@dotsetlabs/tollgate 0.1.0

package/dist/policy/parser.d.ts

@@ -0,0 +1,141 @@
+/**
+ * Configuration Parser for Tollgate
+ *
+ * This module handles parsing and validation of Tollgate configuration.
+ * It validates the structure and values of tollgate.yaml files, normalizes
+ * shorthand policy syntax, and resolves environment variables.
+ *
+ * @example
+ * ```typescript
+ * import { validateConfig, normalizeToolPolicy, getServerConfig } from './parser.js';
+ *
+ * // Validate a loaded configuration
+ * validateConfig(config);  // Throws PolicyError if invalid
+ *
+ * // Normalize shorthand policy syntax
+ * const policy = normalizeToolPolicy('allow');  // { action: 'allow' }
+ *
+ * // Get a specific server configuration
+ * const serverConfig = getServerConfig(config, 'postgres');
+ * ```
+ *
+ * @module policy/parser
+ */
+import type { TollgateConfig, ServerConfig, ToolPolicy, PolicyAction } from './types.js';
+import { type ParsedPolicy } from './natural-language.js';
+/**
+ * Validates a Tollgate configuration object.
+ *
+ * Performs comprehensive validation including:
+ * - Schema version check
+ * - Default action validation
+ * - Server configuration validation
+ * - Tool policy validation
+ *
+ * @param config - The configuration object to validate
+ * @throws {PolicyError} If the configuration is invalid
+ */
+export declare function validateConfig(config: TollgateConfig): void;
+/**
+ * Normalizes a tool policy to its full object form.
+ *
+ * Converts shorthand string actions (e.g., 'allow') to full policy objects.
+ *
+ * @param policy - Policy in shorthand or object form
+ * @returns Normalized ToolPolicy object
+ *
+ * @example
+ * ```typescript
+ * normalizeToolPolicy('allow')
+ * // Returns: { action: 'allow' }
+ *
+ * normalizeToolPolicy({ action: 'prompt', message: 'Confirm?' })
+ * // Returns: { action: 'prompt', message: 'Confirm?' }
+ * ```
+ */
+export declare function normalizeToolPolicy(policy: ToolPolicy | PolicyAction): ToolPolicy;
+/**
+ * Resolves environment variables in server environment configuration.
+ *
+ * Expands `${VAR}` patterns using the current process environment.
+ *
+ * @param env - Environment variable mapping with possible placeholders
+ * @returns Resolved environment variables
+ *
+ * @example
+ * ```typescript
+ * resolveServerEnv({ DATABASE_URL: '${DATABASE_URL}' })
+ * // Returns: { DATABASE_URL: 'postgres://...' }
+ * ```
+ */
+export declare function resolveServerEnv(env: Record<string, string> | undefined): Record<string, string>;
+/**
+ * Retrieves the configuration for a specific server.
+ *
+ * @param config - Root Tollgate configuration
+ * @param serverName - Name of the server to retrieve
+ * @returns Server configuration or undefined if not found
+ */
+export declare function getServerConfig(config: TollgateConfig, serverName: string): ServerConfig | undefined;
+/**
+ * Result of processing natural language policies.
+ */
+export interface NaturalPolicyResult {
+    /** Number of policies successfully parsed */
+    successful: number;
+    /** Number of policies that failed to parse */
+    failed: number;
+    /** Details of failed policies */
+    errors: Array<{
+        input: string;
+        error: string;
+    }>;
+    /** The parsed policies */
+    parsed: ParsedPolicy[];
+}
+/**
+ * Process natural language policies and merge them into the configuration.
+ *
+ * This function parses natural language policy statements from the config's
+ * `policies` array and merges them into the server tool configurations.
+ *
+ * @param config - The Tollgate configuration to process
+ * @param options - Processing options
+ * @returns Result of the processing including any errors
+ *
+ * @example
+ * ```typescript
+ * const config: TollgateConfig = {
+ *   version: '1',
+ *   policies: [
+ *     'Allow read operations on postgres',
+ *     'Deny destructive queries on any database'
+ *   ],
+ *   servers: {
+ *     postgres: { command: 'npx', args: ['-y', '@modelcontextprotocol/server-postgres'] }
+ *   }
+ * };
+ *
+ * const result = processNaturalPolicies(config);
+ * // config.servers.postgres.tools is now populated with parsed policies
+ * ```
+ */
+export declare function processNaturalPolicies(config: TollgateConfig, options?: {
+    throwOnError?: boolean;
+    logger?: (msg: string) => void;
+}): NaturalPolicyResult;
+/**
+ * Validate natural language policies without processing them.
+ *
+ * @param policies - Array of natural language policy statements
+ * @returns Validation result with details of any invalid policies
+ */
+export declare function validateNaturalPolicies(policies: string[]): {
+    valid: boolean;
+    errors: Array<{
+        input: string;
+        error: string;
+        suggestions?: string[];
+    }>;
+};
+//# sourceMappingURL=parser.d.ts.map

package/dist/policy/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/policy/parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACZ,UAAU,EACV,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAA0C,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAclG;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAsB3D;AAgDD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,UAAU,GAAG,YAAY,GAChC,UAAU,CAKZ;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GACtC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQxB;AAMD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,MAAM,GACjB,YAAY,GAAG,SAAS,CAE1B;AAMD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,0BAA0B;IAC1B,MAAM,EAAE,YAAY,EAAE,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GACvE,mBAAmB,CAyFrB;AAiCD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG;IAC3D,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACzE,CAsBA"}

package/dist/policy/parser.js

@@ -0,0 +1,314 @@
+/**
+ * Configuration Parser for Tollgate
+ *
+ * This module handles parsing and validation of Tollgate configuration.
+ * It validates the structure and values of tollgate.yaml files, normalizes
+ * shorthand policy syntax, and resolves environment variables.
+ *
+ * @example
+ * ```typescript
+ * import { validateConfig, normalizeToolPolicy, getServerConfig } from './parser.js';
+ *
+ * // Validate a loaded configuration
+ * validateConfig(config);  // Throws PolicyError if invalid
+ *
+ * // Normalize shorthand policy syntax
+ * const policy = normalizeToolPolicy('allow');  // { action: 'allow' }
+ *
+ * // Get a specific server configuration
+ * const serverConfig = getServerConfig(config, 'postgres');
+ * ```
+ *
+ * @module policy/parser
+ */
+import { PolicyError } from '../utils/errors.js';
+import { parseNaturalPolicies, policiesToConfig } from './natural-language.js';
+import { expandEnvVars } from '../utils/config.js';
+// ============================================================================
+// Constants
+// ============================================================================
+/** Valid policy actions */
+const VALID_ACTIONS = ['allow', 'deny', 'prompt', 'smart'];
+// ============================================================================
+// Validation Functions
+// ============================================================================
+/**
+ * Validates a Tollgate configuration object.
+ *
+ * Performs comprehensive validation including:
+ * - Schema version check
+ * - Default action validation
+ * - Server configuration validation
+ * - Tool policy validation
+ *
+ * @param config - The configuration object to validate
+ * @throws {PolicyError} If the configuration is invalid
+ */
+export function validateConfig(config) {
+    if (!config.version) {
+        throw new PolicyError('Config must specify a version');
+    }
+    if (config.version !== '1') {
+        throw new PolicyError(`Unsupported config version: ${config.version}`, {
+            supportedVersions: ['1'],
+        });
+    }
+    if (config.defaults?.action && !VALID_ACTIONS.includes(config.defaults.action)) {
+        throw new PolicyError(`Invalid default action: ${config.defaults.action}`, {
+            validActions: VALID_ACTIONS,
+        });
+    }
+    if (config.servers) {
+        for (const [name, server] of Object.entries(config.servers)) {
+            validateServerConfig(name, server);
+        }
+    }
+}
+/**
+ * Validates a server configuration.
+ *
+ * @param name - Server name for error messages
+ * @param config - Server configuration to validate
+ * @throws {PolicyError} If the server configuration is invalid
+ */
+function validateServerConfig(name, config) {
+    if (!config.command) {
+        throw new PolicyError(`Server "${name}" must specify a command`);
+    }
+    if (config.tools) {
+        for (const [pattern, policy] of Object.entries(config.tools)) {
+            validateToolPolicy(name, pattern, policy);
+        }
+    }
+}
+/**
+ * Validates a tool policy.
+ *
+ * @param serverName - Server name for error messages
+ * @param pattern - Tool pattern or name
+ * @param policy - Policy to validate
+ * @throws {PolicyError} If the policy contains an invalid action
+ */
+function validateToolPolicy(serverName, pattern, policy) {
+    const action = typeof policy === 'string' ? policy : policy.action;
+    if (!VALID_ACTIONS.includes(action)) {
+        throw new PolicyError(`Invalid action "${action}" for tool "${pattern}" in server "${serverName}"`, { validActions: VALID_ACTIONS });
+    }
+}
+// ============================================================================
+// Normalization Functions
+// ============================================================================
+/**
+ * Normalizes a tool policy to its full object form.
+ *
+ * Converts shorthand string actions (e.g., 'allow') to full policy objects.
+ *
+ * @param policy - Policy in shorthand or object form
+ * @returns Normalized ToolPolicy object
+ *
+ * @example
+ * ```typescript
+ * normalizeToolPolicy('allow')
+ * // Returns: { action: 'allow' }
+ *
+ * normalizeToolPolicy({ action: 'prompt', message: 'Confirm?' })
+ * // Returns: { action: 'prompt', message: 'Confirm?' }
+ * ```
+ */
+export function normalizeToolPolicy(policy) {
+    if (typeof policy === 'string') {
+        return { action: policy };
+    }
+    return policy;
+}
+/**
+ * Resolves environment variables in server environment configuration.
+ *
+ * Expands `${VAR}` patterns using the current process environment.
+ *
+ * @param env - Environment variable mapping with possible placeholders
+ * @returns Resolved environment variables
+ *
+ * @example
+ * ```typescript
+ * resolveServerEnv({ DATABASE_URL: '${DATABASE_URL}' })
+ * // Returns: { DATABASE_URL: 'postgres://...' }
+ * ```
+ */
+export function resolveServerEnv(env) {
+    if (!env)
+        return {};
+    const resolved = {};
+    for (const [key, value] of Object.entries(env)) {
+        resolved[key] = expandEnvVars(value);
+    }
+    return resolved;
+}
+// ============================================================================
+// Config Accessors
+// ============================================================================
+/**
+ * Retrieves the configuration for a specific server.
+ *
+ * @param config - Root Tollgate configuration
+ * @param serverName - Name of the server to retrieve
+ * @returns Server configuration or undefined if not found
+ */
+export function getServerConfig(config, serverName) {
+    return config.servers?.[serverName];
+}
+/**
+ * Process natural language policies and merge them into the configuration.
+ *
+ * This function parses natural language policy statements from the config's
+ * `policies` array and merges them into the server tool configurations.
+ *
+ * @param config - The Tollgate configuration to process
+ * @param options - Processing options
+ * @returns Result of the processing including any errors
+ *
+ * @example
+ * ```typescript
+ * const config: TollgateConfig = {
+ *   version: '1',
+ *   policies: [
+ *     'Allow read operations on postgres',
+ *     'Deny destructive queries on any database'
+ *   ],
+ *   servers: {
+ *     postgres: { command: 'npx', args: ['-y', '@modelcontextprotocol/server-postgres'] }
+ *   }
+ * };
+ *
+ * const result = processNaturalPolicies(config);
+ * // config.servers.postgres.tools is now populated with parsed policies
+ * ```
+ */
+export function processNaturalPolicies(config, options = {}) {
+    const { throwOnError = false, logger } = options;
+    if (!config.policies || config.policies.length === 0) {
+        return { successful: 0, failed: 0, errors: [], parsed: [] };
+    }
+    // Parse all policies
+    const parsed = parseNaturalPolicies(config.policies);
+    // Collect errors
+    const errors = [];
+    for (const result of parsed) {
+        if (!result.success && result.error) {
+            errors.push({ input: result.input, error: result.error });
+        }
+    }
+    if (errors.length > 0 && throwOnError) {
+        throw new PolicyError(`Failed to parse ${errors.length} natural language policies:\n` +
+            errors.map(e => `  - "${e.input}": ${e.error}`).join('\n'));
+    }
+    // Convert to config structure
+    const policyConfig = policiesToConfig(parsed.filter(p => p.success));
+    // Merge into existing server configs
+    for (const [serverPattern, serverPolicies] of Object.entries(policyConfig)) {
+        // Find matching servers
+        const matchingServers = findMatchingServers(config, serverPattern);
+        // Warn if no servers match a specific (non-wildcard) pattern
+        if (matchingServers.length === 0 && serverPattern !== '*') {
+            logger?.(`Warning: Policy targets server "${serverPattern}" which is not configured`);
+            continue;
+        }
+        for (const serverName of matchingServers) {
+            if (!config.servers) {
+                config.servers = {};
+            }
+            if (!config.servers[serverName]) {
+                // This shouldn't happen since findMatchingServers only returns existing servers
+                continue;
+            }
+            // Merge tool policies
+            if (!config.servers[serverName].tools) {
+                config.servers[serverName].tools = {};
+            }
+            for (const [toolPattern, toolPolicy] of Object.entries(serverPolicies.tools)) {
+                const existing = config.servers[serverName].tools[toolPattern];
+                if (existing) {
+                    // Merge with existing policy (NL policies take precedence for risks)
+                    const normalized = normalizeToolPolicy(existing);
+                    config.servers[serverName].tools[toolPattern] = {
+                        ...normalized,
+                        ...toolPolicy,
+                        risks: toolPolicy.risks ? { ...normalized.risks, ...toolPolicy.risks } : normalized.risks,
+                    };
+                }
+                else {
+                    config.servers[serverName].tools[toolPattern] = toolPolicy;
+                }
+            }
+        }
+    }
+    const successful = parsed.filter(p => p.success).length;
+    const failed = parsed.filter(p => !p.success).length;
+    if (logger) {
+        if (successful > 0) {
+            logger(`Processed ${successful} natural language policies`);
+        }
+        if (failed > 0) {
+            logger(`Warning: ${failed} policies failed to parse`);
+        }
+    }
+    return {
+        successful,
+        failed,
+        errors,
+        parsed,
+    };
+}
+/**
+ * Find servers matching a pattern.
+ *
+ * @param config - The Tollgate configuration
+ * @param pattern - Server pattern (supports * for wildcard)
+ * @returns Array of matching server names
+ */
+function findMatchingServers(config, pattern) {
+    if (!config.servers)
+        return [];
+    const serverNames = Object.keys(config.servers);
+    // Exact match
+    if (!pattern.includes('*')) {
+        return serverNames.filter(name => name === pattern);
+    }
+    // Wildcard match
+    if (pattern === '*') {
+        return serverNames;
+    }
+    // Glob pattern
+    const regexPattern = pattern
+        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+        .replace(/\*/g, '.*');
+    const regex = new RegExp(`^${regexPattern}$`, 'i');
+    return serverNames.filter(name => regex.test(name));
+}
+/**
+ * Validate natural language policies without processing them.
+ *
+ * @param policies - Array of natural language policy statements
+ * @returns Validation result with details of any invalid policies
+ */
+export function validateNaturalPolicies(policies) {
+    if (!policies || policies.length === 0) {
+        return { valid: true, errors: [] };
+    }
+    const parsed = parseNaturalPolicies(policies);
+    const errors = [];
+    for (const result of parsed) {
+        if (!result.success && result.error) {
+            errors.push({
+                input: result.input,
+                error: result.error,
+                // Suggestions will be added by the caller if needed
+            });
+        }
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+    };
+}
+//# sourceMappingURL=parser.js.map

package/dist/policy/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/policy/parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAQH,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAqB,MAAM,uBAAuB,CAAC;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,2BAA2B;AAC3B,MAAM,aAAa,GAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAE3E,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,WAAW,CAAC,+BAA+B,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,WAAW,CAAC,+BAA+B,MAAM,CAAC,OAAO,EAAE,EAAE;YACrE,iBAAiB,EAAE,CAAC,GAAG,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,WAAW,CAAC,2BAA2B,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE;YACzE,YAAY,EAAE,aAAa;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,IAAY,EAAE,MAAoB;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,WAAW,CAAC,WAAW,IAAI,0BAA0B,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7D,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CACzB,UAAkB,EAClB,OAAe,EACf,MAAiC;IAEjC,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAEnE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,WAAW,CACnB,mBAAmB,MAAM,eAAe,OAAO,gBAAgB,UAAU,GAAG,EAC5E,EAAE,YAAY,EAAE,aAAa,EAAE,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAiC;IAEjC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAuC;IAEvC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IAEpB,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAsB,EACtB,UAAkB;IAElB,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAoBD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAsB,EACtB,UAAsE,EAAE;IAExE,MAAM,EAAE,YAAY,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAEjD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC9D,CAAC;IAED,qBAAqB;IACrB,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAErD,iBAAiB;IACjB,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC;QACtC,MAAM,IAAI,WAAW,CACnB,mBAAmB,MAAM,CAAC,MAAM,+BAA+B;YAC/D,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAErE,qCAAqC;IACrC,KAAK,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3E,wBAAwB;QACxB,MAAM,eAAe,GAAG,mBAAmB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAEnE,6DAA6D;QAC7D,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;YAC1D,MAAM,EAAE,CAAC,mCAAmC,aAAa,2BAA2B,CAAC,CAAC;YACtF,SAAS;QACX,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;YACtB,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,gFAAgF;gBAChF,SAAS;YACX,CAAC;YAED,sBAAsB;YACtB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;gBACtC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACxC,CAAC;YAED,KAAK,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAM,CAAC,WAAW,CAAC,CAAC;gBAChE,IAAI,QAAQ,EAAE,CAAC;oBACb,qEAAqE;oBACrE,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;oBACjD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAM,CAAC,WAAW,CAAC,GAAG;wBAC/C,GAAG,UAAU;wBACb,GAAG,UAAU;wBACb,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK;qBAC1F,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAM,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAErD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,CAAC,aAAa,UAAU,4BAA4B,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,MAAM,CAAC,YAAY,MAAM,2BAA2B,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,MAAM;QACN,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,MAAsB,EAAE,OAAe;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAE/B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEhD,cAAc;IACd,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,eAAe;IACf,MAAM,YAAY,GAAG,OAAO;SACzB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,GAAG,EAAE,GAAG,CAAC,CAAC;IAEnD,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAkB;IAIxD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAoE,EAAE,CAAC;IAEnF,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,oDAAoD;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC"}