@indigoai-us/hq-cloud 6.14.35 → 6.14.37

package/dist/cli/share.d.ts

@@ -130,6 +130,23 @@ export declare function isEphemeralPath(p: string): boolean;
  * (skip-excluded-policy), symmetric with the ephemeral-mirror filter above.
  */
 export declare function isMalformedVaultKey(key: string): boolean;
+/**
+ * A remote key that begins with `companies/<slug>/` is legitimate ONLY in a
+ * PERSONAL vault, where it is handled by the dedicated `personalMode` branch
+ * in `computePullPlan` (companies/* content a peer machine pushed into the
+ * personal bucket). A COMPANY-scoped vault is already anchored at its company
+ * root, so its keys are bucket-relative — a `companies/...` key there is a
+ * doubly-scoped corrupt object. The vault-service refuses to presign such a
+ * key on GET/HEAD with `INVALID_KEY_COMPANIES_SCOPED`, so the puller can
+ * never materialize it and the whole company sync wedges at `errored` (runner
+ * exit 2) on every run. Verified live 2026-06-16: frogbear's
+ * `companies/frogbear/drafts/reports/frogbear-signals-report-2026-06-15.html`
+ * was uploaded with a doubled key and broke every sync thereafter. The pull
+ * and tombstone walkers refuse these keys (skip-excluded-policy), symmetric
+ * with the malformed-(backslash)-key filter above; the bogus objects
+ * themselves are cleaned server-side.
+ */
+export declare function isForbiddenCompanyVaultKey(key: string, personalMode: boolean): boolean;
 /**
  * Test-only export. Kept under a `_testing` namespace so the module's public
  * surface stays focused on `share()` / `ShareOptions` / `ShareResult` while
@@ -143,6 +160,8 @@ export declare const _testing: {
     EPHEMERAL_PATH_PATTERN: RegExp;
     wrapFilterWithIgnoreVisibility: typeof wrapFilterWithIgnoreVisibility;
     collectFiles: typeof collectFiles;
+    resolveNamedPath: typeof resolveNamedPath;
+    isWithinLexicalOrReal: typeof isWithinLexicalOrReal;
 };
 export interface ShareOptions {
     /** Path(s) to share (files or directories) */
@@ -345,6 +364,42 @@ export interface ShareOptions {
      * the network. See the consult in the Stage-2 classification pass.
      */
     fileTombstones?: Map<string, CompanyTombstone>;
+    /**
+     * What to do when a path the caller EXPLICITLY named cannot be shipped —
+     * it does not resolve under any base, or it resolves outside the company
+     * folder (see `ShareResult.unreachablePaths`).
+     *
+     * - `"error"` (DEFAULT): a path that EXISTS on disk but resolves outside the
+     *   company folder throws {@link UnreachablePushPathsError} BEFORE any upload
+     *   runs, so the push is an atomic no-op and the CLI exits nonzero. This is
+     *   ask #2 of feedback_a51cb63d — "error, not warn-skip, when the named file
+     *   exists locally but is unreachable by the resolver". A user who typed a
+     *   path and got "✓ Pushed 0 file(s)" had no way to know their content never
+     *   left the machine. A path that resolves to NOTHING under any base is still
+     *   only warn-recorded (see `collectFatalUnreachablePaths` for why bulk
+     *   membership fanout depends on that).
+     * - `"warn"`: record it on the result + emit the `not-shipped` event and
+     *   carry on, never throwing. For callers whose `paths` are INTERNAL walk
+     *   roots rather than user input — the background sync runner — where a path
+     *   disappearing mid-run is a benign race (a directory removed between the
+     *   scan and the push) and must never fail an unattended sync.
+     */
+    unreachablePathPolicy?: "error" | "warn";
+}
+/** Why an explicitly-named push path could not be shipped. */
+export type UnreachablePathReason = "missing" | "outside-company";
+/**
+ * Thrown by `share()` when a caller-named path cannot be pushed and
+ * `unreachablePathPolicy` is `"error"` (the default). Raised while the plans
+ * are still being built, so NOTHING has been uploaded, journaled, or deleted
+ * when it surfaces — the failed push leaves no partial state behind.
+ */
+export declare class UnreachablePushPathsError extends Error {
+    /** Caller's original spellings, verbatim (see the CollectHooks contract). */
+    readonly paths: string[];
+    /** Per-path reason, keyed by the same original spelling. */
+    readonly reasons: Record<string, UnreachablePathReason>;
+    constructor(unreachable: ReadonlyMap<string, UnreachablePathReason>, syncRoot: string);
 }
 export interface ShareResult {
     filesUploaded: number;
@@ -423,6 +478,34 @@ export interface ShareResult {
      * once if this is > 0).
      */
     filesExcludedByIgnore: number;
+    /**
+     * Paths the caller EXPLICITLY named for push that exist locally but the
+     * resolver could not place under the company folder (or could not find under
+     * any base). Empty in the common case (internal walk roots are always the
+     * reachable company folder). A non-empty list means the push did NOT ship
+     * something the caller asked for.
+     *
+     * Only ever non-empty under `unreachablePathPolicy: "warn"` — the DEFAULT
+     * `"error"` policy throws {@link UnreachablePushPathsError} instead of
+     * returning, so an interactive `hq sync push` fails loudly rather than
+     * reporting the pre-fix silent "Pushed 0 file(s)" success. This field is the
+     * warn-mode surface for unattended callers (sync runner / watcher).
+     *
+     * Entries are the caller's ORIGINAL spellings, verbatim — a relative token
+     * stays relative, an absolute token stays absolute — so the list is directly
+     * comparable to the `paths` input. See the CollectHooks spelling contract.
+     * Mirrors the `not-shipped` event with `reason: "unreachable-path"`.
+     */
+    unreachablePaths: string[];
+    /**
+     * Company-relative keys of directory symlinks that were recorded as links but
+     * NOT descended because their target lives outside the company folder — their
+     * contents sync via their own repo, not the vault. Surfaced so files created
+     * under such a link (e.g. `companies/{co}/knowledge` → a linked repo) no
+     * longer vanish from every push bucket without a trace. Mirrors the
+     * `not-shipped` event with `reason: "linked-subtree"`.
+     */
+    linkedSubtreesNotShipped: string[];
     /**
      * Paths (company-relative) that were detected as push conflicts. Mirrors
      * `SyncResult.conflictPaths` so push and pull surface conflicts the same
@@ -472,6 +555,101 @@ type CollectedEntry = {
     relativePath: string;
     target: string;
 };
+/**
+ * Optional visibility callbacks for {@link collectFiles} / {@link walkDir}.
+ * They turn two previously-SILENT outcomes into surfaced signals — without
+ * changing WHAT gets uploaded (feedback_258e4a86 / feedback_a51cb63d):
+ *
+ *   - `onUnreachablePath`: a path the caller EXPLICITLY named (never an internal
+ *     walk root — those are always the reachable company folder) that exists on
+ *     disk but the resolver could not place under the company folder
+ *     (`"outside-company"`), or could not resolve to an existing file under any
+ *     base (`"missing"`). Pre-fix this was a bare `console.error` warn-skip that
+ *     still let the push report "Pushed 0 file(s)" — a false success. The caller
+ *     can now turn a non-empty set into a real error / nonzero exit.
+ *
+ *     SPELLING CONTRACT: `namedPath` is ALWAYS the caller's ORIGINAL token,
+ *     verbatim — never the resolved absolute path, and never normalized. A
+ *     relative `knowledge/agents/x.md` is reported as `knowledge/agents/x.md`;
+ *     an absolute path is reported absolute because that is what was passed.
+ *     Echoing the caller's own spelling is what makes the error actionable
+ *     ("the thing you typed did not ship"), and it keeps `unreachablePaths`
+ *     comparable to the input array without a resolution step. Both call sites
+ *     below pass the loop variable `p` for exactly this reason.
+ *   - `onLinkedSubtree`: a directory symlink recorded as a link but NOT
+ *     descended because its target resolves OUTSIDE the company folder (e.g.
+ *     `companies/{co}/knowledge` → `repos/private/knowledge-{co}/`). The link's
+ *     contents ship via their own repo, not the vault; reporting it stops files
+ *     created under such a link from vanishing from every push bucket silently.
+ */
+interface CollectHooks {
+    onUnreachablePath?: (namedPath: string, reason: "missing" | "outside-company") => void;
+    onLinkedSubtree?: (rel: string) => void;
+}
+/**
+ * Resolve a caller-supplied push path to an absolute path.
+ *
+ * Relative paths were historically resolved against `hqRoot` ONLY, so a
+ * company-relative spelling like `knowledge/agents/x.md` became
+ * `<hqRoot>/knowledge/agents/x.md` and reported "does not exist" no matter the
+ * caller's cwd or the company being pushed (feedback_258e4a86 /
+ * feedback_a51cb63d — "there is no path spelling that reaches the file").
+ *
+ * PRECEDENCE (documented contract, asserted by test): `hqRoot` → `syncRoot`
+ * (the company folder) → `cwd`. hqRoot stays FIRST so this change is purely
+ * ADDITIVE to the legacy behavior: every relative spelling that resolved
+ * pre-fix still resolves to exactly the same file, and the two new bases only
+ * catch spellings that previously resolved to nothing. Probing cwd first would
+ * silently re-point existing callers (a `knowledge/` directory in the shell's
+ * cwd would win over the hq-root one), which is a behavior change no reporter
+ * asked for. Fall back to the hqRoot candidate so a genuine typo still surfaces
+ * the unchanged "does not exist" diagnostic. Absolute paths are returned
+ * verbatim.
+ *
+ * `cwd` is an explicit injected parameter (defaulting to `process.cwd()`)
+ * rather than an ambient read, so resolution is deterministic and testable
+ * without mutating process state.
+ */
+declare function resolveNamedPath(p: string, hqRoot: string, syncRoot: string, cwd?: string): string;
+/**
+ * Containment check for a regular file or directory that tolerates a symlinked
+ * ANCESTOR. `isWithin` canonicalizes the full child via `realpathSync`, so a
+ * path reached through a symlinked ancestor (`companies/{co}/knowledge` →
+ * `repos/private/knowledge-{co}/`) resolves OUTSIDE the company folder and was
+ * rejected as "outside company folder" — even though its logical path is
+ * in-tree and `vaultKeyForLocalPath` (also lexical) derives a correct
+ * company-namespaced key for it. Accept when the LEXICAL path is inside
+ * (honoring the same logical topology the vault key uses) OR the realpath is
+ * inside (preserving `isWithin`'s macOS APFS case-insensitivity tolerance).
+ *
+ * The lexical arm carries TWO bounds, because it is the only place where a
+ * path's bytes and its vault key come from different trees:
+ *
+ *  1. `hqRoot` — the realpath must still land inside the HQ tree, so a
+ *     symlinked ancestor pointing at `/etc` cannot upload arbitrary machine
+ *     state under a company-namespaced key.
+ *  2. The TENANT — the realpath must not land inside another company's bytes
+ *     (`foreignTenantRoots`). The hqRoot bound alone is NOT sufficient and
+ *     must never be mistaken for a tenant boundary: hqRoot CONTAINS every
+ *     other company, so `companies/acme/knowledge → companies/other/secret`
+ *     (or → `repos/private/knowledge-other`, the linked-repo topology) is
+ *     lexically inside acme and really inside HQ, and would upload the other
+ *     tenant's bytes into acme's bucket under the key `knowledge/…`.
+ *
+ * The motivating topology (`companies/{co}/knowledge` →
+ * `repos/private/knowledge-{co}`) satisfies both, so it is unaffected. A link
+ * that escapes HQ, or one that reaches another tenant, is refused — and under
+ * the default unreachable-path policy, refused LOUDLY rather than warn-skipped.
+ *
+ * Known limit, stated so it is not mistaken for a guarantee: a foreign tenant's
+ * externally-linked subtree can only be recognized while that company's folder
+ * is materialized locally and publishes the link. A machine holding
+ * `repos/private/knowledge-other` with no `companies/other` folder has no
+ * on-disk evidence of the claim, so a link into it is indistinguishable from a
+ * link into any other local repo. Ownership metadata (not path shape) is what
+ * would close that gap.
+ */
+declare function isWithinLexicalOrReal(parent: string, child: string, hqRoot: string, tenantRootsCache?: Map<string, string[]>): boolean;
 /**
  * Collect files from paths (expanding directories recursively).
  *
@@ -484,6 +662,6 @@ type CollectedEntry = {
  * Pre-fix, statSync followed the link and the target's bytes were uploaded
  * under the link's key — silently flattening the link topology.
  */
-declare function collectFiles(paths: string[], hqRoot: string, syncRoot: string, filter: (p: string, isDir?: boolean) => boolean): CollectedEntry[];
+declare function collectFiles(paths: string[], hqRoot: string, syncRoot: string, filter: (p: string, isDir?: boolean) => boolean, hooks?: CollectHooks): CollectedEntry[];
 export {};
 //# sourceMappingURL=share.d.ts.map

package/dist/cli/share.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"share.d.ts","sourceRoot":"","sources":["../../src/cli/share.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAe,MAAM,aAAa,CAAC;AAelF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAuB7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAsE/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,eAAO,MAAM,sBAAsB,QACmD,CAAC;AAEvF;;;;;;;;;GASG;AACH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,QAAqB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAElD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ;;;;;CAKpB,CAAC;AA8MF,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC7C;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;;;;;;;;OAgBG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;IACH,qBAAqB,CAAC,EAAE,gBAAgB,GAAG,YAAY,GAAG,KAAK,CAAC;IAChE;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;;;;OASG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC;;;;;;;OAOG;IACH,0BAA0B,EAAE,MAAM,CAAC;IACnC;;;;;;;OAOG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;;;;OAQG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,wBAAwB,GAChC,YAAY,GACZ,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,uBAAuB,GACvB,gBAAgB,GAChB,gBAAgB,CAAC;AAErB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,QAAQ,GAAG,WAAW,CAAC;IAClC,MAAM,CAAC,EAAE,wBAAwB,CAAC;CACnC;AAmDD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,EACzD,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,EAC3C,aAAa,CAAC,EAAE,MAAM,IAAI,GACzB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAW/C;AAED;;GAEG;AACH,wBAAsB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CA4CvE;AAk8BD;;;;;;;;;GASG;AACH,KAAK,cAAc,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF;;;;;;;;;;;GAWG;AACH,iBAAS,YAAY,CACnB,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,GAC9C,cAAc,EAAE,CA8ElB"}
+{"version":3,"file":"share.d.ts","sourceRoot":"","sources":["../../src/cli/share.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAe,MAAM,aAAa,CAAC;AAelF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAuB7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAuE/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,eAAO,MAAM,sBAAsB,QACmD,CAAC;AAEvF;;;;;;;;;GASG;AACH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,QAAqB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAElD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAEtF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ;;;;;;;CAOpB,CAAC;AA8MF,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC7C;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;;;;;;;;OAgBG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;IACH,qBAAqB,CAAC,EAAE,gBAAgB,GAAG,YAAY,GAAG,KAAK,CAAC;IAChE;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC/C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,qBAAqB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC1C;AAED,8DAA8D;AAC9D,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,iBAAiB,CAAC;AAElE;;;;;GAKG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;gBAE5C,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAAE,QAAQ,EAAE,MAAM;CAmBtF;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;;;;OASG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC;;;;;;;OAOG;IACH,0BAA0B,EAAE,MAAM,CAAC;IACnC;;;;;;;OAOG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;;;;OAQG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;;;;;;;;OAiBG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;;;;OAOG;IACH,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC;;;;OAIG;IACH,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,wBAAwB,GAChC,YAAY,GACZ,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,uBAAuB,GACvB,gBAAgB,GAChB,gBAAgB,CAAC;AAErB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,QAAQ,GAAG,WAAW,CAAC;IAClC,MAAM,CAAC,EAAE,wBAAwB,CAAC;CACnC;AAmDD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,EACzD,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,EAC3C,aAAa,CAAC,EAAE,MAAM,IAAI,GACzB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAW/C;AAED;;GAEG;AACH,wBAAsB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CA4CvE;AA8mCD;;;;;;;;;GASG;AACH,KAAK,cAAc,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,UAAU,YAAY;IACpB,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,iBAAiB,KAAK,IAAI,CAAC;IACvF,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACzC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,iBAAS,gBAAgB,CACvB,CAAC,EAAE,MAAM,EACT,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAsB,GAC1B,MAAM,CAuBR;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,iBAAS,qBAAqB,CAC5B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,gBAAgB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GACvC,OAAO,CAwBT;AA8HD;;;;;;;;;;;GAWG;AACH,iBAAS,YAAY,CACnB,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,EAC/C,KAAK,GAAE,YAAiB,GACvB,cAAc,EAAE,CA2FlB"}