clinkx 0.3.0 → 1.1.0

package/clinkx-workflows/dist/config.js

@@ -10,23 +10,35 @@
  * REAL controls (child env CAN control these):
  * - CLINKX_MAX_CONCURRENT: fail-fast semaphore depth (concurrency.ts:3,25-29)
  * - CLINKX_MAX_RESPONSE_CHARS: output truncation ceiling (pipeline.ts env fallback)
- * - CLINKX_MAX_OUTPUT_BYTES: per-stream capture cap (runner.ts::createStreamCapture)
+ * - CLINKX_MAX_OUTPUT_BYTES: per-stream capture cap — legacy fallback read only when
+ *   CLINKX_MAX_CAPTURE_BYTES is unset (runner.ts capture resolution). Effective in the
+ *   child because the scrub removes CLINKX_MAX_CAPTURE_BYTES and re-injection never sets it.
  * - CLINKX_MAX_PROMPT_BYTES: pre-dispatch prompt ceiling (runner.ts)
  * - CLINKX_CONFIG_PATH: adapter config path override
  * - CLINKX_ALLOWED_ROOTS: comma-separated allowed path prefixes
  * - CLINKX_LOG_LEVEL: pino log verbosity
  *
  * DEAD knobs (adapter JSON wins, env has no effect with current shipped adapters):
- * - CLINKX_TIMEOUT_SECONDS: both shipped adapters set timeout_seconds in JSON
- *   (codex.json:9 = 3600, claude.json:8 = 3600). Adapter config wins per runner.ts:156-159.
- * - CLINKX_IDLE_TIMEOUT_SECONDS: both shipped adapters set idle_timeout_seconds in JSON.
- *   Adapter config wins per runner.ts:164-167.
- * - CLINKX_IDLE_TIMEOUT_STARTUP_SECONDS: both shipped adapters set idle_timeout_startup_seconds.
- *   Adapter config wins per runner.ts:168-171. Additionally, result_contract.enabled forces
- *   both idle timers to 0 (runner.ts:163-170).
+ * - CLINKX_TIMEOUT_SECONDS: every shipped subprocess adapter (conf/adapters/*.json and
+ *   conf/adapters/hapi/*.json) sets timeout_seconds = 3600 in JSON. Adapter config wins
+ *   per the runner.ts timeout resolution (options > adapter > env > default).
+ * - CLINKX_IDLE_TIMEOUT_SECONDS: every shipped subprocess adapter sets
+ *   idle_timeout_seconds in JSON. Adapter config wins (same precedence).
+ * - CLINKX_IDLE_TIMEOUT_STARTUP_SECONDS: every shipped subprocess adapter sets
+ *   idle_timeout_startup_seconds. Adapter config wins (same precedence). Additionally,
+ *   an adapter with suppress_stdout and no stderr_to_file has both idle timers forced
+ *   to 0 — no observable byte channel (runner.ts idle resolution).
  */
 import { realpathSync } from "node:fs";
-import { join, resolve } from "node:path";
+import { isIP } from "node:net";
+import { userInfo } from "node:os";
+import { isAbsolute, join, parse, resolve } from "node:path";
+import { artifactOnlyEnvEntry } from "./allowed-roots.js";
+export const DEFAULT_DASHBOARD_MAX_STATE_BYTES = 16_777_216;
+export const MIN_DASHBOARD_MAX_STATE_BYTES = 1_048_576;
+export const MAX_DASHBOARD_MAX_STATE_BYTES = 67_108_864;
+export const INVOCATION_AUDIT_V2_PERSISTENCE_ENV = "CLINKX_INVOCATION_AUDIT_V2_PERSISTENCE_ENABLED";
+export const OBSERVED_INVOCATION_PERSISTENCE_ENV = "CLINKX_OBSERVED_INVOCATION_PERSISTENCE_ENABLED";
 // ---------------------------------------------------------------------------
 // Workflow server env vars (CLINKX_WORKFLOWS_*)
 // ---------------------------------------------------------------------------
@@ -34,6 +46,13 @@ function envStr(key, fallback) {
     const v = process.env[key];
     return v != null && v !== "" ? v : fallback;
 }
+function envWorkflowContextMode(key, fallback) {
+    const raw = envStr(key, fallback).trim();
+    if (raw === "full" || raw === "deterministic" || raw === "off") {
+        return raw;
+    }
+    throw new Error(`${key} must be one of full, deterministic, off; got ${JSON.stringify(raw)}`);
+}
 function envInt(key, fallback) {
     const v = process.env[key];
     if (v == null || v === "")
@@ -48,10 +67,27 @@ function envNonNegativeInt(key, fallback) {
     const n = Number(v);
     return Number.isSafeInteger(n) && n >= 0 ? n : fallback;
 }
+/** Integer-strict positive parse — rejects fractional values (e.g. "1.5"). */
+function envPositiveInt(key, fallback) {
+    const v = process.env[key];
+    if (v == null || v === "")
+        return fallback;
+    const n = Number(v);
+    return Number.isSafeInteger(n) && n >= 1 ? n : fallback;
+}
+function envBool(key, fallback) {
+    const v = process.env[key];
+    if (v == null || v.trim() === "")
+        return fallback;
+    return v.trim().toLowerCase() === "true";
+}
 export const DEFAULT_RETAIN_FAILED_DAYS = 30;
 export const DEFAULT_RETAIN_CANCELLED_DAYS = 30;
 export const DEFAULT_RETAIN_DEBUG_DAYS = 7;
-/** Resolve workspace root: explicit env > process.cwd() with warning. */
+export const DEFAULT_RETAIN_ASYNC_DAYS = 1;
+export const DEFAULT_RETAIN_SUCCEEDED_DAYS = 1;
+export const DEFAULT_DASHBOARD_PORT = 4180;
+/** Resolve workspace root: explicit env > process.cwd() fallback (callers warn at startup). */
 export function resolveWorkspaceRoot() {
     const explicit = process.env["CLINKX_WORKFLOWS_WORKSPACE_ROOT"];
     if (explicit != null && explicit !== "") {
@@ -62,7 +98,9 @@ export function resolveWorkspaceRoot() {
             return resolve(explicit);
         }
     }
-    // Fallback with warning — caller should log this
+    // Silent fallback — this module cannot log (logger.ts imports config.js; circular).
+    // Both servers (createServer, createWorkflowServer) warn at startup via
+    // hasExplicitWorkspaceRoot() when this cwd fallback is in effect.
     return resolve(process.cwd());
 }
 /** Whether workspace root was explicitly configured. */
@@ -71,12 +109,40 @@ export function hasExplicitWorkspaceRoot() {
     return v != null && v !== "";
 }
 /**
- * Derive CLINKX_ALLOWED_ROOTS for the child process.
- * Union of resolved workspace root + workflow state/artifact roots.
- * Rejects filesystem root (/) as workspace root.
+ * Reader-first rollout gate for every InvocationAuditV2 persistence surface.
+ * Exact matching is deliberate: unset, empty, case variants, and whitespace
+ * remain old-reader-safe.
+ */
+export function invocationAuditV2PersistenceEnabled(env = process.env) {
+    return env[INVOCATION_AUDIT_V2_PERSISTENCE_ENV] === "true";
+}
+/**
+ * Reader-first rollout gate for observed-invocation persistence surfaces.
+ * Exact matching is deliberate: unset, empty, case variants, and whitespace
+ * remain old-reader-safe.
+ */
+export function observedInvocationPersistenceEnabled(env = process.env) {
+    return env[OBSERVED_INVOCATION_PERSISTENCE_ENV] === "true";
+}
+/**
+ * Derive CLINKX_ALLOWED_ROOTS for the child process: the resolved workspace
+ * root plus the workflow state/artifact roots, comma-joined. The state and
+ * artifact roots carry the artifact-only `/.` marker (artifactOnlyEnvEntry),
+ * so the child may use them for artifact/state I/O but context_builder never
+ * admits them as source roots.
+ *
+ * Performs NO validation of workspaceRoot: a cwd-derived root (see
+ * resolveWorkspaceRoot's fallback) is passed through as-is — including "/",
+ * which grants the child filesystem-wide reach. The only guardrail today is
+ * the startup warning both servers emit when CLINKX_WORKFLOWS_WORKSPACE_ROOT
+ * is unset.
  */
 export function deriveAllowedRoots(workspaceRoot, stateDir, artifactsDir) {
-    const roots = [workspaceRoot, stateDir, artifactsDir];
+    const roots = [
+        workspaceRoot,
+        artifactOnlyEnvEntry(stateDir),
+        artifactOnlyEnvEntry(artifactsDir),
+    ];
     return roots.join(",");
 }
 // ---------------------------------------------------------------------------
@@ -87,7 +153,8 @@ export function getClinkxCmd() {
     return envStr("CLINKX_WORKFLOWS_CLINKX_CMD", "clinkx");
 }
 /**
- * Resolve a path relative to the package root (two levels up from dist/src/).
+ * Resolve a path relative to the package root (one level up from this file's
+ * directory — dist/ at runtime, src/ under vitest).
  * If the path is absolute, return as-is.
  */
 function resolvePackageRelative(raw) {
@@ -101,6 +168,22 @@ function resolvePackageRelative(raw) {
 export function getWorkflowsPath() {
     return envStr("CLINKX_WORKFLOWS_PATH", "workflows/");
 }
+/** Effective absolute workflow definition directory used by the loader. */
+export function getResolvedWorkflowsPath() {
+    return resolvePackageRelative(getWorkflowsPath());
+}
+/** Soft default for workflow context-builder preflight mode. */
+export function getWorkflowsContextDefault() {
+    return envWorkflowContextMode("CLINKX_WORKFLOWS_CONTEXT_DEFAULT", "full");
+}
+/** Curator adapter name used by the injected default full delegate. */
+export function getWorkflowsContextDefaultCurator() {
+    const value = envStr("CLINKX_WORKFLOWS_CONTEXT_DEFAULT_CURATOR", "codex").trim();
+    if (value === "") {
+        throw new Error("CLINKX_WORKFLOWS_CONTEXT_DEFAULT_CURATOR must be non-empty");
+    }
+    return value;
+}
 /** Prompt template root directory (resolved relative to package root). */
 export function getTemplatesPath() {
     return resolvePackageRelative(envStr("CLINKX_WORKFLOWS_TEMPLATES_PATH", "templates/"));
@@ -109,6 +192,14 @@ export function getTemplatesPath() {
 export function getMaxParallel() {
     return envInt("CLINKX_WORKFLOWS_MAX_PARALLEL", 5);
 }
+/** Process-wide cap for detached workflow runs (integer-strict, >= 1). */
+export function getWorkflowsMaxConcurrentAsync() {
+    return envPositiveInt("CLINKX_WORKFLOWS_MAX_CONCURRENT_ASYNC", 1);
+}
+/** Override that allows raw async admission above the context-builder pool cap. */
+export function getWorkflowsAllowUnsafeAsyncCap() {
+    return envBool("CLINKX_WORKFLOWS_ALLOW_UNSAFE_ASYNC_CAP", false);
+}
 /** Passed to child as CLINKX_MAX_CONCURRENT. */
 export function getChildMaxConcurrent() {
     return envInt("CLINKX_WORKFLOWS_CHILD_MAX_CONCURRENT", 5);
@@ -128,7 +219,261 @@ export function getChildMaxPromptBytes() {
 /** Optional workflow-owned child adapter bundle path. */
 export function getChildConfigPath() {
     const v = process.env["CLINKX_WORKFLOWS_CHILD_CONFIG_PATH"];
-    return v != null && v !== "" ? v : undefined;
+    if (v == null || v === "")
+        return undefined;
+    const absolute = resolve(resolveWorkspaceRoot(), v);
+    try {
+        return realpathSync(absolute);
+    }
+    catch {
+        return absolute;
+    }
+}
+/** Loopback HTTP port for the standalone dashboard. */
+export function getDashboardPort() {
+    const raw = process.env["CLINKX_WORKFLOWS_DASHBOARD_PORT"];
+    if (raw == null || raw === "")
+        return DEFAULT_DASHBOARD_PORT;
+    const port = Number(raw);
+    if (!/^(?:0|[1-9]\d*)$/.test(raw) || !Number.isSafeInteger(port) || port > 65_535) {
+        throw new Error("CLINKX_WORKFLOWS_DASHBOARD_PORT must be an integer from 0 through 65535");
+    }
+    return port;
+}
+/** Maximum admitted dashboard state.json byte count. */
+export function getDashboardMaxStateBytes() {
+    const key = "CLINKX_WORKFLOWS_DASHBOARD_MAX_STATE_BYTES";
+    const raw = process.env[key];
+    if (raw == null)
+        return DEFAULT_DASHBOARD_MAX_STATE_BYTES;
+    const value = Number(raw);
+    if (!/^[1-9]\d*$/.test(raw) ||
+        !Number.isSafeInteger(value) ||
+        value < MIN_DASHBOARD_MAX_STATE_BYTES ||
+        value > MAX_DASHBOARD_MAX_STATE_BYTES) {
+        throw new Error(`${key} must be an integer from ${String(MIN_DASHBOARD_MAX_STATE_BYTES)} through ${String(MAX_DASHBOARD_MAX_STATE_BYTES)} bytes`);
+    }
+    return value;
+}
+// ---------------------------------------------------------------------------
+// Dashboard remote public access (opt-in; local/SSH behavior unchanged)
+// ---------------------------------------------------------------------------
+//
+// Remote access is an explicit opt-in via a strict env PAIR. Both absent means
+// local mode (loopback + SSH forwarding, unchanged). Exactly one present is a
+// misconfiguration that fails loud at startup. Both present means remote mode.
+// This module only RESOLVES the configuration; wiring into the CLI/backend and
+// the remote URL fragment are later phases. The listener still binds 127.0.0.1;
+// remote reachability is provided by a front proxy, never by widening the bind.
+export const DASHBOARD_PUBLIC_API_ORIGIN_ENV = "CLINKX_WORKFLOWS_DASHBOARD_PUBLIC_API_ORIGIN";
+export const DASHBOARD_UI_ORIGIN_ENV = "CLINKX_WORKFLOWS_DASHBOARD_UI_ORIGIN";
+export const DASHBOARD_AUTH_MODE_ENV = "CLINKX_WORKFLOWS_DASHBOARD_AUTH_MODE";
+export const DASHBOARD_CREDENTIAL_DIR_ENV = "CLINKX_WORKFLOWS_DASHBOARD_CREDENTIAL_DIR";
+export const DASHBOARD_RP_NAME_ENV = "CLINKX_WORKFLOWS_DASHBOARD_RP_NAME";
+export const DASHBOARD_SESSION_TTL_SECONDS_ENV = "CLINKX_WORKFLOWS_DASHBOARD_SESSION_TTL_SECONDS";
+export const DEFAULT_DASHBOARD_RP_NAME = "ClinkX Dashboard";
+export const DEFAULT_DASHBOARD_SESSION_TTL_SECONDS = 43_200;
+/**
+ * Reusable canonical absolute-HTTPS origin parser. Accepts only the exact
+ * canonical origin serialization and rejects everything else fail-closed:
+ * non-https, embedded credentials, any path beyond root, query, fragment,
+ * wildcard, comma list, whitespace, and any non-canonical serialization
+ * (trailing slash, default `:443`, uppercase host, IDN not already punycoded).
+ *
+ * `label` is embedded in the thrown message so callers surface an actionable
+ * startup error naming the offending variable.
+ */
+export function parseCanonicalHttpsOrigin(raw, label) {
+    if (raw === "") {
+        throw new Error(`${label} must be a canonical absolute HTTPS origin; got an empty value`);
+    }
+    if (/\s/.test(raw)) {
+        throw new Error(`${label} must not contain whitespace`);
+    }
+    if (raw.includes(",")) {
+        throw new Error(`${label} must be a single origin, not a comma-separated list`);
+    }
+    if (raw.includes("*")) {
+        throw new Error(`${label} must be an exact origin and must not contain a wildcard "*"`);
+    }
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new Error(`${label} is not a valid absolute URL: ${JSON.stringify(raw)}`);
+    }
+    if (url.protocol !== "https:") {
+        throw new Error(`${label} must use https; got protocol ${JSON.stringify(url.protocol)}`);
+    }
+    if (url.username !== "" || url.password !== "") {
+        throw new Error(`${label} must not embed credentials`);
+    }
+    if (url.search !== "") {
+        throw new Error(`${label} must not contain a query string`);
+    }
+    if (url.hash !== "") {
+        throw new Error(`${label} must not contain a fragment`);
+    }
+    if (url.pathname !== "" && url.pathname !== "/") {
+        throw new Error(`${label} must not contain a path`);
+    }
+    if (raw !== url.origin) {
+        throw new Error(`${label} must be the canonical origin serialization ${JSON.stringify(url.origin)}; got ${JSON.stringify(raw)}`);
+    }
+    return { origin: url.origin, host: url.host };
+}
+function validateDashboardCredentialDirectory(directory, label) {
+    const resolved = resolve(directory);
+    if (directory === ""
+        || directory.includes("\0")
+        || !isAbsolute(directory)
+        || resolved === parse(resolved).root) {
+        throw new Error(`${label} must be a non-empty absolute non-root path without NUL bytes`);
+    }
+    return directory;
+}
+/**
+ * Resolve the passkey credential directory independently from workflow state.
+ * Explicit values are intentionally not trimmed or normalized.
+ */
+export function resolveDashboardCredentialDirectory(env = process.env, stateDirectory = getStateDir()) {
+    const explicit = env[DASHBOARD_CREDENTIAL_DIR_ENV];
+    if (explicit == null) {
+        return validateDashboardCredentialDirectory(join(resolve(stateDirectory), "dashboard", "webauthn"), DASHBOARD_CREDENTIAL_DIR_ENV);
+    }
+    return validateDashboardCredentialDirectory(explicit, DASHBOARD_CREDENTIAL_DIR_ENV);
+}
+/** Resolve the temporary passkey/bearer rollback selector. */
+export function resolveDashboardAuthMode(env = process.env) {
+    const raw = env[DASHBOARD_AUTH_MODE_ENV];
+    if (raw == null || raw === "")
+        return "passkey";
+    if (raw === "passkey" || raw === "bearer" || raw === "none")
+        return raw;
+    throw new Error(`${DASHBOARD_AUTH_MODE_ENV} must be one of passkey, bearer, none; got ${JSON.stringify(raw)}`);
+}
+function dashboardRpId(expectedOrigin, localMode) {
+    const hostname = new URL(expectedOrigin).hostname;
+    const unbracketed = hostname.startsWith("[") && hostname.endsWith("]")
+        ? hostname.slice(1, -1)
+        : hostname;
+    if (isIP(unbracketed) !== 0) {
+        throw new Error(`dashboard WebAuthn RP ID must not be an IP address; got ${JSON.stringify(unbracketed)}`);
+    }
+    if (unbracketed === "localhost" && !localMode) {
+        throw new Error("dashboard WebAuthn permits localhost only in local mode");
+    }
+    return unbracketed;
+}
+/**
+ * Derive the complete WebAuthn configuration from the public dashboard origin.
+ * The caller supplies the active local port only after the first loopback
+ * listener has selected it; cloud inputs are validated before listener or
+ * filesystem work.
+ */
+export function resolveDashboardAuthConfig(input) {
+    const env = input.env ?? process.env;
+    const rpName = (env[DASHBOARD_RP_NAME_ENV] ?? DEFAULT_DASHBOARD_RP_NAME).trim();
+    if (rpName === "") {
+        throw new Error(`${DASHBOARD_RP_NAME_ENV} must not be empty`);
+    }
+    const sessionTtlRaw = env[DASHBOARD_SESSION_TTL_SECONDS_ENV];
+    let sessionTtlSeconds = DEFAULT_DASHBOARD_SESSION_TTL_SECONDS;
+    if (sessionTtlRaw != null && sessionTtlRaw !== "") {
+        if (!/^[1-9]\d*$/.test(sessionTtlRaw)) {
+            throw new Error(`${DASHBOARD_SESSION_TTL_SECONDS_ENV} must be a positive integer`);
+        }
+        sessionTtlSeconds = Number(sessionTtlRaw);
+        if (!Number.isSafeInteger(sessionTtlSeconds)
+            || !Number.isSafeInteger(sessionTtlSeconds * 1000)) {
+            throw new Error(`${DASHBOARD_SESSION_TTL_SECONDS_ENV} must produce a safe millisecond TTL`);
+        }
+    }
+    const credentialDirectory = validateDashboardCredentialDirectory(input.credentialDirectory, "dashboard credential directory");
+    if (input.publicAccess.mode === "local") {
+        if (!Number.isSafeInteger(input.localPort)
+            || input.localPort < 1
+            || input.localPort > 65_535) {
+            throw new Error("local dashboard WebAuthn requires an active port from 1 through 65535");
+        }
+        const expectedHost = `localhost:${String(input.localPort)}`;
+        const expectedOrigin = `http://${expectedHost}`;
+        return {
+            rpName,
+            expectedOrigin,
+            expectedRPID: dashboardRpId(expectedOrigin, true),
+            expectedHost,
+            secureCookies: false,
+            credentialDirectory,
+            sessionTtlSeconds,
+        };
+    }
+    if (input.publicAccess.publicApiOrigin !== input.publicAccess.uiOrigin) {
+        throw new Error("dashboard passkey mode requires the API and UI to use the same origin");
+    }
+    const expectedOrigin = input.publicAccess.publicApiOrigin;
+    const parsed = new URL(expectedOrigin);
+    return {
+        rpName,
+        expectedOrigin,
+        expectedRPID: dashboardRpId(expectedOrigin, false),
+        expectedHost: parsed.host,
+        secureCookies: true,
+        credentialDirectory,
+        sessionTtlSeconds,
+    };
+}
+/**
+ * Resolve the discriminated local/remote dashboard access value from the strict
+ * env pair. Both absent → local; exactly one present → actionable startup
+ * error; both present → remote (each origin parsed canonically). The returned
+ * value carries no bearer/tunnel credentials.
+ */
+export function resolveDashboardPublicAccess(env = process.env) {
+    const apiRaw = env[DASHBOARD_PUBLIC_API_ORIGIN_ENV];
+    const uiRaw = env[DASHBOARD_UI_ORIGIN_ENV];
+    const apiPresent = apiRaw != null && apiRaw !== "";
+    const uiPresent = uiRaw != null && uiRaw !== "";
+    if (!apiPresent && !uiPresent) {
+        return { mode: "local" };
+    }
+    if (apiPresent !== uiPresent) {
+        const setKey = apiPresent ? DASHBOARD_PUBLIC_API_ORIGIN_ENV : DASHBOARD_UI_ORIGIN_ENV;
+        const missingKey = apiPresent ? DASHBOARD_UI_ORIGIN_ENV : DASHBOARD_PUBLIC_API_ORIGIN_ENV;
+        throw new Error(`${setKey} is set but ${missingKey} is not; remote dashboard access requires both origins. Set both for remote mode, or neither for local/SSH mode.`);
+    }
+    const api = parseCanonicalHttpsOrigin(apiRaw, DASHBOARD_PUBLIC_API_ORIGIN_ENV);
+    const ui = parseCanonicalHttpsOrigin(uiRaw, DASHBOARD_UI_ORIGIN_ENV);
+    return {
+        mode: "remote",
+        publicApiOrigin: api.origin,
+        uiOrigin: ui.origin,
+        publicHost: api.host,
+    };
+}
+/**
+ * Build the remote static-deployment Content-Security-Policy. Identical to the
+ * loopback dashboard CSP except `connect-src` adds the exact API origin (only
+ * `'self'` plus that origin — never a wildcard or credentials). The origin is
+ * re-parsed defensively so a malformed value can never be injected into the
+ * header. Kept here as the single source of truth mirrored by the buildless
+ * static runtime under `deploy/dashboard-ui/serve.mjs`.
+ */
+export function dashboardStaticCsp(publicApiOrigin) {
+    const { origin } = parseCanonicalHttpsOrigin(publicApiOrigin, "publicApiOrigin");
+    return [
+        "default-src 'self'",
+        "script-src 'self'",
+        "style-src 'self'",
+        "font-src 'self'",
+        `connect-src 'self' ${origin}`,
+        "img-src 'self' data:",
+        "object-src 'none'",
+        "base-uri 'none'",
+        "form-action 'none'",
+        "frame-ancestors 'none'",
+    ].join("; ");
 }
 /**
  * Default workflow-level timeout (seconds).
@@ -162,15 +507,56 @@ export function getRetentionConfig() {
         retainFailedDays: envNonNegativeInt("CLINKX_WORKFLOWS_RETAIN_FAILED_DAYS", DEFAULT_RETAIN_FAILED_DAYS),
         retainCancelledDays: envNonNegativeInt("CLINKX_WORKFLOWS_RETAIN_CANCELLED_DAYS", DEFAULT_RETAIN_CANCELLED_DAYS),
         retainDebugDays: envNonNegativeInt("CLINKX_WORKFLOWS_RETAIN_DEBUG_DAYS", DEFAULT_RETAIN_DEBUG_DAYS),
+        retainAsyncDays: envNonNegativeInt("CLINKX_WORKFLOWS_RETAIN_ASYNC_DAYS", DEFAULT_RETAIN_ASYNC_DAYS),
+        retainSucceededDays: envNonNegativeInt("CLINKX_WORKFLOWS_RETAIN_SUCCEEDED_DAYS", DEFAULT_RETAIN_SUCCEEDED_DAYS),
     };
 }
 /** Persistent workflow state directory. */
-export function getStateDir() {
-    const xdgState = process.env["XDG_STATE_HOME"];
-    const defaultBase = xdgState != null && xdgState !== ""
-        ? xdgState
-        : `${process.env["HOME"] ?? "~"}/.local/state`;
-    return envStr("CLINKX_WORKFLOWS_STATE_DIR", `${defaultBase}/clinkx-workflows`);
+export function getStateDir(env = process.env, accountHomeProvider = () => userInfo().homedir) {
+    const explicit = env["CLINKX_WORKFLOWS_STATE_DIR"];
+    if (explicit != null && explicit !== "") {
+        if (!isAbsolute(explicit)) {
+            throw new Error(`CLINKX_WORKFLOWS_STATE_DIR must be an absolute path; got ${JSON.stringify(explicit)}`);
+        }
+        return explicit;
+    }
+    const xdgState = env["XDG_STATE_HOME"];
+    if (xdgState != null && xdgState !== "") {
+        if (!isAbsolute(xdgState)) {
+            throw new Error(`XDG_STATE_HOME must be an absolute path when used for workflow state; got ${JSON.stringify(xdgState)}`);
+        }
+        return join(xdgState, "clinkx-workflows");
+    }
+    const configuredHome = env["HOME"];
+    if (configuredHome != null && configuredHome !== "") {
+        if (!isAbsolute(configuredHome)) {
+            throw new Error(`HOME must be an absolute path when used for workflow state; got ${JSON.stringify(configuredHome)}`);
+        }
+        return join(configuredHome, ".local", "state", "clinkx-workflows");
+    }
+    const accountHome = accountHomeProvider();
+    const resolvedAccountHome = accountHome === "" ? "" : resolve(accountHome);
+    if (accountHome === "" ||
+        !isAbsolute(accountHome) ||
+        resolvedAccountHome === parse(resolvedAccountHome).root) {
+        throw new Error(`OS account home must be a non-empty absolute non-root path; got ${JSON.stringify(accountHome)}`);
+    }
+    return join(accountHome, ".local", "state", "clinkx-workflows");
+}
+export const DASHBOARD_PROGRESS_REPORT_OVERRIDE_DIR_ENV = "CLINKX_WORKFLOWS_PROGRESS_REPORT_OVERRIDE_DIR";
+/**
+ * Parent directory for dashboard-private sidecars:
+ * `progress-report-status-overrides.json` and `prompt-builder-library.json`.
+ * Unset/empty keeps the historical location beside `progress-reports/` under
+ * the workflow state directory. Compose pins a dedicated writable volume so
+ * read-only producer state mounts can still persist operator pins.
+ */
+export function getProgressReportOverrideDir(env = process.env, accountHomeProvider = () => userInfo().homedir) {
+    const explicit = env[DASHBOARD_PROGRESS_REPORT_OVERRIDE_DIR_ENV];
+    if (explicit == null || explicit === "") {
+        return getStateDir(env, accountHomeProvider);
+    }
+    return validateDashboardCredentialDirectory(explicit, DASHBOARD_PROGRESS_REPORT_OVERRIDE_DIR_ENV);
 }
 /** Base directory containing persistent run state directories. */
 export function getRunsDir() {
@@ -201,6 +587,8 @@ export const CHILD_ENV_SCRUB_EXTRA = ["XDG_CONFIG_HOME"];
 /**
  * Child env vars that are re-injected with workflow-owned values.
  * Maps from workflow config key to child env var name.
+ * Reference only: buildChildEnv (child-env.ts) performs the re-injection with
+ * explicit assignments and does not read this map. Keep the two in sync.
  */
 export const CHILD_ENV_REINJECT_MAP = {
     maxConcurrent: "CLINKX_MAX_CONCURRENT",
@@ -212,7 +600,9 @@ export const CHILD_ENV_REINJECT_MAP = {
     logLevel: "CLINKX_LOG_LEVEL",
 };
 /**
- * Baseline OS env vars that are NEVER scrubbed from child.
+ * Baseline OS env vars that are never scrubbed from the child.
+ * Reference only: buildChildEnv does not read this list — these vars survive
+ * because the scrub removes only CLINKX_* and CHILD_ENV_SCRUB_EXTRA.
  * ClinkX's internal env.ts::buildEnv handles delegate subprocess sanitization.
  */
 export const CHILD_ENV_BASELINE = [
@@ -224,8 +614,9 @@ export const CHILD_ENV_BASELINE = [
 ];
 /**
  * DEAD KNOBS: these env vars have no effect with current shipped adapters
- * because adapter JSON config wins (runner.ts:156-171). Both shipped adapters
- * set timeout_seconds in JSON (codex.json:9 = 3600, claude.json:8 = 3600).
+ * because adapter JSON config wins (runner.ts timeout/idle resolution:
+ * options > adapter > env > default). Every shipped subprocess adapter sets
+ * timeout_seconds = 3600 in JSON.
  *
  * These are Layer 3 (child-side) timeout controls. The workflow engine does
  * NOT attempt to control child-side timeouts via env vars. Instead, use

package/clinkx-workflows/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,SAAS,MAAM,CAAC,GAAW,EAAE,QAAgB;IAC3C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9C,CAAC;AAED,SAAS,MAAM,CAAC,GAAW,EAAE,QAAgB;IAC3C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,QAAgB;IACtD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAChD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAQ3C,yEAAyE;AACzE,MAAM,UAAU,oBAAoB;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAChE,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,iDAAiD;IACjD,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,wBAAwB;IACtC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,aAAqB,EACrB,QAAgB,EAChB,YAAoB;IAEpB,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,+CAA+C;AAC/C,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,GAAW;IACzC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,uBAAuB,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,sBAAsB,CAAC,MAAM,CAAC,iCAAiC,EAAE,YAAY,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc;IAC5B,OAAO,MAAM,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,qBAAqB;IACnC,OAAO,MAAM,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,wBAAwB;IACtC,OAAO,MAAM,CAAC,2CAA2C,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,sBAAsB;IACpC,OAAO,MAAM,CAAC,yCAAyC,EAAE,UAAU,CAAC,CAAC;AACvE,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,sBAAsB;IACpC,OAAO,MAAM,CAAC,yCAAyC,EAAE,SAAS,CAAC,CAAC;AACtE,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,kCAAkC,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,WAAW;IACzB,OAAO,MAAM,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,gBAAgB,EAAE,iBAAiB,CAAC,qCAAqC,EAAE,0BAA0B,CAAC;QACtG,mBAAmB,EAAE,iBAAiB,CAAC,wCAAwC,EAAE,6BAA6B,CAAC;QAC/G,eAAe,EAAE,iBAAiB,CAAC,oCAAoC,EAAE,yBAAyB,CAAC;KACpG,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,WAAW;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,EAAE;QACrD,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,eAAe,CAAC;IACjD,OAAO,MAAM,CAAC,4BAA4B,EAAE,GAAG,WAAW,mBAAmB,CAAC,CAAC;AACjF,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;IAC/C,OAAO,MAAM,CAAC,gCAAgC,EAAE,GAAG,MAAM,6BAA6B,CAAC,CAAC;AAC1F,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAEhD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,iBAAiB,CAAU,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,aAAa,EAAE,uBAAuB;IACtC,gBAAgB,EAAE,2BAA2B;IAC7C,cAAc,EAAE,yBAAyB;IACzC,cAAc,EAAE,yBAAyB;IACzC,UAAU,EAAE,oBAAoB;IAChC,YAAY,EAAE,sBAAsB;IACpC,QAAQ,EAAE,kBAAkB;CACpB,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;CACA,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,wBAAwB;IACxB,6BAA6B;IAC7B,qCAAqC;CAC7B,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAG1D,MAAM,CAAC,MAAM,iCAAiC,GAAG,UAAU,CAAC;AAC5D,MAAM,CAAC,MAAM,6BAA6B,GAAG,SAAS,CAAC;AACvD,MAAM,CAAC,MAAM,6BAA6B,GAAG,UAAU,CAAC;AACxD,MAAM,CAAC,MAAM,mCAAmC,GAC9C,gDAAgD,CAAC;AACnD,MAAM,CAAC,MAAM,mCAAmC,GAC9C,gDAAgD,CAAC;AAEnD,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,SAAS,MAAM,CAAC,GAAW,EAAE,QAAgB;IAC3C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9C,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAAW,EACX,QAAsC;IAEtC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,eAAe,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,iDAAiD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,GAAW,EAAE,QAAgB;IAC3C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,QAAgB;IACtD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,SAAS,cAAc,CAAC,GAAW,EAAE,QAAgB;IACnD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1D,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,QAAiB;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClD,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAChD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAU3C,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAChE,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,oFAAoF;IACpF,wEAAwE;IACxE,kEAAkE;IAClE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,wBAAwB;IACtC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CACjD,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,GAAG,CAAC,mCAAmC,CAAC,KAAK,MAAM,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oCAAoC,CAClD,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,GAAG,CAAC,mCAAmC,CAAC,KAAK,MAAM,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAChC,aAAqB,EACrB,QAAgB,EAChB,YAAoB;IAEpB,MAAM,KAAK,GAAG;QACZ,aAAa;QACb,oBAAoB,CAAC,QAAQ,CAAC;QAC9B,oBAAoB,CAAC,YAAY,CAAC;KACnC,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,+CAA+C;AAC/C,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,GAAW;IACzC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,uBAAuB,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,wBAAwB;IACtC,OAAO,sBAAsB,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,0BAA0B;IACxC,OAAO,sBAAsB,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,iCAAiC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,0CAA0C,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,sBAAsB,CAAC,MAAM,CAAC,iCAAiC,EAAE,YAAY,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc;IAC5B,OAAO,MAAM,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,8BAA8B;IAC5C,OAAO,cAAc,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,+BAA+B;IAC7C,OAAO,OAAO,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,qBAAqB;IACnC,OAAO,MAAM,CAAC,uCAAuC,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,wBAAwB;IACtC,OAAO,MAAM,CAAC,2CAA2C,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,sBAAsB;IACpC,OAAO,MAAM,CAAC,yCAAyC,EAAE,UAAU,CAAC,CAAC;AACvE,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,sBAAsB;IACpC,OAAO,MAAM,CAAC,yCAAyC,EAAE,SAAS,CAAC,CAAC;AACtE,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC3D,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,sBAAsB,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,4CAA4C,CAAC;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,iCAAiC,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IACE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QACvB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC5B,KAAK,GAAG,6BAA6B;QACrC,KAAK,GAAG,6BAA6B,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,4BAA4B,MAAM,CAAC,6BAA6B,CAAC,YAAY,MAAM,CAAC,6BAA6B,CAAC,QAAQ,CACjI,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAEhF,MAAM,CAAC,MAAM,+BAA+B,GAC1C,8CAA8C,CAAC;AACjD,MAAM,CAAC,MAAM,uBAAuB,GAAG,sCAAsC,CAAC;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,sCAAsC,CAAC;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GACvC,2CAA2C,CAAC;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAG,oCAAoC,CAAC;AAC1E,MAAM,CAAC,MAAM,iCAAiC,GAC5C,gDAAgD,CAAC;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAC5D,MAAM,CAAC,MAAM,qCAAqC,GAAG,MAAM,CAAC;AAgB5D;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAW,EACX,KAAa;IAEb,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gEAAgE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sDAAsD,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8DAA8D,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,GAAG,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,+CAA+C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAChH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC;AAsCD,SAAS,oCAAoC,CAC3C,SAAiB,EACjB,KAAa;IAEb,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,IACE,SAAS,KAAK,EAAE;WACb,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;WACxB,CAAC,UAAU,CAAC,SAAS,CAAC;WACtB,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,+DAA+D,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CACjD,MAAyB,OAAO,CAAC,GAAG,EACpC,iBAAyB,WAAW,EAAE;IAEtC,MAAM,QAAQ,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACnD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,OAAO,oCAAoC,CACzC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,EACtD,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IACD,OAAO,oCAAoC,CACzC,QAAQ,EACR,4BAA4B,CAC7B,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,wBAAwB,CACtC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACzC,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC;IACxE,MAAM,IAAI,KAAK,CACb,GAAG,uBAAuB,8CAA8C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAC9F,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,cAAsB,EAAE,SAAkB;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC;IAClD,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACpE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC,QAAQ,CAAC;IACb,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,2DAA2D,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,KAAK,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAA+B;IAE/B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,yBAAyB,CAAC,CAAC,IAAI,EAAE,CAAC;IAChF,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,qBAAqB,oBAAoB,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,aAAa,GAAG,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC7D,IAAI,iBAAiB,GAAG,qCAAqC,CAAC;IAC9D,IAAI,aAAa,IAAI,IAAI,IAAI,aAAa,KAAK,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,GAAG,iCAAiC,6BAA6B,CAClE,CAAC;QACJ,CAAC;QACD,iBAAiB,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QAC1C,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC;eACrC,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,GAAG,IAAI,CAAC,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,GAAG,iCAAiC,sCAAsC,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,mBAAmB,GAAG,oCAAoC,CAC9D,KAAK,CAAC,mBAAmB,EACzB,gCAAgC,CACjC,CAAC;IAEF,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACxC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;eAClC,KAAK,CAAC,SAAoB,GAAG,CAAC;eAC9B,KAAK,CAAC,SAAoB,GAAG,MAAM,EACvC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,YAAY,GAAG,aAAa,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,MAAM,cAAc,GAAG,UAAU,YAAY,EAAE,CAAC;QAChD,OAAO;YACL,MAAM;YACN,cAAc;YACd,YAAY,EAAE,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC;YACjD,YAAY;YACZ,aAAa,EAAE,KAAK;YACpB,mBAAmB;YACnB,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,CAAC,eAAe,KAAK,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,YAAY,CAAC,eAAe,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACvC,OAAO;QACL,MAAM;QACN,cAAc;QACd,YAAY,EAAE,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC;QAClD,YAAY,EAAE,MAAM,CAAC,IAAI;QACzB,aAAa,EAAE,IAAI;QACnB,mBAAmB;QACnB,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG,GAAG,CAAC,+BAA+B,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;IAChD,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,uBAAuB,CAAC;QACtF,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,+BAA+B,CAAC;QAC1F,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,eAAe,UAAU,kHAAkH,CACrJ,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,yBAAyB,CAAC,MAAgB,EAAE,+BAA+B,CAAC,CAAC;IACzF,MAAM,EAAE,GAAG,yBAAyB,CAAC,KAAe,EAAE,uBAAuB,CAAC,CAAC;IAC/E,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,eAAe,EAAE,GAAG,CAAC,MAAM;QAC3B,QAAQ,EAAE,EAAE,CAAC,MAAM;QACnB,UAAU,EAAE,GAAG,CAAC,IAAI;KACrB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,eAAuB;IACxD,MAAM,EAAE,MAAM,EAAE,GAAG,yBAAyB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACjF,OAAO;QACL,oBAAoB;QACpB,mBAAmB;QACnB,kBAAkB;QAClB,iBAAiB;QACjB,sBAAsB,MAAM,EAAE;QAC9B,sBAAsB;QACtB,mBAAmB;QACnB,iBAAiB;QACjB,oBAAoB;QACpB,wBAAwB;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,kCAAkC,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,WAAW;IACzB,OAAO,MAAM,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,gBAAgB,EAAE,iBAAiB,CAAC,qCAAqC,EAAE,0BAA0B,CAAC;QACtG,mBAAmB,EAAE,iBAAiB,CAAC,wCAAwC,EAAE,6BAA6B,CAAC;QAC/G,eAAe,EAAE,iBAAiB,CAAC,oCAAoC,EAAE,yBAAyB,CAAC;QACnG,eAAe,EAAE,iBAAiB,CAAC,oCAAoC,EAAE,yBAAyB,CAAC;QACnG,mBAAmB,EAAE,iBAAiB,CAAC,wCAAwC,EAAE,6BAA6B,CAAC;KAChH,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,WAAW,CACzB,MAAyB,OAAO,CAAC,GAAG,EACpC,sBAAoC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO;IAE5D,MAAM,QAAQ,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACnD,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,4DAA4D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACvC,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,6EAA6E,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CACxG,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,cAAc,IAAI,IAAI,IAAI,cAAc,KAAK,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,mEAAmE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CACpG,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;IAC1C,MAAM,mBAAmB,GAAG,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3E,IACE,WAAW,KAAK,EAAE;QAClB,CAAC,UAAU,CAAC,WAAW,CAAC;QACxB,mBAAmB,KAAK,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,EACvD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mEAAmE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,MAAM,0CAA0C,GACrD,+CAA+C,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAyB,OAAO,CAAC,GAAG,EACpC,sBAAoC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO;IAE5D,MAAM,QAAQ,GAAG,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACjE,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACxC,OAAO,WAAW,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,oCAAoC,CACzC,QAAQ,EACR,0CAA0C,CAC3C,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;IAC/C,OAAO,MAAM,CAAC,gCAAgC,EAAE,GAAG,MAAM,6BAA6B,CAAC,CAAC;AAC1F,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAEhD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,iBAAiB,CAAU,CAAC;AAElE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,aAAa,EAAE,uBAAuB;IACtC,gBAAgB,EAAE,2BAA2B;IAC7C,cAAc,EAAE,yBAAyB;IACzC,cAAc,EAAE,yBAAyB;IACzC,UAAU,EAAE,oBAAoB;IAChC,YAAY,EAAE,sBAAsB;IACpC,QAAQ,EAAE,kBAAkB;CACpB,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;CACA,CAAC;AAEX;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,wBAAwB;IACxB,6BAA6B;IAC7B,qCAAqC;CAC7B,CAAC"}