oh-my-codex 0.20.3 → 0.21.0

package/dist/state/__tests__/single-writer-invariant.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=single-writer-invariant.test.d.ts.map

package/dist/state/__tests__/single-writer-invariant.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"single-writer-invariant.test.d.ts","sourceRoot":"","sources":["../../../src/state/__tests__/single-writer-invariant.test.ts"],"names":[],"mappings":""}

package/dist/state/__tests__/single-writer-invariant.test.js

@@ -0,0 +1,342 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { readdir, readFile } from 'node:fs/promises';
+import { join, relative } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { STATE_NAMESPACE_OWNERS, WORKFLOW_STATE_WRITER, declaredStateWriters, namespacesOwnedBy } from '../namespace-owners.js';
+// When compiled, __dirname is dist/state/__tests__/ — go up 4 to repo root, then into src.
+const repoRoot = join(fileURLToPath(import.meta.url), '..', '..', '..', '..');
+const srcDir = join(repoRoot, 'src');
+/**
+ * #3498 follow-up — the state-writer audit.
+ *
+ * The previous version of this file scanned text for one pattern: a module that mentioned
+ * `getStateFilename` and `writeFile` without `writeStateFile`. That missed every other way to
+ * persist a projection — hard-coded `'<mode>-state.json'` literals, template paths, generic
+ * directory scans, `rename`, `appendFile`, and file-handle `open`/`write`/`truncate` — which is why
+ * roughly a dozen direct writers went undetected while the docs claimed a single writer.
+ *
+ * This audit scans each source file and reports any mutation call
+ * whose path argument references a mode-state projection, then requires the containing module to be
+ * a declared owner in `src/state/namespace-owners.ts`. Declaring reality is the point: the workflow
+ * namespace has one sanctioned writer, and every other writer is named with a reason. A NEW
+ * undeclared writer fails this test.
+ *
+ * KNOWN RESIDUAL GAP, stated because an audit that overstates its reach is worse than one that does
+ * not: detection is lexical, not semantic. It sees a projection path written directly, through the
+ * suffix constant, through `getStateFilename`/`resolveSeedStateFilePath`, or through a file handle
+ * opened directly on such a path. It does NOT follow a path bound to an intermediate variable first.
+ * A real TypeScript AST pass is the correct fix, but this repo's TypeScript 7 exports no classic
+ * compiler API at its main entry (only `typescript/unstable/*`), and pinning a load-bearing invariant
+ * test to an explicitly unstable API surface trades one weakness for a worse one. A lexical taint pass
+ * was implemented and measured instead: it false-positives on identifiers as common as `path`, and the
+ * only way to quiet those would be declaring innocent modules as owners, which would void the very map
+ * this audit consumes. The gap is asserted as a test case so it cannot be mistaken for coverage.
+ */
+const MUTATING_CALLS = new Set([
+    'writeFile',
+    'writeFileSync',
+    'appendFile',
+    'appendFileSync',
+    'rename',
+    'renameSync',
+    'truncate',
+    'truncateSync',
+    'copyFile',
+    'copyFileSync',
+    'write',
+    'writev',
+    // `open` matters because the write happens later through the returned handle; without it a
+    // projection opened for writing and written via `handle.write(payload)` was invisible.
+    'open',
+    'openSync',
+    'createWriteStream',
+]);
+// `handle.write(...)` is a property call, so the audit also allows a bare `.write(` form for the
+// file-handle shape the previous lexical scan could not see at all.
+const HANDLE_WRITE_PATTERN = /\.\s*(write|writev|truncate)\s*\(/g;
+const STATE_FILE_HINTS = [
+    'getStateFilename',
+    'resolveSeedStateFilePath',
+    'stateFilePath',
+    'getStatePath',
+    '-state.json',
+    'STATE_FILE_SUFFIX',
+];
+async function collectTsFiles(dir) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    const files = [];
+    for (const entry of entries) {
+        const fullPath = join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (entry.name === '__tests__' || entry.name === 'node_modules')
+                continue;
+            files.push(...await collectTsFiles(fullPath));
+        }
+        else if (entry.name.endsWith('.ts') && !entry.name.endsWith('.d.ts')) {
+            files.push(fullPath);
+        }
+    }
+    return files;
+}
+/**
+ * Blank out comments and string/template literals, preserving byte offsets and newlines so reported
+ * line numbers stay correct.
+ *
+ * Raw scanning is unsound without this: `writeFile(/* ) *\/ join(dir, 'ralph-state.json'), body)`
+ * closes the argument list inside a comment, and a projection name mentioned in a doc comment or an
+ * unrelated string would be reported as a write. Masking first keeps the scan honest without pulling
+ * in a parser.
+ */
+/**
+ * File-handle identifiers obtained by opening a projection path.
+ *
+ * `const h = await open(join(dir, 'ralph-state.json'), 'w'); await h.write(payload);` writes through a
+ * handle whose own call site mentions no path, so the handle is tracked from its `open`.
+ *
+ * KNOWN LIMIT, stated rather than papered over: this only follows a handle whose `open` call names the
+ * projection DIRECTLY. A path bound to an intermediate variable first is not followed, because doing
+ * that soundly needs real dataflow - a lexical taint pass over identifiers like `path` produces false
+ * positives on unrelated writers, and silencing those by declaring innocent modules as owners would
+ * destroy the meaning of the owner map. See the audit's docstring for the residual gap.
+ */
+function taintedHandleIdentifiers(rawContent) {
+    const handles = new Set();
+    const opened = /\b(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=\s*(?:await\s+)?(?:fs\.)?openS?y?n?c?\s*\(([^)]*)\)/g;
+    for (const match of rawContent.matchAll(opened)) {
+        if (STATE_FILE_HINTS.some((hint) => (match[2] ?? '').includes(hint)))
+            handles.add(match[1]);
+    }
+    return handles;
+}
+function maskCommentsAndLiterals(content) {
+    const out = content.split('');
+    let index = 0;
+    const blank = (start, end) => {
+        for (let i = start; i < end && i < out.length; i += 1) {
+            if (out[i] !== '\n')
+                out[i] = ' ';
+        }
+    };
+    while (index < content.length) {
+        const char = content[index];
+        const next = content[index + 1];
+        if (char === '/' && next === '/') {
+            const end = content.indexOf('\n', index);
+            blank(index, end === -1 ? content.length : end);
+            index = end === -1 ? content.length : end;
+            continue;
+        }
+        if (char === '/' && next === '*') {
+            const end = content.indexOf('*/', index + 2);
+            const stop = end === -1 ? content.length : end + 2;
+            blank(index, stop);
+            index = stop;
+            continue;
+        }
+        if (char === '`') {
+            // Template literals are masked EXCEPT their ${...} expressions, which are executable code. The
+            // earlier revision blanked the whole literal, which newly hid a real writer placed inside an
+            // interpolation - a regression this case exists to prevent.
+            let i = index + 1;
+            let segmentStart = index;
+            while (i < content.length) {
+                if (content[i] === '\\') {
+                    i += 2;
+                    continue;
+                }
+                if (content[i] === '$' && content[i + 1] === '{') {
+                    blank(segmentStart, i);
+                    let depth = 1;
+                    let j = i + 2;
+                    while (j < content.length && depth > 0) {
+                        if (content[j] === '{')
+                            depth += 1;
+                        else if (content[j] === '}')
+                            depth -= 1;
+                        j += 1;
+                    }
+                    i = j;
+                    segmentStart = i;
+                    continue;
+                }
+                if (content[i] === '`')
+                    break;
+                i += 1;
+            }
+            blank(segmentStart, Math.min(i + 1, content.length));
+            index = i + 1;
+            continue;
+        }
+        if (char === '"' || char === "'") {
+            let i = index + 1;
+            while (i < content.length) {
+                if (content[i] === '\\') {
+                    i += 2;
+                    continue;
+                }
+                if (content[i] === char)
+                    break;
+                i += 1;
+            }
+            blank(index, Math.min(i + 1, content.length));
+            index = i + 1;
+            continue;
+        }
+        index += 1;
+    }
+    return out.join('');
+}
+/**
+ * Extract the balanced argument text of a call that starts at `openParen`, so a multi-line call is
+ * inspected in full rather than one line at a time.
+ */
+function balancedArguments(content, openParen) {
+    let depth = 0;
+    for (let index = openParen; index < content.length; index += 1) {
+        const char = content[index];
+        if (char === '(')
+            depth += 1;
+        else if (char === ')') {
+            depth -= 1;
+            if (depth === 0)
+                return content.slice(openParen + 1, index);
+        }
+    }
+    return null;
+}
+function auditSource(relPath, rawContent) {
+    const violations = [];
+    // Detect against masked source so comments and literals cannot fake or hide a call; the mask
+    // preserves offsets, so hint matching and line numbers still line up with the real file.
+    const content = maskCommentsAndLiterals(rawContent);
+    const handles = taintedHandleIdentifiers(rawContent);
+    const mentionsProjection = (args) => STATE_FILE_HINTS.some((hint) => args.includes(hint));
+    // Writes through a handle opened on a projection path: the call site names no path at all.
+    for (const handle of handles) {
+        const handleWrite = new RegExp(`(?<![\\w$])${handle}\\s*\\.\\s*(write|writev|truncate|writeFile)\\s*\\(`, 'g');
+        for (const match of content.matchAll(handleWrite)) {
+            violations.push({
+                module: relPath,
+                line: content.slice(0, match.index).split('\n').length,
+                call: `${handle}.${match[1]}`,
+                snippet: `${handle}.${match[1]}(...) on a handle opened for a mode-state projection`,
+            });
+        }
+    }
+    for (const handleMatch of content.matchAll(HANDLE_WRITE_PATTERN)) {
+        const openParen = handleMatch.index + handleMatch[0].length - 1;
+        const args = balancedArguments(content, openParen);
+        if (args === null)
+            continue;
+        const rawArgs = rawContent.slice(openParen + 1, openParen + 1 + args.length);
+        if (!mentionsProjection(rawArgs))
+            continue;
+        violations.push({
+            module: relPath,
+            line: content.slice(0, handleMatch.index).split('\n').length,
+            call: `handle.${handleMatch[1]}`,
+            snippet: `${handleMatch[0]}${rawArgs})`.replace(/\s+/g, ' ').slice(0, 120),
+        });
+    }
+    for (const call of MUTATING_CALLS) {
+        const pattern = new RegExp(`(?<![\\w.$])${call}\\s*\\(`, 'g');
+        for (const match of content.matchAll(pattern)) {
+            const openParen = match.index + match[0].length - 1;
+            const args = balancedArguments(content, openParen);
+            if (args === null)
+                continue;
+            // Hints are matched on the RAW argument text: a hard-coded '<mode>-state.json' lives inside a
+            // string literal, which the mask blanks out. The mask is only used to find real call sites and
+            // real parentheses.
+            const rawArgs = rawContent.slice(openParen + 1, openParen + 1 + args.length);
+            if (!mentionsProjection(rawArgs))
+                continue;
+            violations.push({
+                module: relPath,
+                line: content.slice(0, match.index).split('\n').length,
+                call,
+                snippet: `${call}(${rawArgs})`.replace(/\s+/g, ' ').slice(0, 120),
+            });
+        }
+    }
+    return violations.sort((left, right) => left.line - right.line);
+}
+describe('State writer audit (#3498)', () => {
+    it('reports no undeclared module persisting a mode-state projection', async () => {
+        const declared = declaredStateWriters();
+        const files = await collectTsFiles(srcDir);
+        const undeclared = [];
+        for (const filePath of files) {
+            const relPath = relative(srcDir, filePath).replaceAll('\\', '/');
+            if (declared.has(relPath))
+                continue;
+            const content = await readFile(filePath, 'utf-8');
+            undeclared.push(...auditSource(relPath, content));
+        }
+        assert.deepEqual(undeclared, [], 'These modules persist a mode-state projection but are not declared in '
+            + `src/state/namespace-owners.ts: ${undeclared.map((v) => `${v.module}:${v.line} (${v.call}) ${v.snippet}`).join(' | ')}`);
+    });
+    it('detects mutation shapes the previous lexical scan missed', () => {
+        // A hard-coded literal path with no getStateFilename call.
+        assert.equal(auditSource('fake/hardcoded.ts', "await writeFile(join(dir, 'ralph-state.json'), body);").length, 1, 'a hard-coded {mode}-state.json literal must be detected');
+        // rename, not writeFile.
+        assert.equal(auditSource('fake/renamer.ts', "await rename(tmp, join(dir, 'autopilot-state.json'));").length, 1, 'rename onto a projection path must be detected');
+        // A file handle write through the suffix constant.
+        assert.equal(auditSource('fake/handle.ts', 'await handle.write(payload, 0, STATE_FILE_SUFFIX);').length, 1, 'handle writes referencing the state suffix must be detected');
+        // Unrelated writes must not be flagged.
+        assert.deepEqual(auditSource('fake/unrelated.ts', "await writeFile(join(dir, 'notes.md'), body);"), [], 'writes unrelated to mode state must not be flagged');
+        // A comment containing a close paren must not truncate the argument scan.
+        assert.equal(auditSource('fake/comment.ts', "await writeFile(/* ) */ join(dir, 'ralph-state.json'), body);").length, 1, 'a close paren inside a comment must not hide the call');
+        // A projection name mentioned only in a comment is not a write.
+        assert.deepEqual(auditSource('fake/mention.ts', "// writeFile(join(dir, 'ralph-state.json'), body)\nconst x = 1;"), [], 'a commented-out call must not be reported');
+        // A call name inside a string literal is not a call.
+        assert.deepEqual(auditSource('fake/string.ts', "const doc = \"writeFile(join(dir, 'ralph-state.json'))\";"), [], 'a call name inside a string literal must not be reported');
+        // The terminal critic's evasion, in the form this audit DOES close: a handle opened directly on a
+        // projection path, then written through the handle.
+        assert.ok(auditSource('fake/handle-flow.ts', "const h = await open(join(dir, 'ralph-state.json'), 'w');\nawait h.write(payload);").length >= 1, 'a handle opened on a projection path must be detected');
+        // Residual gap, asserted so it is a KNOWN limit rather than an assumed capability: a path bound to
+        // an intermediate variable first is not followed. Closing it needs real dataflow; a lexical taint
+        // pass was implemented, measured, and reverted because it false-positives on identifiers as common
+        // as `path`, and silencing that by declaring innocent modules as owners would void the owner map.
+        assert.deepEqual(auditSource('fake/var-path.ts', "const p = join(dir, 'ralph-state.json');\nawait writeFile(p, body);"), [], 'documents the known dataflow gap; if this ever starts failing, the audit got stronger and this case should assert detection');
+        // A real writer inside a template interpolation is executable code and MUST still be detected.
+        assert.equal(auditSource('fake/interp.ts', 'const x = `prefix ${await writeFile(join(dir, "ralph-state.json"), body)} suffix`;').length, 1, 'a writer inside a ${...} interpolation must not be masked away');
+        // Template text that merely mentions a projection is not a write.
+        assert.deepEqual(auditSource('fake/tmpl.ts', 'const doc = `writeFile(join(dir, "ralph-state.json"))`;'), [], 'template text mentioning a projection must not be reported');
+    });
+    it('names one sanctioned writer for the workflow namespace', () => {
+        const workflow = STATE_NAMESPACE_OWNERS.find((entry) => entry.namespace === 'workflow');
+        assert.ok(workflow, 'a workflow namespace owner entry must exist');
+        assert.equal(workflow.owners[0], WORKFLOW_STATE_WRITER);
+        assert.ok(namespacesOwnedBy(WORKFLOW_STATE_WRITER).includes('workflow'), 'operations.ts must own the workflow namespace');
+        for (const entry of STATE_NAMESPACE_OWNERS) {
+            assert.ok(entry.owners.length > 0, `${entry.namespace} must declare at least one owner`);
+            assert.ok(entry.reason.trim().length > 0, `${entry.namespace} must state why it owns the namespace`);
+        }
+    });
+    it('keeps the MCP state projection read-only', async () => {
+        const content = await readFile(join(srcDir, 'mcp', 'state-server.ts'), 'utf-8');
+        // Scope to the advertised buildStateServerTools body only: state_write/state_clear still exist
+        // behind buildStateServerWriterTools for explicit programmatic callers, and conflating the two
+        // would make this assertion meaningless.
+        const match = content.match(/export\s+function\s+buildStateServerTools\s*\(\)\s*\{([\s\S]*?)\n\}/);
+        assert.ok(match, 'expected buildStateServerTools function in state-server.ts');
+        const toolsBody = match[1];
+        const toolNames = toolsBody.match(/name:\s*"state_\w+"/g);
+        assert.ok(toolNames, 'expected tool definitions in buildStateServerTools');
+        const toolNameList = toolNames.map((entry) => entry.match(/"state_\w+"/)[0]);
+        assert.ok(!toolNameList.includes('"state_write"'), 'buildStateServerTools must not advertise state_write');
+        assert.ok(!toolNameList.includes('"state_clear"'), 'buildStateServerTools must not advertise state_clear');
+        assert.ok(toolNameList.includes('"state_read"'), 'buildStateServerTools must still advertise state_read');
+        assert.ok(toolNameList.includes('"state_list_active"'), 'buildStateServerTools must still advertise state_list_active');
+        assert.ok(toolNameList.includes('"state_get_status"'), 'buildStateServerTools must still advertise state_get_status');
+    });
+    it('does not reintroduce automatic launch-time state neutralization', async () => {
+        const content = await readFile(join(srcDir, 'cli', 'index.ts'), 'utf-8');
+        assert.doesNotMatch(content, /neutralizeStaleWorkflowStateProjections/, 'the launch path must not neutralize projections automatically; use omx doctor --repair-state');
+        const operations = await readFile(join(srcDir, 'state', 'operations.ts'), 'utf-8');
+        assert.doesNotMatch(operations, /export\s+async\s+function\s+neutralizeStaleWorkflowStateProjections/, 'the in-place neutralizer was removed in favour of the archive-based doctor repair path');
+    });
+});
+//# sourceMappingURL=single-writer-invariant.test.js.map

package/dist/state/__tests__/single-writer-invariant.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"single-writer-invariant.test.js","sourceRoot":"","sources":["../../../src/state/__tests__/single-writer-invariant.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhI,2FAA2F;AAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,UAAU;IACV,cAAc;IACd,UAAU;IACV,cAAc;IACd,OAAO;IACP,QAAQ;IACR,2FAA2F;IAC3F,uFAAuF;IACvF,MAAM;IACN,UAAU;IACV,mBAAmB;CACpB,CAAC,CAAC;AAEH,iGAAiG;AACjG,oEAAoE;AACpE,MAAM,oBAAoB,GAAG,oCAAoC,CAAC;AAElE,MAAM,gBAAgB,GAAG;IACvB,kBAAkB;IAClB,0BAA0B;IAC1B,eAAe;IACf,cAAc;IACd,aAAa;IACb,mBAAmB;CACpB,CAAC;AAEF,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAS;YAC1E,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH;;;;;;;;;;;GAWG;AACH,SAAS,wBAAwB,CAAC,UAAkB;IAClD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,MAAM,GAAG,kGAAkG,CAAC;IAClH,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,GAAW,EAAQ,EAAE;QACjD,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IACF,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAChD,KAAK,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YACnD,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACnB,KAAK,GAAG,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,+FAA+F;YAC/F,6FAA6F;YAC7F,4DAA4D;YAC5D,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAClB,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC1B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC9C,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACjD,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;oBACvB,IAAI,KAAK,GAAG,CAAC,CAAC;oBACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACd,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBACvC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;4BAAE,KAAK,IAAI,CAAC,CAAC;6BAC9B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;4BAAE,KAAK,IAAI,CAAC,CAAC;wBACxC,CAAC,IAAI,CAAC,CAAC;oBACT,CAAC;oBACD,CAAC,GAAG,CAAC,CAAC;oBACN,YAAY,GAAG,CAAC,CAAC;oBACjB,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,MAAM;gBAC9B,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACrD,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAClB,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC1B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC9C,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;oBAAE,MAAM;gBAC/B,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9C,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,OAAe,EAAE,SAAiB;IAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,SAAS,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,IAAI,KAAK,GAAG;YAAE,KAAK,IAAI,CAAC,CAAC;aACxB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AASD,SAAS,WAAW,CAAC,OAAe,EAAE,UAAkB;IACtD,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,6FAA6F;IAC7F,yFAAyF;IACzF,MAAM,OAAO,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3G,2FAA2F;IAC3F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,cAAc,MAAM,qDAAqD,EAAE,GAAG,CAAC,CAAC;QAC/G,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM;gBACtD,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE;gBAC7B,OAAO,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,sDAAsD;aACrF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3C,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM;YAC5D,IAAI,EAAE,UAAU,WAAW,CAAC,CAAC,CAAC,EAAE;YAChC,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,eAAe,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC;QAC9D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACnD,IAAI,IAAI,KAAK,IAAI;gBAAE,SAAS;YAC5B,8FAA8F;YAC9F,+FAA+F;YAC/F,oBAAoB;YACpB,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC3C,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM;gBACtD,IAAI;gBACJ,OAAO,EAAE,GAAG,IAAI,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAgB,EAAE,CAAC;QAEnC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YACpC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,UAAU,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,CAAC,SAAS,CACd,UAAU,EACV,EAAE,EACF,wEAAwE;cACtE,kCAAkC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAC1H,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,2DAA2D;QAC3D,MAAM,CAAC,KAAK,CACV,WAAW,CAAC,mBAAmB,EAAE,uDAAuD,CAAC,CAAC,MAAM,EAChG,CAAC,EACD,yDAAyD,CAC1D,CAAC;QACF,yBAAyB;QACzB,MAAM,CAAC,KAAK,CACV,WAAW,CAAC,iBAAiB,EAAE,uDAAuD,CAAC,CAAC,MAAM,EAC9F,CAAC,EACD,gDAAgD,CACjD,CAAC;QACF,mDAAmD;QACnD,MAAM,CAAC,KAAK,CACV,WAAW,CAAC,gBAAgB,EAAE,oDAAoD,CAAC,CAAC,MAAM,EAC1F,CAAC,EACD,6DAA6D,CAC9D,CAAC;QACF,wCAAwC;QACxC,MAAM,CAAC,SAAS,CACd,WAAW,CAAC,mBAAmB,EAAE,+CAA+C,CAAC,EACjF,EAAE,EACF,oDAAoD,CACrD,CAAC;QACF,0EAA0E;QAC1E,MAAM,CAAC,KAAK,CACV,WAAW,CAAC,iBAAiB,EAAE,+DAA+D,CAAC,CAAC,MAAM,EACtG,CAAC,EACD,uDAAuD,CACxD,CAAC;QACF,gEAAgE;QAChE,MAAM,CAAC,SAAS,CACd,WAAW,CAAC,iBAAiB,EAAE,iEAAiE,CAAC,EACjG,EAAE,EACF,2CAA2C,CAC5C,CAAC;QACF,qDAAqD;QACrD,MAAM,CAAC,SAAS,CACd,WAAW,CAAC,gBAAgB,EAAE,2DAA2D,CAAC,EAC1F,EAAE,EACF,0DAA0D,CAC3D,CAAC;QACF,kGAAkG;QAClG,oDAAoD;QACpD,MAAM,CAAC,EAAE,CACP,WAAW,CACT,qBAAqB,EACrB,oFAAoF,CACrF,CAAC,MAAM,IAAI,CAAC,EACb,uDAAuD,CACxD,CAAC;QACF,mGAAmG;QACnG,kGAAkG;QAClG,mGAAmG;QACnG,kGAAkG;QAClG,MAAM,CAAC,SAAS,CACd,WAAW,CAAC,kBAAkB,EAAE,qEAAqE,CAAC,EACtG,EAAE,EACF,6HAA6H,CAC9H,CAAC;QACF,+FAA+F;QAC/F,MAAM,CAAC,KAAK,CACV,WAAW,CAAC,gBAAgB,EAAE,oFAAoF,CAAC,CAAC,MAAM,EAC1H,CAAC,EACD,gEAAgE,CACjE,CAAC;QACF,kEAAkE;QAClE,MAAM,CAAC,SAAS,CACd,WAAW,CAAC,cAAc,EAAE,yDAAyD,CAAC,EACtF,EAAE,EACF,4DAA4D,CAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC;QACxF,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,6CAA6C,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;QACxD,MAAM,CAAC,EAAE,CACP,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC7D,+CAA+C,CAChD,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,sBAAsB,EAAE,CAAC;YAC3C,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,SAAS,kCAAkC,CAAC,CAAC;YACzF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,SAAS,uCAAuC,CAAC,CAAC;QACvG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC,CAAC;QAChF,+FAA+F;QAC/F,+FAA+F;QAC/F,yCAAyC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACnG,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,4DAA4D,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1D,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,oDAAoD,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,sDAAsD,CAAC,CAAC;QAC3G,MAAM,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,sDAAsD,CAAC,CAAC;QAC3G,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,uDAAuD,CAAC,CAAC;QAC1G,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,8DAA8D,CAAC,CAAC;QACxH,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,6DAA6D,CAAC,CAAC;IACxH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;QACzE,MAAM,CAAC,YAAY,CACjB,OAAO,EACP,yCAAyC,EACzC,8FAA8F,CAC/F,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,OAAO,CAAC,CAAC;QACnF,MAAM,CAAC,YAAY,CACjB,UAAU,EACV,qEAAqE,EACrE,wFAAwF,CACzF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}