clinkx 0.3.0 → 1.0.0

package/clinkx-workflows/dist/dashboard/static-responses.js

@@ -0,0 +1,94 @@
+import { lstat, opendir } from "node:fs/promises";
+import { extname, posix, relative, resolve, sep } from "node:path";
+import { ContainedFileTooLargeError, readContainedRelativeFile, } from "../contained-file.js";
+const MAX_STATIC_FILE_BYTES = 4 * 1_024 * 1_024;
+const MAX_STATIC_TOTAL_BYTES = 32 * 1_024 * 1_024;
+const CONTENT_TYPES = Object.freeze({
+    ".css": "text/css; charset=utf-8",
+    ".html": "text/html; charset=utf-8",
+    ".js": "text/javascript; charset=utf-8",
+    ".json": "application/json; charset=utf-8",
+    ".svg": "image/svg+xml",
+    ".woff": "font/woff",
+    ".woff2": "font/woff2",
+});
+function contentTypeFor(path) {
+    return CONTENT_TYPES[extname(path).toLowerCase()] ?? "application/octet-stream";
+}
+function isContentHashed(path) {
+    const filename = posix.basename(path);
+    return path.startsWith("assets/") && /-[A-Za-z0-9_-]{8}\.[^.]+$/.test(filename);
+}
+async function enumerateRegularFiles(staticRoot, directory, files) {
+    const handle = await opendir(directory);
+    for await (const entry of handle) {
+        const absolutePath = resolve(directory, entry.name);
+        const stats = await lstat(absolutePath);
+        if (stats.isSymbolicLink()) {
+            throw new Error(`Dashboard static packaging rejected symlink: ${entry.name}`);
+        }
+        if (stats.isDirectory()) {
+            await enumerateRegularFiles(staticRoot, absolutePath, files);
+            continue;
+        }
+        if (!stats.isFile()) {
+            throw new Error(`Dashboard static packaging rejected non-regular file: ${entry.name}`);
+        }
+        files.push(relative(staticRoot, absolutePath).split(sep).join(posix.sep));
+    }
+}
+export async function loadDashboardStaticResponses(staticRoot) {
+    const rootStats = await lstat(staticRoot);
+    if (rootStats.isSymbolicLink()) {
+        throw new Error("Dashboard static root is a symlink");
+    }
+    if (!rootStats.isDirectory()) {
+        throw new Error("Dashboard static root is not a directory");
+    }
+    const files = [];
+    await enumerateRegularFiles(staticRoot, staticRoot, files);
+    files.sort();
+    const responses = new Map();
+    let totalBytes = 0;
+    for (const file of files) {
+        let admitted;
+        try {
+            admitted = await readContainedRelativeFile(staticRoot, file, {
+                maxBytes: MAX_STATIC_FILE_BYTES,
+                pathLabel: "dashboard static file",
+                wantBytes: true,
+            });
+        }
+        catch (error) {
+            if (!(error instanceof ContainedFileTooLargeError)) {
+                const detail = error instanceof Error ? error.message : String(error);
+                throw new Error(`Dashboard static packaging failed to admit ${file}: ${detail}`, { cause: error });
+            }
+            throw new Error(`Dashboard static packaging failed for ${file}; files must satisfy the 4 MiB per-file limit`, { cause: error });
+        }
+        totalBytes += admitted.size;
+        if (totalBytes > MAX_STATIC_TOTAL_BYTES) {
+            throw new Error(`Dashboard static packaging exceeds the 32 MiB total limit at ${file}`);
+        }
+        responses.set(`/${file}`, Object.freeze({
+            bytes: admitted.bytes,
+            contentHashed: isContentHashed(file),
+            contentType: contentTypeFor(file),
+        }));
+    }
+    if (!responses.has("/index.html")) {
+        throw new Error("Dashboard static packaging is missing index.html");
+    }
+    const finalRootStats = await lstat(staticRoot);
+    if (finalRootStats.isSymbolicLink() ||
+        !finalRootStats.isDirectory() ||
+        finalRootStats.dev !== rootStats.dev ||
+        finalRootStats.ino !== rootStats.ino) {
+        throw new Error("Dashboard static root changed during startup admission");
+    }
+    return Object.freeze({
+        get: (route) => responses.get(route),
+        has: (route) => responses.has(route),
+    });
+}
+//# sourceMappingURL=static-responses.js.map

package/clinkx-workflows/dist/dashboard/static-responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-responses.js","sourceRoot":"","sources":["../../src/dashboard/static-responses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEnE,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAa9B,MAAM,qBAAqB,GAAG,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC;AAChD,MAAM,sBAAsB,GAAG,EAAE,GAAG,KAAK,GAAG,KAAK,CAAC;AAElD,MAAM,aAAa,GAAqC,MAAM,CAAC,MAAM,CAAC;IACpE,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;CACvB,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AAClF,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,UAAkB,EAClB,SAAiB,EACjB,KAAe;IAEf,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,qBAAqB,CAAC,UAAU,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,yDAAyD,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,UAAkB;IAElB,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,qBAAqB,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,EAAE,CAAC;IAEb,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC7D,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,IAAI,EAAE;gBAC3D,QAAQ,EAAE,qBAAqB;gBAC/B,SAAS,EAAE,uBAAuB;gBAClC,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,0BAA0B,CAAC,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACtE,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,KAAK,MAAM,EAAE,EAC/D,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,+CAA+C,EAC5F,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QACD,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC;QAC5B,IAAI,UAAU,GAAG,sBAAsB,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,gEAAgE,IAAI,EAAE,CACvE,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC;YACtC,KAAK,EAAE,QAAQ,CAAC,KAAM;YACtB,aAAa,EAAE,eAAe,CAAC,IAAI,CAAC;YACpC,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC,CAAC;IACN,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,IACE,cAAc,CAAC,cAAc,EAAE;QAC/B,CAAC,cAAc,CAAC,WAAW,EAAE;QAC7B,cAAc,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG;QACpC,cAAc,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAC5C,GAAG,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC"}

package/clinkx-workflows/dist/dashboard/worker-lock-observer.d.ts

@@ -0,0 +1,28 @@
+import type { BigIntStats } from "node:fs";
+import { readContainedRelativeFile, type ContainedFileFingerprint, type OpenedDescriptorPathVerifier } from "../contained-file.js";
+import type { WorkerLockObservation } from "./contracts.js";
+import type { DashboardDirectoryIdentity } from "./read-model.js";
+export interface DashboardWorkerLockObservationBinding {
+    readonly rootIdentity: DashboardDirectoryIdentity;
+    readonly directoryIdentity: DashboardDirectoryIdentity;
+    readonly stateFingerprint: ContainedFileFingerprint;
+}
+export interface DashboardWorkerLockObservationRequest extends DashboardWorkerLockObservationBinding {
+    readonly runsRoot: string;
+    readonly runId: string;
+    readonly runGeneration: string;
+}
+export interface DashboardWorkerLockObserver {
+    observe(request: DashboardWorkerLockObservationRequest): Promise<WorkerLockObservation>;
+    forget(runsRoot: string, runId: string): void;
+}
+export interface DashboardWorkerLockObserverOptions {
+    readonly lstatLock?: ((path: string) => Promise<BigIntStats>) | undefined;
+    readonly readLock?: typeof readContainedRelativeFile | undefined;
+    readonly descriptorPathVerifier?: OpenedDescriptorPathVerifier | undefined;
+    readonly localHostname?: (() => string) | undefined;
+    readonly probePid?: ((pid: number) => void) | undefined;
+    /** Injected reader clock; required to test staleness without sleeping. */
+    readonly now?: (() => number) | undefined;
+}
+export declare function createDashboardWorkerLockObserver(options?: DashboardWorkerLockObserverOptions): DashboardWorkerLockObserver;

package/clinkx-workflows/dist/dashboard/worker-lock-observer.js

@@ -0,0 +1,241 @@
+import { lstat, stat } from "node:fs/promises";
+import { hostname } from "node:os";
+import { resolve } from "node:path";
+import { containedFileFingerprintsEqual, readContainedRelativeFile, } from "../contained-file.js";
+import { RUN_LOCK_HEARTBEAT_STALE_FLOOR_MS } from "../run-lock-heartbeat.js";
+const HEARTBEAT_STALE_INTERVAL_MULTIPLIER = 6;
+/** Bounds the worst-case staleness window a producer can request, at 30 min. */
+const MAX_DECLARED_HEARTBEAT_INTERVAL_MS = 300_000;
+/**
+ * A mtime this far in the future means the two clocks are not comparable. That
+ * yields `unknown` — never `orphaned`: a disagreeing clock must not be able to
+ * manufacture a death claim.
+ */
+const HEARTBEAT_FUTURE_TOLERANCE_MS = 60_000;
+function staleAfterMs(intervalMs) {
+    return Math.max(RUN_LOCK_HEARTBEAT_STALE_FLOOR_MS, intervalMs * HEARTBEAT_STALE_INTERVAL_MULTIPLIER);
+}
+function hasErrorCode(error, code) {
+    return error?.code === code;
+}
+function fingerprintFromStats(stats) {
+    return {
+        dev: stats.dev,
+        ino: stats.ino,
+        mtimeNs: stats.mtimeNs,
+        ctimeNs: stats.ctimeNs,
+        size: stats.size,
+        nlink: stats.nlink,
+    };
+}
+function directoryIdentityFromStats(stats) {
+    return { dev: stats.dev, ino: stats.ino, birthtimeNs: stats.birthtimeNs };
+}
+function directoryIdentitiesEqual(left, right) {
+    return left.dev === right.dev &&
+        left.ino === right.ino &&
+        left.birthtimeNs === right.birthtimeNs;
+}
+async function admittedBindingStillCurrent(request) {
+    try {
+        const [rootStats, runStats, stateStats] = await Promise.all([
+            stat(request.runsRoot, { bigint: true }),
+            lstat(resolve(request.runsRoot, request.runId), { bigint: true }),
+            lstat(resolve(request.runsRoot, request.runId, "state.json"), { bigint: true }),
+        ]);
+        return rootStats.isDirectory() &&
+            runStats.isDirectory() &&
+            stateStats.isFile() &&
+            rootStats.nlink > 0n &&
+            runStats.nlink > 0n &&
+            stateStats.nlink > 0n &&
+            directoryIdentitiesEqual(directoryIdentityFromStats(rootStats), request.rootIdentity) &&
+            directoryIdentitiesEqual(directoryIdentityFromStats(runStats), request.directoryIdentity) &&
+            containedFileFingerprintsEqual(fingerprintFromStats(stateStats), request.stateFingerprint);
+    }
+    catch {
+        return false;
+    }
+}
+class WorkerLockBindingChangedError extends Error {
+}
+function parseAdmittedLock(content) {
+    let value;
+    try {
+        value = JSON.parse(content);
+    }
+    catch {
+        return { kind: "invalid" };
+    }
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return { kind: "invalid" };
+    }
+    const record = value;
+    if (typeof record["pid"] !== "number" ||
+        !Number.isSafeInteger(record["pid"]) ||
+        record["pid"] <= 0 ||
+        typeof record["hostname"] !== "string" ||
+        record["hostname"].length === 0 ||
+        typeof record["startedAt"] !== "string" ||
+        !Number.isFinite(Date.parse(record["startedAt"]))) {
+        return { kind: "invalid" };
+    }
+    // Required identity is validated above. The OPTIONAL heartbeat is advisory: a
+    // present-but-malformed value is DROPPED to undefined, never invalidating an
+    // otherwise-valid record — otherwise a corrupt optional field would suppress
+    // the authoritative same-host PID probe. On a foreign host an absent (dropped)
+    // declaration already fails closed to "unknown" (classify, foreign branch).
+    const declared = record["heartbeatIntervalMs"];
+    const heartbeatIntervalMs = typeof declared === "number" &&
+        Number.isSafeInteger(declared) &&
+        declared > 0 &&
+        declared <= MAX_DECLARED_HEARTBEAT_INTERVAL_MS
+        ? declared
+        : undefined;
+    return {
+        kind: "record",
+        record: {
+            pid: record["pid"],
+            hostname: record["hostname"],
+            startedAt: record["startedAt"],
+            ...(heartbeatIntervalMs === undefined ? {} : { heartbeatIntervalMs }),
+        },
+    };
+}
+export function createDashboardWorkerLockObserver(options = {}) {
+    const lstatLock = options.lstatLock ??
+        (async (path) => await lstat(path, { bigint: true }));
+    const readLock = options.readLock ?? readContainedRelativeFile;
+    const localHostname = options.localHostname ?? hostname;
+    const probePid = options.probePid ?? ((pid) => process.kill(pid, 0));
+    const now = options.now ?? Date.now;
+    const cache = new Map();
+    function keyFor(runsRoot, runId) {
+        return JSON.stringify([resolve(runsRoot), runId]);
+    }
+    function classify(parsed, lockMtimeNs) {
+        if (parsed.kind === "invalid")
+            return "unknown";
+        let currentHostname;
+        try {
+            currentHostname = localHostname();
+        }
+        catch {
+            return "unknown";
+        }
+        if (parsed.record.hostname !== currentHostname) {
+            // Foreign host: the PID namespace is not ours, so a probe is meaningless.
+            // A declared heartbeat's freshness is the ONLY evidence admissible here.
+            const declared = parsed.record.heartbeatIntervalMs;
+            // Load-bearing fail-safe: an ABSENT declaration is `unknown`, never
+            // `orphaned`. A pre-heartbeat producer writes its acquisition mtime once
+            // and never refreshes it, so inferring death from a bare mtime would call
+            // every old-producer run orphaned within a minute of starting.
+            if (declared === undefined)
+                return "unknown";
+            const ageMs = now() - Number(lockMtimeNs / 1000000n);
+            if (ageMs < -HEARTBEAT_FUTURE_TOLERANCE_MS)
+                return "unknown";
+            if (ageMs > staleAfterMs(declared))
+                return "orphaned";
+            return "heartbeat_live";
+        }
+        // Same host: the PID probe keeps absolute priority, still yields plain
+        // "live", and a heartbeat is never consulted — fresh or stale.
+        try {
+            probePid(parsed.record.pid);
+            return "live";
+        }
+        catch (error) {
+            if (hasErrorCode(error, "EPERM"))
+                return "live";
+            if (hasErrorCode(error, "ESRCH"))
+                return "orphaned";
+            return "unknown";
+        }
+    }
+    return {
+        async observe(request) {
+            const key = keyFor(request.runsRoot, request.runId);
+            if (!(await admittedBindingStillCurrent(request))) {
+                cache.delete(key);
+                return "unknown";
+            }
+            let stats;
+            try {
+                stats = await lstatLock(resolve(request.runsRoot, request.runId, "run.lock"));
+            }
+            catch (error) {
+                cache.delete(key);
+                return hasErrorCode(error, "ENOENT") &&
+                    await admittedBindingStillCurrent(request)
+                    ? "orphaned"
+                    : "unknown";
+            }
+            if (!stats.isFile() || stats.nlink === 0n) {
+                cache.delete(key);
+                return "unknown";
+            }
+            const fingerprint = fingerprintFromStats(stats);
+            const cached = cache.get(key);
+            let parsed;
+            let observedMtimeNs = fingerprint.mtimeNs;
+            if (cached !== undefined &&
+                cached.runGeneration === request.runGeneration &&
+                containedFileFingerprintsEqual(cached.fingerprint, fingerprint)) {
+                parsed = cached.parsed;
+            }
+            else {
+                cache.delete(key);
+                try {
+                    const admitted = await readLock(request.runsRoot, `${request.runId}/run.lock`, {
+                        wantContent: true,
+                        requireRegular: true,
+                        requireExactRequestedPath: true,
+                        maxBytes: 4_096,
+                        containerLabel: "dashboard runs root",
+                        pathLabel: "run lock",
+                        beforeClose: async () => {
+                            if (!(await admittedBindingStillCurrent(request))) {
+                                throw new WorkerLockBindingChangedError();
+                            }
+                        },
+                        ...(options.descriptorPathVerifier === undefined
+                            ? {}
+                            : { descriptorPathVerifier: options.descriptorPathVerifier }),
+                    });
+                    parsed = parseAdmittedLock(admitted.content);
+                    observedMtimeNs = admitted.fingerprint.mtimeNs;
+                    cache.set(key, {
+                        runGeneration: request.runGeneration,
+                        fingerprint: admitted.fingerprint,
+                        parsed,
+                    });
+                }
+                catch (error) {
+                    cache.delete(key);
+                    return hasErrorCode(error, "ENOENT") &&
+                        await admittedBindingStillCurrent(request)
+                        ? "orphaned"
+                        : "unknown";
+                }
+            }
+            // Freshness is measured from the mtime PAIRED WITH THE PARSED BYTES:
+            // `admitted.fingerprint.mtimeNs` on a cache miss (a beat may have landed
+            // between the pre-read lstat and the descriptor fstat), and the pre-read
+            // `fingerprint.mtimeNs` on a cache hit — which the hit gate proved equal to
+            // the stored `admitted.fingerprint`, so no beat landed and the age keeps
+            // growing toward stale.
+            const observation = classify(parsed, observedMtimeNs);
+            if (!(await admittedBindingStillCurrent(request))) {
+                cache.delete(key);
+                return "unknown";
+            }
+            return observation;
+        },
+        forget(runsRoot, runId) {
+            cache.delete(keyFor(runsRoot, runId));
+        },
+    };
+}
+//# sourceMappingURL=worker-lock-observer.js.map

package/clinkx-workflows/dist/dashboard/worker-lock-observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-lock-observer.js","sourceRoot":"","sources":["../../src/dashboard/worker-lock-observer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAG1B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAE7E,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAC9C,gFAAgF;AAChF,MAAM,kCAAkC,GAAG,OAAO,CAAC;AACnD;;;;GAIG;AACH,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAc7C,SAAS,YAAY,CAAC,UAAkB;IACtC,OAAO,IAAI,CAAC,GAAG,CACb,iCAAiC,EACjC,UAAU,GAAG,mCAAmC,CACjD,CAAC;AACJ,CAAC;AAwCD,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY;IAChD,OAAQ,KAA+B,EAAE,IAAI,KAAK,IAAI,CAAC;AACzD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAkB;IAC9C,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAkB;IACpD,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAAgC,EAChC,KAAiC;IAEjC,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QAC3B,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACtB,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,OAA8C;IAE9C,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACxC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACjE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAChF,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,WAAW,EAAE;YAC5B,QAAQ,CAAC,WAAW,EAAE;YACtB,UAAU,CAAC,MAAM,EAAE;YACnB,SAAS,CAAC,KAAK,GAAG,EAAE;YACpB,QAAQ,CAAC,KAAK,GAAG,EAAE;YACnB,UAAU,CAAC,KAAK,GAAG,EAAE;YACrB,wBAAwB,CACtB,0BAA0B,CAAC,SAAS,CAAC,EACrC,OAAO,CAAC,YAAY,CACrB;YACD,wBAAwB,CACtB,0BAA0B,CAAC,QAAQ,CAAC,EACpC,OAAO,CAAC,iBAAiB,CAC1B;YACD,8BAA8B,CAC5B,oBAAoB,CAAC,UAAU,CAAC,EAChC,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,6BAA8B,SAAQ,KAAK;CAAG;AAEpD,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IACE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;QACjC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAClB,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ;QACtC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC;QAC/B,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ;QACvC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EACjD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC/C,MAAM,mBAAmB,GACvB,OAAO,QAAQ,KAAK,QAAQ;QAC5B,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;QAC9B,QAAQ,GAAG,CAAC;QACZ,QAAQ,IAAI,kCAAkC;QAC5C,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE;YACN,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC;YAClB,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC;YAC5B,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC;YAC9B,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC;SACtE;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,UAA8C,EAAE;IAEhD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS;QACjC,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,yBAAyB,CAAC;IAC/D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEpD,SAAS,MAAM,CAAC,QAAgB,EAAE,KAAa;QAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,SAAS,QAAQ,CACf,MAA0B,EAC1B,WAAmB;QAEnB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChD,IAAI,eAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,eAAe,GAAG,aAAa,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;YAC/C,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC;YACnD,oEAAoE;YACpE,yEAAyE;YACzE,0EAA0E;YAC1E,+DAA+D;YAC/D,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC7C,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,GAAG,QAAU,CAAC,CAAC;YACvD,IAAI,KAAK,GAAG,CAAC,6BAA6B;gBAAE,OAAO,SAAS,CAAC;YAC7D,IAAI,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC;gBAAE,OAAO,UAAU,CAAC;YACtD,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,uEAAuE;QACvE,+DAA+D;QAC/D,IAAI,CAAC;YACH,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC;gBAAE,OAAO,MAAM,CAAC;YAChD,IAAI,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC;gBAAE,OAAO,UAAU,CAAC;YACpD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAClD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,KAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAChC,MAAM,2BAA2B,CAAC,OAAO,CAAC;oBAC5C,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,SAAS,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;gBAC1C,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,MAA0B,CAAC;YAC/B,IAAI,eAAe,GAAG,WAAW,CAAC,OAAO,CAAC;YAC1C,IACE,MAAM,KAAK,SAAS;gBACpB,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;gBAC9C,8BAA8B,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAC/D,CAAC;gBACD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,OAAO,CAAC,QAAQ,EAChB,GAAG,OAAO,CAAC,KAAK,WAAW,EAC3B;wBACE,WAAW,EAAE,IAAI;wBACjB,cAAc,EAAE,IAAI;wBACpB,yBAAyB,EAAE,IAAI;wBAC/B,QAAQ,EAAE,KAAK;wBACf,cAAc,EAAE,qBAAqB;wBACrC,SAAS,EAAE,UAAU;wBACrB,WAAW,EAAE,KAAK,IAAI,EAAE;4BACtB,IAAI,CAAC,CAAC,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gCAClD,MAAM,IAAI,6BAA6B,EAAE,CAAC;4BAC5C,CAAC;wBACH,CAAC;wBACD,GAAG,CAAC,OAAO,CAAC,sBAAsB,KAAK,SAAS;4BAC9C,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE,CAAC;qBAChE,CACF,CAAC;oBACF,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,OAAQ,CAAC,CAAC;oBAC9C,eAAe,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC;oBAC/C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;wBACb,aAAa,EAAE,OAAO,CAAC,aAAa;wBACpC,WAAW,EAAE,QAAQ,CAAC,WAAW;wBACjC,MAAM;qBACP,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAClB,OAAO,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC;wBAChC,MAAM,2BAA2B,CAAC,OAAO,CAAC;wBAC5C,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,SAAS,CAAC;gBAChB,CAAC;YACH,CAAC;YACD,qEAAqE;YACrE,yEAAyE;YACzE,yEAAyE;YACzE,4EAA4E;YAC5E,yEAAyE;YACzE,wBAAwB;YACxB,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAClD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,CAAC,QAAQ,EAAE,KAAK;YACpB,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC"}