@lannguyensi/harness 0.63.0 → 1.0.0

package/dist/policy-packs/builtin/understanding-before-execution/measured-permission-modes.js

@@ -1,82 +0,0 @@
-// Registry of measured `permission_mode` literals for the
-// `auto_approve.when` allowlist (docs/decisions/2026-08-27-ug-auto-mode-approval.md,
-// Slice 2 AC 3, "Option A").
-//
-// RULE: an entry is added here ONLY together with a checked-in dogfood
-// fixture (under `dogfood/ug-auto-mode-signals/payloads/`) that shows the
-// named harness actually emitting that exact `permission_mode` string on a
-// `PreToolUse` hook payload. `tests/policy-packs/measured-permission-modes-sync.test.ts`
-// enforces both directions: every entry here must be backed by a fixture
-// that carries the claimed value, and every `permission_mode` value found
-// in any `*.PreToolUse.json` fixture must be registered for its harness.
-// Do not add a literal "because it seems plausible": capture a fixture
-// first, then register it.
-//
-// A fixture's harness is bound by its file name: `codex-*` fixtures are
-// Codex captures, every other `*.PreToolUse.json` under the payloads
-// directory is a Claude Code capture (`harnessForFixtureFile`). The sync
-// test checks each entry's fixture name against the entry's `harness`, so
-// a Claude Code fixture cannot back a Codex claim or vice versa.
-//
-// `harness validate` runs in the OPERATOR's repo, which has no `dogfood/`
-// directory, so this registry ships inside the package as a constant
-// (`checkUnderstandingBeforeExecutionAutoApproveMeasured` in
-// `src/cli/validate/checks.ts` consults it without touching the
-// filesystem); the sync test above is what keeps it honest against the
-// fixtures in THIS repo.
-/** Repo-relative directory every registry fixture must live in. */
-export const MEASURED_FIXTURES_DIR = "dogfood/ug-auto-mode-signals/payloads";
-const PAYLOADS_DIR = MEASURED_FIXTURES_DIR;
-/**
- * Which harness a fixture file under {@link MEASURED_FIXTURES_DIR} was
- * captured from, by file-name convention: `codex-*` is Codex, anything
- * else is Claude Code. Shared with the sync test so the convention has
- * one definition.
- */
-export function harnessForFixtureFile(basename) {
-    return basename.startsWith("codex-") ? "codex" : "claude-code";
-}
-export const MEASURED_PERMISSION_MODES = [
-    {
-        harness: "claude-code",
-        permissionMode: "default",
-        fixture: `${PAYLOADS_DIR}/claude-p-default.PreToolUse.json`,
-    },
-    {
-        harness: "claude-code",
-        permissionMode: "acceptEdits",
-        fixture: `${PAYLOADS_DIR}/claude-p-acceptedits.PreToolUse.json`,
-    },
-    {
-        harness: "claude-code",
-        permissionMode: "bypassPermissions",
-        fixture: `${PAYLOADS_DIR}/claude-p-bypass.PreToolUse.json`,
-    },
-    {
-        harness: "codex",
-        permissionMode: "bypassPermissions",
-        fixture: `${PAYLOADS_DIR}/codex-exec-default.PreToolUse.json`,
-    },
-    {
-        harness: "codex",
-        permissionMode: "default",
-        fixture: `${PAYLOADS_DIR}/codex-tui-default.PreToolUse.json`,
-    },
-];
-/**
- * True when the given HARNESS has a measured fixture for this exact
- * literal. `auto_approve.harnesses` (docs/decisions/2026-08-27-ug-auto-mode-approval.md,
- * Slice 2) scopes which harnesses' PreToolUse hooks may take the auto
- * path at all, so "measured" is checked per listed harness, not across
- * the whole registry: a literal measured only for Claude Code is not
- * evidence that Codex ever emits it. Exact string equality: no case
- * folding, no wildcards.
- */
-export function isMeasuredPermissionModeFor(literal, harness) {
-    return MEASURED_PERMISSION_MODES.some((entry) => entry.harness === harness && entry.permissionMode === literal);
-}
-/** Sorted, de-duplicated list of every literal measured for HARNESS. */
-export function measuredPermissionModeLiteralsFor(harness) {
-    return Array.from(new Set(MEASURED_PERMISSION_MODES.filter((entry) => entry.harness === harness).map((entry) => entry.permissionMode))).sort();
-}
-//# sourceMappingURL=measured-permission-modes.js.map

package/dist/policy-packs/builtin/understanding-before-execution/measured-permission-modes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"measured-permission-modes.js","sourceRoot":"","sources":["../../../../src/policy-packs/builtin/understanding-before-execution/measured-permission-modes.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,qFAAqF;AACrF,6BAA6B;AAC7B,EAAE;AACF,uEAAuE;AACvE,0EAA0E;AAC1E,2EAA2E;AAC3E,yFAAyF;AACzF,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,uEAAuE;AACvE,2BAA2B;AAC3B,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,yEAAyE;AACzE,0EAA0E;AAC1E,iEAAiE;AACjE,EAAE;AACF,0EAA0E;AAC1E,qEAAqE;AACrE,6DAA6D;AAC7D,gEAAgE;AAChE,uEAAuE;AACvE,yBAAyB;AAWzB,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,uCAAuC,CAAC;AAC7E,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAA0C;IAC9E;QACE,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,SAAS;QACzB,OAAO,EAAE,GAAG,YAAY,mCAAmC;KAC5D;IACD;QACE,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,aAAa;QAC7B,OAAO,EAAE,GAAG,YAAY,uCAAuC;KAChE;IACD;QACE,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,mBAAmB;QACnC,OAAO,EAAE,GAAG,YAAY,kCAAkC;KAC3D;IACD;QACE,OAAO,EAAE,OAAO;QAChB,cAAc,EAAE,mBAAmB;QACnC,OAAO,EAAE,GAAG,YAAY,qCAAqC;KAC9D;IACD;QACE,OAAO,EAAE,OAAO;QAChB,cAAc,EAAE,SAAS;QACzB,OAAO,EAAE,GAAG,YAAY,oCAAoC;KAC7D;CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAe,EAAE,OAAwB;IACnF,OAAO,yBAAyB,CAAC,IAAI,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,CACzE,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iCAAiC,CAAC,OAAwB;IACxE,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,yBAAyB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,GAAG,CACxE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAChC,CACF,CACF,CAAC,IAAI,EAAE,CAAC;AACX,CAAC"}

package/dist/policy-packs/builtin/understanding-before-execution/permission-mode-observations.d.ts

@@ -1,71 +0,0 @@
-export declare const PERMISSION_MODE_OBSERVATION_DIRNAME = ".permission-mode-observations";
-export interface PermissionModeObservation {
-    sessionId: string;
-    permissionMode: string;
-    observedAt: string;
-}
-/**
- * `sessionId` is validated with the SAME `rejectMalformedSessionId` used
- * for the approval marker path (`markers.ts`'s `approvalMarkerPathFor`):
- * a value carrying `/`, `\`, `..`, or that is empty/blank throws rather
- * than being joined into the path (review round 3, F1: the earlier
- * version of this function trusted the caller's own empty-string check
- * and joined `sessionId` verbatim, letting a crafted `session_id` on the
- * hook's stdin write outside `<generatedDir>/.permission-mode-observations/`).
- */
-export declare function permissionModeObservationPathFor(generatedDir: string, sessionId: string): string;
-/**
- * Best-effort write/update of the per-session observation.
- *
- * `permissionMode` must be a non-empty string; any other shape (absent,
- * non-string, empty) is a silent no-op: there is nothing to observe.
- * `sessionId` is NOT trusted as pre-validated (review round 3, F1): the
- * caller (`hook-pre-tool-use.ts`) only rejects an EMPTY session id
- * before this is reached, and `session_id` on the hook's stdin payload
- * is otherwise attacker-controllable input to a CLI invocation, not a
- * value this function may assume is already path-safe. A malformed id
- * (path separators, `..`, blank) makes `permissionModeObservationPathFor`
- * throw; that throw is treated exactly like any other write failure
- * below: one `stderr` warning, never escalated into a block, never
- * thrown out of this function.
- */
-export declare function recordPermissionModeObservation(generatedDir: string, sessionId: string, permissionMode: unknown, stderr: {
-    write(s: string): unknown;
-}, now?: () => Date): void;
-export interface PermissionModeObservationsResult {
-    /** Whether `<generatedDir>/.permission-mode-observations/` exists at all. */
-    dirPresent: boolean;
-    /** Newest `windowSize` readable observations, newest `observedAt` first. */
-    entries: PermissionModeObservation[];
-    /** Files present but unparseable / missing a required field. */
-    unreadableCount: number;
-}
-/**
- * Strip C0/DEL control characters (including ESC, which could otherwise
- * smuggle an ANSI escape sequence into a terminal) and cap the length,
- * mirroring `persisted-reports.ts`'s `sanitizeDetailValue` for the same
- * reason: `bypass-without-auto-approve.ts` embeds an observation's
- * `sessionId` directly into a doctor finding's `message`, the surface an
- * operator reads (review round 3, F1). This is independent of
- * `permissionModeObservationPathFor`'s write-time
- * `rejectMalformedSessionId` guard: that guard rejects path-traversal
- * shapes, not control characters, and a directory entry's on-disk
- * filename (or the `sessionId` field inside it) is never itself
- * constrained to be display-safe: POSIX filenames may contain any byte
- * but `/` and NUL, and the JSON body's `sessionId` field is a plain
- * string with no such constraint either.
- */
-export declare function sanitizeForDisplay(value: string): string;
-/**
- * Read-side: the newest `windowSize` per-session observations, newest
- * first by `observedAt`. Mirrors `ug-auto-approvals.ts`'s own
- * read-and-window convention (missing dir / empty dir / all-unreadable
- * all resolve to an empty-ish result, never throw: this is a doctor
- * read, not a gate decision). Every returned `sessionId` has already
- * been through {@link sanitizeForDisplay}, so every consumer (today,
- * `bypass-without-auto-approve.ts`'s finding `message`) gets a
- * doctor-output-safe value without having to sanitize it itself.
- */
-export declare function listPermissionModeObservations(generatedDir: string, opts: {
-    windowSize: number;
-}): PermissionModeObservationsResult;

package/dist/policy-packs/builtin/understanding-before-execution/permission-mode-observations.js

@@ -1,175 +0,0 @@
-// Hook-side observation of PreToolUse `permission_mode` (task 8f637efd,
-// docs/decisions/2026-08-27-ug-auto-mode-approval.md's "Amendment:
-// install default"). One small per-session record under
-// `<generatedDir>/.permission-mode-observations/<sessionId>`.
-//
-// WHY A NEW ARTEFACT, NOT THE LEDGER OR THE PERSISTED REPORT. `harness
-// doctor`'s missing-`auto_approve` finding needs to know whether a
-// session actually ran under `bypassPermissions`, and the evidence-ledger
-// trust boundary this pack already enforces for approval
-// (docs/okf/evidence-ledger-trust-boundary.md) applies here too: a fact
-// the AGENT can write (a ledger row, a report field) proves nothing about
-// what the harness process observed. `permission_mode` on the PreToolUse
-// payload is a T1 signal (composed by Claude Code itself, not by the
-// model: same trust class the auto-approval path already relies on,
-// see the ADR's "Signal sources per harness" table), so the write side
-// here is the SAME hook, at the SAME point in its decision order, using
-// the SAME field. The record carries no payload content beyond the
-// mode itself: (sessionId, permissionMode, observedAt), nothing else.
-//
-// WHERE IT IS WRITTEN. `hook-pre-tool-use.ts` calls
-// `recordPermissionModeObservation` once per PreToolUse invocation that
-// reaches the same point `attemptAutoApproval` already runs at
-// (auto-approve-path.ts's module header explains why that point matters:
-// every call that reaches it has already been declined by the signed
-// marker check, the read-only Bash exemption, the recovery-commit
-// exemption, and the escape `ask`: so it is exactly the call that would
-// otherwise need approval). A session whose first tool call already
-// matches a still-valid marker never reaches this point and is therefore
-// never observed for that session; this is an accepted coverage gap
-// (documented at the call site), not a silent failure: the finding this
-// feeds targets the ADR's Mac-mini incident shape (a marker EXPIRED or
-// never existed, the call fell through to the block/auto-approve
-// attempt, and `permission_mode` WAS on the payload at that instant),
-// not perfect per-session coverage.
-//
-// FAIL-OPEN ON WRITE ERRORS. A failed write is one stderr warning line,
-// never escalated into a block: this is telemetry for `harness doctor`,
-// never a gate input, and the write happens on the same fail-open
-// posture every other best-effort write in this pack already uses
-// (`writePendingApproval`, the marker writers).
-//
-// UNSIGNED: ADVISORY ONLY, NOT PROOF (review round 3, F2). Unlike the
-// approval marker (`markers.ts`), this record is NOT HMAC-signed. It is
-// written by the hook PROCESS from whatever `session_id`/`permission_mode`
-// appear on the invocation's PreToolUse payload; that only proves the
-// hook was invoked with that payload, not that any particular session
-// actually ran under that mode: an already-approved session (or anything
-// else able to invoke `harness pack hook pre-tool-use` with crafted
-// stdin) can write, or forge, an observation. That is why
-// `checkBypassWithoutAutoApprove` (bypass-without-auto-approve.ts) is
-// wired as an advisory `harness doctor` finding ONLY: it can never gate a
-// tool call or mint an approval, and the operator who reads the finding
-// is the one who decides what to do about it. Signing the observation
-// was considered and rejected, not deferred: a signature would only
-// prove the hook signed the record, not that the named session actually
-// ran under that mode, and it would open a second, unconditional
-// signing surface for the marker-signing key (not a path to mint an
-// approval marker, which stays namespaced by markerId). See
-// docs/decisions/2026-08-27-ug-auto-mode-approval.md's "Amendment:
-// permission-mode observation stays unsigned" for the full reasoning
-// and the reopen criterion.
-import * as path from "node:path";
-import { atomicWriteFile } from "../../../io/atomic-write.js";
-import { readJsonDirEntriesRejectingSymlinks } from "../../../io/read-json-dir-entries.js";
-import { rejectMalformedSessionId } from "../../../runtime/reject-malformed-session-id.js";
-export const PERMISSION_MODE_OBSERVATION_DIRNAME = ".permission-mode-observations";
-/**
- * `sessionId` is validated with the SAME `rejectMalformedSessionId` used
- * for the approval marker path (`markers.ts`'s `approvalMarkerPathFor`):
- * a value carrying `/`, `\`, `..`, or that is empty/blank throws rather
- * than being joined into the path (review round 3, F1: the earlier
- * version of this function trusted the caller's own empty-string check
- * and joined `sessionId` verbatim, letting a crafted `session_id` on the
- * hook's stdin write outside `<generatedDir>/.permission-mode-observations/`).
- */
-export function permissionModeObservationPathFor(generatedDir, sessionId) {
-    rejectMalformedSessionId(sessionId);
-    return path.join(generatedDir, PERMISSION_MODE_OBSERVATION_DIRNAME, sessionId);
-}
-/**
- * Best-effort write/update of the per-session observation.
- *
- * `permissionMode` must be a non-empty string; any other shape (absent,
- * non-string, empty) is a silent no-op: there is nothing to observe.
- * `sessionId` is NOT trusted as pre-validated (review round 3, F1): the
- * caller (`hook-pre-tool-use.ts`) only rejects an EMPTY session id
- * before this is reached, and `session_id` on the hook's stdin payload
- * is otherwise attacker-controllable input to a CLI invocation, not a
- * value this function may assume is already path-safe. A malformed id
- * (path separators, `..`, blank) makes `permissionModeObservationPathFor`
- * throw; that throw is treated exactly like any other write failure
- * below: one `stderr` warning, never escalated into a block, never
- * thrown out of this function.
- */
-export function recordPermissionModeObservation(generatedDir, sessionId, permissionMode, stderr, now = () => new Date()) {
-    if (typeof permissionMode !== "string" || permissionMode.length === 0)
-        return;
-    if (sessionId.length === 0)
-        return;
-    const record = {
-        sessionId,
-        permissionMode,
-        observedAt: now().toISOString(),
-    };
-    try {
-        atomicWriteFile(permissionModeObservationPathFor(generatedDir, sessionId), `${JSON.stringify(record)}\n`);
-    }
-    catch (err) {
-        stderr.write(`harness pack hook: failed to write permission-mode observation for session ${sanitizeForDisplay(sessionId)} (${err.message}), continuing.\n`);
-    }
-}
-function isValidObservation(value) {
-    if (value === null || typeof value !== "object" || Array.isArray(value))
-        return false;
-    const obj = value;
-    return (typeof obj["sessionId"] === "string" &&
-        typeof obj["permissionMode"] === "string" &&
-        typeof obj["observedAt"] === "string" &&
-        !Number.isNaN(Date.parse(obj["observedAt"])));
-}
-/** Cap applied to a sanitized `sessionId` before it reaches doctor output. */
-const DISPLAY_VALUE_MAX_LENGTH = 200;
-/**
- * Strip C0/DEL control characters (including ESC, which could otherwise
- * smuggle an ANSI escape sequence into a terminal) and cap the length,
- * mirroring `persisted-reports.ts`'s `sanitizeDetailValue` for the same
- * reason: `bypass-without-auto-approve.ts` embeds an observation's
- * `sessionId` directly into a doctor finding's `message`, the surface an
- * operator reads (review round 3, F1). This is independent of
- * `permissionModeObservationPathFor`'s write-time
- * `rejectMalformedSessionId` guard: that guard rejects path-traversal
- * shapes, not control characters, and a directory entry's on-disk
- * filename (or the `sessionId` field inside it) is never itself
- * constrained to be display-safe: POSIX filenames may contain any byte
- * but `/` and NUL, and the JSON body's `sessionId` field is a plain
- * string with no such constraint either.
- */
-export function sanitizeForDisplay(value) {
-    const flattened = value.replace(/[\x00-\x1f\x7f]/g, " ");
-    return flattened.length > DISPLAY_VALUE_MAX_LENGTH
-        ? `${flattened.slice(0, DISPLAY_VALUE_MAX_LENGTH)}...`
-        : flattened;
-}
-/**
- * Read-side: the newest `windowSize` per-session observations, newest
- * first by `observedAt`. Mirrors `ug-auto-approvals.ts`'s own
- * read-and-window convention (missing dir / empty dir / all-unreadable
- * all resolve to an empty-ish result, never throw: this is a doctor
- * read, not a gate decision). Every returned `sessionId` has already
- * been through {@link sanitizeForDisplay}, so every consumer (today,
- * `bypass-without-auto-approve.ts`'s finding `message`) gets a
- * doctor-output-safe value without having to sanitize it itself.
- */
-export function listPermissionModeObservations(generatedDir, opts) {
-    const dir = path.join(generatedDir, PERMISSION_MODE_OBSERVATION_DIRNAME);
-    const { dirPresent, entries: readable, unreadableCount } = readJsonDirEntriesRejectingSymlinks(dir, {
-        parse: (raw) => isValidObservation(raw)
-            ? {
-                ...raw,
-                sessionId: sanitizeForDisplay(raw.sessionId),
-                // `observedAt` only has to satisfy Date.parse, which accepts
-                // parenthesised trailing text, so it is display-sanitised too
-                // (review round 3: a crafted timestamp reached doctor output raw).
-                observedAt: sanitizeForDisplay(raw.observedAt),
-            }
-            : null,
-    });
-    readable.sort((a, b) => Date.parse(b.observedAt) - Date.parse(a.observedAt));
-    return {
-        dirPresent,
-        entries: readable.slice(0, opts.windowSize),
-        unreadableCount,
-    };
-}
-//# sourceMappingURL=permission-mode-observations.js.map

package/dist/policy-packs/builtin/understanding-before-execution/permission-mode-observations.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission-mode-observations.js","sourceRoot":"","sources":["../../../../src/policy-packs/builtin/understanding-before-execution/permission-mode-observations.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,mEAAmE;AACnE,wDAAwD;AACxD,8DAA8D;AAC9D,EAAE;AACF,uEAAuE;AACvE,mEAAmE;AACnE,0EAA0E;AAC1E,yDAAyD;AACzD,wEAAwE;AACxE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,oEAAoE;AACpE,uEAAuE;AACvE,wEAAwE;AACxE,mEAAmE;AACnE,sEAAsE;AACtE,EAAE;AACF,oDAAoD;AACpD,wEAAwE;AACxE,+DAA+D;AAC/D,yEAAyE;AACzE,qEAAqE;AACrE,kEAAkE;AAClE,wEAAwE;AACxE,oEAAoE;AACpE,yEAAyE;AACzE,oEAAoE;AACpE,wEAAwE;AACxE,uEAAuE;AACvE,iEAAiE;AACjE,sEAAsE;AACtE,oCAAoC;AACpC,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,kEAAkE;AAClE,kEAAkE;AAClE,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,2EAA2E;AAC3E,sEAAsE;AACtE,sEAAsE;AACtE,yEAAyE;AACzE,oEAAoE;AACpE,0DAA0D;AAC1D,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,sEAAsE;AACtE,oEAAoE;AACpE,wEAAwE;AACxE,iEAAiE;AACjE,oEAAoE;AACpE,4DAA4D;AAC5D,mEAAmE;AACnE,qEAAqE;AACrE,4BAA4B;AAE5B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,mCAAmC,EAAE,MAAM,sCAAsC,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAE3F,MAAM,CAAC,MAAM,mCAAmC,GAAG,+BAA+B,CAAC;AAQnF;;;;;;;;GAQG;AACH,MAAM,UAAU,gCAAgC,CAC9C,YAAoB,EACpB,SAAiB;IAEjB,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,+BAA+B,CAC7C,YAAoB,EACpB,SAAiB,EACjB,cAAuB,EACvB,MAAqC,EACrC,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;IAElC,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACnC,MAAM,MAAM,GAA8B;QACxC,SAAS;QACT,cAAc;QACd,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;KAChC,CAAC;IACF,IAAI,CAAC;QACH,eAAe,CACb,gCAAgC,CAAC,YAAY,EAAE,SAAS,CAAC,EACzD,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAC9B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CACV,8EAA8E,kBAAkB,CAAC,SAAS,CAAC,KACxG,GAAa,CAAC,OACjB,kBAAkB,CACnB,CAAC;IACJ,CAAC;AACH,CAAC;AAWD,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,CACL,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ;QACpC,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,QAAQ;QACzC,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ;QACrC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAW,CAAC,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,SAAS,CAAC,MAAM,GAAG,wBAAwB;QAChD,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,KAAK;QACtD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAC5C,YAAoB,EACpB,IAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,mCAAmC,CAAC,CAAC;IAEzE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,GACtD,mCAAmC,CAA4B,GAAG,EAAE;QAClE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,kBAAkB,CAAC,GAAG,CAAC;YACrB,CAAC,CAAC;gBACE,GAAG,GAAG;gBACN,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC;gBAC5C,6DAA6D;gBAC7D,8DAA8D;gBAC9D,mEAAmE;gBACnE,UAAU,EAAE,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC;aAC/C;YACH,CAAC,CAAC,IAAI;KACX,CAAC,CAAC;IAEL,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAE7E,OAAO;QACL,UAAU;QACV,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC;QAC3C,eAAe;KAChB,CAAC;AACJ,CAAC"}