@connexum/ai-governance 1.0.0-beta.11

package/dist/ide-adapters/copilot-studio.d.ts

@@ -0,0 +1,310 @@
+/**
+ * CopilotStudioAdapter -- Microsoft Copilot Studio IDE adapter.
+ *
+ * Microsoft Copilot Studio is a low-code agent builder inside Microsoft's
+ * Power Platform ecosystem. It is DISTINCT from GitHub Copilot (autocomplete)
+ * and M365 Copilot (productivity assistant). Copilot Studio lets business
+ * analysts, IT admins, and citizen developers build organization-specific
+ * copilots and agents using natural-language descriptions, topic graphs,
+ * Power Automate flows, custom connectors, MCP servers, and knowledge sources.
+ *
+ * Target users: non-developers with elevated organizational trust. A Copilot
+ * Studio agent can be published to Microsoft Teams, M365 Copilot, the public
+ * web, or custom channels -- giving it organizational-grade reach from a
+ * low-code interface. The governance challenges are distinct from developer IDE
+ * adapters:
+ *   - Agents are described in natural language; purpose must be recorded.
+ *   - Knowledge sources span corporate SharePoint, Dataverse, and the public
+ *     web; data residency depends on the source type.
+ *   - Connectors can egress to public internet; in government / sovereign mode
+ *     this creates a data-residency violation.
+ *   - Publishing to "public web" channel from government / sovereign tenants is
+ *     an unconditional compliance violation.
+ *   - Governance Center policy changes are admin-only; citizen developers must
+ *     not trigger them.
+ *
+ * Deployment modes (three, matching Microsoft's actual cloud segmentation):
+ *   copilot-studio-cloud       -- standard commercial cloud (default)
+ *   copilot-studio-government  -- GCC / GCC-High / DoD; strict data residency;
+ *                                 public-web channel and public-website knowledge
+ *                                 sources denied unconditionally; connectors
+ *                                 restricted to Microsoft-internal allow-list.
+ *   copilot-studio-sovereign   -- regulated-industry sovereign cloud; all
+ *                                 government restrictions PLUS Governance Center
+ *                                 policy changes require admin approval.
+ *
+ * Hook surfaces (8 distinct governable surfaces):
+ *
+ *   agentBuildRequested(agentDescription, agentOwner)
+ *     Describes an agent in natural language; Studio generates skill/topic graph.
+ *     REQUIRES non-empty agentDescription (governance must identify purpose).
+ *     REQUIRES non-empty agentOwner (tenant identity).
+ *     Reason codes: copilot-studio-agent-description-required,
+ *                   copilot-studio-agent-owner-required.
+ *
+ *   topicCreationRequested(topicName, topicDescription)
+ *     Adds a new conversational topic to an agent.
+ *     Audited; no specific deny conditions beyond packBinding.
+ *
+ *   actionDefinitionRequested(actionName, actionBody)
+ *     Defines a tool/action the agent can call (Power Automate flow, custom
+ *     connector, MCP server, etc.).
+ *     In copilot-studio-government: scan action body for embedded URLs; any URL
+ *     host outside allowedConnectorPrefixes is denied.
+ *     Reason code: copilot-studio-action-egress-not-permitted.
+ *
+ *   connectorAddRequested(connectorId, connectorType)
+ *     Wires up a Microsoft / third-party connector (Dataverse, SharePoint,
+ *     Outlook, custom HTTP).
+ *     In copilot-studio-government: connectors NOT in allowedConnectorPrefixes
+ *     (default Microsoft-only) are denied. Connectors implying public-internet
+ *     egress are denied unless explicitly allowlisted.
+ *     Reason code: copilot-studio-connector-not-permitted-government.
+ *
+ *   knowledgeSourceAddRequested(sourceType, sourceUri)
+ *     Adds a knowledge source (SharePoint, public website, uploaded files,
+ *     Dataverse table).
+ *     In copilot-studio-government: 'public-website' source is denied
+ *     unconditionally.
+ *     If allowedKnowledgeSources is configured: only listed source types allowed.
+ *     Reason codes: copilot-studio-knowledge-source-public-website-not-permitted-government,
+ *                   copilot-studio-knowledge-source-not-permitted.
+ *
+ *   publishRequested(channel, version)
+ *     Publishes the agent to a channel (Teams, M365 Copilot, public web, custom).
+ *     In copilot-studio-government: 'public-web' denied unconditionally.
+ *     In copilot-studio-sovereign: 'public-web' denied + admin approval required
+ *     for any publish.
+ *     If allowedChannels configured: only listed channels allowed.
+ *     Reason codes: copilot-studio-public-channel-not-permitted-government,
+ *                   copilot-studio-channel-not-permitted,
+ *                   copilot-studio-publish-requires-governance-approval.
+ *
+ *   governanceCenterPolicyRequested(policyName, policyBody)
+ *     Admin tier: defines or updates governance policy for the tenant.
+ *     REQUIRES requireGovernanceCenterApproval: true in config AND admin role
+ *     in context. Non-admin denied unconditionally.
+ *     Reason codes: copilot-studio-admin-only,
+ *                   copilot-studio-governance-center-approval-required.
+ *
+ *   chatTestRequested(promptText)
+ *     Test conversation in the design canvas.
+ *     Scanned for secrets. Audited.
+ *
+ * Government / sovereign safeguards (the differentiators):
+ *   - publishRequested: government/sovereign mode blocks 'public-web' channel.
+ *   - connectorAddRequested: government mode blocks non-Microsoft connectors
+ *     unless allowlisted.
+ *   - knowledgeSourceAddRequested: government/sovereign mode blocks
+ *     'public-website' source.
+ *   - actionDefinitionRequested: government mode blocks action bodies referencing
+ *     URLs outside allowedConnectorPrefixes.
+ *   - governanceCenterPolicyRequested: sovereign mode requires admin approval.
+ *
+ * Pen-tests:
+ *   PT-ADAPT-COPILOTSTUDIO-1: empty packBinding[] denied at every wrap call
+ *   PT-ADAPT-COPILOTSTUDIO-2: tenant secrets / connection strings never appear
+ *                              in audit entries
+ *   PT-ADAPT-COPILOTSTUDIO-3: malformed config throws at construction (invalid
+ *                              mode, conflicting tenantTier vs deployment mode)
+ *   PT-ADAPT-COPILOTSTUDIO-4: government mode publish to public-web ALWAYS denied
+ *                              with copilot-studio-public-channel-not-permitted-government
+ *   PT-ADAPT-COPILOTSTUDIO-5: sovereign mode without admin approval ALWAYS denied
+ *                              for governance-center policy changes
+ *   PT-ADAPT-COPILOTSTUDIO-6: action definition egress URL outside allowlist in
+ *                              government mode denied with
+ *                              copilot-studio-action-egress-not-permitted
+ *
+ * Spec: P3-SUB-IDE-09
+ *
+ * @connexum/ai-governance
+ */
+import { BaseIdeAdapter } from './base';
+import { type IdeAdapterConfig, type IdeAdapterCapabilities, type IdeSessionContext, type ToolInvocationContext, type ToolInvocationDecision, type UserIdentity } from './index';
+/**
+ * Copilot Studio deployment modes.
+ *
+ *   copilot-studio-cloud       -- standard commercial Microsoft cloud (default)
+ *   copilot-studio-government  -- GCC / GCC-High / DoD; strict data residency;
+ *                                 public-internet egress controls enforced.
+ *   copilot-studio-sovereign   -- regulated-industry sovereign cloud; all
+ *                                 government restrictions plus admin-approval
+ *                                 gate on Governance Center policy changes.
+ */
+export type CopilotStudioDeploymentMode = 'copilot-studio-cloud' | 'copilot-studio-government' | 'copilot-studio-sovereign';
+export declare const COPILOT_STUDIO_VALID_DEPLOYMENT_MODES: readonly CopilotStudioDeploymentMode[];
+/**
+ * Tenant tiers and the deployment modes they are compatible with.
+ *
+ * commercial  -- copilot-studio-cloud
+ * government  -- copilot-studio-government
+ * gcc         -- copilot-studio-government
+ * gcc-high    -- copilot-studio-government
+ * dod         -- copilot-studio-government
+ * sovereign   -- copilot-studio-sovereign
+ */
+export type CopilotStudioTenantTier = 'commercial' | 'government' | 'gcc' | 'gcc-high' | 'dod' | 'sovereign';
+export declare const COPILOT_STUDIO_GOVERNMENT_TENANT_TIERS: readonly CopilotStudioTenantTier[];
+export declare const COPILOT_STUDIO_VALID_TENANT_TIERS: readonly CopilotStudioTenantTier[];
+/**
+ * Channels available for agent publish. Governance mode affects which are permitted.
+ *   teams        -- Microsoft Teams (permitted in all modes)
+ *   m365-copilot -- M365 Copilot extension (permitted in all modes)
+ *   public-web   -- Public website embed (BLOCKED in government / sovereign)
+ *   custom       -- Custom channel via Direct Line / channel adapter
+ */
+export type CopilotStudioChannel = 'teams' | 'm365-copilot' | 'public-web' | 'custom';
+export type CopilotStudioKnowledgeSourceType = 'sharepoint' | 'dataverse' | 'public-website' | 'uploaded-file';
+/**
+ * Default connector allow-list for government / sovereign mode.
+ * Only connectors whose IDs begin with these prefixes are permitted.
+ * All others require explicit configuration in allowedConnectorPrefixes.
+ */
+export declare const COPILOT_STUDIO_GOVERNMENT_DEFAULT_CONNECTOR_PREFIXES: readonly string[];
+export interface CopilotStudioAdapterConfig extends IdeAdapterConfig {
+    /**
+     * Copilot Studio deployment mode. Required. No default.
+     * Determines data-residency posture, channel permissions, and connector
+     * allow-list defaults.
+     */
+    deploymentMode: CopilotStudioDeploymentMode;
+    /**
+     * Tenant tier. Optional. Must be compatible with deploymentMode.
+     *   commercial -- only valid with copilot-studio-cloud
+     *   government / gcc / gcc-high / dod -- only valid with copilot-studio-government
+     *   sovereign  -- only valid with copilot-studio-sovereign
+     *
+     * Invariant: tenantTier must be compatible with deploymentMode. Throws at
+     * construction if they conflict (e.g. gcc + copilot-studio-cloud).
+     */
+    tenantTier?: CopilotStudioTenantTier;
+    /**
+     * Data residency region identifier. Advisory; recorded in audit entries.
+     * Examples: 'us-gov', 'eu-de', 'au-east'.
+     */
+    dataResidencyRegion?: string;
+    /**
+     * Channels the agent is permitted to publish to.
+     * Defaults: cloud: all four; government/sovereign: ['teams', 'm365-copilot', 'custom'].
+     * 'public-web' is ALWAYS excluded in government/sovereign regardless of this list.
+     */
+    allowedChannels?: CopilotStudioChannel[];
+    /**
+     * Connector id prefixes that are permitted in this environment.
+     * Government/sovereign default: COPILOT_STUDIO_GOVERNMENT_DEFAULT_CONNECTOR_PREFIXES.
+     * Cloud: no restriction (all connectors permitted).
+     * Any prefix explicitly listed here overrides the default.
+     */
+    allowedConnectorPrefixes?: string[];
+    /**
+     * Knowledge source types that are permitted in this environment.
+     * Government/sovereign default: ['sharepoint', 'dataverse', 'uploaded-file'].
+     * 'public-website' is ALWAYS excluded in government/sovereign.
+     * Cloud: no restriction (all source types permitted by default).
+     */
+    allowedKnowledgeSources?: CopilotStudioKnowledgeSourceType[];
+    /**
+     * When true, Governance Center policy operations require admin role in context
+     * AND explicit approval from this flag. Default: false.
+     * In sovereign mode, this is effectively forced true for all policy operations.
+     */
+    requireGovernanceCenterApproval?: boolean;
+}
+export interface CopilotStudioAgentBuildContext {
+    /** Natural language description of the agent purpose. REQUIRED. */
+    agentDescription: string;
+    /** Tenant identity / owner of this agent. REQUIRED. */
+    agentOwner: string;
+    sessionId?: string;
+}
+export interface CopilotStudioTopicCreationContext {
+    /** Name of the new conversational topic. */
+    topicName: string;
+    /** Optional description of the topic intent. */
+    topicDescription?: string;
+    sessionId?: string;
+}
+export interface CopilotStudioActionDefinitionContext {
+    /** Name of the action / tool being defined. */
+    actionName: string;
+    /** Action body / configuration string (Power Automate JSON, connector spec, etc.). */
+    actionBody?: string;
+    sessionId?: string;
+}
+export interface CopilotStudioConnectorAddContext {
+    /** Connector ID (e.g. 'shared_sharepointonline', 'shared_twitter'). */
+    connectorId: string;
+    /** Optional human-readable connector type label. */
+    connectorType?: string;
+    sessionId?: string;
+}
+export interface CopilotStudioKnowledgeSourceAddContext {
+    /** Source type: sharepoint | dataverse | public-website | uploaded-file. */
+    sourceType: CopilotStudioKnowledgeSourceType;
+    /** Source URI or identifier. ADVISORY -- not used for gate logic. */
+    sourceUri?: string;
+    sessionId?: string;
+}
+export interface CopilotStudioPublishContext {
+    /** Target channel for the publish operation. */
+    channel: CopilotStudioChannel;
+    /** Version label (advisory). */
+    version?: string;
+    sessionId?: string;
+}
+export interface CopilotStudioGovernancePolicyContext {
+    /** Name of the governance policy being defined or updated. */
+    policyName: string;
+    /** Policy body / configuration. */
+    policyBody?: string;
+    /**
+     * Role of the user performing this operation.
+     * Must be 'admin' for governance-center policy operations to be permitted.
+     */
+    userRole?: string;
+    sessionId?: string;
+}
+export interface CopilotStudioChatTestContext {
+    /** Prompt text being tested in the design canvas. */
+    promptText: string;
+    sessionId?: string;
+}
+export declare class CopilotStudioAdapter extends BaseIdeAdapter {
+    readonly adapterId = "copilot-studio";
+    readonly ideId = "copilot-studio";
+    private copilotConfig;
+    initialize(config: IdeAdapterConfig): void;
+    resolveUserIdentity(session: IdeSessionContext): Promise<UserIdentity>;
+    interceptToolInvocation(ctx: ToolInvocationContext): Promise<ToolInvocationDecision>;
+    private _gateAgentBuildRequest;
+    private _gateTopicCreationRequest;
+    private _gateActionDefinitionRequest;
+    private _gateConnectorAddRequest;
+    private _gateKnowledgeSourceAddRequest;
+    private _gatePublishRequest;
+    private _gateGovernanceCenterPolicyRequest;
+    private _gateChatTestRequest;
+    wrapAgentBuild(ctx: CopilotStudioAgentBuildContext): Promise<ToolInvocationDecision>;
+    wrapTopicCreation(ctx: CopilotStudioTopicCreationContext): Promise<ToolInvocationDecision>;
+    wrapActionDefinition(ctx: CopilotStudioActionDefinitionContext): Promise<ToolInvocationDecision>;
+    wrapConnectorAdd(ctx: CopilotStudioConnectorAddContext): Promise<ToolInvocationDecision>;
+    wrapKnowledgeSourceAdd(ctx: CopilotStudioKnowledgeSourceAddContext): Promise<ToolInvocationDecision>;
+    wrapPublish(ctx: CopilotStudioPublishContext): Promise<ToolInvocationDecision>;
+    wrapGovernanceCenterPolicy(ctx: CopilotStudioGovernancePolicyContext): Promise<ToolInvocationDecision>;
+    wrapChatTest(ctx: CopilotStudioChatTestContext): Promise<ToolInvocationDecision>;
+    getIdeCapabilities(): IdeAdapterCapabilities;
+    translateError(raw: unknown): import('./index').IdeAdapterError;
+    getDeploymentMode(): CopilotStudioDeploymentMode;
+    getTenantTier(): CopilotStudioTenantTier | undefined;
+    getDataResidencyRegion(): string | undefined;
+    isGovernmentMode(): boolean;
+    isSovereignMode(): boolean;
+    requiresGovernanceCenterApproval(): boolean;
+    /**
+     * Resolve the effective connector prefix allow-list.
+     * Government/sovereign: use configured list or default Microsoft-only list.
+     * Cloud: empty list (no connector restriction).
+     */
+    private _effectiveConnectorPrefixes;
+}
+//# sourceMappingURL=copilot-studio.d.ts.map

package/dist/ide-adapters/copilot-studio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilot-studio.d.ts","sourceRoot":"","sources":["../../src/ide-adapters/copilot-studio.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwHG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EAClB,MAAM,SAAS,CAAC;AAOjB;;;;;;;;;GASG;AACH,MAAM,MAAM,2BAA2B,GACnC,sBAAsB,GACtB,2BAA2B,GAC3B,0BAA0B,CAAC;AAE/B,eAAO,MAAM,qCAAqC,EAAE,SAAS,2BAA2B,EAIvF,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,MAAM,uBAAuB,GAC/B,YAAY,GACZ,YAAY,GACZ,KAAK,GACL,UAAU,GACV,KAAK,GACL,WAAW,CAAC;AAEhB,eAAO,MAAM,sCAAsC,EAAE,SAAS,uBAAuB,EAKpF,CAAC;AAEF,eAAO,MAAM,iCAAiC,EAAE,SAAS,uBAAuB,EAO/E,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAC5B,OAAO,GACP,cAAc,GACd,YAAY,GACZ,QAAQ,CAAC;AAEb,MAAM,MAAM,gCAAgC,GACxC,YAAY,GACZ,WAAW,GACX,gBAAgB,GAChB,eAAe,CAAC;AAEpB;;;;GAIG;AACH,eAAO,MAAM,oDAAoD,EAAE,SAAS,MAAM,EAajF,CAAC;AA8GF,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAClE;;;;OAIG;IACH,cAAc,EAAE,2BAA2B,CAAC;IAC5C;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,eAAe,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACzC;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IACpC;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,gCAAgC,EAAE,CAAC;IAC7D;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,OAAO,CAAC;CAC3C;AAMD,MAAM,WAAW,8BAA8B;IAC7C,mEAAmE;IACnE,gBAAgB,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAChD,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oCAAoC;IACnD,+CAA+C;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gCAAgC;IAC/C,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sCAAsC;IACrD,4EAA4E;IAC5E,UAAU,EAAE,gCAAgC,CAAC;IAC7C,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC1C,gDAAgD;IAChD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oCAAoC;IACnD,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,qBAAa,oBAAqB,SAAQ,cAAc;IACtD,QAAQ,CAAC,SAAS,oBAAoB;IACtC,QAAQ,CAAC,KAAK,oBAAoB;IAElC,OAAO,CAAC,aAAa,CAA2C;IAMvD,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAiG7C,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAwCtE,uBAAuB,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;YA2C5E,sBAAsB;YA8EtB,yBAAyB;YA4BzB,4BAA4B;YAgF5B,wBAAwB;YA2ExB,8BAA8B;YA+F9B,mBAAmB;YAkInB,kCAAkC;YA0FlC,oBAAoB;IAsC5B,cAAc,CAAC,GAAG,EAAE,8BAA8B,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAWpF,iBAAiB,CAAC,GAAG,EAAE,iCAAiC,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAW1F,oBAAoB,CAAC,GAAG,EAAE,oCAAoC,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAWhG,gBAAgB,CAAC,GAAG,EAAE,gCAAgC,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAWxF,sBAAsB,CAAC,GAAG,EAAE,sCAAsC,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAWpG,WAAW,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAW9E,0BAA0B,CAAC,GAAG,EAAE,oCAAoC,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAetG,YAAY,CAAC,GAAG,EAAE,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAetF,kBAAkB,IAAI,sBAAsB;IAe5C,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,SAAS,EAAE,eAAe;IAS/D,iBAAiB,IAAI,2BAA2B;IAIhD,aAAa,IAAI,uBAAuB,GAAG,SAAS;IAIpD,sBAAsB,IAAI,MAAM,GAAG,SAAS;IAI5C,gBAAgB,IAAI,OAAO;IAK3B,eAAe,IAAI,OAAO;IAI1B,gCAAgC,IAAI,OAAO;IAQ3C;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;CAUpC"}