@lacneu/wix-openclaw 0.2.2 → 0.4.0

package/README.md

@@ -15,10 +15,10 @@
 ## Overview
 
 `wix-openclaw` is an OpenClaw plugin that lets your agent operate a Wix site
-through the official Wix REST API. It registers ~50 tools split across a dozen
+through the official Wix REST API. It registers ~60 tools split across a dozen
 Wix products (Blog, CMS Data, Forms, Bookings, Contacts, Events, Reviews, FAQ,
-Multilingual, Sites, Site Media), plus a `wix_design_brief` helper that turns
-loose textual briefs into structured markdown artefacts.
+Multilingual, Sites, Site Media, SEO), plus a `wix_design_brief` helper that
+turns loose textual briefs into structured markdown artefacts.
 
 Every tool funnels through a single authenticated HTTP client that:
 
@@ -175,6 +175,21 @@ should stay unticked.
 Tick these only if the corresponding Wix product is actually in use on
 the target site:
 
+- [ ] **Manage SEO** (`SCOPE.PROMOTE.MANAGE-SEO`) — **only if you set
+  `enableSeoTools: true`**, which registers **nineteen** tools of which
+  **eleven write irreversibly** (four on redirects, seven on tags and
+  patterns; a pattern write re-renders every page of its type). In the default
+  configuration the SEO tools are not registered at all, so granting this scope would hand the key the power to
+  delete redirects for tools that cannot run. Wix exposes a **single** SEO
+  scope, not a read/write pair: ticking it grants redirect creation and deletion
+  along with the read-only audit, so there is no such thing as an audit-only SEO
+  key. In the Wix UI the checkbox sits under **All site permissions**, between
+  *Social Posts* and *Import orders*; its label is currently untranslated and
+  renders literally as `site.scope.SCOPE.PROMOTE.MANAGE-SEO.name`. Since Wix
+  cannot narrow it, the read/write boundary is enforced by this plugin instead —
+  each of the eleven writing tools refuses until what it would destroy, be it a
+  redirect, a tag or a template, has been named and acknowledged.
+
 - [ ] **Pricing Plans** — if you sell subscription packages
 - [ ] **Wix Stores** + **Wix eCommerce** — if you sell physical/digital
   products. Without these, the `wix_*` tools that touch e-commerce
@@ -225,6 +240,7 @@ columns and remove the matching tools from your agent's allow-list.
 | `wix_reviews_*` | Wix Reviews | Reviews moderation |
 | `wix_faq_*` | Manage FAQ | FAQ tooling |
 | `wix_multilingual_*` | Multilingual Translation Schema Read | Translation reads |
+| `wix_seo_*` (all nineteen) | Manage SEO (`SCOPE.PROMOTE.MANAGE-SEO`) | SEO audit **and** redirect changes — Wix has no read-only SEO scope, so this one permission covers both |
 | `wix_design_brief` | _(none — no API call)_ | Always |
 
 ### Wix app installation requirements
@@ -237,7 +253,7 @@ working as soon as the app is installed (no plugin upgrade needed).
 | Tool group | Wix app required | Error returned when missing |
 |---|---|---|
 | `wix_blog_*` | Wix Blog | `404` |
-| `wix_data_*` | Velo / Wix Code (enable in Editor) | `400 WDE0110: Wix Code not enabled` |
+| `wix_data_*` | Wix CMS (Velo / Wix Code — enable in Editor) | `400 WDE0110: Wix CMS app is not installed for site` |
 | `wix_forms_*` | Wix Forms | `404` |
 | `wix_bookings_*` | Wix Bookings | `404` |
 | `wix_events_*` | Wix Events | `428 WIX_EVENTS_APP_NOT_INSTALLED` |
@@ -338,7 +354,9 @@ site; `app-not-installed` and `velo-not-enabled` mean the tool's
 endpoint exists but its backing Wix product is not active on the
 smoke-test site (the request still reaches Wix and the path/headers
 are correct); `docs` means write/destructive endpoints that we do not
-exercise live.
+exercise live. The SEO reads are skipped by the smoke test unless
+`WIX_SMOKE_SEO=1` is set, so a key without `SCOPE.PROMOTE.MANAGE-SEO` is not
+failed for lacking a scope the default configuration never uses.
 
 ### Blog
 
@@ -455,15 +473,98 @@ Requires the Wix FAQ app (returns `400 App is not installed` otherwise).
 
 ### Multilingual (read-only in V1)
 
-Returns `403` on the Ataraxis smoke-test site — likely missing the
-`Multilingual Translation Schema Read` permission on the API key
-rather than an app-not-installed condition.
+Returns `403` on the Ataraxis smoke-test site, with an EMPTY body. The earlier
+guess — a missing `Multilingual Translation Schema Read` permission — has since
+been ruled out: that permission is granted on the key and the `403` persists.
+What remains undetermined is whether the Wix Multilingual app is simply not
+installed, or whether these two endpoints also require the separate
+`SCOPE.MULTILINGUAL.MANAGE_TRANSLATIONS` scope. The empty body does not say, and
+neither answer has been tested.
 
 | Tool | What it does | Approval | Validated |
 |---|---|---|---|
 | `wix_multilingual_list_languages` | List configured languages; standard query envelope | — | 403-permission |
 | `wix_multilingual_list_schemas` | List translation schemas | — | 403-permission |
 
+### SEO
+
+> **Developer Preview, and OFF by default.** Every Wix endpoint behind these
+> nineteen tools is listed in Wix's
+> [Developer Preview](https://dev.wix.com/docs/api-reference/articles/work-with-wix-apis/platform/about-developer-preview)
+> — Item SEO Tags, Site SEO Tags, SEO Patterns and all six Redirects methods.
+> Wix may change
+> them at any time, and states plainly that you **shouldn't use them on live
+> sites**: they are for testing and feedback. An API stays in preview for at
+> most six months.
+>
+> Nothing here registers unless you set `enableSeoTools: true` in the plugin
+> config. Eleven of the tools write irreversibly to the live site the moment
+> they succeed — and a pattern write re-renders every page of its type — so
+> opting in is the operator saying they accept both risks.
+> _Preview status verified against the Wix reference on 2026-08-28._
+
+Auditing a site's SEO, correcting its tags, and managing its URL redirects and
+tag patterns.
+
+| Tool | What it does | Approval | Validated |
+|---|---|---|---|
+| `wix_seo_list_item_tags` | List the items of one type with their SEO tags. `STATIC_PAGE` enumerates the site's pages. Reports `hasOverride`, the item's own `tags`, and `resolvedTags` marked with each tag's source. Cursor paging. | — | live |
+| `wix_seo_get_item_tags` | One item's tags, own and resolved | — | schema |
+| `wix_seo_get_site_tags` | Site-wide tags, plus dashboard verification embeds (read-only) | — | live |
+| `wix_seo_list_redirects` | Every redirect on the site. No filter, sort or paging — the endpoint takes none | — | live |
+| `wix_seo_get_redirect` | One redirect by GUID | — | schema |
+| `wix_seo_create_redirect` | Create a 301 redirect | **required** | schema |
+| `wix_seo_delete_redirect` | Delete one redirect (re-reads it and refuses until its token is acknowledged) | **required** | schema |
+| `wix_seo_bulk_create_redirects` | Create 1–100 redirects | **required** | schema |
+| `wix_seo_bulk_delete_redirects` | Delete 1–500 redirects | **required** | schema |
+| `wix_seo_set_item_tags` | Set one item's tags — REPLACES its own set in full; refuses until the tags it would drop are acknowledged | **required** | schema |
+| `wix_seo_bulk_set_item_tags` | Set tags for many items of one type (100 max, 20 for `BLOG_POST`); per-entry results | **required** | schema |
+| `wix_seo_reset_item_tags` | Give an item back the tags it inherits, discarding its own (all or nothing) | **required** | schema |
+| `wix_seo_set_site_tags` | Set the site-wide tags — `meta` only; Wix rejects `title`/`script`/`link` here | **required** | schema |
+| `wix_seo_list_patterns` | The site's tag templates, per page type | — | schema |
+| `wix_seo_get_pattern` | One page type's pattern; read `source` to know whose it is — an owned pattern may hold zero templates, so empty ≠ absent | — | schema |
+| `wix_seo_list_pattern_variables` | The variables a page type's pattern may reference | — | schema |
+| `wix_seo_set_pattern` | Change an existing pattern — re-renders EVERY page of the type | **required** | schema |
+| `wix_seo_create_pattern` | Give a page type its first pattern (same path as the set, `POST` not `PATCH`) | **required** | schema |
+| `wix_seo_reset_pattern` | Return a page type to the Wix default pattern | **required** | schema |
+
+**Three things to know before using these.**
+
+*A read of a static page is the SAVED revision, not the live one.* For
+`STATIC_PAGE`, `tags`, `focusKeywords` and `resolvedTags` always reflect the
+saved revision, and `publishStatus` is always `PUBLISH_STATUS_UNSPECIFIED` — the
+API has no path to read the published revision back. An audit report should say
+it is about the saved page. `resolvedTags` also omits anything site code or apps
+add while the page renders, so it is not a copy of the rendered `<head>`.
+
+*Creating a redirect can delete another one.* Redirects do not chain: if an
+existing redirect **starts at** the path a new one points to, that existing
+redirect is deleted and the create proceeds — no flag involved, no way back.
+The tool's own top-level `forceReplace` parameter additionally deletes a
+redirect holding the same `from` path. Wix documents that flag nested as
+`options.forceReplace`; do **not** send it there — the tool rebuilds the
+redirect from the fields it supports, so a nested flag is dropped and the create
+fails with `FROM_URL_EXISTS` as if it had never been set. This is why
+`wix_seo_create_redirect` is approval-gated by default
+alongside the deletes. A redirect also takes precedence over a real page at the
+same path, which makes that page unreachable.
+
+*The create refuses before it destroys.* `wix_seo_create_redirect` and
+`wix_seo_bulk_create_redirects` list the site's redirects themselves and refuse,
+naming each redirect they would delete — with its paths, language and whether it
+is a group rule — until the caller repeats the `token` from that refusal back in
+`acknowledgeDeletions`. The token is derived from the redirect's current state,
+so it cannot be guessed without listing and goes stale if the redirect changes.
+The check is in the execution path, not in the tool description, so a direct call
+gets it too, and it refuses outright rather than assuming an empty list when the
+redirects cannot be read. Destructive writes are serialised per site; a change
+made in the Wix dashboard between the read and the write remains possible.
+
+*There is no update method and no query method.* To change a redirect: get it,
+delete it, then create it carrying **every** field over — an omitted field is
+filled with its default, not its previous value. To find one, list them all and
+filter client-side.
+
 ### Design
 
 | Tool | What it does | Approval | Validated |

package/dist/config.d.ts

@@ -6,6 +6,7 @@ import type { ResolvedWixConfig, WixPluginConfig } from "./types.js";
  * become empty strings to avoid leaking `undefined` into downstream code.
  */
 export declare function resolveEnv<T>(value: T): T;
+export declare const DEFAULT_APPROVAL_REQUIRED: string[];
 /**
  * Apply defaults and env substitution to the raw plugin config.
  *

package/dist/config.js

@@ -15,7 +15,7 @@ export function resolveEnv(value) {
         return process.env[name] ?? "";
     });
 }
-const DEFAULT_APPROVAL_REQUIRED = [
+export const DEFAULT_APPROVAL_REQUIRED = [
     "wix_blog_publish_draft",
     "wix_blog_unpublish",
     "wix_blog_delete_draft",
@@ -25,6 +25,24 @@ const DEFAULT_APPROVAL_REQUIRED = [
     "wix_bookings_cancel",
     "wix_reviews_moderate",
     "wix_faq_delete_question",
+    // SEO redirects. `create` is gated like the deletes on purpose: it is
+    // destructive by construction. Redirects do not chain — an existing redirect
+    // that STARTS AT the path a new one points to is deleted so the create can
+    // proceed, with no flag asked for and no way back. Classifying these by verb
+    // would have left the most damaging call in the set ungated.
+    "wix_seo_create_redirect",
+    "wix_seo_delete_redirect",
+    "wix_seo_bulk_create_redirects",
+    "wix_seo_bulk_delete_redirects",
+    // Tranche 2 — writing tags. Each REPLACES what it writes: the previous
+    // value is gone, and a pattern write re-renders every page of its type.
+    "wix_seo_set_item_tags",
+    "wix_seo_bulk_set_item_tags",
+    "wix_seo_reset_item_tags",
+    "wix_seo_set_site_tags",
+    "wix_seo_set_pattern",
+    "wix_seo_create_pattern",
+    "wix_seo_reset_pattern",
 ];
 const VALID_LOG_LEVELS = ["debug", "info", "warn", "error"];
 /**
@@ -49,6 +67,12 @@ export function resolveConfig(cfg = {}) {
         : "info";
     return {
         enabled: cfg.enabled !== false,
+        // OPT-IN, unlike every other tool group. The Wix SEO endpoints are in
+        // Developer Preview: Wix may change them at any time and says they
+        // "shouldn't be used on live sites". Four of these tools also write
+        // irreversibly to a live site the moment they succeed. Defaulting them on
+        // would enable that on every existing install without anyone deciding to.
+        enableSeoTools: cfg.enableSeoTools === true,
         apiKey,
         accountId,
         allowedSiteIds,

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,EAAE;AACF,2EAA2E;AAC3E,6DAA6D;AAQ7D;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAI,KAAQ;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;QACvD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC,CAAiB,CAAC;AACrB,CAAC;AAED,MAAM,yBAAyB,GAAG;IAChC,wBAAwB;IACxB,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,qBAAqB;IACrB,yBAAyB;IACzB,qBAAqB;IACrB,sBAAsB;IACtB,yBAAyB;CAC1B,CAAC;AAEF,MAAM,gBAAgB,GAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAE3E;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAuB,EAAE;IAEzB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,aAAa,GACjB,eAAe,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAE/C,MAAM,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;IAE3E,MAAM,QAAQ,GAAgB,gBAAgB,CAAC,QAAQ,CACrD,GAAG,CAAC,QAAuB,CAC5B;QACC,CAAC,CAAE,GAAG,CAAC,QAAwB;QAC/B,CAAC,CAAC,MAAM,CAAC;IAEX,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,KAAK;QAC9B,MAAM;QACN,SAAS;QACT,cAAc;QACd,aAAa;QACb,gBAAgB,EAAE,IAAI,GAAG,CAAC,gBAAgB,CAAC;QAC3C,QAAQ;KACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,EAAE;AACF,2EAA2E;AAC3E,6DAA6D;AAQ7D;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAI,KAAQ;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;QACvD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC,CAAiB,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,wBAAwB;IACxB,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,qBAAqB;IACrB,yBAAyB;IACzB,qBAAqB;IACrB,sBAAsB;IACtB,yBAAyB;IACzB,sEAAsE;IACtE,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,6DAA6D;IAC7D,yBAAyB;IACzB,yBAAyB;IACzB,+BAA+B;IAC/B,+BAA+B;IAC/B,uEAAuE;IACvE,wEAAwE;IACxE,uBAAuB;IACvB,4BAA4B;IAC5B,yBAAyB;IACzB,uBAAuB;IACvB,qBAAqB;IACrB,wBAAwB;IACxB,uBAAuB;CACxB,CAAC;AAEF,MAAM,gBAAgB,GAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAE3E;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAuB,EAAE;IAEzB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,aAAa,GACjB,eAAe,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAE/C,MAAM,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;IAE3E,MAAM,QAAQ,GAAgB,gBAAgB,CAAC,QAAQ,CACrD,GAAG,CAAC,QAAuB,CAC5B;QACC,CAAC,CAAE,GAAG,CAAC,QAAwB;QAC/B,CAAC,CAAC,MAAM,CAAC;IAEX,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,KAAK;QAC9B,sEAAsE;QACtE,mEAAmE;QACnE,oEAAoE;QACpE,0EAA0E;QAC1E,0EAA0E;QAC1E,cAAc,EAAE,GAAG,CAAC,cAAc,KAAK,IAAI;QAC3C,MAAM;QACN,SAAS;QACT,cAAc;QACd,aAAa;QACb,gBAAgB,EAAE,IAAI,GAAG,CAAC,gBAAgB,CAAC;QAC3C,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/hooks/approval.d.ts

@@ -21,6 +21,16 @@ export interface BeforeToolCallResult {
         timeoutBehavior?: "allow" | "deny";
     };
 }
+/**
+ * The approval description, guaranteed to satisfy the protocol.
+ *
+ * Ordered by what decides a refusal: the irreversible effect, the site the call
+ * actually lands on (the preview used to strip `siteId`, so on a multi-site key
+ * the operator never saw which tenant), then each highlighted parameter.
+ */
+export declare function buildApprovalDescription(toolName: string, params: Record<string, unknown>, defaultSiteId: string): string;
+/** The approval title, likewise bounded (protocol: 1–80). */
+export declare function buildApprovalTitle(toolName: string): string;
 /**
  * Build a `before_tool_call` handler bound to a resolved Wix config.
  * Extracted as a factory so tests can exercise it without a full plugin

package/dist/hooks/approval.js

@@ -11,25 +11,313 @@
 //   - `timeoutBehavior` accepts "allow" | "deny".
 //   - `pluginId` is set automatically by the hook runner — do not set it
 //     yourself.
+import { createHash } from "node:crypto";
 const DEFAULT_TIMEOUT_MS = 600_000; // 10 minutes
-const PARAM_PREVIEW_CHARS = 600;
 /**
- * Truncate the parameter snapshot so we never surface a wall of JSON to
- * the operator. We strip `siteId` since it's covered by the config and
- * adds noise to the prompt.
+ * THE PROTOCOL'S OWN LIMITS, not ours.
+ *
+ * `PluginApprovalRequestParamsSchema` (openclaw gateway, plugin-approvals)
+ * declares `title` as 1–80 characters and `description` as 1–256. A longer one
+ * is not truncated by the gateway — the request fails validation, so the
+ * operator is never asked and the tool is blocked. The previous prompt embedded
+ * a 600-character JSON preview under a paragraph of boilerplate and could not
+ * fit: every gated tool was affected, not only the SEO ones.
+ *
+ * So the description is BUILT to the budget rather than written and hoped for.
  */
-function previewParams(params) {
-    const { siteId: _siteId, ...rest } = params; // eslint-disable-line @typescript-eslint/no-unused-vars
+const APPROVAL_TITLE_MAX = 80;
+const APPROVAL_DESCRIPTION_MAX = 256;
+/**
+ * Parameters that must reach the operator, in priority order.
+ *
+ * With 256 characters there is no room for the full parameters, so what is
+ * shown has to be what DECIDES: a redirect carries two free-form paths, and
+ * `forceReplace` — the flag that deletes an existing redirect for good — must
+ * never be the part that falls off the end.
+ *
+ * TABLE-DRIVEN so a destructive parameter cannot be added to a tool without
+ * saying where it ranks in the prompt.
+ */
+const APPROVAL_HIGHLIGHTS = {
+    wix_seo_create_redirect: ["forceReplace", "redirect"],
+    wix_seo_delete_redirect: ["redirectId"],
+    wix_seo_bulk_create_redirects: ["redirects"],
+    wix_seo_bulk_delete_redirects: ["redirectIds"],
+};
+/** One-line effect warnings, shown FIRST because they are the reason to refuse. */
+const APPROVAL_EFFECTS = {
+    // A create destroys in TWO ways, and the second needs no existing redirect:
+    // a redirect takes precedence over a real page at the same path, so creating
+    // one from a path that still serves a page makes that page unreachable. The
+    // pre-flight cannot see it — it reads redirects, not pages — so the prompt is
+    // the only place the operator can be told.
+    wix_seo_create_redirect: "may DELETE a redirect; HIDES any real page at `from` (permanent)",
+    wix_seo_delete_redirect: "permanent",
+    wix_seo_bulk_create_redirects: "not atomic; may DELETE redirects; HIDES real pages at a `from`",
+    wix_seo_bulk_delete_redirects: "permanent",
+};
+/** Longest a single value may occupy in the prompt, so one long path cannot
+ *  crowd out everything after it. */
+const VALUE_MAX = 60;
+/** Make control characters VISIBLE instead of letting them act.
+ *
+ *  The description is rendered as a line-structured message, so a `from` path,
+ *  a language or a parameter name carrying a newline can paint fields that were
+ *  never sent — on the one surface whose whole purpose is an operator deciding
+ *  whether to allow an irreversible write. The generic branch was safe by
+ *  accident, `JSON.stringify` escaping these; the redirect rendering, which
+ *  exists precisely to be more readable than JSON, was not. */
+function sanitize(value) {
+    return value.replace(
+    // eslint-disable-next-line no-control-regex
+    /[\u0000-\u001f\u007f\u0085\u2028\u2029]/g, (c) => {
+        if (c === "\n")
+            return "\\n";
+        if (c === "\r")
+            return "\\r";
+        if (c === "\t")
+            return "\\t";
+        return `\\u${c.codePointAt(0).toString(16).padStart(4, "0")}`;
+    });
+}
+/** Shorten in the MIDDLE: a path's beginning and its end are what identify it,
+ *  and two long paths sharing a prefix are told apart only by their tails.
+ *  Neutralises controls FIRST, so truncation can never be what lets one
+ *  through. */
+function shorten(raw, max = VALUE_MAX) {
+    const value = sanitize(raw);
+    if (value.length <= max)
+        return value;
+    const head = Math.ceil((max - 1) / 2);
+    const tail = Math.floor((max - 1) / 2);
+    return `${value.slice(0, head)}…${value.slice(value.length - tail)}`;
+}
+/** A short, stable fingerprint of a whole set, so two approvals for DIFFERENT
+ *  sets never read identically even when only a few members are shown.
+ *
+ *  SHA-256, truncated to 128 bits. A 32-bit FNV was small enough to collide on
+ *  purpose: two batches whose first three members matched could be given the
+ *  same digest, and with only three members sampled the two prompts became
+ *  indistinguishable — for two different permanent deletions. */
+function digest(input) {
+    return createHash("sha256").update(input).digest("hex").slice(0, 32);
+}
+/** A stable serialisation of the WHOLE value, before anything is shortened for
+ *  display. What the fingerprint must identify is the batch, not its preview. */
+function canonical(value) {
+    const walk = (v) => {
+        if (Array.isArray(v))
+            return v.map(walk);
+        if (v !== null && typeof v === "object") {
+            // KEYS SORTED. `JSON.stringify` preserves insertion order, so the same
+            // batch written with its fields in a different order fingerprinted
+            // differently — an identity that changes for no reason is no identity.
+            const obj = v;
+            const out = {};
+            for (const k of Object.keys(obj).sort())
+                out[k] = walk(obj[k]);
+            return out;
+        }
+        return v;
+    };
+    try {
+        return JSON.stringify(walk(value)) ?? String(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+/** How many members of a list to name before the fingerprint stands in for the
+ *  rest. */
+const LIST_SAMPLE = 3;
+/** Compact rendering of a highlighted value.
+ *
+ *  A list reports its LENGTH, then a few members, then a fingerprint of the
+ *  whole set. Length alone made two bulk deletes of completely different GUIDs
+ *  produce the same prompt — the operator was approving a permanent deletion
+ *  with nothing on screen that distinguished it from another one.
+ */
+/** `from → to [exact|group, language]`, or null when the value is not a
+ *  redirect. Shared by the single and the bulk rendering: a bulk create's
+ *  members went through the generic JSON path, so up to 500 GROUP rules over
+ *  whole branches could read the same as 500 exact ones. */
+function renderRedirect(value, max) {
+    if (value === null || typeof value !== "object")
+        return null;
+    const obj = value;
+    if (typeof obj.from !== "string" || typeof obj.to !== "string")
+        return null;
+    const options = obj.options;
+    const scope = options?.groupRedirect === true ? "group" : "exact";
+    // Bounded and neutralised like the paths: `language` went in raw, so it was
+    // both an injection point and a way to crowd out the rest of the line.
+    const language = typeof obj.language === "string" && obj.language.length > 0
+        ? shorten(obj.language, 16)
+        : "all";
+    return `${shorten(obj.from, max)} → ${shorten(obj.to, max)} [${scope}, ${language}]`;
+}
+/** Widest blast radius first: a group rule carries every path under its own,
+ *  and a rule with no language applies to every language. Sampling in order
+ *  showed three exact rules while the global group ones sat behind a `+N`. */
+function blastRadius(value) {
+    if (value === null || typeof value !== "object")
+        return 0;
+    const obj = value;
+    const options = obj.options;
+    const group = options?.groupRedirect === true ? 2 : 0;
+    const global = typeof obj.language === "string" && obj.language.length > 0 ? 0 : 1;
+    return group + global;
+}
+/** `2 group/all, 1 exact/fr` — what the batch DOES, over every member, in the
+ *  space a sample cannot cover. */
+function scopeTally(value) {
+    const counts = new Map();
+    for (const v of value) {
+        const rendered = renderRedirect(v, 1);
+        if (rendered === null)
+            return null;
+        const scope = rendered.slice(rendered.lastIndexOf("[") + 1, -1);
+        counts.set(scope, (counts.get(scope) ?? 0) + 1);
+    }
+    return [...counts.entries()].map(([k, n]) => `${n} ${k}`).join(", ");
+}
+function renderHighlight(rawKey, value) {
+    // A PARAMETER NAME IS CALLER-SUPPLIED TOO. The tail loop renders every key the
+    // call carries, declared or not.
+    const key = shorten(rawKey, 40);
+    if (Array.isArray(value)) {
+        const members = value.map((v) => {
+            const asRedirect = renderRedirect(v, 12);
+            if (asRedirect !== null)
+                return asRedirect;
+            return typeof v === "string" ? v : (JSON.stringify(v) ?? "");
+        });
+        const sample = value
+            .map((v, i) => ({ i, radius: blastRadius(v) }))
+            .sort((a, b) => b.radius - a.radius || a.i - b.i)
+            .slice(0, LIST_SAMPLE)
+            .map(({ i }) => shorten(members[i], 40))
+            .join(", ");
+        const rest = members.length - Math.min(LIST_SAMPLE, members.length);
+        const tally = scopeTally(value);
+        // THREE PARTS, NOT ONE. Joined into a single string, a long tally — eight
+        // distinct languages is enough — pushed the whole thing over the budget and
+        // `fitParts` skipped it entire: no count, no member, no fingerprint, and an
+        // operator approving an irreversible batch with nothing identifying it.
+        // Split, the core survives and only the detail is dropped.
+        return [
+            // Fingerprint over the ORIGINAL values, not the shortened renderings:
+            // `/sameX-A-different-Ytail` and `/sameX-B-different-Ytail` both render as
+            // `/sameX…Ytail`, so a digest taken after truncation gave two different
+            // destructive batches the same identity.
+            `${key}: ${members.length}× #${digest(canonical(value))}`,
+            ...(tally !== null ? [`(${tally})`] : []),
+            `[${sample}${rest > 0 ? `, +${rest}` : ""}]`,
+        ];
+    }
+    // A redirect reads as `from → to` WITH ITS SCOPE. Showing only the paths made
+    // an exact French-only rule and a global group rule over a whole branch
+    // produce the same prompt — and the second can make far more pages
+    // unreachable than the first.
+    const asRedirect = renderRedirect(value, 40);
+    if (asRedirect !== null)
+        return asRedirect;
     let json;
     try {
-        json = JSON.stringify(rest, null, 2);
+        json = JSON.stringify(value);
     }
     catch {
-        json = "<unserializable params>";
+        json = "<unserializable>";
+    }
+    return `${key}: ${shorten(json)}`;
+}
+/** Join what fits, in order, marking that something was left out.
+ *
+ *  SKIPS an oversized part rather than stopping at it: stopping meant one long
+ *  value hid every fact after it, which is how `from` and `to` could vanish
+ *  from a prompt entirely. Every part is already length-bounded, so skipping is
+ *  the rare case, not the normal one. */
+const OMISSION_MARKER = " \u00b7 \u2026";
+function fitParts(parts, budget) {
+    const out = [];
+    let used = 0;
+    let dropped = false;
+    for (const part of parts) {
+        const cost = out.length === 0 ? part.length : part.length + 3;
+        // Room for the marker is reserved once something HAS been dropped — that is
+        // when it will certainly be appended. The reservation used to be the other
+        // way round, so after the first drop the remaining parts filled the budget
+        // to the brim and the final `slice` ate the marker: an approval that had
+        // silently omitted parameters read as complete, on destructive calls.
+        if (used + cost > budget - (dropped ? OMISSION_MARKER.length : 0)) {
+            dropped = true;
+            continue;
+        }
+        out.push(part);
+        used += cost;
+    }
+    if (!dropped)
+        return out.join(" · ").slice(0, budget);
+    // Reserving as we go is not enough on its own: the drop can be the LAST
+    // part, after earlier ones already filled the budget. Give the marker its
+    // room by surrendering trailing parts — parts are ordered by what decides a
+    // refusal, so the least decisive go first, and a truthful "something is
+    // missing" outranks one more shown value.
+    let joined = out.join(" · ");
+    while (out.length > 0 && joined.length + OMISSION_MARKER.length > budget) {
+        out.pop();
+        joined = out.join(" · ");
     }
-    if (json.length <= PARAM_PREVIEW_CHARS)
-        return json;
-    return `${json.slice(0, PARAM_PREVIEW_CHARS)}…`;
+    if (out.length === 0)
+        return "";
+    return `${joined}${OMISSION_MARKER}`.slice(0, budget);
+}
+/**
+ * The approval description, guaranteed to satisfy the protocol.
+ *
+ * Ordered by what decides a refusal: the irreversible effect, the site the call
+ * actually lands on (the preview used to strip `siteId`, so on a multi-site key
+ * the operator never saw which tenant), then each highlighted parameter.
+ */
+export function buildApprovalDescription(toolName, params, defaultSiteId) {
+    const site = typeof params.siteId === "string" && params.siteId.length > 0
+        ? params.siteId
+        : defaultSiteId || "<no site configured>";
+    const parts = [];
+    const effect = APPROVAL_EFFECTS[toolName];
+    if (effect !== undefined)
+        parts.push(effect.toUpperCase());
+    parts.push(`site ${site}`);
+    // Highlighted parameters first, in the table's order, then EVERYTHING ELSE
+    // the call carries. Without the tail, a gated tool with no table entry —
+    // every pre-existing one — would show the operator nothing but a site.
+    const highlighted = APPROVAL_HIGHLIGHTS[toolName] ?? [];
+    const seen = new Set(["siteId"]);
+    const push = (rendered) => {
+        if (Array.isArray(rendered))
+            parts.push(...rendered);
+        else
+            parts.push(rendered);
+    };
+    for (const key of highlighted) {
+        if (!(key in params))
+            continue;
+        seen.add(key);
+        push(renderHighlight(key, params[key]));
+    }
+    for (const [key, value] of Object.entries(params)) {
+        if (seen.has(key))
+            continue;
+        push(renderHighlight(key, value));
+    }
+    const body = fitParts(parts, APPROVAL_DESCRIPTION_MAX);
+    // fitParts already respects the budget; the guard is belt-and-braces so a
+    // future edit cannot reintroduce the failure this function exists to prevent.
+    return body.slice(0, APPROVAL_DESCRIPTION_MAX) || toolName;
+}
+/** The approval title, likewise bounded (protocol: 1–80). */
+export function buildApprovalTitle(toolName) {
+    return `Wix: confirm ${toolName}`.slice(0, APPROVAL_TITLE_MAX);
 }
 /**
  * Build a `before_tool_call` handler bound to a resolved Wix config.
@@ -42,18 +330,13 @@ export function createApprovalHook(config, logger) {
             return undefined;
         if (!config.approvalRequired.has(event.toolName))
             return undefined;
-        const description = `Tool \`${event.toolName}\` is about to run with the following parameters:\n\n` +
-            "```json\n" +
-            previewParams(event.params) +
-            "\n```\n\n" +
-            "Approve to execute, deny to cancel. The call will deny automatically " +
-            "if no decision is made within 10 minutes.";
+        const description = buildApprovalDescription(event.toolName, event.params, config.defaultSiteId);
         if (config.logLevel === "debug") {
             logger.debug?.(`wix: requesting approval for ${event.toolName} (runId=${event.runId ?? "?"})`);
         }
         return {
             requireApproval: {
-                title: `Wix: confirm ${event.toolName}`,
+                title: buildApprovalTitle(event.toolName),
                 description,
                 severity: "critical",
                 timeoutMs: DEFAULT_TIMEOUT_MS,

package/dist/hooks/approval.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../src/hooks/approval.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,0EAA0E;AAC1E,iCAAiC;AACjC,EAAE;AACF,yEAAyE;AACzE,4BAA4B;AAC5B,uEAAuE;AACvE,kDAAkD;AAClD,yEAAyE;AACzE,gBAAgB;AA4BhB,MAAM,kBAAkB,GAAG,OAAO,CAAC,CAAC,aAAa;AACjD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;;;GAIG;AACH,SAAS,aAAa,CAAC,MAA+B;IACpD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,wDAAwD;IACrG,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,yBAAyB,CAAC;IACnC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,IAAI,mBAAmB;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAyB,EACzB,MAAiB;IAEjB,OAAO,SAAS,cAAc,CAC5B,KAA0B;QAE1B,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QAEnE,MAAM,WAAW,GACf,UAAU,KAAK,CAAC,QAAQ,uDAAuD;YAC/E,WAAW;YACX,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YAC3B,WAAW;YACX,uEAAuE;YACvE,2CAA2C,CAAC;QAE9C,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,EAAE,CACZ,gCAAgC,KAAK,CAAC,QAAQ,WAAW,KAAK,CAAC,KAAK,IAAI,GAAG,GAAG,CAC/E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,eAAe,EAAE;gBACf,KAAK,EAAE,gBAAgB,KAAK,CAAC,QAAQ,EAAE;gBACvC,WAAW;gBACX,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,eAAe,EAAE,MAAM;aACxB;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../src/hooks/approval.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,0EAA0E;AAC1E,iCAAiC;AACjC,EAAE;AACF,yEAAyE;AACzE,4BAA4B;AAC5B,uEAAuE;AACvE,kDAAkD;AAClD,yEAAyE;AACzE,gBAAgB;AAEhB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA4BzC,MAAM,kBAAkB,GAAG,OAAO,CAAC,CAAC,aAAa;AAEjD;;;;;;;;;;;GAWG;AACH,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC;;;;;;;;;;GAUG;AACH,MAAM,mBAAmB,GAA0C;IACjE,uBAAuB,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC;IACrD,uBAAuB,EAAE,CAAC,YAAY,CAAC;IACvC,6BAA6B,EAAE,CAAC,WAAW,CAAC;IAC5C,6BAA6B,EAAE,CAAC,aAAa,CAAC;CAC/C,CAAC;AAEF,mFAAmF;AACnF,MAAM,gBAAgB,GAA2B;IAC/C,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,2CAA2C;IAC3C,uBAAuB,EACrB,kEAAkE;IACpE,uBAAuB,EAAE,WAAW;IACpC,6BAA6B,EAC3B,gEAAgE;IAClE,6BAA6B,EAAE,WAAW;CAC3C,CAAC;AAEF;qCACqC;AACrC,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB;;;;;;;+DAO+D;AAC/D,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK,CAAC,OAAO;IAClB,4CAA4C;IAC5C,0CAA0C,EAC1C,CAAC,CAAC,EAAE,EAAE;QACJ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,OAAO,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACjE,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;eAGe;AACf,SAAS,OAAO,CAAC,GAAW,EAAE,GAAG,GAAG,SAAS;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;iEAMiE;AACjE,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;iFACiF;AACjF,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,IAAI,GAAG,CAAC,CAAU,EAAW,EAAE;QACnC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxC,uEAAuE;YACvE,mEAAmE;YACnE,uEAAuE;YACvE,MAAM,GAAG,GAAG,CAA4B,CAAC;YACzC,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;YACY;AACZ,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;;;;;GAMG;AACH;;;4DAG4D;AAC5D,SAAS,cAAc,CAAC,KAAc,EAAE,GAAW;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5E,MAAM,OAAO,GAAG,GAAG,CAAC,OAAkD,CAAC;IACvE,MAAM,KAAK,GAAG,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAClE,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,QAAQ,GACZ,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC3B,CAAC,CAAC,KAAK,CAAC;IACZ,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,KAAK,KAAK,QAAQ,GAAG,CAAC;AACvF,CAAC;AAED;;8EAE8E;AAC9E,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAkD,CAAC;IACvE,MAAM,KAAK,GAAG,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GACV,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,KAAK,GAAG,MAAM,CAAC;AACxB,CAAC;AAED;mCACmC;AACnC,SAAS,UAAU,CAAC,KAAgB;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,KAAc;IACrD,+EAA+E;IAC/E,iCAAiC;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,IAAI,UAAU,KAAK,IAAI;gBAAE,OAAO,UAAU,CAAC;YAC3C,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK;aACjB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAChD,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;aACrB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;aACxC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAChC,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,wEAAwE;QACxE,2DAA2D;QAC3D,OAAO;YACL,sEAAsE;YACtE,2EAA2E;YAC3E,wEAAwE;YACxE,yCAAyC;YACzC,GAAG,GAAG,KAAK,OAAO,CAAC,MAAM,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE;YACzD,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,IAAI,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;SAC7C,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,wEAAwE;IACxE,mEAAmE;IACnE,8BAA8B;IAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAC3C,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,kBAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;AACpC,CAAC;AAED;;;;;yCAKyC;AACzC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC,SAAS,QAAQ,CAAC,KAAe,EAAE,MAAc;IAC/C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9D,4EAA4E;QAC5E,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,sEAAsE;QACtE,IAAI,IAAI,GAAG,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,IAAI,IAAI,CAAC;IACf,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACtD,wEAAwE;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,0CAA0C;IAC1C,IAAI,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QACzE,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,GAAG,MAAM,GAAG,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,MAA+B,EAC/B,aAAqB;IAErB,MAAM,IAAI,GACR,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAC3D,CAAC,CAAC,MAAM,CAAC,MAAM;QACf,CAAC,CAAC,aAAa,IAAI,sBAAsB,CAAC;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC3B,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,QAA2B,EAAE,EAAE;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;;YAChD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACvD,0EAA0E;IAC1E,8EAA8E;IAC9E,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,IAAI,QAAQ,CAAC;AAC7D,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,OAAO,gBAAgB,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAyB,EACzB,MAAiB;IAEjB,OAAO,SAAS,cAAc,CAC5B,KAA0B;QAE1B,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QAEnE,MAAM,WAAW,GAAG,wBAAwB,CAC1C,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,MAAM,EACZ,MAAM,CAAC,aAAa,CACrB,CAAC;QAEF,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,EAAE,CACZ,gCAAgC,KAAK,CAAC,QAAQ,WAAW,KAAK,CAAC,KAAK,IAAI,GAAG,GAAG,CAC/E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,eAAe,EAAE;gBACf,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACzC,WAAW;gBACX,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,eAAe,EAAE,MAAM;aACxB;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}