@extenshi/cli 0.0.8 → 0.0.9

package/dist/review-catalog.d.ts

@@ -0,0 +1,43 @@
+/**
+ * review-risk — fetch the last-published manifest for an extension from the
+ * Extenshi catalog so check 3 can diff against it. This is the part that is
+ * unique to us: we keep per-extension manifest snapshots, so we can tell you
+ * whether *this* update adds an auto-disabling permission versus what's live.
+ *
+ * Talks to the public BFF tRPC gateway:
+ *   GET {bffUrl}/api/trpc/store.getLatestPublishedManifest?input=<json>
+ *
+ * The BFF read path may be gated behind a developer API key, so we send the
+ * `ek_` key when the caller has one. Everything here is fail-soft: any problem
+ * (key required, extension unknown, catalog older than this CLI, network error)
+ * resolves to `{ manifest: null, reason }` — the command then runs every other
+ * check and prints why the diff was skipped, rather than failing the run.
+ */
+export interface PriorManifestResult {
+    /** The parsed last-published manifest, or null when it could not be obtained. */
+    manifest: Record<string, unknown> | null;
+    /** Present when manifest is null: a human-readable reason to print. */
+    reason?: string;
+    /** Snapshot metadata, when found. */
+    meta?: {
+        store?: string;
+        version?: string;
+        fetchedAt?: string;
+    };
+}
+export interface FetchPriorManifestOptions {
+    /** BFF base URL, e.g. https://bff.extenshi.io (no trailing slash). */
+    bffUrl: string;
+    /** Numeric catalog extension ID. */
+    extensionId: string;
+    /** Optional `ek_` developer key — sent when the read path is gated. */
+    apiKey?: string;
+    /**
+     * Which store's snapshot to diff against. Permission sets differ per store, so
+     * pinning this avoids comparing a Chrome upload against, say, a Firefox
+     * snapshot. Omitted → the catalog returns the latest snapshot of any store.
+     */
+    store?: 'CHROME' | 'FIREFOX' | 'EDGE';
+}
+export declare function fetchPriorManifest(opts: FetchPriorManifestOptions): Promise<PriorManifestResult>;
+//# sourceMappingURL=review-catalog.d.ts.map

package/dist/review-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-catalog.d.ts","sourceRoot":"","sources":["../src/review-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,MAAM,WAAW,mBAAmB;IACnC,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACxC,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qCAAqC;IACrC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC/D;AAED,MAAM,WAAW,yBAAyB;IACzC,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAA;CACrC;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiFtG"}

package/dist/review-catalog.js

@@ -0,0 +1,82 @@
+/**
+ * review-risk — fetch the last-published manifest for an extension from the
+ * Extenshi catalog so check 3 can diff against it. This is the part that is
+ * unique to us: we keep per-extension manifest snapshots, so we can tell you
+ * whether *this* update adds an auto-disabling permission versus what's live.
+ *
+ * Talks to the public BFF tRPC gateway:
+ *   GET {bffUrl}/api/trpc/store.getLatestPublishedManifest?input=<json>
+ *
+ * The BFF read path may be gated behind a developer API key, so we send the
+ * `ek_` key when the caller has one. Everything here is fail-soft: any problem
+ * (key required, extension unknown, catalog older than this CLI, network error)
+ * resolves to `{ manifest: null, reason }` — the command then runs every other
+ * check and prints why the diff was skipped, rather than failing the run.
+ */
+import { fetch } from 'undici';
+const FETCH_TIMEOUT_MS = 15_000;
+export async function fetchPriorManifest(opts) {
+    const id = Number(opts.extensionId);
+    if (!Number.isInteger(id) || id <= 0) {
+        return {
+            manifest: null,
+            reason: `invalid --extension-id "${opts.extensionId}" (expected a positive number)`,
+        };
+    }
+    const query = opts.store ? { extensionId: id, store: opts.store } : { extensionId: id };
+    const input = encodeURIComponent(JSON.stringify(query));
+    const url = `${opts.bffUrl}/api/trpc/store.getLatestPublishedManifest?input=${input}`;
+    let res;
+    try {
+        res = await fetch(url, {
+            headers: opts.apiKey ? { authorization: `Bearer ${opts.apiKey}` } : {},
+            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+        });
+    }
+    catch (err) {
+        const e = err;
+        const why = e.name === 'TimeoutError' ? `timed out after ${FETCH_TIMEOUT_MS / 1000}s` : e.message;
+        return { manifest: null, reason: `could not reach the catalog (${why})` };
+    }
+    if (res.status === 401) {
+        return {
+            manifest: null,
+            reason: 'the catalog manifest read is gated — set EXTENSHI_API_KEY (run `extenshi login`) to enable the diff',
+        };
+    }
+    if (res.status === 404) {
+        return {
+            manifest: null,
+            reason: 'the deployed catalog API predates this feature (no getLatestPublishedManifest) — update once it ships',
+        };
+    }
+    if (!res.ok) {
+        return { manifest: null, reason: `catalog returned HTTP ${res.status}` };
+    }
+    let body;
+    try {
+        body = await res.json();
+    }
+    catch {
+        return { manifest: null, reason: 'catalog returned a non-JSON response' };
+    }
+    // tRPC (no transformer): { result: { data: <payload> } }, or { error: {...} }.
+    const error = body.error;
+    if (error) {
+        return { manifest: null, reason: `catalog error: ${error.message ?? 'unknown'}` };
+    }
+    const data = body.result?.data;
+    if (!data || data.manifest == null || typeof data.manifest !== 'object') {
+        const reason = data?.reason === 'no_snapshot'
+            ? 'no published manifest on record for this extension yet'
+            : data?.reason === 'manifest_unresolved'
+                ? 'the last snapshot could not be resolved to a manifest'
+                : 'the catalog returned no manifest for this extension';
+        return { manifest: null, reason };
+    }
+    return {
+        manifest: data.manifest,
+        meta: { store: data.store, version: data.version, fetchedAt: data.fetchedAt },
+    };
+}
+//# sourceMappingURL=review-catalog.js.map

package/dist/review-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-catalog.js","sourceRoot":"","sources":["../src/review-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAE9B,MAAM,gBAAgB,GAAG,MAAM,CAAA;AA0B/B,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA+B;IACvE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACnC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO;YACN,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,2BAA2B,IAAI,CAAC,WAAW,gCAAgC;SACnF,CAAA;IACF,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAA;IACvF,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IACvD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,oDAAoD,KAAK,EAAE,CAAA;IAErF,IAAI,GAAsC,CAAA;IAC1C,IAAI,CAAC;QACJ,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACtB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;YACtE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC7C,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,GAAY,CAAA;QACtB,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,mBAAmB,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;QACjG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,GAAG,GAAG,EAAE,CAAA;IAC1E,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxB,OAAO;YACN,QAAQ,EAAE,IAAI;YACd,MAAM,EACL,qGAAqG;SACtG,CAAA;IACF,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxB,OAAO;YACN,QAAQ,EAAE,IAAI;YACd,MAAM,EACL,uGAAuG;SACxG,CAAA;IACF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,yBAAyB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAA;IACzE,CAAC;IAED,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QACJ,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAA;IAC1E,CAAC;IAED,+EAA+E;IAC/E,MAAM,KAAK,GAAI,IAAyC,CAAC,KAAK,CAAA;IAC9D,IAAI,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,KAAK,CAAC,OAAO,IAAI,SAAS,EAAE,EAAE,CAAA;IAClF,CAAC;IAED,MAAM,IAAI,GAAI,IAAwC,CAAC,MAAM,EAAE,IASnD,CAAA;IAEZ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzE,MAAM,MAAM,GACX,IAAI,EAAE,MAAM,KAAK,aAAa;YAC7B,CAAC,CAAC,wDAAwD;YAC1D,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,qBAAqB;gBACvC,CAAC,CAAC,uDAAuD;gBACzD,CAAC,CAAC,qDAAqD,CAAA;QAC1D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAClC,CAAC;IAED,OAAO;QACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;KAC7E,CAAA;AACF,CAAC"}

package/dist/review-checks.d.ts

@@ -0,0 +1,139 @@
+/**
+ * review-risk — pure check logic for the pre-publish "will the store reject /
+ * slow-walk / silently disable this?" suite.
+ *
+ * Every finding maps to ONE of three real-world consequences, never a generic
+ * lint level:
+ *
+ *   REJECTED  — the store will reject the submission (you cannot ship as-is).
+ *   SLOW      — it ships, but review moves from <24h to several days.
+ *   ATTRITION — it ships and passes review, but installed users are silently
+ *               dropped on the update until they re-accept a new permission.
+ *
+ * Each check's `citation` points to the relevant official Chrome Web Store /
+ * Chrome for Developers documentation so the user can verify the rule at the
+ * source. (We do not cite third-party books in product output.)
+ *
+ * This module is PURE (no I/O) so the rules are unit-testable against fixtures.
+ * Archive extraction lives in review-archive.ts; the network manifest fetch in
+ * review-catalog.ts; rendering in review-render.ts.
+ */
+export type Verdict = 'REJECTED' | 'SLOW' | 'ATTRITION';
+export interface ReviewFinding {
+    /** The real-world consequence — drives the label shown to the user. */
+    verdict: Verdict;
+    /** Stable machine id (for --json consumers / suppression later). */
+    check: string;
+    /** One-line headline. */
+    title: string;
+    /** Why it matters, in plain language. */
+    detail: string;
+    /** The offending value or `file:line`, when there is one. */
+    evidence?: string;
+    /** The concrete fix. */
+    recommendation: string;
+    /** Official Chrome documentation backing the rule (shown to the user). */
+    citation: string;
+}
+/** A parsed manifest.json — only the fields the checks read are typed. */
+export interface Manifest {
+    manifest_version?: number;
+    name?: string;
+    version?: string;
+    permissions?: unknown;
+    optional_permissions?: unknown;
+    host_permissions?: unknown;
+    optional_host_permissions?: unknown;
+    content_scripts?: Array<{
+        matches?: unknown;
+        js?: unknown;
+        [k: string]: unknown;
+    }>;
+    background?: {
+        service_worker?: string;
+        scripts?: unknown;
+        page?: string;
+        type?: string;
+        [k: string]: unknown;
+    };
+    action?: {
+        default_popup?: string;
+        [k: string]: unknown;
+    };
+    browser_action?: {
+        default_popup?: string;
+        [k: string]: unknown;
+    };
+    options_ui?: {
+        page?: string;
+        [k: string]: unknown;
+    };
+    options_page?: string;
+    side_panel?: {
+        default_path?: string;
+        [k: string]: unknown;
+    };
+    devtools_page?: string;
+    chrome_url_overrides?: Record<string, string>;
+    sandbox?: {
+        pages?: unknown;
+        [k: string]: unknown;
+    };
+    [k: string]: unknown;
+}
+/** A text file pulled out of the artifact: package-relative path → contents. */
+export type FileMap = Map<string, string>;
+export declare const PERMISSION_WARNINGS: Readonly<Record<string, string>>;
+export declare function isGlobalHost(value: string): boolean;
+/**
+ * Required API permissions only (host patterns stripped out). In MV2 hosts and
+ * API permissions share the `permissions` array, so we split by shape.
+ */
+export declare function requiredApiPermissions(m: Manifest): string[];
+/** Required host patterns: `host_permissions` (MV3) plus any host-shaped entry in `permissions` (MV2). */
+export declare function requiredHostPermissions(m: Manifest): string[];
+/** Normalise a manifest-declared path to the package-relative key used in the file map. */
+export declare function normalizePath(p: string): string;
+/**
+ * HTML pages the browser renders inside the extension's own CSP — popup,
+ * options, side panel, devtools, newtab/history/bookmarks overrides, sandbox
+ * pages, and the MV2 background page. These are exactly where inline scripts and
+ * eval get the extension rejected.
+ */
+export declare function htmlEntrypoints(m: Manifest): string[];
+export declare function checkSlowReviewQueue(m: Manifest): ReviewFinding[];
+/**
+ * Static advisory — there is nothing in the package to inspect; it's a
+ * publishing-process fact developers routinely get burned by. Emitted once.
+ */
+export declare function checkListingChangeReReview(): ReviewFinding[];
+/**
+ * Diff the local manifest against the last-published one. A newly-added
+ * *required* permission that shows a warning silently disables the extension for
+ * the whole installed base on update (only a small toolbar icon appears) →
+ * silent attrition. Newly-added permissions of any kind also re-trip the slow
+ * review queue (ch.10).
+ *
+ * `prior` is the manifest fetched from the catalog's last snapshot; pass null
+ * when it could not be fetched (the caller surfaces why and this returns []).
+ */
+export declare function checkAutoDisableOnUpdate(local: Manifest, prior: Manifest | null): ReviewFinding[];
+export declare function checkRemoteCode(files: FileMap): ReviewFinding[];
+export declare function checkHtmlCsp(m: Manifest, files: FileMap): ReviewFinding[];
+export declare function checkServiceWorker(m: Manifest, files: FileMap): ReviewFinding[];
+export declare function checkActiveTabAdvisor(m: Manifest): ReviewFinding[];
+export interface ReviewInputs {
+    manifest: Manifest;
+    files: FileMap;
+    /** Last-published manifest from the catalog, or null when unavailable. */
+    priorManifest: Manifest | null;
+}
+export declare function runChecks(input: ReviewInputs): ReviewFinding[];
+export interface ReviewSummary {
+    findings: ReviewFinding[];
+    counts: Record<Verdict, number>;
+    /** True when at least one finding will block publishing. */
+    blocking: boolean;
+}
+export declare function summarize(findings: ReviewFinding[]): ReviewSummary;
+//# sourceMappingURL=review-checks.d.ts.map

package/dist/review-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-checks.d.ts","sourceRoot":"","sources":["../src/review-checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,MAAM,MAAM,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,WAAW,CAAA;AAEvD,MAAM,WAAW,aAAa;IAC7B,uEAAuE;IACvE,OAAO,EAAE,OAAO,CAAA;IAChB,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAA;IACb,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAA;IACd,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,wBAAwB;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAA;CAChB;AAED,0EAA0E;AAC1E,MAAM,WAAW,QAAQ;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,yBAAyB,CAAC,EAAE,OAAO,CAAA;IACnC,eAAe,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,OAAO,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,CAAA;IAClF,UAAU,CAAC,EAAE;QACZ,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KACpB,CAAA;IACD,MAAM,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACzD,cAAc,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACjE,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACpD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7C,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACnD,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CACpB;AAED,gFAAgF;AAChF,MAAM,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAazC,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkChE,CAAA;AA2BD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKnD;AAMD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,EAAE,CAE5D;AAED,0GAA0G;AAC1G,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,EAAE,CAE7D;AAID,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,EAAE,CAerD;AAID,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,QAAQ,GAAG,aAAa,EAAE,CAkBjE;AAID;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,aAAa,EAAE,CAe5D;AAID;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,aAAa,EAAE,CAoEjG;AA4BD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,EAAE,CAyB/D;AASD,wBAAgB,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,GAAG,aAAa,EAAE,CAkFzE;AAgDD,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,GAAG,aAAa,EAAE,CAkD/E;AAYD,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,QAAQ,GAAG,aAAa,EAAE,CA6BlE;AAID,MAAM,WAAW,YAAY;IAC5B,QAAQ,EAAE,QAAQ,CAAA;IAClB,KAAK,EAAE,OAAO,CAAA;IACd,0EAA0E;IAC1E,aAAa,EAAE,QAAQ,GAAG,IAAI,CAAA;CAC9B;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,EAAE,CAU9D;AAID,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC/B,4DAA4D;IAC5D,QAAQ,EAAE,OAAO,CAAA;CACjB;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,aAAa,CAKlE"}