@extenshi/cli 0.20.0 → 0.22.0

package/dist/auto-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-evidence.d.ts","sourceRoot":"","sources":["../src/auto-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAMH,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAIlD,OAAO,EAAE,KAAK,aAAa,EAAwB,MAAM,oBAAoB,CAAA;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAA;AAG3D,eAAO,MAAM,SAAS,GAAI,OAAO,UAAU,GAAG,MAAM,WAAqD,CAAA;AAEzG;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC/B,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,QAAQ,CAAC,EAAE,MAAM,GACf,eAAe,EAAE,CAmBnB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE;IACnC,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7B,GAAG,cAAc,EAAE,CAWnB;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAAG,cAAc,EAAE,CAUxG;AAQD,KAAK,eAAe,GAAG,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;AAE7D,gGAAgG;AAChG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,eAAe,CAMlF;AAKD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAA;IAClC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CACpC,GAAG,cAAc,EAAE,CAYnB;AAED,uGAAuG;AACvG,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAEnE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACtC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,UAAU,GAAG,MAAM,CAAA;IACjC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,2DAA2D;IAC3D,eAAe,EAAE,SAAS,aAAa,EAAE,CAAA;CACzC,GAAG,cAAc,EAAE,CAwBnB;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACrD,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAA;CAC3B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAU5B;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,SAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBtG"}

package/dist/auto-evidence.js

@@ -0,0 +1,197 @@
+/**
+ * `--evidence` on `scan`, `review-risk`, `generate-listing` and `test smoke`:
+ * turn the result the command just computed into the readiness evidence kind it
+ * attests, with the digests `releaseReadiness` matches against, and record it for
+ * the project bound in this directory — through the same client path as
+ * `extenshi evidence push` (project.ts → recordAgentEvidence).
+ *
+ * The digests are the contract (shared-types/project-workspace.ts
+ * `releaseReadiness`):
+ *
+ *   kind          artifactDigest     inputDigest                      locale
+ *   scan          sha256(zip)        sha256(zip)                      —
+ *   installed     sha256(zip)        sha256(zip)                      —
+ *   permissions   sha256(zip)        hashMetadata(packaged manifest)  —
+ *   listing       sha256(zip)        sha256(listing file bytes)       each locale
+ *
+ * `hashMetadata(manifest)` is what `release prepare` stores as manifestDigest,
+ * and `sha256(listing file)` is what `release prepare --listing <file>` stores as
+ * listingDigest — so evidence recorded here is current exactly when the release
+ * binds the same package and the same listing file.
+ *
+ * Status rules (documented in the CLI docs):
+ *   scan         failed on a REJECTION_LIKELY store-compliance finding or any
+ *                CRITICAL security finding — the report's own "fail" verdict.
+ *   permissions  failed on a REJECTED review-risk finding outside the listing rules.
+ *   listing      failed only on a REJECTED listing-rule finding for that locale —
+ *                exactly what would make `review-risk` exit non-zero. Listing rules
+ *                are ADVISORY by roadmap policy (iteration 2 T9: the v3 dictionary
+ *                measured a 78.7% false-positive rate) and never fail review-risk,
+ *                so failing readiness on them would block releases on false
+ *                positives. An advisory finding leaves the check `passed`.
+ *   installed    the smoke result.
+ *
+ * `permissions` and `listing` carry a `summary` (finding count, blocking count,
+ * distinct check ids) so the advisories behind a `passed` stay visible to
+ * whoever reads the record. It is sent only to a server that advertises it
+ * (project.ts → recordAgentEvidence).
+ */
+import { createHash } from 'node:crypto';
+import fs from 'node:fs';
+import { hashMetadata } from '@extenshi/contracts';
+import { InvalidInputError } from './expected-error.js';
+import { assembleListing } from './listing.js';
+import { packagedBrowsersFor } from './package.js';
+import { summarizeCompliance, summarizeReport } from './render.js';
+import { computeVerdict } from './report.js';
+import { loadArtifact } from './review-archive.js';
+import { runListingOnlyChecks } from './review-checks.js';
+const BROWSERS = ['chrome', 'edge', 'firefox'];
+export const sha256Hex = (bytes) => createHash('sha256').update(bytes).digest('hex');
+/**
+ * Which store(s) the evidence is for: the explicit list, else the browsers
+ * `extenshi package` recorded for these exact bytes (Chrome and Edge built from
+ * one directory are the same zip), else refuse — mislabelled evidence would
+ * satisfy the wrong release.
+ */
+export function evidenceBrowsers(artifactPath, artifactDigest, explicit) {
+    if (explicit) {
+        const list = explicit
+            .split(',')
+            .map((s) => s.trim().toLowerCase())
+            .filter(Boolean);
+        const bad = list.filter((s) => !BROWSERS.includes(s));
+        if (bad.length || !list.length)
+            throw new InvalidInputError(`--evidence-browser takes a comma-separated list of: ${BROWSERS.join(', ')}`);
+        return [...new Set(list)];
+    }
+    const packaged = packagedBrowsersFor(artifactPath, artifactDigest);
+    if (packaged.length)
+        return packaged;
+    throw new InvalidInputError('--evidence needs to know which store this package is for. Pass --evidence-browser chrome|edge|firefox, ' +
+        'or run it on a zip from `extenshi package`, whose extenshi-packages.json records the browser.');
+}
+export function scanEvidence(input) {
+    const verdict = computeVerdict(summarizeCompliance(input.body), summarizeReport(input.body));
+    const critical = summarizeReport(input.body).findings.some((f) => f.severity === 'CRITICAL');
+    const status = verdict.level === 'fail' || critical ? 'failed' : 'passed';
+    return input.browsers.map((browser) => ({
+        kind: 'scan',
+        browser,
+        artifactDigest: input.artifactDigest,
+        inputDigest: input.artifactDigest,
+        status,
+    }));
+}
+export function smokeEvidence(input) {
+    return [
+        {
+            kind: 'installed',
+            browser: input.browser,
+            artifactDigest: input.result.sha256,
+            inputDigest: input.result.sha256,
+            status: input.result.status,
+        },
+    ];
+}
+/**
+ * Mirrors EVIDENCE_SUMMARY_MAX_IDS in the contract. Not imported: an installed
+ * @extenshi/contracts that predates the summary has no such export, and a
+ * missing named ESM import would stop the whole CLI from loading.
+ */
+const SUMMARY_MAX_IDS = 50;
+/** Counts and distinct check ids — never finding text, which can quote listing copy or code. */
+export function findingSummary(findings) {
+    return {
+        findingCount: findings.length,
+        blockingCount: findings.filter(isBlocking).length,
+        findingIds: [...new Set(findings.map((f) => f.check))].sort().slice(0, SUMMARY_MAX_IDS),
+    };
+}
+/** What makes `review-risk` exit non-zero (summarize → `blocking`). */
+const isBlocking = (f) => f.verdict === 'REJECTED';
+export function permissionsEvidence(input) {
+    const own = input.findings.filter((f) => !input.listingCheckIds.has(f.check));
+    const summary = findingSummary(own);
+    const inputDigest = hashMetadata(input.manifest);
+    return input.browsers.map((browser) => ({
+        kind: 'permissions',
+        browser,
+        artifactDigest: input.artifactDigest,
+        inputDigest,
+        status: summary.blockingCount ? 'failed' : 'passed',
+        summary,
+    }));
+}
+/** Listing findings carry `[locale] field…` evidence; one without a locale applies to every locale. */
+export function findingLocale(finding) {
+    return /^\[([^\]\s]+)\]/.exec(finding.evidence ?? '')?.[1] ?? null;
+}
+export function listingEvidence(input) {
+    const locales = input.listing?.locales.map((l) => l.locale) ?? [];
+    if (!locales.length)
+        throw new InvalidInputError('The listing has no locale with text, so there is nothing to attest.');
+    const inputDigest = sha256Hex(input.listingBytes);
+    return input.browsers.flatMap((browser) => locales.map((locale) => {
+        const hits = input.listingFindings.filter((f) => {
+            const at = findingLocale(f);
+            return at === null || at === locale;
+        });
+        const summary = findingSummary(hits);
+        return {
+            kind: 'listing',
+            browser,
+            locale,
+            artifactDigest: input.artifactDigest,
+            inputDigest,
+            // Advisory findings are carried in the summary, never in the status.
+            status: summary.blockingCount ? 'failed' : 'passed',
+            summary,
+        };
+    }));
+}
+/**
+ * `generate-listing --evidence`: read the draft the command just wrote
+ * (CHROMEWEBSTORE.md, EDGE.md or AMO.md — one parser, keyed on headings) back
+ * over the package, run the listing rules on it and bind the evidence to that
+ * file's bytes. `browsers` is the store the draft is for.
+ */
+export async function generatedListingEvidence(input) {
+    const { manifest, files } = await loadArtifact(input.artifactBytes);
+    const listing = assembleListing(manifest, files, input.draftPath);
+    return listingEvidence({
+        artifactDigest: input.artifactDigest,
+        listingBytes: fs.readFileSync(input.draftPath),
+        listing,
+        browsers: input.browsers,
+        listingFindings: runListingOnlyChecks(listing),
+    });
+}
+/**
+ * Record the batch for the bound project and say so on stderr (stdout stays the
+ * command's own output, e.g. --json). A queued (offline) record sets exit code 1
+ * like `evidence push`; any other failure throws — the caller asked for evidence.
+ */
+export async function recordAutoEvidence(records, cwd = process.cwd()) {
+    if (!records.length)
+        return;
+    const { recordAgentEvidence } = await import('./project.js');
+    const result = await recordAgentEvidence(cwd, records);
+    const summary = records
+        .map((r) => {
+        const advisories = r.summary ? r.summary.findingCount - r.summary.blockingCount : 0;
+        const note = advisories ? ` (${advisories} advisory: ${r.summary?.findingIds.join(' ')})` : '';
+        return `${r.kind}${r.locale ? `:${r.locale}` : ''}/${r.browser}=${r.status}${note}`;
+    })
+        .join(', ');
+    if (!result.summaries && records.some((r) => r.summary))
+        process.stderr.write('note: this server does not store evidence summaries yet — the advisory findings above are shown here only\n');
+    if (result.status === 'pending-sync') {
+        process.stderr.write(`evidence queued (offline) for project ${result.projectId}: ${summary}. Run extenshi project sync.\n`);
+        process.exitCode = 1;
+    }
+    else {
+        process.stderr.write(`evidence recorded for project ${result.projectId}: ${summary}\n`);
+    }
+}
+//# sourceMappingURL=auto-evidence.js.map

package/dist/auto-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-evidence.js","sourceRoot":"","sources":["../src/auto-evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAgB,MAAM,cAAc,CAAA;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAsB,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAI7E,MAAM,QAAQ,GAA+B,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;AAE1E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAEzG;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC/B,YAAoB,EACpB,cAAsB,EACtB,QAAiB;IAEjB,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,QAAQ;aACnB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAClC,MAAM,CAAC,OAAO,CAAC,CAAA;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,QAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5E,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;YAC7B,MAAM,IAAI,iBAAiB,CAC1B,uDAAuD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAA;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAsB,CAAA;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IAClE,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAA;IACpC,MAAM,IAAI,iBAAiB,CAC1B,yGAAyG;QACxG,+FAA+F,CAChG,CAAA;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAI5B;IACA,MAAM,OAAO,GAAG,cAAc,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5F,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAA;IAC5F,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;IACzE,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,MAAM;QACZ,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,cAAc;QACjC,MAAM;KACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAwD;IACrF,OAAO;QACN;YACC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YACnC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC3B;KACD,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,eAAe,GAAG,EAAE,CAAA;AAG1B,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAAC,QAAkC;IAChE,OAAO;QACN,YAAY,EAAE,QAAQ,CAAC,MAAM;QAC7B,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM;QACjD,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;KACvF,CAAA;AACF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAA;AAEjE,MAAM,UAAU,mBAAmB,CAAC,KAMnC;IACA,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IACnC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChD,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,aAAa;QACnB,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW;QACX,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACnD,OAAO;KACP,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,aAAa,CAAC,OAAsB;IACnD,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;AACnE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAO/B;IACA,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IACjE,IAAI,CAAC,OAAO,CAAC,MAAM;QAClB,MAAM,IAAI,iBAAiB,CAAC,qEAAqE,CAAC,CAAA;IACnG,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACjD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAC3B,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,MAAM,CAAA;QACpC,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QACpC,OAAO;YACN,IAAI,EAAE,SAAS;YACf,OAAO;YACP,MAAM;YACN,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW;YACX,qEAAqE;YACrE,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,QAAkB;YACzE,OAAO;SACP,CAAA;IACF,CAAC,CAAC,CACF,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAK9C;IACA,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IACjE,OAAO,eAAe,CAAC;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;QAC9C,OAAO;QACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC;KAC9C,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAyB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACtF,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAM;IAC3B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,OAAO;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;QACnF,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,cAAc,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9F,OAAO,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,EAAE,CAAA;IACpF,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,6GAA6G,CAC7G,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,yCAAyC,MAAM,CAAC,SAAS,KAAK,OAAO,gCAAgC,CACrG,CAAA;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACrB,CAAC;SAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAA;IACxF,CAAC;AACF,CAAC"}