {
+        ...authority,
+        leases: [...authority.leases, ...scratchLeases],
+        scratchLease
+    };
+    assertExecutionAuthority(nextAuthority);
+    return { authority: nextAuthority, scratchLease };
+}
+/** Reattach only the same generation's durable scratch lease after a controller recovery. */
+export async function attachParticipantScratchAuthority(root, authority, scratchLease) {
+    assertExecutionAuthority(authority);
+    assertParticipantScratchLeaseV1(scratchLease);
+    const context = currentOperationContext();
+    if (context.id !== authority.operationId || scratchLease.operationId !== authority.operationId || scratchLease.participantId !== authority.participantId || scratchLease.candidateDigest !== authority.candidateDigest || scratchLease.controllerEpoch !== authority.controllerEpoch)
+        throw new Error("PARTICIPANT_SCRATCH_IDENTITY_MISMATCH: recovered scratch does not belong to the current participant authority.");
+    const stateRoot = context.controlRoot ?? root;
+    const operation = await loadOperation(stateRoot, authority.operationId);
+    if (!operation.candidateRevision || operation.candidateRevision.identityDigest !== scratchLease.candidateDigest || operation.candidateRevision.revision !== scratchLease.candidateRevision || operation.operationExecutionRevision !== scratchLease.operationExecutionRevision || currentControllerEpoch(operation) !== scratchLease.controllerEpoch)
+        throw new Error("PARTICIPANT_SCRATCH_IDENTITY_STALE: recovered scratch belongs to an earlier operation execution identity.");
+    if (operation.participants[authority.participantId]?.executionBinding?.scratchLease?.digest !== scratchLease.digest)
+        throw new Error("PARTICIPANT_SCRATCH_OWNERSHIP_REJECTED: durable operation state does not bind this scratch lease to the participant generation.");
+    const registry = JSON.parse(await fs.readFile(operationResourceRegistryFile(stateRoot, authority.operationId), "utf8"));
+    const resource = registry.resources?.find((entry) => entry.resourceId === scratchLease.resourceId);
+    if (!resource || resource.kind !== "staging-root" || resource.identity !== scratchLease.path || resource.path !== scratchLease.path || resource.operationId !== authority.operationId || resource.owner?.participantId !== authority.participantId || resource.owner?.participantGeneration !== scratchLease.participantGeneration || resource.state !== "OWNED")
+        throw new Error("PARTICIPANT_SCRATCH_OWNERSHIP_REJECTED: resource ledger does not prove exact participant ownership of the recovered directory.");
+    const resolved = await fs.realpath(scratchLease.path);
+    const rootPath = path.resolve(os.tmpdir());
+    const relative = path.relative(rootPath, resolved);
+    if (resolved !== path.resolve(scratchLease.path) || relative === "" || relative.startsWith("..") || path.isAbsolute(relative) || !path.basename(resolved).startsWith("aeh-scratch-"))
+        throw new Error("PARTICIPANT_SCRATCH_PATH_REJECTED: recovered path is not the exact AEH-owned temp directory.");
+    const stat = await fs.lstat(resolved);
+    if (!stat.isDirectory() || stat.isSymbolicLink() || (stat.mode & 0o077) !== 0)
+        throw new Error("PARTICIPANT_SCRATCH_PATH_REJECTED: recovered directory permissions or filesystem identity changed.");
+    const next = {
+        ...authority,
+        leases: [...authority.leases, ...scratchLease.capabilityLeases],
+        scratchLease
+    };
+    assertExecutionAuthority(next);
+    return next;
+}
+/** Compile short-lived launch authority from the current operation state. */
+export async function prepareExecutionAuthority(root, selection, options = {}) {
+    const selectedRole = selection.role;
+    if (!isCanonicalRole(selectedRole)) {
+        throw new Error(`V2_AUTHORITY_DENIED: selected role '${String(selectedRole)}' has no registered canonical RoleProfile.`);
+    }
+    const profile = roleProfile(selectedRole);
+    const capabilities = requestedCapabilities(selection);
+    assertRoleCapabilityCeiling(profile, capabilities);
+    if (selection.permissions.gitWrite === "allow") {
+        // Git mutation permission is projected as command-specific shell access by
+        // some runtimes, so it must fit the same profile ceiling as source writes
+        // and command execution even though the legacy lease taxonomy has no
+        // dedicated Git capability.
+        assertRoleCapabilityCeiling(profile, ["write", "execute"]);
+    }
+    if (!capabilities.length) {
+        throw new Error(`V2_AUTHORITY_DENIED: role '${profile.role}' has no granted execution capabilities.`);
+    }
+    const context = currentOperationContext();
+    if (!context.id) {
+        if (options.required)
+            throw new Error("V2_AUTHORITY_REQUIRED: bounded worker execution requires a managed operation.");
+        return undefined;
+    }
+    const stateRoot = context.controlRoot ?? root;
+    const operation = await loadOperation(stateRoot, context.id);
+    if (!operation.candidateRevision) {
+        if (options.required)
+            throw new Error(`V2_AUTHORITY_REQUIRED: operation '${context.id}' has no managed candidate revision.`);
+        return undefined;
+    }
+    const candidate = operation.candidateRevision;
+    const participantId = options.participantId?.trim() || deterministicParticipantId(context.id, selection.logicalAgent, options.phase);
+    const priorAgent = operation.agents?.find((agent) => agent.id === participantId);
+    const priorRole = operation.participants[participantId]?.role ?? priorAgent?.role;
+    if ((operation.participants[participantId] || priorAgent) && priorRole !== selection.role) {
+        throw new Error(`V2_AUTHORITY_DENIED: participant '${participantId}' is not registered for selected role '${selection.role}'.`);
+    }
+    if (!operation.participants[participantId] && !priorAgent) {
+        await registerOperationAgent(stateRoot, context.id, { id: participantId, logicalAgent: selection.logicalAgent, role: selection.role, phase: options.phase, transport: selection.transport });
+    }
+    const current = await loadOperation(stateRoot, context.id);
+    const participantRole = current.participants[participantId]?.role ?? current.agents?.find((agent) => agent.id === participantId)?.role;
+    if (participantRole !== selection.role) {
+        throw new Error(`V2_AUTHORITY_DENIED: participant '${participantId}' is not registered for selected role '${selection.role}'.`);
+    }
+    const now = options.now ?? new Date();
+    const hardDeadlineMs = current.resolvedOperationPolicy?.executionLiveness.hardDeadlineMs ?? 8 * 60 * 60_000;
+    const createdAtMs = Date.parse(current.createdAt);
+    const inheritedDeadlineAt = current.origin ? Date.parse(current.origin.rootHardDeadlineAt) : Number.POSITIVE_INFINITY;
+    if (!Number.isFinite(createdAtMs) || !Number.isFinite(inheritedDeadlineAt) && inheritedDeadlineAt !== Number.POSITIVE_INFINITY)
+        throw new Error("EXECUTION_AUTHORITY_DEADLINE_INVALID: operation creation or inherited hard-deadline timestamp is invalid.");
+    const hardDeadlineAt = Math.min(createdAtMs + hardDeadlineMs, inheritedDeadlineAt);
+    const hardRemainingMs = hardDeadlineAt - now.getTime();
+    if (hardRemainingMs <= 0)
+        throw new Error("OPERATION_HARD_DEADLINE_REACHED: no participant authority may be issued beyond the frozen Owner deadline.");
+    const hardRemainingSeconds = Math.max(1, Math.floor(hardRemainingMs / 1000));
+    const leaseSeconds = Math.min(Math.max(1, options.leaseSeconds ?? hardRemainingSeconds), hardRemainingSeconds);
+    const expiresAt = new Date(Math.min(now.getTime() + leaseSeconds * 1000, hardDeadlineAt)).toISOString();
+    const envelope = { version: 1, level: 50, capabilities };
+    const leases = capabilities.map((capability) => {
+        const request = {
+            version: 1,
+            requestId: `request:${context.id}:${participantId}:${capability}:${options.phase ?? "work"}`,
+            operationId: context.id,
+            participantId,
+            ...(current.candidateRevision?.projectId ? { projectId: current.candidateRevision.projectId } : {}),
+            candidate,
+            capability,
+            requestedEnvelope: envelope,
+            requestedAt: now.toISOString(),
+            expiresAt
+        };
+        return createCapabilityLease(request, { operationId: context.id, projectId: candidate.projectId, candidate, now });
+    });
+    return { version: 1, operationId: context.id, participantId, projectId: candidate.projectId, candidateRevision: candidate, candidateDigest: candidate.identityDigest, controllerEpoch: currentControllerEpoch(current), leases };
+}
+export function requestedCapabilities(selection) {
+    const capabilities = selection.permissions.read === "deny" ? [] : ["read"];
+    if (selection.permissions.write === "allow")
+        capabilities.push("write");
+    if (selection.permissions.shell === "allow")
+        capabilities.push("execute");
+    if (selection.permissions.network === "allow")
+        capabilities.push("network");
+    if (selection.permissions.delegate === "allow")
+        capabilities.push("delegate");
+    return capabilities;
+}
+function assertRoleCapabilityCeiling(profile, capabilities) {
+    const maximum = new Set(profile.maxCapabilities);
+    const withinCeiling = (capability) => {
+        switch (capability) {
+            case "read": return profile.authority.canRead && maximum.has("read");
+            case "write": return profile.authority.canWrite && maximum.has("write");
+            case "execute": return profile.authority.canExecute && maximum.has("execute");
+            // The legacy network permission exposes read-only research tools. It is
+            // bounded by the role's research capability until network actions get a
+            // separate precise capability in the ToolActionGate.
+            case "network": return maximum.has("research");
+            case "delegate": return maximum.has("delegate") && profile.delegation.allowed;
+            case "spawn": return maximum.has("delegate") && profile.delegation.allowed;
+        }
+    };
+    const denied = capabilities.filter((capability) => !withinCeiling(capability));
+    if (denied.length) {
+        throw new Error(`V2_AUTHORITY_DENIED: role '${profile.role}' cannot receive capabilities outside its compiled RoleProfile ceiling: ${denied.join(", ")}.`);
+    }
+}
+export function assertExecutionAuthority(value, now = new Date()) {
+    if (!value || typeof value !== "object")
+        throw new Error("V2_AUTHORITY_REQUIRED: execution authority is missing.");
+    const authority = value;
+    if (authority.version !== 1 || !authority.operationId || !authority.participantId || !authority.candidateDigest || !authority.candidateDigest.match(/^[a-f0-9]{64}$/) || !Array.isArray(authority.leases) || authority.leases.length === 0) {
+        throw new Error("V2_AUTHORITY_INVALID: execution authority is malformed.");
+    }
+    if (!Number.isSafeInteger(authority.controllerEpoch) || (authority.controllerEpoch ?? -1) < 0)
+        throw new Error("V2_AUTHORITY_INVALID: execution authority has no controller epoch.");
+    const candidate = authority.leases[0]?.candidate;
+    if (!candidate)
+        throw new Error("V2_AUTHORITY_INVALID: execution authority has no candidate-bound lease.");
+    if (candidate.identityDigest !== authority.candidateDigest)
+        throw new Error("V2_AUTHORITY_INVALID: authority candidate digest does not match its candidate.");
+    for (const lease of authority.leases) {
+        if (lease.version !== 1 || lease.operationId !== authority.operationId || lease.participantId !== authority.participantId || !candidateRevisionsEqual(lease.candidate, candidate)) {
+            throw new Error("V2_AUTHORITY_INVALID: capability lease is not bound to the execution authority.");
+        }
+        if (new Date(lease.expiresAt).getTime() <= now.getTime())
+            throw new Error("V2_AUTHORITY_EXPIRED: capability lease has expired.");
+    }
+    if (authority.scratchLease) {
+        const scratch = authority.scratchLease;
+        assertParticipantScratchLeaseV1(scratch);
+        if (scratch.operationId !== authority.operationId || scratch.participantId !== authority.participantId || scratch.candidateDigest !== authority.candidateDigest || scratch.controllerEpoch !== authority.controllerEpoch)
+            throw new Error("V2_AUTHORITY_INVALID: scratch lease is outside the operation, participant, candidate, or controller epoch.");
+        const paths = [scratch.path, `${scratch.path}/*`, `${scratch.path}/**`].sort();
+        for (const capability of ["read", "write"]) {
+            const lease = authority.leases.find((candidateLease) => candidateLease.capability === capability && scratch.capabilityLeases.some((scratchCapabilityLease) => scratchCapabilityLease.leaseId === candidateLease.leaseId));
+            if (!lease || lease.envelope.scope?.join("\0") !== paths.join("\0"))
+                throw new Error(`V2_AUTHORITY_INVALID: scratch ${capability} lease is missing or not limited to the owned scratch path.`);
+        }
+    }
+}
+export function deterministicParticipantId(operationId, logicalAgent, phase = "work") {
+    const digest = createHash("sha256").update(`${operationId}\0${logicalAgent}\0${phase}`).digest("hex").slice(0, 16);
+    return `participant:${digest}`;
+}
+//# sourceMappingURL=executionLease.js.map

package/dist/releases/release-1790997634971-16248-5dd74527/security/executionLease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionLease.js","sourceRoot":"","sources":["../../src/security/executionLease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChI,OAAO,EAAE,uBAAuB,EAA4B,MAAM,8BAA8B,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAA2E,MAAM,kBAAkB,CAAC;AAClI,OAAO,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,8BAA8B,EAAkC,MAAM,sCAAsC,CAAC;AACvL,OAAO,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC5G,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAuBpD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,SAAkC,EAClC,SAA+B,EAC/B,qBAA6B,EAC7B,UAAiD,EAAE;IAEnD,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,SAAS,CAAC;IAC7D,MAAM,eAAe,GAAG,8BAA8B,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;IAChG,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,KAAK,OAAO,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC3O,MAAM,IAAI,KAAK,CAAC,iIAAiI,CAAC,CAAC;IACrJ,CAAC;IACD,IAAI,CAAC,qBAAqB,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAC;IAE1J,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,+GAA+G,CAAC,CAAC;IAC3K,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,CAAC;IAC9C,MAAM,eAAe,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,CAAC,eAAe,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,SAAS,CAAC,iBAAiB,CAAC,IAAI,eAAe,KAAK,SAAS,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,0BAA0B,EAAE,CAAC;QACvO,MAAM,IAAI,KAAK,CAAC,2HAA2H,CAAC,CAAC;IAC/I,CAAC;IAED,MAAM,cAAc,GAAG,eAAe,CAAC;QACrC,WAAW,EAAE,SAAS,CAAC,EAAE;QACzB,0BAA0B,EAAE,SAAS,CAAC,0BAA0B;QAChE,iBAAiB,EAAE,SAAS,CAAC,QAAQ;QACrC,eAAe,EAAE,SAAS,CAAC,cAAc;QACzC,eAAe;QACf,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,qBAAqB;KACtB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1G,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACjC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE;YACxE,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,mCAAmC,SAAS,CAAC,aAAa,EAAE;YACnE,OAAO,EAAE,oBAAoB;YAC7B,KAAK,EAAE;gBACL,MAAM,EAAE,yBAAyB;gBACjC,eAAe,EAAE,SAAS,CAAC,cAAc;gBACzC,0BAA0B,EAAE,SAAS,CAAC,0BAA0B;gBAChE,eAAe;gBACf,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,qBAAqB;aACtB;SACF,CAAC,CAAC;QACH,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,GAAG,SAAS,IAAI,EAAE,GAAG,SAAS,KAAK,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,cAAc,GAAG,SAAS,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IAC9G,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,mBAAmB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAC1H,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,KAAK,MAAM,CAAC,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAC;IAC7P,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,cAAc,EAAE,mBAAmB,CAAC,CAAC;IACnF,MAAM,eAAe,GAAG,cAAc,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IACvD,IAAI,eAAe,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mHAAmH,CAAC,CAAC;IAC/J,MAAM,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC/G,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,YAAY,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACxG,MAAM,aAAa,GAAI,CAAC,MAAM,EAAE,OAAO,CAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACpE,MAAM,OAAO,GAAwB;YACnC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,WAAW,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,aAAa,IAAI,UAAU,YAAY,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YACpH,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,SAAS;YACT,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE;YACxC,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE;YAC/E,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;YAC9B,SAAS;SACV,CAAC;QACF,OAAO,qBAAqB,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,8BAA8B,CAAC;QAClD,UAAU;QACV,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,SAAS,CAAC,EAAE;QACzB,0BAA0B,EAAE,SAAS,CAAC,0BAA0B;QAChE,iBAAiB,EAAE,SAAS,CAAC,QAAQ;QACrC,eAAe,EAAE,SAAS,CAAC,cAAc;QACzC,eAAe;QACf,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,qBAAqB;QACrB,gBAAgB,EAAE,aAAa;KAChC,CAAC,CAAC;IACH,MAAM,aAAa,GAAyB;QAC1C,GAAG,SAAS;QACZ,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC;QAC/C,YAAY;KACb,CAAC;IACF,wBAAwB,CAAC,aAAa,CAAC,CAAC;IACxC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AACpD,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,IAAY,EACZ,SAA+B,EAC/B,YAAuC;IAEvC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACpC,+BAA+B,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,WAAW,IAAI,YAAY,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,YAAY,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa,IAAI,YAAY,CAAC,eAAe,KAAK,SAAS,CAAC,eAAe,IAAI,YAAY,CAAC,eAAe,KAAK,SAAS,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC,CAAC;IACxZ,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IACxE,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,SAAS,CAAC,iBAAiB,CAAC,cAAc,KAAK,YAAY,CAAC,eAAe,IAAI,SAAS,CAAC,iBAAiB,CAAC,QAAQ,KAAK,YAAY,CAAC,iBAAiB,IAAI,SAAS,CAAC,0BAA0B,KAAK,YAAY,CAAC,0BAA0B,IAAI,sBAAsB,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAC;IACnd,IAAI,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,KAAK,YAAY,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iIAAiI,CAAC,CAAC;IACxQ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAmD,CAAC;IAC1K,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,YAAY,CAAC,UAAU,CAAC,CAAC;IACnG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAK,QAAQ,CAAC,KAA6C,EAAE,aAAa,KAAK,SAAS,CAAC,aAAa,IAAK,QAAQ,CAAC,KAA6C,EAAE,qBAAqB,KAAK,YAAY,CAAC,qBAAqB,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,gIAAgI,CAAC,CAAC;IACtkB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IACtS,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAC;IACrM,MAAM,IAAI,GAAyB;QACjC,GAAG,SAAS;QACZ,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,YAAY,CAAC,gBAAgB,CAAC;QAC/D,YAAY;KACb,CAAC;IACF,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAY,EACZ,SAAkC,EAClC,UAAqC,EAAE;IAEvC,MAAM,YAAY,GAAY,SAAS,CAAC,IAAI,CAAC;IAC7C,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,YAAY,CAAC,4CAA4C,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACtD,2BAA2B,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,SAAS,CAAC,WAAW,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC/C,2EAA2E;QAC3E,0EAA0E;QAC1E,qEAAqE;QACrE,4BAA4B;QAC5B,2BAA2B,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,0CAA0C,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,OAAO,GAAG,uBAAuB,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,IAAI,OAAO,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;QACvH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,CAAC,EAAE,sCAAsC,CAAC,CAAC;QAC7H,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,CAAC;IAC9C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,0BAA0B,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrI,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,IAAI,IAAI,UAAU,EAAE,IAAI,CAAC;IAClF,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,IAAI,SAAS,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,qCAAqC,aAAa,0CAA0C,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC;IAClI,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1D,MAAM,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/L,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,aAAa,CAAC,EAAE,IAAI,CAAC;IACvI,IAAI,eAAe,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,aAAa,0CAA0C,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC;IAClI,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,cAAc,GAAG,OAAO,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IAC5G,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;IACtH,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,KAAK,MAAM,CAAC,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAC;IAC7P,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,cAAc,EAAE,mBAAmB,CAAC,CAAC;IACnF,MAAM,eAAe,GAAG,cAAc,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IACvD,IAAI,eAAe,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAC;IACvJ,MAAM,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC/G,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,YAAY,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACxG,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAC7C,MAAM,OAAO,GAAwB;YACnC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,WAAW,OAAO,CAAC,EAAE,IAAI,aAAa,IAAI,UAAU,IAAI,OAAO,CAAC,KAAK,IAAI,MAAM,EAAE;YAC5F,WAAW,EAAE,OAAO,CAAC,EAAG;YACxB,aAAa;YACb,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,SAAS;YACT,UAAU;YACV,iBAAiB,EAAE,QAAQ;YAC3B,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;YAC9B,SAAS;SACV,CAAC;QACF,OAAO,qBAAqB,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,EAAG,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,CAAC,cAAc,EAAE,eAAe,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;AACnO,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAkC;IACtE,MAAM,YAAY,GAAuB,SAAS,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC/F,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,KAAK,OAAO;QAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,KAAK,OAAO;QAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1E,IAAI,SAAS,CAAC,WAAW,CAAC,OAAO,KAAK,OAAO;QAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5E,IAAI,SAAS,CAAC,WAAW,CAAC,QAAQ,KAAK,OAAO;QAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9E,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,2BAA2B,CAClC,OAAuC,EACvC,YAA6C;IAE7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,CAAC,UAA4B,EAAW,EAAE;QAC9D,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrE,KAAK,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC,SAAS,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxE,KAAK,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC,SAAS,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9E,wEAAwE;YACxE,wEAAwE;YACxE,qDAAqD;YACrD,KAAK,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC/C,KAAK,UAAU,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAC9E,KAAK,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,2EAA2E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7J,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACvE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACnH,MAAM,SAAS,GAAG,KAAsC,CAAC;IACzD,IAAI,SAAS,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3O,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACrL,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAA4C,CAAC;IACpF,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC3G,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAC9J,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YAClL,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC;QACvC,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAC;QACxV,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/E,KAAK,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,KAAK,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,sBAAsB,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,KAAK,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1N,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,UAAU,6DAA6D,CAAC,CAAC;QACjM,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,WAAmB,EAAE,YAAoB,EAAE,KAAK,GAAG,MAAM;IAClG,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,WAAW,KAAK,YAAY,KAAK,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnH,OAAO,eAAe,MAAM,EAAE,CAAC;AACjC,CAAC"}