kibi-cli 2.2.0 → 2.3.0

package/dist/traceability/impact-policy.v1.schema.json

@@ -0,0 +1,48 @@
+{
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "urn:kibi:impact-policy:v1",
+    "title": "Kibi trusted base-tree impact policy",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "contractVersion",
+        "id",
+        "version",
+        "allowUnsupportedReview",
+        "allowedPartial",
+        "notApplicablePaths"
+    ],
+    "properties": {
+        "contractVersion": { "const": "kibi.impact-policy.v1" },
+        "id": { "type": "string", "minLength": 1 },
+        "version": { "type": "string", "minLength": 1 },
+        "allowUnsupportedReview": { "type": "boolean" },
+        "allowedPartial": {
+            "type": "array",
+            "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "providerId",
+                    "providerFingerprint",
+                    "diagnosticCode",
+                    "limitationClass"
+                ],
+                "properties": {
+                    "providerId": { "type": "string", "minLength": 1 },
+                    "providerFingerprint": { "$ref": "#/$defs/sha256" },
+                    "diagnosticCode": { "type": "string", "minLength": 1 },
+                    "limitationClass": { "type": "string", "minLength": 1 }
+                }
+            }
+        },
+        "notApplicablePaths": {
+            "type": "array",
+            "uniqueItems": true,
+            "items": { "type": "string", "minLength": 1, "pattern": "^[^/].*$" }
+        }
+    },
+    "$defs": {
+        "sha256": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }
+    }
+}

package/dist/traceability/impact-pr-diff.d.ts

@@ -0,0 +1,5 @@
+import type { GitChangeSnapshot } from "./git-change-snapshot.js";
+import type { TrustedPullRequestSnapshot } from "./trusted-pr-event.js";
+/** Require a merge-base snapshot that still reflects the protected target state. */
+export declare function assertTrustedPullRequestBaseline(snapshot: GitChangeSnapshot, event: TrustedPullRequestSnapshot): void;
+//# sourceMappingURL=impact-pr-diff.d.ts.map

package/dist/traceability/impact-pr-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"impact-pr-diff.d.ts","sourceRoot":"","sources":["../../src/traceability/impact-pr-diff.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAGlE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAqExE,oFAAoF;AACpF,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,0BAA0B,GAChC,IAAI,CA6CN"}

package/dist/traceability/impact-pr-diff.js

@@ -0,0 +1,83 @@
+import { snapshotFileContent } from "../public/operations/proof-receipt-projection.js";
+import { fingerprint, fingerprintBytes } from "./impact-review.js";
+import { IMPACT_POLICY_PATH } from "./impact-review.js";
+function treeRows(snapshot, tree) {
+    const rows = [];
+    for (const raw of snapshot
+        .readGit(["ls-tree", "-r", "-z", tree])
+        .toString("binary")
+        .split("\0")
+        .filter(Boolean)) {
+        const tab = raw.indexOf("\t");
+        if (tab < 0)
+            throw new Error("Malformed Git tree listing");
+        const [mode, type, objectId] = raw.slice(0, tab).split(" ");
+        const path = new TextDecoder("utf-8", { fatal: true }).decode(Buffer.from(raw.slice(tab + 1), "binary"));
+        if (!mode || !type || !objectId)
+            throw new Error("Malformed Git tree entry");
+        rows.push({ mode, type, objectId, path });
+    }
+    return rows;
+}
+function stateFingerprint(snapshot, tree, include) {
+    const rows = treeRows(snapshot, tree)
+        .filter((row) => include(row.path))
+        .map((row) => {
+        const bytes = row.type === "blob"
+            ? snapshot.readBlobs([row.objectId]).get(row.objectId)
+            : undefined;
+        const receiptProjectedMarkdown = row.path.startsWith(".kb/") && row.path.endsWith(".md");
+        const projectedBytes = bytes && receiptProjectedMarkdown
+            ? snapshotFileContent(row.path, bytes)
+            : bytes;
+        return {
+            path: row.path,
+            mode: row.mode,
+            type: row.type,
+            ...(!receiptProjectedMarkdown ? { objectId: row.objectId } : {}),
+            bytes: projectedBytes !== undefined
+                ? fingerprintBytes(projectedBytes)
+                : null,
+        };
+    });
+    return fingerprint(rows);
+}
+function pathState(snapshot, tree, path) {
+    return stateFingerprint(snapshot, tree, (candidate) => candidate === path);
+}
+/** Require a merge-base snapshot that still reflects the protected target state. */
+export function assertTrustedPullRequestBaseline(snapshot, event) {
+    if (snapshot.baseTree !== event.mergeBaseTree ||
+        snapshot.headTree !== event.headTree)
+        throw new Error("Diff snapshot does not match the verified PR event trees");
+    const stableTargetState = (path) => path === ".kb" ||
+        path.startsWith(".kb/") ||
+        path === ".kibi" ||
+        path.startsWith(".kibi/") ||
+        [
+            "package.json",
+            "bun.lock",
+            "bun.lockb",
+            "package-lock.json",
+            "pnpm-lock.yaml",
+            "yarn.lock",
+        ].includes(path);
+    if (stateFingerprint(snapshot, event.targetTree, stableTargetState) !==
+        stateFingerprint(snapshot, event.mergeBaseTree, stableTargetState))
+        throw new Error("Protected target knowledge, policy or provider configuration advanced; rebase and refresh the impact review");
+    if (snapshot.inventory.some((file) => file.path === IMPACT_POLICY_PATH))
+        throw new Error("Impact policy changes must be merged to the protected target separately before reviewed changes");
+    const touched = new Set();
+    for (const file of snapshot.inventory) {
+        touched.add(file.path);
+        if (file.oldPath)
+            touched.add(file.oldPath);
+        if (file.copyFromPath)
+            touched.add(file.copyFromPath);
+    }
+    for (const path of touched) {
+        if (pathState(snapshot, event.targetTree, path) !==
+            pathState(snapshot, event.mergeBaseTree, path))
+            throw new Error(`Protected target changed a reviewed path (${path}); rebase and refresh the impact review`);
+    }
+}

package/dist/traceability/impact-record-validation.d.ts

@@ -0,0 +1,9 @@
+import type { GitChangeSnapshot } from "./git-change-snapshot.js";
+import type { PreparedImpactReview } from "./impact-evaluator.js";
+import { type ImpactDecision, type ImpactFileRecord, type ImpactPolicy, type ImpactReviewRecord } from "./impact-review.js";
+/** Validate an authored impact review record against the prepared snapshot. */
+export declare function same(a: unknown, b: unknown): boolean;
+export declare function recordFromCapturedTree(snapshot: GitChangeSnapshot): ImpactReviewRecord;
+export declare function validateDecisionAgainstSnapshot(path: string, decision: ImpactDecision, prepared: PreparedImpactReview, changedPaths: ReadonlySet<string>): void;
+export declare function validateAnalysisReviews(record: ImpactFileRecord, policy: ImpactPolicy): void;
+//# sourceMappingURL=impact-record-validation.d.ts.map

package/dist/traceability/impact-record-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"impact-record-validation.d.ts","sourceRoot":"","sources":["../../src/traceability/impact-record-validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAGlE,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EAGxB,MAAM,oBAAoB,CAAC;AAE5B,+EAA+E;AAE/E,wBAAgB,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAEpD;AAGD,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,iBAAiB,GAC1B,kBAAkB,CAepB;AAGD,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,oBAAoB,EAC9B,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAChC,IAAI,CAqFN;AAGD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,YAAY,GACnB,IAAI,CA+CN"}

package/dist/traceability/impact-record-validation.js

@@ -0,0 +1,113 @@
+import { analysisObligation } from "./analysis-gate.js";
+import { blobBytes, treeEntry } from "./impact-git-tree.js";
+import { approvedPartialClass } from "./impact-policy.js";
+import { IMPACT_REVIEW_PATH, canonicalJson, parseImpactReviewRecord, } from "./impact-review.js";
+/** Validate an authored impact review record against the prepared snapshot. */
+// implements REQ-impact-policy-stage-e-content-bound-review
+export function same(a, b) {
+    return canonicalJson(a) === canonicalJson(b);
+}
+// implements REQ-impact-policy-stage-e-content-bound-review
+export function recordFromCapturedTree(snapshot) {
+    const entry = treeEntry(snapshot, snapshot.headTree, IMPACT_REVIEW_PATH);
+    if (!entry ||
+        entry.type !== "blob" ||
+        (entry.mode !== "100644" && entry.mode !== "100755"))
+        throw new Error(`Captured impact review record missing: ${IMPACT_REVIEW_PATH}`);
+    const bytes = blobBytes(snapshot, entry);
+    if (!bytes)
+        throw new Error("Impact review record blob is missing");
+    return parseImpactReviewRecord(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes)));
+}
+// implements REQ-impact-policy-stage-e-content-bound-review
+export function validateDecisionAgainstSnapshot(path, decision, prepared, changedPaths) {
+    if (decision.kind === "not_applicable") {
+        if (!prepared.policy.notApplicablePaths.includes(path))
+            throw new Error(`Policy does not permit not_applicable for ${path}`);
+        return;
+    }
+    const inScope = prepared.scopedRequirementIdsByPath.get(path) ?? [];
+    if (decision.kind === "no_impact") {
+        if (inScope.length !== 0)
+            throw new Error(`no_impact cannot omit scoped requirements for ${path}: ${inScope.join(", ")}`);
+        return;
+    }
+    const scoped = [...inScope].sort();
+    const reqs = [...new Set(decision.requirementIds)].sort();
+    if (reqs.length !== decision.requirementIds.length ||
+        reqs.length !== scoped.length ||
+        reqs.some((id, index) => id !== scoped[index]))
+        throw new Error(`Impact requirements do not equal the complete scoped set for ${path}`);
+    if (decision.knowledge.state === "still_current")
+        return;
+    const after = prepared.headEntities;
+    const before = prepared.baseEntities;
+    let changedRequirement = false;
+    const updatedRequirementIds = new Set();
+    for (const entity of decision.knowledge.entities) {
+        const oldRow = before.get(entity.entityId);
+        const newRow = after.get(entity.entityId);
+        if (!newRow ||
+            newRow.artifactPath !== entity.artifactPath ||
+            !changedPaths.has(entity.artifactPath))
+            throw new Error(`Updated entity does not resolve to a changed scoped artifact: ${entity.entityId}`);
+        if (entity.beforeFingerprint !== (oldRow?.fingerprint ?? null) ||
+            entity.afterFingerprint !== newRow.fingerprint ||
+            entity.beforeFingerprint === entity.afterFingerprint)
+            throw new Error(`Updated entity fingerprints are stale or semantically unchanged: ${entity.entityId}`);
+        if (newRow.type === "req") {
+            if (!reqs.includes(entity.entityId))
+                throw new Error(`Updated requirement is outside the complete scoped set: ${entity.entityId}`);
+            changedRequirement = true;
+            updatedRequirementIds.add(entity.entityId);
+        }
+    }
+    if (!changedRequirement)
+        throw new Error(`Updated evidence for ${path} must include a semantically changed scoped requirement`);
+    const unchangedRequirementIds = new Set();
+    for (const item of decision.knowledge.stillCurrent ?? []) {
+        if (!reqs.includes(item.requirementId))
+            throw new Error(`stillCurrent requirement is outside the complete scoped set: ${item.requirementId}`);
+        if (updatedRequirementIds.has(item.requirementId))
+            throw new Error(`Requirement is both updated and still_current: ${item.requirementId}`);
+        unchangedRequirementIds.add(item.requirementId);
+    }
+    if (unchangedRequirementIds.size !==
+        (decision.knowledge.stillCurrent?.length ?? 0) ||
+        updatedRequirementIds.size + unchangedRequirementIds.size !== reqs.length ||
+        reqs.some((id) => !updatedRequirementIds.has(id) && !unchangedRequirementIds.has(id)))
+        throw new Error(`Updated evidence must account for every scoped requirement on ${path}`);
+}
+// implements REQ-impact-policy-stage-e-content-bound-review
+export function validateAnalysisReviews(record, policy) {
+    for (const side of ["before", "after"]) {
+        const analysis = record[side]?.analysis;
+        const reviews = record.analysisReviews.filter((review) => review.side === side);
+        const obligation = analysisObligation(side, analysis, record.newHunkRanges);
+        if (obligation.kind === "blocked")
+            throw new Error(`Source analysis cannot be waived for ${record.path} (${side}): ${obligation.reason}`);
+        if (obligation.kind === "none") {
+            if (reviews.length)
+                throw new Error(`Unnecessary analysis review on ${record.path} (${side}); only after-side gaps that overlap changed lines need review`);
+            continue;
+        }
+        if (obligation.kind === "unsupported_review") {
+            if (!policy.allowUnsupportedReview ||
+                reviews.length !== 1 ||
+                reviews[0]?.kind !== "unsupported_review")
+                throw new Error(`Unsupported side lacks one explicit whole-file review: ${record.path} (${side})`);
+            continue;
+        }
+        const allowedClass = analysis
+            ? approvedPartialClass(policy, analysis)
+            : null;
+        if (!allowedClass)
+            throw new Error(`Partial side is not approved by policy: ${record.path} (${side})`);
+        const review = reviews[0];
+        if (reviews.length !== 1 ||
+            review?.kind !== "partial_review" ||
+            review.limitationClass !== allowedClass ||
+            !same(review.ranges, obligation.ranges))
+            throw new Error(`Partial review must cover every uncovered range that overlaps changed lines: ${record.path} (${side})`);
+    }
+}

package/dist/traceability/impact-review.d.ts

@@ -0,0 +1,148 @@
+import type { HunkRange, Status } from "./git-staged.js";
+export declare const IMPACT_POLICY_PATH = ".kibi/impact-policy.json";
+export declare const IMPACT_REVIEW_PATH = ".kibi/impact-review.json";
+export declare const IMPACT_POLICY_VERSION: "kibi.impact-policy.v1";
+export declare const IMPACT_REVIEW_VERSION: "kibi.impact-review.v1";
+export declare const IMPACT_EVALUATOR_VERSION: "kibi.impact-evaluator.v1";
+export type Fingerprint = `sha256:${string}`;
+export type ImpactPolicy = Readonly<{
+    contractVersion: typeof IMPACT_POLICY_VERSION;
+    id: string;
+    version: string;
+    allowUnsupportedReview: boolean;
+    /** Exact trusted diagnostic/provider pairs; no globs or prefix matching. */
+    allowedPartial: readonly Readonly<{
+        providerId: string;
+        providerFingerprint: Fingerprint;
+        diagnosticCode: string;
+        limitationClass: string;
+    }>[];
+    /** Exact paths only. These paths still need a record and rationale. */
+    notApplicablePaths: readonly string[];
+}>;
+export type SideEvidence = Readonly<{
+    mode: string;
+    objectId: string | null;
+    byteFingerprint: Fingerprint;
+    kind: "regular" | "symlink" | "gitlink";
+    contentProjection?: "proof_receipts_stripped";
+    analysis: null | Readonly<{
+        contractVersion: string;
+        status: "ok" | "partial" | "unsupported" | "failed";
+        language: string;
+        sourceFile: string;
+        providerId: string | null;
+        providerStamp: unknown;
+        providerFingerprint: Fingerprint | null;
+        inputFingerprint: Fingerprint;
+        resultFingerprint: Fingerprint;
+        diagnosticCodes: readonly string[];
+        uncoveredRanges: readonly Readonly<{
+            startLine: number;
+            startColumn: number;
+            endLine: number;
+            endColumn: number;
+            reason: string;
+        }>[];
+    }>;
+}>;
+export type AnalysisReview = Readonly<{
+    kind: "unsupported_review";
+    side: "before" | "after";
+    wholeFile: true;
+    rationale: string;
+}> | Readonly<{
+    kind: "partial_review";
+    side: "before" | "after";
+    limitationClass: string;
+    ranges: SideEvidence["analysis"] extends infer _T ? readonly Readonly<{
+        startLine: number;
+        startColumn: number;
+        endLine: number;
+        endColumn: number;
+        reason: string;
+    }>[] : never;
+    rationale: string;
+}>;
+export type ImpactDecision = Readonly<{
+    kind: "impact";
+    requirementIds: readonly string[];
+    knowledge: Readonly<{
+        state: "still_current";
+        rationale: string;
+    }> | Readonly<{
+        state: "updated";
+        stillCurrent?: readonly Readonly<{
+            requirementId: string;
+            rationale: string;
+        }>[];
+        entities: readonly Readonly<{
+            entityId: string;
+            artifactPath: string;
+            beforeFingerprint: Fingerprint | null;
+            afterFingerprint: Fingerprint;
+        }>[];
+    }>;
+}> | Readonly<{
+    kind: "no_impact";
+    reason: string;
+    rationale: string;
+}> | Readonly<{
+    kind: "not_applicable";
+    policyReason: string;
+    rationale: string;
+}>;
+export type ImpactFileRecord = Readonly<{
+    path: string;
+    status: Status;
+    oldPath?: string;
+    copyFromPath?: string;
+    analysisDepth: "symbol" | "metadata" | "file" | "none";
+    disposition: "checked" | "advisory" | "skipped";
+    skipReason?: "binary" | "unsupported_encoding" | "symlink" | "submodule";
+    gitMode?: string;
+    previousMode?: string;
+    oldHunkRanges: readonly HunkRange[];
+    newHunkRanges: readonly HunkRange[];
+    before: SideEvidence | null;
+    after: SideEvidence | null;
+    analysisReviews: readonly AnalysisReview[];
+    decision: ImpactDecision;
+}>;
+export type ImpactReviewRecord = Readonly<{
+    contractVersion: typeof IMPACT_REVIEW_VERSION;
+    policy: Readonly<{
+        id: string;
+        version: string;
+        fingerprint: Fingerprint;
+    }>;
+    evaluator: Readonly<{
+        contractVersion: typeof IMPACT_EVALUATOR_VERSION;
+        fingerprint: Fingerprint;
+    }>;
+    scope: Readonly<{
+        fingerprint: Fingerprint;
+        knowledgeFingerprint: Fingerprint;
+        providerSetFingerprint: Fingerprint;
+    }>;
+    /** Self-claimed local provenance; this field is explicitly not authorization. */
+    reviewer: Readonly<{
+        id: string;
+        source: "self-claimed-local";
+    }>;
+    reviewedAt: string;
+    files: readonly ImpactFileRecord[];
+}>;
+export type ImpactReviewDiagnostic = Readonly<{
+    code: string;
+    message: string;
+    path?: string;
+}>;
+export declare function canonicalJson(value: unknown): string;
+export declare function fingerprint(value: unknown): Fingerprint;
+export declare function fingerprintBytes(value: Uint8Array): Fingerprint;
+export declare function parseImpactPolicy(value: unknown): ImpactPolicy;
+export declare function parseImpactReviewRecord(value: unknown): ImpactReviewRecord;
+export declare function assertSha256(value: string, name: string): asserts value is Fingerprint;
+export declare function isGitObjectId(value: string): boolean;
+//# sourceMappingURL=impact-review.d.ts.map

package/dist/traceability/impact-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"impact-review.d.ts","sourceRoot":"","sources":["../../src/traceability/impact-review.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzD,eAAO,MAAM,kBAAkB,6BAA6B,CAAC;AAC7D,eAAO,MAAM,kBAAkB,6BAA6B,CAAC;AAC7D,eAAO,MAAM,qBAAqB,EAAG,uBAAgC,CAAC;AACtE,eAAO,MAAM,qBAAqB,EAAG,uBAAgC,CAAC;AACtE,eAAO,MAAM,wBAAwB,EAAG,0BAAmC,CAAC;AAE5E,MAAM,MAAM,WAAW,GAAG,UAAU,MAAM,EAAE,CAAC;AAC7C,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,eAAe,EAAE,OAAO,qBAAqB,CAAC;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB,EAAE,OAAO,CAAC;IAChC,4EAA4E;IAC5E,cAAc,EAAE,SAAS,QAAQ,CAAC;QAChC,UAAU,EAAE,MAAM,CAAC;QACnB,mBAAmB,EAAE,WAAW,CAAC;QACjC,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC,EAAE,CAAC;IACL,uEAAuE;IACvE,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,eAAe,EAAE,WAAW,CAAC;IAC7B,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IACxC,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,EAAE,IAAI,GAAG,QAAQ,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,CAAC;QACpD,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,aAAa,EAAE,OAAO,CAAC;QACvB,mBAAmB,EAAE,WAAW,GAAG,IAAI,CAAC;QACxC,gBAAgB,EAAE,WAAW,CAAC;QAC9B,iBAAiB,EAAE,WAAW,CAAC;QAC/B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,eAAe,EAAE,SAAS,QAAQ,CAAC;YACjC,SAAS,EAAE,MAAM,CAAC;YAClB,WAAW,EAAE,MAAM,CAAC;YACpB,OAAO,EAAE,MAAM,CAAC;YAChB,SAAS,EAAE,MAAM,CAAC;YAClB,MAAM,EAAE,MAAM,CAAC;SAChB,CAAC,EAAE,CAAC;KACN,CAAC,CAAC;CACJ,CAAC,CAAC;AAEH,MAAM,MAAM,cAAc,GACtB,QAAQ,CAAC;IACP,IAAI,EAAE,oBAAoB,CAAC;IAC3B,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,GACF,QAAQ,CAAC;IACP,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,YAAY,CAAC,UAAU,CAAC,SAAS,MAAM,EAAE,GAC7C,SAAS,QAAQ,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,EAAE,GACJ,KAAK,CAAC;IACV,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEP,MAAM,MAAM,cAAc,GACtB,QAAQ,CAAC;IACP,IAAI,EAAE,QAAQ,CAAC;IACf,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,SAAS,EACL,QAAQ,CAAC;QAAE,KAAK,EAAE,eAAe,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,GACvD,QAAQ,CAAC;QACP,KAAK,EAAE,SAAS,CAAC;QACjB,YAAY,CAAC,EAAE,SAAS,QAAQ,CAAC;YAC/B,aAAa,EAAE,MAAM,CAAC;YACtB,SAAS,EAAE,MAAM,CAAC;SACnB,CAAC,EAAE,CAAC;QACL,QAAQ,EAAE,SAAS,QAAQ,CAAC;YAC1B,QAAQ,EAAE,MAAM,CAAC;YACjB,YAAY,EAAE,MAAM,CAAC;YACrB,iBAAiB,EAAE,WAAW,GAAG,IAAI,CAAC;YACtC,gBAAgB,EAAE,WAAW,CAAC;SAC/B,CAAC,EAAE,CAAC;KACN,CAAC,CAAC;CACR,CAAC,GACF,QAAQ,CAAC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,GAClE,QAAQ,CAAC;IACP,IAAI,EAAE,gBAAgB,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEP,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;IACvD,WAAW,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IAChD,UAAU,CAAC,EAAE,QAAQ,GAAG,sBAAsB,GAAG,SAAS,GAAG,WAAW,CAAC;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,SAAS,SAAS,EAAE,CAAC;IACpC,aAAa,EAAE,SAAS,SAAS,EAAE,CAAC;IACpC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,EAAE,cAAc,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,eAAe,EAAE,OAAO,qBAAqB,CAAC;IAC9C,MAAM,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IAC5E,SAAS,EAAE,QAAQ,CAAC;QAClB,eAAe,EAAE,OAAO,wBAAwB,CAAC;QACjD,WAAW,EAAE,WAAW,CAAC;KAC1B,CAAC,CAAC;IACH,KAAK,EAAE,QAAQ,CAAC;QACd,WAAW,EAAE,WAAW,CAAC;QACzB,oBAAoB,EAAE,WAAW,CAAC;QAClC,sBAAsB,EAAE,WAAW,CAAC;KACrC,CAAC,CAAC;IACH,iFAAiF;IACjF,QAAQ,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC,CAAC;AAKH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA6BpD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAEvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CAE/D;AA+BD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CA4F9D;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAuK1E;AA0TD,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,KAAK,IAAI,WAAW,CAG9B;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEpD"}