tinybeeai 0.0.0-stage → 0.16.1

package/dist/runner/test-repo.js

@@ -0,0 +1,326 @@
+// The Tests repo of a dot (docs/MULTI-REPO.md section 3, KAT-86): which ref of it runs against an app change, its checkout, and the
+// runner settings a run of it uses.
+//
+// The ref is chosen by the first rule that applies:
+//   1. the PR description holds a line `localdost-tests-ref: <branch>` and the Tests repo has that branch (a PR run of a repo's own PR
+//      only: the description of a fork PR is written by someone outside the team, so it never picks code);
+//   2. the repo's ref is `match_branch` and the Tests repo has a branch named like the app PR's branch (same exception for forks);
+//   3. the repo's ref is `{ fixed }`: that branch or tag;
+//   4. the default branch of the Tests repo.
+// A merge run uses rules 3 and 4: the branch of a merged PR is a branch of the past.
+//
+// The checkout goes through a cache in the data folder, <data>/test-repos/<owner>__<name>: a git folder with no files of its own that
+// holds the objects of every commit fetched so far. A run fetches its commit by sha (GitHub confirmed the sha, never the event), adds a
+// worktree of it under <data>/worktrees, and checks that the worktree is on that sha before anything runs. The worktree is removed
+// when the run ends and swept at boot with the app worktrees (src/runner/worktree.ts).
+import { existsSync, mkdirSync } from 'node:fs';
+import path from 'node:path';
+import { config, log } from '../config.js';
+import { redact } from '../agent/redact.js';
+import { GitTimeoutError, GithubUnreachableError } from '../integrations/github.js';
+import { isSafeBranchName } from './command.js';
+import { hasAdapter } from './adapters/index.js';
+import { TMP_REF_PREFIX, gitIn, holdWorktree, realish, refId, releaseWorktree, removeOwnWorktree, safeId, scrubReason, worktreesDir, } from './worktree.js';
+/** A TestRefSource over the GitHub client of the Tests repo, or null when that client cannot read refs (no GitHub connection). */
+export function refSourceOf(gh) {
+    const refSha = gh.refSha;
+    if (!refSha)
+        return null;
+    return { refSha: (kind, name) => refSha.call(gh, kind, name), defaultBranch: () => gh.defaultBranchName() };
+}
+const DIRECTIVE = /^[ \t]*localdost-tests-ref[ \t]*:[ \t]*(.*?)[ \t]*$/im;
+/**
+ * The branch a PR description names with a line `localdost-tests-ref: <branch>` (the first such line; backticks and quotes around the
+ * name are dropped). `invalid` holds the text of a line whose value is no plain branch name, so the caller can say it was ignored.
+ */
+export function testsRefDirective(body) {
+    const m = DIRECTIVE.exec(body ?? '');
+    if (!m)
+        return {};
+    const value = m[1].replace(/^[`'"]+|[`'"]+$/g, '').trim();
+    if (!value)
+        return {};
+    return isSafeBranchName(value) ? { branch: value } : { invalid: value.slice(0, 60) };
+}
+/**
+ * A sentence for a read of the Tests repo that failed. The Tests repo often sits under another owner than the app repos (the App may
+ * be installed on one and not the other), so the sentence names the owner and says what to do. The text of a transport error is cut.
+ */
+export function unreadableTestRepoReason(err, repo) {
+    const message = err instanceof Error ? err.message : String(err);
+    const status = typeof err?.status === 'number' ? err.status : undefined;
+    const fromText = /\bHTTP (\d{3})\b/.exec(message)?.[1];
+    const code = status ?? (fromText ? Number(fromText) : undefined);
+    const where = repo ? `${repo.owner}/${repo.name}` : 'the Tests repo';
+    const head = 'The Tests repo could not be read: ';
+    if (/not installed/i.test(message))
+        return `${head}the GitHub App is not installed on ${repo ? repo.owner : 'the owner of the Tests repo'}. Install it there or use a token with access.`;
+    // A 403 that GitHub sends for a spent rate limit or a secondary limit is no refusal: the credentials are fine and the next read works.
+    // GithubUnreachableError carries a 403 only for that case (isOutageStatus), and an HTTP error carries it with a Retry-After header or the words.
+    const retryAfter = err?.retryAfter;
+    if (code === 429 || (code === 403 && (err instanceof GithubUnreachableError || !!retryAfter || /rate limit|abuse|secondary|throttl/i.test(message))))
+        return `${head}GitHub is throttling requests for ${where} (HTTP ${code}). Access is fine; localdost retries on the next run.`;
+    if (code === 401)
+        return `${head}GitHub refused the credentials of the dot (HTTP 401). Check the GitHub token or App key, and that it can read ${where}.`;
+    if (code === 403)
+        return `${head}GitHub denied access to ${where} (HTTP 403). Give the GitHub App or token read access to it.`;
+    if (err instanceof GithubUnreachableError || (code !== undefined && code >= 500))
+        return `${head}GitHub did not answer (${redact(message).replace(/\s+/g, ' ').slice(0, 120)}). localdost could not tell which commit of the Tests repo to run.`;
+    return `${head}${redact(message).replace(/\s+/g, ' ').slice(0, 160)}. Check that the GitHub connection can read ${where}.`;
+}
+/**
+ * The ref of the Tests repo a run uses, by the rules at the top of this file. Never throws: a ref that does not exist, and any read of
+ * the Tests repo that fails (the App is not installed on its owner, 401, 403, 5xx, no network), come back as a sentence, so the app
+ * repo's review and tests go on and the Tests repo shows as not run.
+ */
+export async function resolveTestRef(o) {
+    try {
+        return await pickTestRef(o);
+    }
+    catch (err) {
+        return { ok: false, reason: unreadableTestRepoReason(err, o.repo) };
+    }
+}
+async function pickTestRef(o) {
+    const { source } = o;
+    const own = o.task === 'pr_check' && !o.fork;
+    let note;
+    const found = (ref, rule, sha) => ({
+        ok: true,
+        ref: { ref, rule, sha, ...(note ? { note } : {}) },
+    });
+    if (own) {
+        const asked = testsRefDirective(o.prBody);
+        if (asked.invalid)
+            note = `The line "localdost-tests-ref: ${asked.invalid}" in the PR description is not a branch name, so it was ignored.`;
+        if (asked.branch) {
+            const sha = await source.refSha('branch', asked.branch);
+            if (sha)
+                return found(asked.branch, 'directive', sha);
+            note = `The PR description asks for the branch ${asked.branch} of the Tests repo, which has no such branch, so another ref stands in.`;
+        }
+        if (o.config?.ref === 'match_branch' && o.prHeadRef && isSafeBranchName(o.prHeadRef)) {
+            const sha = await source.refSha('branch', o.prHeadRef);
+            if (sha)
+                return found(o.prHeadRef, 'match_branch', sha);
+        }
+    }
+    const want = o.config?.ref;
+    if (want && typeof want === 'object' && typeof want.fixed === 'string') {
+        const name = want.fixed.trim();
+        if (!isSafeBranchName(name))
+            return { ok: false, reason: `The fixed ref "${name.slice(0, 60)}" of the Tests repo is not a branch or tag name.` };
+        const sha = (await source.refSha('branch', name)) ?? (await source.refSha('tag', name));
+        if (!sha)
+            return { ok: false, reason: `The Tests repo has no branch or tag ${name}, which the dot's settings name as its fixed ref.` };
+        return found(name, 'fixed', sha);
+    }
+    let branch = o.defaultBranch;
+    try {
+        branch = (await source.defaultBranch()) || branch;
+    }
+    catch {
+        /* the configured default stands in; reading the ref below fails the same way when GitHub is out of reach */
+    }
+    if (!isSafeBranchName(branch))
+        return { ok: false, reason: 'The default branch of the Tests repo is not a safe branch name.' };
+    const sha = await source.refSha('branch', branch);
+    if (!sha)
+        return { ok: false, reason: `The Tests repo has no branch ${branch}.` };
+    return found(branch, 'default', sha);
+}
+// ---------- the settings a run of a Tests repo uses ----------
+/**
+ * The runner settings of a run. An app repo run uses the dot's own. A Tests repo run keeps the dot's mode, image and video, and takes the
+ * rest from the Tests repo: its command, its setup (the app repo's build steps never run for it), its folder, and its test login (its own
+ * list, else the dot's). No working folder is used and no file is copied: the checkout is the one made for the commit.
+ */
+export function effectiveRunner(spec) {
+    const base = spec.watch.runner;
+    const tr = spec.testRepo;
+    if (!tr)
+        return base;
+    const { workdir: _workdir, setup: _setup, command: _command, workingDirectory: _dir, copyFiles: _copy, passEnv: _pass, trustForks: _trust, ...keep } = base;
+    const c = tr.config;
+    // A fork PR's page is controlled by the fork author: no variable of this machine goes with the run, whatever the settings name.
+    const login = tr.fork ? [] : testLoginNames(tr, base.passEnv);
+    return {
+        ...keep,
+        ...(c.command?.trim() ? { command: c.command.trim() } : {}),
+        ...(c.setup?.trim() ? { setup: c.setup } : {}),
+        ...(c.dir?.trim() ? { workingDirectory: c.dir.trim() } : {}),
+        ...(login.length ? { passEnv: login } : {}),
+    };
+}
+/** The names of the test login a Tests repo run would get: its own list, else the dot's. */
+export function testLoginNames(tr, dotPassEnv) {
+    return [...(tr.config.passEnv?.length ? tr.config.passEnv : (dotPassEnv ?? []))];
+}
+/**
+ * Why a Tests repo run must not start, or null. A framework with no adapter, and the fork rule: a fork never gets the host
+ * environment. Outside Docker the run never starts for a fork. In Docker it starts only when no test login would cross into the
+ * container, because the page under test is the fork's preview and its author controls it; a run with a login missing would fail
+ * on the login and read as a product failure, so it is refused with a sentence instead.
+ */
+export function testRepoRefusal(tr, mode, dotPassEnv) {
+    if (!hasAdapter(tr.config.framework))
+        return `The Tests repo uses ${tr.config.framework}, which localdost cannot run yet. Only Playwright suites run today.`;
+    if (!tr.fork)
+        return null;
+    if (mode !== 'docker')
+        return 'The Tests repo did not run: the pull request comes from a fork, and a Tests repo runs for a fork only in Docker mode, where no variable of this machine crosses over. No test count is shown.';
+    if (testLoginNames(tr, dotPassEnv).length)
+        return 'The Tests repo did not run: the pull request comes from a fork, and the Tests repo signs in with a test login. localdost never hands a test login to a page that a fork author controls. No test count is shown.';
+    return null;
+}
+// ---------- the checkout ----------
+const FULL_SHA = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
+// Git allows one shallow fetch at a time into a repo (.git/shallow.lock), and two runs of one Tests repo share one cache folder: two PR
+// checks, a PR check and a merge, or two dots on one Tests repo. Every git command that writes to a cache runs behind a per-cache
+// queue in this process, so the second run waits for the first instead of failing on the lock.
+const cacheQueues = new Map();
+/** Runs `fn` after every earlier call for the same cache folder has finished, whether it succeeded or not. */
+export function withCacheLock(cache, fn) {
+    const before = cacheQueues.get(cache) ?? Promise.resolve();
+    const result = before.then(fn, fn);
+    const tail = result.catch(() => undefined);
+    cacheQueues.set(cache, tail);
+    void tail.then(() => {
+        if (cacheQueues.get(cache) === tail)
+            cacheQueues.delete(cache);
+    });
+    return result;
+}
+/** How long one fetch of a Tests repo commit may take before it is stopped and its run is marked not run. */
+export const TEST_REPO_FETCH_TIMEOUT_SEC = 180;
+/** Time the fetch gets to stop by itself after its limit, before the run stops waiting for it and lets the cache go. */
+const FETCH_STOP_GRACE_MS = 5000;
+/** The limit of one fetch in ms: LOCALDOST_TEST_REPO_FETCH_TIMEOUT_SEC when it is a number above 0, else 180 s. */
+export function testRepoFetchTimeoutMs() {
+    const n = Number(process.env.LOCALDOST_TEST_REPO_FETCH_TIMEOUT_SEC);
+    return (Number.isFinite(n) && n > 0 ? n : TEST_REPO_FETCH_TIMEOUT_SEC) * 1000;
+}
+class FetchTimeout extends Error {
+}
+/** Settles with `p`, or rejects with FetchTimeout after `ms`. A late failure of `p` is dropped. */
+function withTimeout(p, ms) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new FetchTimeout()), ms);
+        p.then((v) => {
+            clearTimeout(timer);
+            resolve(v);
+        }, (e) => {
+            clearTimeout(timer);
+            reject(e);
+        });
+    });
+}
+const sayLimit = (ms) => {
+    const s = Math.max(1, Math.round(ms / 1000));
+    return s >= 60 && s % 60 === 0 ? `${s / 60} min` : `${s} s`;
+};
+/** The cache folder of a Tests repo: <data>/test-repos/<owner>__<name>, lower case. */
+export function testRepoCacheDir(repo, dataDir = config.dataDir) {
+    return path.join(realish(dataDir), 'test-repos', safeId(`${repo.owner}__${repo.name}`.toLowerCase()));
+}
+/**
+ * Makes a worktree of the Tests repo at `sha` and checks that it is on that commit. The commit comes from GitHub (resolveTestRef),
+ * never from an event. A failure is a plain sentence and leaves no worktree and no private ref behind.
+ */
+export async function checkoutTestRepo(o) {
+    const name = `${o.repo.owner}/${o.repo.name}`;
+    const sha = o.sha.trim().toLowerCase();
+    const short = sha.slice(0, 7);
+    const fail = (why) => ({
+        ok: false,
+        reason: scrubReason(`The tests of ${name} did not run for ${short}: ${why} No test count is shown for it.`),
+    });
+    if (!FULL_SHA.test(sha))
+        return fail('the commit is not given in full.');
+    const gh = o.gh;
+    const fetchCommit = gh.fetchCommit;
+    if (!fetchCommit)
+        return fail('GitHub is not connected, so the commit could not be fetched.');
+    const gone = () => o.cancelled?.() === true;
+    const run = (cwd, args, timeoutMs) => gone() ? Promise.resolve({ code: null, signal: null, stdout: '', stderr: '', timedOut: false }) : gitIn(cwd, args, timeoutMs, o.runId);
+    const cache = testRepoCacheDir(o.repo, o.dataDir);
+    const parent = worktreesDir(o.dataDir);
+    const root = path.join(parent, safeId(o.id));
+    const tmpRef = `${TMP_REF_PREFIX}${refId(o.id)}`;
+    let added = false;
+    let cleaned = false;
+    let limit = 0;
+    // The steps of a cleanup, for a caller that already holds the cache lock.
+    const cleanupHeld = async () => {
+        if (cleaned)
+            return;
+        cleaned = true;
+        if (added)
+            await gitIn(cache, ['worktree', 'remove', '--force', root], 30_000, o.runId).catch(() => undefined);
+        removeOwnWorktree(cache, root);
+        await gitIn(cache, ['update-ref', '-d', tmpRef], 30_000, o.runId).catch(() => undefined);
+        releaseWorktree(root);
+    };
+    const cleanup = () => withCacheLock(cache, cleanupHeld);
+    const make = async () => {
+        try {
+            mkdirSync(cache, { recursive: true });
+            // A git folder with no files of its own: it keeps objects, and every checkout is a worktree of it.
+            if (!existsSync(path.join(cache, '.git'))) {
+                const init = await run(cache, ['init', '-q']);
+                if (init.code !== 0)
+                    return fail(gone() ? 'the run was cancelled.' : 'the cache folder for the Tests repo could not be made.');
+            }
+            // A run that was cancelled while it waited for the cache lock, or while the cache was made, starts no network fetch.
+            if (gone()) {
+                await cleanupHeld();
+                return fail('the run was cancelled.');
+            }
+            // The cache lock is held through this fetch, so a fetch that never ends would block every run of the same Tests repo.
+            limit = o.fetchTimeoutMs ?? testRepoFetchTimeoutMs();
+            await withTimeout(fetchCommit.call(gh, cache, sha, tmpRef, limit), limit + (o.fetchGraceMs ?? FETCH_STOP_GRACE_MS));
+            if (gone()) {
+                await cleanupHeld();
+                return fail('the run was cancelled.');
+            }
+            const have = await run(cache, ['rev-parse', '--verify', '--quiet', `${sha}^{commit}`], 10_000);
+            if (have.code !== 0)
+                return fail('GitHub did not give that commit.');
+            mkdirSync(parent, { recursive: true });
+            // Entries of worktrees that were removed by hand or by a crash are dropped, and an entry at this very path is ours.
+            await run(cache, ['worktree', 'prune'], 30_000);
+            removeOwnWorktree(cache, root);
+            holdWorktree(root, cache);
+            added = true;
+            // Hooks of the repo (post-checkout) do not run for a checkout localdost makes.
+            const add = await run(cache, ['-c', 'core.hooksPath=/dev/null', 'worktree', 'add', '--detach', '--quiet', root, sha], 120_000);
+            if (add.code !== 0) {
+                if (!gone())
+                    log.warn(`test repo: git worktree add failed: ${redact(add.stderr.trim().split('\n').pop() ?? '')}`);
+                await cleanupHeld();
+                return fail(gone() ? 'the run was cancelled.' : add.timedOut ? 'creating the worktree timed out.' : 'a worktree could not be made.');
+            }
+            // The count is shown only when the checkout is on the commit that was resolved.
+            const head = await run(root, ['rev-parse', 'HEAD'], 10_000);
+            const at = head.code === 0 ? head.stdout.trim().toLowerCase() : '';
+            if (at !== sha) {
+                await cleanupHeld();
+                return fail(`the checkout is on ${at ? at.slice(0, 7) : 'no commit'}, not on ${short}.`);
+            }
+            return { ok: true, worktree: { dir: root, root, sha, cleanup } };
+        }
+        catch (err) {
+            await cleanupHeld();
+            // The network is the caller's to retry (GithubUnreachableError); any other failure is a sentence.
+            if (err instanceof GithubUnreachableError)
+                throw err;
+            if (err instanceof FetchTimeout || err instanceof GitTimeoutError)
+                return fail(`GitHub did not give the commit within ${sayLimit(limit)}, so the fetch was stopped.`);
+            return fail(`the commit could not be fetched (${redact(err instanceof Error ? err.message : String(err))
+                .replace(/\s+/g, ' ')
+                .slice(0, 160)}).`);
+        }
+    };
+    return withCacheLock(cache, make);
+}
+//# sourceMappingURL=test-repo.js.map

package/dist/runner/test-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-repo.js","sourceRoot":"","sources":["../../src/runner/test-repo.ts"],"names":[],"mappings":"AAAA,oIAAoI;AACpI,oCAAoC;AACpC,EAAE;AACF,oDAAoD;AACpD,uIAAuI;AACvI,2GAA2G;AAC3G,mIAAmI;AACnI,0DAA0D;AAC1D,6CAA6C;AAC7C,qFAAqF;AACrF,EAAE;AACF,sIAAsI;AACtI,wIAAwI;AACxI,mIAAmI;AACnI,uFAAuF;AACvF,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAqB,MAAM,2BAA2B,CAAC;AAEvG,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,cAAc,EACd,KAAK,EACL,YAAY,EACZ,OAAO,EACP,KAAK,EACL,eAAe,EACf,iBAAiB,EACjB,MAAM,EACN,WAAW,EACX,YAAY,GAEb,MAAM,eAAe,CAAC;AAsBvB,kIAAkI;AAClI,MAAM,UAAU,WAAW,CAAC,EAAsD;IAChF,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;IACzB,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC;AAC9G,CAAC;AAED,MAAM,SAAS,GAAG,uDAAuD,CAAC;AAE1E;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA+B;IAC/D,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAY,EAAE,IAAsC;IAC3F,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,OAAQ,GAAmC,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACjI,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACrE,MAAM,IAAI,GAAG,oCAAoC,CAAC;IAClD,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAChC,OAAO,GAAG,IAAI,sCAAsC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,6BAA6B,gDAAgD,CAAC;IACxJ,uIAAuI;IACvI,iJAAiJ;IACjJ,MAAM,UAAU,GAAI,GAAuC,EAAE,UAAU,CAAC;IACxE,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,YAAY,sBAAsB,IAAI,CAAC,CAAC,UAAU,IAAI,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAClJ,OAAO,GAAG,IAAI,qCAAqC,KAAK,UAAU,IAAI,uDAAuD,CAAC;IAChI,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,GAAG,IAAI,iHAAiH,KAAK,GAAG,CAAC;IAC1J,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,GAAG,IAAI,2BAA2B,KAAK,8DAA8D,CAAC;IAC/H,IAAI,GAAG,YAAY,sBAAsB,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,GAAG,CAAC;QAC9E,OAAO,GAAG,IAAI,0BAA0B,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,oEAAoE,CAAC;IACjK,OAAO,GAAG,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,+CAA+C,KAAK,GAAG,CAAC;AAC7H,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,CAapC;IACC,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,CAAuC;IAChE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,IAAI,IAAwB,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,IAAiB,EAAE,GAAW,EAAsC,EAAE,CAAC,CAAC;QAClG,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KACnD,CAAC,CAAC;IAEH,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO;YAAE,IAAI,GAAG,kCAAkC,KAAK,CAAC,OAAO,kEAAkE,CAAC;QAC5I,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,GAAG;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;YACtD,IAAI,GAAG,0CAA0C,KAAK,CAAC,MAAM,yEAAyE,CAAC;QACzI,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,EAAE,GAAG,KAAK,cAAc,IAAI,CAAC,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACrF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,GAAG;gBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC;IAC3B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,kDAAkD,EAAE,CAAC;QACjJ,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,IAAI,mDAAmD,EAAE,CAAC;QACvI,OAAO,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,MAAM,GAAG,CAAC,CAAC,aAAa,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC,IAAI,MAAM,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,4GAA4G;IAC9G,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC;IAC/H,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,MAAM,GAAG,EAAE,CAAC;IAClF,OAAO,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,gEAAgE;AAEhE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAyC;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;IACzB,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAC5J,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IACpB,gIAAgI;IAChI,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,OAAO;QACL,GAAG,IAAI;QACP,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,EAAoD,EAAE,UAA8B;IACjH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAAoC,EAAE,IAAY,EAAE,UAA8B;IAChH,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,uBAAuB,EAAE,CAAC,MAAM,CAAC,SAAS,qEAAqE,CAAC;IAC7J,IAAI,CAAC,EAAE,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,IAAI,KAAK,QAAQ;QACnB,OAAO,+LAA+L,CAAC;IACzM,IAAI,cAAc,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,MAAM;QACvC,OAAO,kNAAkN,CAAC;IAC5N,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qCAAqC;AAErC,MAAM,QAAQ,GAAG,iCAAiC,CAAC;AAEnD,wIAAwI;AACxI,kIAAkI;AAClI,+FAA+F;AAC/F,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;AAExD,8GAA8G;AAC9G,MAAM,UAAU,aAAa,CAAI,KAAa,EAAE,EAAoB;IAClE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3C,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7B,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;QAClB,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAC/C,wHAAwH;AACxH,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,mHAAmH;AACnH,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACpE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC;AAChF,CAAC;AAED,MAAM,YAAa,SAAQ,KAAK;CAAG;AAEnC,mGAAmG;AACnG,SAAS,WAAW,CAAI,CAAa,EAAE,EAAU;IAC/C,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,EACD,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,EAAE;IAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAC9D,CAAC,CAAC;AAEF,uFAAuF;AACvF,MAAM,UAAU,gBAAgB,CAAC,IAAqC,EAAE,OAAO,GAAG,MAAM,CAAC,OAAO;IAC9F,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACxG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,CActC;IACC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAiC,EAAE,CAAC,CAAC;QAC5D,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,WAAW,CAAC,gBAAgB,IAAI,oBAAoB,KAAK,KAAK,GAAG,iCAAiC,CAAC;KAC5G,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACzE,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IAChB,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC;IACnC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,KAAK,IAAI,CAAC;IAC5C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,SAAkB,EAAE,EAAE,CAC9D,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAEzI,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,GAAG,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACjD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,0EAA0E;IAC1E,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC5C,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,KAAK;YAAE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/G,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzF,eAAe,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,GAAkB,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAEvE,MAAM,IAAI,GAAG,KAAK,IAA+E,EAAE;QACjG,IAAI,CAAC;YACH,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,mGAAmG;YACnG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,wDAAwD,CAAC,CAAC;YACjI,CAAC;YACD,qHAAqH;YACrH,IAAI,IAAI,EAAE,EAAE,CAAC;gBACX,MAAM,WAAW,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACxC,CAAC;YACD,sHAAsH;YACtH,KAAK,GAAG,CAAC,CAAC,cAAc,IAAI,sBAAsB,EAAE,CAAC;YACrD,MAAM,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC,CAAC;YACpH,IAAI,IAAI,EAAE,EAAE,CAAC;gBACX,MAAM,WAAW,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/F,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAErE,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,oHAAoH;YACpH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YAChD,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/B,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1B,KAAK,GAAG,IAAI,CAAC;YACb,+EAA+E;YAC/E,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,0BAA0B,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;YAC/H,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,EAAE;oBAAE,GAAG,CAAC,IAAI,CAAC,uCAAuC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;gBAClH,MAAM,WAAW,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;YACvI,CAAC;YACD,gFAAgF;YAChF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,MAAM,WAAW,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,YAAY,KAAK,GAAG,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,WAAW,EAAE,CAAC;YACpB,kGAAkG;YAClG,IAAI,GAAG,YAAY,sBAAsB;gBAAE,MAAM,GAAG,CAAC;YACrD,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,YAAY,eAAe;gBAC/D,OAAO,IAAI,CAAC,yCAAyC,QAAQ,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACrG,OAAO,IAAI,CACT,oCAAoC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;iBACzF,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;iBACpB,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CACrB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/dist/runner/typed-value.js

@@ -0,0 +1,46 @@
+// What a test typed, and where its name shows up (KAT-392). Playwright titles a typed step with the value itself: `Fill "<value>"`,
+// `Type "<text>"`, `Press "a"` for one key of a password typed key by key. The step reporter streams those titles, the live frames carry
+// them as the label of each screenshot, and a failed fill prints the value in the call log of the error. The value can be any secret the
+// test types, so it is hidden where the label is stored and again where the evidence pack is built.
+const MASK = '[redacted]';
+/** A value already hidden stays as it is, so a second pass changes nothing. */
+const NOT_MASKED = '(?!\\s*\\[redacted\\])';
+/**
+ * A typed value and its closing quote. The closing quote is the one that ends the title or comes before the locator the call ran on, so a quote
+ * inside the value is part of the value. A title with no closing quote at all (a value cut off) is hidden to its end. A quote that is followed by
+ * more words is no typed step: `Fill "Company name" field shows the wrong error` is a sentence, and it stays as written.
+ */
+const VALUE = '(?:[^\\r\\n]*?"(?=\\s*(?:$|(?:getBy\\w+|locator|frameLocator)\\())|(?![^\\r\\n]*")[^\\r\\n]*)';
+/** Title forms: `Fill "x"`, `Fill "x" getByLabel('Password')`, and one key `Press "s"`. The verb starts the title, or follows a `: ` or `› ` of a title path. */
+const TITLE_RULES = [
+    [new RegExp(`(^[ \\t]*(?:[-*]\\s+)?|[:\u203a>]\\s+)(Fill|Type|Insert|Press sequentially)(\\s+)"${NOT_MASKED}${VALUE}`, 'gm'), `$1$2$3"${MASK}"`],
+    [
+        new RegExp(`(^[ \\t]*(?:[-*]\\s+)?|[:\u203a>]\\s+)(Press|Key down|Key up)(\\s+)"${NOT_MASKED}[^"\\r\\n]"(?=\\s*(?:$|(?:getBy\\w+|locator|frameLocator)\\())`, 'gm'),
+        `$1$2$3"${MASK}"`,
+    ],
+];
+const QUOTED = '(?:"(?:\\\\.|[^"\\\\\\r\\n])*"|\'(?:\\\\.|[^\'\\\\\\r\\n])*\'|`(?:\\\\.|[^`\\\\\\r\\n])*`)';
+/**
+ * Call forms, as a call log or a code frame prints them. In order:
+ * - the call log of a failed fill, `  fill("ab"cd")`: Playwright prints the value as it is, so a quote in it is not escaped, and the value runs to the last `")` of the line;
+ * - two arguments, `page.fill('#pw', 'hunter2')`: the second one is the value, the selector stays;
+ * - one argument, `locator.type('x')`, `pressSequentially(`x`)`.
+ */
+const CALL_RULES = [
+    [new RegExp(`^(\\s*(?:-\\s+)?(?:fill|type|pressSequentially|insertText)\\(\\s*)"${NOT_MASKED}[^\\r\\n]*"(\\)\\s*)$`, 'gm'), `$1"${MASK}"$2`],
+    [new RegExp(`\\b((?:fill|type)\\(\\s*${QUOTED}\\s*,\\s*)(["'\`])${NOT_MASKED}(?:\\\\.|(?!\\2)[^\\\\\\r\\n])*\\2`, 'g'), `$1$2${MASK}$2`],
+    [
+        new RegExp(`\\b(fill|type|pressSequentially|insertText)(\\(\\s*)(["'\`])${NOT_MASKED}(?:\\\\.|(?!\\3)[^\\\\\\r\\n])*\\3(?!\\s*,\\s*["'\`])`, 'g'),
+        `$1$2$3${MASK}$3`,
+    ],
+];
+/** The rules the evidence pack scrub runs next to its own. */
+export const TYPED_VALUE_RULES = [...TITLE_RULES, ...CALL_RULES];
+/** The text with every value a test typed replaced by `[redacted]`: `Fill "s3cret" getByLabel('Password')` reads `Fill "[redacted]" getByLabel('Password')`. */
+export function hideTypedValue(text) {
+    let out = text;
+    for (const [re, to] of TYPED_VALUE_RULES)
+        out = out.replace(re, to);
+    return out;
+}
+//# sourceMappingURL=typed-value.js.map

package/dist/runner/typed-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typed-value.js","sourceRoot":"","sources":["../../src/runner/typed-value.ts"],"names":[],"mappings":"AAAA,oIAAoI;AACpI,yIAAyI;AACzI,yIAAyI;AACzI,oGAAoG;AAEpG,MAAM,IAAI,GAAG,YAAY,CAAC;AAC1B,+EAA+E;AAC/E,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C;;;;GAIG;AACH,MAAM,KAAK,GAAG,+FAA+F,CAAC;AAE9G,iKAAiK;AACjK,MAAM,WAAW,GAAuB;IACtC,CAAC,IAAI,MAAM,CAAC,qFAAqF,UAAU,GAAG,KAAK,EAAE,EAAE,IAAI,CAAC,EAAE,UAAU,IAAI,GAAG,CAAC;IAChJ;QACE,IAAI,MAAM,CACR,uEAAuE,UAAU,gEAAgE,EACjJ,IAAI,CACL;QACD,UAAU,IAAI,GAAG;KAClB;CACF,CAAC;AAEF,MAAM,MAAM,GAAG,4FAA4F,CAAC;AAE5G;;;;;GAKG;AACH,MAAM,UAAU,GAAuB;IACrC,CAAC,IAAI,MAAM,CAAC,sEAAsE,UAAU,uBAAuB,EAAE,IAAI,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC;IAC5I,CAAC,IAAI,MAAM,CAAC,2BAA2B,MAAM,qBAAqB,UAAU,oCAAoC,EAAE,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;IACxI;QACE,IAAI,MAAM,CAAC,+DAA+D,UAAU,uDAAuD,EAAE,GAAG,CAAC;QACjJ,SAAS,IAAI,IAAI;KAClB;CACF,CAAC;AAEF,8DAA8D;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAuB,CAAC,GAAG,WAAW,EAAE,GAAG,UAAU,CAAC,CAAC;AAErF,gKAAgK;AAChK,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,iBAAiB;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/runner/verify.js

@@ -0,0 +1,133 @@
+// Checks a commit with GitHub before the runner checks it out and runs its code (KAT-291, KAT-284).
+//
+// A webhook can be forged while GITHUB_WEBHOOK_SECRET is unset, so the event's own claims (a `fork`
+// flag, the branch it names) are not enough to decide that code is safe to run on this machine.
+// Two cases are confirmed against what GitHub says:
+//   - a PR check: the PR's head is this commit, and the head lives in the base repo (not a fork);
+//   - a merge or push run: the commit is contained in the repo's default branch, as GitHub reports it.
+// Anything else, including an API error or no token, means nothing is checked out and nothing runs.
+//
+// Every path that checks out and runs code uses these rules: a fresh clone goes through `verifyCommit`, and a
+// worktree of the dot's working folder (worktree.ts) calls `judgePullHead`, `readPullHead` and `defaultBranchOf`
+// for the same two decisions. They differ only in how containment is proven: a clone asks GitHub to compare the
+// commit with the default branch, a worktree asks git for the ancestry of the fetched default branch.
+import { cleanTestBranches, isSafeBranchName } from './command.js';
+/** A full commit id. A short sha or a ref name is not accepted where git gets a commit. */
+export function isFullSha(s) {
+    return /^[0-9a-f]{40}$/i.test(s);
+}
+/** A branch name that is safe as a git argument: it starts with a letter or digit, so it is never an option. */
+export function isSafeRef(s) {
+    return isSafeBranchName(s);
+}
+/**
+ * The one rule for a merge or push (KAT-292): the commit is checked against the default branch of the repository as
+ * GitHub reports it, unless the event names a branch that the dot lists in `testBranches`. A branch the event names
+ * that is not listed never decides anything. `defaultBranch` comes from GitHub (defaultBranchOf), never from the event.
+ */
+export function pickMergeBranch(defaultBranch, named, testBranches) {
+    const n = (named ?? '').trim();
+    if (!n || n === defaultBranch)
+        return { branch: defaultBranch, listed: false };
+    if (isSafeRef(n) && cleanTestBranches(testBranches).includes(n))
+        return { branch: n, listed: true };
+    return { branch: defaultBranch, listed: false, unlisted: n };
+}
+/** One sentence for a refusal about a commit of an unlisted branch, naming the setting that lists it. */
+export function unlistedBranchNote(branch, defaultBranch) {
+    return `It was sent for branch ${branch.slice(0, 80)}, which is not the default branch (${defaultBranch}) and is not listed in the dot's Test branches setting (testBranches), so only the default branch is tested. Add ${branch.slice(0, 80)} to Test branches under Test runner to test it.`;
+}
+const no = (reason) => ({ ok: false, reason });
+const why = (err) => (err instanceof Error ? err.message : String(err)).replace(/\s+/g, ' ').slice(0, 200);
+const fullName = (repo) => `${repo.owner}/${repo.name}`;
+/** Reads the head of PR `number` from GitHub. Never throws. */
+export async function readPullHead(gh, repo, number) {
+    const unread = `PR #${number} of ${fullName(repo)} could not be checked with GitHub (no GitHub token, or the request failed), so its code was not checked out or run.`;
+    if (gh.mode === 'demo')
+        return { ok: false, reason: unread };
+    let pull;
+    try {
+        pull = await gh.getPull(number);
+    }
+    catch (err) {
+        return { ok: false, reason: unread, detail: why(err) };
+    }
+    if (!pull)
+        return {
+            ok: false,
+            reason: `GitHub has no PR #${number} in ${fullName(repo)}, so PR #${number} could not be checked with GitHub and its code was not checked out or run.`,
+        };
+    const head = pull.payload?.head;
+    const sha = typeof head?.sha === 'string' ? head.sha : '';
+    const headRepo = typeof head?.repo?.full_name === 'string' && head.repo.full_name ? head.repo.full_name : null;
+    return { ok: true, head: { sha, headRepo } };
+}
+/**
+ * The one rule for a PR: its head on GitHub is `sha`, and the head lives in `repo` itself. A deleted head
+ * repository is treated as a fork. Case does not matter in a sha or a repository name.
+ */
+export function judgePullHead(head, repo, number, sha) {
+    const full = fullName(repo);
+    const headSha = head.sha.trim().toLowerCase();
+    if (headSha !== sha.trim().toLowerCase())
+        return no(`GitHub reports another head commit for PR #${number}: the head of PR #${number} is ${headSha ? headSha.slice(0, 12) : 'unknown'}, not ${sha.slice(0, 12)}, so it was not checked out or run.`);
+    if (!head.headRepo || head.headRepo.toLowerCase() !== full.toLowerCase())
+        return no(`PR #${number} does not come from this repository (${full}): its head is in ${head.headRepo || 'a fork that no longer exists'}, so its code was not checked out or run.`);
+    return { ok: true };
+}
+/**
+ * The default branch of `repo` as GitHub reports it, and not the branch an event names. Never throws.
+ * `detail` carries the error text for a caller that may show it.
+ */
+export async function defaultBranchOf(gh, repo, sha) {
+    const full = fullName(repo);
+    let branch;
+    try {
+        branch = await gh.defaultBranchName();
+    }
+    catch (err) {
+        return { ok: false, reason: `GitHub could not report the default branch of ${full}, so ${sha.slice(0, 12)} was not checked out or run.`, detail: why(err) };
+    }
+    if (!isSafeRef(branch))
+        return {
+            ok: false,
+            reason: `GitHub reported a default branch of ${full} that is not a safe branch name, so ${sha.slice(0, 12)} was not checked out or run.`,
+        };
+    return { ok: true, branch };
+}
+/**
+ * Confirms with GitHub that `sha` may be cloned and run for `repo`. Never throws: a failure is a
+ * refusal with a plain reason, because the run must not go ahead on a commit nobody confirmed.
+ */
+export async function verifyCommit(gh, repo, sha, target) {
+    const full = fullName(repo);
+    if (!isFullSha(sha))
+        return no(`The commit "${sha.slice(0, 60)}" is not a full 40 character sha, so it was not checked out.`);
+    if (gh.mode === 'demo')
+        return no(`GitHub is not connected (no token), so ${sha.slice(0, 12)} of ${full} could not be confirmed and was not checked out.`);
+    if (target.kind === 'pr') {
+        const pull = await readPullHead(gh, repo, target.number);
+        if (!pull.ok)
+            return no(pull.detail ? `${pull.reason} (${pull.detail})` : pull.reason);
+        return judgePullHead(pull.head, repo, target.number, sha);
+    }
+    const def = await defaultBranchOf(gh, repo, sha);
+    if (!def.ok)
+        return no(def.detail ? `${def.reason} (${def.detail})` : def.reason);
+    const picked = pickMergeBranch(def.branch, target.named, target.testBranches);
+    const branch = picked.branch;
+    try {
+        // refs/heads/ pins the branch: a bare name could also resolve to a tag of the same name, which anyone with write access can create.
+        const status = await gh.compareStatus(`refs/heads/${branch}`, sha);
+        // base...head: head "behind" or "identical" to the branch is contained in it.
+        if (status === 'behind' || status === 'identical')
+            return { ok: true };
+        const where = picked.listed ? `the test branch ${branch}` : `the default branch (${branch})`;
+        const note = picked.unlisted ? ` ${unlistedBranchNote(picked.unlisted, branch)}` : '';
+        return no(`${sha.slice(0, 12)} is not on ${where} of ${full} (GitHub compare: ${status}), so it was not checked out or run.${note}`);
+    }
+    catch (err) {
+        return no(`GitHub could not compare ${sha.slice(0, 12)} with ${branch} of ${full} (${why(err)}), so it was not checked out or run.`);
+    }
+}
+//# sourceMappingURL=verify.js.map

package/dist/runner/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/runner/verify.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,EAAE;AACF,oGAAoG;AACpG,gGAAgG;AAChG,oDAAoD;AACpD,kGAAkG;AAClG,uGAAuG;AACvG,oGAAoG;AACpG,EAAE;AACF,8GAA8G;AAC9G,iHAAiH;AACjH,gHAAgH;AAChH,sGAAsG;AAGtG,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAgBnE,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,aAAqB,EAAE,KAAyB,EAAE,YAA2C;IAC3H,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC/E,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpG,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,aAAqB;IACtE,OAAO,0BAA0B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sCAAsC,aAAa,oHAAoH,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iDAAiD,CAAC;AAClS,CAAC;AAED,MAAM,EAAE,GAAG,CAAC,MAAc,EAAe,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AACpE,MAAM,GAAG,GAAG,CAAC,GAAY,EAAU,EAAE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5H,MAAM,QAAQ,GAAG,CAAC,IAAqC,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;AAKjG,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAgB,EAAE,IAAqC,EAAE,MAAc;IACxG,MAAM,MAAM,GAAG,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,CAAC,qHAAqH,CAAC;IACvK,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC7D,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,IAAI;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qBAAqB,MAAM,OAAO,QAAQ,CAAC,IAAI,CAAC,YAAY,MAAM,4EAA4E;SACvJ,CAAC;IACJ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAA4E,CAAC;IACxG,MAAM,GAAG,GAAG,OAAO,IAAI,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,OAAO,IAAI,EAAE,IAAI,EAAE,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc,EAAE,IAAqC,EAAE,MAAc,EAAE,GAAW;IAC9G,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,OAAO,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,OAAO,EAAE,CACP,8CAA8C,MAAM,qBAAqB,MAAM,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,qCAAqC,CAC/L,CAAC;IACJ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE;QACtE,OAAO,EAAE,CACP,OAAO,MAAM,wCAAwC,IAAI,qBAAqB,IAAI,CAAC,QAAQ,IAAI,8BAA8B,2CAA2C,CACzK,CAAC;IACJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAgB,EAChB,IAAqC,EACrC,GAAW;IAEX,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,EAAE,CAAC,iBAAiB,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,IAAI,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8BAA8B,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9J,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uCAAuC,IAAI,uCAAuC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8BAA8B;SACzI,CAAC;IACJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAgB,EAAE,IAAqC,EAAE,GAAW,EAAE,MAAiB;IACxH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC,eAAe,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8DAA8D,CAAC,CAAC;IAC9H,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC,0CAA0C,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,kDAAkD,CAAC,CAAC;IAE3J,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,CAAC;QACH,oIAAoI;QACpI,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,cAAc,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACnE,8EAA8E;QAC9E,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC,CAAC,uBAAuB,MAAM,GAAG,CAAC;QAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,KAAK,OAAO,IAAI,qBAAqB,MAAM,uCAAuC,IAAI,EAAE,CAAC,CAAC;IACvI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,CAAC,4BAA4B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,MAAM,OAAO,IAAI,KAAK,GAAG,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IACvI,CAAC;AACH,CAAC"}