prismatica 0.2.0

package/dist/atlas/store.js

@@ -0,0 +1,389 @@
+/**
+ * Flow and rule storage: canonical records, proposals (drafts and updates), and
+ * the truth-hash guard that makes "approved truth is never silently rewritten"
+ * checkable rather than merely promised.
+ *
+ * Flows live on main (cross-change, like config/product-map/ledger) — never in
+ * a lane — because they describe the app, not one change to it.
+ */
+import { createHash } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { UserError } from '../errors.js';
+import { verifySignature } from '../keys.js';
+import { deltasDir, flowProposalsDir, flowsDir, ruleProposalsDir, rulesPath, } from '../paths.js';
+import { readMarkdownRecord, stableStringify, writeMarkdownRecord } from '../records/store.js';
+import { DeltaSchema, FlowProposalSchema, FlowSchema, RuleProposalSchema, RulesFileSchema, } from '../records/types.js';
+// ── Paths ────────────────────────────────────────────────────────────────────
+/**
+ * The one place a record id becomes a path. Every Atlas path goes through it,
+ * so containment is structural rather than something each caller remembers.
+ *
+ * The check is CONTAINMENT, not shape: the resolved path must be a direct
+ * child of the directory it was built from, so `../../../src/pwned` and
+ * `sub/dir/x` are both refused. Shape (`validateRecordId`) is enforced one
+ * layer earlier, on untrusted agent output in `planning/schema.ts`. Keeping
+ * this layer shape-free is deliberate — it must never refuse to READ a record
+ * that already exists on disk, whatever it happens to be called.
+ */
+function recordPath(dir, id, kind) {
+    const resolvedDir = path.resolve(dir);
+    const file = path.resolve(resolvedDir, `${id}.md`);
+    if (path.dirname(file) !== resolvedDir) {
+        throw new UserError(`The ${kind} id "${id}" does not resolve inside ${dir}.`, {
+            command: 'prismatica flow list',
+            why: 'a record can only ever be written inside its own directory — nothing was written',
+        });
+    }
+    return file;
+}
+export function flowPath(repoRoot, id) {
+    return recordPath(flowsDir(repoRoot), id, 'flow');
+}
+export function flowProposalPath(repoRoot, id) {
+    return recordPath(flowProposalsDir(repoRoot), id, 'flow proposal');
+}
+export function ruleProposalPath(repoRoot, id) {
+    return recordPath(ruleProposalsDir(repoRoot), id, 'rule proposal');
+}
+// ── Existence / listing ──────────────────────────────────────────────────────
+export function flowExists(repoRoot, id) {
+    return fs.existsSync(flowPath(repoRoot, id));
+}
+export function flowProposalExists(repoRoot, id) {
+    return fs.existsSync(flowProposalPath(repoRoot, id));
+}
+export function ruleProposalExists(repoRoot, id) {
+    return fs.existsSync(ruleProposalPath(repoRoot, id));
+}
+function listMarkdownIds(dir) {
+    if (!fs.existsSync(dir)) {
+        return [];
+    }
+    return fs
+        .readdirSync(dir)
+        .filter((name) => name.endsWith('.md'))
+        .map((name) => name.slice(0, -'.md'.length))
+        .sort();
+}
+export function listFlowIds(repoRoot) {
+    return listMarkdownIds(flowsDir(repoRoot));
+}
+export function listFlowProposalIds(repoRoot) {
+    return listMarkdownIds(flowProposalsDir(repoRoot));
+}
+export function listRuleProposalIds(repoRoot) {
+    return listMarkdownIds(ruleProposalsDir(repoRoot));
+}
+export function describeError(error) {
+    return error instanceof Error ? error.message.split('\n')[0] : String(error);
+}
+// ── Flows ────────────────────────────────────────────────────────────────────
+export function writeFlow(repoRoot, flow, body) {
+    writeMarkdownRecord(flowPath(repoRoot, flow.id), FlowSchema.parse(flow), body);
+}
+export function readFlow(repoRoot, id) {
+    return readMarkdownRecord(flowPath(repoRoot, id), FlowSchema);
+}
+export function listFlows(repoRoot) {
+    const flows = [];
+    const problems = [];
+    for (const filenameId of listFlowIds(repoRoot)) {
+        try {
+            const flow = readFlow(repoRoot, filenameId).data;
+            // Every lookup (show/impact/approve) is by FILENAME. A file left with a
+            // frontmatter `id` that disagrees with its filename — e.g. from a
+            // canonical-to-canonical rename that got committed despite hygiene
+            // advice — would otherwise be silently unreachable under its real id
+            // and invisible to truth-integrity forever. Surface it instead.
+            if (flow.id !== filenameId) {
+                problems.push({
+                    id: filenameId,
+                    kind: 'flow',
+                    file: flowPath(repoRoot, filenameId),
+                    error: `frontmatter id "${flow.id}" does not match the filename "${filenameId}.md" — rename the file to "${flow.id}.md" or fix the frontmatter id`,
+                });
+                continue;
+            }
+            flows.push(flow);
+        }
+        catch (error) {
+            problems.push({ id: filenameId, kind: 'flow', file: flowPath(repoRoot, filenameId), error: describeError(error) });
+        }
+    }
+    return { flows, problems };
+}
+// ── Flow proposals (drafts + updates; review state) ──────────────────────────
+export function writeFlowProposal(repoRoot, proposal, body) {
+    writeMarkdownRecord(flowProposalPath(repoRoot, proposal.id), FlowProposalSchema.parse(proposal), body);
+}
+export function readFlowProposal(repoRoot, id) {
+    return readMarkdownRecord(flowProposalPath(repoRoot, id), FlowProposalSchema);
+}
+export function deleteFlowProposal(repoRoot, id) {
+    fs.rmSync(flowProposalPath(repoRoot, id), { force: true });
+}
+export function listFlowProposals(repoRoot) {
+    const proposals = [];
+    const problems = [];
+    for (const filenameId of listFlowProposalIds(repoRoot)) {
+        try {
+            const proposal = readFlowProposal(repoRoot, filenameId).data;
+            // Every lookup (approve/show/dismiss) is by FILENAME. A hand- or
+            // agent-authored file whose frontmatter `id` doesn't match its filename
+            // would otherwise be listed under one id but unreachable under it —
+            // surface the mismatch instead of letting it silently fail later.
+            if (proposal.id !== filenameId) {
+                problems.push({
+                    id: filenameId,
+                    kind: 'flow-proposal',
+                    file: flowProposalPath(repoRoot, filenameId),
+                    error: `frontmatter id "${proposal.id}" does not match the filename "${filenameId}.md" — rename the file to "${proposal.id}.md"`,
+                });
+                continue;
+            }
+            proposals.push(proposal);
+        }
+        catch (error) {
+            problems.push({
+                id: filenameId,
+                kind: 'flow-proposal',
+                file: flowProposalPath(repoRoot, filenameId),
+                error: describeError(error),
+            });
+        }
+    }
+    return { proposals, problems };
+}
+// ── Rules (one file, one list, one approval) ─────────────────────────────────
+export function rulesFileExists(repoRoot) {
+    return fs.existsSync(rulesPath(repoRoot));
+}
+/** No rules.md yet is a valid state (zero rules) — not an error. */
+export function readRulesFile(repoRoot) {
+    if (!rulesFileExists(repoRoot)) {
+        return { data: null, body: '' };
+    }
+    const parsed = readMarkdownRecord(rulesPath(repoRoot), RulesFileSchema);
+    return { data: parsed.data, body: parsed.body };
+}
+export function writeRulesFile(repoRoot, rulesFile, body) {
+    writeMarkdownRecord(rulesPath(repoRoot), RulesFileSchema.parse(rulesFile), body);
+}
+// ── Rule proposals ────────────────────────────────────────────────────────────
+export function writeRuleProposal(repoRoot, proposal, body) {
+    writeMarkdownRecord(ruleProposalPath(repoRoot, proposal.id), RuleProposalSchema.parse(proposal), body);
+}
+export function readRuleProposal(repoRoot, id) {
+    return readMarkdownRecord(ruleProposalPath(repoRoot, id), RuleProposalSchema);
+}
+export function deleteRuleProposal(repoRoot, id) {
+    fs.rmSync(ruleProposalPath(repoRoot, id), { force: true });
+}
+export function listRuleProposals(repoRoot) {
+    const proposals = [];
+    const problems = [];
+    for (const filenameId of listRuleProposalIds(repoRoot)) {
+        try {
+            const proposal = readRuleProposal(repoRoot, filenameId).data;
+            // Same mismatch guard as listFlowProposals — see the comment there.
+            if (proposal.id !== filenameId) {
+                problems.push({
+                    id: filenameId,
+                    kind: 'rule-proposal',
+                    file: ruleProposalPath(repoRoot, filenameId),
+                    error: `frontmatter id "${proposal.id}" does not match the filename "${filenameId}.md" — rename the file to "${proposal.id}.md"`,
+                });
+                continue;
+            }
+            proposals.push(proposal);
+        }
+        catch (error) {
+            problems.push({
+                id: filenameId,
+                kind: 'rule-proposal',
+                file: ruleProposalPath(repoRoot, filenameId),
+                error: describeError(error),
+            });
+        }
+    }
+    return { proposals, problems };
+}
+// ── Truth hashing — the tamper guard ─────────────────────────────────────────
+/**
+ * The hash covers `truth` only, with every step's `evidence` stripped —
+ * updating evidence (including the Phase-3 machine-derived auto-update) is
+ * never a truth rewrite. `status` is a sibling of `truth`, so it was never
+ * inside the hash to begin with.
+ */
+function truthHashInput(truth) {
+    return {
+        ...truth,
+        steps: truth.steps.map(({ evidence: _evidence, ...rest }) => rest),
+    };
+}
+export function computeTruthHash(truth) {
+    return createHash('sha256').update(stableStringify(truthHashInput(truth))).digest('hex');
+}
+/** True when the flow's stored hash still matches its current truth block. */
+export function truthHashMatches(flow) {
+    return flow.approval.hash === computeTruthHash(flow.truth);
+}
+function rulesHashInput(rules) {
+    return rules.map(({ evidence: _evidence, ...rest }) => rest);
+}
+export function computeRulesHash(rules) {
+    return createHash('sha256').update(stableStringify(rulesHashInput(rules))).digest('hex');
+}
+export function rulesHashMatches(rulesFile) {
+    return rulesFile.approval.hash === computeRulesHash(rulesFile.rules);
+}
+/**
+ * Signature/key checks are MODE-AWARE, not merely "verify if present":
+ * `govern` mode requires a present, verifying signature from the repo's own
+ * owner key — a missing signature is a FAILURE there, never a silent pass
+ * (an attacker who strips `approval.signature` from a governed record must
+ * not thereby launder it back to "valid"). `map-only` mode has no signing
+ * key by construction (`init --map-only` never calls `ensureOwnerKeyPair`),
+ * so a matching hash with no signature is the expected, valid shape there.
+ */
+function verifySignatureBlock(approval, mode, ownerPublicKey) {
+    if (mode === 'govern') {
+        if (!approval.signature || !approval.publicKey) {
+            return { signatureOk: false, trustedKey: false };
+        }
+        return {
+            signatureOk: verifySignature(approval.hash, approval.signature, approval.publicKey),
+            trustedKey: Boolean(ownerPublicKey) && approval.publicKey.trim() === (ownerPublicKey ?? '').trim(),
+        };
+    }
+    // map-only: no signature is the expected, valid shape; if one is present
+    // anyway (e.g. after an `upgrade` then a downgrade), still verify it.
+    if (!approval.signature) {
+        return { signatureOk: true, trustedKey: true };
+    }
+    return {
+        signatureOk: verifySignature(approval.hash, approval.signature, approval.publicKey ?? ''),
+        trustedKey: Boolean(ownerPublicKey) && (approval.publicKey ?? '').trim() === (ownerPublicKey ?? '').trim(),
+    };
+}
+export function verifyFlowIntegrity(flow, mode, ownerPublicKey) {
+    const hashOk = truthHashMatches(flow);
+    const { signatureOk, trustedKey } = verifySignatureBlock(flow.approval, mode, ownerPublicKey);
+    const ok = hashOk && signatureOk && trustedKey;
+    let warning;
+    if (!hashOk) {
+        warning = `"${flow.id}" truth changed without approval — the recorded hash no longer matches.`;
+    }
+    else if (!signatureOk) {
+        warning =
+            mode === 'govern' && !flow.approval.signature
+                ? `"${flow.id}" has no approval signature — this repo is governed and requires one.`
+                : `"${flow.id}" approval signature does not verify.`;
+    }
+    else if (!trustedKey) {
+        warning = `"${flow.id}" was signed by a key that doesn't match this repo's owner key.`;
+    }
+    return { ok, hashOk, signatureOk, trustedKey, warning };
+}
+export function verifyRulesIntegrity(rulesFile, mode, ownerPublicKey) {
+    const hashOk = rulesHashMatches(rulesFile);
+    const { signatureOk, trustedKey } = verifySignatureBlock(rulesFile.approval, mode, ownerPublicKey);
+    const ok = hashOk && signatureOk && trustedKey;
+    let warning;
+    if (!hashOk) {
+        warning = 'app rules changed without approval — the recorded hash no longer matches.';
+    }
+    else if (!signatureOk) {
+        warning =
+            mode === 'govern' && !rulesFile.approval.signature
+                ? 'app rules have no approval signature — this repo is governed and requires one.'
+                : 'app rules approval signature does not verify.';
+    }
+    else if (!trustedKey) {
+        warning = "app rules were signed by a key that doesn't match this repo's owner key.";
+    }
+    return { ok, hashOk, signatureOk, trustedKey, warning };
+}
+// ── Variations guideline (D13 — a suggestion, never a schema rejection) ──────
+const VARIATIONS_SUGGESTION_THRESHOLD = 4;
+export function variationsSuggestion(truth) {
+    if (truth.variations.length <= VARIATIONS_SUGGESTION_THRESHOLD) {
+        return null;
+    }
+    return `This flow has ${truth.variations.length} variations — consider splitting the biggest one into its own flow (readability guideline, not a hard rule).`;
+}
+// ── Flow Deltas (deltas/<id>.md) — owner-authored, no truth hash/signature ───
+export function deltaPath(repoRoot, id) {
+    return path.join(deltasDir(repoRoot), `${id}.md`);
+}
+export function deltaExists(repoRoot, id) {
+    return fs.existsSync(deltaPath(repoRoot, id));
+}
+export function writeDelta(repoRoot, delta, body) {
+    writeMarkdownRecord(deltaPath(repoRoot, delta.id), DeltaSchema.parse(delta), body);
+}
+export function readDelta(repoRoot, id) {
+    return readMarkdownRecord(deltaPath(repoRoot, id), DeltaSchema);
+}
+export function listDeltaIds(repoRoot) {
+    return listMarkdownIds(deltasDir(repoRoot));
+}
+export function listDeltas(repoRoot) {
+    const deltas = [];
+    const problems = [];
+    for (const filenameId of listDeltaIds(repoRoot)) {
+        try {
+            const delta = readDelta(repoRoot, filenameId).data;
+            // Same reasoning as listFlows: a committed frontmatter/filename
+            // mismatch must never silently vanish from the Delta list.
+            if (delta.id !== filenameId) {
+                problems.push({
+                    id: filenameId,
+                    kind: 'delta',
+                    file: deltaPath(repoRoot, filenameId),
+                    error: `frontmatter id "${delta.id}" does not match the filename "${filenameId}.md" — rename the file to "${delta.id}.md" or fix the frontmatter id`,
+                });
+                continue;
+            }
+            deltas.push(delta);
+        }
+        catch (error) {
+            problems.push({ id: filenameId, kind: 'delta', file: deltaPath(repoRoot, filenameId), error: describeError(error) });
+        }
+    }
+    return { deltas, problems };
+}
+/** The delta a contract was framed from, if any (`frame --from-delta`). */
+export function findDeltaForContract(repoRoot, contractId) {
+    const { deltas } = listDeltas(repoRoot);
+    return deltas.find((delta) => delta.contractId === contractId) ?? null;
+}
+/**
+ * The Delta belonging to a change, looked up the way Model B implies: the
+ * change's own home FIRST, main only as a fallback.
+ *
+ * `start` writes an approved Delta into the lane it just created, so the lane
+ * is where a Delta lives for any change started that way — and it is the only
+ * place a CI checkout of the PR branch can see it. `frame --from-delta`
+ * predates this and leaves its Delta on main, so that lookup stays as a
+ * fallback rather than being dropped; a lane copy simply wins when both exist.
+ */
+export function findDeltaForChange(changeHome, mainRoot, contractId) {
+    return (findDeltaForContract(changeHome, contractId) ??
+        (changeHome === mainRoot ? null : findDeltaForContract(mainRoot, contractId)));
+}
+/**
+ * Which of the given paths are CANONICAL Atlas records — approved Flows,
+ * app Rules, and Deltas — the ones Model B requires to ride main's commit
+ * history before a lane branches, or that lane's own checkout (and any CI
+ * checkout of its branch) can never see them at all. Proposals are excluded
+ * on purpose: they're ephemeral review-state, agent-writable, fine to stay
+ * uncommitted between commands.
+ */
+export function canonicalAtlasPaths(paths) {
+    return paths.filter((p) => (p.startsWith('.prismatica/flows/') && !p.startsWith('.prismatica/flows/proposals/')) ||
+        p === '.prismatica/rules.md' ||
+        p.startsWith('.prismatica/deltas/'));
+}
+//# sourceMappingURL=store.js.map

package/dist/atlas/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/atlas/store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,QAAQ,EACR,gBAAgB,EAChB,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,UAAU,EACV,kBAAkB,EAClB,eAAe,GAShB,MAAM,qBAAqB,CAAC;AAE7B,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,EAAU,EAAE,IAAY;IACvD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,SAAS,CAAC,OAAO,IAAI,QAAQ,EAAE,6BAA6B,GAAG,GAAG,EAAE;YAC5E,OAAO,EAAE,sBAAsB;YAC/B,GAAG,EAAE,kFAAkF;SACxF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,EAAU;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,EAAU;IAC3D,OAAO,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,EAAU;IAC3D,OAAO,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;AACrE,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,EAAU;IACrD,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,EAAU;IAC7D,OAAO,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,EAAU;IAC7D,OAAO,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE;SACN,WAAW,CAAC,GAAG,CAAC;SAChB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;SAC3C,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO,eAAe,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO,eAAe,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;AACrD,CAAC;AAWD,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAU,EAAE,IAAY;IAClE,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,EAAU;IACnD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,UAAU,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC;YACjD,wEAAwE;YACxE,kEAAkE;YAClE,mEAAmE;YACnE,qEAAqE;YACrE,gEAAgE;YAChE,IAAI,IAAI,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,UAAU;oBACd,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;oBACpC,KAAK,EAAE,mBAAmB,IAAI,CAAC,EAAE,kCAAkC,UAAU,8BAA8B,IAAI,CAAC,EAAE,gCAAgC;iBACnJ,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,QAAsB,EAAE,IAAY;IACtF,mBAAmB,CACjB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,EACvC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAClC,IAAI,CACL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,EAAU;IAC3D,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,EAAU;IAC7D,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAIhD,MAAM,SAAS,GAAmB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,UAAU,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC;YAC7D,iEAAiE;YACjE,wEAAwE;YACxE,oEAAoE;YACpE,kEAAkE;YAClE,IAAI,QAAQ,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,UAAU;oBACd,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC;oBAC5C,KAAK,EAAE,mBAAmB,QAAQ,CAAC,EAAE,kCAAkC,UAAU,8BAA8B,QAAQ,CAAC,EAAE,MAAM;iBACjI,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,UAAU;gBACd,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC;gBAC5C,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;IACxE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,SAAoB,EAAE,IAAY;IACjF,mBAAmB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,QAAsB,EAAE,IAAY;IACtF,mBAAmB,CACjB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,EACvC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAClC,IAAI,CACL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,EAAU;IAC3D,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,EAAU;IAC7D,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAIhD,MAAM,SAAS,GAAmB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,UAAU,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC;YAC7D,oEAAoE;YACpE,IAAI,QAAQ,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,UAAU;oBACd,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC;oBAC5C,KAAK,EAAE,mBAAmB,QAAQ,CAAC,EAAE,kCAAkC,UAAU,8BAA8B,QAAQ,CAAC,EAAE,MAAM;iBACjI,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,UAAU;gBACd,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC;gBAC5C,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,gFAAgF;AAEhF;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAgB;IACtC,OAAO;QACL,GAAG,KAAK;QACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAgB;IAC/C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,IAAU;IACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAoB;IACnD,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAYD;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAC3B,QAAkE,EAClE,IAAoB,EACpB,cAAkC;IAElC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC/C,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACnD,CAAC;QACD,OAAO;YACL,WAAW,EAAE,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;YACnF,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;SACnG,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,sEAAsE;IACtE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,OAAO;QACL,WAAW,EAAE,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC;QACzF,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;KAC3G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAU,EACV,IAAoB,EACpB,cAAkC;IAElC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC9F,MAAM,EAAE,GAAG,MAAM,IAAI,WAAW,IAAI,UAAU,CAAC;IAC/C,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,GAAG,IAAI,IAAI,CAAC,EAAE,yEAAyE,CAAC;IACjG,CAAC;SAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS;gBAC3C,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,uEAAuE;gBACpF,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,uCAAuC,CAAC;IAC3D,CAAC;SAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,GAAG,IAAI,IAAI,CAAC,EAAE,iEAAiE,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,SAAoB,EACpB,IAAoB,EACpB,cAAkC;IAElC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACnG,MAAM,EAAE,GAAG,MAAM,IAAI,WAAW,IAAI,UAAU,CAAC;IAC/C,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,GAAG,2EAA2E,CAAC;IACxF,CAAC;SAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS;gBAChD,CAAC,CAAC,gFAAgF;gBAClF,CAAC,CAAC,+CAA+C,CAAC;IACxD,CAAC;SAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,GAAG,0EAA0E,CAAC;IACvF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC1D,CAAC;AAED,gFAAgF;AAEhF,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAE1C,MAAM,UAAU,oBAAoB,CAAC,KAAgB;IACnD,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,+BAA+B,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,iBAAiB,KAAK,CAAC,UAAU,CAAC,MAAM,8GAA8G,CAAC;AAChK,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,EAAU;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,EAAU;IACtD,OAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,KAAY,EAAE,IAAY;IACrE,mBAAmB,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,EAAU;IACpD,OAAO,kBAAkB,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC;YACnD,gEAAgE;YAChE,2DAA2D;YAC3D,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,UAAU;oBACd,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC;oBACrC,KAAK,EAAE,mBAAmB,KAAK,CAAC,EAAE,kCAAkC,UAAU,8BAA8B,KAAK,CAAC,EAAE,gCAAgC;iBACrJ,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,UAAkB;IACvE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC;AACzE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,QAAgB,EAChB,UAAkB;IAElB,OAAO,CACL,oBAAoB,CAAC,UAAU,EAAE,UAAU,CAAC;QAC5C,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAC9E,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAe;IACjD,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC;QACrF,CAAC,KAAK,sBAAsB;QAC5B,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CACtC,CAAC;AACJ,CAAC"}