dorfl 0.14.2 → 0.15.0

package/dist/ci-handoff-apply.js

@@ -0,0 +1,497 @@
+/**
+ * **The apply phase's validation of a handoff** (spec
+ * `ci-agent-job-without-write-token`, ADR `ci-agent-job-holds-no-write-token`
+ * decisions 3 and 4, task `ci-split-apply-rejects-hostile-bundle`).
+ *
+ * The apply job holds a write token and runs no agent. It reads the agent job's
+ * artifact as HOSTILE: every target, mode and policy comes from TRUSTED inputs
+ * (the lock job's outputs, the workflow inputs, the tree at `baseSha`, the
+ * arbiter), never from the artifact. {@link validateApplyHandoff} is the one
+ * unit the path splits call BEFORE any write. It either returns the validated
+ * handoff (the bundle's tip fetched to {@link INCOMING_TIP_REF} in the apply
+ * checkout, the recomputed integration mode, the ledger report) or throws a
+ * {@link HandoffRejected} whose `rule` and message name the broken rule, having
+ * written nothing from the artifact anywhere: not to the arbiter, and not even
+ * into the apply checkout's object store.
+ *
+ * How "nothing is fetched into the repository" holds: the bundle is first
+ * fetched into a throwaway QUARANTINE repository whose object store borrows the
+ * apply checkout's objects (read-only, through `objects/info/alternates`), and
+ * every history, path and size check runs there. Only an accepted bundle is
+ * then fetched into the apply checkout, with the same command.
+ *
+ * The LFS objects (decision 6, task `ci-split-handoff-lfs-objects`): the new
+ * commits' blobs are scanned for pointers in the quarantine, and every object
+ * is checked against its pointer (`ci-handoff-lfs.ts`) before the import. The
+ * push of the objects (before any ref) is the path split's first write.
+ *
+ * Out of scope here: the agent-result, lock-ownership and re-run rules (wired
+ * by the path splits).
+ */
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { join, posix } from 'node:path';
+import { handoffByteLimits, rejectHandoff as reject, } from './ci-handoff-format.js';
+import { readHandoff, } from './ci-handoff.js';
+import { checkLfsObjects, isRegularFileMode, scanLfsPointers, } from './ci-handoff-lfs.js';
+import { parseFrontmatter } from './frontmatter.js';
+import { git, run } from './git.js';
+import { APPLY_LIFECYCLE_FOLDERS } from './item-path.js';
+import { REPO_CONFIG_FILENAME, REPO_CONFIG_FILENAME_LEGACY, } from './repo-config.js';
+import { resolveSidecarIdentity } from './sidecar.js';
+import { workBranchRef } from './slug-namespace.js';
+import { WORK_ROOT, workFolderPrefix, workItemRel } from './work-layout.js';
+/** The apply checkout's ref an accepted bundle's tip is fetched to. */
+export const INCOMING_TIP_REF = 'refs/dorfl/incoming/tip';
+/** The most new commits (`tip ^<arbiter>/main`) a bundle may carry. */
+export const MAX_NEW_COMMITS = 200;
+/** The reason for a merge commit in the range (spec, "History"). */
+export const MERGE_COMMIT_REASON = 'the work branch contains a merge commit; rebase it and requeue';
+/** The longest symlink target read (Linux `PATH_MAX`); longer is rejected. */
+const MAX_SYMLINK_TARGET_BYTES = 4096;
+/** How many symlinks one resolution may follow before it counts as a loop. */
+const MAX_SYMLINK_HOPS = 40;
+/** How many ledger paths the PR-body section lists before "and N more". */
+const LEDGER_REPORT_MAX_PATHS = 100;
+const HEX_OID = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
+const MODE_SYMLINK = '120000';
+const MODE_GITLINK = '160000';
+// ---------------------------------------------------------------------------
+// Protected paths (decision 3)
+// ---------------------------------------------------------------------------
+/**
+ * The protected path rule a repository path falls under, or `undefined`. The
+ * fixed built-in list of decision 3 (not a config key): `.github/`,
+ * `CODEOWNERS` (root, `docs/`, `.github/`), the repository config (`dorfl.json`
+ * and its legacy dotfile, which dorfl still reads), `.lfsconfig`, and
+ * `.gitattributes` at ANY depth (a nested one sets merge attributes for its
+ * subtree just like the root one). Matched case-insensitively, so a
+ * `.GitHub/` that a case-insensitive checkout would fold into `.github/` is
+ * caught too.
+ */
+export function protectedPathOf(path) {
+    const p = path.toLowerCase();
+    if (p === '.github' || p.startsWith('.github/'))
+        return '.github/';
+    if (p === 'codeowners' || p === 'docs/codeowners')
+        return 'CODEOWNERS';
+    if (p === REPO_CONFIG_FILENAME.toLowerCase() ||
+        p === REPO_CONFIG_FILENAME_LEGACY.toLowerCase()) {
+        return REPO_CONFIG_FILENAME;
+    }
+    if (p === '.lfsconfig')
+        return '.lfsconfig';
+    if (p === '.gitattributes' || p.endsWith('/.gitattributes')) {
+        return '.gitattributes';
+    }
+    return undefined;
+}
+// ---------------------------------------------------------------------------
+// The recomputed policy
+// ---------------------------------------------------------------------------
+/**
+ * The untrusted-origin build-propose rule (ADR `untrusted-origin-build-checkpoint`,
+ * `integration-core.ts`), recomputed from the task AT `baseSha` in the apply
+ * checkout, never from the bundle (whose done-move could strip the stamp).
+ * Scope as in `performIntegration`: the task BUILD transition only; CI passes
+ * no explicit `--merge`, so there is no override. Any copy of the task at
+ * `baseSha` stamped `originTrust: untrusted` forces `propose`.
+ */
+export function recomputeIntegrationMode(params) {
+    const { repo, baseSha, integrationMode, build, env } = params;
+    if (integrationMode !== 'merge' || !build) {
+        return { mode: integrationMode, forcedPropose: false };
+    }
+    const { type, slug } = resolveSidecarIdentity(params.item);
+    if (type !== 'task')
+        return { mode: 'merge', forcedPropose: false };
+    for (const folder of APPLY_LIFECYCLE_FOLDERS.task) {
+        const spec = `${baseSha}:${workItemRel(folder, `${slug}.md`)}`;
+        const r = run('git', ['cat-file', 'blob', spec], repo, { env });
+        if (r.status !== 0)
+            continue;
+        if (parseFrontmatter(r.stdout).originTrust === 'untrusted') {
+            return { mode: 'propose', forcedPropose: true };
+        }
+    }
+    return { mode: 'merge', forcedPropose: false };
+}
+// ---------------------------------------------------------------------------
+// The ledger report
+// ---------------------------------------------------------------------------
+/**
+ * The PR-body section that lists the `work/` paths a propose-mode bundle
+ * changes outside its own item (decision 3, user story 23). The path names come
+ * from the hostile bundle, so each is JSON-quoted inside a code fence longer
+ * than any backtick run, which keeps a crafted name from closing the fence or
+ * starting a heading; the list is bounded.
+ */
+export function renderLedgerReportSection(paths) {
+    const shown = paths
+        .slice(0, LEDGER_REPORT_MAX_PATHS)
+        .map((p) => JSON.stringify(p.slice(0, 500)));
+    const body = shown.join('\n');
+    const longestRun = Math.max(0, ...(body.match(/`+/g) ?? []).map((r) => r.length));
+    const fence = '`'.repeat(Math.max(3, longestRun + 1));
+    const more = paths.length > shown.length
+        ? `\n\nand ${paths.length - shown.length} more.`
+        : '';
+    return ('### Ledger changes outside this item\n\n' +
+        'The work branch changes these files under `work/`, which are not part of ' +
+        "this item's own transition, a new note or a new ADR. Check them before " +
+        'merging.\n\n' +
+        `${fence}text\n${body}\n${fence}${more}\n`);
+}
+function parseRawZ(out) {
+    const fields = out.split('\0');
+    const changes = [];
+    for (let i = 0; i + 1 < fields.length; i += 2) {
+        const meta = fields[i];
+        if (!meta.startsWith(':'))
+            break;
+        const [oldMode, newMode, , newOid, status] = meta.slice(1).split(' ');
+        changes.push({ oldMode, newMode, newOid, status, path: fields[i + 1] });
+    }
+    return changes;
+}
+function diffTree(cwd, from, to, env) {
+    return parseRawZ(git([
+        '-c',
+        'diff.renames=false',
+        'diff-tree',
+        '-r',
+        '-z',
+        '--raw',
+        '--no-renames',
+        '--no-commit-id',
+        from,
+        to,
+    ], cwd, { env }));
+}
+function short(sha) {
+    return sha.slice(0, 12);
+}
+/** Quote a hostile path for a rejection message. */
+function q(path) {
+    return JSON.stringify(path.slice(0, 300));
+}
+// ---------------------------------------------------------------------------
+// Symlinks
+// ---------------------------------------------------------------------------
+/**
+ * Resolve `path`'s target through the commit's own symlinks, component by
+ * component, and say whether it stays inside the repository (and out of
+ * `.git`). Lexical normalisation alone is not enough: `d -> .` and
+ * `a -> d/..` are each inside on their own, but `a` resolves to the parent.
+ */
+function symlinkEscapes(path, symlinks) {
+    const stack = [];
+    const initial = symlinks.get(path);
+    if (initial === undefined || initial === '' || initial.includes('\0')) {
+        return true;
+    }
+    if (initial.startsWith('/'))
+        return true;
+    let queue = [...posix.dirname(path).split('/'), ...initial.split('/')];
+    let hops = 0;
+    while (queue.length > 0) {
+        const c = queue.shift();
+        if (c === '' || c === '.')
+            continue;
+        if (c === '..') {
+            if (stack.length === 0)
+                return true;
+            stack.pop();
+            continue;
+        }
+        stack.push(c);
+        const target = symlinks.get(stack.join('/'));
+        if (target !== undefined) {
+            if (++hops > MAX_SYMLINK_HOPS)
+                return true;
+            if (target === '' || target.startsWith('/'))
+                return true;
+            stack.pop();
+            queue = [...target.split('/'), ...queue];
+        }
+    }
+    return stack.length > 0 && stack[0].toLowerCase() === '.git';
+}
+/** Every symlink of `commit`'s tree with its target (sizes bounded first). */
+function treeSymlinks(cwd, commit, env) {
+    const entries = git(['ls-tree', '-r', '-z', commit], cwd, { env }).split('\0');
+    const links = new Map();
+    for (const entry of entries) {
+        if (!entry.startsWith(`${MODE_SYMLINK} `))
+            continue;
+        const tab = entry.indexOf('\t');
+        const oid = entry.slice(0, tab).split(' ')[2];
+        const path = entry.slice(tab + 1);
+        const size = Number(git(['cat-file', '-s', oid], cwd, { env }).trim());
+        if (size > MAX_SYMLINK_TARGET_BYTES) {
+            reject('symlink-target', `the symlink ${q(path)} has an oversized target`);
+        }
+        links.set(path, git(['cat-file', 'blob', oid], cwd, { env }));
+    }
+    return links;
+}
+/** Fetch the bundle's one expected ref, with fsck, into `cwd`'s incoming ref. */
+function fetchBundle(cwd, bundlePath, workBranch, env) {
+    run('git', ['update-ref', '-d', INCOMING_TIP_REF], cwd, { env });
+    return run('git', [
+        '-c',
+        'transfer.fsckObjects=true',
+        'fetch',
+        '--quiet',
+        '--no-tags',
+        '--no-write-fetch-head',
+        bundlePath,
+        `refs/heads/${workBranch}:${INCOMING_TIP_REF}`,
+    ], cwd, { env });
+}
+/**
+ * Run every history, path and size rule over the bundle inside the quarantine;
+ * return the tip, the new commits and the ledger paths outside the item.
+ */
+function checkBundle(c) {
+    const { quarantine: qdir, env } = c;
+    const fetched = fetchBundle(qdir, c.bundlePath, c.workBranch, env);
+    if (fetched.status !== 0) {
+        reject('bundle-format', `the bundle could not be fetched (fsck or format): ${fetched.stderr.trim().slice(0, 500)}`);
+    }
+    const tip = git(['rev-parse', INCOMING_TIP_REF], qdir, { env }).trim();
+    // History: descends from baseSha, bounded, linear.
+    if (run('git', ['merge-base', '--is-ancestor', c.baseSha, tip], qdir, { env })
+        .status !== 0) {
+        reject('history', `the work branch tip ${short(tip)} does not descend from the base ${c.baseSha}`);
+    }
+    const count = Number(git(['rev-list', '--count', tip, `^${c.mainSha}`], qdir, { env }).trim());
+    if (count === 0) {
+        reject('history', 'the work branch has no new commit over main');
+    }
+    if (count > MAX_NEW_COMMITS) {
+        reject('commit-count', `the work branch has ${count} new commits, over the limit of ${MAX_NEW_COMMITS}`);
+    }
+    const merges = git(['rev-list', '--min-parents=2', tip, `^${c.mainSha}`], qdir, { env }).trim();
+    if (merges !== '') {
+        reject('merge-commit', `${MERGE_COMMIT_REASON} (${short(merges)})`);
+    }
+    const newCommits = git(['rev-list', tip, `^${c.mainSha}`], qdir, { env })
+        .trim()
+        .split('\n');
+    // Per commit, against its single parent: protected paths, gitlinks,
+    // symlinks, blob sizes.
+    const blobs = new Map();
+    const fileBlobs = [];
+    let oldestParent = '';
+    for (const commit of newCommits) {
+        const parents = git(['rev-list', '--parents', '-n', '1', commit], qdir, {
+            env,
+        })
+            .trim()
+            .split(' ')
+            .slice(1);
+        if (parents.length !== 1) {
+            reject('history', `the commit ${short(commit)} has no parent on main`);
+        }
+        oldestParent = parents[0];
+        let touchesSymlink = false;
+        for (const ch of diffTree(qdir, parents[0], commit, env)) {
+            const rule = protectedPathOf(ch.path);
+            if (rule !== undefined) {
+                reject('protected-path', `the commit ${short(commit)} changes the protected path ${q(ch.path)} ` +
+                    `(${rule}); CI never lands a change to a protected path, so ` +
+                    'build this task locally');
+            }
+            if (ch.status === 'D')
+                continue;
+            if (ch.newMode === MODE_GITLINK) {
+                reject('gitlink', `the commit ${short(commit)} adds a gitlink (submodule) at ${q(ch.path)}`);
+            }
+            if (ch.newMode === MODE_SYMLINK)
+                touchesSymlink = true;
+            blobs.set(ch.newOid, ch.path);
+            if (isRegularFileMode(ch.newMode)) {
+                fileBlobs.push({ oid: ch.newOid, path: ch.path });
+            }
+        }
+        if (touchesSymlink) {
+            const links = treeSymlinks(qdir, commit, env);
+            for (const path of links.keys()) {
+                if (symlinkEscapes(path, links)) {
+                    reject('symlink-target', `the symlink ${q(path)} in commit ${short(commit)} points outside the repository`);
+                }
+            }
+        }
+    }
+    if (blobs.size > 0) {
+        const maxBlob = handoffByteLimits().blobBytes;
+        const sizes = git(['cat-file', '--batch-check=%(objectname) %(objectsize)'], qdir, { env, input: [...blobs.keys()].join('\n') + '\n' })
+            .trim()
+            .split('\n');
+        for (const line of sizes) {
+            const [oid, size] = line.split(' ');
+            if (Number(size) > maxBlob) {
+                reject('size', `the blob ${q(blobs.get(oid) ?? oid)} is ${size} bytes, over the limit of ${maxBlob}`);
+            }
+        }
+    }
+    // The work/ ledger rule, on the net change of the new commits.
+    const ledgerOutside = [];
+    const notes = `${WORK_ROOT}/notes/`;
+    for (const ch of diffTree(qdir, oldestParent, tip, env)) {
+        if (!ch.path.startsWith(`${WORK_ROOT}/`))
+            continue;
+        if (c.ownItemPaths.has(ch.path))
+            continue;
+        const newNote = ch.path.startsWith(notes) &&
+            ch.status === 'A' &&
+            run('git', ['cat-file', '-e', `${c.mainSha}:${ch.path}`], qdir, { env })
+                .status !== 0;
+        if (!newNote)
+            ledgerOutside.push(ch.path);
+    }
+    // LFS pointers among the blobs the new commits add or change (decision 6):
+    // a blob that parses as a pointer counts, whatever `.gitattributes` says.
+    const lfs = scanLfsPointers({ cwd: qdir, blobs: fileBlobs, env });
+    return { tip, newCommits, ledgerOutside, lfs };
+}
+/** The item's own ledger files: its body in every lifecycle folder of its type. */
+function ownItemPaths(item) {
+    const { type, slug } = resolveSidecarIdentity(item);
+    return new Set(APPLY_LIFECYCLE_FOLDERS[type].map((f) => `${workFolderPrefix(f)}${slug}.md`));
+}
+// ---------------------------------------------------------------------------
+// The entry point
+// ---------------------------------------------------------------------------
+/**
+ * Validate the agent job's handoff before the apply job writes anything.
+ *
+ * `dir` is the downloaded artifact under `runnerTemp`; `repo` is the apply
+ * job's own checkout of the trusted base, whose `trust.arbiter` remote is
+ * fetched fresh here. The steps, each a rejection ({@link HandoffRejected})
+ * naming its rule:
+ *
+ * 1. the artifact (`readHandoff`): layout, sizes, schema, `item` equal to the
+ *    trusted item, an intent kind the trusted rung can produce;
+ * 2. the bundle's one ref must be `refs/heads/<workBranchRef(type, slug)>` of
+ *    the trusted item, and its prerequisites must exist in the apply checkout;
+ * 3. in the quarantine: fetch that ref only, with `transfer.fsckObjects`;
+ *    `baseSha` is an ancestor of the tip; the new set `tip ^<arbiter>/main` is
+ *    non-empty, at most {@link MAX_NEW_COMMITS} and has no merge commit; per
+ *    new commit, no protected path ({@link protectedPathOf}), no gitlink, no
+ *    symlink resolving outside the repository, no blob over the limit;
+ * 4. the `work/` ledger rule on the net change: only this item's own
+ *    transition and new `work/notes/*` files (ADRs live outside `work/`);
+ *    anything else is rejected in `merge` mode and reported in `propose` mode;
+ * 5. the LFS rule (`checkLfsObjects`): every blob the new commits add or
+ *    change that parses as a pointer (strict spec v1; a blob that only looks
+ *    like one is rejected) needs its object in `lfs/`, of exactly its size and
+ *    hashing to its oid; no object may be unreferenced; the size limit holds;
+ * 6. only then the bundle is fetched into the apply checkout at
+ *    {@link INCOMING_TIP_REF}. Nothing is written to the apply checkout's LFS
+ *    store here: the path split pushes {@link ApplyHandoff.lfsObjects} before
+ *    any ref (`pushLfsObjects`).
+ *
+ * The integration mode is recomputed ({@link recomputeIntegrationMode}) before
+ * the ledger rule, which depends on it.
+ */
+export function validateApplyHandoff(params) {
+    const { dir, runnerTemp, repo, trust, env } = params;
+    if (!HEX_OID.test(trust.baseSha)) {
+        reject('history', 'the trusted baseSha is not a full commit id');
+    }
+    const handoff = readHandoff({
+        dir,
+        runnerTemp,
+        trust: { item: trust.item, rung: trust.rung },
+    });
+    const item = handoff.record.item;
+    const { mode, forcedPropose } = recomputeIntegrationMode({
+        repo,
+        baseSha: trust.baseSha,
+        item,
+        integrationMode: trust.integrationMode,
+        build: handoff.row.row === 'integrate-build',
+        env,
+    });
+    if (handoff.bundle === undefined) {
+        // `readHandoff` already refused `lfs/` without a bundle.
+        return {
+            handoff,
+            mode,
+            forcedPropose,
+            lfsObjects: [],
+            ledgerOutsideItem: [],
+        };
+    }
+    const { type, slug } = resolveSidecarIdentity(item);
+    const workBranch = workBranchRef(type, slug);
+    const expectedRef = `refs/heads/${workBranch}`;
+    if (handoff.bundle.ref !== expectedRef) {
+        reject('bundle-refs', `the bundle carries ${q(handoff.bundle.ref)}, not ${expectedRef}`);
+    }
+    // A fresh view of the arbiter's main (trusted; the apply job's own fetch).
+    git([
+        'fetch',
+        '--quiet',
+        '--no-tags',
+        trust.arbiter,
+        `+refs/heads/main:refs/remotes/${trust.arbiter}/main`,
+    ], repo, { env });
+    const mainSha = git(['rev-parse', `refs/remotes/${trust.arbiter}/main^{commit}`], repo, { env }).trim();
+    for (const pre of handoff.bundle.prerequisites) {
+        if (run('git', ['cat-file', '-e', `${pre}^{commit}`], repo, { env }).status !==
+            0) {
+            reject('history', `the bundle is based on ${pre}, a commit the arbiter does not have, ` +
+                `not on the base ${trust.baseSha}`);
+        }
+    }
+    const quarantine = mkdtempSync(join(runnerTemp, 'dorfl-quarantine-'));
+    let checked;
+    try {
+        const format = git(['rev-parse', '--show-object-format'], repo, {
+            env,
+        }).trim();
+        git(['init', '--quiet', '--bare', `--object-format=${format}`, quarantine], repo, { env });
+        const objects = git(['rev-parse', '--path-format=absolute', '--git-path', 'objects'], repo, { env }).trim();
+        writeFileSync(join(quarantine, 'objects', 'info', 'alternates'), `${objects}\n`);
+        checked = checkBundle({
+            quarantine,
+            bundlePath: handoff.bundle.path,
+            workBranch,
+            baseSha: trust.baseSha,
+            mainSha,
+            ownItemPaths: ownItemPaths(item),
+            env,
+        });
+    }
+    finally {
+        rmSync(quarantine, { recursive: true, force: true });
+    }
+    if (mode === 'merge' && checked.ledgerOutside.length > 0) {
+        reject('ledger', 'in merge mode the work branch may change under work/ only its own ' +
+            'item, new notes and new ADRs, but it changes ' +
+            checked.ledgerOutside.slice(0, 20).map(q).join(', '));
+    }
+    const lfsObjects = checkLfsObjects(checked.lfs, handoff.lfsObjects);
+    const imported = fetchBundle(repo, handoff.bundle.path, workBranch, env);
+    const landed = imported.status === 0
+        ? git(['rev-parse', INCOMING_TIP_REF], repo, { env }).trim()
+        : '';
+    if (landed !== checked.tip) {
+        run('git', ['update-ref', '-d', INCOMING_TIP_REF], repo, { env });
+        reject('bundle-format', 'the bundle changed between validation and import');
+    }
+    return {
+        handoff,
+        mode,
+        forcedPropose,
+        bundle: { workBranch, tip: checked.tip, newCommits: checked.newCommits },
+        lfsObjects,
+        ledgerOutsideItem: checked.ledgerOutside,
+        ledgerReport: checked.ledgerOutside.length > 0
+            ? renderLedgerReportSection(checked.ledgerOutside)
+            : undefined,
+    };
+}
+//# sourceMappingURL=ci-handoff-apply.js.map

package/dist/ci-handoff-apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-handoff-apply.js","sourceRoot":"","sources":["../src/ci-handoff-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAC,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAC,IAAI,EAAE,KAAK,EAAC,MAAM,WAAW,CAAC;AAEtC,OAAO,EACN,iBAAiB,EACjB,aAAa,IAAI,MAAM,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,WAAW,GAGX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,eAAe,EACf,iBAAiB,EACjB,eAAe,GAGf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAC,gBAAgB,EAAC,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAC,GAAG,EAAE,GAAG,EAAC,MAAM,UAAU,CAAC;AAClC,OAAO,EAAC,uBAAuB,EAAC,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACN,oBAAoB,EACpB,2BAA2B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,sBAAsB,EAAC,MAAM,cAAc,CAAC;AACpD,OAAO,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAC,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAC,MAAM,kBAAkB,CAAC;AAE1E,uEAAuE;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAE1D,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAC/B,gEAAgE,CAAC;AAElE,8EAA8E;AAC9E,MAAM,wBAAwB,GAAG,IAAI,CAAC;AACtC,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,2EAA2E;AAC3E,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,MAAM,OAAO,GAAG,iCAAiC,CAAC;AAClD,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,YAAY,GAAG,QAAQ,CAAC;AAE9B,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IACnE,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,iBAAiB;QAAE,OAAO,YAAY,CAAC;IACvE,IACC,CAAC,KAAK,oBAAoB,CAAC,WAAW,EAAE;QACxC,CAAC,KAAK,2BAA2B,CAAC,WAAW,EAAE,EAC9C,CAAC;QACF,OAAO,oBAAoB,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IAC5C,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7D,OAAO,gBAAgB,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAoDD,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAQxC;IACA,MAAM,EAAC,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,EAAC,GAAG,MAAM,CAAC;IAC5D,IAAI,eAAe,KAAK,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3C,OAAO,EAAC,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,KAAK,EAAC,CAAC;IACtD,CAAC;IACD,MAAM,EAAC,IAAI,EAAE,IAAI,EAAC,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,EAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAC,CAAC;IAClE,KAAK,MAAM,MAAM,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,GAAG,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC7B,IAAI,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YAC5D,OAAO,EAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAC,CAAC;QAC/C,CAAC;IACF,CAAC;IACD,OAAO,EAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAC,CAAC;AAC9C,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAwB;IACjE,MAAM,KAAK,GAAG,KAAK;SACjB,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAC1B,CAAC,EACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CACjD,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,GACT,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;QAC1B,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,QAAQ;QAChD,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,CACN,0CAA0C;QAC1C,2EAA2E;QAC3E,yEAAyE;QACzE,cAAc;QACd,GAAG,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,IAAI,IAAI,CAC1C,CAAC;AACH,CAAC;AAeD,SAAS,SAAS,CAAC,GAAW;IAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM;QACjC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,AAAD,EAAG,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,EAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAChB,GAAW,EACX,IAAY,EACZ,EAAU,EACV,GAAuB;IAEvB,OAAO,SAAS,CACf,GAAG,CACF;QACC,IAAI;QACJ,oBAAoB;QACpB,WAAW;QACX,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,cAAc;QACd,gBAAgB;QAChB,IAAI;QACJ,EAAE;KACF,EACD,GAAG,EACH,EAAC,GAAG,EAAC,CACL,CACD,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACzB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,oDAAoD;AACpD,SAAS,CAAC,CAAC,IAAY;IACtB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,cAAc,CACtB,IAAY,EACZ,QAAqC;IAErC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,EAAY,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;YAAE,SAAS;QACpC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpC,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,SAAS;QACV,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,EAAE,IAAI,GAAG,gBAAgB;gBAAE,OAAO,IAAI,CAAC;YAC3C,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzD,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;QAC1C,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CACpB,GAAW,EACX,MAAc,EACd,GAAuB;IAEvB,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,CAAC;YAAE,SAAS;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,IAAI,GAAG,wBAAwB,EAAE,CAAC;YACrC,MAAM,CACL,gBAAgB,EAChB,eAAe,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAChD,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAgBD,iFAAiF;AACjF,SAAS,WAAW,CACnB,GAAW,EACX,UAAkB,EAClB,UAAkB,EAClB,GAAuB;IAEvB,GAAG,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,GAAG,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IAC/D,OAAO,GAAG,CACT,KAAK,EACL;QACC,IAAI;QACJ,2BAA2B;QAC3B,OAAO;QACP,SAAS;QACT,WAAW;QACX,uBAAuB;QACvB,UAAU;QACV,cAAc,UAAU,IAAI,gBAAgB,EAAE;KAC9C,EACD,GAAG,EACH,EAAC,GAAG,EAAC,CACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,CAAc;IAMlC,MAAM,EAAC,UAAU,EAAE,IAAI,EAAE,GAAG,EAAC,GAAG,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACnE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CACL,eAAe,EACf,qDAAqD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC1F,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAErE,mDAAmD;IACnD,IACC,GAAG,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC;SACtE,MAAM,KAAK,CAAC,EACb,CAAC;QACF,MAAM,CACL,SAAS,EACT,uBAAuB,KAAK,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,OAAO,EAAE,CAC/E,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CACnB,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC,IAAI,EAAE,CACtE,CAAC;IACF,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,SAAS,EAAE,6CAA6C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;QAC7B,MAAM,CACL,cAAc,EACd,uBAAuB,KAAK,mCAAmC,eAAe,EAAE,CAChF,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CACjB,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,EACrD,IAAI,EACJ,EAAC,GAAG,EAAC,CACL,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,CAAC,cAAc,EAAE,GAAG,mBAAmB,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC;SACrE,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC,CAAC;IAEd,oEAAoE;IACpE,wBAAwB;IACxB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE;YACvE,GAAG;SACH,CAAC;aACA,IAAI,EAAE;aACN,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,CAAC,CAAC;QACX,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,SAAS,EAAE,cAAc,KAAK,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACxE,CAAC;QACD,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CACL,gBAAgB,EAChB,cAAc,KAAK,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG;oBACtE,IAAI,IAAI,qDAAqD;oBAC7D,yBAAyB,CAC1B,CAAC;YACH,CAAC;YACD,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG;gBAAE,SAAS;YAChC,IAAI,EAAE,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;gBACjC,MAAM,CACL,SAAS,EACT,cAAc,KAAK,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CACzE,CAAC;YACH,CAAC;YACD,IAAI,EAAE,CAAC,OAAO,KAAK,YAAY;gBAAE,cAAc,GAAG,IAAI,CAAC;YACvD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,SAAS,CAAC,IAAI,CAAC,EAAC,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAC,CAAC,CAAC;YACjD,CAAC;QACF,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjC,IAAI,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;oBACjC,MAAM,CACL,gBAAgB,EAChB,eAAe,CAAC,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,MAAM,CAAC,gCAAgC,CACjF,CAAC;gBACH,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC,SAAS,CAAC;QAC9C,MAAM,KAAK,GAAG,GAAG,CAChB,CAAC,UAAU,EAAE,2CAA2C,CAAC,EACzD,IAAI,EACJ,EAAC,GAAG,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAC,CACjD;aACC,IAAI,EAAE;aACN,KAAK,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,EAAE,CAAC;gBAC5B,MAAM,CACL,MAAM,EACN,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,6BAA6B,OAAO,EAAE,CACrF,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,+DAA+D;IAC/D,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,GAAG,SAAS,SAAS,CAAC;IACpC,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC;YAAE,SAAS;QACnD,IAAI,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1C,MAAM,OAAO,GACZ,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACzB,EAAE,CAAC,MAAM,KAAK,GAAG;YACjB,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC;iBACpE,MAAM,KAAK,CAAC,CAAC;QAChB,IAAI,CAAC,OAAO;YAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,GAAG,GAAG,eAAe,CAAC,EAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAC,CAAC,CAAC;IAChE,OAAO,EAAC,GAAG,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,EAAC,CAAC;AAC9C,CAAC;AAED,mFAAmF;AACnF,SAAS,YAAY,CAAC,IAAY;IACjC,MAAM,EAAC,IAAI,EAAE,IAAI,EAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAClD,OAAO,IAAI,GAAG,CACb,uBAAuB,CAAC,IAAI,CAAC,CAAC,GAAG,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CACzC,CACD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAMpC;IACA,MAAM,EAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAC,GAAG,MAAM,CAAC;IACnD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,SAAS,EAAE,6CAA6C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC;QAC3B,GAAG;QACH,UAAU;QACV,KAAK,EAAE,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAC;KAC3C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;IACjC,MAAM,EAAC,IAAI,EAAE,aAAa,EAAC,GAAG,wBAAwB,CAAC;QACtD,IAAI;QACJ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI;QACJ,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,iBAAiB;QAC5C,GAAG;KACH,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,yDAAyD;QACzD,OAAO;YACN,OAAO;YACP,IAAI;YACJ,aAAa;YACb,UAAU,EAAE,EAAE;YACd,iBAAiB,EAAE,EAAE;SACrB,CAAC;IACH,CAAC;IAED,MAAM,EAAC,IAAI,EAAE,IAAI,EAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,cAAc,UAAU,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QACxC,MAAM,CACL,aAAa,EACb,sBAAsB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,WAAW,EAAE,CACjE,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,GAAG,CACF;QACC,OAAO;QACP,SAAS;QACT,WAAW;QACX,KAAK,CAAC,OAAO;QACb,iCAAiC,KAAK,CAAC,OAAO,OAAO;KACrD,EACD,IAAI,EACJ,EAAC,GAAG,EAAC,CACL,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,CAClB,CAAC,WAAW,EAAE,gBAAgB,KAAK,CAAC,OAAO,gBAAgB,CAAC,EAC5D,IAAI,EACJ,EAAC,GAAG,EAAC,CACL,CAAC,IAAI,EAAE,CAAC;IACT,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAChD,IACC,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC,MAAM;YACrE,CAAC,EACA,CAAC;YACF,MAAM,CACL,SAAS,EACT,0BAA0B,GAAG,wCAAwC;gBACpE,mBAAmB,KAAK,CAAC,OAAO,EAAE,CACnC,CAAC;QACH,CAAC;IACF,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACtE,IAAI,OAAuC,CAAC;IAC5C,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,sBAAsB,CAAC,EAAE,IAAI,EAAE;YAC/D,GAAG;SACH,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CACF,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,MAAM,EAAE,EAAE,UAAU,CAAC,EACtE,IAAI,EACJ,EAAC,GAAG,EAAC,CACL,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,CAClB,CAAC,WAAW,EAAE,wBAAwB,EAAE,YAAY,EAAE,SAAS,CAAC,EAChE,IAAI,EACJ,EAAC,GAAG,EAAC,CACL,CAAC,IAAI,EAAE,CAAC;QACT,aAAa,CACZ,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EACjD,GAAG,OAAO,IAAI,CACd,CAAC;QACF,OAAO,GAAG,WAAW,CAAC;YACrB,UAAU;YACV,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YAC/B,UAAU;YACV,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO;YACP,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC;YAChC,GAAG;SACH,CAAC,CAAC;IACJ,CAAC;YAAS,CAAC;QACV,MAAM,CAAC,UAAU,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,CACL,QAAQ,EACR,oEAAoE;YACnE,+CAA+C;YAC/C,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACrD,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAEpE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IACzE,MAAM,MAAM,GACX,QAAQ,CAAC,MAAM,KAAK,CAAC;QACpB,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC,IAAI,EAAE;QAC1D,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,MAAM,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5B,GAAG,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;QAChE,MAAM,CAAC,eAAe,EAAE,kDAAkD,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO;QACN,OAAO;QACP,IAAI;QACJ,aAAa;QACb,MAAM,EAAE,EAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAC;QACtE,UAAU;QACV,iBAAiB,EAAE,OAAO,CAAC,aAAa;QACxC,YAAY,EACX,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YAC/B,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,aAAa,CAAC;YAClD,CAAC,CAAC,SAAS;KACb,CAAC;AACH,CAAC"}