approval-md 0.0.1 → 0.2.0

package/dist/src/adapters/conformance.js

@@ -0,0 +1,461 @@
+/**
+ * The shared adapter conformance suite (SPEC.md §10.4, §11.1).
+ *
+ * `channels/conformance.ts` exists because SPEC.md §9 names a display rule and
+ * then names its consequence: rendering claimed fields as computed "is a
+ * conformance failure for a channel". This module is the same idea one boundary
+ * further out. §10.4 says an adapter "MUST require a valid, unexpired,
+ * single-use execution token bound to the action's `idempotency_key`", and the
+ * only way to find out whether a given adapter does is to hand it a bad token
+ * and watch.
+ *
+ * What is being tested is mostly **the contract**, not the adapter: an adapter
+ * that goes through {@link executeThroughAdapter} inherits the sequence and
+ * cannot skip a step. That is the point. The suite is what turns "cannot skip"
+ * from an assertion in a module header into a thing someone has watched fail,
+ * and it is what a third-party adapter runs to learn whether it is wired into
+ * the gate or merely near it.
+ *
+ * ## What it checks
+ *
+ * 1. **Bad token, no side effect.** A garbage token refuses and `act` is never
+ *    called. The log is unchanged.
+ * 2. **Wrong bytes, no side effect.** A payload that is not the approved one
+ *    refuses `payload-mismatch`, `act` is never called, the token stays live.
+ * 3. **Wrong class, nothing appended.** An adapter that does not serve the
+ *    declared class refuses `adapter-class-mismatch` before the log is touched.
+ * 4. **`started` precedes the effect.** On the happy path `act` observes an
+ *    `execution.started` for its own key already in the verified log at the
+ *    moment it is called, and `execution.completed` lands after it returns. The
+ *    same check reads the provider reference of APRV-251 off that record: a
+ *    detail naming one is on the record under this adapter's name, and a detail
+ *    naming none leaves the record carrying none.
+ * 5. **Single use.** A second execution with the same token and key refuses
+ *    without calling `act`.
+ * 6. **Credentials are scoped and never leak.** A value handed out inside `act`
+ *    appears in no log line and in no field of the result, and the provider
+ *    refuses once `act` has returned.
+ * 7. **Failure is recorded, not swallowed.** An adapter reporting failure
+ *    produces `execution.failed` and an `adapter-failed` refusal.
+ *
+ * The chain is verified after every check.
+ *
+ * ## How it is run
+ *
+ * ```ts
+ * test("my adapter conforms", async (t) => {
+ *   await runAdapterConformance(t, () => new MyAdapter(), harness);
+ * });
+ * ```
+ *
+ * As in the channel suite, `t` is used only for `diagnostic()` labels: the
+ * checks run inline and **throw** on the first failure, so
+ * `tests/adapters-contract.test.ts` can assert the suite goes RED against
+ * deliberately broken adapters. A conformance suite nobody has watched fail is a
+ * suite that might pass anything.
+ *
+ * Several checks wrap the adapter under test in a hostile shell — one that reads
+ * a credential it was not asked to read, one that returns the secret inside its
+ * own detail, one that reports failure. The wrapper delegates to the real `act`
+ * where the check allows it. Wrapping rather than requiring cooperation is what
+ * lets the suite test properties (scoping, redaction) that a well-behaved
+ * adapter would never exercise on its own.
+ */
+import assert from "node:assert/strict";
+import { readFileSync } from "node:fs";
+import { payloadOf, readVerifiedRecords } from "../core/state.js";
+import { verify } from "../core/verify.js";
+import { executeThroughAdapter, inMemoryCredentials, providerRefFor, } from "./contract.js";
+function say(t, message) {
+    t.diagnostic?.(`adapter conformance: ${message}`);
+}
+/**
+ * Wrap `adapter` so every call is recorded and `before` (if given) runs inside
+ * the credential window, where the suite can observe the log and the provider.
+ */
+function spyOn(adapter, before) {
+    const calls = [];
+    return {
+        calls,
+        // SPREAD, never a fresh `{name, classes, act}` literal (APRV-245). The
+        // contract gained optional members — `requiredCredentials`, `observe` — and
+        // a wrapper that rebuilt the object from three fields would quietly test an
+        // adapter the caller never wrote: the one under test minus everything
+        // optional it declares.
+        adapter: {
+            ...adapter,
+            async act(input) {
+                calls.push(input);
+                before?.(input);
+                return await adapter.act(input);
+            },
+        },
+    };
+}
+/**
+ * The options every check passes: whatever the harness configured, the token
+ * under test, and a provider holding the harness's credential.
+ *
+ * The provider is supplied on every call, including the checks that expect a
+ * refusal, so that an adapter which legitimately needs a secret to act is not
+ * failed for the absence of one. Whether the secret is reachable is check (6)'s
+ * question, not check (1)'s.
+ */
+function callOptions(unit, harness, token) {
+    return {
+        ...unit.options,
+        token,
+        credentials: inMemoryCredentials({
+            ...harness.credentials,
+            // Last, so the hunted value cannot be shadowed by a configuration entry.
+            [harness.credential.name]: harness.credential.value,
+        }),
+    };
+}
+/** Records currently in the log; the suite counts them before and after. */
+function recordsOf(logPath) {
+    const read = readVerifiedRecords(logPath);
+    assert.equal(read.ok, true, `conformance log does not verify: ${JSON.stringify(read)}`);
+    return read.ok ? read.records : [];
+}
+/**
+ * What the contract should have lifted from this detail (APRV-251), computed by
+ * the very function that lifts it.
+ *
+ * Asking the contract rather than re-deriving the rule is the point: an adapter
+ * is conformant when the record agrees with the contract's own reading of its
+ * detail, and a suite that spelled the rule a second time would eventually
+ * disagree with the runtime and fail an adapter that had done nothing wrong.
+ *
+ * The detail here is the REDACTED copy the result carried, and this check runs
+ * against an adapter that leaked nothing (check (6) is where a leak is hunted),
+ * so both copies are the same bytes and passing one twice asks the same
+ * question the contract asked.
+ */
+function expectedProviderRef(adapterName, detail) {
+    if (detail === undefined)
+        return null;
+    return providerRefFor(adapterName, detail, detail);
+}
+function assertClean(logPath) {
+    const result = verify(logPath);
+    assert.equal(result.status, "clean", `chain not clean: ${JSON.stringify(result)}`);
+}
+/**
+ * Run the suite. Resolves when every check passes; throws (an `AssertionError`)
+ * on the first failure.
+ */
+export async function runAdapterConformance(t, makeAdapter, harness) {
+    await checkBadToken(t, makeAdapter, harness);
+    await checkWrongPayload(t, makeAdapter, harness);
+    await checkWrongClass(t, makeAdapter, harness);
+    await checkHappyPath(t, makeAdapter, harness);
+    await checkSingleUse(t, makeAdapter, harness);
+    await checkCredentialScope(t, makeAdapter, harness);
+    await checkReportedFailure(t, makeAdapter, harness);
+    await checkObserve(t, makeAdapter, harness);
+}
+// ---------------------------------------------------------------------------
+// (8) observe, when the adapter offers one, reads and does not write (APRV-245)
+// ---------------------------------------------------------------------------
+/**
+ * The optional `observe` (SPEC.md §10.4, APRV-245).
+ *
+ * SKIPPED for an adapter that declares none — it is optional, and an adapter
+ * without it is conformant. For one that declares it, three properties, and
+ * each is the failure somebody would otherwise ship:
+ *
+ * - **It does not write.** A coverage read that sent something would be the
+ *   worst defect this contract could carry. The harness's `writes()` counts the
+ *   far side's write requests where the fixture can see them (the AgentMail mock
+ *   counts POSTs), and the log is counted on both sides regardless: no record is
+ *   appended by a read.
+ * - **It does not throw.** A reporting verb calls this, and an adapter whose
+ *   far side is quiet must answer "nothing" rather than take the report down.
+ *   A configured harness reaching a live fixture has no excuse to throw.
+ * - **Every effect carries a class the adapter serves.** An effect of a class
+ *   this adapter does not handle is an effect it cannot have observed, and
+ *   admitting one would let a source contribute rows nothing could ever cover.
+ */
+async function checkObserve(t, makeAdapter, harness) {
+    const adapter = makeAdapter();
+    if (adapter.observe === undefined) {
+        say(t, "observe() is not implemented; the optional read is skipped");
+        return;
+    }
+    say(t, "observe() reads: no write to the far side, no throw, and only its own classes");
+    const unit = await harness.setup();
+    try {
+        const probe = harness.observeProbe;
+        const writesBefore = probe?.writes?.() ?? 0;
+        const recordsBefore = recordsOf(unit.logPath).length;
+        const window = probe?.window ?? {
+            since: "1970-01-01T00:00:00Z",
+            until: "2999-12-31T23:59:59Z",
+        };
+        const effects = await adapter.observe(window, inMemoryCredentials({
+            ...harness.credentials,
+            [harness.credential.name]: harness.credential.value,
+        }));
+        assert.equal(probe?.writes?.() ?? 0, writesBefore, "observe() made a write request against the far side; it is a READ, called outside any grant window and with no token (SPEC.md §10.4)");
+        assert.equal(recordsOf(unit.logPath).length, recordsBefore, "observe() appended to the log; a coverage read records nothing");
+        for (const effect of effects) {
+            assert.ok(adapter.classes.includes(effect.class), `observe() returned an effect of class ${JSON.stringify(effect.class)}, which this adapter does not serve`);
+            assert.ok(effect.id.length > 0, "an observed effect must carry the provider's own id");
+            assert.ok(effect.source.length > 0, "an observed effect must name its source");
+        }
+        assertClean(unit.logPath);
+    }
+    finally {
+        unit.cleanup?.();
+    }
+}
+// ---------------------------------------------------------------------------
+// (1) a bad token never reaches act
+// ---------------------------------------------------------------------------
+async function checkBadToken(t, makeAdapter, harness) {
+    say(t, "a token that is not the minted one refuses, and act never runs");
+    const unit = await harness.setup();
+    try {
+        const spy = spyOn(makeAdapter());
+        const before = recordsOf(unit.logPath).length;
+        const result = await executeThroughAdapter(spy.adapter, { logPath: unit.logPath, actionKey: unit.actionKey, payload: unit.payload, actor: unit.actor }, callOptions(unit, harness, "not-the-token"));
+        assert.equal(result.ok, false, "a bad token must not produce a completed execution");
+        if (!result.ok) {
+            assert.equal(result.code, "token-mismatch", `wrong refusal code: ${result.code}`);
+            assert.equal(result.acted, false, "the refusal must say no side effect was attempted");
+        }
+        assert.equal(spy.calls.length, 0, "act() ran on an unauthorized token (SPEC.md §10.4)");
+        assert.equal(recordsOf(unit.logPath).length, before, "a refused execution appended a record");
+        assertClean(unit.logPath);
+    }
+    finally {
+        unit.cleanup?.();
+    }
+}
+// ---------------------------------------------------------------------------
+// (2) the wrong bytes never reach act
+// ---------------------------------------------------------------------------
+async function checkWrongPayload(t, makeAdapter, harness) {
+    say(t, "a payload the grant did not bind to refuses payload-mismatch");
+    const unit = await harness.setup();
+    try {
+        const spy = spyOn(makeAdapter());
+        const before = recordsOf(unit.logPath).length;
+        const tampered = { approved: unit.payload, tampered: "after the human said yes" };
+        const result = await executeThroughAdapter(spy.adapter, { logPath: unit.logPath, actionKey: unit.actionKey, payload: tampered, actor: unit.actor }, callOptions(unit, harness, unit.token));
+        assert.equal(result.ok, false, "different bytes must not execute against an old grant");
+        if (!result.ok) {
+            assert.equal(result.code, "payload-mismatch", `wrong refusal code: ${result.code}`);
+            assert.equal(result.acted, false, "the refusal must say no side effect was attempted");
+        }
+        assert.equal(spy.calls.length, 0, "act() ran on bytes no human approved (SPEC.md §10.4)");
+        assert.equal(recordsOf(unit.logPath).length, before, "a refused execution appended a record");
+        // The token is still live: the repair is a new request for the new payload.
+        const good = await executeThroughAdapter(spyOn(makeAdapter()).adapter, { logPath: unit.logPath, actionKey: unit.actionKey, payload: unit.payload, actor: unit.actor }, callOptions(unit, harness, unit.token));
+        assert.equal(good.ok, true, `a payload-mismatch must leave the token live: ${JSON.stringify(good)}`);
+        assertClean(unit.logPath);
+    }
+    finally {
+        unit.cleanup?.();
+    }
+}
+// ---------------------------------------------------------------------------
+// (3) the wrong adapter appends nothing
+// ---------------------------------------------------------------------------
+async function checkWrongClass(t, makeAdapter, harness) {
+    say(t, "an adapter that does not serve the declared class refuses, log untouched");
+    const unit = await harness.setup();
+    try {
+        const base = makeAdapter();
+        const foreign = {
+            ...base,
+            classes: [harness.foreignClass ?? "conformance.class.this-adapter-does-not-serve"],
+            act: base.act.bind(base),
+        };
+        assert.ok(!foreign.classes.includes(unit.class), "harness.foreignClass names the class under test; it must name one the adapter does not serve");
+        const spy = spyOn(foreign);
+        const before = recordsOf(unit.logPath).length;
+        const result = await executeThroughAdapter(spy.adapter, { logPath: unit.logPath, actionKey: unit.actionKey, payload: unit.payload, actor: unit.actor }, callOptions(unit, harness, unit.token));
+        assert.equal(result.ok, false, "a misrouted action must not execute");
+        if (!result.ok) {
+            assert.equal(result.code, "adapter-class-mismatch", `wrong refusal code: ${result.code}`);
+            assert.equal(result.acted, false, "the refusal must say no side effect was attempted");
+        }
+        assert.equal(spy.calls.length, 0, "act() ran for a class the adapter does not serve");
+        assert.equal(recordsOf(unit.logPath).length, before, "a misrouted action appended a record; a wiring mistake must not spend a token");
+        assertClean(unit.logPath);
+    }
+    finally {
+        unit.cleanup?.();
+    }
+}
+// ---------------------------------------------------------------------------
+// (4) started precedes the side effect
+// ---------------------------------------------------------------------------
+async function checkHappyPath(t, makeAdapter, harness) {
+    say(t, "execution.started is in the log before act runs, completed after");
+    const unit = await harness.setup();
+    try {
+        let sawStart = false;
+        const spy = spyOn(makeAdapter(), () => {
+            sawStart = recordsOf(unit.logPath).some((record) => record.event === "execution.started" && record.action_key === unit.actionKey);
+        });
+        const result = await executeThroughAdapter(spy.adapter, { logPath: unit.logPath, actionKey: unit.actionKey, payload: unit.payload, actor: unit.actor }, callOptions(unit, harness, unit.token));
+        assert.equal(result.ok, true, `the granted action was refused: ${JSON.stringify(result)}`);
+        assert.equal(spy.calls.length, 1, "act() must be called exactly once for a granted action");
+        assert.equal(sawStart, true, "act() ran before execution.started was in the log; a log that records an execution only once it succeeded cannot tell you about the one that did not (SPEC.md §10.4)");
+        const records = recordsOf(unit.logPath);
+        const started = records.find((record) => record.event === "execution.started" && record.action_key === unit.actionKey);
+        const completed = records.find((record) => record.event === "execution.completed" && record.action_key === unit.actionKey);
+        assert.ok(started !== undefined, "no execution.started was appended");
+        assert.ok(completed !== undefined, "no execution.completed was appended");
+        assert.ok(started.seq < completed.seq, "the outcome must follow the start");
+        if (result.ok) {
+            assert.equal(result.started_seq, started.seq, "the result names the wrong start record");
+            assert.equal(result.outcome_seq, completed.seq, "the result names the wrong outcome record");
+            assert.equal(result.outcome, "execution.completed", "the result names the wrong outcome");
+            assert.equal(result.exit_code, 0, "a completed execution records exit_code 0");
+        }
+        // The adapter saw the approved bytes, not a copy assembled from the log.
+        const call = spy.calls[0];
+        assert.ok(call !== undefined);
+        assert.deepEqual(call.payload, unit.payload, "act() was handed different bytes");
+        assert.equal(call.actionKey, unit.actionKey, "act() was handed a different action key");
+        // The provider reference (APRV-251). An adapter that names one under the
+        // conventional key gets it onto the record, under THIS adapter's name and
+        // with the id unchanged; an adapter that names none gets a record carrying
+        // no reference, which is the pre-amendment record and always valid. Both
+        // directions are checked because both are ways to be wrong: a reference
+        // quietly dropped sends `approval coverage` back to the class-and-window
+        // rule without saying so, and a reference invented for an adapter that
+        // named none puts a value in a join column that means nothing.
+        const expected = expectedProviderRef(spy.adapter.name, result.ok ? result.detail : undefined);
+        const recorded = payloadOf(completed)["provider_ref"];
+        if (expected === null) {
+            assert.equal(recorded, undefined, `execution.completed carries a provider_ref the adapter's detail never named: ${JSON.stringify(recorded)}`);
+        }
+        else {
+            assert.deepEqual(recorded, { adapter: expected.adapter, id: expected.id }, "the detail named a provider reference and the record does not carry it (APRV-251)");
+            if (result.ok) {
+                assert.deepEqual(result.provider_ref, expected, "the result must name the reference the record carries");
+            }
+        }
+        assertClean(unit.logPath);
+    }
+    finally {
+        unit.cleanup?.();
+    }
+}
+// ---------------------------------------------------------------------------
+// (5) single use
+// ---------------------------------------------------------------------------
+async function checkSingleUse(t, makeAdapter, harness) {
+    say(t, "a second execution with the same token and key refuses without acting");
+    const unit = await harness.setup();
+    try {
+        const first = await executeThroughAdapter(spyOn(makeAdapter()).adapter, { logPath: unit.logPath, actionKey: unit.actionKey, payload: unit.payload, actor: unit.actor }, callOptions(unit, harness, unit.token));
+        assert.equal(first.ok, true, `the first execution was refused: ${JSON.stringify(first)}`);
+        const spy = spyOn(makeAdapter());
+        const before = recordsOf(unit.logPath).length;
+        const second = await executeThroughAdapter(spy.adapter, { logPath: unit.logPath, actionKey: unit.actionKey, payload: unit.payload, actor: unit.actor }, callOptions(unit, harness, unit.token));
+        assert.equal(second.ok, false, "an idempotency key is single-use (SPEC.md §6.2, §7)");
+        if (!second.ok) {
+            assert.ok(second.code === "token-consumed" || second.code === "already-executed", `a replay must refuse token-consumed or already-executed, got ${second.code}`);
+            assert.equal(second.acted, false, "the replay attempted the side effect a second time");
+        }
+        assert.equal(spy.calls.length, 0, "act() ran twice for one idempotency key");
+        assert.equal(recordsOf(unit.logPath).length, before, "a refused replay appended a record");
+        assertClean(unit.logPath);
+    }
+    finally {
+        unit.cleanup?.();
+    }
+}
+// ---------------------------------------------------------------------------
+// (6) credentials: scoped in time, absent from everything written
+// ---------------------------------------------------------------------------
+async function checkCredentialScope(t, makeAdapter, harness) {
+    say(t, "a credential read inside act reaches no log line and no result field");
+    const unit = await harness.setup();
+    const { name, value } = harness.credential;
+    assert.ok(value.length >= 8, "harness.credential.value must be distinctive enough to hunt for");
+    try {
+        const base = makeAdapter();
+        // A hostile shell: it reads the secret, keeps the provider, and then tries
+        // to publish the secret through its own outcome. Every one of those is a
+        // thing a careless adapter does by accident.
+        let escaped = null;
+        let stashed = null;
+        const leaky = {
+            ...base,
+            async act(input) {
+                stashed = input.credentials;
+                const got = input.credentials.get(name);
+                escaped = got;
+                assert.equal(got.ok, true, `the credential window refused inside act: ${JSON.stringify(got)}`);
+                await base.act(input);
+                return { ok: true, detail: { note: `authenticated with ${value}`, [value]: "as a key too" } };
+            },
+        };
+        const result = await executeThroughAdapter(leaky, { logPath: unit.logPath, actionKey: unit.actionKey, payload: unit.payload, actor: unit.actor }, callOptions(unit, harness, unit.token));
+        assert.equal(result.ok, true, `the granted action was refused: ${JSON.stringify(result)}`);
+        assert.notEqual(escaped, null, "the hostile wrapper never asked for the credential");
+        // Nothing the contract returns carries the secret.
+        const serialized = JSON.stringify(result);
+        assert.equal(serialized.includes(value), false, `the execution result carries the raw credential (SPEC.md §11.1 invariant 3): ${serialized}`);
+        if (result.ok) {
+            assert.ok(result.redactions > 0, "the contract redacted nothing although the adapter published the secret; a silent pass here means the guard is not running");
+        }
+        // Nothing the log holds carries the secret, on any line.
+        const raw = readFileSync(unit.logPath, "utf8");
+        assert.equal(raw.includes(value), false, "a raw credential value appears in the log (SPEC.md §11.1 invariant 3)");
+        // And the window is shut: the provider the adapter kept is the same object
+        // it held inside act, and it now refuses. This is read after the execution
+        // returned rather than from a deferred callback inside act, because a
+        // microtask queued inside act runs before the await that closes the window
+        // and would test the wrong instant.
+        assert.notEqual(stashed, null, "the hostile wrapper never kept the provider");
+        const late = stashed.get(name);
+        assert.equal(late.ok, false, "the credential provider still answered after act() returned");
+        if (!late.ok) {
+            assert.equal(late.code, "credential-window-closed", `a post-window read must refuse credential-window-closed, got ${late.code}`);
+        }
+        assertClean(unit.logPath);
+    }
+    finally {
+        unit.cleanup?.();
+    }
+}
+// ---------------------------------------------------------------------------
+// (7) a reported failure is recorded, not swallowed
+// ---------------------------------------------------------------------------
+async function checkReportedFailure(t, makeAdapter, harness) {
+    say(t, "an adapter that reports failure produces execution.failed");
+    const unit = await harness.setup();
+    try {
+        const base = makeAdapter();
+        const failing = {
+            ...base,
+            act() {
+                return { ok: false, code: "upstream-rejected", message: "the far side said no" };
+            },
+        };
+        const result = await executeThroughAdapter(failing, { logPath: unit.logPath, actionKey: unit.actionKey, payload: unit.payload, actor: unit.actor }, callOptions(unit, harness, unit.token));
+        assert.equal(result.ok, false, "a failed act must not report a completed execution");
+        if (!result.ok) {
+            assert.equal(result.code, "adapter-failed", `wrong refusal code: ${result.code}`);
+            assert.equal(result.acted, true, "the side effect was attempted and the result must say so");
+            assert.equal(result.adapter_code, "upstream-rejected", "the adapter's own code was lost");
+            assert.equal(result.outcome, "execution.failed", "the wrong outcome was recorded");
+        }
+        const records = recordsOf(unit.logPath);
+        const failed = records.find((record) => record.event === "execution.failed" && record.action_key === unit.actionKey);
+        assert.ok(failed !== undefined, "no execution.failed was appended for a failed act()");
+        assertClean(unit.logPath);
+    }
+    finally {
+        unit.cleanup?.();
+    }
+}
+//# sourceMappingURL=conformance.js.map

package/dist/src/adapters/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../../../src/adapters/conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAEH,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,GAQf,MAAM,eAAe,CAAC;AAqFvB,SAAS,GAAG,CAAC,CAAqB,EAAE,OAAe;IACjD,CAAC,CAAC,UAAU,EAAE,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,KAAK,CAAC,OAAgB,EAAE,MAAkC;IACjE,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,OAAO;QACL,KAAK;QACL,uEAAuE;QACvE,4EAA4E;QAC5E,4EAA4E;QAC5E,sEAAsE;QACtE,wBAAwB;QACxB,OAAO,EAAE;YACP,GAAG,OAAO;YACV,KAAK,CAAC,GAAG,CAAC,KAAe;gBACvB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClB,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;gBAChB,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAClB,IAA4B,EAC5B,OAAkC,EAClC,KAAa;IAEb,OAAO;QACL,GAAG,IAAI,CAAC,OAAO;QACf,KAAK;QACL,WAAW,EAAE,mBAAmB,CAAC;YAC/B,GAAG,OAAO,CAAC,WAAW;YACtB,yEAAyE;YACzE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK;SACpD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,mBAAmB,CAAC,WAAmB,EAAE,MAA6B;IAC7E,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,CAAqB,EACrB,WAA0B,EAC1B,OAAkC;IAElC,MAAM,aAAa,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,iBAAiB,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,eAAe,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,cAAc,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,cAAc,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,oBAAoB,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,oBAAoB,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,YAAY,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,YAAY,CACzB,CAAqB,EACrB,WAA0B,EAC1B,OAAkC;IAElC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,CAAC,EAAE,4DAA4D,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,GAAG,CAAC,CAAC,EAAE,+EAA+E,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC;QACnC,MAAM,YAAY,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACrD,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI;YAC9B,KAAK,EAAE,sBAAsB;YAC7B,KAAK,EAAE,sBAAsB;SAC9B,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CACnC,MAAM,EACN,mBAAmB,CAAC;YAClB,GAAG,OAAO,CAAC,WAAW;YACtB,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK;SACpD,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,KAAK,CACV,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EACtB,YAAY,EACZ,sIAAsI,CACvI,CAAC;QACF,MAAM,CAAC,KAAK,CACV,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAC9B,aAAa,EACb,gEAAgE,CACjE,CAAC;QACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,EAAE,CACP,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EACtC,yCAAyC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAC3G,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,qDAAqD,CAAC,CAAC;YACvF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,yCAAyC,CAAC,CAAC;QACjF,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,KAAK,UAAU,aAAa,CAC1B,CAAqB,EACrB,WAA0B,EAC1B,OAAkC;IAElC,GAAG,CAAC,CAAC,EAAE,gEAAgE,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,GAAG,CAAC,OAAO,EACX,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC9F,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,eAAe,CAAC,CAC5C,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,oDAAoD,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,uBAAuB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAClF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,mDAAmD,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,oDAAoD,CAAC,CAAC;QACxF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,uCAAuC,CAAC,CAAC;QAC9F,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,KAAK,UAAU,iBAAiB,CAC9B,CAAqB,EACrB,WAA0B,EAC1B,OAAkC;IAElC,GAAG,CAAC,CAAC,EAAE,8DAA8D,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC9C,MAAM,QAAQ,GAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,0BAA0B,EAAE,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,GAAG,CAAC,OAAO,EACX,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC1F,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CACvC,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,uDAAuD,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,uBAAuB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACpF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,mDAAmD,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,sDAAsD,CAAC,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,uCAAuC,CAAC,CAAC;QAE9F,4EAA4E;QAC5E,MAAM,IAAI,GAAG,MAAM,qBAAqB,CACtC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAC5B,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC9F,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CACvC,CAAC;QACF,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,EAAE,EACP,IAAI,EACJ,iDAAiD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;QACF,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,wCAAwC;AACxC,8EAA8E;AAE9E,KAAK,UAAU,eAAe,CAC5B,CAAqB,EACrB,WAA0B,EAC1B,OAAkC;IAElC,GAAG,CAAC,CAAC,EAAE,0EAA0E,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAY;YACvB,GAAG,IAAI;YACP,OAAO,EAAE,CAAC,OAAO,CAAC,YAAY,IAAI,+CAA+C,CAAC;YAClF,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;SACzB,CAAC;QACF,MAAM,CAAC,EAAE,CACP,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EACrC,8FAA8F,CAC/F,CAAC;QACF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAE3B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,GAAG,CAAC,OAAO,EACX,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC9F,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CACvC,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,qCAAqC,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,EAAE,uBAAuB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,mDAAmD,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,kDAAkD,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CACV,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAC9B,MAAM,EACN,+EAA+E,CAChF,CAAC;QACF,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,uCAAuC;AACvC,8EAA8E;AAE9E,KAAK,UAAU,cAAc,CAC3B,CAAqB,EACrB,WAA0B,EAC1B,OAAkC;IAElC,GAAG,CAAC,CAAC,EAAE,kEAAkE,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE;YACpC,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CACrC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,mBAAmB,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,CACzF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,GAAG,CAAC,OAAO,EACX,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC9F,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CACvC,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,mCAAmC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,wDAAwD,CAAC,CAAC;QAC5F,MAAM,CAAC,KAAK,CACV,QAAQ,EACR,IAAI,EACJ,sKAAsK,CACvK,CAAC;QAEF,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAC1B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,mBAAmB,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,CACzF,CAAC;QACF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAC5B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,qBAAqB,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,CAC3F,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,SAAS,EAAE,mCAAmC,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,SAAS,KAAK,SAAS,EAAE,qCAAqC,CAAC,CAAC;QAC1E,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC;YACzF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;YAC7F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,qBAAqB,EAAE,oCAAoC,CAAC,CAAC;YAC1F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,2CAA2C,CAAC,CAAC;QACjF,CAAC;QAED,yEAAyE;QACzE,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC9B,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,kCAAkC,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC;QAExF,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CACV,QAAQ,EACR,SAAS,EACT,gFAAgF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAC3G,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,SAAS,CACd,QAAQ,EACR,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAC9C,mFAAmF,CACpF,CAAC;YACF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,MAAM,CAAC,SAAS,CACd,MAAM,CAAC,YAAY,EACnB,QAAQ,EACR,uDAAuD,CACxD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,KAAK,UAAU,cAAc,CAC3B,CAAqB,EACrB,WAA0B,EAC1B,OAAkC;IAElC,GAAG,CAAC,CAAC,EAAE,uEAAuE,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,qBAAqB,CACvC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAC5B,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC9F,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CACvC,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE1F,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,GAAG,CAAC,OAAO,EACX,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC9F,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CACvC,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,qDAAqD,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,IAAI,KAAK,gBAAgB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EACtE,gEAAgE,MAAM,CAAC,IAAI,EAAE,CAC9E,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,oDAAoD,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,yCAAyC,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,oCAAoC,CAAC,CAAC;QAC3F,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAE9E,KAAK,UAAU,oBAAoB,CACjC,CAAqB,EACrB,WAA0B,EAC1B,OAAkC;IAElC,GAAG,CAAC,CAAC,EAAE,sEAAsE,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACnC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAC3C,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,iEAAiE,CAAC,CAAC;IAChG,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;QAC3B,2EAA2E;QAC3E,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,OAAO,GAAY,IAAI,CAAC;QAC5B,IAAI,OAAO,GAA8B,IAAI,CAAC;QAC9C,MAAM,KAAK,GAAY;YACrB,GAAG,IAAI;YACP,KAAK,CAAC,GAAG,CAAC,KAAe;gBACvB,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC;gBAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxC,OAAO,GAAG,GAAG,CAAC;gBACd,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,6CAA6C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC/F,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACtB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,sBAAsB,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC;YAChG,CAAC;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,KAAK,EACL,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC9F,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CACvC,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,mCAAmC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,oDAAoD,CAAC,CAAC;QAErF,mDAAmD;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC1B,KAAK,EACL,gFAAgF,UAAU,EAAE,CAC7F,CAAC;QACF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,UAAU,GAAG,CAAC,EACrB,4HAA4H,CAC7H,CAAC;QACJ,CAAC;QAED,yDAAyD;QACzD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CACV,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EACnB,KAAK,EACL,uEAAuE,CACxE,CAAC;QAEF,2EAA2E;QAC3E,2EAA2E;QAC3E,sEAAsE;QACtE,2EAA2E;QAC3E,oCAAoC;QACpC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,6CAA6C,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAI,OAAyC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,6DAA6D,CAAC,CAAC;QAC5F,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,IAAI,EACT,0BAA0B,EAC1B,gEAAgE,IAAI,CAAC,IAAI,EAAE,CAC5E,CAAC;QACJ,CAAC;QAED,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,oDAAoD;AACpD,8EAA8E;AAE9E,KAAK,UAAU,oBAAoB,CACjC,CAAqB,EACrB,WAA0B,EAC1B,OAAkC;IAElC,GAAG,CAAC,CAAC,EAAE,2DAA2D,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAY;YACvB,GAAG,IAAI;YACP,GAAG;gBACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;YACnF,CAAC;SACF,CAAC;QAEF,MAAM,MAAM,GAAyB,MAAM,qBAAqB,CAC9D,OAAO,EACP,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC9F,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CACvC,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,oDAAoD,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,uBAAuB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAClF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,0DAA0D,CAAC,CAAC;YAC7F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,mBAAmB,EAAE,iCAAiC,CAAC,CAAC;YAC1F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,gCAAgC,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,kBAAkB,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,CACxF,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,qDAAqD,CAAC,CAAC;QACvF,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}