instar 1.3.877 → 1.3.879

package/dist/core/ApprenticeshipStallGate.d.ts

@@ -0,0 +1,297 @@
+/**
+ * ApprenticeshipStallGate — the RUNTIME-GATE callsite of the framework
+ * stall-coverage matrix standard (PR-B).
+ *
+ * Spec: docs/specs/framework-stall-coverage-matrix.md (§2.3, §3.2 callsite 2,
+ * §3.4, Frontloaded Decisions 6, 10, 11, 16, 17, 21).
+ *
+ * ONE validator, TWO callsites: the hermetic half lives in
+ * stallCoverageValidator.ts (CI ratchet, PR-A). THIS module wires that same
+ * validator into the apprenticeship lifecycle transitions:
+ *
+ *   - pending→active  → PROVISIONAL check (hermetic depth ONLY — schema,
+ *     complete enumeration, token legality, ref format; §2.3).
+ *   - active→complete → FULL check: hermetic validation PLUS the non-hermetic
+ *     checks CI cannot do — closePath LIVENESS against the commitments ledger
+ *     and guardKey/posture cross-check against the live /guards inventory,
+ *     both via loopback HTTP (Frontloaded Decision 17), plus the §2.2
+ *     acceptance-authority requirement (whole-set operator sign-off).
+ *
+ * Bounded execution (Decision 6 / instar#1069): the full-matrix hermetic
+ * validation runs in a worker thread (apprenticeshipStallGate.worker.ts) with
+ * a 60s timeout; a timeout fails CLOSED for the transition with a reason that
+ * DISTINGUISHES "validator timed out (retry)" from "matrix invalid". The
+ * validation is single-read: the worker returns the validator's contentHash,
+ * and the decision record additionally carries the checkout HEAD SHA + dirty
+ * flag (no validate-then-decide TOCTOU).
+ *
+ * Refusal hygiene (Decision 16): every refusal reason names class id + rule
+ * name only — rejected raw matrix field content is NEVER echoed into 409
+ * bodies, audit rows, or reports.
+ *
+ * Rollout (§3.4 / Decision 11): gated ENTIRELY by
+ * `apprenticeship.stallCoverageGate` in `.instar/config.json`, read LIVE at
+ * the gate callsite (no restart; transitions are rare and human-paced). The
+ * default is inline in code — absence ⇒ {enabled: true, dryRun: true}; a
+ * malformed block resolves to the SAFE default (dry-run) with one loud log
+ * line. Under dryRun BOTH presence and validity refusals are suppressed and
+ * only a would-refuse verdict is logged to the decision audit.
+ */
+import { type StallMatrixIssue, type StallMatrixResult, type StallMatrixRow } from './stallCoverageValidator.js';
+/** Minor version from which the matrix is REQUIRED for pre-ship instances. */
+export declare const STALL_MATRIX_REQUIRED_SINCE = "1.4.0";
+/** ISO date the gate wiring ships (PR-B commit date). */
+export declare const STALL_MATRIX_SHIP_DATE = "2026-07-18";
+/**
+ * Classes with a named production incident in spec §1's table — these can
+ * never pass as declared-gap without explicit recorded acceptance (§2.2).
+ */
+export declare const INCIDENT_NAMED_STALL_CLASSES: readonly string[];
+/** True when `current`'s major.minor sorts below the required-since minor. */
+export declare function versionBelowRequiredMinor(current: string, requiredSince?: string): boolean;
+export type StallMatrixRequirement = 'required' | 'grandfathered-warning';
+/**
+ * The canonical checklist function of (instanceType, createdAt) — Decision 10.
+ * Post-ship framework-onboarding instances (both instance types onboard a
+ * framework) read the requirement from HERE, never from the per-instance
+ * immutable requiredArtifacts flags. Pre-ship instances are grandfathered
+ * with a warning while the running version is below the required-since minor.
+ */
+export declare function stallMatrixRequirement(_instanceType: string, createdAt: string, opts?: {
+    currentVersion?: string;
+    shipDate?: string;
+    requiredSince?: string;
+}): StallMatrixRequirement;
+export interface StallGateConfig {
+    enabled: boolean;
+    dryRun: boolean;
+}
+/** The inline code default — absence ⇒ enabled, dry-run (§3.4). */
+export declare const STALL_GATE_DEFAULT: StallGateConfig;
+/**
+ * Resolve the `apprenticeship.stallCoverageGate` block. A malformed block
+ * resolves to the SAFE default (dry-run) with one loud log line — mirroring
+ * MessagingToneGate.getConfig()'s never-throw shape, plus the log the spec
+ * requires.
+ */
+export declare function resolveStallGateConfig(raw: unknown, log?: (msg: string) => void): StallGateConfig;
+/**
+ * The recordDecision primitive: one JSON line appended to the apprenticeship
+ * decision audit. Never throws — the audit is observability; a write failure
+ * must not block an already-decided transition.
+ */
+export declare function appendApprenticeshipDecisionRow(logPath: string, row: Record<string, unknown>): void;
+/** sha256 over the canonical (sorted-key) serialization of a row sans `integrity`. */
+export declare function rowIntegrityHash(row: Record<string, unknown>): string;
+/** Append a row carrying a self-integrity hash (tamper-EVIDENT, not tamper-proof). */
+export declare function appendTamperEvidentDecisionRow(logPath: string, row: Record<string, unknown>): void;
+/** Read the decision log's parsed rows (bounded; tail-read past the cap). */
+export declare function readDecisionRows(logPath: string): Array<Record<string, unknown>>;
+export type InstallClass = 'source-carrying' | 'fleet';
+export interface InstallProvenance {
+    installClass: InstallClass;
+    signals: {
+        developmentAgent: boolean;
+        frameworksDir: boolean;
+        specFile: boolean;
+    };
+}
+/**
+ * Classify the install at init time from the same signals the dev-agent gate
+ * uses (config.developmentAgent) plus presence of the analyzable tree —
+ * mirroring DoorwayRegistryReader's no-manifest pattern for source-absence
+ * (a pure npm-package install ships no docs/).
+ */
+export declare function deriveInstallProvenance(projectDir: string, config?: {
+    developmentAgent?: boolean;
+}): InstallProvenance;
+export declare function hasInstallProvenanceRecord(logPath: string): boolean;
+/**
+ * Record the install-provenance row ONCE (presence-scan idempotent) — the
+ * init-time derivation (§3.2) and the PostUpdateMigrator backfill both funnel
+ * through here. Tamper-evident append via the recordDecision primitive.
+ */
+export declare function recordInstallProvenanceIfAbsent(projectDir: string, stateDir: string): 'recorded' | 'present' | 'error';
+export type ProvenanceRead = {
+    ok: true;
+    installClass: InstallClass;
+} | {
+    ok: false;
+    error: 'missing' | 'invalid';
+};
+/** Read the LATEST install-provenance row; verify its integrity hash. */
+export declare function readInstallProvenance(logPath: string): ProvenanceRead;
+export interface StallGateValidationInput {
+    repoRoot: string;
+    framework: string;
+    nowIso: string;
+}
+export interface StallGateValidationOutput {
+    fileMissing: boolean;
+    result?: StallMatrixResult;
+    /** Authored rows (known fields only, byte-capped) — consumed for the
+     *  non-hermetic checks + canonical row hashing, never echoed into errors. */
+    rawRows?: StallMatrixRow[];
+}
+/**
+ * The pure validation unit: derives the matrix path EXCLUSIVELY from the
+ * registry's charset-clamped framework field, realpath-jailed to
+ * docs/frameworks/ (§3.2), runs the REAL hermetic validator (PR-A), and
+ * re-parses the front-matter for the raw row fields the non-hermetic checks
+ * need. Runs inside the worker thread; also callable in-process (the fallback
+ * when a worker cannot start, e.g. under vitest where the compiled worker
+ * file does not exist — behavior parity, never a silent skip).
+ */
+export declare function runStallGateValidation(input: StallGateValidationInput): StallGateValidationOutput;
+export type StallGateVerdictKind = 'skipped-disabled' | 'grandfathered-warning' | 'valid' | 'invalid' | 'would-refuse' | 'matrix-unverifiable-no-source' | 'provenance-record-missing' | 'provenance-record-invalid' | 'source-tree-unanalyzable' | 'validator-timeout' | 'validator-error' | 'ledger-unreachable' | 'acceptance-missing';
+export interface StallGateGuardPair {
+    classId: string;
+    guardKey: string;
+    detector?: string;
+    effective: string | null;
+    check: 'ok' | 'contradicts' | 'vacuous-with-reason' | 'missing';
+}
+export interface StallGateReport {
+    phase: 'provisional' | 'full';
+    framework: string;
+    requirement: StallMatrixRequirement;
+    installClass?: InstallClass;
+    verdict: StallGateVerdictKind;
+    contentHash?: string;
+    headSha?: string | null;
+    dirty?: boolean | null;
+    /** class id + rule name ONLY (Decision 16). */
+    issues: StallMatrixIssue[];
+    /** Dead-closePath / liveness flags (rule names + class ids + the clamped ref). */
+    flaggedRows: Array<{
+        classId: string;
+        rule: string;
+        ref?: string;
+    }>;
+    guardPairs: StallGateGuardPair[];
+    /** Enumerations for recorded acceptance (spec §3.2 — covered rows included:
+     *  the path of least scrutiny must not be the strongest claim). */
+    enumerated: {
+        covered: Array<{
+            classId: string;
+            evidence?: string;
+        }>;
+        coveredDark: string[];
+        declaredGaps: string[];
+        notApplicable: string[];
+    };
+    acceptance: {
+        wholeSetValid: boolean;
+        checkedRefs: number;
+        invalidRefs: number;
+    };
+    warnings: string[];
+}
+export interface StallGateVerdict {
+    allow: boolean;
+    /** Named reason (class ids + rule names only). */
+    reason: string;
+    /** True when a refusal was suppressed by dryRun (would-refuse logged). */
+    dryRunSuppressed: boolean;
+    report: StallGateReport;
+}
+/** Structural slice of an ApprenticeshipInstance the gate consumes. */
+export interface StallGateInstanceRef {
+    id: string;
+    instanceType: string;
+    framework: string;
+    createdAt: string;
+}
+export interface AcceptanceChecker {
+    /** A valid whole-set acceptance for this instance bound to EXACTLY this
+     *  content hash, recorded by a principal distinct from the transition
+     *  caller (never a bearer principal). */
+    hasWholeSetAcceptance(instanceId: string, contentHash: string): boolean;
+    /** Row-scoped acceptanceRef authenticity: the ref resolves to an artifact
+     *  covering this rowId whose bound hash matches the CURRENT joint canonical
+     *  hash of ALL the rowIds the artifact enumerates (canonicalRowSetHash) —
+     *  the caller resolves that set against the live matrix (null = a named row
+     *  no longer exists ⇒ invalid). */
+    rowAcceptanceValid(ref: string, rowId: string, resolveRowSetHash: (rowIds: string[]) => string | null): boolean;
+    /** Per-instance recorded override: excuses (rule, rowId) while the row's
+     *  canonical content hash is unchanged (§3.4 rollback relief). */
+    overrideExcuses(instanceId: string, rule: string, rowId: string, rowHash: string): boolean;
+}
+export interface ApprenticeshipStallGateDeps {
+    /** Project root — matrices + git checkout live here. */
+    projectDir: string;
+    /** Agent state dir (`.instar`) — config.json + the decision log live here. */
+    stateDir: string;
+    /** Decision-audit path (default `<stateDir>/logs/apprenticeship-decisions.jsonl`). */
+    decisionLogPath?: string;
+    /** Loopback HTTP target for the non-hermetic checks (Decision 17). Absent ⇒
+     *  the non-hermetic checks refuse `ledger-unreachable (retry)` — named,
+     *  never silently skipped. */
+    loopback?: {
+        port: number;
+        authToken?: string;
+    } | null;
+    /** Acceptance machinery (§2.2). Absent ⇒ acceptance cannot be verified ⇒
+     *  the full gate refuses `acceptance-missing`. */
+    acceptance?: AcceptanceChecker | null;
+    /** Injectable bounded validation runner (tests). Default: worker thread
+     *  with in-process fallback on worker-start failure. */
+    runValidation?: (input: StallGateValidationInput) => Promise<{
+        ok: true;
+        output: StallGateValidationOutput;
+    } | {
+        ok: false;
+        timedOut?: boolean;
+        error?: string;
+    }>;
+    fetchImpl?: typeof fetch;
+    getCurrentVersion?: () => string;
+    now?: () => Date;
+    log?: (msg: string) => void;
+    /** Worker timeout (default 60_000ms — Decision 6). */
+    validatorTimeoutMs?: number;
+}
+export declare class ApprenticeshipStallGate {
+    private readonly d;
+    private readonly decisionLogPath;
+    constructor(deps: ApprenticeshipStallGateDeps);
+    /** Live config read at the callsite — no restart (§3.4). */
+    getConfig(): StallGateConfig;
+    /**
+     * Evaluate the matrix gate for a lifecycle transition. NEVER throws — every
+     * failure mode maps to a named verdict (fail closed under enforce, logged
+     * would-refuse under dryRun).
+     */
+    evaluateForTransition(instance: StallGateInstanceRef, phase: 'provisional' | 'full'): Promise<StallGateVerdict>;
+    /** Returns null when the gate passes, else the named refusal reason. */
+    private evaluateRequired;
+    /** closePath liveness + guardKey/posture cross-check. Null = pass. */
+    private nonHermeticChecks;
+    private runValidationBounded;
+    private runInProcess;
+    private gitState;
+    private loopbackJson;
+    private postAggregatedAttention;
+    private recordGateDecision;
+}
+/**
+ * Canonical serialization of one authored matrix row: known fields only,
+ * sorted keys, stable JSON. Row-scoped acceptances/overrides hash EXACTLY
+ * this — a codemod adding UNRELATED rows does not void them; ANY change to
+ * the row itself does.
+ */
+export declare function canonicalRowSerialization(row: StallMatrixRow): string;
+export declare function canonicalRowHash(row: StallMatrixRow): string;
+/**
+ * Joint hash over a SET of accepted rows (rows-scope challenges, Decision 20):
+ * sorted by rowId, each entry [rowId, canonical serialization]. Adding
+ * UNRELATED rows to the matrix leaves this hash untouched; ANY change to an
+ * accepted row changes it.
+ */
+export declare function canonicalRowSetHash(entries: Array<{
+    rowId: string;
+    row: StallMatrixRow;
+}>): string;
+/** The bound content for a fleet-install (no-source) whole-set acceptance. */
+export declare function degradedAcceptanceHash(instanceId: string, framework: string): string;
+//# sourceMappingURL=ApprenticeshipStallGate.d.ts.map

package/dist/core/ApprenticeshipStallGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApprenticeshipStallGate.d.ts","sourceRoot":"","sources":["../../src/core/ApprenticeshipStallGate.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAQH,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACpB,MAAM,6BAA6B,CAAC;AAIrC,8EAA8E;AAC9E,eAAO,MAAM,2BAA2B,UAAU,CAAC;AACnD,yDAAyD;AACzD,eAAO,MAAM,sBAAsB,eAAe,CAAC;AAEnD;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAKhD,CAAC;AAEX,8EAA8E;AAC9E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,GAAE,MAAoC,GAAG,OAAO,CAWvH;AAED,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,uBAAuB,CAAC;AAE1E;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5E,sBAAsB,CAQxB;AAkBD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,mEAAmE;AACnE,eAAO,MAAM,kBAAkB,EAAE,eAAiD,CAAC;AAEnF;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,eAAe,CAgBjG;AAID;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAOnG;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAIrE;AAED,sFAAsF;AACtF,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAElG;AAID,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAmChF;AAID,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,OAAO,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE;QAAE,gBAAgB,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CACnF;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,GACtC,iBAAiB,CAUnB;AAID,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CASnE;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,UAAU,GAAG,SAAS,GAAG,OAAO,CAuBlC;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,YAAY,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAAA;CAAE,CAAC;AAEhD,yEAAyE;AACzE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAWrE;AAQD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;iFAC6E;IAC7E,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,wBAAwB,GAAG,yBAAyB,CA6CjG;AA4BD,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,uBAAuB,GACvB,OAAO,GACP,SAAS,GACT,cAAc,GACd,+BAA+B,GAC/B,2BAA2B,GAC3B,2BAA2B,GAC3B,0BAA0B,GAC1B,mBAAmB,GACnB,iBAAiB,GACjB,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,IAAI,GAAG,aAAa,GAAG,qBAAqB,GAAG,SAAS,CAAC;CACjE;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,sBAAsB,CAAC;IACpC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,EAAE,oBAAoB,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACvB,+CAA+C;IAC/C,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,kFAAkF;IAClF,WAAW,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpE,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC;uEACmE;IACnE,UAAU,EAAE;QACV,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACvD,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,aAAa,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IACF,UAAU,EAAE;QAAE,aAAa,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACjF,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,iBAAiB;IAChC;;6CAEyC;IACzC,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACxE;;;;uCAImC;IACnC,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IAChH;sEACkE;IAClE,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5F;AAID,MAAM,WAAW,2BAA2B;IAC1C,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;kCAE8B;IAC9B,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvD;sDACkD;IAClD,UAAU,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACtC;4DACwD;IACxD,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,wBAAwB,KAAK,OAAO,CAC1D;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,yBAAyB,CAAA;KAAE,GAC7C;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CACpD,CAAC;IACF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,MAAM,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,sDAAsD;IACtD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAID,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;gBAE7B,IAAI,EAAE,2BAA2B;IAM7C,4DAA4D;IAC5D,SAAS,IAAI,eAAe;IAe5B;;;;OAIG;IACG,qBAAqB,CACzB,QAAQ,EAAE,oBAAoB,EAC9B,KAAK,EAAE,aAAa,GAAG,MAAM,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAuD5B,wEAAwE;YAC1D,gBAAgB;IAkK9B,sEAAsE;YACxD,iBAAiB;IAsH/B,OAAO,CAAC,oBAAoB;IAmD5B,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,QAAQ;YAwBF,YAAY;YAiCZ,uBAAuB;IA8BrC,OAAO,CAAC,kBAAkB;CA0B3B;AAID;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,CAarE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,CAE5D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,CAAC,GAAG,MAAM,CAKlG;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAIpF"}