@extenshi/cli 0.17.0 → 0.19.0

package/dist/localize.js

@@ -0,0 +1,292 @@
+import { createHash, randomUUID } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { canonicalSerialize, EXTENSION_LOCALES, validateMessageCatalog, } from './extension-localization.js';
+import { listingFromArtifact } from './listing.js';
+import { runListingOnlyChecks } from './review-checks.js';
+const STATE = '.extenshi-localization.json';
+function locale(value) {
+    if (typeof value !== 'string' || !EXTENSION_LOCALES.includes(value))
+        throw new Error(`Unsupported extension locale: ${String(value)}`);
+}
+function object(value) {
+    return !!value && typeof value === 'object' && !Array.isArray(value);
+}
+/** Reject symlink components, including dangling links, before reading or replacing workspace files. */
+function safePath(root, relative) {
+    const result = path.resolve(root, relative);
+    if (!result.startsWith(`${root}${path.sep}`))
+        throw new Error('Path must stay inside extension directory');
+    let current = root;
+    for (const part of path.relative(root, result).split(path.sep)) {
+        current = path.join(current, part);
+        try {
+            if (fs.lstatSync(current).isSymbolicLink())
+                throw new Error(`Symlinks are not supported: ${current}`);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+    }
+    return result;
+}
+function read(root, relative, fallback) {
+    const file = safePath(root, relative);
+    if (!fs.existsSync(file) && fallback !== undefined)
+        return fallback;
+    if (fs.statSync(file).size > 10 * 1024 * 1024)
+        throw new Error(`Localization file exceeds 10 MB: ${relative}`);
+    return JSON.parse(fs.readFileSync(file, 'utf8'));
+}
+function catalogPath(code) {
+    locale(code);
+    return `_locales/${code}/messages.json`;
+}
+function hash(value) {
+    return createHash('sha256').update(canonicalSerialize(value)).digest('hex');
+}
+function assertValid(errors) {
+    if (errors.length)
+        throw new Error(errors.join('\n'));
+}
+function context(directory, protect) {
+    const root = fs.realpathSync(directory);
+    const manifest = read(root, 'manifest.json');
+    locale(manifest.default_locale);
+    const sourceLocale = manifest.default_locale;
+    const source = read(root, catalogPath(sourceLocale));
+    assertValid(validateMessageCatalog(source, source));
+    const config = read(root, 'localization.json', {});
+    if (config.sourceLocale && config.sourceLocale !== sourceLocale)
+        throw new Error('localization.json sourceLocale differs from manifest default_locale');
+    if (config.targetLocales &&
+        (!Array.isArray(config.targetLocales) || config.targetLocales.some((value) => typeof value !== 'string')))
+        throw new Error('Invalid targetLocales configuration');
+    if (config.protectedTerms &&
+        (!Array.isArray(config.protectedTerms) ||
+            config.protectedTerms.some((value) => typeof value !== 'string')))
+        throw new Error('Invalid protectedTerms configuration');
+    const protectedTerms = [...(config.protectedTerms ?? []), ...(protect?.split(',').filter(Boolean) ?? [])];
+    const state = read(root, STATE, { version: 1, locales: {} });
+    if (!object(state) || state.version !== 1 || !object(state.locales))
+        throw new Error('Invalid localization state');
+    if (state.targetHashes !== undefined && !object(state.targetHashes))
+        throw new Error('Invalid localization target hashes');
+    for (const [code, hashes] of [
+        ...Object.entries(state.locales),
+        ...Object.entries(state.targetHashes ?? {}),
+    ]) {
+        locale(code);
+        if (!object(hashes) || Object.values(hashes).some((value) => typeof value !== 'string'))
+            throw new Error('Invalid localization state hashes');
+    }
+    return { root, manifest, sourceLocale, source, config, protectedTerms, state };
+}
+/** Stage every file first and restore originals if a rename fails. */
+function writeBatch(root, files) {
+    const staged = [];
+    const written = [];
+    try {
+        for (const [relative, value] of Object.entries(files)) {
+            const file = safePath(root, relative);
+            fs.mkdirSync(path.dirname(file), { recursive: true });
+            const temp = `${file}.${randomUUID()}.tmp`;
+            const original = fs.existsSync(file) ? fs.readFileSync(file) : null;
+            staged.push({ file, temp, original });
+            fs.writeFileSync(temp, `${JSON.stringify(value, null, '\t')}\n`, { flag: 'wx' });
+        }
+        for (const item of staged) {
+            safePath(root, path.relative(root, item.file));
+            fs.renameSync(item.temp, item.file);
+            written.push(item);
+        }
+    }
+    catch (error) {
+        for (const item of written.reverse()) {
+            if (item.original)
+                fs.writeFileSync(item.file, item.original);
+            else
+                fs.rmSync(item.file, { force: true });
+        }
+        throw error;
+    }
+    finally {
+        for (const item of staged)
+            fs.rmSync(item.temp, { force: true });
+    }
+}
+export function prepareLocalization(directory, options) {
+    const ctx = context(directory, options.protect);
+    const targets = [
+        ...new Set(options.lang ? options.lang.split(',').map((code) => code.trim()) : (ctx.config.targetLocales ?? [])),
+    ];
+    if (!targets.length)
+        throw new Error('Specify --lang fr,de,es or targetLocales in localization.json');
+    const bundle = { version: 1, sourceLocale: ctx.sourceLocale, locales: {} };
+    for (const code of targets) {
+        locale(code);
+        if (code === ctx.sourceLocale)
+            throw new Error('Target locale cannot be the default locale');
+        const existing = read(ctx.root, catalogPath(code), {});
+        assertValid(validateMessageCatalog(existing, existing));
+        const pending = Object.keys(ctx.source).filter((key) => !existing[key] ||
+            ctx.state.locales[code]?.[key] !== hash(ctx.source[key]) ||
+            ctx.state.targetHashes?.[code]?.[key] !== hash(existing[key]));
+        const removeKeys = Object.keys(existing).filter((key) => !Object.hasOwn(ctx.source, key));
+        if (pending.length || removeKeys.length)
+            bundle.locales[code] = {
+                removeKeys,
+                sourceHashes: Object.fromEntries(pending.map((key) => [key, hash(ctx.source[key])])),
+                messages: Object.fromEntries(pending.map((key) => [key, ctx.source[key]])),
+            };
+    }
+    fs.mkdirSync(options.output, { recursive: true });
+    const output = fs.realpathSync(options.output);
+    const file = safePath(output, 'localization-request.json');
+    // Request files must never overwrite work a translator already started.
+    fs.writeFileSync(file, `${JSON.stringify({ ...bundle, instructions: 'REQUEST ONLY: translate messages for each locale; preserve sourceHashes, placeholders, dollar escapes and protected terms. Review every requested key, then add reviewed: true to each locale before apply.', protectedTerms: ctx.protectedTerms }, null, '\t')}\n`, { flag: 'wx' });
+    return bundle;
+}
+function listingGate(manifest, sourceLocale, source, target) {
+    const errors = [];
+    const resolvedManifest = (messages) => {
+        const resolved = { ...manifest };
+        for (const field of ['name', 'description']) {
+            const raw = manifest[field];
+            if (typeof raw !== 'string')
+                continue;
+            const match = /^__MSG_([A-Za-z0-9_]+)__$/.exec(raw);
+            if (!match)
+                continue;
+            const key = Object.keys(messages).find((item) => item.toLowerCase() === match[1].toLowerCase());
+            if (!key) {
+                errors.push(`Manifest ${field}: missing message ${match[1]}`);
+                continue;
+            }
+            const entry = messages[key];
+            const expandContent = (content) => content.replace(/\${2,}|\$[1-9]/g, (token) => {
+                if (token.startsWith('$$'))
+                    return token.slice(1);
+                errors.push(`Manifest ${field}: positional substitutions require runtime arguments; use static text`);
+                return '';
+            });
+            resolved[field] = entry.message.replace(/\${2,}|\$[A-Za-z0-9_]+\$|\$[1-9]/g, (token) => {
+                if (token.startsWith('$$'))
+                    return token.slice(1);
+                if (/^\$[1-9]$/.test(token))
+                    return expandContent(token);
+                const name = Object.keys(entry.placeholders ?? {}).find((item) => item.toLowerCase() === token.slice(1, -1).toLowerCase());
+                return name ? expandContent(entry.placeholders?.[name]?.content ?? '') : token;
+            });
+        }
+        return resolved;
+    };
+    const originalManifest = resolvedManifest(source);
+    const translatedManifest = resolvedManifest(target);
+    const findings = (messages) => runListingOnlyChecks(listingFromArtifact(messages === source ? originalManifest : translatedManifest, new Map([[catalogPath(sourceLocale), JSON.stringify(messages)]])));
+    // Preserve matched claim/pattern evidence too: a baseline ranking claim must
+    // never hide a new guarantee or a different field's finding.
+    const identity = (finding) => {
+        const evidence = (finding.evidence ?? '').replace(/^\[[^\]]+\]\s*/, '');
+        const field = evidence.split(':')[0].trim();
+        const pattern = evidence.includes(' — ') ? evidence.split(' — ').slice(1).join(' — ') : '';
+        return `${finding.check}:${finding.title}:${field}:${pattern}`;
+    };
+    const baseline = new Map();
+    for (const finding of findings(source))
+        baseline.set(identity(finding), (baseline.get(identity(finding)) ?? 0) + 1);
+    // Store limits apply to visible text after placeholder and escape expansion.
+    // https://developer.chrome.com/docs/extensions/reference/manifest
+    for (const [field, limit] of [
+        ['name', 75],
+        ['description', 132],
+    ]) {
+        const message = translatedManifest[field];
+        if (typeof message === 'string' && message.length > limit)
+            errors.push(`Manifest ${field}: translation exceeds ${limit} characters`);
+    }
+    for (const finding of findings(target)) {
+        const remaining = baseline.get(identity(finding)) ?? 0;
+        if (remaining)
+            baseline.set(identity(finding), remaining - 1);
+        else
+            errors.push(`Translation introduces listing risk ${finding.check}: ${finding.title}`);
+    }
+    return errors;
+}
+export function applyLocalization(directory, translations, protect) {
+    const ctx = context(directory, protect);
+    if (!object(translations) ||
+        translations.version !== 1 ||
+        translations.sourceLocale !== ctx.sourceLocale ||
+        !object(translations.locales))
+        throw new Error('Invalid translation bundle or source locale');
+    const files = {};
+    let keys = 0;
+    for (const [code, value] of Object.entries(translations.locales)) {
+        locale(code);
+        if (code === ctx.sourceLocale)
+            throw new Error('Cannot replace the default locale');
+        if (!object(value) || value.reviewed !== true || !object(value.sourceHashes) || !object(value.messages))
+            throw new Error(`Invalid translation bundle for ${code}; set reviewed: true after reviewing each requested translation`);
+        assertValid(validateMessageCatalog(ctx.source, value.messages, {
+            allowMissing: true,
+            protectedTerms: ctx.protectedTerms,
+        }));
+        if (Object.keys(value.sourceHashes).length !== Object.keys(value.messages).length)
+            throw new Error(`${code}: sourceHashes must match translated keys`);
+        for (const key of Object.keys(value.messages))
+            if (value.sourceHashes[key] !== hash(ctx.source[key]))
+                throw new Error(`${code}.${key}: source changed; prepare translations again`);
+        const existing = read(ctx.root, catalogPath(code), {});
+        const removeKeys = value.removeKeys ?? [];
+        if (!Array.isArray(removeKeys) ||
+            removeKeys.some((key) => typeof key !== 'string' || Object.hasOwn(ctx.source, key) || !Object.hasOwn(existing, key)))
+            throw new Error(`${code}: invalid or stale removed keys; prepare translations again`);
+        const merged = { ...existing, ...value.messages };
+        for (const key of removeKeys)
+            delete merged[key];
+        assertValid(validateMessageCatalog(ctx.source, merged, { protectedTerms: ctx.protectedTerms }));
+        assertValid(listingGate(ctx.manifest, ctx.sourceLocale, ctx.source, merged));
+        files[catalogPath(code)] = merged;
+        ctx.state.locales[code] = { ...ctx.state.locales[code], ...value.sourceHashes };
+        ctx.state.targetHashes ??= {};
+        ctx.state.targetHashes[code] = {
+            ...ctx.state.targetHashes[code],
+            ...Object.fromEntries(Object.entries(value.messages).map(([key, message]) => [key, hash(message)])),
+        };
+        for (const key of removeKeys) {
+            delete ctx.state.locales[code][key];
+            delete ctx.state.targetHashes[code][key];
+        }
+        keys += Object.keys(value.messages).length;
+    }
+    if (Object.keys(files).length) {
+        files[STATE] = ctx.state;
+        writeBatch(ctx.root, files);
+    }
+    return { locales: Object.keys(translations.locales), keys };
+}
+export function checkLocalization(directory, protect) {
+    const ctx = context(directory, protect);
+    const locales = [
+        ...new Set([...fs.readdirSync(safePath(ctx.root, '_locales')), ...(ctx.config.targetLocales ?? [])]),
+    ].filter((code) => code !== ctx.sourceLocale);
+    const errors = [];
+    for (const code of locales) {
+        locale(code);
+        const target = read(ctx.root, catalogPath(code), {});
+        const invalid = validateMessageCatalog(ctx.source, target, { protectedTerms: ctx.protectedTerms });
+        errors.push(...invalid.map((error) => `${code}: ${error}`));
+        if (!invalid.length)
+            errors.push(...listingGate(ctx.manifest, ctx.sourceLocale, ctx.source, target).map((error) => `${code}: ${error}`));
+        for (const key of Object.keys(ctx.source))
+            if (ctx.state.locales[code]?.[key] !== hash(ctx.source[key]) ||
+                !target[key] ||
+                ctx.state.targetHashes?.[code]?.[key] !== hash(target[key]))
+                errors.push(`${code}.${key}: unreviewed or stale translation; run localize prepare`);
+    }
+    return { locales, errors };
+}
+//# sourceMappingURL=localize.js.map

package/dist/localize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localize.js","sourceRoot":"","sources":["../src/localize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EAEjB,sBAAsB,GACtB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAiB,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAkBxE,MAAM,KAAK,GAAG,6BAA6B,CAAA;AAC3C,SAAS,MAAM,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;AACnE,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC7B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AACD,wGAAwG;AACxG,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAgB;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC3C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC1G,IAAI,OAAO,GAAG,IAAI,CAAA;IAClB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAClC,IAAI,CAAC;YACJ,IAAI,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAA;QACtG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QACpE,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AACD,SAAS,IAAI,CAAC,IAAY,EAAE,QAAgB,EAAE,QAAkB;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IACnE,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;QAC5C,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAA;IAChE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;AACjD,CAAC;AACD,SAAS,WAAW,CAAC,IAAY;IAChC,MAAM,CAAC,IAAI,CAAC,CAAA;IACZ,OAAO,YAAY,IAAI,gBAAgB,CAAA;AACxC,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AACD,SAAS,WAAW,CAAC,MAAgB;IACpC,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AACtD,CAAC;AACD,SAAS,OAAO,CAAC,SAAiB,EAAE,OAAgB;IACnD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAa,CAAA;IACxD,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;IAC/B,MAAM,YAAY,GAAG,QAAQ,CAAC,cAAwB,CAAA;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC,CAAmB,CAAA;IACtE,WAAW,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,EAAE,CAIhD,CAAA;IACD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,KAAK,YAAY;QAC9D,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;IACvF,IACC,MAAM,CAAC,aAAa;QACpB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;QAEzG,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACvD,IACC,MAAM,CAAC,cAAc;QACrB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;YACrC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;QAElE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACxD,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACzG,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAU,CAAA;IACrE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC9C,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACtD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI;QAC5B,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;KAC3C,EAAE,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAA;QACZ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAA;AAC/E,CAAC;AACD,sEAAsE;AACtE,SAAS,UAAU,CAAC,IAAY,EAAE,KAA8B;IAC/D,MAAM,MAAM,GAA8D,EAAE,CAAA;IAC5E,MAAM,OAAO,GAAkB,EAAE,CAAA;IACjC,IAAI,CAAC;QACJ,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YACrC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACrD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAA;YAC1C,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACnE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;YACrC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACjF,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YAC9C,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,QAAQ;gBAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;;gBACxD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,CAAC;QACD,MAAM,KAAK,CAAA;IACZ,CAAC;YAAS,CAAC;QACV,KAAK,MAAM,IAAI,IAAI,MAAM;YAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACjE,CAAC;AACF,CAAC;AACD,MAAM,UAAU,mBAAmB,CAClC,SAAiB,EACjB,OAA4D;IAE5D,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG;QACf,GAAG,IAAI,GAAG,CACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CACpG;KACD,CAAA;IACD,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;IACrG,MAAM,MAAM,GAAuB,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC9F,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAA;QACZ,IAAI,IAAI,KAAK,GAAG,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,CAAmB,CAAA;QACxE,WAAW,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAC7C,CAAC,GAAG,EAAE,EAAE,CACP,CAAC,QAAQ,CAAC,GAAG,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxD,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAC9D,CAAA;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;QACzF,IAAI,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM;YACtC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG;gBACtB,UAAU;gBACV,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpF,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAC1E,CAAA;IACH,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAA;IAC1D,wEAAwE;IACxE,EAAE,CAAC,aAAa,CACf,IAAI,EACJ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,6MAA6M,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EACjT,EAAE,IAAI,EAAE,IAAI,EAAE,CACd,CAAA;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AACD,SAAS,WAAW,CACnB,QAAkB,EAClB,YAAoB,EACpB,MAAsB,EACtB,MAAsB;IAEtB,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,gBAAgB,GAAG,CAAC,QAAwB,EAAY,EAAE;QAC/D,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAA;QAChC,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,aAAa,CAAU,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,SAAQ;YACrC,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnD,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;YAC/F,IAAI,CAAC,GAAG,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,qBAAqB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBAC7D,SAAQ;YACT,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;YAC3B,MAAM,aAAa,GAAG,CAAC,OAAe,EAAU,EAAE,CACjD,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5C,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBACjD,MAAM,CAAC,IAAI,CACV,YAAY,KAAK,uEAAuE,CACxF,CAAA;gBACD,OAAO,EAAE,CAAA;YACV,CAAC,CAAC,CAAA;YACH,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,mCAAmC,EAAE,CAAC,KAAK,EAAE,EAAE;gBACtF,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBACjD,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAA;gBACxD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CACtD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CACjE,CAAA;gBACD,OAAO,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;YAC/E,CAAC,CAAC,CAAA;QACH,CAAC;QACD,OAAO,QAAQ,CAAA;IAChB,CAAC,CAAA;IACD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACjD,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACnD,MAAM,QAAQ,GAAG,CAAC,QAAwB,EAAE,EAAE,CAC7C,oBAAoB,CACnB,mBAAmB,CAClB,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB,EAC3D,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAChE,CACD,CAAA;IACF,6EAA6E;IAC7E,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,CAAC,OAA4D,EAAE,EAAE;QACjF,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAA;QACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1F,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,KAAK,IAAI,OAAO,EAAE,CAAA;IAC/D,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;QACrC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC5E,6EAA6E;IAC7E,kEAAkE;IAClE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI;QAC5B,CAAC,MAAM,EAAE,EAAE,CAAC;QACZ,CAAC,aAAa,EAAE,GAAG,CAAC;KACX,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;QACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK;YACxD,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,yBAAyB,KAAK,aAAa,CAAC,CAAA;IAC3E,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAA;QACtD,IAAI,SAAS;YAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAA;;YACxD,MAAM,CAAC,IAAI,CAAC,uCAAuC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AACD,MAAM,UAAU,iBAAiB,CAChC,SAAiB,EACjB,YAAqB,EACrB,OAAgB;IAEhB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IACvC,IACC,CAAC,MAAM,CAAC,YAAY,CAAC;QACrB,YAAY,CAAC,OAAO,KAAK,CAAC;QAC1B,YAAY,CAAC,YAAY,KAAK,GAAG,CAAC,YAAY;QAC9C,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC;QAE7B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAC/D,MAAM,KAAK,GAA4B,EAAE,CAAA;IACzC,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,CAAA;QACZ,IAAI,IAAI,KAAK,GAAG,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACnF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;YACtG,MAAM,IAAI,KAAK,CACd,kCAAkC,IAAI,iEAAiE,CACvG,CAAA;QACF,WAAW,CACV,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE;YAClD,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,GAAG,CAAC,cAAc;SAClC,CAAC,CACF,CAAA;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM;YAChF,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2CAA2C,CAAC,CAAA;QACpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC5C,IAAI,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,GAAG,8CAA8C,CAAC,CAAA;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,CAAmB,CAAA;QACxE,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAA;QACzC,IACC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1B,UAAU,CAAC,IAAI,CACd,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CACnG;YAED,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6DAA6D,CAAC,CAAA;QACtF,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAoB,CAAA;QACnE,KAAK,MAAM,GAAG,IAAI,UAAU;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;QAChD,WAAW,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAA;QAC/F,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;QAC5E,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAA;QACjC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,YAAY,EAA4B,CAAA;QACzG,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,EAAE,CAAA;QAC7B,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG;YAC9B,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;YAC/B,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SACnG,CAAA;QACD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YACnC,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACzC,CAAC;QACD,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAA;IAC3C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAA;QACxB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAA;AAC5D,CAAC;AACD,MAAM,UAAU,iBAAiB,CAChC,SAAiB,EACjB,OAAgB;IAEhB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG;QACf,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;KACpG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,YAAY,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAA;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,CAAmB,CAAA;QACtE,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAA;QAClG,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAA;QAC3D,IAAI,CAAC,OAAO,CAAC,MAAM;YAClB,MAAM,CAAC,IAAI,CACV,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,CACrE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,CAC9B,CACD,CAAA;QACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YACxC,IACC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACxD,CAAC,MAAM,CAAC,GAAG,CAAC;gBACZ,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAE3D,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,yDAAyD,CAAC,CAAA;IACvF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC"}

package/dist/permission-justifications.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Store-justification prompts for sensitive permissions (ROADMAP it.1 T6).
+ *
+ * The published CLI cannot import workspace `shared-types`, so this is a
+ * lockstep copy of `PERMISSION_JUSTIFICATION_PROMPTS` /
+ * `JUSTIFICATION_CRITICAL_PERMISSIONS` in `shared-types/permission-usage.ts`.
+ * `permission-justifications.test.ts` pins equality.
+ *
+ * These are QUESTIONS the developer answers in the dashboard, never prose we
+ * write on their behalf — an invented justification submitted verbatim is a
+ * policy problem for them.
+ */
+import type { Manifest } from './review-checks.js';
+export type PermissionJustificationPrompt = {
+    question: string;
+    example: string;
+};
+export declare const PERMISSION_JUSTIFICATION_PROMPTS: Readonly<Record<string, PermissionJustificationPrompt>>;
+/**
+ * Mirror of `JUSTIFICATION_CRITICAL_PERMISSIONS` in shared-types. Used only to
+ * order the checklist so the scariest prompt is answered first.
+ */
+export declare const JUSTIFICATION_CRITICAL_PERMISSIONS: readonly string[];
+/**
+ * Sensitive permissions declared, including host patterns. Matches
+ * `justification_permissions` in `dags/.../permission_usage.py`: host
+ * permissions are out of scope for used/unused but in scope here —
+ * `<all_urls>` is the single most-questioned dashboard entry.
+ */
+export declare function justificationPermissions(manifest: Manifest): string[];
+export type JustificationRow = {
+    permission: string;
+    tier: 'CRITICAL' | 'HIGH';
+    question: string;
+    example: string;
+};
+/** Store-justification prompts for the sensitive permissions declared. */
+export declare function buildJustificationChecklist(manifest: Manifest): JustificationRow[];
+//# sourceMappingURL=permission-justifications.d.ts.map

package/dist/permission-justifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-justifications.d.ts","sourceRoot":"","sources":["../src/permission-justifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAElD,MAAM,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CACf,CAAA;AAED,eAAO,MAAM,gCAAgC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAmFpG,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,kCAAkC,EAAE,SAAS,MAAM,EAK/D,CAAA;AAiBD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,EAAE,CAWrE;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,UAAU,GAAG,MAAM,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CACf,CAAA;AAED,0EAA0E;AAC1E,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,GAAG,gBAAgB,EAAE,CAkBlF"}

package/dist/permission-justifications.js

@@ -0,0 +1,145 @@
+/**
+ * Store-justification prompts for sensitive permissions (ROADMAP it.1 T6).
+ *
+ * The published CLI cannot import workspace `shared-types`, so this is a
+ * lockstep copy of `PERMISSION_JUSTIFICATION_PROMPTS` /
+ * `JUSTIFICATION_CRITICAL_PERMISSIONS` in `shared-types/permission-usage.ts`.
+ * `permission-justifications.test.ts` pins equality.
+ *
+ * These are QUESTIONS the developer answers in the dashboard, never prose we
+ * write on their behalf — an invented justification submitted verbatim is a
+ * policy problem for them.
+ */
+export const PERMISSION_JUSTIFICATION_PROMPTS = {
+    '<all_urls>': {
+        question: 'Which sites does the feature actually run on, and why can that not be expressed as a list of match patterns?',
+        example: 'The extension checks every page the user opens against a local blocklist, so it cannot know the origins in advance.',
+    },
+    debugger: {
+        question: 'Which debugger domain and commands do you attach, and what user-visible feature needs them?',
+        example: 'We attach to the Network domain to record HAR files when the user presses Record, and detach when recording stops.',
+    },
+    management: {
+        question: 'What do you read or change about other installed extensions, and does the user ask for it?',
+        example: 'The user picks which of their extensions to disable while a game is in fullscreen; we call management.setEnabled only for the ones they selected.',
+    },
+    nativeMessaging: {
+        question: 'Which native host do you connect to, who publishes it, and what data crosses that boundary?',
+        example: 'We connect to our own signed desktop helper to read the local Git repository the user selected; only the repository path crosses the boundary.',
+    },
+    desktopCapture: {
+        question: 'What does the user do to start a capture, and where does the captured stream go?',
+        example: 'The user clicks Record, picks a surface in the browser picker, and the stream is encoded locally and saved to their downloads.',
+    },
+    proxy: {
+        question: 'What traffic do you route where, and how does the user turn it off?',
+        example: 'We set a PAC script routing only the corporate domains the admin configured; the toolbar toggle clears the setting.',
+    },
+    cookies: {
+        question: 'Which cookies on which origins do you read or write, and for what feature?',
+        example: 'We read our own session cookie on app.example.com to show the signed-in user in the popup.',
+    },
+    tabs: {
+        question: 'Which privileged tab fields (url, title, favIconUrl) does the feature need, and why is activeTab not enough?',
+        example: 'The side panel lists every open tab by title so the user can search them, which activeTab cannot provide.',
+    },
+    history: {
+        question: 'What do you read from or write to browsing history, and does it leave the device?',
+        example: 'We search local history for pages matching the current query to surface them in the popup; nothing is uploaded.',
+    },
+    topSites: {
+        question: 'Where are the top sites shown, and does the list leave the device?',
+        example: 'The new-tab page renders the eight most-visited sites locally; the list is never sent anywhere.',
+    },
+    downloads: {
+        question: 'What do you download or inspect, and did the user ask for that file?',
+        example: 'We save the file the user chose to export and then open the downloads shelf entry for it.',
+    },
+    webRequest: {
+        question: 'Which requests do you observe or modify, and why can declarativeNetRequest not express it?',
+        example: 'We count requests per origin to render a live privacy meter; no request is modified or blocked.',
+    },
+    privacy: {
+        question: 'Which privacy settings do you change, and how is the user told?',
+        example: 'The onboarding screen offers to disable the network prediction setting and shows the current value.',
+    },
+    contentSettings: {
+        question: 'Which content setting do you change on which origins, and at whose request?',
+        example: 'The user adds a site to the allowlist and we enable JavaScript for that origin only.',
+    },
+    userScripts: {
+        question: 'Whose scripts run, where do they come from, and can the user read them first?',
+        example: 'Only scripts the user pastes into our editor run, on the origins they list, and the editor is the only source.',
+    },
+    pageCapture: {
+        question: 'What does the user do to capture a page, and where does the MHTML go?',
+        example: 'The user clicks Save page and the MHTML is written to their downloads folder unchanged.',
+    },
+    scripting: {
+        question: 'What do you inject, into which origins, and when?',
+        example: 'We inject the highlight overlay into the active tab after the user clicks the toolbar icon.',
+    },
+};
+/**
+ * Mirror of `JUSTIFICATION_CRITICAL_PERMISSIONS` in shared-types. Used only to
+ * order the checklist so the scariest prompt is answered first.
+ */
+export const JUSTIFICATION_CRITICAL_PERMISSIONS = [
+    '<all_urls>',
+    'debugger',
+    'management',
+    'nativeMessaging',
+];
+function promptFor(permission) {
+    return Object.hasOwn(PERMISSION_JUSTIFICATION_PROMPTS, permission)
+        ? PERMISSION_JUSTIFICATION_PROMPTS[permission]
+        : undefined;
+}
+function stringEntries(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const p of raw) {
+        if (typeof p === 'string' && p.trim())
+            out.push(p.trim());
+    }
+    return out;
+}
+/**
+ * Sensitive permissions declared, including host patterns. Matches
+ * `justification_permissions` in `dags/.../permission_usage.py`: host
+ * permissions are out of scope for used/unused but in scope here —
+ * `<all_urls>` is the single most-questioned dashboard entry.
+ */
+export function justificationPermissions(manifest) {
+    const declared = [];
+    const seen = new Set();
+    for (const source of [manifest.permissions, manifest.host_permissions]) {
+        for (const permission of stringEntries(source)) {
+            if (seen.has(permission) || !promptFor(permission))
+                continue;
+            seen.add(permission);
+            declared.push(permission);
+        }
+    }
+    return declared;
+}
+/** Store-justification prompts for the sensitive permissions declared. */
+export function buildJustificationChecklist(manifest) {
+    const out = [];
+    for (const permission of justificationPermissions(manifest)) {
+        const prompt = promptFor(permission);
+        if (!prompt)
+            continue;
+        out.push({
+            permission,
+            tier: JUSTIFICATION_CRITICAL_PERMISSIONS.includes(permission) ? 'CRITICAL' : 'HIGH',
+            question: prompt.question,
+            example: prompt.example,
+        });
+    }
+    out.sort((a, b) => (a.tier === 'CRITICAL' ? 0 : 1) - (b.tier === 'CRITICAL' ? 0 : 1) ||
+        a.permission.localeCompare(b.permission));
+    return out;
+}
+//# sourceMappingURL=permission-justifications.js.map

package/dist/permission-justifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-justifications.js","sourceRoot":"","sources":["../src/permission-justifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AASH,MAAM,CAAC,MAAM,gCAAgC,GAA4D;IACxG,YAAY,EAAE;QACb,QAAQ,EACP,8GAA8G;QAC/G,OAAO,EACN,qHAAqH;KACtH;IACD,QAAQ,EAAE;QACT,QAAQ,EAAE,6FAA6F;QACvG,OAAO,EACN,oHAAoH;KACrH;IACD,UAAU,EAAE;QACX,QAAQ,EAAE,4FAA4F;QACtG,OAAO,EACN,mJAAmJ;KACpJ;IACD,eAAe,EAAE;QAChB,QAAQ,EAAE,6FAA6F;QACvG,OAAO,EACN,gJAAgJ;KACjJ;IACD,cAAc,EAAE;QACf,QAAQ,EAAE,kFAAkF;QAC5F,OAAO,EACN,gIAAgI;KACjI;IACD,KAAK,EAAE;QACN,QAAQ,EAAE,qEAAqE;QAC/E,OAAO,EACN,qHAAqH;KACtH;IACD,OAAO,EAAE;QACR,QAAQ,EAAE,4EAA4E;QACtF,OAAO,EAAE,4FAA4F;KACrG;IACD,IAAI,EAAE;QACL,QAAQ,EACP,8GAA8G;QAC/G,OAAO,EACN,2GAA2G;KAC5G;IACD,OAAO,EAAE;QACR,QAAQ,EAAE,mFAAmF;QAC7F,OAAO,EACN,iHAAiH;KAClH;IACD,QAAQ,EAAE;QACT,QAAQ,EAAE,oEAAoE;QAC9E,OAAO,EACN,iGAAiG;KAClG;IACD,SAAS,EAAE;QACV,QAAQ,EAAE,sEAAsE;QAChF,OAAO,EAAE,2FAA2F;KACpG;IACD,UAAU,EAAE;QACX,QAAQ,EAAE,4FAA4F;QACtG,OAAO,EACN,iGAAiG;KAClG;IACD,OAAO,EAAE;QACR,QAAQ,EAAE,iEAAiE;QAC3E,OAAO,EACN,qGAAqG;KACtG;IACD,eAAe,EAAE;QAChB,QAAQ,EAAE,6EAA6E;QACvF,OAAO,EAAE,sFAAsF;KAC/F;IACD,WAAW,EAAE;QACZ,QAAQ,EAAE,+EAA+E;QACzF,OAAO,EACN,gHAAgH;KACjH;IACD,WAAW,EAAE;QACZ,QAAQ,EAAE,uEAAuE;QACjF,OAAO,EAAE,yFAAyF;KAClG;IACD,SAAS,EAAE;QACV,QAAQ,EAAE,mDAAmD;QAC7D,OAAO,EAAE,6FAA6F;KACtG;CACD,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAsB;IACpE,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,iBAAiB;CACjB,CAAA;AAED,SAAS,SAAS,CAAC,UAAkB;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,gCAAgC,EAAE,UAAU,CAAC;QACjE,CAAC,CAAC,gCAAgC,CAAC,UAAU,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAA;AACb,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAClC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAkB;IAC1D,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxE,KAAK,MAAM,UAAU,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;gBAAE,SAAQ;YAC5D,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACpB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC1B,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC;AASD,0EAA0E;AAC1E,MAAM,UAAU,2BAA2B,CAAC,QAAkB;IAC7D,MAAM,GAAG,GAAuB,EAAE,CAAA;IAClC,KAAK,MAAM,UAAU,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM;YAAE,SAAQ;QACrB,GAAG,CAAC,IAAI,CAAC;YACR,UAAU;YACV,IAAI,EAAE,kCAAkC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;YACnF,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;SACvB,CAAC,CAAA;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CACP,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACR,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CACzC,CAAA;IACD,OAAO,GAAG,CAAA;AACX,CAAC"}