@keithadler/frostjs 0.1.0

package/dist/cli/run.js

@@ -0,0 +1,404 @@
+/**
+ * The command-line orchestrator: one function per command, sharing policy
+ * loading, discovery and registry access. Nothing here calls process.exit;
+ * every command returns its exit code so tests drive it directly.
+ *
+ * Exit codes: 0 clean; 1 a use was denied, or (registry sync, sri) something
+ * needs a person; 2 usage or input error (bad flag, missing path, syntax
+ * error, unreadable policy).
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { HELP, parseArgs, UsageError } from "./args.js";
+import { VERSION } from "../version.js";
+import { discover, isHtml } from "../discover/index.js";
+import { parseFile } from "../extract/ast.js";
+import { extract } from "../extract/index.js";
+import { parseHtml } from "../extract/html.js";
+import { commonAncestor, compilePolicyFile, csp, decide, findPolicyFile, isoToday, matchesGlob, DENY_ALL, PolicyError, } from "../policy/index.js";
+import { text, describeUse } from "../report/text.js";
+import { json } from "../report/json.js";
+import { sarif } from "../report/sarif.js";
+import { github } from "../report/github.js";
+import { summary } from "../report/summary.js";
+import { baselineKey, baselineKeys, readBaseline, writeBaseline } from "../baseline.js";
+import { changedLines, isChanged } from "../changed.js";
+import { guessPackage, integrityOfFile, lookup, readRegistry, registryPath, upsert, writeRegistry, } from "../registry.js";
+import { includesFor, sync, usesOf } from "../sync.js";
+import { policyNameFor, starterPolicy } from "../init.js";
+/** Run the CLI against argv (without node and script name) and return the exit code. */
+export function run(argv, io) {
+    let args;
+    try {
+        args = parseArgs(argv);
+    }
+    catch (e) {
+        if (!(e instanceof UsageError))
+            throw e;
+        io.stderr(`frostjs: ${e.message}\n`);
+        io.stderr(HELP);
+        return 2;
+    }
+    if (args.version) {
+        io.stdout(`frostjs ${VERSION}\n`);
+        return 0;
+    }
+    if (args.help) {
+        io.stdout(HELP);
+        return 0;
+    }
+    switch (args.command) {
+        case "init":
+            return runInit(args, io);
+        case "csp":
+        case "summary":
+            return runPolicyCommand(args, io);
+        case "vendor-add":
+            return runVendorAdd(args, io);
+        case "registry-sync":
+            return runRegistrySync(args, io);
+        case "sri":
+            return runSri(args, io);
+        default:
+            return runCheck(args, io);
+    }
+}
+// Shared pieces. Each returns a value or an exit code, having already
+// printed the reason; callers test `typeof x === "number"`.
+const cwdOf = (io) => io.cwd ?? process.cwd();
+/** A path as it should appear in reports: relative to cwd, forward slashes. */
+const shown = (cwd, file) => path.relative(cwd, file).split(path.sep).join("/") || ".";
+/** A path relative to the policy directory, forward slashes, for globs and the registry. */
+const relToPolicy = (policyDir, file) => path.relative(policyDir, file).split(path.sep).join("/");
+function fail(io, message) {
+    io.stderr(`frostjs: ${message}\n`);
+    return 2;
+}
+/** Find and compile the policy for the inputs; DENY_ALL with a note when there is none and it is not required. */
+function loadPolicy(args, io, inputs, required) {
+    const cwd = cwdOf(io);
+    const command = `frostjs ${args.command.replace("-", " ")}`;
+    const policyFile = args.policy
+        ? path.resolve(cwd, args.policy)
+        : findPolicyFile(inputs.length ? commonAncestor(inputs) : cwd);
+    if (policyFile === null) {
+        if (required)
+            return fail(io, `no frostjs.policy found; ${command} needs one`);
+        io.stderr("frostjs: no frostjs.policy found; denying everything\n");
+        return { policy: DENY_ALL, policyDir: cwd };
+    }
+    try {
+        const policy = compilePolicyFile(policyFile, args.today ?? isoToday(), shown(cwd, policyFile));
+        return { policy, policyDir: path.dirname(policyFile) };
+    }
+    catch (e) {
+        if (e instanceof PolicyError || e instanceof Error)
+            return fail(io, e.message);
+        throw e;
+    }
+}
+/** Resolve the given paths against cwd and discover source files under them. */
+function discoverOrFail(args, io, vendored) {
+    const cwd = cwdOf(io);
+    const missing = args.paths.find((p) => !fs.existsSync(path.resolve(cwd, p)));
+    if (missing !== undefined)
+        return fail(io, `path not found: ${missing}`);
+    return discover(args.paths.map((p) => path.resolve(cwd, p)), { exclude: args.exclude, include: includesFor(vendored) });
+}
+function readRegistryOrFail(policyDir, io) {
+    try {
+        return readRegistry(registryPath(policyDir));
+    }
+    catch (e) {
+        return fail(io, e.message);
+    }
+}
+// frostjs <paths...>
+function runCheck(args, io) {
+    const cwd = cwdOf(io);
+    if (args.updateBaseline && args.baseline === null)
+        return fail(io, "--update-baseline needs --baseline <file>");
+    if (args.format === "html")
+        return fail(io, "--format html is only for frostjs sri");
+    if (args.paths.length === 0) {
+        io.stderr("frostjs: no paths given\n");
+        io.stderr(HELP);
+        return 2;
+    }
+    const inputs = args.paths.map((p) => path.resolve(cwd, p));
+    const loaded = loadPolicy(args, io, inputs, false);
+    if (typeof loaded === "number")
+        return loaded;
+    const { policy, policyDir } = loaded;
+    const discovered = discoverOrFail(args, io, policy.vendored);
+    if (typeof discovered === "number")
+        return discovered;
+    const files = discovered.filter((f) => !policy.ignore.some((g) => matchesGlob(g, relToPolicy(policyDir, f))));
+    let registry = null;
+    if (policy.vendored.length > 0) {
+        const r = readRegistryOrFail(policyDir, io);
+        if (typeof r === "number")
+            return r;
+        registry = r;
+    }
+    const extracted = extractAll(files, cwd, io, (file, name) => registry !== null && policy.vendored.some((g) => matchesGlob(g, relToPolicy(policyDir, file)))
+        ? vendoredUses(file, name, registry)
+        : null);
+    if (typeof extracted === "number")
+        return extracted;
+    const uses = extracted;
+    // Report paths are relative to cwd; policy globs are relative to the policy file.
+    let decisions = decide(uses, policy, {
+        scopePath: (u) => relToPolicy(policyDir, path.resolve(cwd, u.file)),
+        ...(args.minConfidence ? { minConfidence: args.minConfidence } : {}),
+    });
+    // Baseline: denials already on record are reported as baselined, not denied.
+    let baselineNote = "";
+    if (args.baseline !== null) {
+        const baselineFile = path.resolve(cwd, args.baseline);
+        const baselineDir = path.dirname(baselineFile);
+        const relToBaseline = (u) => relToPolicy(baselineDir, path.resolve(cwd, u.file));
+        let existing;
+        try {
+            existing = readBaseline(baselineFile);
+        }
+        catch (e) {
+            return fail(io, e.message);
+        }
+        if (args.updateBaseline) {
+            const entries = [
+                ...existing.entries,
+                ...decisions
+                    .filter((d) => d.verdict === "denied")
+                    .map((d) => ({ file: relToBaseline(d.use), capability: d.use.capability, expression: d.use.expression })),
+            ];
+            const n = writeBaseline(baselineFile, entries);
+            baselineNote = `wrote ${n} ${n === 1 ? "entry" : "entries"} to ${shown(cwd, baselineFile)}\n`;
+        }
+        else {
+            const known = baselineKeys(existing);
+            decisions = decisions.map((d) => d.verdict === "denied" && known.has(baselineKey(relToBaseline(d.use), d.use.capability, d.use.expression))
+                ? { ...d, verdict: "baselined" }
+                : d);
+        }
+    }
+    // Changed lines only: denials outside the diff are reported as unchanged.
+    if (args.changedSince !== null) {
+        let changed;
+        try {
+            changed = changedLines(args.changedSince, commonAncestor(inputs));
+        }
+        catch (e) {
+            return fail(io, e.message);
+        }
+        decisions = decisions.map((d) => d.verdict === "denied" && !isChanged(changed, path.resolve(cwd, d.use.file), d.use.line)
+            ? { ...d, verdict: "unchanged" }
+            : d);
+    }
+    switch (args.format) {
+        case "json":
+            io.stdout(json(decisions, files.length, policy));
+            break;
+        case "sarif":
+            io.stdout(sarif(decisions));
+            break;
+        case "github":
+            io.stdout(github(decisions, { files: files.length }, { warnings: policy.warnings }));
+            break;
+        default:
+            io.stdout(text(decisions, { files: files.length }, { warnings: policy.warnings }));
+    }
+    if (baselineNote)
+        io.stderr(baselineNote);
+    const denied = decisions.some((d) => d.verdict === "denied");
+    return denied && !args.exitZero && !args.updateBaseline ? 1 : 0;
+}
+/**
+ * Extract every use from the files, reporting paths relative to cwd.
+ * `special` may claim a file (vendored files do) and return its uses.
+ * Syntax errors are printed and end the run with exit 2.
+ */
+function extractAll(files, cwd, io, special = () => null) {
+    const syntaxErrors = [];
+    const uses = [];
+    for (const file of files) {
+        const name = shown(cwd, file);
+        const claimed = special(file, name);
+        if (claimed !== null) {
+            uses.push(...claimed);
+        }
+        else if (isHtml(file)) {
+            for (const block of parseHtml(file, fs.readFileSync(file, "utf8"))) {
+                if (block.errors.length > 0)
+                    syntaxErrors.push(...block.errors.map((e) => ({ ...e, file: name })));
+                else
+                    uses.push(...extract(block, { origin: "inline-html" }).map((u) => ({ ...u, file: name })));
+            }
+        }
+        else {
+            const parsed = parseFile(file);
+            if (parsed.errors.length > 0)
+                syntaxErrors.push(...parsed.errors.map((e) => ({ ...e, file: name })));
+            else
+                uses.push(...extract(parsed).map((u) => ({ ...u, file: name })));
+        }
+    }
+    for (const e of syntaxErrors)
+        io.stderr(`${e.file}:${e.line}:${e.column}: syntax error: ${e.message}\n`);
+    return syntaxErrors.length > 0 ? 2 : uses;
+}
+// frostjs init [paths...]
+function runInit(args, io) {
+    const cwd = cwdOf(io);
+    const target = path.join(cwd, "frostjs.policy");
+    if (fs.existsSync(target))
+        return fail(io, "frostjs.policy already exists here; edit it, or delete it and run init again");
+    if (args.paths.length === 0)
+        args = { ...args, paths: ["."] };
+    const files = discoverOrFail(args, io, []);
+    if (typeof files === "number")
+        return files;
+    const uses = extractAll(files, cwd, io);
+    if (typeof uses === "number")
+        return uses;
+    const policy = starterPolicy(policyNameFor(cwd), uses, args.today ?? isoToday());
+    fs.writeFileSync(target, policy);
+    const grants = policy.split("\n").filter((l) => l.startsWith("may ")).length;
+    io.stdout(policy);
+    io.stderr(`wrote frostjs.policy with ${grants} ${grants === 1 ? "grant" : "grants"} from ${files.length} ${files.length === 1 ? "file" : "files"}; read it, delete what should not be allowed, then run: frostjs ${args.paths.join(" ")}\n`);
+    return 0;
+}
+/** A vendored file contributes its registry entry's capability set, or one unregistered use. */
+function vendoredUses(file, name, registry) {
+    const integrity = integrityOfFile(file);
+    const base = {
+        file: name,
+        line: 1,
+        column: 1,
+        confidence: "certain",
+        origin: "vendored",
+        suppressed: false,
+    };
+    const entry = lookup(registry, integrity);
+    if (entry === null)
+        return [{ ...base, capability: "vendor.unregistered", target: null, expression: integrity }];
+    const expression = `${entry.package}@${entry.version} (vendored)`;
+    return entry.uses.map((u) => ({ ...base, capability: u.capability, target: u.target, expression }));
+}
+// frostjs vendor add <files...>
+function runVendorAdd(args, io) {
+    const cwd = cwdOf(io);
+    if (args.paths.length === 0)
+        return fail(io, "frostjs vendor add needs one or more files");
+    const inputs = args.paths.map((p) => path.resolve(cwd, p));
+    const loaded = loadPolicy(args, io, inputs, true);
+    if (typeof loaded === "number")
+        return loaded;
+    const { policy, policyDir } = loaded;
+    const regFile = registryPath(policyDir);
+    let registry = readRegistryOrFail(policyDir, io);
+    if (typeof registry === "number")
+        return registry;
+    const files = discoverOrFail(args, io, policy.vendored);
+    if (typeof files === "number")
+        return files;
+    const today = args.today ?? isoToday();
+    for (const file of files) {
+        const name = shown(cwd, file);
+        const rel = relToPolicy(policyDir, file);
+        if (!policy.vendored.some((g) => matchesGlob(g, rel))) {
+            io.stderr(`frostjs: note: ${name} is not covered by a 'vendored' line in the policy; add one or it will be analyzed line by line\n`);
+        }
+        const parsed = parseFile(file);
+        if (parsed.errors.length > 0) {
+            const e = parsed.errors[0];
+            return fail(io, `${name}:${e.line}:${e.column}: syntax error: ${e.message}`);
+        }
+        const uses = usesOf(parsed);
+        const pkg = guessPackage(file, policyDir);
+        registry = upsert(registry, { integrity: integrityOfFile(file), ...pkg, file: rel, uses, added: today });
+        io.stdout(`${name} (${pkg.package}@${pkg.version}): ${uses.length} capability ${uses.length === 1 ? "use" : "uses"}\n`);
+        for (const u of uses)
+            io.stdout(`  ${describeUse(u.capability, u.target)}\n`);
+    }
+    writeRegistry(regFile, registry);
+    io.stdout(`added to ${shown(cwd, regFile)}; review the capabilities above and grant them in the policy if they are acceptable\n`);
+    return 0;
+}
+// frostjs registry sync
+function runRegistrySync(args, io) {
+    const cwd = cwdOf(io);
+    const loaded = loadPolicy(args, io, [], true);
+    if (typeof loaded === "number")
+        return loaded;
+    const { policy, policyDir } = loaded;
+    if (policy.vendored.length === 0)
+        return fail(io, "the policy has no 'vendored' line, so there is nothing to sync");
+    const registry = readRegistryOrFail(policyDir, io);
+    if (typeof registry === "number")
+        return registry;
+    const result = sync(registry, policyDir, policy.vendored, args.today ?? isoToday());
+    const regFile = registryPath(policyDir);
+    writeRegistry(regFile, result.registry);
+    for (const w of result.warnings)
+        io.stderr(`frostjs: warning: ${w}\n`);
+    for (const line of result.lines)
+        io.stdout(line + "\n");
+    const n = result.registry.entries.length;
+    io.stdout(`${shown(cwd, regFile)}: ${n} ${n === 1 ? "entry" : "entries"}\n`);
+    return result.needsReview ? 1 : 0;
+}
+// frostjs sri [paths...]
+function runSri(args, io) {
+    const cwd = cwdOf(io);
+    if (args.paths.length === 0)
+        args = { ...args, paths: ["."] };
+    const inputs = args.paths.map((p) => path.resolve(cwd, p));
+    const loaded = loadPolicy(args, io, inputs, true);
+    if (typeof loaded === "number")
+        return loaded;
+    const { policy, policyDir } = loaded;
+    const registry = readRegistryOrFail(policyDir, io);
+    if (typeof registry === "number")
+        return registry;
+    const files = discoverOrFail(args, io, policy.vendored);
+    if (typeof files === "number")
+        return files;
+    const out = [];
+    let missing = 0;
+    for (const file of files) {
+        if (!policy.vendored.some((g) => matchesGlob(g, relToPolicy(policyDir, file))))
+            continue;
+        const integrity = integrityOfFile(file);
+        const name = shown(cwd, file);
+        if (lookup(registry, integrity) === null) {
+            io.stderr(`${name}: not in the registry; review it with: frostjs vendor add ${name}\n`);
+            missing++;
+        }
+        else
+            out.push({ file: name, integrity });
+    }
+    switch (args.format) {
+        case "json":
+            io.stdout(JSON.stringify(Object.fromEntries(out.map((o) => [o.file, o.integrity])), null, 2) + "\n");
+            break;
+        case "html":
+            for (const o of out)
+                io.stdout(`<script src="${o.file}" integrity="${o.integrity}" crossorigin="anonymous"></script>\n`);
+            break;
+        default:
+            for (const o of out)
+                io.stdout(`${o.file} ${o.integrity}\n`);
+    }
+    return missing > 0 ? 1 : 0;
+}
+// frostjs csp, frostjs summary
+function runPolicyCommand(args, io) {
+    const cwd = cwdOf(io);
+    const loaded = loadPolicy(args, io, args.paths.map((p) => path.resolve(cwd, p)), true);
+    if (typeof loaded === "number")
+        return loaded;
+    io.stdout(args.command === "csp" ? csp(loaded.policy) + "\n" : summary(loaded.policy));
+    return 0;
+}
+//# sourceMappingURL=run.js.map

package/dist/cli/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAmB,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAmB,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,GAAG,EACH,MAAM,EACN,cAAc,EACd,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,WAAW,GAEZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,eAAe,EACf,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,aAAa,GAEd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAS1D,wFAAwF;AACxF,MAAM,UAAU,GAAG,CAAC,IAAuB,EAAE,EAAM;IACjD,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC;YAAE,MAAM,CAAC,CAAC;QACxC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;QACrC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,EAAE,CAAC,MAAM,CAAC,WAAW,OAAO,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,KAAK,KAAK,CAAC;QACX,KAAK,SAAS;YACZ,OAAO,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChC,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnC,KAAK,KAAK;YACR,OAAO,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B;YACE,OAAO,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,4DAA4D;AAE5D,MAAM,KAAK,GAAG,CAAC,EAAM,EAAU,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AAE1D,+EAA+E;AAC/E,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;AAE/G,4FAA4F;AAC5F,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAU,EAAE,CAC9D,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE3D,SAAS,IAAI,CAAC,EAAM,EAAE,OAAe;IACnC,EAAE,CAAC,MAAM,CAAC,YAAY,OAAO,IAAI,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC;AACX,CAAC;AAOD,kHAAkH;AAClH,SAAS,UAAU,CAAC,IAAgB,EAAE,EAAM,EAAE,MAAyB,EAAE,QAAiB;IACxF,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM;QAC5B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;QAChC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,EAAE,EAAE,4BAA4B,OAAO,YAAY,CAAC,CAAC;QAC/E,EAAE,CAAC,MAAM,CAAC,wDAAwD,CAAC,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QAC/F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,WAAW,IAAI,CAAC,YAAY,KAAK;YAAE,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,SAAS,cAAc,CAAC,IAAgB,EAAE,EAAM,EAAE,QAA2B;IAC3E,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,mBAAmB,OAAO,EAAE,CAAC,CAAC;IACzE,OAAO,QAAQ,CACb,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAC3C,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAC1D,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB,EAAE,EAAM;IACnD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,EAAE,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,qBAAqB;AAErB,SAAS,QAAQ,CAAC,IAAgB,EAAE,EAAM;IACxC,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,2CAA2C,CAAC,CAAC;IAChH,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,uCAAuC,CAAC,CAAC;IACrF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACvC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAE3D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAErC,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IACtD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9G,IAAI,QAAQ,GAAoB,IAAI,CAAC;IACrC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAC1D,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;QACpC,CAAC,CAAC,IAAI,CACT,CAAC;IACF,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC;IAEvB,kFAAkF;IAClF,IAAI,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE;QACnC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC;IAEH,6EAA6E;IAC7E,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,CAAC,CAAgB,EAAU,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxG,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,EAAE,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG;gBACd,GAAG,QAAQ,CAAC,OAAO;gBACnB,GAAG,SAAS;qBACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC;qBACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;aAC5G,CAAC;YACF,MAAM,CAAC,GAAG,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC/C,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC;QAChG,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACrC,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACxG,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE;gBAChC,CAAC,CAAC,CAAC,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,EAAE,EAAG,CAAW,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACtF,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE;YAChC,CAAC,CAAC,CAAC,CACN,CAAC;IACJ,CAAC;IAED,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,MAAM;YACT,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YACjD,MAAM;QACR,KAAK,OAAO;YACV,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC5B,MAAM;QACR,KAAK,QAAQ;YACX,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACrF,MAAM;QACR;YACE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,YAAY;QAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE1C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;IAC7D,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CACjB,KAAwB,EACxB,GAAW,EACX,EAAM,EACN,UAAkE,GAAG,EAAE,CAAC,IAAI;IAE5E,MAAM,YAAY,GAAiB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBACnE,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;oBAAE,YAAY,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;;oBAC9F,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;;gBAChG,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,YAAY;QAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;IACzG,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,0BAA0B;AAE1B,SAAS,OAAO,CAAC,IAAgB,EAAE,EAAM;IACvC,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAChD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QACvB,OAAO,IAAI,CAAC,EAAE,EAAE,8EAA8E,CAAC,CAAC;IAClG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC;IACjF,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7E,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClB,EAAE,CAAC,MAAM,CACP,6BAA6B,MAAM,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,SAAS,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,mEAAmE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAClO,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,gGAAgG;AAChG,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,QAAkB;IAClE,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,KAAK;KACT,CAAC;IACX,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IACjH,MAAM,UAAU,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,aAAa,CAAC;IAClE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,gCAAgC;AAEhC,SAAS,YAAY,CAAC,IAAgB,EAAE,EAAM;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAClD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACtD,EAAE,CAAC,MAAM,CACP,kBAAkB,IAAI,mGAAmG,CAC1H,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1C,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACzG,EAAE,CAAC,MAAM,CACP,GAAG,IAAI,KAAK,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,MAAM,IAAI,CAAC,MAAM,eAAe,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAC7G,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,EAAE,CAAC,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjC,EAAE,CAAC,MAAM,CACP,YAAY,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,uFAAuF,CACvH,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wBAAwB;AAExB,SAAS,eAAe,CAAC,IAAgB,EAAE,EAAM;IAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,gEAAgE,CAAC,CAAC;IACpH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAElD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACxC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;QAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;QAAE,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;IACzC,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,yBAAyB;AAEzB,SAAS,MAAM,CAAC,IAAgB,EAAE,EAAM;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAClD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5C,MAAM,GAAG,GAA0C,EAAE,CAAC;IACtD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YAAE,SAAS;QACzF,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YACzC,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,6DAA6D,IAAI,IAAI,CAAC,CAAC;YACxF,OAAO,EAAE,CAAC;QACZ,CAAC;;YAAM,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,MAAM;YACT,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACrG,MAAM;QACR,KAAK,MAAM;YACT,KAAK,MAAM,CAAC,IAAI,GAAG;gBACjB,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,SAAS,uCAAuC,CAAC,CAAC;YACtG,MAAM;QACR;YACE,KAAK,MAAM,CAAC,IAAI,GAAG;gBAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,+BAA+B;AAE/B,SAAS,gBAAgB,CAAC,IAAgB,EAAE,EAAM;IAChD,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,UAAU,CACvB,IAAI,EACJ,EAAE,EACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAC3C,IAAI,CACL,CAAC;IACF,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACvF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/discover/index.d.ts

@@ -0,0 +1,15 @@
+/** True for .html and .htm, whose inline script blocks are analyzed. */
+export declare function isHtml(name: string): boolean;
+export interface DiscoverOptions {
+    /** Extra directory names to skip, added to DEFAULT_EXCLUDES. */
+    exclude?: readonly string[];
+    /** Directory names to walk even though DEFAULT_EXCLUDES would skip them (vendored globs into node_modules). */
+    include?: readonly string[];
+}
+/**
+ * Walk the given paths and return absolute file paths to analyze, sorted and
+ * deduplicated. A path that names a file directly is always included, even
+ * if it sits under an excluded directory - the user asked for it by name.
+ */
+export declare function discover(inputs: readonly string[], opts?: DiscoverOptions): string[];
+//# sourceMappingURL=index.d.ts.map

package/dist/discover/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/discover/index.ts"],"names":[],"mappings":"AAiBA,wEAAwE;AACxE,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG5C;AAaD,MAAM,WAAW,eAAe;IAC9B,gEAAgE;IAChE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,+GAA+G;IAC/G,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,GAAE,eAAoB,GAAG,MAAM,EAAE,CAqBxF"}

package/dist/discover/index.js

@@ -0,0 +1,70 @@
+import fs from "node:fs";
+import path from "node:path";
+/** Extensions discovered by default. */
+const EXTENSIONS = new Set([
+    ".js",
+    ".mjs",
+    ".cjs",
+    ".jsx",
+    ".ts",
+    ".tsx",
+    ".mts",
+    ".cts",
+    ".html",
+    ".htm",
+]);
+/** True for .html and .htm, whose inline script blocks are analyzed. */
+export function isHtml(name) {
+    const ext = path.extname(name).toLowerCase();
+    return ext === ".html" || ext === ".htm";
+}
+/** Declaration files contain no code and describe globals the code may use. */
+const DECLARATION = /\.d\.(ts|mts|cts)$/;
+/** True for a file discovery analyzes: a source extension (any case) that is not a declaration file. */
+function isSourceFile(name) {
+    return EXTENSIONS.has(path.extname(name).toLowerCase()) && !DECLARATION.test(name.toLowerCase());
+}
+/** Directory names skipped wherever they appear in the tree. */
+const DEFAULT_EXCLUDES = ["node_modules", "dist", "build", "coverage", ".git"];
+/**
+ * Walk the given paths and return absolute file paths to analyze, sorted and
+ * deduplicated. A path that names a file directly is always included, even
+ * if it sits under an excluded directory - the user asked for it by name.
+ */
+export function discover(inputs, opts = {}) {
+    const excluded = new Set([...DEFAULT_EXCLUDES, ...(opts.exclude ?? [])]);
+    for (const name of opts.include ?? [])
+        excluded.delete(name);
+    const found = new Set();
+    for (const input of inputs) {
+        const abs = path.resolve(input);
+        let stat;
+        try {
+            stat = fs.statSync(abs);
+        }
+        catch {
+            throw new Error(`path not found: ${input}`);
+        }
+        if (stat.isFile()) {
+            found.add(abs);
+        }
+        else if (stat.isDirectory()) {
+            walk(abs, excluded, found);
+        }
+    }
+    return [...found].sort();
+}
+function walk(dir, excluded, out) {
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (!excluded.has(entry.name))
+                walk(full, excluded, out);
+        }
+        else if (entry.isFile() && isSourceFile(entry.name)) {
+            out.add(full);
+        }
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/discover/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/discover/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,wCAAwC;AACxC,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC;IAC9C,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,CAAC;AAC3C,CAAC;AAED,+EAA+E;AAC/E,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAEzC,wGAAwG;AACxG,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,gEAAgE;AAChE,MAAM,gBAAgB,GAAsB,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AASlG;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAyB,EAAE,OAAwB,EAAE;IAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAClB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,IAAI,CAAC,GAAW,EAAE,QAA6B,EAAE,GAAgB;IACxE,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/eslint.d.ts

@@ -0,0 +1,103 @@
+import { type Confidence } from "./policy/index.js";
+/** Options for the `frostjs/capability` rule, all optional. */
+export interface RuleOptions {
+    /** Explicit policy file; otherwise the nearest frostjs.policy above the linted file. */
+    policy?: string;
+    /** Lowest confidence that is reported as an error; default probable. */
+    minConfidence?: Confidence;
+    /** Also report uses below the floor, as they appear under "unknown" in the CLI. */
+    reportUnknown?: boolean;
+    /** ISO date for expiry checks; defaults to today. */
+    today?: string;
+}
+/** The slice of ESLint's RuleContext this rule needs, typed here so eslint is not a dependency. */
+interface Context {
+    filename?: string;
+    getFilename?: () => string;
+    sourceCode?: {
+        text: string;
+    };
+    getSourceCode?: () => {
+        text: string;
+    };
+    options: unknown[];
+    report: (descriptor: {
+        message: string;
+        loc: {
+            line: number;
+            column: number;
+        };
+    }) => void;
+}
+/** The `frostjs/capability` rule. See RuleOptions. */
+export declare const capabilityRule: {
+    meta: {
+        type: string;
+        docs: {
+            description: string;
+            recommended: boolean;
+        };
+        schema: {
+            type: string;
+            properties: {
+                policy: {
+                    type: string;
+                };
+                minConfidence: {
+                    enum: string[];
+                };
+                reportUnknown: {
+                    type: string;
+                };
+                today: {
+                    type: string;
+                };
+            };
+            additionalProperties: boolean;
+        }[];
+    };
+    create(context: Context): {
+        Program(): void;
+    };
+};
+declare const plugin: {
+    meta: {
+        name: string;
+        version: string;
+    };
+    rules: {
+        capability: {
+            meta: {
+                type: string;
+                docs: {
+                    description: string;
+                    recommended: boolean;
+                };
+                schema: {
+                    type: string;
+                    properties: {
+                        policy: {
+                            type: string;
+                        };
+                        minConfidence: {
+                            enum: string[];
+                        };
+                        reportUnknown: {
+                            type: string;
+                        };
+                        today: {
+                            type: string;
+                        };
+                    };
+                    additionalProperties: boolean;
+                }[];
+            };
+            create(context: Context): {
+                Program(): void;
+            };
+        };
+    };
+    configs: Record<string, unknown>;
+};
+export default plugin;
+//# sourceMappingURL=eslint.d.ts.map

package/dist/eslint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eslint.d.ts","sourceRoot":"","sources":["../src/eslint.ts"],"names":[],"mappings":"AAcA,OAAO,EAQL,KAAK,UAAU,EAEhB,MAAM,mBAAmB,CAAC;AAI3B,+DAA+D;AAC/D,MAAM,WAAW,WAAW;IAC1B,wFAAwF;IACxF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,aAAa,CAAC,EAAE,UAAU,CAAC;IAC3B,mFAAmF;IACnF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,mGAAmG;AACnG,UAAU,OAAO;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,MAAM,EAAE,CAAC,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,KAAK,IAAI,CAAC;CAC1F;AAgCD,sDAAsD;AACtD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;oBAiBT,OAAO;;;CAmCxB,CAAC;AAEF,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BArCM,OAAO;;;;;aAwCR,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CACvC,CAAC;AAOF,eAAe,MAAM,CAAC"}