@geotechcli/core 0.2.0

package/dist/agents/sandbox.js

@@ -0,0 +1,235 @@
+// ---------------------------------------------------------------------------
+// Filesystem Sandbox — path traversal prevention
+//
+// All agent filesystem tools MUST validate paths through this module.
+// Allowed zones:
+//   1. Current working directory (and children)
+//   2. ~/.geotechcli/workspace/ (persistent project data)
+//
+// Blocked patterns:
+//   - Paths containing .ssh, .aws, .gnupg, .env files, credentials
+//   - Paths outside allowed zones (even via symlink resolution)
+//   - /etc, /var, /usr, /proc, /sys, /dev system directories
+// ---------------------------------------------------------------------------
+import { resolve, sep } from 'node:path';
+import { homedir } from 'node:os';
+import { existsSync, mkdirSync, realpathSync } from 'node:fs';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const GEOTECHCLI_DIR = process.env.GEOTECHCLI_CONFIG_DIR ?? `${homedir()}${sep}.geotechcli`;
+const WORKSPACE_DIR = `${GEOTECHCLI_DIR}${sep}workspace`;
+const SENSITIVE_PATTERNS = [
+    '.ssh',
+    '.aws',
+    '.gnupg',
+    '.gpg',
+    '.env',
+    '.npmrc',
+    '.pypirc',
+    '.netrc',
+    '.docker',
+    '.kube',
+    'credentials',
+    'id_rsa',
+    'id_ed25519',
+    'known_hosts',
+    'authorized_keys',
+    '.git/config',
+    '.gitconfig',
+    'token',
+    'secret',
+    'password',
+    'private_key',
+    'service_account',
+];
+const BLOCKED_SYSTEM_PREFIXES = [
+    '/etc',
+    '/var',
+    '/usr',
+    '/proc',
+    '/sys',
+    '/dev',
+    '/boot',
+    '/sbin',
+    '/bin',
+    '/root',
+    '/tmp/.X11',
+    'C:\\Windows',
+    'C:\\Program Files',
+];
+// ---------------------------------------------------------------------------
+// Ensure workspace exists
+// ---------------------------------------------------------------------------
+export function ensureWorkspace() {
+    if (!existsSync(WORKSPACE_DIR)) {
+        mkdirSync(WORKSPACE_DIR, { recursive: true });
+    }
+    return WORKSPACE_DIR;
+}
+export function getWorkspaceDir() {
+    return WORKSPACE_DIR;
+}
+// ---------------------------------------------------------------------------
+// Core validation
+// ---------------------------------------------------------------------------
+/**
+ * Validate that a path is inside an allowed zone and does not target
+ * sensitive files. Call this BEFORE any read/write/list operation.
+ *
+ * Allowed zones:
+ *   - process.cwd() and its children
+ *   - WORKSPACE_DIR and its children
+ *   - Any additional directories passed in `extraAllowed`
+ *
+ * For WRITE operations, pass mode='write' to additionally block
+ * the config directory itself (only workspace subdir is writable).
+ */
+export function validatePath(targetPath, mode = 'read', extraAllowed) {
+    const resolved = resolve(targetPath);
+    const normalizeForPrefixCheck = (value) => value.replace(/\\/g, '/').toLowerCase();
+    const normalizedInput = normalizeForPrefixCheck(targetPath);
+    const normalizedResolved = normalizeForPrefixCheck(resolved);
+    // --- 1. Block system directories ---
+    for (const prefix of BLOCKED_SYSTEM_PREFIXES) {
+        const normalizedPrefix = normalizeForPrefixCheck(prefix);
+        const matchesSystemPrefix = normalizedInput === normalizedPrefix ||
+            normalizedInput.startsWith(`${normalizedPrefix}/`) ||
+            normalizedResolved === normalizedPrefix ||
+            normalizedResolved.startsWith(`${normalizedPrefix}/`);
+        if (matchesSystemPrefix) {
+            return {
+                safe: false,
+                resolved,
+                error: `Access denied: system directory "${prefix}" is blocked.`,
+            };
+        }
+    }
+    // --- 2. Block sensitive file patterns ---
+    const pathParts = resolved.split(sep);
+    for (const part of pathParts) {
+        const partLower = part.toLowerCase();
+        for (const pattern of SENSITIVE_PATTERNS) {
+            if (partLower === pattern.toLowerCase() || partLower.includes(pattern.toLowerCase())) {
+                // Exception: allow reading .geotechcli config (but not writing to it directly)
+                if (resolved.startsWith(GEOTECHCLI_DIR) && mode === 'read') {
+                    continue;
+                }
+                return {
+                    safe: false,
+                    resolved,
+                    error: `Access denied: path contains sensitive pattern "${pattern}". This file may contain credentials or private keys.`,
+                };
+            }
+        }
+    }
+    // --- 3. Check allowed zones ---
+    const cwd = process.cwd();
+    const allowedZones = [
+        cwd,
+        WORKSPACE_DIR,
+        ...(extraAllowed ?? []),
+    ].map((z) => resolve(z));
+    // For read: allow CWD, workspace, and extra
+    // For write: allow CWD and workspace only
+    const isInAllowedZone = allowedZones.some((zone) => {
+        return resolved.startsWith(zone + sep) || resolved === zone;
+    });
+    if (!isInAllowedZone) {
+        return {
+            safe: false,
+            resolved,
+            error: `Access denied: "${resolved}" is outside allowed directories. Allowed: ${allowedZones.join(', ')}`,
+        };
+    }
+    // --- 4. Resolve symlinks and re-check (prevent symlink escape) ---
+    if (existsSync(resolved)) {
+        try {
+            const realPath = realpathSync(resolved);
+            const realInAllowed = allowedZones.some((zone) => realPath.startsWith(zone + sep) || realPath === zone);
+            if (!realInAllowed) {
+                return {
+                    safe: false,
+                    resolved,
+                    error: `Access denied: symlink resolves to "${realPath}" which is outside allowed directories.`,
+                };
+            }
+        }
+        catch {
+            // Can't resolve symlink — proceed with caution (file may not exist yet for writes)
+        }
+    }
+    return { safe: true, resolved };
+}
+/**
+ * Convenience: validate for reading.
+ */
+export function validateReadPath(targetPath, extraAllowed) {
+    return validatePath(targetPath, 'read', extraAllowed);
+}
+/**
+ * Convenience: validate for writing.
+ */
+export function validateWritePath(targetPath, extraAllowed) {
+    return validatePath(targetPath, 'write', extraAllowed);
+}
+/**
+ * Validate a shell command for safety.
+ * Returns the sanitized command or an error.
+ */
+export function validateShellCommand(command) {
+    const trimmed = command.trim();
+    const firstWord = trimmed.split(/\s+/)[0];
+    // Allowed read-only commands
+    const allowedCommands = ['ls', 'cat', 'head', 'tail', 'wc', 'find', 'grep', 'file', 'stat', 'du', 'pwd', 'echo'];
+    // Python: only with .py file, no -c/-m flags
+    if (firstWord === 'python' || firstWord === 'python3') {
+        const parts = trimmed.split(/\s+/);
+        const dangerousFlags = ['-c', '-m', '--command', '-W', '-X'];
+        const hasDangerousFlag = parts.some((p) => dangerousFlags.includes(p));
+        const hasScriptFile = parts.some((p) => p.endsWith('.py'));
+        if (hasDangerousFlag) {
+            return {
+                safe: false,
+                resolved: trimmed,
+                error: `Python flag "${parts.find((p) => dangerousFlags.includes(p))}" is blocked. Only "python script.py" is allowed.`,
+            };
+        }
+        if (!hasScriptFile) {
+            return {
+                safe: false,
+                resolved: trimmed,
+                error: 'Python must be invoked with a .py script file. Interactive/inline execution is blocked.',
+            };
+        }
+    }
+    else if (!allowedCommands.includes(firstWord)) {
+        return {
+            safe: false,
+            resolved: trimmed,
+            error: `Command "${firstWord}" not allowed. Permitted: ${allowedCommands.join(', ')}, python <script.py>`,
+        };
+    }
+    // Block dangerous operators in any command
+    const blockedOperators = [
+        '>', '>>', '|', '&&', '||', ';', '$(', '`',
+        'sudo', 'chmod', 'chown', 'chgrp',
+        'rm ', 'rm\t', 'rmdir',
+        'mv ', 'mv\t',
+        'cp ', 'cp\t',
+        'mkfs', 'dd ',
+        'wget ', 'curl ',
+        'nc ', 'ncat ',
+    ];
+    for (const op of blockedOperators) {
+        if (trimmed.includes(op)) {
+            return {
+                safe: false,
+                resolved: trimmed,
+                error: `Command contains blocked operator "${op.trim()}". Pipes, redirects, chaining, and destructive commands are not allowed.`,
+            };
+        }
+    }
+    return { safe: true, resolved: trimmed };
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/agents/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/agents/sandbox.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,iBAAiB;AACjB,gDAAgD;AAChD,0DAA0D;AAC1D,EAAE;AACF,oBAAoB;AACpB,mEAAmE;AACnE,gEAAgE;AAChE,6DAA6D;AAC7D,8EAA8E;AAE9E,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE9D,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,GAAG,OAAO,EAAE,GAAG,GAAG,aAAa,CAAC;AAC5F,MAAM,aAAa,GAAG,GAAG,cAAc,GAAG,GAAG,WAAW,CAAC;AAEzD,MAAM,kBAAkB,GAAG;IACzB,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,aAAa;IACb,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,iBAAiB;IACjB,aAAa;IACb,YAAY;IACZ,OAAO;IACP,QAAQ;IACR,UAAU;IACV,aAAa;IACb,iBAAiB;CAClB,CAAC;AAEF,MAAM,uBAAuB,GAAG;IAC9B,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,WAAW;IACX,aAAa;IACb,mBAAmB;CACpB,CAAC;AAYF,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAC1B,UAAkB,EAClB,OAAyB,MAAM,EAC/B,YAAuB;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,uBAAuB,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3F,MAAM,eAAe,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAE7D,sCAAsC;IACtC,KAAK,MAAM,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC7C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,mBAAmB,GACvB,eAAe,KAAK,gBAAgB;YACpC,eAAe,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,CAAC;YAClD,kBAAkB,KAAK,gBAAgB;YACvC,kBAAkB,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,CAAC,CAAC;QAExD,IAAI,mBAAmB,EAAE,CAAC;YACxB,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,QAAQ;gBACR,KAAK,EAAE,oCAAoC,MAAM,eAAe;aACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,IAAI,SAAS,KAAK,OAAO,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACrF,+EAA+E;gBAC/E,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC3D,SAAS;gBACX,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,KAAK;oBACX,QAAQ;oBACR,KAAK,EAAE,mDAAmD,OAAO,uDAAuD;iBACzH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG;QACnB,GAAG;QACH,aAAa;QACb,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;KACxB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzB,4CAA4C;IAC5C,0CAA0C;IAC1C,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACjD,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,IAAI,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,KAAK;YACX,QAAQ;YACR,KAAK,EAAE,mBAAmB,QAAQ,8CAA8C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC1G,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CACrC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,IAAI,CAC/D,CAAC;YACF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO;oBACL,IAAI,EAAE,KAAK;oBACX,QAAQ;oBACR,KAAK,EAAE,uCAAuC,QAAQ,yCAAyC;iBAChG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mFAAmF;QACrF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,YAAuB;IAC1E,OAAO,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,YAAuB;IAC3E,OAAO,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1C,6BAA6B;IAC7B,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAEjH,6CAA6C;IAC7C,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAE3D,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,gBAAgB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,mDAAmD;aACxH,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,yFAAyF;aACjG,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,YAAY,SAAS,6BAA6B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB;SAC1G,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,MAAM,gBAAgB,GAAG;QACvB,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG;QAC1C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;QACjC,KAAK,EAAE,MAAM,EAAE,OAAO;QACtB,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,OAAO;KACf,CAAC;IAEF,KAAK,MAAM,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,sCAAsC,EAAE,CAAC,IAAI,EAAE,0EAA0E;aACjI,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC"}

package/dist/agents/swarm.d.ts

@@ -0,0 +1,25 @@
+import type { LLMConfig } from '../llm/types.js';
+import { type ToolResult } from './tools.js';
+import './filesystem-tools.js';
+import './bridge-tools.js';
+import './data-tools.js';
+export interface SwarmStep {
+    agent: 'orchestrator' | 'interpretation' | 'simulation' | 'reviewer';
+    type: 'thought' | 'tool_call' | 'tool_result' | 'handoff' | 'review' | 'correction' | 'answer' | 'error';
+    content: string;
+    toolName?: string;
+    toolArgs?: Record<string, unknown>;
+    toolResult?: ToolResult;
+    timestamp: number;
+}
+export interface SwarmSession {
+    steps: SwarmStep[];
+    context: Record<string, unknown>;
+    totalTokens: number;
+    totalLatencyMs: number;
+    reviewPassed: boolean;
+    corrections: string[];
+}
+export type SwarmCallback = (step: SwarmStep) => void;
+export declare function runSwarm(task: string, config: LLMConfig, onStep: SwarmCallback, sessionContext?: Record<string, unknown>): Promise<SwarmSession>;
+//# sourceMappingURL=swarm.d.ts.map

package/dist/agents/swarm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"swarm.d.ts","sourceRoot":"","sources":["../../src/agents/swarm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAsB,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAK3D,OAAO,uBAAuB,CAAC;AAC/B,OAAO,mBAAmB,CAAC;AAC3B,OAAO,iBAAiB,CAAC;AAEzB,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,cAAc,GAAG,gBAAgB,GAAG,YAAY,GAAG,UAAU,CAAC;IACrE,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAC;IACzG,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC;AAiUtD,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,aAAa,EACrB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,OAAO,CAAC,YAAY,CAAC,CA+KvB"}