@intutic/sync-daemon 1.10.0 → 2.0.0

package/dist/harness/gooseHooksWriter.js

@@ -1,147 +0,0 @@
-/**
- * gooseHooksWriter.ts — Goose pre_tool_use native hook writer.
- *
- * Writes two artefacts:
- *   1. `~/.intutic/hooks/goose-pre-tool-use.sh` — bash gate script that
- *      sources runtime credentials, POSTs to the Intutic hook-gate endpoint,
- *      and exits 2 (block) or 0 (allow).
- *   2. `~/.config/goose/config.yaml` — adds `hooks.pre_tool_use` key if it
- *      is not already present (string operations only; no yaml dep needed).
- *
- * Fail-open semantics: if curl errors the script exits 0 so Goose continues.
- * On block, a JSONL event line is also appended to
- * `~/.intutic/events/hook-events.jsonl` for local audit.
- *
- * LLD #14 — Phase 4 WS-4C native hook script writers
- * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
- *
- * @module
- */
-import * as node_fs from 'node:fs/promises';
-import * as node_path from 'node:path';
-import * as node_os from 'node:os';
-import { createLogger } from '@intutic/logger';
-const log = createLogger('sync-goose-hooks-writer');
-const HOOKS_DIR = node_path.join(node_os.homedir(), '.intutic', 'hooks');
-const EVENTS_DIR = node_path.join(node_os.homedir(), '.intutic', 'events');
-const HOOK_SCRIPT = node_path.join(HOOKS_DIR, 'goose-pre-tool-use.sh');
-const HOOK_EVENTS_LOG = node_path.join(EVENTS_DIR, 'hook-events.jsonl');
-const GOOSE_CONFIG = node_path.join(node_os.homedir(), '.config', 'goose', 'config.yaml');
-/**
- * Build the bash gate script content.
- *
- * Logic:
- *   1. Source ~/.intutic/env/runtime.env for credentials.
- *   2. Read full stdin JSON payload.
- *   3. POST to $INTUTIC_CONTROL_PLANE_URL/api/v1/hook-gate (10 s timeout).
- *   4. If curl fails → fail-open (exit 0).
- *   5. If response body contains `"allowed":false` → append JSONL event, exit 2.
- *   6. Otherwise → exit 0.
- */
-function buildGooseHookScript() {
-    return `#!/usr/bin/env bash
-# Intutic Goose pre_tool_use governance gate.
-# Auto-generated by intutic sync-daemon. DO NOT EDIT.
-set -euo pipefail
-
-RUNTIME_ENV="$HOME/.intutic/env/runtime.env"
-HOOK_EVENTS_LOG=${JSON.stringify(HOOK_EVENTS_LOG)}
-INTUTIC_CONTROL_PLANE_URL="https://api.intutic.ai"
-INTUTIC_API_KEY=""
-INTUTIC_WORKSPACE_ID=""
-
-# Source runtime credentials (key rotation is automatic on next tool call)
-[ -f "$RUNTIME_ENV" ] && source "$RUNTIME_ENV" 2>/dev/null || true
-
-INPUT="$(cat)"
-TOOL_NAME="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('tool_name',''))" 2>/dev/null || true)"
-
-# ── POST to hook-gate ─────────────────────────────────────────────────
-GATE_URL="\${INTUTIC_CONTROL_PLANE_URL}/api/v1/hook-gate"
-RESPONSE=""
-if [ -n "$INTUTIC_API_KEY" ]; then
-  RESPONSE="$(curl -s --max-time 10 -X POST \\
-    -H "Content-Type: application/json" \\
-    -H "Authorization: Bearer $INTUTIC_API_KEY" \\
-    -d "$INPUT" \\
-    "$GATE_URL" 2>/dev/null)" || true
-fi
-
-# Fail-open: empty response (curl error / no key) → allow
-if [ -z "$RESPONSE" ]; then
-  exit 0
-fi
-
-# Check decision
-ALLOWED="$(echo "$RESPONSE" | python3 -c "import sys,json; d=json.load(sys.stdin); print(str(d.get('allowed', True)).lower())" 2>/dev/null || echo "true")"
-
-if [ "$ALLOWED" = "false" ]; then
-  REASON="$(echo "$RESPONSE" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('reason',''))" 2>/dev/null || true)"
-  TS="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
-  INCIDENT_ID="$(printf '%s' "\${TS}\${TOOL_NAME}\${INTUTIC_WORKSPACE_ID}" | sha1sum 2>/dev/null | cut -c1-16 || echo "$(date +%s)")"
-  ENTRY="{\\"event\\":\\"tool_blocked\\",\\"toolName\\":\\"\${TOOL_NAME}\\",\\"reason\\":\\"\${REASON}\\",\\"workspaceId\\":\\"\${INTUTIC_WORKSPACE_ID}\\",\\"harnessType\\":\\"goose\\",\\"timestamp\\":\\"\${TS}\\",\\"incidentId\\":\\"\${INCIDENT_ID}\\"}"
-  mkdir -p "$(dirname "$HOOK_EVENTS_LOG")"
-  printf '%s\\n' "$ENTRY" >> "$HOOK_EVENTS_LOG" 2>/dev/null || true
-  echo "[Intutic Governance] BLOCKED: $REASON" >&2
-  exit 2
-fi
-
-exit 0
-`;
-}
-/**
- * Merge `hooks.pre_tool_use` into Goose config.yaml using string operations.
- *
- * Reads the existing file (if any), checks if `pre_tool_use:` is already
- * present under a `hooks:` section, and adds it only if absent.
- * Creates the file (with a minimal `hooks:` block) if it does not exist.
- */
-async function mergeGooseConfig() {
-    let existing = '';
-    try {
-        existing = await node_fs.readFile(GOOSE_CONFIG, 'utf-8');
-    }
-    catch {
-        existing = '';
-    }
-    const hookLine = `  pre_tool_use: ${HOOK_SCRIPT}`;
-    // Already registered — nothing to do
-    if (existing.includes('pre_tool_use:') && existing.includes(HOOK_SCRIPT)) {
-        log.debug({ action: 'goose_config_noop', path: GOOSE_CONFIG }, 'Goose config already contains pre_tool_use hook');
-        return;
-    }
-    if (existing.includes('hooks:')) {
-        // hooks: block exists — insert our line after the `hooks:` line
-        existing = existing.replace(/^hooks:/m, `hooks:\n${hookLine}`);
-    }
-    else {
-        // No hooks: block — append
-        existing = existing.trimEnd() + `\nhooks:\n${hookLine}\n`;
-    }
-    await node_fs.mkdir(node_path.dirname(GOOSE_CONFIG), { recursive: true });
-    const tmp = GOOSE_CONFIG + '.intutic-tmp';
-    await node_fs.writeFile(tmp, existing, 'utf-8');
-    await node_fs.rename(tmp, GOOSE_CONFIG);
-    log.info({ action: 'goose_config_written', path: GOOSE_CONFIG }, 'Goose config.yaml updated with pre_tool_use hook');
-}
-/**
- * Write the Goose pre_tool_use hook script and register it in config.yaml.
- *
- * @param workspaceRoot - Absolute path to the workspace root (unused directly;
- *   included for API symmetry with other hook writers).
- */
-export async function writeGooseHooks(workspaceRoot) {
-    // Ensure target directories exist
-    await node_fs.mkdir(HOOKS_DIR, { recursive: true });
-    await node_fs.mkdir(EVENTS_DIR, { recursive: true });
-    // Write hook script atomically
-    const tmp = HOOK_SCRIPT + '.intutic-tmp';
-    await node_fs.writeFile(tmp, buildGooseHookScript(), 'utf-8');
-    await node_fs.rename(tmp, HOOK_SCRIPT);
-    await node_fs.chmod(HOOK_SCRIPT, 0o755);
-    log.info({ action: 'goose_hook_script_written', path: HOOK_SCRIPT }, 'Goose pre_tool_use hook script written');
-    // Register in config.yaml
-    await mergeGooseConfig();
-    log.info({ action: 'goose_hooks_done', workspaceRoot }, 'Goose native hooks written successfully');
-}
-//# sourceMappingURL=gooseHooksWriter.js.map

package/dist/harness/gooseHooksWriter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gooseHooksWriter.js","sourceRoot":"","sources":["../../src/harness/gooseHooksWriter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,GAAG,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAA;AAEnD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;AACxE,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;AAC1E,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAA;AACtE,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAA;AACvE,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;AAEzF;;;;;;;;;;GAUG;AACH,SAAS,oBAAoB;IAC3B,OAAO;;;;;;kBAMS,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0ChD,CAAA;AACD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB;IAC7B,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,EAAE,CAAA;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,WAAW,EAAE,CAAA;IAEjD,qCAAqC;IACrC,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,iDAAiD,CAAC,CAAA;QACjH,OAAM;IACR,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,gEAAgE;QAChE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,QAAQ,EAAE,CAAC,CAAA;IAChE,CAAC;SAAM,CAAC;QACN,2BAA2B;QAC3B,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,aAAa,QAAQ,IAAI,CAAA;IAC3D,CAAC;IAED,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzE,MAAM,GAAG,GAAG,YAAY,GAAG,cAAc,CAAA;IACzC,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;IAEvC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,EACtD,kDAAkD,CACnD,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,aAAqB;IACzD,kCAAkC;IAClC,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEpD,+BAA+B;IAC/B,MAAM,GAAG,GAAG,WAAW,GAAG,cAAc,CAAA;IACxC,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,oBAAoB,EAAE,EAAE,OAAO,CAAC,CAAA;IAC7D,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IACtC,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAEvC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,2BAA2B,EAAE,IAAI,EAAE,WAAW,EAAE,EAC1D,wCAAwC,CACzC,CAAA;IAED,0BAA0B;IAC1B,MAAM,gBAAgB,EAAE,CAAA;IAExB,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,EAC7C,yCAAyC,CAC1C,CAAA;AACH,CAAC"}

package/dist/harness/openhandsHooksWriter.d.ts

@@ -1,23 +0,0 @@
-/**
- * openhandsHooksWriter.ts — OpenHands PreToolUse native hook writer.
- *
- * Writes two artefacts:
- *   1. `~/.intutic/hooks/pre-tool-check.sh` — shared bash gate script that
- *      sources runtime credentials, POSTs to the Intutic hook-gate endpoint,
- *      exits 2 on block (fail-open on curl error). Sets HARNESS=openhands in
- *      the request body so the control plane can route correctly.
- *   2. `<workspaceRoot>/.openhands/hooks.json` — registers the script as the
- *      PreToolUse handler with a 10-second timeout.
- *
- * LLD #14 — Phase 4 WS-4C native hook script writers
- * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
- *
- * @module
- */
-/**
- * Write OpenHands PreToolUse hook script and hooks.json.
- *
- * @param workspaceRoot - Absolute path to the workspace root.
- */
-export declare function writeOpenHandsHooks(workspaceRoot: string): Promise<void>;
-//# sourceMappingURL=openhandsHooksWriter.d.ts.map

package/dist/harness/openhandsHooksWriter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"openhandsHooksWriter.d.ts","sourceRoot":"","sources":["../../src/harness/openhandsHooksWriter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA+GH;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA+B9E"}

package/dist/harness/openhandsHooksWriter.js

@@ -1,146 +0,0 @@
-/**
- * openhandsHooksWriter.ts — OpenHands PreToolUse native hook writer.
- *
- * Writes two artefacts:
- *   1. `~/.intutic/hooks/pre-tool-check.sh` — shared bash gate script that
- *      sources runtime credentials, POSTs to the Intutic hook-gate endpoint,
- *      exits 2 on block (fail-open on curl error). Sets HARNESS=openhands in
- *      the request body so the control plane can route correctly.
- *   2. `<workspaceRoot>/.openhands/hooks.json` — registers the script as the
- *      PreToolUse handler with a 10-second timeout.
- *
- * LLD #14 — Phase 4 WS-4C native hook script writers
- * HLD §3.14 — Three-Tier Defense Cascade (Tier 1 Native Gating)
- *
- * @module
- */
-import * as node_fs from 'node:fs/promises';
-import * as node_path from 'node:path';
-import * as node_os from 'node:os';
-import { createLogger } from '@intutic/logger';
-const log = createLogger('sync-openhands-hooks-writer');
-const HOOKS_DIR = node_path.join(node_os.homedir(), '.intutic', 'hooks');
-const EVENTS_DIR = node_path.join(node_os.homedir(), '.intutic', 'events');
-const HOOK_SCRIPT = node_path.join(HOOKS_DIR, 'pre-tool-check.sh');
-const HOOK_EVENTS_LOG = node_path.join(EVENTS_DIR, 'hook-events.jsonl');
-/**
- * Build the shared bash gate script.
- *
- * The script is designed to be shared across harnesses that invoke a bash
- * pre-tool-use hook. It sets HARNESS=openhands in the POST body so the
- * control-plane can distinguish the origin.
- *
- * Logic:
- *   1. Source ~/.intutic/env/runtime.env for credentials.
- *   2. Read full stdin JSON payload.
- *   3. Merge HARNESS=openhands into the payload.
- *   4. POST to $INTUTIC_CONTROL_PLANE_URL/api/v1/hook-gate (10 s timeout).
- *   5. Fail-open if curl returns an error or no API key is set.
- *   6. Exit 2 + append JSONL event if `"allowed":false`.
- *   7. Exit 0 otherwise.
- */
-function buildPreToolCheckScript() {
-    return `#!/usr/bin/env bash
-# Intutic shared pre-tool-check governance gate.
-# Auto-generated by intutic sync-daemon. DO NOT EDIT.
-# Used by: OpenHands (and any other bash-based hook harness).
-set -euo pipefail
-
-HARNESS="openhands"
-RUNTIME_ENV="$HOME/.intutic/env/runtime.env"
-HOOK_EVENTS_LOG=${JSON.stringify(HOOK_EVENTS_LOG)}
-INTUTIC_CONTROL_PLANE_URL="https://api.intutic.ai"
-INTUTIC_API_KEY=""
-INTUTIC_WORKSPACE_ID=""
-
-# Source runtime credentials (key rotation is automatic on next tool call)
-[ -f "$RUNTIME_ENV" ] && source "$RUNTIME_ENV" 2>/dev/null || true
-
-INPUT="$(cat)"
-TOOL_NAME="$(echo "$INPUT" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('tool_name',''))" 2>/dev/null || true)"
-
-# Augment body with harness identifier
-BODY="$(echo "$INPUT" | python3 -c "
-import sys, json
-d = json.load(sys.stdin)
-d['harness'] = '$HARNESS'
-d['workspaceId'] = '$INTUTIC_WORKSPACE_ID'
-print(json.dumps(d))
-" 2>/dev/null || echo "$INPUT")"
-
-# ── POST to hook-gate ─────────────────────────────────────────────────
-GATE_URL="\${INTUTIC_CONTROL_PLANE_URL}/api/v1/hook-gate"
-RESPONSE=""
-if [ -n "$INTUTIC_API_KEY" ]; then
-  RESPONSE="$(curl -s --max-time 10 -X POST \\
-    -H "Content-Type: application/json" \\
-    -H "Authorization: Bearer $INTUTIC_API_KEY" \\
-    -d "$BODY" \\
-    "$GATE_URL" 2>/dev/null)" || true
-fi
-
-# Fail-open: empty response (curl error / no key) → allow
-if [ -z "$RESPONSE" ]; then
-  exit 0
-fi
-
-# Parse decision
-ALLOWED="$(echo "$RESPONSE" | python3 -c "import sys,json; d=json.load(sys.stdin); print(str(d.get('allowed', True)).lower())" 2>/dev/null || echo "true")"
-
-if [ "$ALLOWED" = "false" ]; then
-  REASON="$(echo "$RESPONSE" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('reason',''))" 2>/dev/null || true)"
-  TS="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
-  INCIDENT_ID="$(printf '%s' "\${TS}\${TOOL_NAME}\${INTUTIC_WORKSPACE_ID}" | sha1sum 2>/dev/null | cut -c1-16 || echo "$(date +%s)")"
-  ENTRY="{\\"event\\":\\"tool_blocked\\",\\"toolName\\":\\"\${TOOL_NAME}\\",\\"reason\\":\\"\${REASON}\\",\\"workspaceId\\":\\"\${INTUTIC_WORKSPACE_ID}\\",\\"harnessType\\":\\"\${HARNESS}\\",\\"timestamp\\":\\"\${TS}\\",\\"incidentId\\":\\"\${INCIDENT_ID}\\"}"
-  mkdir -p "$(dirname "$HOOK_EVENTS_LOG")"
-  printf '%s\\n' "$ENTRY" >> "$HOOK_EVENTS_LOG" 2>/dev/null || true
-  echo "[Intutic Governance] BLOCKED: $REASON" >&2
-  exit 2
-fi
-
-exit 0
-`;
-}
-/**
- * Build the .openhands/hooks.json document that registers the PreToolUse hook.
- *
- * @param hookScriptPath - Absolute path to the bash gate script.
- */
-function buildOpenHandsHooksJson(hookScriptPath) {
-    return {
-        _comment: 'Intutic governance hooks — auto-generated. DO NOT EDIT.',
-        hooks: [
-            {
-                type: 'PreToolUse',
-                command: hookScriptPath,
-                timeout: 10,
-            },
-        ],
-    };
-}
-/**
- * Write OpenHands PreToolUse hook script and hooks.json.
- *
- * @param workspaceRoot - Absolute path to the workspace root.
- */
-export async function writeOpenHandsHooks(workspaceRoot) {
-    // ── Ensure directories exist ─────────────────────────────────────────
-    await node_fs.mkdir(HOOKS_DIR, { recursive: true });
-    await node_fs.mkdir(EVENTS_DIR, { recursive: true });
-    // ── 1. Write shared bash gate script ────────────────────────────────
-    const tmpScript = HOOK_SCRIPT + '.intutic-tmp';
-    await node_fs.writeFile(tmpScript, buildPreToolCheckScript(), 'utf-8');
-    await node_fs.rename(tmpScript, HOOK_SCRIPT);
-    await node_fs.chmod(HOOK_SCRIPT, 0o755);
-    log.info({ action: 'openhands_hook_script_written', path: HOOK_SCRIPT }, 'Shared pre-tool-check.sh written');
-    // ── 2. Write .openhands/hooks.json ──────────────────────────────────
-    const openhandsDir = node_path.join(workspaceRoot, '.openhands');
-    await node_fs.mkdir(openhandsDir, { recursive: true });
-    const hooksJsonPath = node_path.join(openhandsDir, 'hooks.json');
-    const hooksDoc = buildOpenHandsHooksJson(HOOK_SCRIPT);
-    const tmpHooks = hooksJsonPath + '.intutic-tmp';
-    await node_fs.writeFile(tmpHooks, JSON.stringify(hooksDoc, null, 2) + '\n', 'utf-8');
-    await node_fs.rename(tmpHooks, hooksJsonPath);
-    log.info({ action: 'openhands_hooks_json_written', path: hooksJsonPath }, 'OpenHands hooks.json written');
-}
-//# sourceMappingURL=openhandsHooksWriter.js.map

package/dist/harness/openhandsHooksWriter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"openhandsHooksWriter.js","sourceRoot":"","sources":["../../src/harness/openhandsHooksWriter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,GAAG,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAA;AAEvD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;AACxE,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;AAC1E,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAA;AAClE,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAA;AAEvE;;;;;;;;;;;;;;;GAeG;AACH,SAAS,uBAAuB;IAC9B,OAAO;;;;;;;;kBAQS,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDhD,CAAA;AACD,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,cAAsB;IACrD,OAAO;QACL,QAAQ,EAAE,yDAAyD;QACnE,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,cAAc;gBACvB,OAAO,EAAE,EAAE;aACZ;SACF;KACF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,aAAqB;IAC7D,wEAAwE;IACxE,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEpD,uEAAuE;IACvE,MAAM,SAAS,GAAG,WAAW,GAAG,cAAc,CAAA;IAC9C,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,uBAAuB,EAAE,EAAE,OAAO,CAAC,CAAA;IACtE,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAC5C,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAEvC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,+BAA+B,EAAE,IAAI,EAAE,WAAW,EAAE,EAC9D,kCAAkC,CACnC,CAAA;IAED,uEAAuE;IACvE,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;IAChE,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEtD,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAA;IAChE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAA;IAErD,MAAM,QAAQ,GAAG,aAAa,GAAG,cAAc,CAAA;IAC/C,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IACpF,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAE7C,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,8BAA8B,EAAE,IAAI,EAAE,aAAa,EAAE,EAC/D,8BAA8B,CAC/B,CAAA;AACH,CAAC"}