approval-md 0.0.1 → 0.2.0

package/dist/src/core/budgets.js

@@ -0,0 +1,449 @@
+/**
+ * Budget evaluation from the log (SPEC.md §5.2, §8).
+ *
+ * "An action must pass its class limits AND global budgets. Budget consumption
+ * is computed from the log, never from a mutable counter." This module is that
+ * computation: given the records of the append-only log, the limits the policy
+ * matcher already resolved, the action about to be admitted, and the moment of
+ * evaluation, it returns a per-limit verdict and one conjunctive answer.
+ *
+ * Pure and deterministic: no I/O, no clock, no randomness, no caching. The
+ * evaluation timestamp is a **required parameter** — a budget decision that
+ * depended on ambient time could not be replayed from the log, and replay is
+ * the whole point of computing consumption from the log in the first place.
+ * This module also does not re-run class matching: the gate hands in the
+ * already-matched limits and the pattern that produced them.
+ *
+ * ## THE CONSUMPTION CONTRACT — what APRV-16 (the gate) MUST honor
+ *
+ * Budgets meter **authorization**, not completion. An authorized action
+ * consumes budget whether or not it ultimately executes, because the human's
+ * decision is the commitment; a runtime that only charged completed actions
+ * would let a crashed or hung executor mint unlimited authorizations.
+ *
+ * The evaluator therefore reads consumption from exactly two event types, and
+ * the gate MUST write them accordingly:
+ *
+ * 1. `approval.granted` — the manual path. A human said yes; budget is spent.
+ * 2. `execution.started` — the supervised/autonomous paths. Under the amended
+ *    §6.3 those paths emit no approval events, so the record that authorizes
+ *    execution *is* the start event.
+ *
+ * To avoid charging a manual action twice (granted, then started), an
+ * `execution.started` is counted only when the window contains no
+ * `approval.granted` bearing the same `action_key`.
+ *
+ * **The gate MUST record `payload.est_cost_usd` (a decimal USD string since
+ * APRV-121, a JSON number in records written before it) and
+ * `payload.class` (the action's dotted class string) on every
+ * `approval.granted` and `execution.started` event it appends.** Those two
+ * payload fields are the entire input to USD accounting and class scoping.
+ * A consuming event with no usable `est_cost_usd` contributes **0** to USD
+ * sums but still counts as **1** action for `daily_actions` — an authorization
+ * with no declared cost is still an authorization. A consuming event with no
+ * usable `payload.class` is invisible to class-scoped limits (it cannot be
+ * shown to belong to the class) but is still counted by global budgets, which
+ * charge every authorization regardless of class.
+ *
+ * Nothing else consumes. `approval.rejected`, `approval.expired`,
+ * `approval.revoked`, and `approval.withdrawn` (APRV-106) consume nothing: an
+ * authorization that was refused, lapsed, or never asked for in the end was
+ * never a commitment. `execution.completed` and `execution.failed`
+ * consume nothing either — they report on a commitment already charged at
+ * authorization time, and charging them again would double-count.
+ *
+ * ## The rolling window (SPEC.md §5.2, rolling-window amendment)
+ *
+ * A `daily` limit is evaluated over the 24 hours preceding the evaluation
+ * moment, not over a calendar day. An event consumes iff
+ *
+ *     evaluationTs - 24h  <  event.ts  <=  evaluationTs
+ *
+ * — half-open at the bottom, closed at the top. An event exactly 24h old has
+ * aged out; an event stamped at the evaluation instant is in. The bound is
+ * half-open on exactly one side so that consecutive 24h windows tile the
+ * timeline without double-counting a boundary event. Timestamps are compared
+ * via `Date.parse` on the RFC 3339 strings the schema already guarantees.
+ *
+ * Rolling, not calendar: a burst that straddles midnight must not have its own
+ * tripwire reset underneath it.
+ *
+ * ## Fail-closed
+ *
+ * A limit the evaluator does not understand cannot be proven satisfied, so it
+ * fails: an unknown limit name yields `pass: false` with an explanatory `note`.
+ * The same applies to an unparseable evaluation timestamp (no window can be
+ * computed) and to class-scoped rolling limits offered without the class
+ * pattern that scopes their consumption. Silence is never a grant.
+ *
+ * ## What this module does NOT evaluate (APRV-173)
+ *
+ * `max_pending` and `requests_per_hour` (SPEC.md §5.2) are request-volume
+ * limits: they cap the approver's queue rather than the world's exposure, they
+ * are counted from `approval.requested` rather than from authorizations, and
+ * `core/intake-limits.ts` evaluates them at intake. They are skipped by name
+ * here rather than refused as unknown limits, and the skip is exactly the two
+ * names that module owns, read from its own exported list. Neither module's
+ * silence widens a ceiling: every limit name is evaluated by one of them, or
+ * fails closed as unknown in this one.
+ */
+import { microsToUsdString, usdNumberToMicros, usdToMicros, } from "./money.js";
+import { isIntakeLimitName } from "./intake-limits.js";
+import { matchesPattern } from "./policy-match.js";
+/** Length of the rolling `daily` window: 24 hours, in milliseconds. */
+export const WINDOW_MS = 24 * 60 * 60 * 1000;
+/** Event types that authorize execution and therefore consume budget. */
+export const CONSUMING_EVENTS = ["approval.granted", "execution.started"];
+/** Known class-limit names (SPEC.md §5.1). Anything else fails closed. */
+const PER_ACTION_USD = "per_action_usd";
+const DAILY_USD = "daily_usd";
+const DAILY_ACTIONS = "daily_actions";
+/** The verdict label for the envelope's own cap (SPEC.md §6.2 `budget`). */
+export const TASK_MAX_COST_USD = "budget.max_cost_usd";
+/** An internal figure as the string a verdict reports. */
+function render(value, unit) {
+    return unit === "usd" ? microsToUsdString(value) : String(Math.round(value));
+}
+/** A payload field read defensively: the log's payload shape is open at v0.1. */
+function payloadOf(record) {
+    const payload = record.payload;
+    return typeof payload === "object" && payload !== null ? payload : {};
+}
+/**
+ * `payload.est_cost_usd` in micro-USD when it is a usable amount, else `0`.
+ *
+ * Both forms are read: the canonical decimal string a post-APRV-121 gate writes,
+ * and the JSON number every record written before it carries. A historical
+ * record therefore feeds this computation exactly as it did before the change.
+ */
+function costOf(record) {
+    return usdToMicros(payloadOf(record)["est_cost_usd"]) ?? 0;
+}
+/** `payload.class` when it is a string, else `null` (invisible to class limits). */
+function classOf(record) {
+    const value = payloadOf(record)["class"];
+    return typeof value === "string" ? value : null;
+}
+/** The action's declared cost in micro-USD, or `0` when it declares none. */
+function requestedCost(action) {
+    return usdToMicros(action.est_cost_usd) ?? 0;
+}
+/**
+ * Records inside the rolling window, in log order.
+ *
+ * A record whose `ts` cannot be parsed is **kept**: it cannot be shown to lie
+ * outside the window, and the fail-closed reading of an unplaceable
+ * authorization is that it counts.
+ */
+function withinWindow(records, evaluationMs) {
+    const floor = evaluationMs - WINDOW_MS;
+    return records.filter((record) => {
+        const ms = Date.parse(record.ts);
+        if (Number.isNaN(ms))
+            return true;
+        return ms > floor && ms <= evaluationMs;
+    });
+}
+/**
+ * The authorizations inside the window (see the consumption contract above).
+ *
+ * `approval.granted` always authorizes. `execution.started` authorizes only
+ * when no `approval.granted` in the window carries the same `action_key`,
+ * which is the manual-path double-count guard. A start event with no
+ * `action_key` cannot be tied to a grant, so it counts — the schema requires
+ * `action_key` on execution events, and the fail-closed reading of a record
+ * that somehow lacks one is that it is its own authorization.
+ */
+function authorizations(windowed) {
+    const grantedKeys = new Set();
+    for (const record of windowed) {
+        if (record.event === "approval.granted" && record.action_key !== undefined) {
+            grantedKeys.add(record.action_key);
+        }
+    }
+    return windowed.filter((record) => {
+        if (record.event === "approval.granted")
+            return true;
+        if (record.event !== "execution.started")
+            return false;
+        return record.action_key === undefined || !grantedKeys.has(record.action_key);
+    });
+}
+/**
+ * One limit's verdict, computed in integers and reported as strings.
+ *
+ * `consumed`, `requested` and `ceiling` arrive in the verdict's unit —
+ * micro-USD for money, authorizations for counts — so `remaining` is an exact
+ * integer subtraction and `pass` is an exact comparison.
+ */
+function verdict(limit, scope, window, consumed, requested, ceiling, unit, note) {
+    const remaining = ceiling - consumed - requested;
+    const base = {
+        limit,
+        scope,
+        window,
+        consumed: render(consumed, unit),
+        requested: render(requested, unit),
+        remaining: render(remaining, unit),
+        pass: remaining >= 0,
+    };
+    return note === undefined ? base : { ...base, note };
+}
+/** A fail-closed refusal: nothing measured, nothing granted, reason attached. */
+function refuse(limit, scope, note) {
+    return {
+        limit,
+        scope,
+        window: "per-action",
+        consumed: "0",
+        requested: "0",
+        remaining: "0",
+        pass: false,
+        note,
+    };
+}
+/**
+ * A policy ceiling as an exact integer in the limit's own unit, or `null` when
+ * the policy wrote something no comparison can be made against.
+ *
+ * The USD conversion is the documented one from `core/money.ts`: policy files
+ * are YAML written by a human (`daily_usd: 100`, `per_action_usd: 0.25`), so
+ * their ceilings are JSON numbers by construction and are pinned to a micro
+ * here, once, before any arithmetic touches them.
+ */
+function ceilingOf(value, unit) {
+    if (unit === "count") {
+        return Number.isFinite(value) && value >= 0 ? Math.round(value) : null;
+    }
+    return usdNumberToMicros(value);
+}
+function tally(events) {
+    let usd = 0;
+    for (const record of events)
+        usd += costOf(record);
+    return { usd, actions: events.length };
+}
+/**
+ * Evaluate every applicable budget limit against the log.
+ *
+ * Conjunctive (SPEC.md §5.2): `pass` is true only when every verdict passes.
+ * Verdicts are emitted class limits first (limit names ascending), then global
+ * budgets (scope name ascending, limit name ascending within a scope), so the
+ * list is byte-stable regardless of policy key order.
+ *
+ * `records` may be the whole log; only the rolling window is consulted, and the
+ * caller is never asked to pre-filter (a caller that filtered wrongly would
+ * silently widen the budget).
+ */
+export function evaluateBudgets(records, scope, action, evaluationTs) {
+    const classLimits = scope.classLimits ?? {};
+    const classLimitNames = Object.keys(classLimits).sort();
+    const globalBudgets = scope.globalBudgets ?? {};
+    const globalScopeNames = Object.keys(globalBudgets).sort();
+    const evaluationMs = Date.parse(evaluationTs);
+    if (Number.isNaN(evaluationMs)) {
+        // No parseable evaluation moment means no window, and an unmeasurable
+        // budget is a refused one. Every applicable limit fails, and says why.
+        const verdicts = [];
+        const why = `evaluation timestamp "${evaluationTs}" is not a parseable RFC 3339 instant; the rolling window cannot be computed, so no limit can be proven satisfied`;
+        // APRV-173: the request-volume names are skipped on this path too, so a
+        // limit is owned by exactly one module on every path rather than on most of
+        // them. They are not admitted by the omission — `core/intake-limits.ts`
+        // fails them closed against the same unparseable instant, and it runs
+        // first.
+        for (const name of classLimitNames) {
+            if (isIntakeLimitName(name))
+                continue;
+            verdicts.push(refuse(name, "class", why));
+        }
+        for (const scopeName of globalScopeNames) {
+            const budget = globalBudgets[scopeName] ?? {};
+            for (const name of Object.keys(budget).sort()) {
+                if (isIntakeLimitName(name))
+                    continue;
+                verdicts.push(refuse(`${scopeName}.${name}`, "global", why));
+            }
+        }
+        if (verdicts.length === 0) {
+            // No limits apply at all: nothing to prove, nothing to refuse.
+            return { pass: true, verdicts };
+        }
+        return { pass: false, verdicts };
+    }
+    const windowed = authorizations(withinWindow(records, evaluationMs));
+    const requested = requestedCost(action);
+    const verdicts = [];
+    // --- Class limits (the matched rule's `limits`) -------------------------
+    if (classLimitNames.length > 0) {
+        const pattern = scope.classPattern;
+        // Class-scoped consumption counts authorizations of the SAME RULE PATTERN.
+        const classEvents = windowed.filter((record) => {
+            if (pattern === null)
+                return false;
+            const recordClass = classOf(record);
+            return recordClass !== null && matchesPattern(pattern, recordClass);
+        });
+        const classConsumption = tally(classEvents);
+        for (const name of classLimitNames) {
+            const declared = classLimits[name];
+            if (declared === undefined)
+                continue;
+            // APRV-173. The request-volume names of SPEC.md §5.2 are not budget
+            // limits and are not unknown ones either: they cap the approver's QUEUE
+            // rather than the world's exposure, they are counted from a different set
+            // of events, and `core/intake-limits.ts` evaluates them at intake. Passed
+            // over here rather than refused, because a policy that declares the
+            // vocabulary §5.2 blesses must not have every one of its requests refused
+            // `budget-exceeded` by the module that does not own it. The two skip
+            // lists are complements: that module evaluates exactly these names and
+            // ignores every other, so no limit falls between the two.
+            if (isIntakeLimitName(name))
+                continue;
+            if (name === PER_ACTION_USD || name === DAILY_USD || name === DAILY_ACTIONS) {
+                const unit = name === DAILY_ACTIONS ? "count" : "usd";
+                const ceiling = ceilingOf(declared, unit);
+                if (ceiling === null) {
+                    verdicts.push(refuse(name, "class", `class limit "${name}" is not a finite non-negative number; a limit that cannot be compared cannot be proven satisfied`));
+                    continue;
+                }
+                if (name === PER_ACTION_USD) {
+                    verdicts.push(verdict(name, "class", "per-action", 0, requested, ceiling, unit));
+                    continue;
+                }
+                if (scope.classPattern === null) {
+                    verdicts.push(refuse(name, "class", `class limit "${name}" was supplied without the class pattern that scopes its consumption; the window cannot be attributed, so the limit cannot be proven satisfied`));
+                    continue;
+                }
+                const consumed = name === DAILY_USD ? classConsumption.usd : classConsumption.actions;
+                const add = name === DAILY_USD ? requested : 1;
+                verdicts.push(verdict(name, "class", "rolling-24h", consumed, add, ceiling, unit));
+                continue;
+            }
+            verdicts.push(refuse(name, "class", `unknown class limit "${name}"; this evaluator understands ${PER_ACTION_USD}, ${DAILY_USD}, and ${DAILY_ACTIONS} only, and a limit it cannot evaluate cannot be proven satisfied`));
+        }
+    }
+    // --- Global budgets (`policy.budgets`) ---------------------------------
+    // Every named scope is evaluated, not just `global`: SPEC.md §5.1 permits
+    // additional named scopes sharing the `global` shape, and a budget the
+    // author wrote down but the runtime skipped would be a ceiling that silently
+    // does not exist. Each charges every authorization in the window regardless
+    // of class — that is what makes it global.
+    if (globalScopeNames.length > 0) {
+        const globalConsumption = tally(windowed);
+        for (const scopeName of globalScopeNames) {
+            const budget = globalBudgets[scopeName];
+            if (budget === undefined)
+                continue;
+            const record = budget;
+            for (const name of Object.keys(record).sort()) {
+                // APRV-173, the global half of the same division of labour: a scope's
+                // `max_pending` is a queue ceiling evaluated by `core/intake-limits.ts`.
+                if (isIntakeLimitName(name))
+                    continue;
+                const declared = record[name];
+                const label = `${scopeName}.${name}`;
+                const unit = name === DAILY_ACTIONS ? "count" : "usd";
+                const ceiling = typeof declared === "number" ? ceilingOf(declared, unit) : null;
+                if (ceiling === null) {
+                    verdicts.push(refuse(label, "global", `budget "${label}" is not a finite non-negative number; a limit that cannot be compared cannot be proven satisfied`));
+                    continue;
+                }
+                if (name === DAILY_USD) {
+                    verdicts.push(verdict(label, "global", "rolling-24h", globalConsumption.usd, requested, ceiling, unit));
+                    continue;
+                }
+                if (name === DAILY_ACTIONS) {
+                    verdicts.push(verdict(label, "global", "rolling-24h", globalConsumption.actions, 1, ceiling, unit));
+                    continue;
+                }
+                verdicts.push(refuse(label, "global", `unknown budget limit "${name}"; this evaluator understands ${DAILY_USD} and ${DAILY_ACTIONS} only, and a limit it cannot evaluate cannot be proven satisfied`));
+            }
+        }
+    }
+    return { pass: verdicts.every((entry) => entry.pass), verdicts };
+}
+// ---------------------------------------------------------------------------
+// The envelope's own cap (SPEC.md §6.2 `budget.max_cost_usd`) — S2
+// ---------------------------------------------------------------------------
+/**
+ * The registered envelope's `budget.max_cost_usd` for `task`, or `null`.
+ *
+ * Read from the **log**, not from the task file: the file may have been edited
+ * since registration, and an agent that could raise its own cap by editing
+ * frontmatter after the fact would be authoring the ceiling it is judged by.
+ * `register` copies the envelope's `budget` block into the `task.registered`
+ * payload for exactly this read. The last registration wins, matching
+ * `findDeclaration` in `core/execute.ts`.
+ *
+ * A cap that is not a finite non-negative number is `null` — absent rather than
+ * zero. The schema already refuses those shapes at the write boundary, and
+ * inventing a $0 ceiling for a malformed one would refuse every action of the
+ * task with a message about money nobody wrote down.
+ */
+export function taskMaxCostUsd(records, task) {
+    let found = null;
+    for (const record of records) {
+        if (record.event !== "task.registered" || record.task !== task)
+            continue;
+        const budget = payloadOf(record)["budget"];
+        if (typeof budget !== "object" || budget === null)
+            continue;
+        const cap = usdToMicros(budget["max_cost_usd"]);
+        if (cap !== null)
+            found = cap;
+    }
+    return found === null ? null : microsToUsdString(found);
+}
+/**
+ * Evaluate the task's own cap: does admitting `action` keep the SUM of this
+ * task's authorized `est_cost_usd` at or under `maxCostUsd`?
+ *
+ * Commitment-based and consumption-identical to {@link evaluateBudgets}: the
+ * same two event types authorize (`approval.granted`, and `execution.started`
+ * only where no grant carries the same `action_key`), so a manual action that is
+ * granted and then started is charged once. The only differences are scope —
+ * events of *this task* — and window: there is none. A task cap is a lifetime
+ * total, so an envelope that says `max_cost_usd: 0.5` cannot be spent twice by
+ * waiting a day.
+ *
+ * `evaluationTs` is accepted for symmetry with the windowed evaluator and to
+ * keep every budget call site shaped alike; it selects no window here and the
+ * verdict does not depend on it.
+ */
+export function evaluateTaskBudget(records, task, maxCostUsd, action, _evaluationTs) {
+    const ceiling = usdToMicros(maxCostUsd);
+    if (ceiling === null) {
+        return refuse(TASK_MAX_COST_USD, "task", `the task's own \`budget.max_cost_usd\` is not a usable amount; a cap that cannot be compared cannot be proven satisfied`);
+    }
+    const consumed = tally(authorizations(records.filter((record) => record.task === task))).usd;
+    return verdict(TASK_MAX_COST_USD, "task", "task-total", consumed, requestedCost(action), ceiling, "usd");
+}
+/**
+ * Every applicable budget, conjunctively: class limits, global budgets, and the
+ * task envelope's own cap.
+ *
+ * This is the function the three enforcement points call (`gate.request`,
+ * `gate.decide`'s grant path, `execute.startExecution`), so the envelope cap is
+ * checked at intake, at grant, and at execution start — the same three moments
+ * policy budgets are checked, because a cap enforced at only one of them is a
+ * cap a caller can route around by choosing a different door.
+ *
+ * Verdict order is class limits, then global budgets, then the task cap: the
+ * existing byte-stable order with one deterministic addition at the end.
+ * `task` may be `null` for a call site that has no task in hand, in which case
+ * the cap simply does not apply.
+ */
+export function evaluateBudgetsWithTask(records, scope, action, evaluationTs, task) {
+    const base = evaluateBudgets(records, scope, action, evaluationTs);
+    if (task === null)
+        return base;
+    const cap = taskMaxCostUsd(records, task);
+    if (cap === null)
+        return base;
+    const verdicts = [
+        ...base.verdicts,
+        evaluateTaskBudget(records, task, cap, action, evaluationTs),
+    ];
+    return { pass: verdicts.every((entry) => entry.pass), verdicts };
+}
+//# sourceMappingURL=budgets.js.map

package/dist/src/core/budgets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budgets.js","sourceRoot":"","sources":["../../../src/core/budgets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AAIH,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,GAEZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,uEAAuE;AACvE,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,kBAAkB,EAAE,mBAAmB,CAAU,CAAC;AAsFnF,0EAA0E;AAC1E,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,SAAS,GAAG,WAAW,CAAC;AAC9B,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAavD,0DAA0D;AAC1D,SAAS,MAAM,CAAC,KAAa,EAAE,IAAgB;IAC7C,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,iFAAiF;AACjF,SAAS,SAAS,CAAC,MAAmB;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,MAAmB;IACjC,OAAO,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,oFAAoF;AACpF,SAAS,OAAO,CAAC,MAAmB;IAClC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,MAAoB;IACzC,OAAO,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,OAAsB,EAAE,YAAoB;IAChE,MAAM,KAAK,GAAG,YAAY,GAAG,SAAS,CAAC;IACvC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,OAAO,EAAE,GAAG,KAAK,IAAI,EAAE,IAAI,YAAY,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,QAAuB;IAC7C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,KAAK,KAAK,kBAAkB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3E,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QAChC,IAAI,MAAM,CAAC,KAAK,KAAK,kBAAkB;YAAE,OAAO,IAAI,CAAC;QACrD,IAAI,MAAM,CAAC,KAAK,KAAK,mBAAmB;YAAE,OAAO,KAAK,CAAC;QACvD,OAAO,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CACd,KAAa,EACb,KAAyB,EACzB,MAAoB,EACpB,QAAgB,EAChB,SAAiB,EACjB,OAAe,EACf,IAAgB,EAChB,IAAa;IAEb,MAAM,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,MAAM,IAAI,GAAkB;QAC1B,KAAK;QACL,KAAK;QACL,MAAM;QACN,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;QAChC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC;QAClC,IAAI,EAAE,SAAS,IAAI,CAAC;KACrB,CAAC;IACF,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CAAC,KAAa,EAAE,KAAyB,EAAE,IAAY;IACpE,OAAO;QACL,KAAK;QACL,KAAK;QACL,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,IAAI,EAAE,KAAK;QACX,IAAI;KACL,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,KAAa,EAAE,IAAgB;IAChD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,CAAC;IACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AASD,SAAS,KAAK,CAAC,MAAqB;IAClC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,MAAM,IAAI,MAAM;QAAE,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAsB,EACtB,KAAkB,EAClB,MAAoB,EACpB,YAAoB;IAEpB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;IAC5C,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;IAChD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC;IAE3D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,yBAAyB,YAAY,mHAAmH,CAAC;QACrK,wEAAwE;QACxE,4EAA4E;QAC5E,wEAAwE;QACxE,sEAAsE;QACtE,SAAS;QACT,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,iBAAiB,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC9C,IAAI,iBAAiB,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACtC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,+DAA+D;YAC/D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAClC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,2EAA2E;IAC3E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC;QACnC,2EAA2E;QAC3E,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7C,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YACnC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YACpC,OAAO,WAAW,KAAK,IAAI,IAAI,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QAE5C,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,oEAAoE;YACpE,wEAAwE;YACxE,0EAA0E;YAC1E,0EAA0E;YAC1E,oEAAoE;YACpE,0EAA0E;YAC1E,qEAAqE;YACrE,uEAAuE;YACvE,0DAA0D;YAC1D,IAAI,iBAAiB,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC5E,MAAM,IAAI,GAAe,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBAClE,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC1C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,QAAQ,CAAC,IAAI,CACX,MAAM,CACJ,IAAI,EACJ,OAAO,EACP,gBAAgB,IAAI,mGAAmG,CACxH,CACF,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;oBAC5B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;oBACjF,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;oBAChC,QAAQ,CAAC,IAAI,CACX,MAAM,CACJ,IAAI,EACJ,OAAO,EACP,gBAAgB,IAAI,gJAAgJ,CACrK,CACF,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC;gBACtF,MAAM,GAAG,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;gBACnF,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CACX,MAAM,CACJ,IAAI,EACJ,OAAO,EACP,wBAAwB,IAAI,iCAAiC,cAAc,KAAK,SAAS,SAAS,aAAa,kEAAkE,CAClL,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,6EAA6E;IAC7E,4EAA4E;IAC5E,2CAA2C;IAC3C,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,iBAAiB,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,SAAS;gBAAE,SAAS;YACnC,MAAM,MAAM,GAAG,MAAiC,CAAC;YACjD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC9C,sEAAsE;gBACtE,yEAAyE;gBACzE,IAAI,iBAAiB,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,KAAK,GAAG,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAe,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBAClE,MAAM,OAAO,GACX,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAClE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,QAAQ,CAAC,IAAI,CACX,MAAM,CACJ,KAAK,EACL,QAAQ,EACR,WAAW,KAAK,mGAAmG,CACpH,CACF,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CACX,OAAO,CACL,KAAK,EACL,QAAQ,EACR,aAAa,EACb,iBAAiB,CAAC,GAAG,EACrB,SAAS,EACT,OAAO,EACP,IAAI,CACL,CACF,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;oBAC3B,QAAQ,CAAC,IAAI,CACX,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CACrF,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,QAAQ,CAAC,IAAI,CACX,MAAM,CACJ,KAAK,EACL,QAAQ,EACR,yBAAyB,IAAI,iCAAiC,SAAS,QAAQ,aAAa,kEAAkE,CAC/J,CACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC;AAED,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,cAAc,CAAC,OAAsB,EAAE,IAAY;IACjE,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,iBAAiB,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QACzE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC5D,MAAM,GAAG,GAAG,WAAW,CAAE,MAAkC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC7E,IAAI,GAAG,KAAK,IAAI;YAAE,KAAK,GAAG,GAAG,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAsB,EACtB,IAAY,EACZ,UAAoB,EACpB,MAAoB,EACpB,aAAqB;IAErB,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,MAAM,CACX,iBAAiB,EACjB,MAAM,EACN,yHAAyH,CAC1H,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CACpB,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CACjE,CAAC,GAAG,CAAC;IACN,OAAO,OAAO,CACZ,iBAAiB,EACjB,MAAM,EACN,YAAY,EACZ,QAAQ,EACR,aAAa,CAAC,MAAM,CAAC,EACrB,OAAO,EACP,KAAK,CACN,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAsB,EACtB,KAAkB,EAClB,MAAoB,EACpB,YAAoB,EACpB,IAAmB;IAEnB,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACnE,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,QAAQ,GAAG;QACf,GAAG,IAAI,CAAC,QAAQ;QAChB,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC;KAC7D,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC"}