@intutic/cli 1.9.0 → 1.10.1

package/dist/commands/doctor.js

@@ -10,9 +10,11 @@
  * 2. Control plane auth (via stored credentials)
  * 3. Sync daemon running (PID file or process grep)
  * 4. Harness config files intact (SHA-256 hash check)
- * 5. Daemon log readable (~/.intutic/daemon.log)
+ * 5. Daemon log readable and non-empty (installed log path, or the legacy
+ *    ~/.intutic/daemon.log)
  * 6. Valkey connectivity (proxy /health or TCP probe port 6379)
  * 7. CA cert trust (~/.intutic/ca.crt + OS trust store)
+ * 8. Policy snapshot present, intact, and current
  *
  * No subscription checks — enforcement is server-side (covenant 13).
  *
@@ -28,11 +30,20 @@ import pc from 'picocolors';
 import { log } from '../lib/logger.js';
 import { loadCredentials, loadConfig, loadIntegrity } from '../config/store.js';
 import { isSyncDaemonRunning } from '../lib/process.js';
+import { caTrustCommandFor } from '../lib/caTrust.js';
+import { getPaths } from './install-daemon.js';
+import { readPolicySnapshot, SNAPSHOT_STALE_AFTER_DAYS, } from '../lib/policySnapshot.js';
+import { ciscoScannerOnPath, ciscoScannerVersion } from '../lib/ciscoScanner.js';
 // ─── Constants ───────────────────────────────────────────────────────
 const PROXY_HEALTH_URL = 'http://127.0.0.1:4000/health';
 const PROXY_TIMEOUT_MS = 3_000;
 const CONTROL_PLANE_TIMEOUT_MS = 5_000;
-const DAEMON_LOG_PATH = join(homedir(), '.intutic', 'daemon.log');
+/**
+ * Historical location. Nothing in the CLI or the daemon has ever written here —
+ * `intutic install-daemon` points the service at getPaths().logPath — so it is
+ * kept only so an old install still gets a hit.
+ */
+const LEGACY_DAEMON_LOG_PATH = join(homedir(), '.intutic', 'daemon.log');
 const DAEMON_PID_PATH = join(homedir(), '.intutic', 'daemon.pid');
 const CA_CERT_PATH = join(homedir(), '.intutic', 'ca.crt');
 const VALKEY_PROBE_TIMEOUT_MS = 2_000;
@@ -225,30 +236,109 @@ function checkHarnessConfigs() {
     };
 }
 /**
- * Check 5: Daemon log readable.
+ * Every place a sync-daemon log can legitimately be, most likely first: the
+ * per-user service, the system service, then the legacy path.
+ */
+function daemonLogCandidates() {
+    return [
+        getPaths(false, false).logPath,
+        getPaths(true, false).logPath,
+        LEGACY_DAEMON_LOG_PATH,
+    ];
+}
+/**
+ * How long ago the newest entry was written, taken from the `time` field pino
+ * puts on every line (`@intutic/logger` configures it as an ISO string; plain
+ * pino uses epoch milliseconds, so both are accepted).
+ *
+ * Returns null when the last line is not a pino record — a stack trace
+ * continuation, or plain text from the service supervisor — in which case the
+ * caller simply omits the age.
+ *
+ * The line itself is deliberately never printed. `intutic doctor` output is
+ * written to be pasted into a support thread, and daemon logs carry workspace
+ * identifiers and request metadata.
+ */
+function describeLastEntryAge(lastLine) {
+    let parsed;
+    try {
+        parsed = JSON.parse(lastLine);
+    }
+    catch {
+        return null;
+    }
+    if (typeof parsed !== 'object' || parsed === null)
+        return null;
+    const time = parsed.time;
+    if (typeof time !== 'string' && typeof time !== 'number')
+        return null;
+    const writtenAt = new Date(time).getTime();
+    if (Number.isNaN(writtenAt))
+        return null;
+    const minutes = Math.floor((Date.now() - writtenAt) / 60_000);
+    if (minutes < 0)
+        return null;
+    if (minutes < 1)
+        return 'last entry just now';
+    if (minutes < 60)
+        return `last entry ${minutes}m ago`;
+    const hours = Math.floor(minutes / 60);
+    if (hours < 24)
+        return `last entry ${hours}h ago`;
+    return `last entry ${Math.floor(hours / 24)}d ago`;
+}
+/**
+ * Check 5: Daemon log present, readable, and actually being written to.
  */
 function checkDaemonLog() {
+    const candidates = daemonLogCandidates();
+    const logPath = candidates.find((candidate) => {
+        try {
+            accessSync(candidate, constants.R_OK);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    });
+    if (!logPath) {
+        return {
+            name: 'Daemon Log',
+            passed: false,
+            detail: `Not found or not readable at ${candidates.join(', ')}`,
+            remediation: 'The log file is created when `intutic connect` runs. Start the daemon first.',
+        };
+    }
+    let content;
     try {
-        accessSync(DAEMON_LOG_PATH, constants.R_OK);
-        // Try to read last few bytes to confirm it's not empty
-        const content = readFileSync(DAEMON_LOG_PATH, 'utf-8');
-        const lines = content.trim().split('\n');
-        const lastLine = lines[lines.length - 1] || '';
-        const truncated = lastLine.length > 80 ? lastLine.slice(0, 80) + '…' : lastLine;
+        content = readFileSync(logPath, 'utf-8');
+    }
+    catch (err) {
         return {
             name: 'Daemon Log',
-            passed: true,
-            detail: `Readable at ${DAEMON_LOG_PATH} (${lines.length} lines)`,
+            passed: false,
+            detail: `Found ${logPath} but could not read it — ${err instanceof Error ? err.message : String(err)}`,
+            remediation: `Check the file's permissions: ls -l ${logPath}`,
         };
     }
-    catch {
+    // An empty log means the daemon has never logged a line — a real fault that
+    // used to be reported as a pass with a misleading "1 lines".
+    const lines = content.trim().split('\n').filter((line) => line.length > 0);
+    if (lines.length === 0) {
         return {
             name: 'Daemon Log',
             passed: false,
-            detail: `Not found or not readable at ${DAEMON_LOG_PATH}`,
-            remediation: 'The log file is created when `intutic connect` runs. Start the daemon first.',
+            detail: `Empty at ${logPath} — the daemon has not written anything`,
+            remediation: 'The daemon has a log file but has never logged. Restart it with `intutic connect` and re-run doctor.',
         };
     }
+    const age = describeLastEntryAge(lines[lines.length - 1]);
+    const suffix = age ? `, ${age}` : '';
+    return {
+        name: 'Daemon Log',
+        passed: true,
+        detail: `Readable at ${logPath} (${lines.length} lines${suffix})`,
+    };
 }
 /**
  * Check 6: Valkey connectivity.
@@ -309,6 +399,19 @@ async function checkValkey() {
         remediation: 'Start Valkey: `docker compose up -d valkey` or install locally.',
     };
 }
+/**
+ * Builds the system-scope CA-trust remediation string from the SAME source
+ * `caTrust.ts`'s `installCaTrust` actually runs, instead of a hand-written
+ * duplicate — the two had already drifted once (this check looks in three
+ * Linux cert-anchor directories; the old remediation only ever named one).
+ */
+function systemTrustRemediation(os) {
+    const cmds = caTrustCommandFor(os, 'system', CA_CERT_PATH);
+    if (!cmds)
+        return `See docs/integrations/enterprise-install.md for manual CA-trust steps on ${os}.`;
+    const quoted = (arg) => (arg.includes(' ') ? `"${arg}"` : arg);
+    return cmds.map((c) => `sudo ${c.cmd} ${c.args.map(quoted).join(' ')}`).join(' && ');
+}
 /**
  * Check 7: CA certificate trust.
  *
@@ -367,7 +470,7 @@ function checkCertTrust() {
                 name: 'Cert Trust',
                 passed: false,
                 detail: 'CA cert exists but is not in system trust store',
-                remediation: `Copy and update trust: sudo cp ${CA_CERT_PATH} /usr/local/share/ca-certificates/intutic-ca.crt && sudo update-ca-certificates`,
+                remediation: systemTrustRemediation(os),
             };
         }
         else {
@@ -384,11 +487,110 @@ function checkCertTrust() {
             name: 'Cert Trust',
             passed: false,
             detail: 'CA cert exists but is NOT trusted by the OS',
-            remediation: os === 'darwin'
-                ? `Trust the cert: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain "${CA_CERT_PATH}"`
-                : `Copy and update trust: sudo cp ${CA_CERT_PATH} /usr/local/share/ca-certificates/intutic-ca.crt && sudo update-ca-certificates`,
+            remediation: systemTrustRemediation(os),
+        };
+    }
+}
+/**
+ * Turns a snapshot's state into the line doctor prints.
+ *
+ * Split from the check so the mapping can be tested without a home directory:
+ * every branch here is a different thing being enforced on the machine, and
+ * getting one of them wrong is silent by construction.
+ *
+ * `passed` is false for everything except `ok`, including `stale`. A stale
+ * snapshot is still fully enforced — staleness governs alerting, not
+ * enforcement — but reaching the window means the daemon has not completed a
+ * sync in over a week, which is a fault whatever the gates are doing with the
+ * rules they still have.
+ */
+export function describePolicySnapshot(snap) {
+    const name = 'Policy Snapshot';
+    const dropped = snap.droppedRules > 0 ? `, ${snap.droppedRules} rule(s) dropped as uncompilable` : '';
+    switch (snap.state) {
+        case 'ok':
+            return {
+                name,
+                passed: true,
+                detail: `${snap.ruleCount} rule(s), digest ${snap.digest}, ${snap.ageDays}d old${dropped}`,
+            };
+        case 'stale':
+            return {
+                name,
+                passed: false,
+                detail: `${snap.ageDays} days old and still enforced (${snap.ruleCount} rule(s)) — ` +
+                    `nothing has refreshed it in over ${SNAPSHOT_STALE_AFTER_DAYS} days${dropped}`,
+                remediation: 'The daemon has not synced. Check `intutic daemon status`, then refresh with `intutic policy snapshot`.',
+            };
+        case 'invalid':
+            return {
+                name,
+                passed: false,
+                detail: `Failed its ${snap.workspaceId ? 'digest or workspace' : 'digest'} check at ${snap.path} — ` +
+                    'every gate has DROPPED the dynamic rules, so workspace policy is enforcing nothing',
+                remediation: 'The file was edited or belongs to another workspace. Overwrite it with `intutic policy snapshot`.',
+            };
+        case 'empty':
+            return {
+                name,
+                passed: false,
+                // The writer always ships the destructive tier, so zero rules is not a
+                // quiet workspace — it is a compile that produced nothing.
+                detail: `Present at ${snap.path} but contains no rules — the policy compile produced nothing${dropped}`,
+                remediation: 'Check that the workspace has active BLOCK: SOPs, then rebuild it with `intutic policy snapshot`.',
+            };
+        case 'absent':
+            return {
+                name,
+                passed: false,
+                detail: `No snapshot at ${snap.path} — built-in protections only, workspace policy enforces nothing`,
+                remediation: 'Write it with `intutic policy snapshot`, or start the daemon with `intutic connect`.',
+            };
+    }
+}
+/**
+ * Check 8: Policy snapshot — the dynamic tier every harness gate reads.
+ *
+ * Absent, invalid or empty all mean the same thing on the machine: the gates
+ * fall back to the compiled floor and the workspace's own rules stop applying,
+ * with no error anywhere. That is the whole reason this check exists — the
+ * failure is invisible from every other angle in this command.
+ */
+async function checkPolicySnapshot() {
+    // The workspace id is what makes a mismatch detectable. Without credentials
+    // the comparison is skipped rather than guessed, exactly as the gates skip it.
+    const creds = await loadCredentials();
+    return describePolicySnapshot(readPolicySnapshot({ expectedWorkspaceId: creds?.workspaceId }));
+}
+/**
+ * Check 9: Cisco `skill-scanner` integration (Phase S3) — an OPTIONAL
+ * external tool `intutic skill audit --engine cisco` (or the
+ * `ciscoSkillScannerEnabled` workspace setting's auto-run) shells out to.
+ *
+ * Unlike every other check above, absence here is NOT a failure —
+ * `passed: true` either way. This is the operator's own separate
+ * installation (`pipx install cisco-ai-skill-scanner`), and `intutic skill audit`
+ * degrades gracefully without it (see `lib/ciscoScanner.ts`'s module doc
+ * comment). The remediation string is still populated when absent, purely
+ * informational — `runDoctor`'s print loop shows it as a dimmed hint on a
+ * passing row, not an error.
+ */
+export async function checkCiscoScanner() {
+    const present = await ciscoScannerOnPath();
+    if (!present) {
+        return {
+            name: 'Cisco Skill Scanner',
+            passed: true,
+            detail: 'not installed (optional integration)',
+            remediation: 'pipx install cisco-ai-skill-scanner',
         };
     }
+    const version = await ciscoScannerVersion();
+    return {
+        name: 'Cisco Skill Scanner',
+        passed: true,
+        detail: version ? `Installed — ${version}` : 'Installed on PATH (version unavailable)',
+    };
 }
 // ─── Runner ──────────────────────────────────────────────────────────
 export async function runDoctor() {
@@ -403,12 +605,20 @@ export async function runDoctor() {
     results.push(checkDaemonLog());
     results.push(await checkValkey());
     results.push(checkCertTrust());
+    results.push(await checkPolicySnapshot());
+    results.push(await checkCiscoScanner());
     // Print results
     const passed = results.filter(r => r.passed).length;
     const failed = results.filter(r => !r.passed).length;
     for (const result of results) {
         if (result.passed) {
             console.log(`  ${pc.green('✓')} ${pc.bold(result.name)} — ${result.detail}`);
+            // Informational only: every OTHER passing check has no remediation —
+            // this is the one exception (checkCiscoScanner, absent-but-optional),
+            // where the hint is still worth surfacing even though nothing failed.
+            if (result.remediation) {
+                console.log(`    ${pc.dim('→')} ${pc.dim(result.remediation)}`);
+            }
         }
         else {
             console.log(`  ${pc.red('✗')} ${pc.bold(result.name)} — ${result.detail}`);

package/dist/commands/doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,MAAM,YAAY,CAAA;AAE3B,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAWvD,wEAAwE;AAExE,MAAM,gBAAgB,GAAG,8BAA8B,CAAA;AACvD,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAC9B,MAAM,wBAAwB,GAAG,KAAK,CAAA;AACtC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;AACjE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;AACjE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;AAC1D,MAAM,uBAAuB,GAAG,KAAK,CAAA;AAErC,uEAAuE;AAEvE;;GAEG;AACH,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAA;QAEtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;YACxC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAA;QACF,YAAY,CAAC,OAAO,CAAC,CAAA;QAErB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,gBAAgB,gBAAgB,UAAU,GAAG,CAAC,MAAM,GAAG;aAChE,CAAA;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,uBAAuB,GAAG,CAAC,MAAM,EAAE;YAC3C,WAAW,EAAE,6DAA6D;SAC3E,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAA;QACpE,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,mBAAmB,OAAO,EAAE;YACpC,WAAW,EAAE,sFAAsF;SACpG,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB;IAC9B,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IAErC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,sBAAsB;YAC9B,WAAW,EAAE,sCAAsC;SACpD,CAAA;IACH,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,eAAe,gBAAgB,CAAA;IAEpD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,wBAAwB,CAAC,CAAA;QAE9E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aAC1C;YACD,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAA;QACF,YAAY,CAAC,OAAO,CAAC,CAAA;QAErB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,OAAO;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,oBAAoB,KAAK,CAAC,eAAe,EAAE;aACpD,CAAA;QACH,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,OAAO;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,qBAAqB,GAAG,CAAC,MAAM,GAAG;gBAC1C,WAAW,EAAE,iEAAiE;aAC/E,CAAA;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,gBAAgB,KAAK,CAAC,eAAe,UAAU,GAAG,CAAC,MAAM,GAAG;SACrE,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAA;QACpE,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,iBAAiB,OAAO,EAAE;YAClC,WAAW,EAAE,iCAAiC,KAAK,CAAC,eAAe,GAAG;SACvE,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe;IACtB,uBAAuB;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAA;QACzD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,oCAAoC;gBACjE,OAAO;oBACL,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,gBAAgB,GAAG,GAAG;iBAC/B,CAAA;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IAED,kCAAkC;IAClC,IAAI,mBAAmB,EAAE,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,qCAAqC;SAC9C,CAAA;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,qFAAqF;KACnG,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB;IAC1B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,2BAA2B;YACnC,WAAW,EAAE,iDAAiD;SAC/D,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACrD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,oDAAoD;YAC5D,WAAW,EAAE,oEAAoE;SAClF,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,KAAK,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;YACvF,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAC/C,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAErE,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAA;IACtD,MAAM,OAAO,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAE5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,GAAG,UAAU,qCAAqC;SAC3D,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,UAAU,CAAC,CAAA;IAChE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,UAAU,CAAC,CAAA;IAEhE,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,GAAG,OAAO,IAAI,UAAU,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAChE,WAAW,EAAE,8EAA8E;KAC5F,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,UAAU,CAAC,eAAe,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;QAE3C,uDAAuD;QACvD,MAAM,OAAO,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;QAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAA;QAE/E,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,eAAe,eAAe,KAAK,KAAK,CAAC,MAAM,SAAS;SACjE,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,gCAAgC,eAAe,EAAE;YACzD,WAAW,EAAE,8EAA8E;SAC5F,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW;IACxB,4DAA4D;IAC5D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAA;QAE7E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;QACxE,YAAY,CAAC,OAAO,CAAC,CAAA;QAErB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO;oBACL,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,uCAAuC;iBAChD,CAAA;YACH,CAAC;YACD,kEAAkE;QACpE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAA;QACrD,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;gBACtE,MAAM,CAAC,GAAG,EAAE,CAAA;gBACZ,OAAO,CAAC,IAAI,CAAC,CAAA;YACf,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAA;YAC1C,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;YAChE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;QAEF,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,gDAAgD;aACzD,CAAA;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,4BAA4B;QACpC,WAAW,EAAE,iEAAiE;KAC/E,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc;IACrB,uCAAuC;IACvC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,+BAA+B,YAAY,EAAE;YACrD,WAAW,EAAE,sFAAsF;SACpG,CAAA;IACH,CAAC;IAED,yCAAyC;IACzC,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAA;IACrB,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,+CAA+C;YAC/C,QAAQ,CAAC,4BAA4B,YAAY,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;YACpF,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,iDAAiD;aAC1D,CAAA;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,iDAAiD;YACjD,MAAM,UAAU,GAAG;gBACjB,kCAAkC;gBAClC,kCAAkC;gBAClC,2CAA2C;aAC5C,CAAA;YACD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACtC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAA;oBAChE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAA;gBACd,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO;oBACL,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,uDAAuD;iBAChE,CAAA;YACH,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,iDAAiD;gBACzD,WAAW,EAAE,kCAAkC,YAAY,iFAAiF;aAC7I,CAAA;QACH,CAAC;aAAM,CAAC;YACN,mEAAmE;YACnE,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,qBAAqB,YAAY,mCAAmC,EAAE,GAAG;aAClF,CAAA;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,6CAA6C;YACrD,WAAW,EAAE,EAAE,KAAK,QAAQ;gBAC1B,CAAC,CAAC,yGAAyG,YAAY,GAAG;gBAC1H,CAAC,CAAC,kCAAkC,YAAY,iFAAiF;SACpI,CAAA;IACH,CAAC;AACH,CAAC;AAED,wEAAwE;AAExE,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,GAAG,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAA;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAEf,MAAM,OAAO,GAAkB,EAAE,CAAA;IAEjC,kDAAkD;IAClD,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;IAChC,OAAO,CAAC,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAA;IACvC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAA;IAC/B,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACnC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;IAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,WAAW,EAAE,CAAC,CAAA;IACjC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;IAE9B,gBAAgB;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAA;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAA;IAEpD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QAC9E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAC1E,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAED,UAAU;IACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACf,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,GAAG,CAAC,OAAO,CAAC,OAAO,MAAM,wCAAwC,CAAC,CAAA;IACpE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,YAAY,MAAM,mCAAmC,CAAC,CAAA;IAC1E,CAAC;AACH,CAAC"}
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,MAAM,YAAY,CAAA;AAE3B,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAE1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAWhF,wEAAwE;AAExE,MAAM,gBAAgB,GAAG,8BAA8B,CAAA;AACvD,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAC9B,MAAM,wBAAwB,GAAG,KAAK,CAAA;AACtC;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;AACxE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;AACjE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;AAC1D,MAAM,uBAAuB,GAAG,KAAK,CAAA;AAErC,uEAAuE;AAEvE;;GAEG;AACH,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAA;QAEtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;YACxC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAA;QACF,YAAY,CAAC,OAAO,CAAC,CAAA;QAErB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,gBAAgB,gBAAgB,UAAU,GAAG,CAAC,MAAM,GAAG;aAChE,CAAA;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,uBAAuB,GAAG,CAAC,MAAM,EAAE;YAC3C,WAAW,EAAE,6DAA6D;SAC3E,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAA;QACpE,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,mBAAmB,OAAO,EAAE;YACpC,WAAW,EAAE,sFAAsF;SACpG,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB;IAC9B,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IAErC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,sBAAsB;YAC9B,WAAW,EAAE,sCAAsC;SACpD,CAAA;IACH,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,eAAe,gBAAgB,CAAA;IAEpD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,wBAAwB,CAAC,CAAA;QAE9E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aAC1C;YACD,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAA;QACF,YAAY,CAAC,OAAO,CAAC,CAAA;QAErB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,OAAO;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,oBAAoB,KAAK,CAAC,eAAe,EAAE;aACpD,CAAA;QACH,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,OAAO;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,qBAAqB,GAAG,CAAC,MAAM,GAAG;gBAC1C,WAAW,EAAE,iEAAiE;aAC/E,CAAA;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,gBAAgB,KAAK,CAAC,eAAe,UAAU,GAAG,CAAC,MAAM,GAAG;SACrE,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAA;QACpE,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,iBAAiB,OAAO,EAAE;YAClC,WAAW,EAAE,iCAAiC,KAAK,CAAC,eAAe,GAAG;SACvE,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe;IACtB,uBAAuB;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAA;QACzD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,oCAAoC;gBACjE,OAAO;oBACL,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,gBAAgB,GAAG,GAAG;iBAC/B,CAAA;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IAED,kCAAkC;IAClC,IAAI,mBAAmB,EAAE,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,qCAAqC;SAC9C,CAAA;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,qFAAqF;KACnG,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB;IAC1B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,2BAA2B;YACnC,WAAW,EAAE,iDAAiD;SAC/D,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACrD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,oDAAoD;YAC5D,WAAW,EAAE,oEAAoE;SAClF,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,KAAK,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;YACvF,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAC/C,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAErE,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAA;IACtD,MAAM,OAAO,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAE5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,GAAG,UAAU,qCAAqC;SAC3D,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,UAAU,CAAC,CAAA;IAChE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,UAAU,CAAC,CAAA;IAEhE,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,GAAG,OAAO,IAAI,UAAU,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAChE,WAAW,EAAE,8EAA8E;KAC5F,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB;IAC1B,OAAO;QACL,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO;QAC9B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO;QAC7B,sBAAsB;KACvB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAE9D,MAAM,IAAI,GAAI,MAA6B,CAAC,IAAI,CAAA;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAErE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAA;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAExC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,CAAA;IAC7D,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5B,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,qBAAqB,CAAA;IAC7C,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,cAAc,OAAO,OAAO,CAAA;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAA;IACtC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,cAAc,KAAK,OAAO,CAAA;IACjD,OAAO,cAAc,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,OAAO,CAAA;AACpD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc;IACrB,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAA;IAExC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACrC,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,gCAAgC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC/D,WAAW,EAAE,8EAA8E;SAC5F,CAAA;IACH,CAAC;IAED,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,SAAS,OAAO,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YACtG,WAAW,EAAE,uCAAuC,OAAO,EAAE;SAC9D,CAAA;IACH,CAAC;IAED,4EAA4E;IAC5E,6DAA6D;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC1E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,YAAY,OAAO,wCAAwC;YACnE,WAAW,EAAE,sGAAsG;SACpH,CAAA;IACH,CAAC;IAED,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;IACzD,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAEpC,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,eAAe,OAAO,KAAK,KAAK,CAAC,MAAM,SAAS,MAAM,GAAG;KAClE,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW;IACxB,4DAA4D;IAC5D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAA;QAE7E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;QACxE,YAAY,CAAC,OAAO,CAAC,CAAA;QAErB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO;oBACL,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,uCAAuC;iBAChD,CAAA;YACH,CAAC;YACD,kEAAkE;QACpE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAA;QACrD,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;gBACtE,MAAM,CAAC,GAAG,EAAE,CAAA;gBACZ,OAAO,CAAC,IAAI,CAAC,CAAA;YACf,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAA;YAC1C,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;YAChE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;QAEF,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,gDAAgD;aACzD,CAAA;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,4BAA4B;QACpC,WAAW,EAAE,iEAAiE;KAC/E,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,EAAU;IACxC,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAqB,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;IAC7E,IAAI,CAAC,IAAI;QAAE,OAAO,4EAA4E,EAAE,GAAG,CAAA;IACnG,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACtE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AACtF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc;IACrB,uCAAuC;IACvC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,+BAA+B,YAAY,EAAE;YACrD,WAAW,EAAE,sFAAsF;SACpG,CAAA;IACH,CAAC;IAED,yCAAyC;IACzC,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAA;IACrB,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,+CAA+C;YAC/C,QAAQ,CAAC,4BAA4B,YAAY,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;YACpF,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,iDAAiD;aAC1D,CAAA;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,iDAAiD;YACjD,MAAM,UAAU,GAAG;gBACjB,kCAAkC;gBAClC,kCAAkC;gBAClC,2CAA2C;aAC5C,CAAA;YACD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACtC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAA;oBAChE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAA;gBACd,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO;oBACL,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,uDAAuD;iBAChE,CAAA;YACH,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,iDAAiD;gBACzD,WAAW,EAAE,sBAAsB,CAAC,EAAE,CAAC;aACxC,CAAA;QACH,CAAC;aAAM,CAAC;YACN,mEAAmE;YACnE,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,qBAAqB,YAAY,mCAAmC,EAAE,GAAG;aAClF,CAAA;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,6CAA6C;YACrD,WAAW,EAAE,sBAAsB,CAAC,EAAE,CAAC;SACxC,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAA0B;IAC/D,MAAM,IAAI,GAAG,iBAAiB,CAAA;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,YAAY,kCAAkC,CAAC,CAAC,CAAC,EAAE,CAAA;IAErG,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,IAAI;YACP,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,oBAAoB,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,QAAQ,OAAO,EAAE;aAC3F,CAAA;QAEH,KAAK,OAAO;YACV,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,KAAK;gBACb,MAAM,EACJ,GAAG,IAAI,CAAC,OAAO,iCAAiC,IAAI,CAAC,SAAS,cAAc;oBAC5E,oCAAoC,yBAAyB,QAAQ,OAAO,EAAE;gBAChF,WAAW,EACT,wGAAwG;aAC3G,CAAA;QAEH,KAAK,SAAS;YACZ,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,KAAK;gBACb,MAAM,EACJ,cAAc,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,QAAQ,aAAa,IAAI,CAAC,IAAI,KAAK;oBAC5F,oFAAoF;gBACtF,WAAW,EACT,mGAAmG;aACtG,CAAA;QAEH,KAAK,OAAO;YACV,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,KAAK;gBACb,uEAAuE;gBACvE,2DAA2D;gBAC3D,MAAM,EAAE,cAAc,IAAI,CAAC,IAAI,+DAA+D,OAAO,EAAE;gBACvG,WAAW,EACT,kGAAkG;aACrG,CAAA;QAEH,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,kBAAkB,IAAI,CAAC,IAAI,iEAAiE;gBACpG,WAAW,EAAE,sFAAsF;aACpG,CAAA;IACL,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,mBAAmB;IAChC,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAA;IACrC,OAAO,sBAAsB,CAAC,kBAAkB,CAAC,EAAE,mBAAmB,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA;AAChG,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAA;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,sCAAsC;YAC9C,WAAW,EAAE,qCAAqC;SACnD,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAA;IAC3C,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC,CAAC,yCAAyC;KACvF,CAAA;AACH,CAAC;AAED,wEAAwE;AAExE,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,GAAG,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAA;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAEf,MAAM,OAAO,GAAkB,EAAE,CAAA;IAEjC,kDAAkD;IAClD,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;IAChC,OAAO,CAAC,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAA;IACvC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAA;IAC/B,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACnC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;IAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,WAAW,EAAE,CAAC,CAAA;IACjC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;IAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAA;IACzC,OAAO,CAAC,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAA;IAEvC,gBAAgB;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAA;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAA;IAEpD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAC5E,qEAAqE;YACrE,sEAAsE;YACtE,sEAAsE;YACtE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;YACjE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAC1E,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAED,UAAU;IACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACf,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,GAAG,CAAC,OAAO,CAAC,OAAO,MAAM,wCAAwC,CAAC,CAAA;IACpE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,YAAY,MAAM,mCAAmC,CAAC,CAAA;IAC1E,CAAC;AACH,CAAC"}

package/dist/commands/enforce.d.ts

@@ -0,0 +1,33 @@
+/**
+ * `intutic enforce` — the L2 mandatory-egress firewall (LLD #63 §5).
+ *
+ * The proxy governs the traffic it sees, but an agent can bypass it by simply
+ * not routing through it. This command closes that door: it default-denies host
+ * egress to everything except the proxy, DNS, and operator-declared infra, so
+ * the only path to the network is the governing proxy. That turns "please point
+ * at the proxy" into "there is no other way out".
+ *
+ * The rule generation and application live in the `intutic-proxy` binary's
+ * `enforce` subcommand (Rust, platform-aware: nftables/iptables on Linux, pf on
+ * macOS). This command is a thin, discoverable wrapper that spawns it.
+ *
+ * - `generate` / `status` need no privilege.
+ * - `apply` / `remove` change the host firewall and need root.
+ *
+ * @module
+ */
+export interface EnforceOptions {
+    port?: string;
+    uid?: string;
+    allow?: string;
+    /** Commander maps `--no-dns` to `dns === false`; anything else leaves it true. */
+    dns?: boolean;
+    platform?: string;
+}
+/** Translate parsed options into the binary's `enforce` flags. */
+export declare function enforceFlagArgs(opts: EnforceOptions): string[];
+declare const VALID_ACTIONS: readonly ["generate", "apply", "remove", "status", "report"];
+type EnforceAction = (typeof VALID_ACTIONS)[number];
+export declare function runEnforce(action: EnforceAction, opts: EnforceOptions): Promise<void>;
+export {};
+//# sourceMappingURL=enforce.d.ts.map

package/dist/commands/enforce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforce.d.ts","sourceRoot":"","sources":["../../src/commands/enforce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAWH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,kFAAkF;IAClF,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,EAAE,CAQ9D;AAED,QAAA,MAAM,aAAa,8DAA+D,CAAA;AAClF,KAAK,aAAa,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;AAoEnD,wBAAsB,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD3F"}

package/dist/commands/enforce.js

@@ -0,0 +1,150 @@
+/**
+ * `intutic enforce` — the L2 mandatory-egress firewall (LLD #63 §5).
+ *
+ * The proxy governs the traffic it sees, but an agent can bypass it by simply
+ * not routing through it. This command closes that door: it default-denies host
+ * egress to everything except the proxy, DNS, and operator-declared infra, so
+ * the only path to the network is the governing proxy. That turns "please point
+ * at the proxy" into "there is no other way out".
+ *
+ * The rule generation and application live in the `intutic-proxy` binary's
+ * `enforce` subcommand (Rust, platform-aware: nftables/iptables on Linux, pf on
+ * macOS). This command is a thin, discoverable wrapper that spawns it.
+ *
+ * - `generate` / `status` need no privilege.
+ * - `apply` / `remove` change the host firewall and need root.
+ *
+ * @module
+ */
+import { spawn } from 'node:child_process';
+import { log } from '../lib/logger.js';
+import { resolveProxyBinary } from '../lib/proxyBinary.js';
+import { writeEnforcementState } from '../lib/enforcementState.js';
+import { reportDeviceState } from '../lib/deviceReport.js';
+import { createRequire } from 'node:module';
+const { version: cliVersion } = createRequire(import.meta.url)('../../package.json');
+/** Translate parsed options into the binary's `enforce` flags. */
+export function enforceFlagArgs(opts) {
+    const args = [];
+    if (opts.port)
+        args.push('--port', opts.port);
+    if (opts.uid)
+        args.push('--uid', opts.uid);
+    if (opts.allow)
+        args.push('--allow', opts.allow);
+    if (opts.dns === false)
+        args.push('--no-dns');
+    if (opts.platform)
+        args.push('--platform', opts.platform);
+    return args;
+}
+const VALID_ACTIONS = ['generate', 'apply', 'remove', 'status', 'report'];
+/**
+ * Re-queries `enforce status` with captured stdout — `status` always prints
+ * a single JSON line (`main.rs`'s `handle_enforce`), never a flag-gated
+ * format, so no `--json` flag is needed. Returns `null` on any failure
+ * (binary missing, unparseable output) rather than throwing — this is a
+ * best-effort truthfulness step layered on top of an apply/remove that
+ * already succeeded, not something that should fail the command.
+ */
+async function queryEnforceStatus(binary, flags) {
+    return new Promise((resolve) => {
+        const child = spawn(binary, ['enforce', 'status', ...flags], { stdio: ['ignore', 'pipe', 'ignore'] });
+        let out = '';
+        child.stdout.on('data', (chunk) => {
+            out += chunk.toString();
+        });
+        child.on('error', () => resolve(null));
+        child.on('exit', () => {
+            try {
+                resolve(JSON.parse(out.trim()));
+            }
+            catch {
+                resolve(null);
+            }
+        });
+    });
+}
+/**
+ * After a successful privileged apply/remove, re-query status WHILE STILL
+ * ELEVATED (this is what makes the recorded state truthful on macOS, where
+ * an unprivileged `pfctl` query can't see the real rule set — see
+ * enforcementState.ts's module doc), record it locally, then attempt a
+ * best-effort report to the control plane. Never throws: the firewall
+ * change itself already succeeded, which is what matters for this
+ * command's own exit code.
+ */
+async function recordAndReportFirewallState(binary, flags) {
+    const status = await queryEnforceStatus(binary, flags);
+    if (!status) {
+        log.warn('Could not re-query enforce status to record local state — the firewall change itself still applied.');
+        return;
+    }
+    await writeEnforcementState({
+        firewall: {
+            active: status.active,
+            backend: status.backend,
+            detail: status.detail,
+            reportedAt: new Date().toISOString(),
+        },
+    }, cliVersion);
+    const report = await reportDeviceState();
+    if (!report.reported) {
+        log.dim(`  (device report not sent: ${report.reason})`);
+    }
+}
+export async function runEnforce(action, opts) {
+    if (action === 'report') {
+        const result = await reportDeviceState();
+        if (result.reported) {
+            log.success('Device enforcement state reported.');
+        }
+        else {
+            log.warn(`Device report not sent: ${result.reason}`);
+        }
+        return;
+    }
+    if (!VALID_ACTIONS.includes(action)) {
+        log.error(`Unknown enforce action '${action}'. Use: ${VALID_ACTIONS.join(' | ')}`);
+        process.exit(1);
+    }
+    const flags = enforceFlagArgs(opts);
+    // apply/remove are privileged. Warn before spawning so a permission failure
+    // reads as expected rather than a mystery — but still attempt, because the
+    // Rust side emits the precise OS error if privilege really is missing, and
+    // because inside an already-root context (a container, a root shell) there is
+    // nothing to escalate.
+    const isPrivileged = action === 'apply' || action === 'remove';
+    if (isPrivileged && typeof process.getuid === 'function' && process.getuid() !== 0) {
+        log.warn(`'intutic enforce ${action}' changes the host firewall and needs root.`);
+        log.info(`If it fails with a permission error, re-run with sudo:`);
+        log.info(`  sudo intutic enforce ${action}${flags.length ? ' ' + flags.join(' ') : ''}`);
+    }
+    const binary = resolveProxyBinary();
+    await new Promise((resolve) => {
+        const child = spawn(binary, ['enforce', action, ...flags], { stdio: 'inherit' });
+        child.on('error', (err) => {
+            if (err.code === 'ENOENT') {
+                log.error('Could not find the intutic-proxy binary.');
+                log.info('Install it with: npm install -g @intutic/proxy');
+            }
+            else {
+                log.error(`enforce failed: ${err.message}`);
+            }
+            process.exit(1);
+        });
+        child.on('exit', async (code) => {
+            process.exitCode = code ?? 0;
+            // Awaited, not detached: a fully async fire-and-forget risks the
+            // process exiting before the POST lands, since nothing else keeps the
+            // event loop alive once this resolves. `recordAndReportFirewallState`
+            // never throws, so this can't turn a successful firewall change into
+            // a failed command — it can only add a brief, bounded delay.
+            if (isPrivileged && code === 0) {
+                await recordAndReportFirewallState(binary, flags);
+            }
+            resolve();
+        });
+    });
+}
+//# sourceMappingURL=enforce.js.map

package/dist/commands/enforce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforce.js","sourceRoot":"","sources":["../../src/commands/enforce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAwB,CAAA;AAW3G,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAAC,IAAoB;IAClD,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,IAAI,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7C,IAAI,IAAI,CAAC,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAC1C,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAChD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC7C,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAA;AASlF;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,KAAe;IAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAA;QACrG,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;QACzB,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACtC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACpB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC,CAAA;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,CAAA;YACf,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,4BAA4B,CAAC,MAAc,EAAE,KAAe;IACzE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAA;QAC/G,OAAM;IACR,CAAC;IAED,MAAM,qBAAqB,CACzB;QACE,QAAQ,EAAE;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC;KACF,EACD,UAAU,CACX,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAA;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,GAAG,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IACzD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAqB,EAAE,IAAoB;IAC1E,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAA;QACxC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,GAAG,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAA;QACnD,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QACtD,CAAC;QACD,OAAM;IACR,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,2BAA2B,MAAM,WAAW,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAEnC,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,uBAAuB;IACvB,MAAM,YAAY,GAAG,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,CAAA;IAC9D,IAAI,YAAY,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,IAAI,CAAC,oBAAoB,MAAM,6CAA6C,CAAC,CAAA;QACjF,GAAG,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;QAClE,GAAG,CAAC,IAAI,CAAC,0BAA0B,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;IACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;QAChF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,GAAG,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBACrD,GAAG,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAA;YAC5D,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,CAAC,mBAAmB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;YAC7C,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9B,OAAO,CAAC,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAA;YAC5B,iEAAiE;YACjE,sEAAsE;YACtE,sEAAsE;YACtE,qEAAqE;YACrE,6DAA6D;YAC7D,IAAI,YAAY,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;YACnD,CAAC;YACD,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/commands/enterprise.d.ts

@@ -0,0 +1,29 @@
+/**
+ * `intutic enterprise install` — CA-trust rollout, Cursor system-level
+ * hooks, and Jamf/Intune MDM manifest generation for a managed fleet.
+ *
+ * Replaces the deleted `enterprise-install.ts` (commit `8481b5d9`). Named
+ * `enterprise install`, deliberately not the old hyphenated
+ * `enterprise-install` — `tools/scripts/intutic-enterprise-install.sh`
+ * already exists as an unrelated air-gapped docker-compose installer.
+ *
+ * The host firewall is intentionally NOT part of this command — that's
+ * `intutic enforce apply`/`generate` (TD-332's real, tested implementation).
+ * Rebuilding a `pf.conf`/`iptables.rules` template generator here, as the
+ * deleted code did, would just be a second, unmaintained copy of it. This
+ * command prints a pointer to it instead.
+ *
+ * @module
+ */
+export interface EnterpriseInstallOptions {
+    proxyUrl?: string;
+    generateMdmOnly?: boolean;
+    mdmOutputDir?: string;
+    skipCa?: boolean;
+    skipHooks?: boolean;
+    dev?: boolean;
+    /** Absolute path to the intutic CLI binary on the TARGET (managed) machine — not this admin machine. */
+    cliBinaryPath?: string;
+}
+export declare function runEnterpriseInstall(opts: EnterpriseInstallOptions): Promise<void>;
+//# sourceMappingURL=enterprise.d.ts.map

package/dist/commands/enterprise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterprise.d.ts","sourceRoot":"","sources":["../../src/commands/enterprise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAuBH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,wGAAwG;IACxG,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAqBD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6GxF"}