ramosedb 0.0.0-stage → 0.4.0

package/dist/internal/authorization/definitions.js

@@ -0,0 +1,335 @@
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import { appliedPolicyOf, isSchemaDefinition, } from "../../db/Schema.js";
+import { cloneBindingValue } from "../../db/Binding.js";
+import { compileCreationPlan, pairDeployedCreationDefaults, resolveCompiledCreationValues, } from "../../db/creation.js";
+import {} from "../../db/Field.js";
+import { collectCodeReachability, } from "../../db/reachability.js";
+import { sealInstalledCatalogUnit, } from "./catalog-unit.js";
+import { compositionFromUnit } from "./composition.js";
+import { decodePolicyTemplateResult, hashCatalogSchemaFingerprint, hashDomainSeparatedCanonicalJson, } from "./decode.js";
+import { CatalogMismatch, CatalogUnitCorrupt, CatalogVersionMismatch, InvalidIR, } from "./failures.js";
+import { CatalogId, CatalogVersion, DatabaseId, SchemaFingerprint, } from "./identities.js";
+import { installAuthorization } from "./install.js";
+import { completeSchema, descriptorTables } from "./read-tables.js";
+import { lowerOwnedOperationSnapshots, pairDeployedOperations, snapshotOwnedOperations, } from "./authoring/operations.js";
+import { compileReadAuthorization } from "./authoring/compile.js";
+import { requireCatalogKey, requireUnitHash, } from "./deployed.js";
+const invalid = (message) => new InvalidIR({ message });
+const compareText = (left, right) => left < right ? -1 : left > right ? 1 : 0;
+const CATALOG_DEFINITION_VERSION_DOMAIN = "ramose/catalog-definition/v1\0";
+const fromPure = (label, evaluate) => Effect.try({
+    try: evaluate,
+    catch: (cause) => invalid(`${label}: ${cause instanceof Error ? cause.message : String(cause)}`),
+});
+const jsonValue = (value) => {
+    if (value === null || typeof value === "string" || typeof value === "boolean") {
+        return value;
+    }
+    if (typeof value === "number" && Number.isFinite(value)) {
+        return Object.is(value, -0) ? 0 : value;
+    }
+    if (value instanceof Date && Number.isFinite(value.getTime())) {
+        return { _tag: "instant", value: value.toISOString() };
+    }
+    if (value instanceof Uint8Array) {
+        return { _tag: "bytes", value: [...value] };
+    }
+    if (Array.isArray(value))
+        return value.map(jsonValue);
+    if (typeof value === "object" && value !== null) {
+        const out = Object.create(null);
+        for (const key of Object.keys(value).sort(compareText)) {
+            out[key] = jsonValue(value[key]);
+        }
+        return out;
+    }
+    throw new Error("catalog fixed values must encode as finite stored data");
+};
+const creationInputHashValue = (value) => {
+    if (value === null)
+        return { _tag: "null" };
+    if (typeof value === "string")
+        return { _tag: "string", value };
+    if (typeof value === "boolean")
+        return { _tag: "boolean", value };
+    if (typeof value === "number" && Number.isFinite(value)) {
+        return { _tag: "number", value: Object.is(value, -0) ? 0 : value };
+    }
+    if (value instanceof Date && Number.isFinite(value.getTime())) {
+        return { _tag: "instant", value: value.toISOString() };
+    }
+    if (value instanceof Uint8Array) {
+        return { _tag: "bytes", value: [...value] };
+    }
+    if (Array.isArray(value)) {
+        return { _tag: "array", value: value.map(creationInputHashValue) };
+    }
+    if (typeof value === "object" && value !== null) {
+        return {
+            _tag: "object",
+            value: Object.keys(value).sort(compareText).map((key) => [
+                key,
+                creationInputHashValue(value[key]),
+            ]),
+        };
+    }
+    throw new Error("creation default inputs must encode as supported canonical data");
+};
+const creationHashMaterial = (artifactHash, plans) => ({
+    artifactHash,
+    entities: [...plans].sort((left, right) => compareText(left.entity, right.entity))
+        .map((plan) => ({
+        name: plan.entity,
+        fieldSchemas: [...plan.fields]
+            .sort((left, right) => compareText(left.ident, right.ident))
+            .map((field) => ({
+            field: field.ident,
+            projection: field.schemaProjection,
+        })),
+        fieldDefaults: plan.fields
+            .filter((field) => field.fieldDefault !== undefined)
+            .sort((left, right) => compareText(left.ident, right.ident))
+            .map((field) => ({
+            field: field.ident,
+            default: {
+                id: field.fieldDefault.id,
+                artifactHash: field.fieldDefault.artifactHash,
+                revision: field.fieldDefault.revision._tag === "artifact"
+                    ? "artifact"
+                    : creationInputHashValue(field.fieldDefault.revision.inputs),
+            },
+        })),
+        fixed: plan.fields
+            .filter((field) => field.fixed !== undefined)
+            .sort((left, right) => compareText(left.ident, right.ident))
+            .map((field) => ({ field: field.ident, value: jsonValue(field.fixed) })),
+        defaults: plan.fields
+            .filter((field) => field.defaults.length > 0)
+            .sort((left, right) => compareText(left.ident, right.ident))
+            .map((field) => ({
+            field: field.ident,
+            defaults: field.defaults.map((entry) => ({
+                id: entry.id,
+                artifactHash: entry.artifactHash,
+                revision: entry.revision._tag === "artifact"
+                    ? "artifact"
+                    : creationInputHashValue(entry.revision.inputs),
+            })),
+        })),
+        bindings: plan.bindings,
+    })),
+});
+const normalizeDefinitionSnapshot = (reachable, artifactHash, metadataByEntity) => {
+    if (!isSchemaDefinition(reachable.definition)) {
+        throw invalid(`reachable key '${reachable.key}' has no runnable Schema definition (path: ${reachable.path.join(" → ")})`);
+    }
+    const policy = appliedPolicyOf(reachable.definition);
+    if (policy === undefined) {
+        throw invalid(`reachable schema '${reachable.key}' has no applied policy (path: ${reachable.path.join(" → ")})`);
+    }
+    const catalog = CatalogId.make(reachable.definition.key);
+    const schema = completeSchema(reachable.definition);
+    const creationSnapshots = Object.freeze(Object.values(schema.entities)
+        .sort((left, right) => compareText(left.ns, right.ns))
+        .map((entity) => {
+        const metadata = metadataByEntity.get(entity.ns);
+        if (metadata === undefined) {
+            throw invalid(`missing resolved binding metadata for entity '${entity.ns}'`);
+        }
+        return compileCreationPlan(entity, metadata, artifactHash);
+    }));
+    const creationPlans = Object.freeze(creationSnapshots.map((snapshot) => snapshot.plan));
+    const creationDefaultBindings = Object.freeze(creationSnapshots.flatMap((snapshot) => snapshot.defaults));
+    const operationSnapshots = Result.getOrThrow(snapshotOwnedOperations(catalog, [schema], artifactHash));
+    return Object.freeze({
+        catalog,
+        key: reachable.definition.key,
+        path: Object.freeze([...reachable.path]),
+        policy,
+        descriptorTables: Object.freeze(descriptorTables(catalog, schema, [])),
+        creationPlans,
+        creationDefaultBindings,
+        creationHashMaterial: Object.freeze(creationHashMaterial(artifactHash, creationPlans)),
+        operationSnapshots,
+    });
+};
+const assembleOne = Effect.fn("Authorization.assembleCatalogDefinition")(function* (snapshot) {
+    const authoredPolicy = yield* compileReadAuthorization(snapshot.policy);
+    const template = yield* Effect.fromResult(decodePolicyTemplateResult(authoredPolicy));
+    const lowered = yield* lowerOwnedOperationSnapshots(snapshot.operationSnapshots);
+    const tables = {
+        ...snapshot.descriptorTables,
+        operations: lowered.descriptors,
+    };
+    const version = CatalogVersion.make(yield* hashDomainSeparatedCanonicalJson(CATALOG_DEFINITION_VERSION_DOMAIN, snapshot.creationHashMaterial));
+    const descriptorWithoutFingerprint = {
+        ...tables,
+        database: DatabaseId.make(`catalog-definition:${snapshot.key}`),
+        version,
+        fingerprint: SchemaFingerprint.make("pending"),
+    };
+    const fingerprint = yield* hashCatalogSchemaFingerprint(descriptorWithoutFingerprint);
+    const descriptor = {
+        ...descriptorWithoutFingerprint,
+        fingerprint,
+    };
+    const policy = yield* installAuthorization({
+        target: {
+            database: descriptor.database,
+            catalog: snapshot.catalog,
+            catalogVersion: descriptor.version,
+            schemaFingerprint: descriptor.fingerprint,
+        },
+        descriptor,
+        template,
+    });
+    const unit = yield* sealInstalledCatalogUnit(descriptor, policy);
+    const operations = yield* Effect.fromResult(pairDeployedOperations(unit.catalog.operations, lowered.definitions));
+    const creationDefaults = yield* fromPure("creation default binding failed", () => pairDeployedCreationDefaults(snapshot.creationPlans, snapshot.creationDefaultBindings));
+    const composition = yield* Effect.fromResult(compositionFromUnit(unit));
+    const creationByEntity = new Map(snapshot.creationPlans.map((plan) => [plan.entity, plan]));
+    const catalogKeyText = snapshot.key;
+    const resolveCreationValues = Object.freeze((entityName, input, context, options = {}) => {
+        const plan = creationByEntity.get(entityName);
+        if (plan === undefined) {
+            throw new Error(`ramose/create: unknown entity ${JSON.stringify(entityName)} in catalog ${JSON.stringify(catalogKeyText)}`);
+        }
+        return resolveCompiledCreationValues(plan, input, context, creationDefaults, options);
+    });
+    const requireFieldRuntime = Object.freeze((entityName, fieldIdent) => {
+        const plan = creationByEntity.get(entityName);
+        const field = plan?.fields.find((candidate) => candidate.ident === fieldIdent);
+        if (field === undefined) {
+            throw new Error(`ramose/operation: field ${JSON.stringify(fieldIdent)} is not deployed for entity ${JSON.stringify(entityName)}`);
+        }
+        return Object.freeze({
+            cardinality: field.cardinality,
+            validate: (value) => {
+                field.encoder(value);
+            },
+            fixed: field.fixed === undefined
+                ? Object.freeze({ _tag: "mutable" })
+                : Object.freeze({
+                    _tag: "fixed",
+                    value: cloneBindingValue(field.fixed),
+                }),
+        });
+    });
+    const fieldValidators = new Map();
+    for (const plan of snapshot.creationPlans) {
+        for (const field of plan.fields) {
+            if (!fieldValidators.has(field.ident)) {
+                fieldValidators.set(field.ident, field.encoder);
+            }
+        }
+    }
+    const validateFieldValue = Object.freeze((fieldIdent, value) => {
+        const validate = fieldValidators.get(fieldIdent);
+        if (validate === undefined) {
+            throw new Error(`ramose/operation: field ${JSON.stringify(fieldIdent)} has no deployed codec`);
+        }
+        validate(value);
+    });
+    return Object.freeze({
+        catalogKey: snapshot.catalog,
+        unitHash: unit.unitHash,
+        unit,
+        composition,
+        operations,
+        path: snapshot.path,
+        resolveCreationValues,
+        requireFieldRuntime,
+        validateFieldValue,
+    });
+});
+const buildRegistry = (root, byKey) => Object.freeze({
+    root,
+    require: (catalogKey) => {
+        const found = byKey.get(catalogKey);
+        return found === undefined
+            ? Result.fail(new CatalogMismatch({ message: "catalog definition mismatch" }))
+            : Result.succeed(found);
+    },
+    keys: () => Object.freeze([...byKey.keys()].sort(compareText)),
+});
+export const resolveCatalogDefinition = (definitions, ref) => Result.gen(function* () {
+    const definition = yield* definitions.require(ref.catalogKey);
+    yield* requireUnitHash(ref.unitHash, definition.unitHash, definition.catalogKey);
+    return definition;
+});
+export const assembleCatalogDefinitions = Effect.fn("Authorization.assembleCatalogDefinitions")(function* (input) {
+    if (!/^[0-9a-f]{64}$/.test(input.artifactHash)) {
+        return yield* invalid("catalog artifact hash must be 64 lowercase hexadecimal characters");
+    }
+    const reachability = yield* fromPure("catalog definition reachability failed", () => collectCodeReachability(input.root));
+    const snapshots = yield* fromPure("catalog definition authoring snapshot failed", () => reachability.definitions.map((reachable) => {
+        const metadataByEntity = new Map();
+        for (const creation of reachability.creation) {
+            if (creation.catalogKey === reachable.key) {
+                metadataByEntity.set(creation.entity, creation.metadata);
+            }
+        }
+        return normalizeDefinitionSnapshot(reachable, input.artifactHash, metadataByEntity);
+    }));
+    const byKey = new Map();
+    for (const snapshot of snapshots) {
+        const assembled = yield* assembleOne(snapshot);
+        byKey.set(assembled.catalogKey, assembled);
+    }
+    return buildRegistry(CatalogId.make(reachability.root.key), Object.freeze(byKey));
+});
+export const deployCatalogDefinitions = (definitions, deployments) => Result.gen(function* () {
+    const byDatabase = new Map();
+    const readCatalogs = new Map();
+    for (const deployment of deployments) {
+        if (byDatabase.has(deployment.database)) {
+            return yield* Result.fail(new InvalidIR({
+                message: `duplicate deployed catalog definition for database '${deployment.database}'`,
+            }));
+        }
+        const definition = yield* definitions.require(deployment.catalogKey);
+        const bound = Object.freeze({
+            database: deployment.database,
+            definition,
+        });
+        byDatabase.set(deployment.database, bound);
+        readCatalogs.set(deployment.database, Object.freeze({
+            database: deployment.database,
+            catalogKey: definition.catalogKey,
+            unitHash: definition.unitHash,
+            unit: definition.unit,
+            composition: definition.composition,
+        }));
+    }
+    const databases = () => Object.freeze([...byDatabase.keys()].sort(compareText));
+    const requireDatabase = (database) => {
+        const found = byDatabase.get(database);
+        return found === undefined
+            ? Result.fail(new CatalogMismatch({
+                message: "catalog mismatch",
+                expectedDatabase: database,
+            }))
+            : Result.succeed(found);
+    };
+    const catalogs = Object.freeze({
+        requireDatabase: (database) => {
+            const found = readCatalogs.get(database);
+            return found === undefined
+                ? Result.fail(new CatalogMismatch({
+                    message: "catalog mismatch",
+                    expectedDatabase: database,
+                }))
+                : Result.succeed(found);
+        },
+        databases,
+    });
+    return Object.freeze({ catalogs, requireDatabase, databases });
+});
+export const resolveDeployedCatalogDefinition = (deployed, ref) => Result.gen(function* () {
+    const found = yield* deployed.requireDatabase(ref.database);
+    yield* requireCatalogKey(ref.catalogKey, found.definition.catalogKey);
+    yield* requireUnitHash(ref.unitHash, found.definition.unitHash, found.definition.catalogKey);
+    return found;
+});
+//# sourceMappingURL=definitions.js.map

package/dist/internal/authorization/definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../../src/internal/authorization/definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,eAAe,EACf,kBAAkB,GAEnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,6BAA6B,GAK9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAA+B,MAAM,mBAAmB,CAAC;AAChE,OAAO,EACL,uBAAuB,GAExB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAGL,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,gCAAgC,GACjC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EACtB,SAAS,GACV,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,SAAS,EAET,cAAc,EACd,UAAU,EAEV,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAuB,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,uBAAuB,GAGxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAElE,OAAO,EACL,iBAAiB,EACjB,eAAe,GAIhB,MAAM,eAAe,CAAC;AA0FvB,MAAM,OAAO,GAAG,CAAC,OAAe,EAAa,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAE3E,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAC1D,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3C,MAAM,iCAAiC,GAAG,gCAAgC,CAAC;AAE3E,MAAM,QAAQ,GAAG,CAAI,KAAa,EAAE,QAAiB,EAA+B,EAAE,CACpF,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,QAAQ;IACb,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CACvB,GAAG,KAAK,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtE;CACF,CAAC,CAAC;AAEL,MAAM,SAAS,GAAG,CAAC,KAAc,EAAa,EAAE;IAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,YAAY,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA8B,CAAC;QAC7D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;AAC5E,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAa,EAAE;IAC3D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChE,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,YAAY,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;gBACvD,GAAG;gBACH,sBAAsB,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC;aAChE,CAAC;SACH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;AACrF,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,YAAuB,EACvB,KAAsC,EAC3B,EAAE,CAAC,CAAC;IACf,YAAY;IACZ,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;SAC/E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,IAAI,EAAE,IAAI,CAAC,MAAM;QACjB,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;aAC3B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;aAC3D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,gBAA6B;SAChD,CAAC,CAAC;QACL,aAAa,EAAE,IAAI,CAAC,MAAM;aACvB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC;aACnD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;aAC3D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE;gBACP,EAAE,EAAE,KAAK,CAAC,YAAa,CAAC,EAAE;gBAC1B,YAAY,EAAE,KAAK,CAAC,YAAa,CAAC,YAAY;gBAC9C,QAAQ,EAAE,KAAK,CAAC,YAAa,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU;oBACxD,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,YAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;aAChE;SACF,CAAC,CAAC;QACL,KAAK,EAAE,IAAI,CAAC,MAAM;aACf,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;aAC5C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;aAC3D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1E,QAAQ,EAAE,IAAI,CAAC,MAAM;aAClB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;aAC5C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;aAC3D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACvC,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU;oBAC1C,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;aAClD,CAAC,CAAC;SACJ,CAAC,CAAC;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;CACN,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAClC,SAAkC,EAClC,YAAuB,EACvB,gBAA+D,EACjC,EAAE;IAChC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,OAAO,CACX,kBAAkB,SAAS,CAAC,GAAG,8CAA8C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,CACX,qBAAqB,SAAS,CAAC,GAAG,kCAAkC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAClG,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC3B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;SACrD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACd,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,iDAAiD,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC,CAAC,CACL,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CACjC,iBAAiB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CACnD,CAAC;IACF,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAC3C,iBAAiB,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC3D,CAAC;IACF,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAC1C,uBAAuB,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CACzD,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO;QACP,GAAG,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG;QAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM;QACN,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACtE,aAAa;QACb,uBAAuB;QACvB,oBAAoB,EAAE,MAAM,CAAC,MAAM,CACjC,oBAAoB,CAAC,YAAY,EAAE,aAAa,CAAC,CAClD;QACD,kBAAkB;KACnB,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,yCAAyC,CAAC,CACtE,QAAQ,CAAC,EACP,QAAsC;IAEtC,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACvC,0BAA0B,CAAC,cAAc,CAAC,CAC3C,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,4BAA4B,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG;QACb,GAAG,QAAQ,CAAC,gBAAgB;QAC5B,UAAU,EAAE,OAAO,CAAC,WAAW;KAChC,CAAC;IACF,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,gCAAgC,CACzE,iCAAiC,EACjC,QAAQ,CAAC,oBAAoB,CAC9B,CAAC,CAAC;IACH,MAAM,4BAA4B,GAAG;QACnC,GAAG,MAAM;QACT,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC/D,OAAO;QACP,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;KACnB,CAAC;IAC9B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,4BAA4B,CAAC,4BAA4B,CAAC,CAAC;IACtF,MAAM,UAAU,GAAsB;QACpC,GAAG,4BAA4B;QAC/B,WAAW;KACZ,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC;QACzC,MAAM,EAAE;YACN,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,cAAc,EAAE,UAAU,CAAC,OAAO;YAClC,iBAAiB,EAAE,UAAU,CAAC,WAAW;SAC1C;QACD,UAAU;QACV,QAAQ;KACT,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACzC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CACrE,CAAC;IACF,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,QAAQ,CACtC,iCAAiC,EACjC,GAAG,EAAE,CAAC,4BAA4B,CAChC,QAAQ,CAAC,aAAa,EACtB,QAAQ,CAAC,uBAAuB,CACjC,CACF,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAU,CAAC,CACnE,CAAC;IACF,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC;IACpC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,CAC1C,UAAkB,EAClB,KAAwC,EACxC,OAA+B,EAC/B,OAAO,GAA4B,EAAE,EACF,EAAE;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO,6BAA6B,CAClC,IAAI,EACJ,KAAK,EACL,OAAO,EACP,gBAAgB,EAChB,OAAO,CACR,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,CACxC,UAAkB,EAClB,UAAkB,EACK,EAAE;QACzB,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;QAC/E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CACjH,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,CAAC,KAAc,EAAQ,EAAE;gBACjC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS;gBAC9B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC;gBAC7C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;oBACd,IAAI,EAAE,OAAgB;oBACtB,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC;iBACtC,CAAC;SACL,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAuC,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,CACvC,UAAkB,EAClB,KAAc,EACR,EAAE;QACR,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,wBAAwB,CAC9E,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,QAAQ,CAAC,OAAO;QAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI;QACJ,WAAW;QACX,UAAU;QACV,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,qBAAqB;QACrB,mBAAmB;QACnB,kBAAkB;KACnB,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,IAAe,EACf,KAAyD,EACrC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;IACrC,IAAI;IACJ,OAAO,EAAE,CAAC,UAAqB,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpC,OAAO,KAAK,KAAK,SAAS;YACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC9E,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,WAA+B,EAC/B,GAA8B,EAI9B,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACvB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9D,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACjF,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,EAAE,CACjD,0CAA0C,CAC3C,CAAC,QAAQ,CAAC,EACT,KAAsC;IAEtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,mEAAmE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,QAAQ,CAClC,wCAAwC,EACxC,GAAG,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAC1C,CAAC;IACF,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAC/B,8CAA8C,EAC9C,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC/C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAoC,CAAC;QACrE,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC7C,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,GAAG,EAAE,CAAC;gBAC1C,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,OAAO,2BAA2B,CAChC,SAAS,EACT,KAAK,CAAC,YAAY,EAClB,gBAAgB,CACjB,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyC,CAAC;IAC/D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC/C,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACpF,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,WAA+B,EAC/B,WAAmD,EACqB,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyC,CAAC;IACpE,MAAM,YAAY,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC5D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;gBACtC,OAAO,EAAE,uDAAuD,UAAU,CAAC,QAAQ,GAAG;aACvF,CAAC,CAAC,CAAC;QACN,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,UAAU;SACX,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3C,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YAClD,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,WAAW,EAAE,UAAU,CAAC,WAAW;SACpC,CAAC,CAAC,CAAC;IACN,CAAC;IACD,MAAM,SAAS,GAAG,GAA0B,EAAE,CAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,CACtB,QAAoB,EACuC,EAAE;QAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,KAAK,KAAK,SAAS;YACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC;gBAChC,OAAO,EAAE,kBAAkB;gBAC3B,gBAAgB,EAAE,QAAQ;aAC3B,CAAC,CAAC;YACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,MAAM,QAAQ,GAAqB,MAAM,CAAC,MAAM,CAAC;QAC/C,eAAe,EAAE,CAAC,QAAoB,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO,KAAK,KAAK,SAAS;gBACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC;oBAChC,OAAO,EAAE,kBAAkB;oBAC3B,gBAAgB,EAAE,QAAQ;iBAC3B,CAAC,CAAC;gBACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,SAAS;KACV,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,QAAoC,EACpC,GAAoB,EAIpB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5D,KAAK,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACtE,KAAK,CAAC,CAAC,eAAe,CACpB,GAAG,CAAC,QAAQ,EACZ,KAAK,CAAC,UAAU,CAAC,QAAQ,EACzB,KAAK,CAAC,UAAU,CAAC,UAAU,CAC5B,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC"}

package/dist/internal/authorization/deployed.d.ts

@@ -0,0 +1,43 @@
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import { Unauthorized } from "../../db/Errors.ts";
+import type { CatalogDescriptor } from "./catalog.ts";
+import type { InstalledCatalogUnitV2 } from "./catalog-unit.ts";
+import type { CompositionIndex } from "../core/composition.ts";
+import { CatalogMismatch, CatalogUnitCorrupt, CatalogVersionMismatch, InvalidIR } from "./failures.ts";
+import type { CatalogId, CatalogUnitHash, CatalogVersion, DatabaseId } from "./identities.ts";
+import type { PolicyTemplateIR } from "./ir.ts";
+export type CatalogBoundRef = {
+    readonly database: DatabaseId;
+    readonly catalogKey: CatalogId;
+    readonly unitHash: CatalogUnitHash;
+};
+export type DeployedCatalog = {
+    readonly database: DatabaseId;
+    readonly catalogKey: CatalogId;
+    readonly unitHash: CatalogUnitHash;
+    readonly unit: InstalledCatalogUnitV2;
+    readonly composition: CompositionIndex;
+};
+export type DeployedCatalogs = {
+    readonly requireDatabase: (database: DatabaseId) => Result.Result<DeployedCatalog, CatalogMismatch>;
+    readonly databases: () => readonly DatabaseId[];
+};
+export type CatalogAssemblyUnit = {
+    readonly catalog: CatalogId;
+    readonly database: DatabaseId;
+    readonly version: CatalogVersion;
+    readonly children?: readonly CatalogId[];
+    readonly descriptor: CatalogDescriptor;
+    readonly policy: PolicyTemplateIR;
+};
+export type CatalogAssemblyInput = {
+    readonly root: CatalogId;
+    readonly units: readonly CatalogAssemblyUnit[];
+};
+export declare const requireCatalogKey: (actual: CatalogId, expected: CatalogId) => Result.Result<void, CatalogMismatch>;
+export declare const requireUnitHash: (actual: CatalogUnitHash, expected: CatalogUnitHash, catalog: CatalogId) => Result.Result<void, CatalogVersionMismatch>;
+export declare const resolveDeployedCatalog: (catalogs: DeployedCatalogs, ref: CatalogBoundRef) => Result.Result<DeployedCatalog, CatalogMismatch | CatalogVersionMismatch>;
+export declare const opaqueCatalogDenial: (_error: CatalogMismatch | CatalogVersionMismatch) => Unauthorized;
+export declare const assembleDeployedCatalogs: (input: CatalogAssemblyInput) => Effect.Effect<DeployedCatalogs, CatalogMismatch | CatalogUnitCorrupt | InvalidIR, never>;
+//# sourceMappingURL=deployed.d.ts.map

package/dist/internal/authorization/deployed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployed.d.ts","sourceRoot":"","sources":["../../../src/internal/authorization/deployed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAK/D,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACvG,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE9F,OAAO,KAAK,EAAwB,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEtE,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,eAAe,EAAE,CACxB,QAAQ,EAAE,UAAU,KACjB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,SAAS,UAAU,EAAE,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAChD,CAAC;AAmGF,eAAO,MAAM,iBAAiB,WACpB,SAAS,YACP,SAAS,KAClB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CASrC,CAAC;AAEF,eAAO,MAAM,eAAe,WAClB,eAAe,YACb,eAAe,WAChB,SAAS,KACjB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,sBAAsB,CAG5C,CAAC;AAEF,eAAO,MAAM,sBAAsB,aACvB,gBAAgB,OACrB,eAAe,KACnB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,eAAe,GAAG,sBAAsB,CAMtE,CAAC;AAEL,eAAO,MAAM,mBAAmB,WACtB,eAAe,GAAG,sBAAsB,KAC/C,YAAoC,CAAC;AAExC,eAAO,MAAM,wBAAwB,2HAwGpC,CAAC"}

package/dist/internal/authorization/deployed.js

@@ -0,0 +1,184 @@
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import { Unauthorized } from "../../db/Errors.js";
+import { compositionFromUnit } from "./composition.js";
+import { sealInstalledCatalogUnit, } from "./catalog-unit.js";
+import { CatalogMismatch, CatalogUnitCorrupt, CatalogVersionMismatch, InvalidIR } from "./failures.js";
+import { installAuthorization } from "./install.js";
+const freezePlain = (value) => {
+    if (value === null || typeof value !== "object" || Object.isFrozen(value))
+        return value;
+    if (Array.isArray(value)) {
+        for (const item of value)
+            freezePlain(item);
+    }
+    else {
+        for (const key of Object.keys(value)) {
+            freezePlain(value[key]);
+        }
+    }
+    return Object.freeze(value);
+};
+const invalid = (message) => Result.fail(new InvalidIR({ message }));
+const formatPath = (path) => path.join(" → ");
+const compareCatalogId = (left, right) => left < right ? -1 : left > right ? 1 : 0;
+const compareDatabaseId = (left, right) => left < right ? -1 : left > right ? 1 : 0;
+const catalogTargetOf = (descriptor) => ({
+    database: descriptor.database,
+    catalog: descriptor.id,
+    catalogVersion: descriptor.version,
+    schemaFingerprint: descriptor.fingerprint,
+});
+const assembleOne = Effect.fn("Authorization.assembleOneDeployedCatalog")(function* (unit) {
+    const descriptor = unit.descriptor;
+    if (descriptor.id !== unit.catalog) {
+        return yield* new InvalidIR({
+            message: `catalog '${unit.catalog}' descriptor id '${descriptor.id}' does not match the assembly key`,
+        });
+    }
+    if (descriptor.database !== unit.database) {
+        return yield* new InvalidIR({
+            message: `catalog '${unit.catalog}' descriptor database does not match the assembly key`,
+        });
+    }
+    if (descriptor.version !== unit.version) {
+        return yield* new InvalidIR({
+            message: `catalog '${unit.catalog}' descriptor version does not match the assembly key`,
+        });
+    }
+    const policy = yield* installAuthorization({
+        target: catalogTargetOf(descriptor),
+        descriptor,
+        template: unit.policy,
+    });
+    const sealed = yield* sealInstalledCatalogUnit(descriptor, policy);
+    const composition = yield* Effect.fromResult(compositionFromUnit(sealed));
+    return freezePlain({
+        database: unit.database,
+        catalogKey: unit.catalog,
+        unitHash: sealed.unitHash,
+        unit: sealed,
+        composition,
+    });
+});
+const buildRegistry = (byDatabase) => {
+    const requireDatabase = (database) => {
+        const deployed = byDatabase.get(database);
+        if (deployed === undefined) {
+            return Result.fail(new CatalogMismatch({
+                message: "catalog mismatch",
+                expectedDatabase: database,
+            }));
+        }
+        return Result.succeed(deployed);
+    };
+    const databases = () => Object.freeze([...byDatabase.keys()].sort(compareDatabaseId));
+    return Object.freeze({
+        requireDatabase,
+        databases,
+    });
+};
+export const requireCatalogKey = (actual, expected) => {
+    if (actual === expected)
+        return Result.succeed(undefined);
+    return Result.fail(new CatalogMismatch({
+        message: "catalog mismatch",
+        expected,
+        actual,
+    }));
+};
+export const requireUnitHash = (actual, expected, catalog) => {
+    if (actual === expected)
+        return Result.succeed(undefined);
+    return Result.fail(new CatalogVersionMismatch({ catalog, expected, actual }));
+};
+export const resolveDeployedCatalog = (catalogs, ref) => Result.gen(function* () {
+    const deployed = yield* catalogs.requireDatabase(ref.database);
+    yield* requireCatalogKey(ref.catalogKey, deployed.catalogKey);
+    yield* requireUnitHash(ref.unitHash, deployed.unitHash, deployed.catalogKey);
+    return deployed;
+});
+export const opaqueCatalogDenial = (_error) => new Unauthorized({});
+export const assembleDeployedCatalogs = Effect.fn("Authorization.assembleDeployedCatalogs")(function* (input) {
+    const sources = new Map();
+    for (const unit of input.units) {
+        const existing = sources.get(unit.catalog);
+        if (existing === undefined)
+            sources.set(unit.catalog, [unit]);
+        else
+            existing.push(unit);
+    }
+    const reachable = new Map();
+    const visit = (key, path) => Result.gen(function* () {
+        if (path.includes(key)) {
+            return yield* invalid(`catalog reachability cycle: ${formatPath([...path, key])}`);
+        }
+        const listed = sources.get(key);
+        if (listed === undefined) {
+            return yield* invalid(`missing child catalog '${key}' (path: ${formatPath([...path, key])})`);
+        }
+        const nextPath = [...path, key];
+        const paths = reachable.get(key);
+        if (paths === undefined)
+            reachable.set(key, [nextPath]);
+        else
+            reachable.set(key, [...paths, nextPath]);
+        if (paths !== undefined)
+            return;
+        const children = [...new Set(listed.flatMap((unit) => unit.children ?? []))].sort(compareCatalogId);
+        for (const child of children) {
+            yield* visit(child, nextPath);
+        }
+    });
+    yield* Effect.fromResult(visit(input.root, []));
+    for (const key of sources.keys()) {
+        if (!reachable.has(key)) {
+            return yield* new InvalidIR({
+                message: `unused catalog '${key}' is not reachable from root '${input.root}'`,
+            });
+        }
+    }
+    const byKey = new Map();
+    const ordered = [...reachable.keys()].sort(compareCatalogId);
+    for (const key of ordered) {
+        const listed = sources.get(key);
+        if (listed === undefined) {
+            return yield* new InvalidIR({
+                message: `missing child catalog '${key}'`,
+            });
+        }
+        const assembled = [];
+        for (const unit of listed) {
+            assembled.push(yield* assembleOne(unit));
+        }
+        const hashes = new Set(assembled.map((item) => item.unitHash));
+        if (hashes.size > 1) {
+            const paths = (reachable.get(key) ?? []).map(formatPath).join("; ");
+            return yield* new InvalidIR({
+                message: `duplicate catalog '${key}' with conflicting unit hashes (paths: ${paths})`,
+            });
+        }
+        byKey.set(key, assembled[0]);
+    }
+    const byDatabase = new Map();
+    const deployedUnits = [...byKey.values()].sort((left, right) => compareCatalogId(left.catalogKey, right.catalogKey));
+    for (const deployed of deployedUnits) {
+        const existing = byDatabase.get(deployed.database);
+        if (existing === undefined) {
+            byDatabase.set(deployed.database, deployed);
+            continue;
+        }
+        if (existing.catalogKey === deployed.catalogKey &&
+            existing.unitHash === deployed.unitHash) {
+            continue;
+        }
+        const catalogPaths = [existing.catalogKey, deployed.catalogKey]
+            .map((key) => (reachable.get(key) ?? []).map(formatPath).join("; "))
+            .join("; ");
+        return yield* new InvalidIR({
+            message: `distinct catalog units '${existing.catalogKey}' and '${deployed.catalogKey}' claim database '${deployed.database}' (paths: ${catalogPaths})`,
+        });
+    }
+    return buildRegistry(Object.freeze(byDatabase));
+});
+//# sourceMappingURL=deployed.js.map

package/dist/internal/authorization/deployed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployed.js","sourceRoot":"","sources":["../../../src/internal/authorization/deployed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAEL,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAEvG,OAAO,EAAE,oBAAoB,EAAuB,MAAM,cAAc,CAAC;AAsCzE,MAAM,WAAW,GAAG,CAAI,KAAQ,EAAK,EAAE;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,WAAW,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,OAAe,EAAmC,EAAE,CACnE,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAE1C,MAAM,UAAU,GAAG,CAAC,IAA0B,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAE5E,MAAM,gBAAgB,GAAG,CAAC,IAAe,EAAE,KAAgB,EAAU,EAAE,CACrE,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3C,MAAM,iBAAiB,GAAG,CAAC,IAAgB,EAAE,KAAiB,EAAU,EAAE,CACxE,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3C,MAAM,eAAe,GAAG,CAAC,UAA6B,EAAwB,EAAE,CAAC,CAAC;IAChF,QAAQ,EAAE,UAAU,CAAC,QAAQ;IAC7B,OAAO,EAAE,UAAU,CAAC,EAAE;IACtB,cAAc,EAAE,UAAU,CAAC,OAAO;IAClC,iBAAiB,EAAE,UAAU,CAAC,WAAW;CAC1C,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,0CAA0C,CAAC,CACvE,QAAQ,CAAC,EACP,IAAyB;IAKzB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,UAAU,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;YAC1B,OAAO,EAAE,YAAY,IAAI,CAAC,OAAO,oBAAoB,UAAU,CAAC,EAAE,mCAAmC;SACtG,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;YAC1B,OAAO,EAAE,YAAY,IAAI,CAAC,OAAO,uDAAuD;SACzF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;YAC1B,OAAO,EAAE,YAAY,IAAI,CAAC,OAAO,sDAAsD;SACxF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC;QACzC,MAAM,EAAE,eAAe,CAAC,UAAU,CAAC;QACnC,UAAU;QACV,QAAQ,EAAE,IAAI,CAAC,MAAM;KACtB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,OAAO,WAAW,CAAC;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,OAAO;QACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM;QACZ,WAAW;KACZ,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,UAAoD,EAClC,EAAE;IACpB,MAAM,eAAe,GAAG,CACtB,QAAoB,EAC6B,EAAE;QACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC;gBAClB,OAAO,EAAE,kBAAkB;gBAC3B,gBAAgB,EAAE,QAAQ;aAC3B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,GAA0B,EAAE,CAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAEhE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,eAAe;QACf,SAAS;KACV,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,MAAiB,EACjB,QAAmB,EACmB,EAAE;IACxC,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC;QAClB,OAAO,EAAE,kBAAkB;QAC3B,QAAQ;QACR,MAAM;KACP,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,MAAuB,EACvB,QAAyB,EACzB,OAAkB,EAC2B,EAAE;IAC/C,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,QAA0B,EAC1B,GAAoB,EACsD,EAAE,CAC5E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/D,KAAK,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9D,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7E,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,MAAgD,EAClC,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;AAExC,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,EAAE,CAAC,wCAAwC,CAAC,CACzF,QAAQ,CAAC,EACP,KAA2B;IAK3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;;YACzD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC/D,MAAM,KAAK,GAAG,CACZ,GAAc,EACd,IAA0B,EACM,EAAE,CAClC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,CAAC,OAAO,CACnB,+BAA+B,UAAU,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAC5D,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,CAAC,OAAO,CACnB,0BAA0B,GAAG,YAAY,UAAU,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CACvE,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;;YACnD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAEhC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAC/E,gBAAgB,CACjB,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAEhD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;gBAC1B,OAAO,EAAE,mBAAmB,GAAG,iCAAiC,KAAK,CAAC,IAAI,GAAG;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;gBAC1B,OAAO,EAAE,0BAA0B,GAAG,GAAG;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;gBAC1B,OAAO,EAAE,sBAAsB,GAAG,0CAA0C,KAAK,GAAG;aACrF,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC1D,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC7D,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CACpD,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IACE,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAC3C,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EACvC,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC;aAC5D,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACnE,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;YAC1B,OAAO,EAAE,2BAA2B,QAAQ,CAAC,UAAU,UAAU,QAAQ,CAAC,UAAU,qBAAqB,QAAQ,CAAC,QAAQ,aAAa,YAAY,GAAG;SACvJ,CAAC,CAAC;IACL,CAAC;IAED,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AAClD,CAAC,CACF,CAAC"}