@aimarket/warden 0.21.0 → 0.22.1

package/dist/flow-guard.d.ts

@@ -1,398 +1,26 @@
-export type FlowLabel = 'private' | 'untrusted' | 'outbound' | 'destructive';
-export type FlowMode = 'ask' | 'deny' | 'audit' | 'off';
-/** When the Stop hook tells the user that an answer drew on outside text. */
-export type AnswerNote = 'always' | 'instruction' | 'off';
-export interface GuiActionRule {
-    /** Exact MCP tool name; no globs. */
-    tool: string;
-    action: 'click' | 'type' | 'key';
-    target: {
-        role: string;
-        accessibilityId: string;
-    };
-    /** At least one scope is required; both, when present, must match. */
-    context: {
-        origin?: string;
-        application?: string;
-    };
-    /** One supported navigation chord, required for key rules. */
-    keys?: string;
-    /** Required for type rules, measured in UTF-16 code units. */
-    maxTextLength?: number;
-}
-export interface GuiPolicy {
-    mode: 'strict' | 'policy';
-    maxSnapshotAgeMs: number;
-    allow: GuiActionRule[];
-    /** Parser diagnostic, not a configurable field. */
-    invalid?: true;
-}
-export interface PublicRequestRule {
-    tool: string;
-    requestSha256: string;
-}
-export interface CredentialEgressPolicy {
-    allow: PublicRequestRule[];
-    invalid?: true;
-}
-export interface TaskAdapterPolicy {
-    mode: 'strict' | 'capabilities' | 'review';
-    /** Operator-controlled MCP server name, bound to WARDEN's built-in `task` command. */
-    server: string;
-    /** Pins <state dir>/task-manifest.json, never a page-supplied manifest. */
-    manifestSha256: string;
-    invalid?: true;
-}
-export interface FlowPolicy {
-    mode: FlowMode;
-    /** Tool-name globs → the labels an operator assigns; replaces the built-in guess for that tool. */
-    labels: Record<string, FlowLabel[]>;
-    /** Hosts whose content does not taint the session (docs you trust). `*.example.com` covers subdomains. */
-    trustedSources: string[];
-    /** Hosts an outbound call may reach in a tainted session without asking. Fingerprint checks and the credential boundary still apply. */
-    allowedDestinations: string[];
-    /** Treat every local file the agent reads as outside text (strict). Default: only foreign paths. */
-    taintLocalFiles: boolean;
-    /** Tool-name globs → argument names whose values are destinations or targets (recipient, file id). */
-    destinationArgs: Record<string, string[]>;
-    /** Explicitly trusted, read-only contact lookup tools. Results must contain structured name/email records. */
-    contactTools?: string[];
-    /** Stop hook: name the outside text a turn read (always), only text that addressed the model (instruction), or stay silent. */
-    answerNote: AnswerNote;
-    /** Legacy schema, parsed for migration only. Untrusted GUI metadata never grants permission. */
-    gui?: GuiPolicy;
-    /** Reviewed exact public requests, each usable once per session after a credential read. */
-    credentialEgress?: CredentialEgressPolicy;
-    taskAdapter?: TaskAdapterPolicy;
-}
-export interface FlowSource {
-    tool: string;
-    src: string;
-    at: string; /** The text addressed the model as if instructing it. */
-    hint?: boolean; /** The user's prompt count when it was read. */
-    turn?: number;
-}
-/** The last characters each argument sent out this session, so a value split over several calls is seen whole. */
-export interface OutTail {
-    t: string;
-    a: string;
-}
-export interface FragmentRecord {
-    group: string;
-    hash: string;
-    offset: number;
-    size?: number;
-    edge?: true;
-}
-export interface FlowState {
-    v: 1;
-    untrusted: FlowSource[];
-    private: Array<FlowSource & {
-        secret: boolean;
-    }>;
-    notified: boolean;
-    /** Fingerprint store reached its cap: later private reads are not fingerprinted. */
-    full: boolean;
-    /** What the user typed this session (normalized, capped): a destination named here is the user's choice. */
-    intent?: string[];
-    /** The same, lower-cased with spacing kept, for whole-word matches of short names and numbers. */
-    intentRaw?: string[];
-    /** Addresses resolved by explicitly trusted contact tools, bound to full display names. */
-    resolved?: Array<{
-        v: string;
-        names: string[];
-    }>;
-    resolvedVersion?: 2;
-    /** Per argument name: the tail of what outbound calls carried after outside text (see OutTail). */
-    tails?: Record<string, OutTail>;
-    /** Hash-only short-fragment index and observations, shared by every proxy in this session. */
-    fragments?: {
-        v: 1 | 2;
-        index: FragmentRecord[];
-        seen: FragmentRecord[];
-        full?: true;
-    };
-    /** How many prompts the user has sent: the Stop hook names only outside text read in the latest turn. */
-    turn?: number;
-    /** MCP tools seen without an operator label, with the labels the guard guessed (`warden-mcp flow-labels`). */
-    unlabeled?: Record<string, FlowLabel[]>;
-    /** Per MCP server: what its latest screen result showed, so a click is judged by its target (see ScreenView). */
-    screens?: Record<string, ScreenView>;
-    /** A forwarded input/paste may have populated an outbound form. Never reset within the session. */
-    guiInputSeen?: true;
-    /** Sticky even when the bounded private-source history rotates. */
-    credentialRead?: true;
-    /** Exact public-request grants already consumed; never reset by prompts. */
-    credentialGrants?: string[];
-}
-export interface Classified {
-    labels: Set<FlowLabel>;
-    /** Hosts named in the call (URLs, ssh/scp targets). */
-    hosts: string[];
-    /** For results: a short description of where the text came from. */
-    src: string;
-    /** Private read of a credential path. */
-    secret: boolean;
-    /** The call writes WARDEN's policy/state or Claude Code's hook/MCP settings. */
-    protectedTouch: boolean;
-    /** Shell code that is not a small literal read-only command. Destination exemptions never apply. */
-    opaqueShell?: boolean;
-    /** An MCP tool without an operator label: its labels are the guard's guess. */
-    guessed?: boolean;
-}
-export interface FlowDecision {
-    permissionDecision: 'ask' | 'deny';
-    permissionDecisionReason: string;
-}
-/** Set by the integration, never by tool arguments. A proxy cannot display an approval dialog itself; `elicit` is
- *  `wrap` asking through the client's own form (MCP elicitation), whose answer it records with flowApproval. */
-export type FlowPresentation = 'hook' | 'refuse' | 'audit' | 'elicit';
-export declare const DEFAULT_POLICY: FlowPolicy;
-export declare function stateDir(env?: NodeJS.ProcessEnv): string;
-export declare function flowPaths(dir: string, sessionId: string): {
-    dir: string;
-    state: string;
-    fp: string;
-    secret: string;
-    pii: string;
-    tok: string;
-    hint: string;
-    log: string;
-};
-export declare function isSecretPath(path: string): boolean;
-/** Files that, if the agent could change them, would let it switch the guard off. */
-export declare function isProtectedPath(path: string, cwd: string, env?: NodeJS.ProcessEnv): boolean;
-/** User-level policy only (`<state dir>/flow-policy.json`): a project file is something the agent can edit. */
-export declare function loadPolicy(env?: NodeJS.ProcessEnv): FlowPolicy;
-/** Read bounded, pinned operator configuration. The task runtime additionally validates the complete schema. */
-export declare function readPinnedTaskManifest(policy: FlowPolicy, env?: NodeJS.ProcessEnv): string;
-/** Sorted JSON keys; array order and every argument/destination are significant. Never hashes a truncated input. */
-export declare function publicRequestDigest(tool: string, input: Record<string, unknown>): string | undefined;
-export declare function hostMatches(host: string, patterns: readonly string[]): boolean;
-export declare function hostsIn(texts: readonly string[]): string[];
-export declare function classifyShell(command: string): {
-    labels: Set<FlowLabel>;
-    hosts: string[];
-    local: boolean;
-};
-export declare function classifyCall(toolName: string, input: Record<string, unknown>, cwd: string, policy: FlowPolicy, env?: NodeJS.ProcessEnv): Classified;
-/** What a screen tool last showed: element references → their labels (role and quoted text), and window or page
- *  titles. Labels are outside text: only a recognized canonical action word is shown in a prompt. */
-interface ScreenPoint {
-    x: number;
-    y: number;
-}
-interface ScreenBox extends ScreenPoint {
-    width: number;
-    height: number;
-}
-interface ScreenElement {
-    role?: string;
-    bounds?: ScreenBox;
-    center?: ScreenPoint;
-    focused?: true;
-    multiline?: boolean;
-    form?: string;
-    identifierVerb?: string;
-    identifierDestroy?: string;
-    submit?: true;
-    ambiguous?: true;
-    identityHash?: string;
-    referenceHash?: string;
-    labelHash?: string;
-}
-export interface ScreenView {
-    at: string;
-    tool: string;
-    refs: Record<string, string>;
-    titles: string[];
-    elements?: Record<string, ScreenElement>;
-    focused?: string;
-    origin?: string;
-    application?: string;
-    revision?: string;
-    policyConsumed?: true;
-    policyComplete?: true;
-    contextAmbiguous?: true;
-}
-/** How a pointer or keyboard call on a screen server reads: what its target says it does, and a paste after a credential. */
-export interface ScreenCall {
-    verb?: string;
-    destroy?: string;
-    ref?: string;
-    paste?: FlowSource & {
-        secret: boolean;
-    };
-    guarded?: 'pointer' | 'paste' | 'enter' | 'text' | 'keyboard' | 'control';
-    via?: 'coordinates' | 'focus';
-    evidence?: 'identifier' | 'form' | 'semantic';
-}
-/** The elements and titles a screen tool's result shows, or undefined when the result is not a screen. A screen
- *  tool's result always replaces the server's last view, even when it is only an image: a stale list must not
- *  label the next click. Numbered lists also count from pointer/keyboard action results; acknowledgments alone
- *  keep the previous view, while an image-only action result clears it. `[ref=…]` lines and JSON nodes with a role
- *  count from any tool, since they are what accessibility trees look like. */
-export declare function screenFromResult(toolName: string, response: unknown, text: string, input?: Record<string, unknown>): Omit<ScreenView, 'at' | 'tool'> | undefined;
-/** A pointer or keyboard call to an MCP screen server, read against that server's last screen. */
-export declare function screenCall(toolName: string, input: Record<string, unknown>, state: FlowState): ScreenCall | undefined;
-/** Operator-selected observation schema only. Never infer read authority from tool annotations. */
-export declare function screenObservation(toolName: string, input: Record<string, unknown>): boolean;
-/** Equality evidence for a new observation, not permission and not an attestation of GUI effects. */
-export declare function screenTargetEvidence(toolName: string, input: Record<string, unknown>, view: ScreenView | undefined): {
-    stamp: string;
-    target: string;
-} | undefined;
-export declare function screenTargetStamp(toolName: string, input: Record<string, unknown>, view: ScreenView | undefined): string | undefined;
-export declare function screenResponseEvidence(actionTool: string, action: Record<string, unknown>, observationTool: string, observation: Record<string, unknown>, response: unknown): {
-    stamp: string;
-    target: string;
-} | undefined;
-/** Derive equality evidence from this response itself, never a concurrently replaced cached view. */
-export declare function screenResponseStamp(actionTool: string, action: Record<string, unknown>, observationTool: string, observation: Record<string, unknown>, response: unknown): string | undefined;
-/** A credential read that a screen server's calls reveal: a credential path typed (into an open dialog, a
- *  terminal, an address bar) or a window or page title naming a credential file. Only the file name is kept. */
-export declare function screenSecretRead(toolName: string, input: Record<string, unknown>, view: Omit<ScreenView, 'at' | 'tool'> | undefined): string | undefined;
-export declare function destinations(toolName: string, input: Record<string, unknown>, policy: FlowPolicy, hosts: readonly string[]): string[];
-/**
- * The operator named this tool's destination arguments and the call sets none of them: it acts on an
- * existing relationship (change the amount of a standing order, not its payee), so no new party is reached.
- * Unconfigured tools never qualify: without the operator's word, an absent argument proves nothing.
- */
-export declare function keepsDestination(toolName: string, input: Record<string, unknown>, policy: FlowPolicy): boolean;
-/** Only structured records from explicitly configured contact tools may resolve a full display name.
- * Arbitrary prose, YAML, capitalized words and local file reads cannot create authority. */
-export declare function resolvedContacts(value: unknown, depth?: number): Array<{
-    v: string;
-    names: string[];
-}>;
-export declare function namedByUser(dests: readonly string[], intent: readonly string[] | undefined, intentRaw?: readonly string[], resolved?: FlowState['resolved']): boolean;
-export declare function resultTaints(toolName: string, input: Record<string, unknown>, responseText: string, cwd: string, policy: FlowPolicy, classified: Classified): {
-    untrusted: boolean;
-    private: boolean;
-    src: string;
-};
-export declare function normalizeText(s: string): string;
-/** Windows of the private text at every STRIDE-th position: any leaked run of WINDOW+STRIDE-1 normalized chars hits one. */
-export declare function fingerprints(text: string): string[];
-/** Only explicit character lists are decoded, never arbitrary prose. Unknown items end a run.
- * English digit names and case markers cover the recorded attack, not arbitrary verbal encodings. */
-export declare function spelledCandidates(text: string): string[];
-/** Decimal scalar codes, in a contiguous explicit list. Unknown/invalid items terminate a run.
- * Merely decoding public numbers does not block anything: existing secret/private fingerprints still decide. */
-export declare function characterCodeCandidates(text: string): string[];
-/** A small explicit spelling grammar, not a language model. Preserve explicit case for nested base64. */
-export declare function natoCandidates(text: string): string[];
-/** Reversible text encodings only: bounded breadth/depth, no eval or decompression. Exhaustion is explicit. */
-export declare function scanCandidates(texts: readonly string[]): {
-    values: string[];
-    incomplete: boolean;
-};
-/** Compatibility helper: enforcement uses scanCandidates() so truncation is never mistaken for a clean scan. */
-export declare function candidates(texts: readonly string[]): string[];
-export declare function piiTokens(text: string): string[];
-export declare function secretPattern(texts: readonly string[]): string | undefined;
-/** Key-like values in private text: every random-looking run of a credential file, and every well-known
- * secret format wherever it was read. Words, paths and host names are not random enough to count. */
-export declare function secretValues(text: string, credentialFile: boolean): string[];
-/** Normalized credentials for the original strong-window check. Raw values exist only transiently. */
-export declare function secretTokens(text: string, credentialFile: boolean): string[];
-/** Windows that hold both a letter and a digit, so an ordinary word is never a piece of a key. A window never
- * starts in the key's leading letters ("sk-ant-api03" or "rk_live" is a format every such key shares), never in the
- * first 48 characters of a DER key or certificate (its header and algorithm), and never lies inside KEY_STRUCTURE. */
-export declare function tokenFingerprints(tokens: readonly string[]): string[];
-/** Weak evidence asks before its first transmission, never silently learns by sending it.
- * Five-char windows require upper/lower/digit classes in the source, while 6/7-char atoms may be words.
- * Exact prefix-boundary slices cover chunks that already contain payload but no full six-char window.
- * Only hash/offset/size metadata is persisted; public format and DER structure alone do not count. */
-export declare function fragmentFingerprints(tokens: readonly string[], limit?: number): FragmentRecord[];
-/** Must run under the session lock when remembering evidence. Audit never consumes or whitelists a match. */
-export declare function checkFragments(input: Record<string, unknown>, state: FlowState, hasLegacyTokens: boolean, remember: boolean): {
-    secret?: string;
-    review?: boolean;
-    unavailable?: boolean;
-};
-/** Every window of letters and digits of both token sizes, forwards and backwards: what a call is checked by. */
-export declare function tokenWindows(text: string): string[];
-interface FpStores {
-    secret: Set<string>;
-    fp: Set<string>;
-    pii: Set<string>;
-    tok: Set<string>;
-}
-export interface LeakCheck {
-    secret?: string;
-    private?: boolean;
-    pii?: boolean;
-    incomplete?: boolean;
-}
-/** `typed`: what the user typed this session. A value the user typed is theirs to send; it is skipped
- * for ordinary private text, never for secrets. */
-export declare function checkLeak(paths: ReturnType<typeof flowPaths>, input: Record<string, unknown>, typed?: readonly string[], stores?: FpStores): LeakCheck;
-/**
- * A value sent in pieces, one call each, is checked whole: each argument name keeps the tail of what it carried,
- * and the windows that cross from that tail into this call are checked like any other. Only pieces sent back to back
- * through the same argument join; words between them break the run. Returns the new tails.
- */
-export declare function checkStream(input: Record<string, unknown>, tails: Readonly<Record<string, OutTail>>, stores: FpStores): {
-    leak: LeakCheck;
-    next: Record<string, OutTail>;
-};
-export declare function readFlowState(path: string): FlowState;
-export declare function updateFlowState(path: string, change: (s: FlowState) => void): FlowState;
-export declare function flowPre(input: Record<string, unknown>, env?: NodeJS.ProcessEnv, presentation?: FlowPresentation): FlowDecision | undefined;
-/** What the person answered when `wrap` asked through the client (presentation `elicit`): the one case where the
- *  guard knows the outcome rather than inferring it. */
-export declare function flowApproval(input: {
-    session_id: string;
-    tool_name: string;
-}, outcome: string, env?: NodeJS.ProcessEnv): void;
-export declare function flowScreenValidation(input: {
-    session_id: string;
-    tool_name: string;
-}, outcome: 'unchanged' | 'refused_without_approval' | 'refused_after_approval' | 'execution_uncertain' | 'atomic_committed' | 'atomic_refused', env?: NodeJS.ProcessEnv): void;
-export interface FlowPostOutput {
-    systemMessage?: string;
-    additionalContext?: string;
-}
-export declare function flowPost(input: Record<string, unknown>, env?: NodeJS.ProcessEnv): FlowPostOutput | undefined;
-/** UserPromptSubmit: remember what the user asked for, so destinations they named are theirs. */
-/**
- * The user's own words in a prompt: what is left after text they pasted or quoted. An address that appears only in
- * a pasted block, a quoted line or the headers of a forwarded message was written by someone else, and naming it
- * is what an attacker who mails the user would want. Asking once before writing to it is the price when the user
- * meant it ("reply to the sender of this").
- */
-export declare function ownWords(prompt: string): string;
-export declare function flowPrompt(input: Record<string, unknown>, env?: NodeJS.ProcessEnv): void;
-/** The sentence in which outside text addresses the model, from the instruction to the sentence's end. Not the
- * sentences around it: in a list of reviews they are ordinary reviews, which an honest answer repeats. */
-export declare function instructionText(text: string): string;
-/** The text of the last assistant message: given directly, or read from the end of the Claude Code transcript. */
-export declare function lastAnswer(input: Record<string, unknown>): string;
-export interface FlowStopOutput {
-    systemMessage?: string;
-    decision?: 'block';
-    reason?: string;
-}
-/**
- * Stop: an injection that only changes the answer ("recommend this hotel") makes no call to refuse. Two levers are
- * left. Under any answer whose turn read outside text, one line tells the user which sources it drew on. And when
- * the answer repeats words from text that addressed the model with instructions, the answer goes back to the model
- * once to be checked against the user's request (`decision: block` makes Claude Code continue); the user loses
- * nothing but the time of that check.
- */
-export declare function flowStop(input: Record<string, unknown>, env?: NodeJS.ProcessEnv): FlowStopOutput | undefined;
-/** MCP tools that sessions used without an operator label, with the guard's guess and the sessions that used them. */
-export declare function unlabeledTools(env?: NodeJS.ProcessEnv): Array<{
-    tool: string;
-    guessed: FlowLabel[];
-    sessions: number;
-}>;
-/** `warden-mcp flow-labels`: the unlabeled tools, and a labels block to review and paste into the policy file. */
-export declare function flowLabelsReport(env?: NodeJS.ProcessEnv): string;
+export type { FlowLabel, FlowMode, AnswerNote, GuiActionRule, GuiPolicy, PublicRequestRule, CredentialEgressPolicy, TaskAdapterPolicy, FlowPolicy, FlowSource, OutTail, FragmentRecord, FlowState, Classified, FlowDecision, FlowPresentation } from './flow-guard-types.js';
+export { stateDir, flowPaths, isSecretPath, isProtectedPath } from './flow-guard-paths.js';
+export { DEFAULT_POLICY, loadPolicy, readPinnedTaskManifest, publicRequestDigest, hostMatches } from './flow-guard-policy.js';
+export { hostsIn } from './flow-guard-text.js';
+export { classifyShell, classifyCall, resultTaints } from './flow-guard-classify.js';
+export type { ScreenView, ScreenCall } from './flow-guard-screen.js';
+export { screenFromResult, screenCall, screenObservation, screenTargetEvidence, screenTargetStamp, screenResponseEvidence, screenResponseStamp, screenSecretRead } from './flow-guard-screen.js';
+export { destinations, keepsDestination, resolvedContacts, namedByUser } from './flow-guard-destinations.js';
+export { normalizeText, fingerprints, piiTokens, secretPattern, secretValues, secretTokens, tokenFingerprints, tokenWindows } from './flow-guard-fingerprints.js';
+export { spelledCandidates, characterCodeCandidates, natoCandidates, scanCandidates, candidates } from './flow-guard-decode.js';
+export { fragmentFingerprints, checkFragments } from './flow-guard-fragments.js';
+export type { LeakCheck } from './flow-guard-leak.js';
+export { checkLeak, checkStream } from './flow-guard-leak.js';
+export { readFlowState, updateFlowState, flowStateExists } from './flow-guard-state.js';
+export { flowPre, flowApproval, flowScreenValidation } from './flow-guard-pre.js';
+export type { FlowPostOutput } from './flow-guard-post.js';
+export { flowPost } from './flow-guard-post.js';
+export type { FlowStopOutput } from './flow-guard-answer.js';
+export { ownWords, flowPrompt, instructionText, lastAnswer, flowStop } from './flow-guard-answer.js';
+export type { AnswerConstraintCheck, ConstraintViolation, ConstraintEvidence } from './flow-guard-constraints.js';
+export { checkAnswerConstraints } from './flow-guard-constraints.js';
+export { unlabeledTools, flowLabelsReport } from './flow-guard-labels.js';
 /** Hook runner shared by the CLI and the plugin script: `pre`, `post`, `prompt` or `stop`, hook JSON on stdin, decision JSON on stdout. */
 export declare function runFlowHook(event: string, stdin: string, env?: NodeJS.ProcessEnv): string | undefined;
 export declare function flowGuardMain(argv?: string[]): void;
-export declare function flowStateExists(sessionId: string, env?: NodeJS.ProcessEnv): boolean;
-export {};
 //# sourceMappingURL=flow-guard.d.ts.map

package/dist/flow-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flow-guard.d.ts","sourceRoot":"","sources":["../src/flow-guard.ts"],"names":[],"mappings":"AA8BA,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;AAC7E,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;AACxD,6EAA6E;AAC7E,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,aAAa,GAAG,KAAK,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;IACjC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,sEAAsE;IACtE,OAAO,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AACD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,mDAAmD;IACnD,OAAO,CAAC,EAAE,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE;AAC1E,MAAM,WAAW,sBAAsB;IAAG,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,IAAI,CAAA;CAAE;AACtF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,QAAQ,GAAG,cAAc,GAAG,QAAQ,CAAC;IAC3C,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,IAAI,CAAC;CAChB;AACD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,QAAQ,CAAC;IACf,mGAAmG;IACnG,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,0GAA0G;IAC1G,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,wIAAwI;IACxI,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,oGAAoG;IACpG,eAAe,EAAE,OAAO,CAAC;IACzB,sGAAsG;IACtG,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,8GAA8G;IAC9G,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,+HAA+H;IAC/H,UAAU,EAAE,UAAU,CAAC;IACvB,gGAAgG;IAChG,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,4FAA4F;IAC5F,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC,CAAC,yDAAyD;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,gDAAgD;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AAC/M,kHAAkH;AAClH,MAAM,WAAW,OAAO;IAAG,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AACjD,MAAM,WAAW,cAAc;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,IAAI,CAAA;CAAE;AAC3G,MAAM,WAAW,SAAS;IACxB,CAAC,EAAE,CAAC,CAAC;IACL,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,OAAO,EAAE,KAAK,CAAC,UAAU,GAAG;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACjD,QAAQ,EAAE,OAAO,CAAC;IAClB,oFAAoF;IACpF,IAAI,EAAE,OAAO,CAAC;IACd,4GAA4G;IAC5G,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,kGAAkG;IAClG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACjD,eAAe,CAAC,EAAE,CAAC,CAAC;IACpB,mGAAmG;IACnG,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,8FAA8F;IAC9F,SAAS,CAAC,EAAE;QAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAAC,KAAK,EAAE,cAAc,EAAE,CAAC;QAAC,IAAI,EAAE,cAAc,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,IAAI,CAAA;KAAE,CAAC;IACvF,yGAAyG;IACzG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8GAA8G;IAC9G,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACxC,iHAAiH;IACjH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,mGAAmG;IACnG,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB,mEAAmE;IACnE,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACvB,uDAAuD;IACvD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAC;IAChB,gFAAgF;IAChF,cAAc,EAAE,OAAO,CAAC;IACxB,oGAAoG;IACpG,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAAG,kBAAkB,EAAE,KAAK,GAAG,MAAM,CAAC;IAAC,wBAAwB,EAAE,MAAM,CAAA;CAAE;AACtG;gHACgH;AAChH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAuCtE,eAAO,MAAM,cAAc,EAAE,UAAwJ,CAAC;AAKtL,wBAAgB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAErE;AAMD,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;;;;;;;;;EAIvD;AA+BD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD;AAID,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAaxG;AAQD,+GAA+G;AAC/G,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,UAAU,CA4B3E;AAaD,gHAAgH;AAChH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAavG;AAqCD,oHAAoH;AACpH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAepG;AAOD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAM9E;AA8BD,wBAAgB,OAAO,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAM1D;AAiCD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CA0B1G;AAoCD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,UAAU,CA0DhK;AASD;qGACqG;AACrG,UAAU,WAAW;IAAG,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AAC9C,UAAU,SAAU,SAAQ,WAAW;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACzE,UAAU,aAAa;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,OAAO,CAAC,EAAE,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAC5G,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IACrF,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnE;AACD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,IAAI,CAAC;IAAC,cAAc,CAAC,EAAE,IAAI,CAAC;IACvG,gBAAgB,CAAC,EAAE,IAAI,CAAC;CACzB;AACD,6HAA6H;AAC7H,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,UAAU,GAAG;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IACxF,OAAO,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAC1E,GAAG,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,MAAM,GAAG,UAAU,CAAC;CAC9E;AAiLD;;;;8EAI8E;AAC9E,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC,GAAG,SAAS,CA8EpK;AAED,kGAAkG;AAClG,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CA2DrH;AAED,mGAAmG;AACnG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAI3F;AAED,qGAAqG;AACrG,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAwClK;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAEpI;AAED,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAK3N;AAED,qGAAqG;AACrG,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE7L;AAsCD;gHACgH;AAChH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAiBxJ;AAwBD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAmBrI;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAO9G;AASD;4FAC4F;AAC5F,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,KAAK,CAAC;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAiBjG;AA0BD,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAAE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG,OAAO,CAoBrK;AAKD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAkBnN;AAID,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/C;AAMD,4HAA4H;AAC5H,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CASnD;AAED;qGACqG;AACrG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAYxD;AAED;gHACgH;AAChH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAW9D;AASD,yGAAyG;AACzG,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAcrD;AAED,+GAA+G;AAC/G,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CA0ClG;AAED,gHAAgH;AAChH,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAAyC;AAMvG,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAiBhD;AAoBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAG1E;AAqBD;qGACqG;AACrG,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,GAAG,MAAM,EAAE,CAa5E;AAED,sGAAsG;AACtG,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,GAAG,MAAM,EAAE,CAE5E;AAED;;sHAEsH;AACtH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAWrE;AAQD;;;sGAGsG;AACtG,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,SAAqB,GAAG,cAAc,EAAE,CA6B5G;AA+BD,6GAA6G;AAC7G,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,CAwB1L;AAED,iHAAiH;AACjH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMnD;AA2BD,UAAU,QAAQ;IAAG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAE;AAK/F,MAAM,WAAW,SAAS;IAAG,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE;AACtG;mDACmD;AACnD,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,GAAE,SAAS,MAAM,EAAO,EAAE,MAAM,GAAE,QAA4B,GAAG,SAAS,CAkB7K;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAgC1K;AAMD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAsBrD;AA0BD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,SAAS,KAAK,IAAI,GAAG,SAAS,CASvF;AAmGD,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,YAAY,GAAE,gBAAyB,GAAG,YAAY,GAAG,SAAS,CAkL/J;AAED;wDACwD;AACxD,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAG1I;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,EAAE,WAAW,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,kBAAkB,GAAG,gBAAgB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAE/Q;AAED,MAAM,WAAW,cAAc;IAAG,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE;AAEtF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,GAAG,SAAS,CAuFzH;AAED,iGAAiG;AACjG;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAU/C;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAqBrG;AAED;0GAC0G;AAC1G,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiBpD;AASD,kHAAkH;AAClH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAwBjE;AAED,MAAM,WAAW,cAAc;IAAG,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AAE/F;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,GAAG,SAAS,CAqCzH;AAED,sHAAsH;AACtH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBpI;AAED,kHAAkH;AAClH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAgB7E;AAED,2IAA2I;AAC3I,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAgBlH;AAED,wBAAgB,aAAa,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,IAAI,CAY1E;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEhG"}
+{"version":3,"file":"flow-guard.d.ts","sourceRoot":"","sources":["../src/flow-guard.ts"],"names":[],"mappings":"AAmCA,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC7Q,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC9H,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACrF,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACjM,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC7G,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAClK,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAChI,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACjF,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAClF,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACrG,YAAY,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAClH,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1E,2IAA2I;AAC3I,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAgBlH;AAED,wBAAgB,aAAa,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,IAAI,CAY1E"}