approval-md 0.0.1 → 0.1.0

package/dist/src/core/gate-window.js

@@ -0,0 +1,506 @@
+/**
+ * The open window (amended SPEC.md §5.2, APRV-214): a human-only, time-boxed
+ * suspension of the harness gate's POLICY, so the gate can be debugged from
+ * inside a session it would otherwise refuse everything to.
+ *
+ * ## Why this exists
+ *
+ * `cli/hook.ts` fails closed on every axis, which is right, and which means the
+ * moment the gate itself is broken (an unattested policy, a drifted
+ * attestation, a hung daemon, a dark channel) every command a session issues
+ * dies, including the ones a person would use to repair it. The only escape
+ * before this was hand-editing the hook out of `.claude/settings.json`: an
+ * ungated session nobody records, which is the exact failure this project
+ * exists to prevent.
+ *
+ * ## Where the state lives, and why it lives there
+ *
+ * In the log, as `gate.opened` / `gate.closed`, and NOWHERE else. The
+ * `.approval/env` precedent (`cli/init.ts`) states the rule this follows: a
+ * file the runtime reads on its own authority lets anything able to write that
+ * file act as the human. A window flag in a dotfile would be exactly that, and
+ * an agent that can write files is the party the window is a bypass for.
+ *
+ * The consequence is deliberate and is the property that keeps this safe: a log
+ * the hook cannot read, or cannot verify, yields NO window and the hook denies
+ * as it always did. The window suspends the policy; it never suspends the log.
+ *
+ * ## What is derived rather than written
+ *
+ * Nothing is appended when a window lapses. A reader derives the window from
+ * the latest `gate.opened`: it is open when no `gate.closed` names its seq and
+ * the moment of asking is before its expiry. Expiry is `ts` plus `duration`,
+ * both of which are on the record, and the runtime authored the `ts` at the
+ * write boundary (`core/clock.ts`), so an opener cannot author the length of
+ * their own window. `expires_at` rides along for a human reading the log; a
+ * record claiming one BEYOND `ts + duration` reads as the shorter of the two,
+ * and a duration over {@link MAX_WINDOW_MS} is clamped at read time as well as
+ * refused at write time. Every path through this file resolves an ambiguity by
+ * shortening the window, never by lengthening it.
+ *
+ * ## What this module does not do
+ *
+ * It does not decide anything about a command. The hook classifies inside an
+ * open window exactly as it does outside one, still denies `log.mutate`, still
+ * denies every class the policy reserves to human hands, and still denies a
+ * command the classifier cannot read. All this module offers is the derived
+ * window and the three appends, each through `core/log.ts`'s `appendEvent` with
+ * a compare-and-append precondition (§11.1 invariant 5).
+ *
+ * `core/gate.ts`'s `startHarnessExecution` is deliberately NOT reused for the
+ * bypass record: it refuses on an unattested policy, on manual, on the loop
+ * floor and on budget, which are the very things being bypassed. What is reused
+ * is the mechanism, `appendEvent` with `expectedHead` under a head-moved retry.
+ */
+import { tick } from "./clock.js";
+import {} from "./harness-version.js";
+import { attemptsOf, withHeadRetry } from "./head-retry.js";
+import { appendEvent, } from "./log.js";
+import { parseDuration } from "./policy-load.js";
+import { readVerifiedRecords } from "./state.js";
+/** What an open window suspends. One value at v0.1, matching the schema enum. */
+export const GATE_WINDOW_SCOPE = "hook";
+/** The duration `approval gate open` uses when none is asked for. */
+export const DEFAULT_WINDOW = "30m";
+/**
+ * The longest window anyone may open, enforced at BOTH ends: `openWindow`
+ * refuses a longer one, and {@link openGateWindow} clamps a record claiming one
+ * so that a hand-written `gate.opened` buys no more time than the ceremony
+ * would have granted.
+ *
+ * A day, because the window's purpose is one debugging session and because a
+ * bypass that outlives the person's attention is a bypass nobody is watching.
+ */
+export const MAX_WINDOW_MS = 24 * 60 * 60 * 1_000;
+/**
+ * How many times a bypass append re-derives its window after a `head-moved`
+ * refusal. The same reasoning as `core/head-retry.ts`'s, whose helper performs
+ * the loop: a moved head says the read was stale, never that the answer is no,
+ * and re-deriving from a fresh verified read cannot launder a refusal into an
+ * allow.
+ *
+ * One attempt more than the gate writers' three, and deliberately so: a bypass
+ * record is what lets a session run a command at all while the gate is being
+ * repaired, and the log it is contending with is the busy one that made the
+ * repair necessary.
+ */
+const HEAD_MOVED_ATTEMPTS = 4;
+/** Actors permitted to open or close a window. Narrower than the event schema. */
+const HUMAN_ACTOR = /^human:.+/u;
+/** Actors a bypass record may name: whoever the harness was running as. */
+const PRINCIPAL_ACTOR = /^(human|agent):.+/u;
+/**
+ * The verb-level refusal codes of the open window. **Frozen union**, in the
+ * same sense as `GATE_REFUSAL_CODES`, `EXECUTION_REFUSAL_CODES`,
+ * `AUDIT_REFUSAL_CODES`, `DARK_SESSION_CODES` and `HOOK_DENY_CODES`: a caller
+ * branches on these, so members are added and never repurposed (SPEC.md §11.1
+ * invariant 6, which this makes the sixth such union).
+ *
+ * Every one of them appends nothing.
+ */
+export const GATE_WINDOW_REFUSAL_CODES = [
+    /**
+     * The actor is not `human:`-prefixed. Opening a window is the one act that
+     * suspends the policy, so an agent able to perform it could authorize its own
+     * next command. Refused here in code, and again in `event.schema.json`.
+     */
+    "actor-not-human",
+    /** No reason was given. A bypass nobody stated a reason for cannot be reviewed. */
+    "gate-reason-required",
+    /**
+     * The duration is over {@link MAX_WINDOW_MS}, zero, negative, or unreadable.
+     * One code for the family because the repair is one sentence: ask for a
+     * shorter window, spelled the way SPEC.md §5.2 spells durations.
+     */
+    "gate-duration-too-long",
+    /** A window is already open. Close it, or wait for it to lapse. */
+    "gate-already-open",
+    /**
+     * No window is open. `close` says so rather than appending a record that
+     * closes nothing, and a bypass asked for with no window behind it at all says
+     * so rather than recording a bypass nothing authorized.
+     */
+    "gate-not-open",
+    /**
+     * The window a caller DECIDED under is gone by the time the bypass is
+     * recorded (APRV-294).
+     *
+     * Distinct from `gate-not-open`, and the difference is the fact each states.
+     * That one says there was no window to begin with, which is the ordinary
+     * closed gate. This one says a window stood when the verdict was formed and
+     * does not stand at the append: a human closed it, it lapsed, or a later
+     * `gate.opened` superseded the one the caller named. The refusal names the
+     * `gate.closed` seq that ended it, or the expiry it ran past, so a reviewer
+     * holding the log alone can place the boundary.
+     *
+     * The repair is a retry, and it is a retry of an ordinary gated tool call:
+     * nothing is appended here, nothing ran, and the next invocation derives the
+     * window from its own read and is answered by the policy where there is none.
+     * A refusal on this path is therefore not a failed execution and accrues no
+     * loop-safety streak (SPEC.md §10.2), because no execution was started for it.
+     */
+    "gate-window-closed",
+    /**
+     * Stdin is not a terminal (or `--json` was asked for). The ceremony is a
+     * person typing a word, and a prompt a pipe could answer is a ceremony a
+     * harness shell tool can perform.
+     */
+    "gate-stdin-not-tty",
+    /** The typed confirmation was not exactly `understood`. Includes EOF. */
+    "gate-confirmation-mismatch",
+    /** The log could not be opened. */
+    "log-unreadable",
+    /** The log's last line is truncated: a crashed write, repaired by a human. */
+    "log-torn-tail",
+    /** The chain does not verify, so no window may be derived from it. */
+    "log-corrupt",
+    /** The append itself was refused; `append` carries the writer's own code. */
+    "append-failed",
+];
+// ---------------------------------------------------------------------------
+// Derivation (pure)
+// ---------------------------------------------------------------------------
+function payloadOf(record) {
+    const payload = record.payload;
+    return typeof payload === "object" && payload !== null
+        ? payload
+        : {};
+}
+function stringField(payload, key) {
+    const value = payload[key];
+    return typeof value === "string" && value.length > 0 ? value : null;
+}
+function seqField(payload, key) {
+    const value = payload[key];
+    return typeof value === "number" && Number.isInteger(value) && value >= 1 ? value : null;
+}
+/** Milliseconds of an RFC 3339 instant, or `null` when it does not parse. */
+function millis(text) {
+    const parsed = Date.parse(text);
+    return Number.isNaN(parsed) ? null : parsed;
+}
+/**
+ * The window open at `now`, or `null`.
+ *
+ * Pure over the records it is given, so every caller (the hook, the CLI verb,
+ * `approval status`) derives the same fact from the same log and none of them
+ * reads a clock of its own.
+ *
+ * Only the LATEST `gate.opened` is considered. An older one that was never
+ * closed is not a second window: the ceremony refuses to open a second while
+ * one stands, so an unclosed older record is either lapsed or superseded, and
+ * treating it as live would let a stale record outlive the window a human
+ * actually opened.
+ *
+ * Every ambiguity resolves closed. An unreadable duration, a missing reason, a
+ * `ts` that does not parse: each yields `null` rather than a window nobody can
+ * state the bounds of.
+ */
+export function openGateWindow(records, now = Date.now()) {
+    const nowMs = typeof now === "number" ? now : now.getTime();
+    let opened = null;
+    for (const record of records) {
+        if (record.event === "gate.opened")
+            opened = record;
+    }
+    if (opened === null)
+        return null;
+    // A close naming this opening ends it, wherever in the log it sits.
+    for (const record of records) {
+        if (record.event !== "gate.closed")
+            continue;
+        if (seqField(payloadOf(record), "opened_seq") === opened.seq)
+            return null;
+    }
+    const payload = payloadOf(opened);
+    const reason = stringField(payload, "reason");
+    const durationText = stringField(payload, "duration");
+    if (reason === null || durationText === null)
+        return null;
+    if (stringField(payload, "scope") !== GATE_WINDOW_SCOPE)
+        return null;
+    const asked = parseDuration(durationText);
+    if (asked === null || asked <= 0)
+        return null;
+    // The clamp at READ time, not only at write time: a `gate.opened` that
+    // reached the log by some other route may claim a week, and it buys a day.
+    const durationMs = Math.min(asked, MAX_WINDOW_MS);
+    const openedMs = millis(opened.ts);
+    if (openedMs === null)
+        return null;
+    // The shorter of the two, always. `ts + duration` is what the runtime
+    // authored; `expires_at` is a claim, and a claim may only shorten.
+    const derived = openedMs + durationMs;
+    const claimedText = stringField(payload, "expires_at");
+    const claimed = claimedText === null ? null : millis(claimedText);
+    const expiresMs = claimed === null ? derived : Math.min(derived, claimed);
+    if (nowMs >= expiresMs)
+        return null;
+    let bypassCount = 0;
+    for (const record of records) {
+        if (record.event !== "gate.bypassed")
+            continue;
+        if (seqField(payloadOf(record), "opened_seq") === opened.seq)
+            bypassCount += 1;
+    }
+    return {
+        seq: opened.seq,
+        openedAt: opened.ts,
+        openedBy: opened.actor,
+        reason,
+        durationMs,
+        expiresAt: new Date(expiresMs).toISOString(),
+        bypassCount,
+    };
+}
+/** Milliseconds left on a window at `now`, floored at zero. */
+export function remainingMs(window, now = Date.now()) {
+    const nowMs = typeof now === "number" ? now : now.getTime();
+    const expiry = millis(window.expiresAt);
+    if (expiry === null)
+        return 0;
+    return Math.max(0, expiry - nowMs);
+}
+// ---------------------------------------------------------------------------
+// Shared plumbing
+// ---------------------------------------------------------------------------
+function refuse(code, message, append) {
+    return append === undefined ? { ok: false, code, message } : { ok: false, code, message, append };
+}
+function readRecords(logPath, schemaDir) {
+    const read = readVerifiedRecords(logPath, schemaDir === undefined ? {} : { schemaDir });
+    if (read.ok)
+        return { ok: true, records: read.records, head: read.head };
+    // The reader's three codes are this union's three codes, spelled identically:
+    // a caller that knows one vocabulary knows both, and nothing is flattened.
+    return refuse(read.code, read.message);
+}
+function appendOptionsOf(options, head) {
+    return {
+        ...(options.schemaDir === undefined ? {} : { schemaDir: options.schemaDir }),
+        ...options.append,
+        expectedHead: head,
+    };
+}
+/**
+ * Append `gate.opened`, after establishing that the actor is a human, the
+ * duration is inside the cap, and no window is already open.
+ *
+ * One `tick()` supplies BOTH the record's `ts` and its `expires_at`, so the two
+ * cannot disagree by a scheduling delay and the derived expiry is exactly the
+ * claimed one on a record this runtime wrote.
+ */
+export function openWindow(logPath, input, actor, options = {}) {
+    if (!HUMAN_ACTOR.test(actor)) {
+        return refuse("actor-not-human", `opening the gate requires a human actor matching ^human:.+, got ${JSON.stringify(actor)}; this is the one act that suspends the policy, so an agent must not perform it, and the log was left unchanged`);
+    }
+    const reason = input.reason.trim();
+    if (reason.length === 0) {
+        return refuse("gate-reason-required", "a window needs a reason (--reason): a bypass nobody stated a reason for is a bypass nobody can review, and the log was left unchanged");
+    }
+    if (!Number.isFinite(input.durationMs) || input.durationMs <= 0) {
+        return refuse("gate-duration-too-long", `--for ${JSON.stringify(input.durationText)} is not a positive duration; use a SPEC.md §5.2 duration such as 5m, 30m or 2h`);
+    }
+    if (input.durationMs > MAX_WINDOW_MS) {
+        return refuse("gate-duration-too-long", `--for ${JSON.stringify(input.durationText)} is longer than the 24h cap: a bypass that outlives the attention of the person who opened it is a bypass nobody is watching. Ask for a shorter window`);
+    }
+    const read = readRecords(logPath, options.schemaDir);
+    if (!read.ok)
+        return read;
+    const now = tick(options);
+    const nowMs = millis(now) ?? Date.now();
+    const standing = openGateWindow(read.records, nowMs);
+    if (standing !== null) {
+        return refuse("gate-already-open", `a window opened by ${standing.openedBy} at seq ${String(standing.seq)} is already open until ${standing.expiresAt}; close it with \`approval gate close\` or wait for it to lapse. Nothing was appended`);
+    }
+    const expiresAt = new Date(nowMs + input.durationMs).toISOString();
+    const appended = appendEvent(logPath, {
+        ts: now,
+        event: "gate.opened",
+        actor,
+        channel: "cli",
+        payload: {
+            expires_at: expiresAt,
+            duration: input.durationText,
+            reason,
+            scope: GATE_WINDOW_SCOPE,
+        },
+    }, appendOptionsOf(options, read.head));
+    if (!appended.ok) {
+        return refuse("append-failed", `the window was not opened: ${appended.error.code}: ${appended.error.message}`, appended.error);
+    }
+    return {
+        ok: true,
+        record: appended.record,
+        window: {
+            seq: appended.record.seq,
+            openedAt: appended.record.ts,
+            openedBy: actor,
+            reason,
+            durationMs: input.durationMs,
+            expiresAt,
+            bypassCount: 0,
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// close
+// ---------------------------------------------------------------------------
+/**
+ * Append `gate.closed` for whatever window stands.
+ *
+ * No confirmation anywhere on this path: closing only ever TIGHTENS, and a
+ * ceremony guarding the safe direction is a ceremony people learn to type past.
+ */
+export function closeWindow(logPath, actor, options = {}) {
+    if (!HUMAN_ACTOR.test(actor)) {
+        return refuse("actor-not-human", `closing the gate requires a human actor matching ^human:.+, got ${JSON.stringify(actor)}; the pair is one ceremony and both halves are the human's. The log was left unchanged`);
+    }
+    const read = readRecords(logPath, options.schemaDir);
+    if (!read.ok)
+        return read;
+    const now = tick(options);
+    const standing = openGateWindow(read.records, millis(now) ?? Date.now());
+    if (standing === null) {
+        return refuse("gate-not-open", "no window is open, so there is nothing to close; a lapsed window appends nothing when it lapses and needs no closing record. The log was left unchanged");
+    }
+    const note = options.note?.trim();
+    const appended = appendEvent(logPath, {
+        ts: now,
+        event: "gate.closed",
+        actor,
+        channel: "cli",
+        payload: {
+            opened_seq: standing.seq,
+            ...(note === undefined || note.length === 0 ? {} : { note }),
+        },
+    }, appendOptionsOf(options, read.head));
+    if (!appended.ok) {
+        return refuse("append-failed", `the window was not closed and is still open until ${standing.expiresAt}: ${appended.error.code}: ${appended.error.message}`, appended.error);
+    }
+    return { ok: true, record: appended.record, closed: standing };
+}
+/**
+ * Record a bypassed tool call, BEFORE its allow is printed.
+ *
+ * The order is record-then-allow for the same reason `recordUnattended`'s is
+ * (§11.1 invariant 8): a bypassed command that ran and left no record is the
+ * one state this whole feature must not be able to reach, so an append failure
+ * is the caller's deny.
+ *
+ * The window is re-derived on every attempt past the first. A head that moved
+ * says the read was stale, so the next attempt re-reads, re-derives, and appends
+ * against the head it saw; a window that lapsed or was closed refuses rather
+ * than recording a bypass nothing authorized. Which refusal depends on what the
+ * caller stated: with a {@link GateBypassDecision} in hand the refusal is
+ * `gate-window-closed` and names the record or the expiry that ended the window,
+ * and with none it is the historical `gate-not-open`.
+ */
+export function recordGateBypass(logPath, input, actor, options = {}, decided) {
+    if (!PRINCIPAL_ACTOR.test(actor)) {
+        return refuse("actor-not-human", `a bypass record must name the principal the harness ran as, matching ^(human|agent):.+, got ${JSON.stringify(actor)}; the log was left unchanged`);
+    }
+    if (input.classes.length === 0) {
+        return refuse("gate-not-open", "a bypass record must name at least one class: a call with no class is the gate's own CLI, which the window has nothing to say about");
+    }
+    // The one implementation, shared with `core/gate.ts` and `core/execute.ts`
+    // since APRV-236. The ceiling stays this module's own — a bypass append is
+    // the record that lets a debugging session run at all, so it is worth one
+    // more attempt than the gate's writers get — and the mechanism is no longer
+    // a second copy of the loop.
+    //
+    // APRV-294: the caller's read seeds the FIRST attempt and no other. A
+    // `head-moved` retry exists precisely because the head it was going to chain
+    // onto has moved, so re-using the stale read would be appending against a
+    // precondition already known to be wrong.
+    let seed = decided?.read;
+    return withHeadRetry(attemptsOf(options.retryOnHeadMoved, HEAD_MOVED_ATTEMPTS), () => {
+        const use = seed;
+        seed = undefined;
+        return attemptBypass(logPath, input, actor, options, decided?.openedSeq ?? null, use);
+    });
+}
+/**
+ * The window a caller decided under is not the window the log now shows
+ * (APRV-294): say which of the three ways it ended, naming the record or the
+ * instant that ended it.
+ *
+ * Every branch appends nothing and every branch is the same verdict for the
+ * caller (deny, and retry through the ordinary gated path). What differs is the
+ * fact stated, and the fact is what a reviewer holding the log needs: a close is
+ * a person's act with a seq, a lapse is arithmetic over the opening record, and
+ * a supersession is a second window somebody opened.
+ */
+function windowEnded(records, openedSeq, standing) {
+    const retry = "Nothing was appended and nothing ran, so this refusal is not a failed execution and accrues no loop-safety streak (SPEC.md §10.2); run the command again and it is answered by the policy, or by whatever window stands then.";
+    for (const record of records) {
+        if (record.event !== "gate.closed")
+            continue;
+        if (seqField(payloadOf(record), "opened_seq") !== openedSeq)
+            continue;
+        return refuse("gate-window-closed", `the window opened at seq ${String(openedSeq)} was closed by ${record.actor} at gate.closed seq ${String(record.seq)}, between the read this call's verdict was decided on and the record that would have authorized it. ${retry}`);
+    }
+    if (standing !== null) {
+        return refuse("gate-window-closed", `the window opened at seq ${String(openedSeq)} is no longer the standing one: a later window (seq ${String(standing.seq)}, opened by ${standing.openedBy}) supersedes it, and a bypass records the window it was decided under or none at all. ${retry}`);
+    }
+    for (const record of records) {
+        if (record.seq !== openedSeq)
+            continue;
+        const claimed = stringField(payloadOf(record), "expires_at");
+        return refuse("gate-window-closed", `the window opened at seq ${String(openedSeq)} lapsed${claimed === null ? "" : ` (expiry ${claimed})`} between the read this call's verdict was decided on and the record that would have authorized it; a lapse appends nothing when it arrives, which is why the log names no closing record. ${retry}`);
+    }
+    return refuse("gate-window-closed", `the verified log carries no gate.opened at seq ${String(openedSeq)}, so the window this call's verdict was decided under cannot be established from the records the append read. ${retry}`);
+}
+function attemptBypass(logPath, input, actor, options, 
+/** The window the caller decided under, or `null` when it stated none. */
+openedSeq, 
+/** That decision's own verified read, on the first attempt only. */
+seed) {
+    const read = seed === undefined
+        ? readRecords(logPath, options.schemaDir)
+        : { ok: true, records: [...seed.records], head: seed.head };
+    if (!read.ok)
+        return read;
+    const now = tick(options);
+    const window = openGateWindow(read.records, millis(now) ?? Date.now());
+    if (openedSeq !== null && (window === null || window.seq !== openedSeq)) {
+        // APRV-294. The caller reached a verdict under a named window, and these
+        // records do not carry it: say which window ended and how, rather than
+        // reporting the absence of any window at all.
+        return windowEnded(read.records, openedSeq, window);
+    }
+    if (window === null) {
+        return refuse("gate-not-open", "no window is open, so nothing may be bypassed; the hook denies as it does with no window at all. The log was left unchanged");
+    }
+    const appended = appendEvent(logPath, {
+        ts: now,
+        event: "gate.bypassed",
+        actor,
+        payload: {
+            opened_seq: window.seq,
+            tool: input.tool,
+            summary: input.summary,
+            classes: [...input.classes],
+            payload_hash: input.payloadHash,
+            ...(input.sessionId === undefined ? {} : { session_id: input.sessionId }),
+            ...(input.toolUseId === undefined ? {} : { tool_use_id: input.toolUseId }),
+            ...(input.cwd === undefined ? {} : { cwd: input.cwd }),
+            // APRV-227: both halves or neither.
+            ...(input.harness === undefined
+                ? {}
+                : {
+                    harness: input.harness.harness,
+                    harness_version: input.harness.harness_version,
+                }),
+        },
+    }, appendOptionsOf(options, read.head));
+    if (!appended.ok) {
+        return refuse("append-failed", `the bypass was not recorded, so nothing may run: ${appended.error.code}: ${appended.error.message}`, appended.error);
+    }
+    return {
+        ok: true,
+        record: appended.record,
+        window: { ...window, bypassCount: window.bypassCount + 1 },
+    };
+}
+//# sourceMappingURL=gate-window.js.map

package/dist/src/core/gate-window.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-window.js","sourceRoot":"","sources":["../../../src/core/gate-window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,IAAI,EAAqB,MAAM,YAAY,CAAC;AACrD,OAAO,EAA0B,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACL,WAAW,GAIZ,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,iFAAiF;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,qEAAqE;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,kFAAkF;AAClF,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC,2EAA2E;AAC3E,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC;;;;OAIG;IACH,iBAAiB;IACjB,mFAAmF;IACnF,sBAAsB;IACtB;;;;OAIG;IACH,wBAAwB;IACxB,mEAAmE;IACnE,mBAAmB;IACnB;;;;OAIG;IACH,eAAe;IACf;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB;IACpB;;;;OAIG;IACH,oBAAoB;IACpB,yEAAyE;IACzE,4BAA4B;IAC5B,mCAAmC;IACnC,gBAAgB;IAChB,8EAA8E;IAC9E,eAAe;IACf,sEAAsE;IACtE,aAAa;IACb,6EAA6E;IAC7E,eAAe;CACP,CAAC;AAqDX,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,SAAS,CAAC,MAAmB;IACpC,MAAM,OAAO,GAAI,MAAgC,CAAC,OAAO,CAAC;IAC1D,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QACpD,CAAC,CAAE,OAAmC;QACtC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,WAAW,CAAC,OAAgC,EAAE,GAAW;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgC,EAAE,GAAW;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3F,CAAC;AAED,6EAA6E;AAC7E,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA+B,EAC/B,GAAG,GAAkB,IAAI,CAAC,GAAG,EAAE;IAE/B,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAE5D,IAAI,MAAM,GAAuB,IAAI,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa;YAAE,MAAM,GAAG,MAAM,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEjC,oEAAoE;IACpE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa;YAAE,SAAS;QAC7C,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,KAAK,MAAM,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;IAC5E,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,MAAM,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAErE,MAAM,KAAK,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEnC,sEAAsE;IACtE,mEAAmE;IACnE,MAAM,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;IACtC,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1E,IAAI,KAAK,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAEpC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,eAAe;YAAE,SAAS;QAC/C,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,KAAK,MAAM,CAAC,GAAG;YAAE,WAAW,IAAI,CAAC,CAAC;IACjF,CAAC;IAED,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,QAAQ,EAAE,MAAM,CAAC,KAAK;QACtB,MAAM;QACN,UAAU;QACV,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAC5C,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,WAAW,CAAC,MAAkB,EAAE,GAAG,GAAkB,IAAI,CAAC,GAAG,EAAE;IAC7E,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,SAAS,MAAM,CACb,IAA2B,EAC3B,OAAe,EACf,MAAoB;IAEpB,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACpG,CAAC;AAOD,SAAS,WAAW,CAAC,OAAe,EAAE,SAA6B;IACjE,MAAM,IAAI,GAAG,mBAAmB,CAC9B,OAAO,EACP,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAC7C,CAAC;IACF,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACzE,8EAA8E;IAC9E,2EAA2E;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CACtB,OAA0B,EAC1B,IAA0C;IAE1C,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,GAAG,OAAO,CAAC,MAAM;QACjB,YAAY,EAAE,IAAI;KACnB,CAAC;AACJ,CAAC;AAgBD;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,KAAsB,EACtB,KAAa,EACb,OAAO,GAAsB,EAAE;IAE/B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CACX,iBAAiB,EACjB,mEAAmE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iHAAiH,CAC1M,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CACX,sBAAsB,EACtB,uIAAuI,CACxI,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;QAChE,OAAO,MAAM,CACX,wBAAwB,EACxB,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,gFAAgF,CAC5H,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,GAAG,aAAa,EAAE,CAAC;QACrC,OAAO,MAAM,CACX,wBAAwB,EACxB,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,wJAAwJ,CACpM,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,MAAM,CACX,mBAAmB,EACnB,sBAAsB,QAAQ,CAAC,QAAQ,WAAW,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,0BAA0B,QAAQ,CAAC,SAAS,uFAAuF,CAC1M,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,WAAW,CAC1B,OAAO,EACP;QACE,EAAE,EAAE,GAAG;QACP,KAAK,EAAE,aAAa;QACpB,KAAK;QACL,OAAO,EAAE,KAAK;QACd,OAAO,EAAE;YACP,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,KAAK,CAAC,YAAY;YAC5B,MAAM;YACN,KAAK,EAAE,iBAAiB;SACzB;KACF,EACD,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CACpC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,MAAM,CACX,eAAe,EACf,8BAA8B,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAC9E,QAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE;YACN,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG;YACxB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE;YAC5B,QAAQ,EAAE,KAAK;YACf,MAAM;YACN,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS;YACT,WAAW,EAAE,CAAC;SACf;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,KAAa,EACb,OAAO,GAA0C,EAAE;IAEnD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CACX,iBAAiB,EACjB,mEAAmE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,wFAAwF,CACjL,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,MAAM,CACX,eAAe,EACf,yJAAyJ,CAC1J,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,WAAW,CAC1B,OAAO,EACP;QACE,EAAE,EAAE,GAAG;QACP,KAAK,EAAE,aAAa;QACpB,KAAK;QACL,OAAO,EAAE,KAAK;QACd,OAAO,EAAE;YACP,UAAU,EAAE,QAAQ,CAAC,GAAG;YACxB,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;SAC7D;KACF,EACD,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CACpC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,MAAM,CACX,eAAe,EACf,qDAAqD,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAC5H,QAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACjE,CAAC;AAmED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,KAAsB,EACtB,KAAa,EACb,OAAO,GAAsB,EAAE,EAC/B,OAA4B;IAE5B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CACX,iBAAiB,EACjB,+FAA+F,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,8BAA8B,CACnJ,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CACX,eAAe,EACf,qIAAqI,CACtI,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,6BAA6B;IAC7B,EAAE;IACF,sEAAsE;IACtE,6EAA6E;IAC7E,0EAA0E;IAC1E,0CAA0C;IAC1C,IAAI,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;IACzB,OAAO,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE;QACnF,MAAM,GAAG,GAAG,IAAI,CAAC;QACjB,IAAI,GAAG,SAAS,CAAC;QACjB,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,WAAW,CAClB,OAA+B,EAC/B,SAAiB,EACjB,QAA2B;IAE3B,MAAM,KAAK,GACT,+NAA+N,CAAC;IAElO,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa;YAAE,SAAS;QAC7C,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,KAAK,SAAS;YAAE,SAAS;QACtE,OAAO,MAAM,CACX,oBAAoB,EACpB,4BAA4B,MAAM,CAAC,SAAS,CAAC,kBAAkB,MAAM,CAAC,KAAK,uBAAuB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,uGAAuG,KAAK,EAAE,CACnO,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,MAAM,CACX,oBAAoB,EACpB,4BAA4B,MAAM,CAAC,SAAS,CAAC,uDAAuD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,QAAQ,yFAAyF,KAAK,EAAE,CACzP,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;YAAE,SAAS;QACvC,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;QAC7D,OAAO,MAAM,CACX,oBAAoB,EACpB,4BAA4B,MAAM,CAAC,SAAS,CAAC,UAAU,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,OAAO,GAAG,6LAA6L,KAAK,EAAE,CAC1S,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CACX,oBAAoB,EACpB,kDAAkD,MAAM,CAAC,SAAS,CAAC,iHAAiH,KAAK,EAAE,CAC5L,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAe,EACf,KAAsB,EACtB,KAAa,EACb,OAA0B;AAC1B,0EAA0E;AAC1E,SAAwB;AACxB,oEAAoE;AACpE,IAAgC;IAEhC,MAAM,IAAI,GACR,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC;QACzC,CAAC,CAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAiB,CAAC;IAChF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,8CAA8C;QAC9C,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,MAAM,CACX,eAAe,EACf,6HAA6H,CAC9H,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAC1B,OAAO,EACP;QACE,EAAE,EAAE,GAAG;QACP,KAAK,EAAE,eAAe;QACtB,KAAK;QACL,OAAO,EAAE;YACP,UAAU,EAAE,MAAM,CAAC,GAAG;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;YAC3B,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;YACzE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;YAC1E,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YACtD,oCAAoC;YACpC,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;gBAC7B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;oBAC9B,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe;iBAC/C,CAAC;SACP;KACF,EACD,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CACpC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,MAAM,CACX,eAAe,EACf,oDAAoD,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EACpG,QAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE;KAC3D,CAAC;AACJ,CAAC"}