kibi-cli 2.32.0 → 2.35.1

package/dist/operations/proof/claim-bindings.js

@@ -20,6 +20,7 @@ import { rmSync, writeFileSync } from "node:fs";
 import path from "node:path";
 import { runOperationJsonQuery, toPrologAtom, } from "../../public/operations/prolog-json.js";
 import { compileWitness, loadSymbol, smtAssertion, } from "./code-certificates.js";
+import { stringConstraintProblem } from "./code-models.js";
 function record(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value)
         ? value
@@ -109,10 +110,128 @@ function smtNegation(obligation) {
 function constraintText(obligation) {
     return `${obligation.variable} ${obligation.operator} ${obligation.value}`;
 }
+/**
+ * The type-level witness Kibi writes for a required_fields claim binding: it
+ * compiles only when every field is a required key of the type whose value
+ * can be neither undefined nor null. Each field has its own two lines (`key<i>`
+ * that the field exists, `required<i>` that it is required and non-null), so
+ * a failed compile says which fields break the claim.
+ */
+// implements REQ-kibi-non-numeric-proof-kinds
+export function requiredFieldsWitness(importPath, typeExpression, fields) {
+    return [
+        `import type * as domain from ${JSON.stringify(importPath)};`,
+        `type Shape = ${typeExpression};`,
+        "type HasKey<K extends PropertyKey> = K extends keyof Shape ? true : false;",
+        "type IsRequired<K extends PropertyKey> = K extends keyof Shape",
+        "  ? {} extends Pick<Shape, K> ? false : undefined extends Shape[K] ? false : null extends Shape[K] ? false : true",
+        "  : false;",
+        ...fields.flatMap((field, index) => [
+            `const key${index}: HasKey<${JSON.stringify(field)}> = true;`,
+            `const required${index}: IsRequired<${JSON.stringify(field)}> = true;`,
+        ]),
+        `void [${fields.map((_, index) => `key${index}, required${index}`).join(", ")}];`,
+        "export {};",
+        "",
+    ].join("\n");
+}
+/** Which fields a failed required-fields witness rejected, and how. */
+export function requiredFieldsFailures(witness, fields, errorLines) {
+    const lines = witness.split("\n");
+    const failing = new Set(errorLines);
+    const lineOf = (prefix) => lines.findIndex((line) => line.startsWith(prefix));
+    const failures = [];
+    fields.forEach((field, index) => {
+        if (failing.has(lineOf(`const key${index}:`)))
+            failures.push(`${field} is not a field`);
+        else if (failing.has(lineOf(`const required${index}:`)))
+            failures.push(`${field} is optional or nullable`);
+    });
+    return failures;
+}
+async function requiredFieldsProblem(context, contract, fields) {
+    const domainId = contract.domain_source?.symbol_id ?? "";
+    const domain = await loadSymbol(context, domainId);
+    if (!domain || domain.sourceFile === "")
+        return `the domain_source symbol ${domainId} has no source file`;
+    const exportName = contract.domain_source?.export ?? domain.title;
+    const directory = path.dirname(domain.sourceFile);
+    const base = path.basename(domain.sourceFile).replace(/\.[cm]?[jt]sx?$/, "");
+    const witnessPath = path.join(directory, `.kibi-claim-witness-${randomBytes(6).toString("hex")}.ts`);
+    const absolute = path.resolve(context.workspaceRoot, witnessPath);
+    let lastReason = "";
+    let failures = [];
+    try {
+        for (const typeExpression of [
+            `domain.${exportName}`,
+            `InstanceType<typeof domain.${exportName}>`,
+        ]) {
+            const witness = requiredFieldsWitness(`./${base}.js`, typeExpression, fields);
+            writeFileSync(absolute, witness, "utf8");
+            const compiled = compileWitness(context.workspaceRoot, witnessPath);
+            if (compiled.ok)
+                return null;
+            lastReason = compiled.reason;
+            // The first type expression that names a real type decides which
+            // fields fail; the InstanceType form is only for classes.
+            const errorLines = compiled.errorLines ?? [];
+            const shapeLine = witness.split("\n").findIndex((line) => line.startsWith("type Shape"));
+            if (failures.length === 0 && !errorLines.includes(shapeLine))
+                failures = requiredFieldsFailures(witness, fields, errorLines);
+        }
+    }
+    finally {
+        rmSync(absolute, { force: true });
+    }
+    if (failures.length > 0)
+        return `${exportName} does not have every field of {${fields.join(", ")}} as a required, non-nullable field: ${failures.join("; ")}`;
+    return `${exportName} does not have every field of {${fields.join(", ")}} as a required, non-nullable field${lastReason ? ` (${lastReason.replace(/ the witness \S+/, " the required-fields witness")})` : ""}`;
+}
+/** The symbols a non-numeric certificate read, which must be in code scope. */
+function modelSymbols(contract) {
+    return [
+        contract.domain_source?.symbol_id,
+        contract.initial_source?.symbol_id,
+        contract.pattern_source?.symbol_id,
+        ...Object.values(contract.domains ?? {}).map((row) => "symbol_id" in row ? row.symbol_id : undefined),
+        ...Object.values(contract.predicate_source ?? {}).flatMap((row) => [
+            row.symbol_id,
+            ...(row.harness_for ?? []),
+        ]),
+    ].filter((id) => typeof id === "string" && id !== "");
+}
+async function nonNumericProblem(context, contract, certificate, obligation, factId, coveredBy) {
+    const outside = modelSymbols(contract).find((id) => !coveredBy.has(id));
+    if (outside !== undefined)
+        return `the symbol ${outside} the certificate read is not in the receipt's code scope: link it covered_by the test so a change to it stales the proof`;
+    const obligationKind = text(obligation.kind);
+    if (obligationKind === "required_fields" && contract.kind === "typecheck")
+        return requiredFieldsProblem(context, contract, Array.isArray(obligation.members) ? obligation.members.map(String) : []);
+    if (obligationKind === "string_constraint")
+        return stringConstraintProblem(certificate, obligation, factId);
+    if (context.prolog === undefined)
+        return "no Prolog runtime is attached to model check the claim";
+    const checked = await runOperationJsonQuery(context.prolog, "claim_obligations.pl", `claim_obligations:claim_model_check_json(${toPrologAtom(contract.kind ?? "")}, ${toPrologAtom(JSON.stringify(obligation))}, ${toPrologAtom(JSON.stringify(certificate))}, JsonString)`, "Claim model check");
+    return checked.ok === true ? null : (checked.reason ?? "the model check failed");
+}
+const NON_NUMERIC_OBLIGATIONS = new Set([
+    "required_fields",
+    "string_constraint",
+    "rule_holds",
+    "predicate_holds",
+    "every_member",
+    "machine_set",
+    "machine_relation",
+    "set_relation",
+    "nullable_fields",
+    "route_middleware",
+]);
 async function derivedProblem(context, contract, certificate, row, coveredBy) {
     const obligation = record(row.obligation) ?? {};
     const kind = contract.kind;
     const factId = row.fact_id ?? "the grounding fact";
+    if (NON_NUMERIC_OBLIGATIONS.has(text(obligation.kind)))
+        return nonNumericProblem(context, contract, certificate, obligation, factId, coveredBy);
     if (kind === "exhaustive" || kind === "typecheck") {
         const set = obligation;
         const domainId = contract.domain_source?.symbol_id ?? "";
@@ -144,6 +263,21 @@ async function derivedProblem(context, contract, certificate, row, coveredBy) {
         return `the query does not assert the negation of ${factId}'s constraint ${negation}`;
     return null;
 }
+/**
+ * The evidence level a receipt records. A certificate that re-checks but
+ * derives none of the claims it names from the code proves nothing about
+ * the code, so the receipt supports tested, the level coverage reports. An
+ * intent-scope derivation rests on the knowledge base's own facts alone
+ * (the test read no value from the code), so it does not count either.
+ */
+// implements REQ-kibi-claim-bound-proofs
+export function receiptEvidenceLevel(level, bindings) {
+    if (level !== "proved" || bindings === undefined || bindings.length === 0)
+        return level;
+    return bindings.some((binding) => binding.binding === "derived" && binding.scope !== "intent")
+        ? "proved"
+        : "tested";
+}
 /**
  * How a certificate binds to each claim its contract names in proves. Kibi
  * derives what the certificate must establish from each claim's grounding
@@ -151,7 +285,7 @@ async function derivedProblem(context, contract, certificate, row, coveredBy) {
  * whose fact has no derivation is only attested by the author. Returns
  * undefined for a contract that names no claims.
  */
-// implements REQ-kibi-claim-bound-proofs
+// implements REQ-kibi-claim-bound-proofs, REQ-kibi-non-numeric-proof-kinds
 export async function judgeClaimBindings(context, input) {
     const keys = input.contract.proves ?? [];
     if (keys.length === 0 || input.contract.kind === undefined)
@@ -165,7 +299,11 @@ export async function judgeClaimBindings(context, input) {
     const rows = await runOperationJsonQuery(context.prolog, "claim_obligations.pl", `claim_obligations:test_claim_obligations_json(${toPrologAtom(input.testId)}, ${toPrologAtom(JSON.stringify(keys))}, ${toPrologAtom(input.contract.kind)}, JsonString)`, "Claim obligations");
     const coveredBy = new Set(input.coveredBySymbols);
     const valueSourced = (input.contract.value_source ?? []).length > 0 &&
-        (input.contract.value_source ?? []).every((source) => coveredBy.has(source.symbol_id));
+        (input.contract.value_source ?? []).every((source) => "source" in source || coveredBy.has(source.symbol_id));
+    // A rule decided by a test harness that drives the code is about the code
+    // through that harness, so its claims are bound with scope harness.
+    const harnessed = input.contract.kind === "rule" &&
+        Object.values(input.contract.predicate_source ?? {}).some((row) => (row.harness_for ?? []).length > 0);
     const certificate = record(input.verdict.certificate) ?? {};
     const bindings = [];
     for (const row of rows) {
@@ -188,11 +326,20 @@ export async function judgeClaimBindings(context, input) {
         }
         const obligation = record(row.obligation) ?? {};
         if (input.verdict.evidence_level !== "proved") {
+            const recheck = `the certificate did not re-check${input.verdict.certificate_rejection ? `: ${input.verdict.certificate_rejection}` : ""}`;
+            // A typecheck claim is decided from the code alone, so when the
+            // author's witness fails, lead with what the code breaks (the field
+            // that is nullable, the member that is missing) rather than only
+            // "the type checker did not accept the witness".
+            const codeProblem = input.contract.kind === "typecheck" &&
+                input.verdict.certificate !== undefined
+                ? await derivedProblem(context, input.contract, certificate, row, coveredBy)
+                : null;
             bindings.push({
                 ...base,
                 binding: "rejected",
                 obligation,
-                reason: `the certificate did not re-check${input.verdict.certificate_rejection ? `: ${input.verdict.certificate_rejection}` : ""}`,
+                reason: codeProblem === null ? recheck : `${codeProblem} (${recheck})`,
             });
             continue;
         }
@@ -202,7 +349,13 @@ export async function judgeClaimBindings(context, input) {
             ? {
                 ...base,
                 binding: "derived",
-                scope: numeric && !valueSourced ? "intent" : "code",
+                scope: numeric && !valueSourced
+                    ? "intent"
+                    : harnessed
+                        ? "harness"
+                        : input.contract.kind === "source"
+                            ? "source"
+                            : "code",
                 obligation,
             }
             : { ...base, binding: "rejected", obligation, reason: problem });

package/dist/operations/proof/code-certificates.d.ts

@@ -33,14 +33,6 @@ export declare function importsDomain(source: string, sourcePath: string, target
  * declares an `outDir` that contains it.
  */
 export declare function compiledToSourcePath(workspaceRoot: string, relativePath: string): string | null;
-/**
- * The Python interpreters a domain loads with, most specific first: the
- * KIBI_PYTHON override, the active virtualenv, a project virtualenv (`.venv`
- * or `venv`) between the domain file and the workspace root, then python3
- * and python on PATH. The system interpreter usually cannot import the
- * project's dependencies, so a project environment comes before it.
- */
-export declare function pythonDomainInterpreters(workspaceRoot: string, sourceFile: string, env?: NodeJS.ProcessEnv): string[];
 /**
  * The domain as the code defines it: Kibi imports the domain_source file
  * itself and reads the named export's members, so a certificate cannot cover
@@ -80,16 +72,22 @@ export declare function domainCoverageProblem(exportName: string, evaluated: Rea
     members: readonly string[] | null;
 }>, certified: readonly string[]): string | null;
 /**
- * Kibi compiles a typecheck witness itself, with the workspace's TypeScript
- * and fixed strict options (a lax project tsconfig could make the never
- * check vacuous), and accepts it only with no errors in the witness.
+ * Kibi compiles a typecheck witness itself, with the workspace's TypeScript.
+ * Imports resolve the way the project's own tsconfig says (module,
+ * moduleResolution, paths, ...) and its declaration files are in the
+ * program, but the checking options stay fixed and
+ * strict, so a lax project tsconfig cannot make the never check vacuous. It
+ * accepts the witness only with no errors in it.
  */
-export declare function compileWitness(workspaceRoot: string, witnessPath: string): {
+export declare function compileWitness(workspaceRoot: string, witnessPath: string, options?: Readonly<{
+    requireExhaustiveness?: boolean;
+}>): {
     ok: true;
     version: string;
 } | {
     ok: false;
     reason: string;
+    errorLines?: number[];
 };
 export type FactConstraint = Readonly<{
     operator: string;
@@ -99,7 +97,8 @@ export type FactConstraint = Readonly<{
 export declare function smtAssertion(property: string, valueType: "int" | "real", row: FactConstraint): string;
 /**
  * The values a contract's value_source exports hold, read from the code the
- * same way as a domain, or why one cannot be read.
+ * same way as a domain (a count measure is the collection's size), or why
+ * one cannot be read.
  */
 export declare function valueSourceValues(context: OperationContext, contract: ProofContract): Promise<{
     ok: true;
@@ -118,13 +117,34 @@ export declare function rerunSmtQuery(solver: string, query: string): {
     ok: false;
     reason: string;
 };
+/**
+ * The certificate of a source proof: the contract's source and what Kibi
+ * reads from it. A certificate the run left must name the same source, and
+ * a model it carries must be what Kibi reads; either way the stored model is
+ * Kibi's own read, so the proof never rests on members the test listed.
+ */
+export declare function completeSourceCertificate(context: OperationContext, testId: string, contract: ProofContract, left: unknown): Promise<{
+    ok: true;
+    certificate: Record<string, unknown>;
+} | {
+    ok: false;
+    reason: string;
+}>;
+/**
+ * A typecheck certificate whose own outcome is failed says only that: add
+ * what Kibi's compile of the same witness reports, so the author sees the
+ * first error, or learns that the test compiled it differently.
+ */
+export declare function withWitnessDiagnosis(context: OperationContext, contract: ProofContract, reason: string): string;
+export { pythonDomainInterpreters, runCodeEvaluator, TS_RESOLVE_HOOKS, } from "./code-runner.js";
 /**
  * Re-check the certificate a certificate-kind run left for one test. A
  * runner kind (e2e, example, property) supports tested evidence and needs
  * no certificate; a certificate kind supports proved evidence only when the
  * certificate re-checks: its structure and arithmetic in code_certificates.pl,
  * and here that the proof read its domain from the code, that the witness is
- * the workspace file, and that the solver still answers unsat.
+ * the workspace file, that the solver still answers unsat, and that a rule
+ * table, state machine or pattern is what Kibi itself reads from the code.
  */
 export declare function checkCodeCertificate(context: OperationContext, input: Readonly<{
     testId: string;

package/dist/operations/proof/code-certificates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"code-certificates.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/code-certificates.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAEjF,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,SAAS,EAEf,MAAM,gCAAgC,CAAC;AAExC;;;GAGG;AAEH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,cAAc,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAYpF,wBAAsB,UAAU,CAC9B,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAS3B;AAED,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,iBAIxE;AAKD;;;;;;GAMG;AAEH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAgBT;AA0ED;;;;;GAKG;AAEH,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,GACnB,MAAM,GAAG,IAAI,CA2Bf;AAmGD;;;;;;GAMG;AAEH,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,CAwBV;AAaD;;;;;;;;GAQG;AAEH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,QAAQ,CAAC;IAChB,mEAAmE;IACnE,OAAO,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC;CAC/C,CAAM,GAEL;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAShC;AAED;;GAEG;AAEH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAM7D;AAgFD;;;GAGG;AAEH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;CAAE,CAAC,EACzE,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,MAAM,GAAG,IAAI,CAiBf;AAID;;;;GAIG;AAEH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,GAClB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAsC/D;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAiF3E,2EAA2E;AAC3E,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,KAAK,GAAG,MAAM,EACzB,GAAG,EAAE,cAAc,GAClB,MAAM,CAKR;AAED;;;GAGG;AAEH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,aAAa,GACtB,OAAO,CACN;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAChC,CAkBA;AAmED,4EAA4E;AAE5E,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA0B9C;AAuFD;;;;;;;GAOG;AAEH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,QAAQ,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC,GACD,OAAO,CAAC,kBAAkB,CAAC,CAuD7B"}
+{"version":3,"file":"code-certificates.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/code-certificates.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAKjF,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,SAAS,EAEf,MAAM,gCAAgC,CAAC;AAkBxC;;;GAGG;AAEH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,cAAc,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAYpF,wBAAsB,UAAU,CAC9B,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAS3B;AAED,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,iBAIxE;AAKD;;;;;;GAMG;AAEH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAgBT;AA0ED;;;;;GAKG;AAEH,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,GACnB,MAAM,GAAG,IAAI,CA2Bf;AAoED;;;;;;;;GAQG;AAEH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,QAAQ,CAAC;IAChB,mEAAmE;IACnE,OAAO,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC;CAC/C,CAAM,GAEL;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAShC;AAED;;GAEG;AAEH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAM7D;AA2DD;;;GAGG;AAEH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;CAAE,CAAC,EACzE,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,MAAM,GAAG,IAAI,CAiBf;AAwHD;;;;;;;GAOG;AAEH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,QAAQ,CAAC;IAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAAE,CAAM,GAEzD;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CA2DvD;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAiF3E,2EAA2E;AAC3E,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,KAAK,GAAG,MAAM,EACzB,GAAG,EAAE,cAAc,GAClB,MAAM,CAKR;AAED;;;;GAIG;AAEH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,aAAa,GACtB,OAAO,CACN;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAChC,CA0CA;AAmED,4EAA4E;AAE5E,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA0B9C;AA+FD;;;;;GAKG;AAEH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,OAAO,GACZ,OAAO,CACR;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CACnF,CAsCA;AAID;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,MAAM,GACb,MAAM,CAOR;AAED,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;GAQG;AAEH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,QAAQ,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC,GACD,OAAO,CAAC,kBAAkB,CAAC,CAoF7B"}