approval-md 0.0.1 → 0.2.0

package/dist/src/core/policy-proposal.js

@@ -0,0 +1,458 @@
+/**
+ * The attestation ceremony, collected through a channel (APRV-109, amended
+ * SPEC.md §10.1/§10.3/§11).
+ *
+ * ## The problem
+ *
+ * Attestation is human-only (`core/attest.ts`), and identity is
+ * config-declared, so the two policy ceremonies — `policy attest` and `policy
+ * amend` — required the human to be at a terminal. Every other decision in this
+ * system had already been reduced to a tap on a phone; the one act that decides
+ * which rules are in force had not. This module is the missing half: an agent
+ * prepares the policy edit and appends a *proposal*, a channel puts it in front
+ * of the approver like any other manual prompt, and the tap appends the
+ * `policy.updated` attestation under the human identity the listener holds,
+ * exactly as a grant lands today.
+ *
+ * ## What is computed, and why it has to be
+ *
+ * A proposal carries three things a channel renders: the SHA-256 of the policy
+ * file's exact bytes, the semantic diff of what those bytes change about class
+ * resolution, and the load advisory. **All three are derived here from the
+ * bytes** — none is accepted from the proposing agent. {@link ProposeInput}
+ * has no field for a hash, a diff or a verdict, so the refusal of a
+ * caller-authored value is structural in the same way the refusal of a
+ * caller-supplied `ts` is (amended SPEC.md §8, A2). An agent that could author
+ * the diff summary could show an approver one story and attest another file.
+ *
+ * The BASELINE the diff is taken against is the one place a caller supplies
+ * material, and it is checked rather than trusted: bytes whose own SHA-256 is
+ * not the latest attested hash are refused as a baseline and the proposal falls
+ * to hash-only mode. That is `cli/amend.ts`'s rule ("a baseline nobody can
+ * verify is not a baseline"), enforced here so every caller inherits it.
+ *
+ * ## Fail closed, in this order
+ *
+ * - A policy file that cannot be read proposes nothing.
+ * - A live file that already matches its attestation proposes nothing: there is
+ *   no amendment to sign, and a prompt for one would ask a human to re-attest
+ *   bytes already in force.
+ * - A rendered diff larger than {@link ATTESTATION_DIFF_MAX_CHARS} REFUSES
+ *   (`diff-too-large`) rather than truncating. A phone that shows two thirds of
+ *   a policy change collects a signature for the third it did not show, and the
+ *   repair — read it at a terminal and run `approval policy amend` there — is a
+ *   real repair rather than a smaller lie.
+ * - A tap whose proposal's bytes are no longer the bytes on disk refuses
+ *   `proposal-stale` and attests nothing. The hash the human was shown is the
+ *   hash that gets attested, or nothing does.
+ * - A decline, a supersession and a lapsed deadline all attest nothing. Only
+ *   {@link decideAttestation}`(…, "attest", …)` ever appends a `policy.updated`.
+ *
+ * Everything that writes here goes through `core/log.ts`'s `appendEvent` with a
+ * compare-and-append precondition and a runtime-assigned timestamp, so the new
+ * records inherit the same write-boundary discipline as the rest of the gate.
+ */
+import { readFileSync } from "node:fs";
+import { basename, join } from "node:path";
+import { POLICY_HASH_FIELD, checkAttestationOfBytes, policyBytesHash, } from "./attest.js";
+import { tick } from "./clock.js";
+import { appendEvent, } from "./log.js";
+import { payloadHash } from "./payload.js";
+import { payloadStoreDirFor, storePayload } from "./payload-store.js";
+import { diffPolicies, renderDiff, SPEC_NAMESPACES } from "./policy-diff.js";
+import { loadPolicyText, POLICY_FILENAMES } from "./policy-load.js";
+import { readVerifiedRecords } from "./state.js";
+/** Actors permitted to propose: a person or an agent, never the runtime. */
+const PRINCIPAL_ACTOR = /^(human|agent):.+/u;
+/** Actors permitted to answer a proposal. Human-only, in code (SPEC.md §11). */
+const HUMAN_ACTOR = /^human:.+/u;
+/**
+ * The event an agent appends to ask for an attestation.
+ *
+ * Named `proposed` rather than `requested` deliberately: `approval.requested`
+ * is the approval lifecycle, with its own TTL, its own budgets and its own
+ * grant. This is a different question with a different answer event, and giving
+ * it the same word would invite a reader — or a projection — to treat a policy
+ * attestation as an ordinary authorization.
+ */
+export const PROPOSAL_EVENT = "policy.proposed";
+/** The event a decline appends. An attestation appends `policy.updated`. */
+export const DECLINE_EVENT = "policy.declined";
+/**
+ * The idempotency key an attestation prompt is rendered under.
+ *
+ * `policy.attest:<sha256>` — derived from the proposed bytes and from nothing
+ * else, so two proposals of the same policy text carry the same key and a tap
+ * on either answers the same question. It is also what
+ * `channels/contract.ts` routes on: a gesture whose key starts with this prefix
+ * becomes an attestation, never a grant.
+ */
+export const ATTESTATION_KEY_PREFIX = "policy.attest:";
+/** The action class an attestation prompt is resolved and rendered under. */
+export const ATTESTATION_CLASS = "policy.edit";
+/** `policy.attest:<sha256>` for the given policy bytes. */
+export function attestationActionKey(sha256) {
+    return `${ATTESTATION_KEY_PREFIX}${sha256}`;
+}
+/** Is this an attestation prompt's key rather than an ordinary action's? */
+export function isAttestationActionKey(actionKey) {
+    return actionKey.startsWith(ATTESTATION_KEY_PREFIX);
+}
+/** The proposed policy hash named by an attestation key, or `null`. */
+export function attestationKeySha256(actionKey) {
+    if (!isAttestationActionKey(actionKey))
+        return null;
+    const hash = actionKey.slice(ATTESTATION_KEY_PREFIX.length);
+    return /^[a-f0-9]{64}$/u.test(hash) ? hash : null;
+}
+/**
+ * The largest rendered diff a channel prompt may carry, in characters.
+ *
+ * Telegram's hard limit is 4096 characters for one message and the prompt
+ * carries a dozen other lines besides the diff, so this is the budget the
+ * *smallest* supported channel can show whole. It is a refusal threshold and
+ * never a truncation point: see the module header.
+ */
+export const ATTESTATION_DIFF_MAX_CHARS = 2400;
+/** The same bound, in lines: a diff nobody will scroll is a diff nobody reads. */
+export const ATTESTATION_DIFF_MAX_LINES = 60;
+function refuse(code, message, extra = {}) {
+    return { ok: false, code, message, ...extra };
+}
+function detail(cause) {
+    return cause instanceof Error ? cause.message : String(cause);
+}
+function appendOptionsOf(options) {
+    const append = { ...options.append };
+    if (options.schemaDir !== undefined)
+        append.schemaDir = options.schemaDir;
+    return append;
+}
+function append(logPath, input, options, expectedHead) {
+    const result = appendEvent(logPath, input, {
+        ...appendOptionsOf(options),
+        expectedHead,
+    });
+    if (result.ok)
+        return { ok: true, record: result.record };
+    return refuse("append-failed", `${input.event} could not be appended: ${result.error.message}`, {
+        append: result.error,
+    });
+}
+/**
+ * The policy file a proposal concerns, discovered the way `loadPolicy` does so
+ * the proposed file and the enforced file are never two different files.
+ */
+export function proposalPolicyPath(dir) {
+    for (const filename of POLICY_FILENAMES) {
+        const candidate = join(dir, filename);
+        try {
+            readFileSync(candidate);
+            return candidate;
+        }
+        catch {
+            continue;
+        }
+    }
+    return join(dir, POLICY_FILENAMES[0] ?? "APPROVAL.md");
+}
+/** The load advisory for policy text, as a channel renders it. */
+export function adviseLoad(policyPath, text, schemaDir) {
+    const load = loadPolicyText(policyPath, text, schemaDir === undefined ? {} : { schemaDir });
+    return load.ok
+        ? { ok: true, code: null, message: null }
+        : { ok: false, code: load.code, message: load.message };
+}
+/** The one-line headline of a diff: what changed, counted by section. */
+function headlineOf(diff) {
+    const parts = [];
+    if (diff.classes.length > 0)
+        parts.push(`${String(diff.classes.length)} class resolution(s)`);
+    if (diff.approvers.length > 0)
+        parts.push(`${String(diff.approvers.length)} approver change(s)`);
+    if (diff.defaults.length > 0)
+        parts.push(`${String(diff.defaults.length)} default(s)`);
+    if (diff.budgets.length > 0)
+        parts.push(`${String(diff.budgets.length)} limit(s)`);
+    if (diff.vocabulary.length > 0)
+        parts.push(`${String(diff.vocabulary.length)} policy key(s)`);
+    return parts.length === 0 ? "no semantic change" : parts.join(", ");
+}
+/** The rendered size of a diff summary, as the channel budget counts it. */
+export function diffSize(summary) {
+    return {
+        chars: summary.lines.reduce((total, line) => total + line.length + 1, 0),
+        lines: summary.lines.length,
+    };
+}
+/**
+ * The semantic diff between the attested baseline and the proposed bytes.
+ *
+ * Hash-only mode (`available: false`) whenever the baseline cannot be *proved*
+ * to be the attested text: no baseline was offered, none was ever attested, or
+ * the offered bytes hash to something other than the attestation. The reason is
+ * recorded so a channel can print it instead of a diff, which is the honest
+ * rendering of "we cannot show you what this changes".
+ */
+export function summarizeDiff(policyPath, baseline, live, attestedSha256, schemaDir) {
+    const unavailable = (reason) => ({
+        available: false,
+        reason,
+        lines: [],
+        headline: "semantic diff unavailable",
+        baseline_sha256: null,
+    });
+    if (attestedSha256 === null) {
+        return unavailable("the policy has never been attested, so there is no previous state to diff against");
+    }
+    if (baseline === null || baseline === undefined) {
+        return unavailable("no baseline text was supplied, and the attested BYTES are not recoverable from the log (an attestation records only their SHA-256)");
+    }
+    const baselineSha256 = policyBytesHash(baseline);
+    if (baselineSha256 !== attestedSha256) {
+        return unavailable(`the supplied baseline hashes ${baselineSha256}, which is not the attested ${attestedSha256}; a baseline nobody can verify is not a baseline`);
+    }
+    const options = schemaDir === undefined ? {} : { schemaDir };
+    const before = loadPolicyText(policyPath, Buffer.from(baseline).toString("utf8"), options);
+    const after = loadPolicyText(policyPath, Buffer.from(live).toString("utf8"), options);
+    const diff = diffPolicies(before, after, SPEC_NAMESPACES);
+    return {
+        available: true,
+        reason: null,
+        lines: renderDiff(diff),
+        headline: headlineOf(diff),
+        baseline_sha256: baselineSha256,
+    };
+}
+/** The stored value a channel displays as the prompt's full payload. */
+export function proposalPayloadValue(policyPath, text) {
+    return { policy_path: basename(policyPath), text };
+}
+/**
+ * Append a `policy.proposed` asking a human to attest `policyPath`'s bytes.
+ *
+ * The record's payload is the prompt: `sha256`, `diff` and `load` are all
+ * derived here, `note` and `wait_until` are the proposer's and are labelled
+ * claimed by every channel. `payload_hash` binds the full policy text stored
+ * beside the log, so the approver can read the whole file rather than only the
+ * summary (SPEC.md §10.4).
+ *
+ * No attestation is required to append one. That is the point of the verb: the
+ * live policy is mid-amendment and therefore unattested, which is exactly the
+ * state in which every other gate operation refuses. This one asks a human to
+ * end that state.
+ */
+export function proposeAttestation(logPath, input, actor, options = {}) {
+    const ts = tick(options);
+    if (!PRINCIPAL_ACTOR.test(actor)) {
+        return refuse("actor-invalid", `a policy proposal requires a human: or agent: actor, got ${JSON.stringify(actor)}`);
+    }
+    const read = readVerifiedRecords(logPath, options.schemaDir === undefined ? {} : { schemaDir: options.schemaDir });
+    if (!read.ok)
+        return refuse(read.code, read.message);
+    let bytes;
+    try {
+        bytes = readFileSync(input.policyPath);
+    }
+    catch (cause) {
+        return refuse("policy-not-attested", `policy ${input.policyPath} could not be read: ${detail(cause)}; an unverifiable policy is treated as unattested and nothing was proposed`, { detail: "unreadable" });
+    }
+    const status = checkAttestationOfBytes(read.records, bytes);
+    if (status.status === "attested") {
+        return refuse("policy-already-attested", `${input.policyPath} already matches its attestation at seq ${String(status.seq)}; there is no amendment to sign, and a prompt for one would ask a human to re-attest bytes that are already in force`);
+    }
+    const sha256 = policyBytesHash(bytes);
+    const attestedSha256 = status.status === "hash-mismatch" ? status.attestedSha256 : null;
+    const diff = summarizeDiff(input.policyPath, input.baseline, bytes, attestedSha256, options.schemaDir);
+    const size = diffSize(diff);
+    if (size.chars > ATTESTATION_DIFF_MAX_CHARS || size.lines > ATTESTATION_DIFF_MAX_LINES) {
+        return refuse("diff-too-large", `the semantic diff of ${input.policyPath} renders as ${String(size.lines)} line(s) / ${String(size.chars)} characters, past the ${String(ATTESTATION_DIFF_MAX_LINES)}-line / ${String(ATTESTATION_DIFF_MAX_CHARS)}-character budget a channel prompt can show whole. It is refused rather than truncated: a prompt that shows two thirds of a policy change collects a signature for the third it did not show. Read the diff at a terminal and attest there — \`approval policy amend --as human:<id> --require-load --commit\` — or split the amendment into changes a phone can hold. Nothing was appended.`);
+    }
+    const text = Buffer.from(bytes).toString("utf8");
+    const advisory = adviseLoad(input.policyPath, text, options.schemaDir);
+    const value = proposalPayloadValue(input.policyPath, text);
+    let boundHash;
+    try {
+        boundHash = payloadHash(value);
+    }
+    catch (cause) {
+        return refuse("payload-store-failed", `the policy text of ${input.policyPath} could not be canonicalized for display: ${detail(cause)}. Nothing was appended: a prompt whose bytes no channel can display is a prompt no human can answer (SPEC.md §10.4).`);
+    }
+    const stored = storePayload(options.payloadStoreDir ?? payloadStoreDirFor(logPath), value);
+    if (!stored.ok) {
+        return refuse("payload-store-failed", `${stored.message} Nothing was appended: an attestation prompt whose policy text no channel can display is a prompt no human can answer (SPEC.md §10.4).`);
+    }
+    const payload = {
+        policy_path: basename(input.policyPath),
+        // COMPUTED, every one of them. `ProposeInput` carries no field for any of
+        // these, so an agent cannot name the hash it wants attested, describe a
+        // change it is not making, or claim its policy loads.
+        sha256,
+        action_key: attestationActionKey(sha256),
+        class: ATTESTATION_CLASS,
+        payload_hash: boundHash,
+        diff,
+        load: advisory,
+    };
+    if (attestedSha256 !== null)
+        payload[POLICY_HASH_FIELD] = attestedSha256;
+    if (input.note !== undefined)
+        payload["note"] = input.note;
+    if (input.waitUntil !== undefined)
+        payload["wait_until"] = input.waitUntil;
+    const appended = append(logPath, {
+        ts,
+        event: PROPOSAL_EVENT,
+        actor,
+        action_key: attestationActionKey(sha256),
+        payload,
+    }, options, read.head);
+    if (!appended.ok)
+        return appended;
+    return { ok: true, record: appended.record, sha256, diff, load: advisory };
+}
+function payloadOf(record) {
+    const payload = record.payload;
+    return typeof payload === "object" && payload !== null ? payload : {};
+}
+function stringField(record, name) {
+    const value = payloadOf(record)[name];
+    return typeof value === "string" && value.length > 0 ? value : null;
+}
+/** Every `policy.proposed` record in the log, in append order. */
+export function proposalRecords(records) {
+    return records.filter((record) => record.event === PROPOSAL_EVENT);
+}
+/**
+ * Derive one proposal's state at `now`.
+ *
+ * Terminal states are read off the log; `expired` is arithmetic on the
+ * proposer's own `wait_until` and materialises no event, because a lapsed
+ * attestation prompt has nothing to record: nothing was attested, and the
+ * proposal record already says everything a reader needs. That is the
+ * fail-closed reading — a prompt nobody answered leaves the policy exactly as
+ * unattested as it was.
+ */
+export function proposalState(records, seq, now) {
+    const record = records.find((entry) => entry.seq === seq && entry.event === PROPOSAL_EVENT);
+    if (record === undefined)
+        return null;
+    const sha256 = stringField(record, "sha256");
+    if (sha256 === null)
+        return null;
+    const actionKey = record.action_key ?? attestationActionKey(sha256);
+    const path = stringField(record, "policy_path");
+    let state = "open";
+    for (const entry of records) {
+        if (entry.seq <= record.seq)
+            continue;
+        if (entry.event === "policy.updated" && stringField(entry, "sha256") === sha256) {
+            state = "attested";
+            break;
+        }
+        if (entry.event === DECLINE_EVENT && stringField(entry, "sha256") === sha256) {
+            state = "declined";
+            break;
+        }
+        if (entry.event === PROPOSAL_EVENT &&
+            stringField(entry, "sha256") !== sha256 &&
+            stringField(entry, "policy_path") === path) {
+            state = "superseded";
+            break;
+        }
+    }
+    if (state === "open") {
+        const waitUntil = stringField(record, "wait_until");
+        const deadline = waitUntil === null ? Number.NaN : Date.parse(waitUntil);
+        const nowMs = Date.parse(now);
+        if (!Number.isNaN(deadline) && !Number.isNaN(nowMs) && nowMs >= deadline)
+            state = "expired";
+    }
+    return { seq: record.seq, actionKey, sha256, state, record };
+}
+/** Every proposal still awaiting a human answer at `now`, in log order. */
+export function openProposals(records, now) {
+    const open = [];
+    for (const record of proposalRecords(records)) {
+        const derived = proposalState(records, record.seq, now);
+        if (derived !== null && derived.state === "open")
+            open.push(derived);
+    }
+    return open;
+}
+/** The open proposal whose bytes hash to `sha256`, or `null`. */
+export function openProposalFor(records, sha256, now) {
+    const matches = openProposals(records, now).filter((entry) => entry.sha256 === sha256);
+    return matches[matches.length - 1] ?? null;
+}
+/**
+ * Answer a proposal: attest the bytes the prompt displayed, or decline them.
+ *
+ * Human-only, in code — the same rule `core/attest.ts` enforces, restated here
+ * because this is a second door onto the same act and the rule must hold for
+ * every caller and not only for the CLI's.
+ *
+ * **The attested hash is the hash the prompt displayed.** Before anything is
+ * appended the live file is re-read and re-hashed, and any difference refuses
+ * `proposal-stale`: the human signed for bytes they were shown, and bytes that
+ * changed underneath the prompt are a different policy that has to be proposed
+ * again. This is the one check that makes "the phone shows the diff and the
+ * hash" mean anything.
+ *
+ * A decline appends `policy.declined` and attests nothing. So does a lapsed
+ * deadline, by appending nothing at all.
+ */
+export function decideAttestation(logPath, seq, decision, actor, options = {}) {
+    const ts = tick(options);
+    if (!HUMAN_ACTOR.test(actor)) {
+        return refuse("actor-not-human", `${decision} is a human-only verb; attestation is the one act an agent must not perform, and the actor must match human:<id>, got ${JSON.stringify(actor)}`);
+    }
+    const read = readVerifiedRecords(logPath, options.schemaDir === undefined ? {} : { schemaDir: options.schemaDir });
+    if (!read.ok)
+        return refuse(read.code, read.message);
+    const derived = proposalState(read.records, seq, ts);
+    if (derived === null) {
+        return refuse("proposal-not-found", `seq ${String(seq)} is not a ${PROPOSAL_EVENT} record carrying a policy hash; there is no attestation prompt to answer`);
+    }
+    if (derived.state === "expired") {
+        return refuse("expired", `the attestation prompt at seq ${String(seq)} passed the deadline its proposer declared; nothing was attested. Propose the amendment again — a prompt nobody answered leaves the policy exactly as unattested as it was.`);
+    }
+    if (derived.state !== "open") {
+        return refuse("already-decided", `the attestation prompt at seq ${String(seq)} is ${derived.state}; a second answer would rewrite a human's decision about which policy bytes are in force`);
+    }
+    const policyPath = options.policyPath ?? stringField(derived.record, "policy_path") ?? "APPROVAL.md";
+    if (decision === "attest") {
+        let bytes;
+        try {
+            bytes = readFileSync(policyPath);
+        }
+        catch (cause) {
+            return refuse("proposal-stale", `the policy file ${policyPath} could not be read to confirm the bytes this prompt displayed: ${detail(cause)}. Nothing was attested: an attestation names bytes, and bytes nobody can read are not the bytes anybody was shown.`);
+        }
+        const live = policyBytesHash(bytes);
+        if (live !== derived.sha256) {
+            return refuse("proposal-stale", `the attestation prompt at seq ${String(seq)} displayed ${derived.sha256} and ${policyPath} now hashes ${live}; the file changed after the question was asked, so a tap here would attest bytes the approver was never shown. Nothing was attested: propose the amendment again, which re-renders the diff and the advisory over the bytes actually on disk.`);
+        }
+    }
+    const payload = {
+        policy_path: basename(policyPath),
+        sha256: derived.sha256,
+        proposed_seq: derived.seq,
+    };
+    if (options.note !== undefined)
+        payload["note"] = options.note;
+    if (options.batchDeliveryId !== undefined && options.batchDeliveryId.length > 0) {
+        payload["batch_delivery_id"] = options.batchDeliveryId;
+    }
+    const appended = append(logPath, {
+        ts,
+        event: decision === "attest" ? "policy.updated" : DECLINE_EVENT,
+        actor,
+        action_key: derived.actionKey,
+        payload,
+    }, options, read.head);
+    if (!appended.ok)
+        return appended;
+    return { ok: true, decision, record: appended.record, sha256: derived.sha256 };
+}
+//# sourceMappingURL=policy-proposal.js.map

package/dist/src/core/policy-proposal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-proposal.js","sourceRoot":"","sources":["../../../src/core/policy-proposal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,GAEhB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,IAAI,EAAqB,MAAM,YAAY,CAAC;AACrD,OAAO,EACL,WAAW,GAKZ,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAmB,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAyB,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGjD,4EAA4E;AAC5E,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C,gFAAgF;AAChF,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEhD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAE/C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAEvD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAE/C,2DAA2D;AAC3D,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO,GAAG,sBAAsB,GAAG,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,OAAO,SAAS,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;AACtD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAE/C,kFAAkF;AAClF,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAmE7C,SAAS,MAAM,CACb,IAAqB,EACrB,OAAe,EACf,KAAK,GAAiD,EAAE;IAExD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,eAAe,CAAC,OAAwB;IAC/C,MAAM,MAAM,GAAkB,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACpD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC1E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CACb,OAAe,EACf,KAAiB,EACjB,OAAwB,EACxB,YAA4B;IAE5B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE;QACzC,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,YAAY;KACb,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC1D,OAAO,MAAM,CAAC,eAAe,EAAE,GAAG,KAAK,CAAC,KAAK,2BAA2B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE;QAC9F,MAAM,EAAE,MAAM,CAAC,KAAK;KACrB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC;AACzD,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,UAAU,CAAC,UAAkB,EAAE,IAAY,EAAE,SAAkB;IAC7E,MAAM,IAAI,GAAqB,cAAc,CAC3C,UAAU,EACV,IAAI,EACJ,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAC7C,CAAC;IACF,OAAO,IAAI,CAAC,EAAE;QACZ,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;QACzC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AAC5D,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU,CAAC,IAAgB;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC9F,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACjG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACvF,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,OAAoB;IAC3C,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAkB,EAClB,QAAuC,EACvC,IAAgB,EAChB,cAA6B,EAC7B,SAAkB;IAElB,MAAM,WAAW,GAAG,CAAC,MAAc,EAAe,EAAE,CAAC,CAAC;QACpD,SAAS,EAAE,KAAK;QAChB,MAAM;QACN,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,2BAA2B;QACrC,eAAe,EAAE,IAAI;KACtB,CAAC,CAAC;IAEH,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,WAAW,CAChB,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,WAAW,CAChB,oIAAoI,CACrI,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,cAAc,KAAK,cAAc,EAAE,CAAC;QACtC,OAAO,WAAW,CAChB,gCAAgC,cAAc,+BAA+B,cAAc,kDAAkD,CAC9I,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAC1D,OAAO;QACL,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC;QACvB,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC;QAC1B,eAAe,EAAE,cAAc;KAChC,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,IAAY;IACnE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,KAAmB,EACnB,KAAa,EACb,OAAO,GAAoB,EAAE;IAE7B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CACX,eAAe,EACf,4DAA4D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,mBAAmB,CAC9B,OAAO,EACP,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACxE,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAErD,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CACX,qBAAqB,EACrB,UAAU,KAAK,CAAC,UAAU,uBAAuB,MAAM,CAAC,KAAK,CAAC,4EAA4E,EAC1I,EAAE,MAAM,EAAE,YAAY,EAAE,CACzB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAsB,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,MAAM,CACX,yBAAyB,EACzB,GAAG,KAAK,CAAC,UAAU,2CAA2C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,sHAAsH,CACvM,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;IAExF,MAAM,IAAI,GAAG,aAAa,CACxB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,QAAQ,EACd,KAAK,EACL,cAAc,EACd,OAAO,CAAC,SAAS,CAClB,CAAC;IACF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,KAAK,GAAG,0BAA0B,IAAI,IAAI,CAAC,KAAK,GAAG,0BAA0B,EAAE,CAAC;QACvF,OAAO,MAAM,CACX,gBAAgB,EAChB,wBAAwB,KAAK,CAAC,UAAU,eAAe,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,MAAM,CAAC,0BAA0B,CAAC,WAAW,MAAM,CAAC,0BAA0B,CAAC,8XAA8X,CAChlB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAE3D,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CACX,sBAAsB,EACtB,sBAAsB,KAAK,CAAC,UAAU,4CAA4C,MAAM,CAAC,KAAK,CAAC,sHAAsH,CACtN,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,eAAe,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3F,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,MAAM,CACX,sBAAsB,EACtB,GAAG,MAAM,CAAC,OAAO,wIAAwI,CAC1J,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAA4B;QACvC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QACvC,0EAA0E;QAC1E,wEAAwE;QACxE,sDAAsD;QACtD,MAAM;QACN,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC;QACxC,KAAK,EAAE,iBAAiB;QACxB,YAAY,EAAE,SAAS;QACvB,IAAI;QACJ,IAAI,EAAE,QAAQ;KACf,CAAC;IACF,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,cAAc,CAAC;IACzE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3D,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;IAE3E,MAAM,QAAQ,GAAG,MAAM,CACrB,OAAO,EACP;QACE,EAAE;QACF,KAAK,EAAE,cAAc;QACrB,KAAK;QACL,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC;QACxC,OAAO;KACR,EACD,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAElC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC7E,CAAC;AA2BD,SAAS,SAAS,CAAC,MAAmB;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,WAAW,CAAC,MAAmB,EAAE,IAAY;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,OAA+B,EAC/B,GAAW,EACX,GAAW;IAEX,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC;IAC5F,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEhD,IAAI,KAAK,GAAkB,MAAM,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG;YAAE,SAAS;QACtC,IAAI,KAAK,CAAC,KAAK,KAAK,gBAAgB,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC;YAChF,KAAK,GAAG,UAAU,CAAC;YACnB,MAAM;QACR,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC;YAC7E,KAAK,GAAG,UAAU,CAAC;YACnB,MAAM;QACR,CAAC;QACD,IACE,KAAK,CAAC,KAAK,KAAK,cAAc;YAC9B,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,MAAM;YACvC,WAAW,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI,EAC1C,CAAC;YACD,KAAK,GAAG,YAAY,CAAC;YACrB,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,QAAQ;YAAE,KAAK,GAAG,SAAS,CAAC;IAC9F,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAC3B,OAA+B,EAC/B,GAAW;IAEX,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAC7B,OAA+B,EAC/B,MAAc,EACd,GAAW;IAEX,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACvF,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;AAC7C,CAAC;AAgBD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,GAAW,EACX,QAA6B,EAC7B,KAAa,EACb,OAAO,GAA6B,EAAE;IAEtC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CACX,iBAAiB,EACjB,GAAG,QAAQ,yHAAyH,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC5J,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,mBAAmB,CAC9B,OAAO,EACP,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACxE,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,MAAM,CACX,oBAAoB,EACpB,OAAO,MAAM,CAAC,GAAG,CAAC,aAAa,cAAc,0EAA0E,CACxH,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,MAAM,CACX,SAAS,EACT,iCAAiC,MAAM,CAAC,GAAG,CAAC,6KAA6K,CAC1N,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,MAAM,CACX,iBAAiB,EACjB,iCAAiC,MAAM,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,0FAA0F,CAC3J,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GACd,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,aAAa,CAAC;IAEpF,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CACX,gBAAgB,EAChB,mBAAmB,UAAU,kEAAkE,MAAM,CAAC,KAAK,CAAC,oHAAoH,CACjO,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAC5B,OAAO,MAAM,CACX,gBAAgB,EAChB,iCAAiC,MAAM,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,MAAM,QAAQ,UAAU,eAAe,IAAI,gPAAgP,CAC9V,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA4B;QACvC,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC;QACjC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,GAAG;KAC1B,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAC/D,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;IACzD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CACrB,OAAO,EACP;QACE,EAAE;QACF,KAAK,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa;QAC/D,KAAK;QACL,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,OAAO;KACR,EACD,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAElC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AACjF,CAAC"}