@intutic/sync-daemon 2.1.0 → 2.2.0

package/dist/lib/gitWorktrees.js

@@ -1,191 +0,0 @@
-/**
- * gitWorktrees.ts — discovers every `git worktree` checkout of a repo the
- * sync daemon is watching, so project-tier governance files can be written
- * into each one, not just the main checkout.
- *
- * # The gap this closes
- *
- * `git worktree add <path>` creates a second, fully independent WORKING
- * TREE that shares the main checkout's `.git` object store (via a `.git`
- * FILE pointing back at `<main>/.git/worktrees/<name>`) but has its own
- * untracked files. Every project-tier governance file this product writes
- * — `.claude/settings.json`, `.cursor/hooks.json`, `.intutic/hooks/*`,
- * `AGENTS.md`'s sibling hook registrations, the wrapped `.mcp.json` entries,
- * etc. — is untracked by convention (SOP content is workspace-specific and
- * synced from the control plane, not committed). That means none of it
- * exists in a worktree's working tree by default: `writeConfigFiles`/
- * `injectMcpServer` running against only the main checkout's `workspaceRoot`
- * leaves every OTHER worktree of that same repo completely ungoverned,
- * regardless of what the main checkout has configured.
- *
- * This was already true for any hand-rolled `git worktree` workflow before
- * this module existed — Xirp (an orchestrator that spawns CLI agents each
- * inside its own tmux session + git worktree, see `tools/cli/src/harness/
- * xirp.ts`) is what surfaced it, but the fix here is general: it benefits
- * ANY worktree-based workflow, Xirp-managed or not. See TD-390.
- *
- * # Verifying the mechanics for real
- *
- * Confirmed against a real throwaway repo during this module's development
- * (not asserted from memory of git's docs): an untracked file written into
- * a main checkout is NOT visible from a `git worktree add`-created sibling
- * checkout's directory. `git worktree list --porcelain`'s block format,
- * including `locked`/`prunable`/`bare`/`detached` fields, was captured from
- * a real `git worktree list --porcelain` run (this module's own test suite
- * builds the same kind of fixture, in an isolated temp directory, rather
- * than relying on this description alone).
- *
- * @module
- */
-import { execFile as _execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-const execFile = promisify(_execFile);
-/**
- * Parses `git worktree list --porcelain` output.
- *
- * Real format (verified against a live `git worktree list --porcelain` run,
- * git 2.x): one block per worktree, separated by a blank line, each line a
- * bare keyword or `<keyword> <value>`:
- *
- * ```
- * worktree /path/to/main
- * HEAD 56bdba0a04f83da4e821a0a3e7a6208d43fcaec5
- * branch refs/heads/master
- *
- * worktree /path/to/locked-wt
- * HEAD 56bdba0a04f83da4e821a0a3e7a6208d43fcaec5
- * branch refs/heads/feature2
- * locked testing lock
- *
- * worktree /path/to/detached-wt
- * HEAD 56bdba0a04f83da4e821a0a3e7a6208d43fcaec5
- * detached
- * ```
- *
- * Deliberately implemented with plain string methods (`startsWith`/`slice`)
- * rather than a line-matching regex — this parses `git`-controlled, not
- * attacker-controlled, input, but a sibling Wave 1 phase shipped a
- * CodeQL-flagged polynomial-regex bug from exactly this kind of "just trim
- * a path" text handling, so the same class of construct is avoided here on
- * principle even though the input source differs.
- */
-export function parseWorktreeListPorcelain(output) {
-    const blocks = output.split('\n\n');
-    const worktrees = [];
-    for (const block of blocks) {
-        const trimmedBlock = block.trim();
-        if (!trimmedBlock)
-            continue;
-        let path = '';
-        let head = null;
-        let branch = null;
-        let detached = false;
-        let bare = false;
-        let locked = false;
-        let lockedReason = null;
-        let prunable = false;
-        let prunableReason = null;
-        for (const rawLine of trimmedBlock.split('\n')) {
-            const line = rawLine.trim();
-            if (!line)
-                continue;
-            if (line === 'bare') {
-                bare = true;
-            }
-            else if (line === 'detached') {
-                detached = true;
-            }
-            else if (line.startsWith('worktree ')) {
-                path = line.slice('worktree '.length).trim();
-            }
-            else if (line.startsWith('HEAD ')) {
-                head = line.slice('HEAD '.length).trim();
-            }
-            else if (line.startsWith('branch ')) {
-                branch = line.slice('branch '.length).trim();
-            }
-            else if (line === 'locked') {
-                locked = true;
-            }
-            else if (line.startsWith('locked ')) {
-                locked = true;
-                lockedReason = line.slice('locked '.length).trim() || null;
-            }
-            else if (line === 'prunable') {
-                prunable = true;
-            }
-            else if (line.startsWith('prunable ')) {
-                prunable = true;
-                prunableReason = line.slice('prunable '.length).trim() || null;
-            }
-            // Any other line is a porcelain field this parser does not know about
-            // yet (git has added a few over the years) — ignored rather than
-            // treated as an error, so a future git version adding a new field
-            // degrades gracefully instead of breaking discovery entirely.
-        }
-        if (path) {
-            worktrees.push({ path, head, branch, detached, bare, locked, lockedReason, prunable, prunableReason });
-        }
-    }
-    return worktrees;
-}
-/**
- * Discovers every worktree of the git repository containing `repoRoot`,
- * returning the absolute paths that should be treated as additional
- * project-tier workspace roots.
- *
- * Filtering decisions, made explicit rather than left implicit:
- *
- * - **The main checkout is included.** `git worktree list` always lists it
- *   first (confirmed against a live run) — it needs no special-casing by
- *   callers; a caller that already writes to `repoRoot` directly can simply
- *   skip a returned path equal to `repoRoot` if it wants to avoid a
- *   redundant duplicate write, but the list is uniformly correct either way.
- * - **Locked worktrees are included.** `git worktree lock` only prevents
- *   git's own pruning of a worktree it cannot otherwise verify still
- *   exists (e.g. on removable storage) — it says nothing about whether the
- *   directory is currently present and writable, which it normally is.
- *   Excluding locked worktrees would silently under-cover a workflow (like
- *   Xirp's) that locks worktrees deliberately to protect them from being
- *   pruned out from under a long-running session — exactly the worktrees
- *   most worth covering.
- * - **Prunable worktrees are EXCLUDED.** `prunable` means git itself has
- *   flagged the worktree's directory as missing or otherwise administratively
- *   invalid. Writing into that path would either fail or (via this
- *   codebase's `mkdir(dir, { recursive: true })` write convention) silently
- *   RECREATE a directory git considers gone — resurrecting a deleted
- *   worktree's folder with governance files nobody asked for. Skipping it
- *   is what "don't write into a directory git says isn't really there"
- *   means in practice.
- * - **Bare-repository entries are EXCLUDED.** A bare repo's own `worktree`
- *   porcelain entry names its root path but has no working tree of ordinary
- *   files to write project-tier config into.
- *
- * Best-effort by design: returns `[]` (never throws) if `repoRoot` is not
- * inside a git repository, if `git` is not on `PATH`, or on any other
- * failure — this is additive coverage on top of the existing single-root
- * write path, so a git failure here must not break the sync cycle that
- * already succeeds for the main `workspaceRoot`. This also means a
- * non-worktree, single-checkout project (the common case) is a harmless
- * no-extra-work path: `git worktree list` still runs, still succeeds, and
- * returns exactly one entry (the main checkout itself).
- */
-export async function discoverWorktrees(repoRoot) {
-    try {
-        const { stdout } = await execFile('git', ['worktree', 'list', '--porcelain'], {
-            cwd: repoRoot,
-            encoding: 'utf-8',
-            timeout: 5000,
-        });
-        return parseWorktreeListPorcelain(stdout)
-            .filter((wt) => !wt.bare && !wt.prunable)
-            .map((wt) => wt.path);
-    }
-    catch {
-        // Not a git repo, git not installed, or a transient failure — additive
-        // coverage, so this degrades to "no extra worktrees found", not a
-        // thrown error the caller must handle.
-        return [];
-    }
-}
-//# sourceMappingURL=gitWorktrees.js.map

package/dist/lib/gitWorktrees.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gitWorktrees.js","sourceRoot":"","sources":["../../src/lib/gitWorktrees.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,QAAQ,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;AA+BrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,SAAS,GAAmB,EAAE,CAAA;IAEpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QACjC,IAAI,CAAC,YAAY;YAAE,SAAQ;QAE3B,IAAI,IAAI,GAAG,EAAE,CAAA;QACb,IAAI,IAAI,GAAkB,IAAI,CAAA;QAC9B,IAAI,MAAM,GAAkB,IAAI,CAAA;QAChC,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,IAAI,GAAG,KAAK,CAAA;QAChB,IAAI,MAAM,GAAG,KAAK,CAAA;QAClB,IAAI,YAAY,GAAkB,IAAI,CAAA;QACtC,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,cAAc,GAAkB,IAAI,CAAA;QAExC,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;YAC3B,IAAI,CAAC,IAAI;gBAAE,SAAQ;YAEnB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,IAAI,GAAG,IAAI,CAAA;YACb,CAAC;iBAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;YAC9C,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;YAC1C,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;YAC9C,CAAC;iBAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,GAAG,IAAI,CAAA;YACf,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtC,MAAM,GAAG,IAAI,CAAA;gBACb,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;YAC5D,CAAC;iBAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,QAAQ,GAAG,IAAI,CAAA;YACjB,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxC,QAAQ,GAAG,IAAI,CAAA;gBACf,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;YAChE,CAAC;YACD,sEAAsE;YACtE,iEAAiE;YACjE,kEAAkE;YAClE,8DAA8D;QAChE,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAA;QACxG,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE;YAC5E,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;SACd,CAAC,CAAA;QACF,OAAO,0BAA0B,CAAC,MAAM,CAAC;aACtC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC;aACxC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,kEAAkE;QAClE,uCAAuC;QACvC,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/syncLoop.d.ts

@@ -1,172 +0,0 @@
-/**
- * syncLoop.ts — Core bidirectional sync loop.
- *
- * The sync loop is the heartbeat of the daemon. Each iteration:
- * 1. Fetches config from the control plane (POST /api/v1/sync/config)
- * 2. If configVersion > local → writes SOP content to harness files
- * 3. Computes SHA-256 hashes of local config files
- * 4. Reports hashes + status back to the control plane
- * 5. Calls the onSync callback with the result
- * 6. Sleeps for pollIntervalMs (AbortSignal-aware)
- * 7. Repeats until signal.aborted
- *
- * Design: never crash on a single iteration failure. Errors are
- * caught per-iteration, logged, and the loop continues.
- *
- * HLD §3.14 — Real-Time State Mirroring
- * LLD #8 — Sync Daemon / CLI
- *
- * @module
- */
-import type { HarnessType, SyncConfigPayload, WorkspaceSettings, SyncSopEntry } from '@intutic/shared-types';
-import { type GovernanceCoverageInputs } from './configReader.js';
-import { type AgentReport } from './agentReporter.js';
-/**
- * Turns a non-clean `scanSkillContent` result — already computed as part of
- * `collectAgentReport`'s `facets.skills` — into a `skill_flagged` hook event
- * (TD-358).
- *
- * Deliberately reuses the report the daemon already built for this cycle
- * rather than re-scanning: `agentReporter.ts`'s `collectSkills` runs
- * `scanSkillContent` on every `.agents/skills/**\/SKILL.md` as part of
- * building `facets.skills` already, so this only turns a result the daemon
- * already has into a visible signal — it does not add a second scan pass.
- *
- * Appends directly to `.intutic/events/hook-events.jsonl`, the SAME file
- * every emitted PreToolUse gate's `log_event`/`logEvent` writes to and the
- * SAME mechanism `onDriftDetected` below already uses for `config_tamper` —
- * not a new event pipeline. `drainHookEvents` (`claudeCodeHooks.ts`) picks
- * this line up on its next pass exactly like a gate-written one, because it
- * only ever reads the file; it does not care who appended a given line.
- *
- * Report-only, per `scanSkillContent`'s own doc comment on the unmeasured
- * false-positive rate against real, benign skill markdown: this NEVER
- * blocks, mutates, or removes a skill. `hookEvents.ts`'s
- * `HookEventSchema.event` enum (control plane) counts `skill_flagged`
- * exactly like `tool_flagged` — advisory telemetry, not an incident.
- *
- * A failure to append is caught and warned, never thrown: a governance
- * telemetry write must not be able to abort the sync cycle it rides in on.
- */
-export declare function emitSkillFlaggedEvents(opts: {
-    workspaceRoot: string;
-    workspaceId: string;
-    harnessType: HarnessType;
-    skills: AgentReport['facets']['skills'];
-    /** Skills already emitted in this cycle, keyed `source:name`, mutated in
-     *  place. A skill is not harness-specific, and the caller invokes this
-     *  once per harness in the workspace — without a shared set, a workspace
-     *  with two active harnesses would double-emit every flagged skill. */
-    alreadyEmitted: Set<string>;
-}): void;
-/** Configuration for the sync loop. */
-export interface SyncLoopOptions {
-    /** Control plane base URL (e.g., `https://api.intutic.ai`). */
-    controlPlaneUrl: string;
-    /** API key for authentication (vk_* or JWT). */
-    apiKey: string;
-    /** Workspace identifier. */
-    workspaceId: string;
-    /** Absolute path to the workspace root directory. */
-    workspaceRoot: string;
-    /** Poll interval in milliseconds (default: 30000). */
-    pollIntervalMs?: number;
-    /** Enable dev mode (relaxed checks, verbose logging). */
-    devMode?: boolean;
-    /** Callback invoked after each successful sync iteration. */
-    onSync?: (result: SyncResult) => void;
-    /** AbortSignal to gracefully stop the loop. */
-    signal?: AbortSignal;
-}
-/** Result of a single sync iteration. */
-export interface SyncResult {
-    /** Config version from the control plane. */
-    configVersion: number;
-    /** Number of harness config files written. */
-    sopsWritten: number;
-    /** Number of files with hash drift. */
-    driftCount: number;
-    /** ISO timestamp of this sync. */
-    timestamp: string;
-    /** Resolved workspace settings from the control plane. WS-5. */
-    settings?: WorkspaceSettings;
-    /** All active SOP rules. */
-    sops?: SyncConfigPayload['sops'];
-    /** Proxy URL. */
-    proxyUrl?: string;
-    /** Active harnesses. */
-    harnesses?: HarnessType[];
-    /**
-     * This cycle's per-harness governance-coverage enforcement signals, derived
-     * from the same `collectAgentReport` facets step 5b already computes for
-     * `POST /api/v1/agents/report` — see that step's inline derivation for the
-     * mapping. Consumed by the outer loop's config-capture step to fire
-     * `POST /api/v1/governance-coverage/snapshot` once per harness whose rules
-     * file content actually changed this cycle.
-     */
-    harnessGovernanceInputs?: Partial<Record<HarnessType, GovernanceCoverageInputs>>;
-}
-/**
- * Start the sync loop. This function runs indefinitely until the
- * AbortSignal is triggered or the process exits.
- *
- * @param options - Sync loop configuration.
- */
-/** The credentials every gate-side refresh takes. */
-export interface GateCacheRefreshOptions {
-    controlPlaneUrl: string;
-    apiKey: string;
-    workspaceId: string;
-    /** See {@link PolicySnapshotOptions.localHoldTokens}. */
-    localHoldTokens?: readonly string[];
-}
-/**
- * The `review_before:` tokens the snapshot compiles into hold rules: from the
- * synced SOPs' front matter and JSON blocks, the workspace settings, and the
- * local `.intutic/sops`. The same parse the Claude Code writer runs for its
- * pattern blacklist, so the two cannot disagree about what is held.
- */
-export declare function localHoldTokensFor(workspaceRoot: string, sops: SyncSopEntry[], settings: Record<string, unknown> | undefined, harnesses?: HarnessType[]): Promise<string[]>;
-/**
- * Refresh the three gate-side caches every hook reads: the policy snapshot
- * (`~/.intutic/hooks/policy-snapshot.rules`), the approved review-hold
- * bypasses and the central egress policy. Called on EVERY sync cycle by both
- * loops — this one and `intutic connect`'s — never only when the config
- * version moved: policy changes without the version changing, and before
- * this helper existed `connect` refreshed once at startup and never again, so
- * a guardrail promoted mid-session reached a connected machine only on
- * restart (TD-488). None of the three throw; the return says which of them
- * landed.
- */
-export declare function refreshGateCaches(opts: GateCacheRefreshOptions): Promise<{
-    snapshot: boolean;
-    bypasses: boolean;
-    egress: boolean;
-}>;
-export declare function startSyncLoop(options: SyncLoopOptions): Promise<void>;
-export interface IterationContext {
-    controlPlaneUrl: string;
-    apiKey: string;
-    workspaceId: string;
-    workspaceRoot: string;
-    onSync?: (result: SyncResult) => void;
-}
-/**
- * Execute a single sync iteration:
- * 1. Fetch config from control plane
- * 2. Write config files if version is newer
- * 3. Compute file hashes
- * 4. Report status back to control plane
- * 5. Update local integrity store
- * 6. Call onSync callback
- *
- * Exported (in addition to being used internally by `startSyncLoop`'s
- * polling loop) as a test seam — it is the unit that exercises exactly one
- * cycle's worth of work, including the injectMcpServer call (step 3c),
- * without the surrounding while-loop's extra one-time/Nth-iteration network
- * calls (policy snapshot, approved bypasses, egress policy, compliance
- * probes, drift watcher, decisions digest, config capture).
- */
-export declare function runSyncIteration(ctx: IterationContext): Promise<SyncResult>;
-export declare function syncOfflineTraces(controlPlaneUrl: string, apiKey: string): Promise<void>;
-//# sourceMappingURL=syncLoop.d.ts.map

package/dist/syncLoop.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"syncLoop.d.ts","sourceRoot":"","sources":["../src/syncLoop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAEjB,iBAAiB,EACjB,YAAY,EACb,MAAM,uBAAuB,CAAA;AAqB9B,OAAO,EAAgD,KAAK,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AAS/G,OAAO,EAA8D,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAqBjH;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,WAAW,CAAA;IACxB,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAA;IACvC;;;2EAGuE;IACvE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAC5B,GAAG,IAAI,CA+BP;AAID,uCAAuC;AACvC,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,eAAe,EAAE,MAAM,CAAA;IACvB,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAA;IACd,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,qDAAqD;IACrD,aAAa,EAAE,MAAM,CAAA;IACrB,sDAAsD;IACtD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,yDAAyD;IACzD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAA;IACrC,+CAA+C;IAC/C,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,yCAAyC;AACzC,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,aAAa,EAAE,MAAM,CAAA;IACrB,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,4BAA4B;IAC5B,IAAI,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAChC,iBAAiB;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,wBAAwB;IACxB,SAAS,CAAC,EAAE,WAAW,EAAE,CAAA;IACzB;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAA;CACjF;AA6BD;;;;;GAKG;AACH,qDAAqD;AACrD,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,yDAAyD;IACzD,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,YAAY,EAAE,EACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC7C,SAAS,GAAE,WAAW,EAAO,GAC5B,OAAO,CAAC,MAAM,EAAE,CAAC,CAGnB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAKpE;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA8R3E;AAID,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAA;CACtC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CA4PjF;AAwKD,wBAAsB,iBAAiB,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqE9F"}