@armoriq/sdk-dev 0.3.4 → 0.3.5

package/dist/_build_env.d.ts

@@ -1,13 +1,21 @@
 /**
  * Build-time environment marker (matches armoriq-sdk-customer/_build_env.py).
  *
- * This file is the ONLY difference between the `dev` and `main` branches.
- * Merging dev → main conflicts on the `ARMORIQ_ENV` constant below —
- * that's intentional, so the release owner consciously flips the default
+ * This file is one of two intentional divergence points between the
+ * `dev` and `main` branches. Merging dev → main will conflict here and
+ * in `package.json` (different `version` + `bin` name) — that's
+ * intentional, so the release owner consciously flips both defaults
  * before publishing prod.
  *
- *   main branch  →  ARMORIQ_ENV = "production"  (prod URLs; published as stable)
- *   dev  branch  →  ARMORIQ_ENV = "staging"     (staging URLs; published as -dev)
+ *   main branch  →  ARMORIQ_ENV = "production"  (prod URLs; published as @armoriq/sdk)
+ *                   package.json bin = "armoriq"
+ *   dev  branch  →  ARMORIQ_ENV = "staging"     (staging URLs; published as @armoriq/sdk-dev)
+ *                   package.json bin = "armoriq-dev"
+ *
+ * The dev branch's bin is renamed to `armoriq-dev` so it can coexist
+ * with the prod `@armoriq/sdk` on the same machine without npm-bin
+ * collisions (which would otherwise cause silent PATH shadowing — a
+ * staging-targeted plugin would mint prod-scoped credentials).
  *
  * The baked constant is the branch-baked default. Set ARMORIQ_ENV=local
  * (or staging/production) in your shell to override at runtime. Per-

package/dist/_build_env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_build_env.d.ts","sourceRoot":"","sources":["../src/_build_env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,MAAM,OAAO,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;AAEzD,eAAO,MAAM,WAAW,EAAE,OAAmB,CAAC;AAY9C,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAgBtF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,KAAK,CAAC;AAUvD,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAE1D"}
+{"version":3,"file":"_build_env.d.ts","sourceRoot":"","sources":["../src/_build_env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,MAAM,OAAO,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;AAEzD,eAAO,MAAM,WAAW,EAAE,OAAmB,CAAC;AAY9C,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAgBtF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,KAAK,CAAC;AAUvD,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAE1D"}

package/dist/_build_env.js

@@ -2,13 +2,21 @@
 /**
  * Build-time environment marker (matches armoriq-sdk-customer/_build_env.py).
  *
- * This file is the ONLY difference between the `dev` and `main` branches.
- * Merging dev → main conflicts on the `ARMORIQ_ENV` constant below —
- * that's intentional, so the release owner consciously flips the default
+ * This file is one of two intentional divergence points between the
+ * `dev` and `main` branches. Merging dev → main will conflict here and
+ * in `package.json` (different `version` + `bin` name) — that's
+ * intentional, so the release owner consciously flips both defaults
  * before publishing prod.
  *
- *   main branch  →  ARMORIQ_ENV = "production"  (prod URLs; published as stable)
- *   dev  branch  →  ARMORIQ_ENV = "staging"     (staging URLs; published as -dev)
+ *   main branch  →  ARMORIQ_ENV = "production"  (prod URLs; published as @armoriq/sdk)
+ *                   package.json bin = "armoriq"
+ *   dev  branch  →  ARMORIQ_ENV = "staging"     (staging URLs; published as @armoriq/sdk-dev)
+ *                   package.json bin = "armoriq-dev"
+ *
+ * The dev branch's bin is renamed to `armoriq-dev` so it can coexist
+ * with the prod `@armoriq/sdk` on the same machine without npm-bin
+ * collisions (which would otherwise cause silent PATH shadowing — a
+ * staging-targeted plugin would mint prod-scoped credentials).
  *
  * The baked constant is the branch-baked default. Set ARMORIQ_ENV=local
  * (or staging/production) in your shell to override at runtime. Per-

package/dist/_build_env.js.map

@@ -1 +1 @@
-{"version":3,"file":"_build_env.js","sourceRoot":"","sources":["../src/_build_env.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AA4CH,0CAEC;AA1CY,QAAA,WAAW,GAAY,SAAS,CAAC;AAE9C,oEAAoE;AACpE,UAAU;AACV,gEAAgE;AAChE,gEAAgE;AAChE,gEAAgE;AAChE,aAAa;AACb,qFAAqF;AACrF,qFAAqF;AACrF,sFAAsF;AACtF,2CAA2C;AAC9B,QAAA,SAAS,GAAqE;IACzF,UAAU,EAAE;QACV,OAAO,EAAE,wBAAwB;QACjC,KAAK,EAAE,0BAA0B;QACjC,GAAG,EAAE,wBAAwB;KAC9B;IACD,OAAO,EAAE;QACP,OAAO,EAAE,gCAAgC;QACzC,KAAK,EAAE,oCAAoC;QAC3C,GAAG,EAAE,gCAAgC;KACtC;IACD,KAAK,EAAE;QACL,OAAO,EAAE,uBAAuB;QAChC,KAAK,EAAE,uBAAuB;QAC9B,GAAG,EAAE,uBAAuB;KAC7B;CACF,CAAC;AAIF,SAAS,SAAS;IAChB,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,mBAAW,CAAC;AACrB,CAAC;AAED,SAAgB,eAAe,CAAC,IAAkB;IAChD,OAAO,iBAAS,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"_build_env.js","sourceRoot":"","sources":["../src/_build_env.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AA4CH,0CAEC;AA1CY,QAAA,WAAW,GAAY,SAAS,CAAC;AAE9C,oEAAoE;AACpE,UAAU;AACV,gEAAgE;AAChE,gEAAgE;AAChE,gEAAgE;AAChE,aAAa;AACb,qFAAqF;AACrF,qFAAqF;AACrF,sFAAsF;AACtF,2CAA2C;AAC9B,QAAA,SAAS,GAAqE;IACzF,UAAU,EAAE;QACV,OAAO,EAAE,wBAAwB;QACjC,KAAK,EAAE,0BAA0B;QACjC,GAAG,EAAE,wBAAwB;KAC9B;IACD,OAAO,EAAE;QACP,OAAO,EAAE,gCAAgC;QACzC,KAAK,EAAE,oCAAoC;QAC3C,GAAG,EAAE,gCAAgC;KACtC;IACD,KAAK,EAAE;QACL,OAAO,EAAE,uBAAuB;QAChC,KAAK,EAAE,uBAAuB;QAC9B,GAAG,EAAE,uBAAuB;KAC7B;CACF,CAAC;AAIF,SAAS,SAAS;IAChB,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,mBAAW,CAAC;AACrB,CAAC;AAED,SAAgB,eAAe,CAAC,IAAkB;IAChD,OAAO,iBAAS,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@armoriq/sdk-dev",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "ArmorIQ SDK - Build secure AI agents with cryptographic intent verification.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {
-    "armoriq": "dist/cli/index.js"
+    "armoriq-dev": "dist/cli/index.js"
   },
   "scripts": {
     "build": "tsc",

package/dist/integrations/microsoft_copilot.d.ts

@@ -1,84 +0,0 @@
-/**
- * ArmorIQ - Microsoft Copilot Studio integration (TypeScript).
- *
- * Provides the building blocks for hosting an ArmorCopilot webhook
- * receiver that fronts the Microsoft Copilot Studio external security
- * webhook (`POST /analyze-tool-execution`).
- *
- *   import {
- *     verifyCopilotStudioSignature,
- *     translateCopilotStudioPayload,
- *   } from '@armoriq/sdk/integrations/microsoft_copilot';
- *
- * The MS side sends each tool invocation with an HMAC-SHA256 signature
- * computed over `<timestamp>.<rawBody>` using a shared secret the tenant
- * configured in Copilot Studio admin. We verify, translate the payload
- * to our internal tool-call shape, then run the request through
- * ArmorIQ policy enforcement.
- *
- * The verifier here is pure crypto: it does not call the backend. The
- * caller is responsible for routing the verified request through the
- * regular SDK enforce path (or future plan-less enforce endpoint) once
- * the signature has been confirmed.
- */
-export interface CopilotStudioPayload {
-    userMessage?: string;
-    chatHistory?: Record<string, unknown>;
-    toolDefinition: {
-        name?: string;
-        id?: string;
-        description?: string;
-        [key: string]: unknown;
-    };
-    toolInputValues?: Record<string, unknown>;
-    agentMetadata?: Record<string, unknown>;
-    userMetadata?: Record<string, unknown>;
-    conversationMetadata?: Record<string, unknown>;
-}
-export interface CopilotStudioVerifyArgs {
-    /** Raw HTTP body bytes — must be the exact bytes MS signed, before any JSON re-serialization. */
-    rawBody: Buffer | string;
-    /** Value of `X-ArmorCopilot-Signature` header. Hex string, optionally prefixed `sha256=`. */
-    signature: string;
-    /** Value of `X-ArmorCopilot-Timestamp` header. Unix seconds. */
-    timestamp: string | number;
-    /** Per-tenant shared secret configured in Copilot Studio admin. */
-    secret: string;
-    /** Maximum allowed clock skew in seconds. Defaults to 300 (5 min). */
-    maxSkewSeconds?: number;
-}
-export interface CopilotStudioVerifyResult {
-    ok: boolean;
-    reason?: 'missing-signature' | 'missing-timestamp' | 'invalid-timestamp' | 'timestamp-skew' | 'bad-signature';
-}
-/**
- * Verify the HMAC signature MS Copilot Studio attaches to a webhook
- * request. Pure crypto — no backend calls. Constant-time comparison.
- */
-export declare function verifyCopilotStudioSignature(args: CopilotStudioVerifyArgs): CopilotStudioVerifyResult;
-export interface TranslatedToolCall {
-    toolName: string;
-    args: Record<string, unknown>;
-    userMessage?: string;
-    agentMetadata?: Record<string, unknown>;
-    userMetadata?: Record<string, unknown>;
-    conversationMetadata?: Record<string, unknown>;
-}
-/**
- * Translate a Copilot Studio webhook payload into the
- * `{ toolName, args, ...meta }` shape ArmorIQ enforce paths expect.
- */
-export declare function translateCopilotStudioPayload(payload: CopilotStudioPayload): TranslatedToolCall;
-export interface CopilotStudioDecision {
-    action: 'allow' | 'block';
-    reason?: string;
-}
-/**
- * Sentinel mapping: a non-allow enforce result -> Copilot Studio response.
- */
-export declare function toCopilotStudioDecision(enforced: {
-    allowed: boolean;
-    action?: string;
-    reason?: string;
-}): CopilotStudioDecision;
-//# sourceMappingURL=microsoft_copilot.d.ts.map

package/dist/integrations/microsoft_copilot.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"microsoft_copilot.d.ts","sourceRoot":"","sources":["../../src/integrations/microsoft_copilot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAMH,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,cAAc,EAAE;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,uBAAuB;IACtC,iGAAiG;IACjG,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EACH,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,gBAAgB,GAChB,eAAe,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,uBAAuB,GAC5B,yBAAyB,CAuC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChD;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,oBAAoB,GAC5B,kBAAkB,CAapB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D,qBAAqB,CAKvB"}

package/dist/integrations/microsoft_copilot.js

@@ -1,126 +0,0 @@
-"use strict";
-/**
- * ArmorIQ - Microsoft Copilot Studio integration (TypeScript).
- *
- * Provides the building blocks for hosting an ArmorCopilot webhook
- * receiver that fronts the Microsoft Copilot Studio external security
- * webhook (`POST /analyze-tool-execution`).
- *
- *   import {
- *     verifyCopilotStudioSignature,
- *     translateCopilotStudioPayload,
- *   } from '@armoriq/sdk/integrations/microsoft_copilot';
- *
- * The MS side sends each tool invocation with an HMAC-SHA256 signature
- * computed over `<timestamp>.<rawBody>` using a shared secret the tenant
- * configured in Copilot Studio admin. We verify, translate the payload
- * to our internal tool-call shape, then run the request through
- * ArmorIQ policy enforcement.
- *
- * The verifier here is pure crypto: it does not call the backend. The
- * caller is responsible for routing the verified request through the
- * regular SDK enforce path (or future plan-less enforce endpoint) once
- * the signature has been confirmed.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyCopilotStudioSignature = verifyCopilotStudioSignature;
-exports.translateCopilotStudioPayload = translateCopilotStudioPayload;
-exports.toCopilotStudioDecision = toCopilotStudioDecision;
-const crypto = __importStar(require("crypto"));
-const MAX_SKEW_SECONDS = 300;
-/**
- * Verify the HMAC signature MS Copilot Studio attaches to a webhook
- * request. Pure crypto — no backend calls. Constant-time comparison.
- */
-function verifyCopilotStudioSignature(args) {
-    if (!args.signature)
-        return { ok: false, reason: 'missing-signature' };
-    if (args.timestamp === undefined || args.timestamp === null) {
-        return { ok: false, reason: 'missing-timestamp' };
-    }
-    const tsNum = typeof args.timestamp === 'number'
-        ? args.timestamp
-        : Number(args.timestamp);
-    if (Number.isNaN(tsNum)) {
-        return { ok: false, reason: 'invalid-timestamp' };
-    }
-    const drift = Math.abs(Date.now() / 1000 - tsNum);
-    const maxSkew = args.maxSkewSeconds ?? MAX_SKEW_SECONDS;
-    if (drift > maxSkew)
-        return { ok: false, reason: 'timestamp-skew' };
-    const body = typeof args.rawBody === 'string'
-        ? args.rawBody
-        : args.rawBody.toString('utf8');
-    const expected = crypto
-        .createHmac('sha256', args.secret)
-        .update(`${tsNum}.${body}`)
-        .digest('hex');
-    const provided = args.signature.startsWith('sha256=')
-        ? args.signature.slice(7)
-        : args.signature;
-    if (provided.length !== expected.length) {
-        return { ok: false, reason: 'bad-signature' };
-    }
-    const match = crypto.timingSafeEqual(Buffer.from(provided, 'hex'), Buffer.from(expected, 'hex'));
-    return match ? { ok: true } : { ok: false, reason: 'bad-signature' };
-}
-/**
- * Translate a Copilot Studio webhook payload into the
- * `{ toolName, args, ...meta }` shape ArmorIQ enforce paths expect.
- */
-function translateCopilotStudioPayload(payload) {
-    const toolName = payload.toolDefinition?.name ??
-        payload.toolDefinition?.id ??
-        'unknown';
-    return {
-        toolName: String(toolName),
-        args: payload.toolInputValues ?? {},
-        userMessage: payload.userMessage,
-        agentMetadata: payload.agentMetadata,
-        userMetadata: payload.userMetadata,
-        conversationMetadata: payload.conversationMetadata,
-    };
-}
-/**
- * Sentinel mapping: a non-allow enforce result -> Copilot Studio response.
- */
-function toCopilotStudioDecision(enforced) {
-    if (enforced.allowed && enforced.action !== 'block') {
-        return { action: 'allow' };
-    }
-    return { action: 'block', reason: enforced.reason };
-}
-//# sourceMappingURL=microsoft_copilot.js.map

package/dist/integrations/microsoft_copilot.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"microsoft_copilot.js","sourceRoot":"","sources":["../../src/integrations/microsoft_copilot.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgDH,oEAyCC;AAeD,sEAeC;AAUD,0DAOC;AAtID,+CAAiC;AAEjC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAwC7B;;;GAGG;AACH,SAAgB,4BAA4B,CAC1C,IAA6B;IAE7B,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACvE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,KAAK,GACT,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAChC,CAAC,CAAC,IAAI,CAAC,SAAS;QAChB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,gBAAgB,CAAC;IACxD,IAAI,KAAK,GAAG,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAEpE,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM;SACpB,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;SACjC,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;IAEnB,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAClC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAC5B,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAC7B,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AACvE,CAAC;AAWD;;;GAGG;AACH,SAAgB,6BAA6B,CAC3C,OAA6B;IAE7B,MAAM,QAAQ,GACZ,OAAO,CAAC,cAAc,EAAE,IAAI;QAC5B,OAAO,CAAC,cAAc,EAAE,EAAE;QAC1B,SAAS,CAAC;IACZ,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC1B,IAAI,EAAE,OAAO,CAAC,eAAe,IAAI,EAAE;QACnC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;KACnD,CAAC;AACJ,CAAC;AAOD;;GAEG;AACH,SAAgB,uBAAuB,CACrC,QAAgE;IAEhE,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AACtD,CAAC"}