approval-md 0.1.0 → 0.3.0

package/dist/src/core/decision-refusal.d.ts

@@ -0,0 +1,206 @@
+/**
+ * What the log says when a human decided and the gate could not take it
+ * (APRV-235, amended SPEC.md §5.2).
+ *
+ * ## The fact this module is about
+ *
+ * Seen live on 2026-09-02, after the seq 13704 ceremony. Carter tapped approve
+ * on a request that had been asked under the previous policy. The gate refused
+ * `policy-drift`, which is right: the rules the approver was shown are not the
+ * rules in force, so a grant recorded there would claim a decision under a
+ * policy nobody put in front of them. But the refusal went to the operator's
+ * terminal and nowhere else. Nothing was appended, the request stayed pending
+ * in `QUEUE.md` and on Telegram, and the person who had tapped saw no reaction
+ * at all.
+ *
+ * Three things were wrong and this module fixes two of them (the third, the
+ * message edit, belongs to the channels).
+ *
+ * ## 1. A human's decision is a fact even when the gate cannot honour it
+ *
+ * The log is the truth. SPEC.md §11 makes human attention the audit budget, and
+ * an approver's tap SPENDS it whether or not an authorization comes out the
+ * other end. A reader looking at that log later found a request sitting
+ * unanswered with nothing to say a person had answered it, which is a question
+ * the log is supposed to be able to settle.
+ *
+ * So {@link recordRefusedDecision} appends one `audit.decision_refused`. It is
+ * an **audit-tier** record in the strict sense:
+ *
+ * - it grants nothing and mints no token;
+ * - `core/state.ts` does not settle a request on it, so no verdict moves;
+ * - `core/budgets.ts` charges nothing for it, so no budget moves;
+ * - `core/audit.ts` does not sample it and no streak counts it.
+ *
+ * `tests/decision-refusal.test.ts` asserts that last group by construction: the
+ * derived request state, the budget verdicts and the sampling draw are taken
+ * before and after and compared, and they are identical.
+ *
+ * ## The asymmetry: humans yes, agents no
+ *
+ * Gate-side refusals handed to an AGENT stay unlogged, and that is a choice
+ * rather than an omission. An agent that is refused reads the code, stops or
+ * asks again, and nothing was spent that a record could account for. A human
+ * who is refused has already spent the scarce thing, and cannot be asked to
+ * spend it again without the log saying the first spend happened. Recording
+ * every agent-side refusal would also put the busiest path in the runtime — a
+ * hook classifying every shell command — into the append path, which is a cost
+ * with no reader.
+ *
+ * ## 2. A request the gate calls void must stop being offered
+ *
+ * `policy-drift` is the one refusal where the gate does not merely decline this
+ * decision, it declares the REQUEST dead: "the pending request is void and the
+ * action must be requested again". Leaving it pending afterwards offers every
+ * approver on every channel a tap that cannot be honoured, forever, until the
+ * TTL lapses. So a drift refusal also appends `approval.withdrawn` with the
+ * runtime's own reason, `policy-drift` (APRV-106 gave the event; the schema's
+ * cross-rule makes that reason `system:`-only and `system:` that-reason-only).
+ * `approval queue`, `QUEUE.md` and every channel then read the request as
+ * settled, because they all derive state from `core/state.ts` and it settles on
+ * `approval.withdrawn` without looking at who wrote it or why.
+ *
+ * The action is not stranded: its caller requests it again, and the new request
+ * is routed, budgeted and displayed under the policy actually in force. That is
+ * what the refusal message already told them to do.
+ *
+ * ## Order, and what an interrupted write leaves behind
+ *
+ * The audit record is appended first and the withdrawal second, naming it in
+ * `payload.refused_seq`. Two appends are two records — the log never batches —
+ * so a crash between them is a state this code can reach, and the order is
+ * chosen for which half is safe to have alone. The explanation without the
+ * withdrawal leaves the request pending exactly as it is today, and a reader can
+ * see why. The withdrawal without the explanation would take a request out of a
+ * human's queue with nothing on the record saying who tapped, or why it was
+ * refused, which is the failure this task exists to end.
+ *
+ * ## Invariants
+ *
+ * - **Gate-typed events never accept caller timestamps** (§11.1). `ts` comes
+ *   from the injected clock at the write boundary; there is no parameter.
+ * - **Every check-then-append passes through compare-and-append** (§11.1(5)).
+ *   Both writes state the head they were derived against, and the whole cycle
+ *   re-enters from a fresh read on `head-moved` through
+ *   {@link withHeadRetry} — the same bounded retry APRV-236 gave `decide`.
+ * - **Self-reported fields never reduce scrutiny** (§11.1). Everything here only
+ *   ADDS to what a reviewer sees. The approver's identity comes from the
+ *   decision surface's configured actor, the same source a grant's does, and the
+ *   record's own actor is `system:` so that neither party to the refusal is its
+ *   author.
+ * - **Refusals stay machine-readable and distinct** (§11.1). The gate's code is
+ *   copied verbatim; nothing here invents, merges or softens one.
+ *
+ * ## No attestation check, deliberately
+ *
+ * Nothing here asks whether the policy is attested, for the reason `reject` and
+ * `revoke` do not: this write confers no authority. Refusing to record a refusal
+ * because a file changed would be the strict direction pointing the wrong way,
+ * and the case where it would bite hardest is `policy-not-attested` itself —
+ * exactly the refusal an operator most needs the log to remember. The write
+ * boundary still validates every record, so what lands is still constrained.
+ */
+import { type AppendError, type EventRecord } from "./log.js";
+import { type Decision } from "./state.js";
+import type { GateOptions } from "./gate.js";
+import type { RecordedSender, SenderSource } from "./sender-identity.js";
+/**
+ * The actor every record here carries. `system:`, and the same id the runtime's
+ * other unprompted writes use: this is the gate stating what the gate did.
+ */
+export declare const DECISION_REFUSAL_ACTOR = "system:gate";
+/** The runtime's withdrawal reason, closed to requesters by the event schema. */
+export declare const POLICY_DRIFT_REASON = "policy-drift";
+/** Who decided what, on which surface — everything the record needs about the tap. */
+export interface RefusedDecision {
+    /** The action whose decision was refused. */
+    actionKey: string;
+    /** Which of the three human-only verbs was attempted. */
+    decision: Decision;
+    /**
+     * The approver, `human:<id>`, from the surface's configured identity or from
+     * the sender mapping that resolved one.
+     *
+     * `null` since APRV-324, for the one refusal where the runtime cannot name a
+     * person: a transport authenticated an account the attested policy binds to
+     * nobody. Writing the listener's own identity there would say the operator's
+     * decision was refused when the operator did not decide, which is the false
+     * record this whole module exists to avoid. The record then carries
+     * {@link RefusedDecision.sender} and no `actor`, and the event schema requires
+     * one or the other.
+     */
+    actor: string | null;
+    /** The surface that collected the gesture: `telegram`, `web`, `cli`. */
+    channel: string;
+    /**
+     * The authenticated sender the gesture arrived from (APRV-324), when the
+     * surface observed one, in the form the record carries it (APRV-370: raw, or
+     * the operator's keyed digest). The transport's own attribution, never
+     * anything the message claimed about itself (§11.1 invariant 4).
+     */
+    sender?: RecordedSender;
+    /** How the sender became the actor, when one did. */
+    senderSource?: SenderSource;
+}
+/** The gate refusal being recorded. Only these fields are ever read. */
+export interface RefusalFacts {
+    /** The gate's code, verbatim. */
+    code: string;
+    /** The gate's message, verbatim. */
+    message: string;
+    /**
+     * The two policy hashes the gate compared, on `policy-drift` alone. Supplied
+     * by the refusal that made the comparison rather than re-derived here: a
+     * second derivation could disagree with the one that actually refused, and
+     * then the record would describe a comparison nobody made.
+     */
+    drift?: {
+        requested: string;
+        attested: string;
+    };
+}
+/** What the module could not do. Never thrown; the caller carries on regardless. */
+export interface RefusalRecordFailure {
+    ok: false;
+    code: "log-unreadable" | "append-failed";
+    message: string;
+    append?: AppendError;
+}
+export type RecordRefusedDecisionResult = {
+    ok: true;
+    /**
+     * The `audit.decision_refused` record, or `null` when the refused actor
+     * was not a person and there was therefore nothing to record.
+     */
+    audit: EventRecord | null;
+    /** The `approval.withdrawn` record, on `policy-drift` alone; `null` otherwise. */
+    withdrawn: EventRecord | null;
+} | RefusalRecordFailure;
+/** Is this the refusal that declares the request itself void? */
+export declare function voidsTheRequest(code: string): boolean;
+/**
+ * Record that a human's decision was refused, and withdraw the request when the
+ * refusal was the gate declaring it void.
+ *
+ * Called by the decision SURFACES — `channels/contract.ts`'s
+ * `recordChannelDecision` and `cli/gate.ts`'s `commandDecide` — and never from
+ * inside `decide()`. That placement is deliberate twice over. `decide()`'s
+ * contract is that a refusal appends nothing, which is what lets a caller retry
+ * one without wondering what it wrote; and this record is about a HUMAN having
+ * decided, which is a fact only a surface that collected a human's gesture can
+ * assert.
+ *
+ * Best-effort by design: a failure here is returned, never thrown, and the
+ * caller shows the gate's refusal either way. The decision was already refused
+ * before this ran, and nothing about that outcome depends on this write landing.
+ *
+ * **Two writes, two retry cycles, and deliberately not one.** `head-retry.ts`
+ * asks that the unit of retry be a whole read-check-append cycle, and putting
+ * both appends inside one cycle would break that in the direction that matters:
+ * a moved head under the SECOND write would re-enter from the top and append a
+ * second `audit.decision_refused` for one tap. So each write has its own cycle,
+ * each re-reads and re-derives, and the withdrawal's cycle re-checks that the
+ * request is still pending — a decision or a withdrawal that landed in the
+ * window is the new verdict, and there is then nothing left to withdraw.
+ */
+export declare function recordRefusedDecision(logPath: string, decided: RefusedDecision, refusal: RefusalFacts, options?: GateOptions): RecordRefusedDecisionResult;

package/dist/src/core/decision-refusal.js

@@ -157,8 +157,16 @@ export function recordRefusedDecision(logPath, decided, refusal, options = {}) {
     // No person, no record. See {@link HUMAN_ACTOR}: `actor-not-human` is the
     // refusal a misconfigured channel gets, and it is the one refusal that says
     // nobody's attention was spent.
-    if (!HUMAN_ACTOR.test(decided.actor))
+    if (decided.actor !== null && !HUMAN_ACTOR.test(decided.actor)) {
         return { ok: true, audit: null, withdrawn: null };
+    }
+    // APRV-324. An unresolved sender is the other way to have no person — and the
+    // opposite case, because somebody's attention WAS spent: a human tapped from
+    // an account the policy names nobody for. The record is the only place an
+    // operator can learn that, and the id is the only thing it can say.
+    if (decided.actor === null && decided.sender === undefined) {
+        return { ok: true, audit: null, withdrawn: null };
+    }
     const attempts = attemptsOf(options.retryOnHeadMoved);
     const audit = withHeadRetry(attempts, () => appendAudit(logPath, decided, refusal, options));
     if (!audit.ok)
@@ -182,11 +190,25 @@ function appendAudit(logPath, decided, refusal, options) {
     // is asked for the task alone.
     const derivation = requestState(read.records, decided.actionKey, ts, null);
     const payload = {
-        actor: decided.actor,
+        ...(decided.actor === null ? {} : { actor: decided.actor }),
         decision: decided.decision,
         code: refusal.code,
         message: refusal.message,
     };
+    // APRV-324. The account the gesture came from, when the surface authenticated
+    // one. On an unmapped sender it is the whole of what is known about who
+    // tapped; on any other refusal of a sender-resolved decision it says which
+    // account spent the attention the record is accounting for.
+    if (decided.sender !== undefined) {
+        payload["sender"] = {
+            channel: decided.sender.channel,
+            id: decided.sender.id,
+            // APRV-370: only when true, so a raw record does not change shape.
+            ...(decided.sender.hashed === true ? { hashed: true } : {}),
+        };
+        if (decided.senderSource !== undefined)
+            payload["sender_source"] = decided.senderSource;
+    }
     if (refusal.drift !== undefined) {
         payload["policy_sha256_requested"] = refusal.drift.requested;
         payload["policy_sha256_attested"] = refusal.drift.attested;

package/dist/src/core/decision-refusal.js.map

@@ -1 +1 @@
-{"version":3,"file":"decision-refusal.js","sourceRoot":"","sources":["../../../src/core/decision-refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAqE,MAAM,UAAU,CAAC;AAC1G,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAiB,MAAM,YAAY,CAAC;AAG9E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,CAAC;AAEpD,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,GAAG,YAAY,CAAC;AAkDjC,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,KAAK,cAAc,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,OAAwB,EACxB,OAAqB,EACrB,OAAO,GAAgB,EAAE;IAEzB,0EAA0E;IAC1E,4EAA4E;IAC5E,gCAAgC;IAChC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAExF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAE5B,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9F,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,CAC7C,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CACvE,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;AACxE,CAAC;AAQD,iFAAiF;AACjF,SAAS,WAAW,CAClB,OAAe,EACf,OAAwB,EACxB,OAAqB,EACrB,OAAoB;IAEpB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,uEAAuE;IACvE,8EAA8E;IAC9E,6EAA6E;IAC7E,+BAA+B;IAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAE3E,MAAM,OAAO,GAA4B;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAC7D,OAAO,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC7D,CAAC;IAED,OAAO,SAAS,CACd,OAAO,EACP;QACE,EAAE;QACF,KAAK,EAAE,wBAAwB;QAC/B,KAAK,EAAE,sBAAsB;QAC7B,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QAC9D,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO;KACR,EACD,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CACvB,OAAe,EACf,OAAwB,EACxB,OAAqB,EACrB,UAAkB,EAClB,OAAoB;IAEpB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3E,IAAI,UAAU,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAExE,OAAO,SAAS,CACd,OAAO,EACP;QACE,EAAE;QACF,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,sBAAsB;QAC7B,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QAC9D,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,OAAO,EAAE;YACP,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,MAAM,EAAE,mBAAmB;YAC3B,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC;YACxB,WAAW,EAAE,UAAU;SACxB;KACF,EACD,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,OAAe,EACf,OAAoB;IAEpB,MAAM,IAAI,GAAG,mBAAmB,CAC9B,OAAO,EACP,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACxE,CAAC;IACF,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,OAAqB;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,MAAM,GACV,KAAK,KAAK,SAAS;QACjB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,8BAA8B,KAAK,CAAC,SAAS,mCAAmC,KAAK,CAAC,QAAQ,GAAG,CAAC;IACxG,OAAO,oLAAoL,MAAM,6HAA6H,CAAC;AACjU,CAAC;AAED,SAAS,SAAS,CAChB,OAAe,EACf,KAAiB,EACjB,OAAoB,EACpB,YAA4B;IAE5B,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC1D,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,2BAA2B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;QACxE,MAAM,EAAE,MAAM,CAAC,KAAK;KACrB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"decision-refusal.js","sourceRoot":"","sources":["../../../src/core/decision-refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAqE,MAAM,UAAU,CAAC;AAC1G,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAiB,MAAM,YAAY,CAAC;AAI9E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,CAAC;AAEpD,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAElD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,GAAG,YAAY,CAAC;AAsEjC,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,KAAK,cAAc,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,OAAwB,EACxB,OAAqB,EACrB,OAAO,GAAgB,EAAE;IAEzB,0EAA0E;IAC1E,4EAA4E;IAC5E,gCAAgC;IAChC,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,8EAA8E;IAC9E,6EAA6E;IAC7E,0EAA0E;IAC1E,oEAAoE;IACpE,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAE5B,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9F,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,CAC7C,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CACvE,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;AACxE,CAAC;AAQD,iFAAiF;AACjF,SAAS,WAAW,CAClB,OAAe,EACf,OAAwB,EACxB,OAAqB,EACrB,OAAoB;IAEpB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,uEAAuE;IACvE,8EAA8E;IAC9E,6EAA6E;IAC7E,+BAA+B;IAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAE3E,MAAM,OAAO,GAA4B;QACvC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC3D,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;IACF,8EAA8E;IAC9E,wEAAwE;IACxE,2EAA2E;IAC3E,4DAA4D;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,QAAQ,CAAC,GAAG;YAClB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;YAC/B,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;YACrB,mEAAmE;YACnE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;QACF,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1F,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAC7D,OAAO,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC7D,CAAC;IAED,OAAO,SAAS,CACd,OAAO,EACP;QACE,EAAE;QACF,KAAK,EAAE,wBAAwB;QAC/B,KAAK,EAAE,sBAAsB;QAC7B,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QAC9D,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO;KACR,EACD,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CACvB,OAAe,EACf,OAAwB,EACxB,OAAqB,EACrB,UAAkB,EAClB,OAAoB;IAEpB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3E,IAAI,UAAU,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAExE,OAAO,SAAS,CACd,OAAO,EACP;QACE,EAAE;QACF,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,sBAAsB;QAC7B,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QAC9D,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,OAAO,EAAE;YACP,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,MAAM,EAAE,mBAAmB;YAC3B,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC;YACxB,WAAW,EAAE,UAAU;SACxB;KACF,EACD,OAAO,EACP,IAAI,CAAC,IAAI,CACV,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,OAAe,EACf,OAAoB;IAEpB,MAAM,IAAI,GAAG,mBAAmB,CAC9B,OAAO,EACP,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACxE,CAAC;IACF,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,OAAqB;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,MAAM,GACV,KAAK,KAAK,SAAS;QACjB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,8BAA8B,KAAK,CAAC,SAAS,mCAAmC,KAAK,CAAC,QAAQ,GAAG,CAAC;IACxG,OAAO,oLAAoL,MAAM,6HAA6H,CAAC;AACjU,CAAC;AAED,SAAS,SAAS,CAChB,OAAe,EACf,KAAiB,EACjB,OAAoB,EACpB,YAA4B;IAE5B,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC1D,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,2BAA2B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;QACxE,MAAM,EAAE,MAAM,CAAC,KAAK;KACrB,CAAC;AACJ,CAAC"}