@intutic/sync-daemon 2.9.1 → 3.0.0

package/dist/lib/policySnapshot.d.ts

@@ -54,7 +54,9 @@
  *
  * @module
  */
+import type { DecidePin, SyncSopEntry } from '@intutic/shared-types';
 import { type McpRegistryRecord, type SsoGroupPolicy } from '@intutic/shared-types';
+import { type GateRuleRecord, type ServedGateRecord } from '@intutic/shared-types';
 import { type GuardPattern } from '../harness/protectedPaths.js';
 /** Directory every gate looks in. Inside `.intutic/hooks`, which is already
  *  protected — see the module note. */
@@ -225,6 +227,78 @@ export interface ResolvedPolicy {
      * Absent or null: an older control plane, and no record is written.
      */
     mcpRegistry?: McpRegistryRecord | null;
+    /**
+     * The workspace's decide rules (`decideRules`), or the local SOPs' when no
+     * control plane is connected ({@link localDecideRules}). Each is written as
+     * an `@decide` record, and one stamped `enforce` also as a fallback line
+     * that every older gate enforces. Absent or empty: no decide line is
+     * written, and the snapshot is byte-identical to a format 1 one.
+     */
+    decideRules?: ServedDecideRule[];
+    /**
+     * The `@rule` records of the workspace's SOPs, as resolve
+     * serves them (`gateRecords`, compiled by `compileSopGateRecords`), or the
+     * local SOPs' ({@link PolicySnapshotOptions.localSops}). Each is written as
+     * an `@rule` line, and one stamped `enforce` also as a `<kind>-fallback:`
+     * line that every older gate enforces. Absent or empty: no `@rule` line is
+     * written, and the snapshot is byte-identical to one written before them.
+     */
+    gateRecords?: ServedGateRecord[];
+    /**
+     * The workspace's lane holds (3.0: `sop.lane.<class>.<token>`,
+     * from its SOPs' `closed_lanes:` and its `closedLanes` setting) and revert
+     * holds (§7.3: `revert.<token>`), compiled by resolve (`holdRules`,
+     * `laneHoldPatterns` in `@intutic/shared-types`) in the snapshot's rule
+     * shape: the token's phrases on the `phrase` subject, which every gate
+     * since v12 reads, and for force_push and destroy also the `action`
+     * subject a v23 classifier matches (the compound, the out-of-tree
+     * `rm -rf`). Every rule of one token has the same id, so one approval
+     * releases the call whichever of them held it.
+     */
+    holdRules?: ServedHoldRule[];
+    /** What the revert holds were compiled from (`revertHolds`): shown, not compiled again. */
+    revertHolds?: ServedRevertHold[];
+}
+/** One hold rule as resolve serves it. */
+export interface ServedHoldRule {
+    id: string;
+    source: string;
+    subject: 'phrase' | 'action';
+    ignoreCase?: boolean;
+    severity: 'hold' | 'shadow';
+    reason: string;
+    rationale?: string;
+}
+/** One revert hold's rates as resolve serves them. */
+export interface ServedRevertHold {
+    subject: string;
+    revertRate: number | null;
+    rejectionRate: number | null;
+}
+/**
+ * One `decide:` line, as `GET /api/v1/policy/resolve` serves it or as
+ * {@link localDecideRules} reads it from a local SOP. The writer validates it
+ * itself: a line it cannot read still refuses what it names.
+ */
+export interface ServedDecideRule {
+    /** The control plane's SOP id, or `local:<file>` / `local:<folder>:<file>`. */
+    sopId: string;
+    /** The SOP's title, as the record and the fallback line's reason name it. */
+    sopTitle: string;
+    /** The SOP's body; the record carries its first 4,096 bytes. */
+    ruleText: string;
+    /** The line's JSON value, or a local line's text after `decide:`. */
+    ir: unknown;
+    /**
+     * The policy source's stamp: `shadow` under the server's kill switch, for a
+     * SHADOW guardrail, or for an SOP whose front matter says `mode: shadow`
+     * (the server's resolve and {@link localDecideRules} alike). Absent otherwise.
+     */
+    rollout?: 'shadow' | 'enforce';
+    /** The hash the server computed. When it is not this writer's, the pins were earned by another rule and are dropped. */
+    ruleHash?: string;
+    /** The calibrations the rule may enforce under. */
+    pins: DecidePin[];
 }
 export interface PolicySnapshotOptions {
     controlPlaneUrl: string;
@@ -239,6 +313,13 @@ export interface PolicySnapshotOptions {
      * the Claude Code hook that used to bake them in.
      */
     localHoldTokens?: readonly string[];
+    /**
+     * The workspace's local SOPs (`.intutic/sops`), whose `@rule` records
+     * (`compileSopGateRecords`) and lane holds (`closed_lanes:`) the snapshot
+     * carries beside what resolve served. A SOP with `roles:` compiles nothing:
+     * a gate knows no agent role.
+     */
+    localSops?: readonly SyncSopEntry[];
 }
 /**
  * Decides whether a control-plane rule is safe to put on a blocking path.
@@ -248,12 +329,67 @@ export interface PolicySnapshotOptions {
  * other rule.
  */
 export declare function validateRule(toolPattern: string, ruleId: string): string | null;
+/**
+ * The `gateRecords` of a resolve response, or of a snapshot's JSON, in the
+ * served shape (`ServedGateRecord`, `@intutic/shared-types`). A record is
+ * kept when it has that shape; one that then does not decode is not written
+ * as an `@rule` line, and its fallback line refuses in its place
+ * ({@link compileGateRecords}). A record without a `sopId` takes its ref's.
+ */
+export declare function parseServedGateRecords(value: unknown): ServedGateRecord[];
+/**
+ * The marker `intutic decide disable` leaves in `~/.intutic/decide/`: while
+ * it exists, every decide rule this machine writes into a snapshot is
+ * stamped `local-disable`, so it runs as shadow and gets no fallback line.
+ * A line that does not read still refuses: that refusal is not the engine's.
+ */
+export declare const DECIDE_DISABLED_FILE = "disabled";
+/** Whether `intutic decide disable` is in force on this machine. Read at each write, from the home directory then. */
+export declare function decideLocallyDisabled(): boolean;
+/** Where an `intutic decide eval` pass leaves the pins it earned: `evals/<ruleHash>/<digest>.json`, each a pin. */
+export declare const DEFAULT_DECIDE_DIR: string;
+/**
+ * The `decide:` lines of the workspace's local SOPs, for a snapshot written
+ * with no control plane. Each line's text is kept as written, so the writer
+ * reads it exactly as the proxy does, unreadable lines included. A readable
+ * rule's pins are the ones `decideDir/evals/<ruleHash>/` holds; a file that is
+ * not a pin is ignored. An SOP whose front matter says `mode: shadow` has its
+ * rules stamped shadow, as the control plane's resolve stamps them
+ * (`listServedDecideRules`): the record says `server-shadow`, and no fallback
+ * line is written.
+ */
+export declare function localDecideRules(entries: readonly SyncSopEntry[], opts?: {
+    decideDir?: string;
+}): Promise<ServedDecideRule[]>;
 /** Fetches resolved policy for the workspace. Returns null on any failure —
  *  the caller keeps the previous snapshot rather than replacing it with nothing. */
 export declare function fetchResolvedPolicy(opts: PolicySnapshotOptions): Promise<ResolvedPolicy | null>;
 /** Builds the rule set a snapshot would carry, without writing it. Exported so
  *  a test can assert the contents rather than re-deriving them. */
-export declare function buildSnapshotRules(policy: ResolvedPolicy, localHoldTokens?: readonly string[], localHoldMode?: LocalHoldMode): GuardPattern[];
+export declare function buildSnapshotRules(policy: ResolvedPolicy, localHoldTokens?: readonly string[], localHoldMode?: LocalHoldMode, localSops?: readonly SyncSopEntry[]): GuardPattern[];
+/** What the snapshot carries for its rule records: the records, and the fallback lines of the enforcing ones. */
+export interface CompiledGateRecords {
+    records: GateRuleRecord[];
+    fallbacks: GuardPattern[];
+}
+/**
+ * The policy's `@rule` records, served ones first and then the local SOPs'
+ * (`compileSopGateRecords`, `@intutic/shared-types`), and the fallback line
+ * of each enforcing one (`gateRuleFallback`). Under SILENT_LOG every record
+ * is stamped shadow and has no fallback line, as decide rules are.
+ */
+export declare function compileGateRecords(policy: ResolvedPolicy, localSops?: readonly SyncSopEntry[]): CompiledGateRecords;
+/**
+ * The hold rules of a local SOP's closed lanes, in the shape
+ * resolve serves the workspace's (`laneHoldPatterns`, `@intutic/shared-types`):
+ * per token, a `sop.lane.<class>.<token>` rule on the `phrase` subject,
+ * which a gate whose classifier predates the token still holds, and for
+ * force_push and destroy also one on the `action` subject, under the same
+ * id, so one approval releases the call whichever rule held it. Only SOPs
+ * with no `roles:` (a gate knows no role). With no control plane (`block`) a
+ * lane hold refuses.
+ */
+export declare function localLaneHoldRules(localSops: readonly SyncSopEntry[], mode: LocalHoldMode): ServedHoldRule[];
 /**
  * What a local `review_before:` token compiles to. `hold`: refused, recorded
  * for review, and let through once when approved — which needs a control
@@ -272,7 +408,7 @@ export declare function offlineHoldReason(token: string): string;
  * path. Both carry the same digest, so a test — and the gate — can tell that the
  * projection really came from the JSON.
  */
-export declare function writePolicySnapshot(policy: ResolvedPolicy, snapshotDir?: string, localHoldTokens?: readonly string[], localHolds?: LocalHoldMode): Promise<{
+export declare function writePolicySnapshot(policy: ResolvedPolicy, snapshotDir?: string, localHoldTokens?: readonly string[], localHolds?: LocalHoldMode, localSops?: readonly SyncSopEntry[]): Promise<{
     digest: string;
     ruleCount: number;
 }>;
@@ -290,13 +426,17 @@ export declare function writePolicySnapshot(policy: ResolvedPolicy, snapshotDir?
  */
 export declare function localResolvedPolicy(): ResolvedPolicy;
 /**
- * Writes the snapshot of {@link localResolvedPolicy}, marked `source: local`.
+ * Writes the snapshot of {@link localResolvedPolicy}, marked `source: local`,
+ * with the local SOPs' decide rules ({@link localDecideRules}) when given.
  * The local holds refuse (`block`) rather than hold: with no control plane
  * nothing could approve them. Never fetches.
  */
 export declare function writeLocalPolicySnapshot(opts?: {
     localHoldTokens?: readonly string[];
     snapshotDir?: string;
+    decideRules?: ServedDecideRule[];
+    /** See {@link PolicySnapshotOptions.localSops}. */
+    localSops?: readonly SyncSopEntry[];
 }): Promise<{
     digest: string;
     ruleCount: number;

package/dist/lib/policySnapshot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policySnapshot.d.ts","sourceRoot":"","sources":["../../src/lib/policySnapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAQH,OAAO,EAUL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAA;AAG9B,OAAO,EAKL,KAAK,YAAY,EAClB,MAAM,8BAA8B,CAAA;AAIrC;uCACuC;AACvC,eAAO,MAAM,oBAAoB,QAA+C,CAAA;AAChF,eAAO,MAAM,aAAa,yBAAyB,CAAA;AACnD,eAAO,MAAM,cAAc,0BAA0B,CAAA;AAErD;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAE/C;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMzD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,yBAAyB,EAAE,OAAO,GAAG,MAAe,CAAA;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,GAAG,MAAgB,CAAA;AAEpE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,GAAG,MAAgB,CAAA;AAEpE;;;;mEAImE;AACnE,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,MAAM,CAAA;QACV,WAAW,EAAE,MAAM,CAAA;QACnB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,MAAM,EAAE,MAAM,CAAA;QACd,MAAM,EAAE,MAAM,CAAA;QACd;;;;;WAKG;QACH,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAC,CAAA;IACF,gBAAgB,EAAE,MAAM,CAAA;IACxB;;;;;;;;;;OAUG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B;;;;;;OAMG;IACH,kBAAkB,EAAE,OAAO,CAAA;IAC3B;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IACtC;;;;OAIG;IACH,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAA;IAC5D;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAA;CACvC;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAgDD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmD/E;AAuGD;oFACoF;AACpF,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAGhC;AA8GD;mEACmE;AACnE,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,cAAc,EACtB,eAAe,GAAE,SAAS,MAAM,EAAO,EACvC,aAAa,GAAE,aAAsB,GACpC,YAAY,EAAE,CAoEhB;AAwED;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAA;AAE5C,4DAA4D;AAC5D,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKvD;AAkCD;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,cAAc,EACtB,WAAW,GAAE,MAA6B,EAC1C,eAAe,GAAE,SAAS,MAAM,EAAO,EACvC,UAAU,GAAE,aAAsB,GACjC,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAEhD;AAiLD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,IAAI,cAAc,CAQpD;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,GAAE;IAAE,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GACvE,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAKhD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,GAAE,MAA6B,GACzC,OAAO,CAAC,QAAQ,GAAG,UAAU,GAAG,cAAc,CAAC,CAEjD;AA0BD;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAcvD"}
+{"version":3,"file":"policySnapshot.d.ts","sourceRoot":"","sources":["../../src/lib/policySnapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAQH,OAAO,KAAK,EAAE,SAAS,EAAoD,YAAY,EAAc,MAAM,uBAAuB,CAAA;AAClI,OAAO,EA0BL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAYL,KAAK,cAAc,EAEnB,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAA;AAG9B,OAAO,EAKL,KAAK,YAAY,EAClB,MAAM,8BAA8B,CAAA;AAIrC;uCACuC;AACvC,eAAO,MAAM,oBAAoB,QAA+C,CAAA;AAChF,eAAO,MAAM,aAAa,yBAAyB,CAAA;AACnD,eAAO,MAAM,cAAc,0BAA0B,CAAA;AAErD;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAE/C;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMzD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,yBAAyB,EAAE,OAAO,GAAG,MAAe,CAAA;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,GAAG,MAAgB,CAAA;AAEpE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,GAAG,MAAgB,CAAA;AAEpE;;;;mEAImE;AACnE,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,KAAK,CAAC;QACd,EAAE,EAAE,MAAM,CAAA;QACV,WAAW,EAAE,MAAM,CAAA;QACnB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,MAAM,EAAE,MAAM,CAAA;QACd,MAAM,EAAE,MAAM,CAAA;QACd;;;;;WAKG;QACH,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAC,CAAA;IACF,gBAAgB,EAAE,MAAM,CAAA;IACxB;;;;;;;;;;OAUG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B;;;;;;OAMG;IACH,kBAAkB,EAAE,OAAO,CAAA;IAC3B;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IACtC;;;;OAIG;IACH,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAA;IAC5D;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACtC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAChC;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAChC;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,cAAc,EAAE,CAAA;IAC5B,2FAA2F;IAC3F,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAA;CACjC;AAED,0CAA0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAA;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAA;IACb,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAA;IAChB,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAA;IAChB,qEAAqE;IACrE,EAAE,EAAE,OAAO,CAAA;IACX;;;;OAIG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC9B,wHAAwH;IACxH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mDAAmD;IACnD,IAAI,EAAE,SAAS,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;CACpC;AAgDD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmD/E;AA6HD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,EAAE,CAmBzE;AAuKD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,aAAa,CAAA;AAE9C,sHAAsH;AACtH,wBAAgB,qBAAqB,IAAI,OAAO,CAE/C;AAED,mHAAmH;AACnH,eAAO,MAAM,kBAAkB,QAAgD,CAAA;AAE/E;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAqB7B;AAgBD;oFACoF;AACpF,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAGhC;AAkHD;mEACmE;AACnE,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,cAAc,EACtB,eAAe,GAAE,SAAS,MAAM,EAAO,EACvC,aAAa,GAAE,aAAsB,EACrC,SAAS,GAAE,SAAS,YAAY,EAAO,GACtC,YAAY,EAAE,CAMhB;AAED,iHAAiH;AACjH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,cAAc,EAAE,CAAA;IACzB,SAAS,EAAE,YAAY,EAAE,CAAA;CAC1B;AAyDD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,GAAE,SAAS,YAAY,EAAO,GAAG,mBAAmB,CA4BvH;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,SAAS,YAAY,EAAE,EAAE,IAAI,EAAE,aAAa,GAAG,cAAc,EAAE,CAiB5G;AA+LD;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAA;AAE5C,4DAA4D;AAC5D,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKvD;AAkCD;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,cAAc,EACtB,WAAW,GAAE,MAA6B,EAC1C,eAAe,GAAE,SAAS,MAAM,EAAO,EACvC,UAAU,GAAE,aAAsB,EAClC,SAAS,GAAE,SAAS,YAAY,EAAO,GACtC,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAEhD;AA+MD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,IAAI,cAAc,CAQpD;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,GAAE;IACJ,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAChC,mDAAmD;IACnD,SAAS,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;CAC/B,GACL,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAMhD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,GAAE,MAA6B,GACzC,OAAO,CAAC,QAAQ,GAAG,UAAU,GAAG,cAAc,CAAC,CAEjD;AA0BD;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAcvD"}