audit-tools 0.32.68 → 0.33.1

package/dist/shared/providers/proxyCatalog.js

@@ -0,0 +1,426 @@
+import { readFileSync } from "node:fs";
+import { mkdir } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { writeJsonFile } from "../io/json.js";
+import { resolveAuditCodeStateDir } from "../io/stateDir.js";
+import { validateSessionConfig } from "../validation/sessionConfig.js";
+/**
+ * The POPULATE cache for the repair-proxy lane: `GET <proxy>/registry` expanded into
+ * ready-to-fold `claude-worker` {@link DispatchableSource}s, written once per populate
+ * (Gate-0 build / explicit refresh) and READ by resolve — never fetched mid-resolve
+ * (`docs/reviews/commit3-proxy-kind1-transport-plan-2026-07-16.md` §populate/resolve).
+ *
+ * Named `catalog-cache.json`, NOT the `catalog-<auditor-id>.json` the reserved-name
+ * comment at `auditorSources.ts` anticipates: populate/resolve run on the AMBIENT
+ * path, where no auditor id exists to key on. The cache is machine-level like the
+ * declaration beside it — and it is a CACHE of live registry state, not resolved
+ * per-auditor capability, so an auditor-id key would assert an isolation the data
+ * doesn't have. Per-auditor never-inherit still holds: every resolve re-proves proxy
+ * REACH itself; the cache only supplies the expansion.
+ */
+export const PROXY_CATALOG_FILENAME = "catalog-cache.json";
+/** Top-K models expanded per backend provider when the operator declares no `top_k`. */
+export const DEFAULT_PROXY_TOP_K = 3;
+/** Timeout (ms) for populate-time model verification probes. */
+export const POPULATE_PROBE_TIMEOUT_MS = 3000;
+/** Concurrency limit for populate-time model verification probes. */
+export const POPULATE_PROBE_CONCURRENCY = 4;
+/**
+ * A same-endpoint cache younger than this skips the registry fetch + probes
+ * entirely (see the freshness short-circuit in {@link populateProxyCatalog}).
+ * Refresh throttle only — read-side staleness policy is a separate concern.
+ */
+export const POPULATE_CACHE_FRESH_TTL_MS = 10 * 60_000;
+/** Resolve the populate-cache path for this machine (state dir via `io/stateDir.ts`). */
+export function resolveProxyCatalogPath(homeDir) {
+    return join(resolveAuditCodeStateDir(homeDir), PROXY_CATALOG_FILENAME);
+}
+function finiteNonNegative(value) {
+    return typeof value === "number" && Number.isFinite(value) && value >= 0
+        ? value
+        : undefined;
+}
+/**
+ * Best-effort "higher = better" score for ranking. A flat `score` wins; otherwise
+ * the live repair-proxy's `capability` block supplies someone-else-maintained
+ * relative-capability RANKS (`composite_rank`, then `arena_rank`; lower = better,
+ * so negated). A model with none stays unscored and ranks last — capability-less
+ * registry rows are frequently non-chat models (TTS, embeddings) that cannot serve
+ * as agentic workers.
+ */
+function deriveScore(entry) {
+    if (typeof entry.score === "number" && Number.isFinite(entry.score)) {
+        return entry.score;
+    }
+    const capability = entry.capability;
+    if (capability === null || typeof capability !== "object")
+        return null;
+    const rank = finiteNonNegative(capability.composite_rank) ??
+        finiteNonNegative(capability.arena_rank);
+    return rank === undefined ? null : -rank;
+}
+/**
+ * Tolerantly extract context-window field from a registry entry or its nested
+ * `capability` block. Checks for `context_length`, `context_tokens`, `max_context`,
+ * `context_window` (first finite positive number wins).
+ */
+function deriveContextTokens(entry) {
+    for (const key of ["context_length", "context_tokens", "max_context", "context_window"]) {
+        const value = finiteNonNegative(entry[key]);
+        if (value !== undefined)
+            return value;
+    }
+    const capability = entry.capability;
+    if (capability !== null && typeof capability === "object") {
+        for (const key of ["context_length", "context_tokens", "max_context", "context_window"]) {
+            const value = finiteNonNegative(capability[key]);
+            if (value !== undefined)
+                return value;
+        }
+    }
+    return undefined;
+}
+/**
+ * Tolerantly extract `{provider, model, score, price}` rows from a registry payload,
+ * keeping only entries this process could actually dispatch through: `reachable` AND
+ * `has_key` must be literally `true` (the proxy's own liveness/credential verdicts).
+ * Anything malformed — wrong types, missing provider/model — is FILTERED, never thrown:
+ * a half-broken registry degrades to a smaller expansion, not a failed populate.
+ */
+function extractRegistryModels(payload) {
+    // The registry is providers × live models; tolerate a flat entry array, a
+    // `{providers|models|entries: [...]}` wrapper, or the live repair-proxy's
+    // provider-MAP form (`providers: {<name>: {has_key, reachable, models: [...]}}`
+    // — the name is the key, so it is folded into each entry as `name`), plus
+    // per-provider nested `models` in every form.
+    let container;
+    if (Array.isArray(payload)) {
+        container = payload;
+    }
+    else if (payload !== null && typeof payload === "object") {
+        for (const key of ["providers", "models", "entries"]) {
+            const wrapped = payload[key];
+            if (Array.isArray(wrapped)) {
+                container = wrapped;
+                break;
+            }
+            if (wrapped !== null && typeof wrapped === "object") {
+                container = Object.entries(wrapped).map(([name, entry]) => entry !== null && typeof entry === "object"
+                    ? { name, ...entry }
+                    : entry);
+                break;
+            }
+        }
+    }
+    if (!Array.isArray(container))
+        return [];
+    const models = [];
+    const push = (entry, provider, model) => {
+        if (typeof provider !== "string" || provider.trim().length === 0)
+            return;
+        if (typeof model !== "string" || model.trim().length === 0)
+            return;
+        if (entry.reachable !== true || entry.has_key !== true)
+            return;
+        models.push({
+            provider: provider.trim(),
+            model: model.trim(),
+            score: deriveScore(entry),
+            costPerMtok: finiteNonNegative(entry.cost_per_mtok) ??
+                finiteNonNegative(entry.price_per_mtok) ??
+                finiteNonNegative(entry.price),
+            contextTokens: deriveContextTokens(entry),
+        });
+    };
+    for (const raw of container) {
+        if (raw === null || typeof raw !== "object")
+            continue;
+        const entry = raw;
+        const provider = entry.provider ?? entry.name;
+        if (Array.isArray(entry.models)) {
+            // Provider-grouped form: reachable/has_key live on the provider row; each
+            // model row contributes id + score/price (and may override the flags).
+            for (const rawModel of entry.models) {
+                if (rawModel === null || typeof rawModel === "string") {
+                    if (typeof rawModel === "string")
+                        push(entry, provider, rawModel);
+                    continue;
+                }
+                if (typeof rawModel !== "object")
+                    continue;
+                const model = rawModel;
+                push({ ...entry, ...model, models: undefined }, provider, model.id ?? model.model);
+            }
+            continue;
+        }
+        push(entry, provider, entry.model ?? entry.id);
+    }
+    return models;
+}
+/**
+ * Expand registry models into `claude-worker` sources: per reachable+keyed backend
+ * provider, the top-K models by best-effort score (higher = better; unscored last).
+ * Shape per the plan's identity section: the transport never enters the identity —
+ * `backend_provider` + `model` key quota; `endpoint` is the proxy url the launch
+ * transport (3b) fronts the spawn with; `worker_kind` is `agentic` by definition
+ * (the whole point of the proxied lane is tool-call repair for a harness worker).
+ */
+function expandSources(models, options) {
+    const byProvider = new Map();
+    // Dedup by (provider, model): live registries list some models twice, and one
+    // pool identity must expand to exactly one source (first row wins).
+    const seen = new Set();
+    for (const model of models) {
+        const identity = `${model.provider}/${model.model}`;
+        if (seen.has(identity))
+            continue;
+        seen.add(identity);
+        const bucket = byProvider.get(model.provider) ?? [];
+        bucket.push(model);
+        byProvider.set(model.provider, bucket);
+    }
+    const sources = [];
+    // Stable, content-derived order (provider, then score desc, then model id) so a
+    // re-populate over identical registry state emits byte-identical sources.
+    for (const provider of [...byProvider.keys()].sort()) {
+        const ranked = byProvider
+            .get(provider)
+            .sort((a, b) => (b.score ?? Number.NEGATIVE_INFINITY) - (a.score ?? Number.NEGATIVE_INFINITY) ||
+            a.model.localeCompare(b.model))
+            .slice(0, options.topK);
+        for (const model of ranked) {
+            // Cost precedence: operator-declared (free-to-operator axis) > registry list
+            // price > absent (falls through to the models.dev catalog / tier downstream).
+            const cost = options.costPerMtok ?? model.costPerMtok;
+            sources.push({
+                id: `claude-worker:${provider}/${model.model}`,
+                provider: "claude-worker",
+                endpoint: options.endpoint,
+                backend_provider: provider,
+                model: model.model,
+                worker_kind: "agentic",
+                ...(cost !== undefined ? { cost_per_mtok: cost } : {}),
+                ...(model.contextTokens !== undefined
+                    ? { quota: { context_tokens: model.contextTokens } }
+                    : {}),
+            });
+        }
+    }
+    return sources;
+}
+/**
+ * Probe a single source to verify the model is actually reachable.
+ * Returns { dropped: true, reason } if the model should be excluded (404/unavailable),
+ * or { dropped: false } to keep the source.
+ */
+async function probeSource(source, endpoint, fetchImpl, timeoutMs) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const response = await fetchImpl(`${endpoint}/v1/messages`, {
+            method: "POST",
+            headers: {
+                "x-api-key": "audit-tools-populate-probe",
+                "anthropic-version": "2023-06-01",
+                "content-type": "application/json",
+            },
+            body: JSON.stringify({
+                model: `${source.backend_provider}/${source.model}`,
+                max_tokens: 1,
+                messages: [{ role: "user", content: "hi" }],
+            }),
+            signal: controller.signal,
+        });
+        // Check for 404 or model-not-found patterns
+        if (response.status === 404) {
+            return { dropped: true, reason: "HTTP 404" };
+        }
+        if (response.status >= 400) {
+            let bodyText = "";
+            try {
+                bodyText = await response.text();
+            }
+            catch {
+                // If body read fails, just use status code
+            }
+            const patterns = [/model_not_found/i, /\bmay not exist\b/i, /no such model/i];
+            if (patterns.some((p) => p.test(bodyText))) {
+                return { dropped: true, reason: `HTTP ${response.status} (model unavailable)` };
+            }
+        }
+        // 200, 401, 429, 5xx, etc. → keep the source
+        return { dropped: false };
+    }
+    catch (error) {
+        // Transport failure (timeout, network error) → fail-open, keep the source
+        return { dropped: false };
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
+/**
+ * Run probes with bounded concurrency using a simple worker pool.
+ */
+async function probeSourcesWithConcurrency(sources, endpoint, fetchImpl, timeoutMs, concurrency) {
+    const results = [];
+    let index = 0;
+    const worker = async () => {
+        while (index < sources.length) {
+            const currentIndex = index++;
+            const source = sources[currentIndex];
+            const probeResult = await probeSource(source, endpoint, fetchImpl, timeoutMs);
+            results[currentIndex] = {
+                source,
+                dropped: probeResult.dropped,
+                reason: probeResult.reason,
+            };
+        }
+    };
+    const workers = Array(Math.min(concurrency, sources.length))
+        .fill(null)
+        .map(() => worker());
+    await Promise.all(workers);
+    // results is index-assigned (results[currentIndex] = ...), so it is already in
+    // the sources' order regardless of probe completion order.
+    return results;
+}
+/**
+ * POPULATE: fetch `GET <endpoint>/registry` and write the expanded `claude-worker`
+ * sources to the machine-level cache. Network-bound and cacheable — runs at Gate-0
+ * build / explicit refresh, NEVER inside `resolveAmbientSources` (which only READS
+ * via {@link readProxyCatalog}). Never throws: a failed fetch returns
+ * `{written:false, reason}` and leaves any prior cache untouched; an empty/zero-match
+ * registry WRITES an empty expansion (fresh knowledge — resolve reports the lane
+ * unexpanded with a reason).
+ */
+export async function populateProxyCatalog(options) {
+    const endpoint = options.endpoint.replace(/\/+$/u, "");
+    const doFetch = options.fetchImpl ?? fetch;
+    // Freshness short-circuit: the populate trigger fires on EVERY
+    // confirmation-absent next-step (nextStepCommand.ts), and populate now carries
+    // live per-model probes — real `/v1/messages` POSTs through the proxy that cost
+    // seconds of wall AND burn free-tier rate quota. A same-endpoint cache younger
+    // than the TTL answers instead (measured 2026-07-17: per-invocation populate
+    // was ~5.6s live, which alone pushed the e2e wrapper tests past their
+    // timeouts). This is a REFRESH throttle, not staleness acceptance — the
+    // no-TTL-on-READ residual (backlog: catalog accepted arbitrarily stale by
+    // resolve) is unchanged.
+    const cached = readProxyCatalog({ homeDir: options.homeDir });
+    if (cached && cached.endpoint === endpoint) {
+        const nowMs = (options.now?.() ?? new Date()).getTime();
+        const fetchedMs = Date.parse(cached.fetched_at);
+        if (Number.isFinite(fetchedMs) &&
+            nowMs - fetchedMs >= 0 &&
+            nowMs - fetchedMs < POPULATE_CACHE_FRESH_TTL_MS) {
+            return {
+                sources: cached.sources,
+                written: false,
+                reason: `cache is fresh (fetched ${Math.round((nowMs - fetchedMs) / 1000)}s ago); refresh skipped.`,
+                dropped: [],
+            };
+        }
+    }
+    let payload;
+    try {
+        const response = await doFetch(`${endpoint}/registry`);
+        if (!response.ok) {
+            return {
+                sources: [],
+                written: false,
+                reason: `GET ${endpoint}/registry returned HTTP ${response.status}.`,
+                dropped: [],
+            };
+        }
+        payload = await response.json();
+    }
+    catch (error) {
+        return {
+            sources: [],
+            written: false,
+            reason: `GET ${endpoint}/registry failed: ${error instanceof Error ? error.message : String(error)}.`,
+            dropped: [],
+        };
+    }
+    let sources = expandSources(extractRegistryModels(payload), {
+        endpoint,
+        topK: options.topK ?? DEFAULT_PROXY_TOP_K,
+        costPerMtok: options.costPerMtok,
+    });
+    // Probe each source to verify reachability
+    const probeResults = await probeSourcesWithConcurrency(sources, endpoint, doFetch, POPULATE_PROBE_TIMEOUT_MS, POPULATE_PROBE_CONCURRENCY);
+    const dropped = [];
+    sources = probeResults
+        .filter((result) => {
+        if (result.dropped) {
+            dropped.push({
+                id: result.source.id ?? `claude-worker:${result.source.backend_provider}/${result.source.model}`,
+                reason: result.reason ?? "model unavailable",
+            });
+            return false;
+        }
+        return true;
+    })
+        .map((result) => result.source);
+    const catalog = {
+        fetched_at: (options.now?.() ?? new Date()).toISOString(),
+        endpoint,
+        sources,
+    };
+    const path = resolveProxyCatalogPath(options.homeDir);
+    try {
+        await mkdir(dirname(path), { recursive: true });
+        await writeJsonFile(path, catalog);
+    }
+    catch (error) {
+        return {
+            sources,
+            written: false,
+            reason: `could not write ${path}: ${error instanceof Error ? error.message : String(error)}.`,
+            dropped,
+        };
+    }
+    return { sources, written: true, dropped };
+}
+function defaultReadCatalogFile(path) {
+    try {
+        return readFileSync(path, "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * READ the populate cache. Returns the entries + `fetched_at` (NO TTL enforcement —
+ * staleness policy is a later commit; the caller decides). Degrades to `null` on
+ * absent / unparseable / structurally-invalid content — never throws (same bar as
+ * `readSourceDeclaration`: the resolve path must not be failable by a bad file).
+ * Cached sources are held to the shared source validator, so a hand-edited or
+ * version-skewed cache degrades to "no cache" rather than admitting a half-checked pool.
+ */
+export function readProxyCatalog(deps = {}) {
+    const path = resolveProxyCatalogPath(deps.homeDir);
+    const raw = (deps.readCatalogFile ?? defaultReadCatalogFile)(path);
+    if (raw === null)
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return null;
+    }
+    const { fetched_at, endpoint, sources } = parsed;
+    if (typeof fetched_at !== "string" || typeof endpoint !== "string")
+        return null;
+    if (!Array.isArray(sources))
+        return null;
+    const issues = validateSessionConfig({ sources });
+    if (issues.some((issue) => issue.severity === "error"))
+        return null;
+    return { fetched_at, endpoint, sources: sources };
+}
+//# sourceMappingURL=proxyCatalog.js.map

package/dist/shared/providers/proxyCatalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxyCatalog.js","sourceRoot":"","sources":["../../../src/shared/providers/proxyCatalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D,wFAAwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAE9C,qEAAqE;AACrE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,GAAG,MAAM,CAAC;AAEvD,yFAAyF;AACzF,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,OAAO,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC,CAAC;AACzE,CAAC;AAkDD,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QACtE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,KAA8B;IACjD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,IAAI,GACR,iBAAiB,CAAE,UAAsC,CAAC,cAAc,CAAC;QACzE,iBAAiB,CAAE,UAAsC,CAAC,UAAU,CAAC,CAAC;IACxE,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,KAA8B;IACzD,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACxF,MAAM,KAAK,GAAG,iBAAiB,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC1D,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,iBAAiB,CAAE,UAAsC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9E,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,OAAgB;IAC7C,0EAA0E;IAC1E,0EAA0E;IAC1E,gFAAgF;IAChF,0EAA0E;IAC1E,8CAA8C;IAC9C,IAAI,SAAgC,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,SAAS,GAAG,OAAO,CAAC;IACtB,CAAC;SAAM,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC3D,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;YACrD,MAAM,OAAO,GAAI,OAAmC,CAAC,GAAG,CAAC,CAAC;YAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,SAAS,GAAG,OAAO,CAAC;gBACpB,MAAM;YACR,CAAC;YACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CACxD,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;oBACzC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAI,KAAiC,EAAE;oBACjD,CAAC,CAAC,KAAK,CACV,CAAC;gBACF,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,KAA8B,EAAE,QAAiB,EAAE,KAAc,EAAE,EAAE;QACjF,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACzE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACnE,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO;QAC/D,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;YACzB,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACnB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;YACzB,WAAW,EACT,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC;gBACtC,iBAAiB,CAAC,KAAK,CAAC,cAAc,CAAC;gBACvC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC;YAChC,aAAa,EAAE,mBAAmB,CAAC,KAAK,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACtD,MAAM,KAAK,GAAG,GAA8B,CAAC;QAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC;QAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,0EAA0E;YAC1E,uEAAuE;YACvE,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACpC,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACtD,IAAI,OAAO,QAAQ,KAAK,QAAQ;wBAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAClE,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,QAAQ,KAAK,QAAQ;oBAAE,SAAS;gBAC3C,MAAM,KAAK,GAAG,QAAmC,CAAC;gBAClD,IAAI,CACF,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,EACzC,QAAQ,EACR,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,KAAK,CACxB,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,MAAuB,EACvB,OAAiE;IAEjE,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IACtD,8EAA8E;IAC9E,oEAAoE;IACpE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,gFAAgF;IAChF,0EAA0E;IAC1E,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,UAAU;aACtB,GAAG,CAAC,QAAQ,CAAE;aACd,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,iBAAiB,CAAC;YAC7E,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CACjC;aACA,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,6EAA6E;YAC7E,8EAA8E;YAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,iBAAiB,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE;gBAC9C,QAAQ,EAAE,eAAe;gBACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,gBAAgB,EAAE,QAAQ;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,SAAS;gBACtB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;oBACnC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE;oBACpD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CACxB,MAA0B,EAC1B,QAAgB,EAChB,SAAuB,EACvB,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,cAAc,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,WAAW,EAAE,4BAA4B;gBACzC,mBAAmB,EAAE,YAAY;gBACjC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,GAAG,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,KAAK,EAAE;gBACnD,UAAU,EAAE,CAAC;gBACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;aAC5C,CAAC;YACF,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,4CAA4C;QAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC3B,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;YAC9E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,QAAQ,CAAC,MAAM,sBAAsB,EAAE,CAAC;YAClF,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,2BAA2B,CACxC,OAA6B,EAC7B,QAAgB,EAChB,SAAuB,EACvB,SAAiB,EACjB,WAAmB;IAEnB,MAAM,OAAO,GAA6E,EAAE,CAAC;IAC7F,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,KAAK,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;YACrC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC9E,OAAO,CAAC,YAAY,CAAC,GAAG;gBACtB,MAAM;gBACN,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,MAAM,EAAE,WAAW,CAAC,MAAM;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;SACzD,IAAI,CAAC,IAAI,CAAC;SACV,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvB,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,+EAA+E;IAC/E,2DAA2D;IAC3D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAoC;IAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAE3C,+DAA+D;IAC/D,+EAA+E;IAC/E,gFAAgF;IAChF,+EAA+E;IAC/E,6EAA6E;IAC7E,sEAAsE;IACtE,wEAAwE;IACxE,0EAA0E;IAC1E,yBAAyB;IACzB,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9D,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChD,IACE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1B,KAAK,GAAG,SAAS,IAAI,CAAC;YACtB,KAAK,GAAG,SAAS,GAAG,2BAA2B,EAC/C,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,2BAA2B,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,0BAA0B;gBACnG,OAAO,EAAE,EAAE;aACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,QAAQ,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO,QAAQ,2BAA2B,QAAQ,CAAC,MAAM,GAAG;gBACpE,OAAO,EAAE,EAAE;aACZ,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO,QAAQ,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;YACrG,OAAO,EAAE,EAAE;SACZ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,aAAa,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE;QAC1D,QAAQ;QACR,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,mBAAmB;QACzC,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IAEH,2CAA2C;IAC3C,MAAM,YAAY,GAAG,MAAM,2BAA2B,CACpD,OAAO,EACP,QAAQ,EACR,OAAO,EACP,yBAAyB,EACzB,0BAA0B,CAC3B,CAAC;IAEF,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,OAAO,GAAG,YAAY;SACnB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QACjB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,iBAAiB,MAAM,CAAC,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;gBAChG,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,mBAAmB;aAC7C,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAElC,MAAM,OAAO,GAAiB;QAC5B,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QACzD,QAAQ;QACR,OAAO;KACR,CAAC;IACF,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO;YACP,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mBAAmB,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;YAC7F,OAAO;SACR,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AASD,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA6B,EAAE;IAE/B,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,sBAAsB,CAAC,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAiC,CAAC;IAC5E,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAA+B,EAAE,CAAC;AAC5E,CAAC"}