@lleverage-ai/agent-sdk 0.0.1

package/dist/security/index.d.ts

@@ -0,0 +1,179 @@
+/**
+ * Security policy presets for agent configuration.
+ *
+ * This module provides security policy presets that bundle together sandbox configuration,
+ * permission modes, and hook settings to enforce different security levels. The presets help
+ * developers quickly configure agents for different environments (development, CI, production)
+ * without manually configuring each security control.
+ *
+ * @example
+ * ```typescript
+ * import { createAgent } from "@lleverage-ai/agent-sdk";
+ * import { applySecurityPolicy, SecurityPolicyPreset } from "@lleverage-ai/agent-sdk/security";
+ *
+ * // Create an agent with production security settings
+ * const agent = createAgent({
+ *   model,
+ *   ...applySecurityPolicy("production"),
+ * });
+ *
+ * // Or customize a preset
+ * const customPolicy = applySecurityPolicy("ci", {
+ *   sandbox: { timeout: 60000 },
+ *   permissionMode: "plan",
+ * });
+ * ```
+ *
+ * @packageDocumentation
+ */
+import type { LocalSandboxOptions } from "../backends/sandbox.js";
+import { LocalSandbox } from "../backends/sandbox.js";
+import type { HookRegistration, PermissionMode } from "../types.js";
+/**
+ * File write patterns that should be blocked when acceptEdits mode is active.
+ * These patterns match common shell operations that perform file writes,
+ * which would bypass the file edit tool permission checks.
+ *
+ * @internal
+ */
+export declare const ACCEPT_EDITS_BLOCKED_PATTERNS: RegExp[];
+/**
+ * Security policy configuration that bundles sandbox, permission, and hook settings.
+ *
+ * This type combines multiple security controls into a single policy that can be
+ * applied to an agent. Policies can be created from presets or customized.
+ *
+ * @example
+ * ```typescript
+ * const policy: SecurityPolicy = {
+ *   sandbox: { allowDangerous: false, timeout: 30000 },
+ *   permissionMode: "default",
+ *   disallowedTools: ["bash"],
+ *   hooks: { PreToolUse: [auditHook] },
+ * };
+ * ```
+ *
+ * @category Security
+ */
+export interface SecurityPolicy {
+    /**
+     * Sandbox configuration for command execution security.
+     */
+    sandbox?: LocalSandboxOptions;
+    /**
+     * Permission mode for tool execution control.
+     */
+    permissionMode?: PermissionMode;
+    /**
+     * Tools that are explicitly disallowed.
+     */
+    disallowedTools?: string[];
+    /**
+     * Tools that are explicitly allowed (all others blocked).
+     */
+    allowedTools?: string[];
+    /**
+     * Hook registrations for lifecycle events.
+     */
+    hooks?: HookRegistration;
+    /**
+     * When true and permissionMode is "acceptEdits", automatically configures the
+     * sandbox to block shell-based file operations (e.g., echo > file, rm, mv).
+     * This prevents bash commands from bypassing the acceptEdits permission checks.
+     *
+     * @defaultValue true
+     */
+    blockShellFileOps?: boolean;
+}
+/**
+ * Preset names for common security levels.
+ *
+ * - `development`: Permissive settings for rapid iteration
+ * - `ci`: Restrictive settings for CI/CD environments
+ * - `production`: Balanced settings for production deployments
+ * - `readonly`: Maximum restrictions - no writes, no commands
+ *
+ * @category Security
+ */
+export type SecurityPolicyPreset = "development" | "ci" | "production" | "readonly";
+/**
+ * Apply a security policy preset to agent options.
+ *
+ * This function returns a partial AgentOptions object that can be spread into
+ * createAgent(). It configures the sandbox, permission mode, tool restrictions,
+ * and hooks according to the selected preset.
+ *
+ * When permissionMode is "acceptEdits" and blockShellFileOps is true (default),
+ * the sandbox will be automatically configured to block shell-based file operations
+ * like `echo > file`, `rm`, `mv`, etc. This prevents bash commands from bypassing
+ * the acceptEdits permission checks.
+ *
+ * @param preset - The security preset to apply
+ * @param overrides - Optional policy overrides to customize the preset
+ * @returns Partial agent options with security settings applied
+ *
+ * @example
+ * ```typescript
+ * // Apply production preset
+ * const agent = createAgent({
+ *   model,
+ *   ...applySecurityPolicy("production"),
+ * });
+ *
+ * // Apply CI preset with custom timeout
+ * const ciAgent = createAgent({
+ *   model,
+ *   ...applySecurityPolicy("ci", {
+ *     sandbox: { timeout: 120000 },
+ *   }),
+ * });
+ *
+ * // Apply readonly preset for audit-only agent
+ * const auditAgent = createAgent({
+ *   model,
+ *   ...applySecurityPolicy("readonly"),
+ * });
+ *
+ * // Use acceptEdits mode with shell file operation blocking
+ * const editAgent = createAgent({
+ *   model,
+ *   ...applySecurityPolicy("development", {
+ *     permissionMode: "acceptEdits",
+ *     blockShellFileOps: true, // default, blocks bash file ops
+ *   }),
+ * });
+ * ```
+ *
+ * @category Security
+ */
+export declare function applySecurityPolicy(preset: SecurityPolicyPreset, overrides?: Partial<SecurityPolicy>): {
+    backend: LocalSandbox;
+    permissionMode?: PermissionMode;
+    allowedTools?: string[];
+    disallowedTools?: string[];
+    hooks?: HookRegistration;
+};
+/**
+ * Helper function to get sandbox options that block shell-based file operations.
+ * Use this when you want to enable "acceptEdits" permission mode while preventing
+ * bash commands from bypassing the file edit restrictions.
+ *
+ * @param baseOptions - Optional base sandbox options to extend
+ * @returns Sandbox options with file operation blocking enabled
+ *
+ * @example
+ * ```typescript
+ * import { LocalSandbox } from "@lleverage-ai/agent-sdk/backends";
+ * import { getSandboxOptionsForAcceptEdits } from "@lleverage-ai/agent-sdk/security";
+ *
+ * const agent = createAgent({
+ *   model,
+ *   backend: new LocalSandbox(getSandboxOptionsForAcceptEdits()),
+ *   permissionMode: "acceptEdits",
+ * });
+ * ```
+ *
+ * @category Security
+ */
+export declare function getSandboxOptionsForAcceptEdits(baseOptions?: LocalSandboxOptions): LocalSandboxOptions;
+//# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,EAAE,MAAM,EAyBjD,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAE9B;;OAEG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB;;OAEG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAEzB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG,IAAI,GAAG,YAAY,GAAG,UAAU,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,oBAAoB,EAC5B,SAAS,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAClC;IACD,OAAO,EAAE,YAAY,CAAC;IACtB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B,CAmCA;AA4JD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,+BAA+B,CAC7C,WAAW,CAAC,EAAE,mBAAmB,GAChC,mBAAmB,CAMrB"}

package/dist/security/index.js

@@ -0,0 +1,323 @@
+/**
+ * Security policy presets for agent configuration.
+ *
+ * This module provides security policy presets that bundle together sandbox configuration,
+ * permission modes, and hook settings to enforce different security levels. The presets help
+ * developers quickly configure agents for different environments (development, CI, production)
+ * without manually configuring each security control.
+ *
+ * @example
+ * ```typescript
+ * import { createAgent } from "@lleverage-ai/agent-sdk";
+ * import { applySecurityPolicy, SecurityPolicyPreset } from "@lleverage-ai/agent-sdk/security";
+ *
+ * // Create an agent with production security settings
+ * const agent = createAgent({
+ *   model,
+ *   ...applySecurityPolicy("production"),
+ * });
+ *
+ * // Or customize a preset
+ * const customPolicy = applySecurityPolicy("ci", {
+ *   sandbox: { timeout: 60000 },
+ *   permissionMode: "plan",
+ * });
+ * ```
+ *
+ * @packageDocumentation
+ */
+import { LocalSandbox } from "../backends/sandbox.js";
+/**
+ * File write patterns that should be blocked when acceptEdits mode is active.
+ * These patterns match common shell operations that perform file writes,
+ * which would bypass the file edit tool permission checks.
+ *
+ * @internal
+ */
+export const ACCEPT_EDITS_BLOCKED_PATTERNS = [
+    // Output redirection
+    />/,
+    // File deletion and movement
+    /\brm\b/i,
+    /\bmv\b/i,
+    // File creation and modification
+    /\btouch\b/i,
+    /\bcp\b/i,
+    // Directory operations
+    /\bmkdir\b/i,
+    /\brmdir\b/i,
+    // File permissions
+    /\bchmod\b/i,
+    /\bchown\b/i,
+    // Link creation
+    /\bln\b/i,
+    // Disk operations
+    /\bdd\b/i,
+    // Text editor invocations that might modify files
+    /\b(nano|vi|vim|emacs|sed -i)\b/i,
+    // Package managers that modify filesystem
+    /\bnpm\s+(install|uninstall|update)/i,
+    /\byarn\s+(add|remove)/i,
+    /\bpip\s+(install|uninstall)/i,
+];
+/**
+ * Apply a security policy preset to agent options.
+ *
+ * This function returns a partial AgentOptions object that can be spread into
+ * createAgent(). It configures the sandbox, permission mode, tool restrictions,
+ * and hooks according to the selected preset.
+ *
+ * When permissionMode is "acceptEdits" and blockShellFileOps is true (default),
+ * the sandbox will be automatically configured to block shell-based file operations
+ * like `echo > file`, `rm`, `mv`, etc. This prevents bash commands from bypassing
+ * the acceptEdits permission checks.
+ *
+ * @param preset - The security preset to apply
+ * @param overrides - Optional policy overrides to customize the preset
+ * @returns Partial agent options with security settings applied
+ *
+ * @example
+ * ```typescript
+ * // Apply production preset
+ * const agent = createAgent({
+ *   model,
+ *   ...applySecurityPolicy("production"),
+ * });
+ *
+ * // Apply CI preset with custom timeout
+ * const ciAgent = createAgent({
+ *   model,
+ *   ...applySecurityPolicy("ci", {
+ *     sandbox: { timeout: 120000 },
+ *   }),
+ * });
+ *
+ * // Apply readonly preset for audit-only agent
+ * const auditAgent = createAgent({
+ *   model,
+ *   ...applySecurityPolicy("readonly"),
+ * });
+ *
+ * // Use acceptEdits mode with shell file operation blocking
+ * const editAgent = createAgent({
+ *   model,
+ *   ...applySecurityPolicy("development", {
+ *     permissionMode: "acceptEdits",
+ *     blockShellFileOps: true, // default, blocks bash file ops
+ *   }),
+ * });
+ * ```
+ *
+ * @category Security
+ */
+export function applySecurityPolicy(preset, overrides) {
+    // Get base policy for preset
+    const basePolicy = getPresetPolicy(preset);
+    // Merge with overrides
+    const policy = {
+        sandbox: { ...basePolicy.sandbox, ...overrides?.sandbox },
+        permissionMode: overrides?.permissionMode ?? basePolicy.permissionMode,
+        allowedTools: overrides?.allowedTools ?? basePolicy.allowedTools,
+        disallowedTools: overrides?.disallowedTools ?? basePolicy.disallowedTools,
+        hooks: overrides?.hooks ?? basePolicy.hooks,
+        blockShellFileOps: overrides?.blockShellFileOps ?? basePolicy.blockShellFileOps ?? true,
+    };
+    // If acceptEdits mode is enabled and blockShellFileOps is true,
+    // add shell file operation patterns to blocked commands
+    if (policy.permissionMode === "acceptEdits" && policy.blockShellFileOps) {
+        const existingBlocked = policy.sandbox?.blockedCommands ?? [];
+        policy.sandbox = {
+            ...policy.sandbox,
+            blockedCommands: [...existingBlocked, ...ACCEPT_EDITS_BLOCKED_PATTERNS],
+        };
+    }
+    // Create sandbox backend
+    const backend = new LocalSandbox(policy.sandbox);
+    // Return agent options
+    return {
+        backend,
+        permissionMode: policy.permissionMode,
+        allowedTools: policy.allowedTools,
+        disallowedTools: policy.disallowedTools,
+        hooks: policy.hooks,
+    };
+}
+/**
+ * Get the security policy configuration for a preset.
+ * @internal
+ */
+function getPresetPolicy(preset) {
+    switch (preset) {
+        case "development":
+            return getDevelopmentPolicy();
+        case "ci":
+            return getCiPolicy();
+        case "production":
+            return getProductionPolicy();
+        case "readonly":
+            return getReadOnlyPolicy();
+        default:
+            throw new Error(`Unknown security preset: ${preset}`);
+    }
+}
+/**
+ * Development preset - permissive settings for rapid iteration.
+ *
+ * Features:
+ * - Allows all commands (including dangerous ones)
+ * - 2 minute timeout
+ * - No tool restrictions
+ * - Default permission mode (prompts for unclear cases)
+ *
+ * @internal
+ */
+function getDevelopmentPolicy() {
+    return {
+        sandbox: {
+            allowDangerous: true,
+            timeout: 120000,
+            maxFileSizeMb: 100,
+        },
+        permissionMode: "default",
+    };
+}
+/**
+ * CI preset - restrictive settings for automated testing.
+ *
+ * Features:
+ * - Blocks dangerous commands (rm -rf, shutdown, etc.)
+ * - 5 minute timeout (for long test suites)
+ * - Blocks network-related operations
+ * - Plan mode (no tool execution, analysis only)
+ *
+ * @internal
+ */
+function getCiPolicy() {
+    return {
+        sandbox: {
+            allowDangerous: false,
+            timeout: 300000, // 5 minutes
+            maxFileSizeMb: 50,
+            blockedCommands: [
+                // Network operations that might be unstable in CI
+                /curl/i,
+                /wget/i,
+                /git\s+push/i,
+                /npm\s+publish/i,
+                /docker\s+push/i,
+            ],
+        },
+        permissionMode: "plan", // No tool execution in CI
+        disallowedTools: [
+            "bash", // Block direct bash access
+            "execute", // Block generic execute
+        ],
+    };
+}
+/**
+ * Production preset - balanced settings for production deployments.
+ *
+ * Features:
+ * - Blocks dangerous commands
+ * - 1 minute timeout (fail fast)
+ * - Limited file operations (10MB max)
+ * - Default permission mode with tool restrictions
+ * - Blocks destructive operations
+ *
+ * @internal
+ */
+function getProductionPolicy() {
+    return {
+        sandbox: {
+            allowDangerous: false,
+            timeout: 60000, // 1 minute
+            maxFileSizeMb: 10,
+            blockedCommands: [
+                // Block package management (immutable production)
+                /npm\s+(install|uninstall|update|publish)/i,
+                /yarn\s+(add|remove|upgrade|publish)/i,
+                /pip\s+(install|uninstall)/i,
+                // Block git writes
+                /git\s+(push|commit|merge|rebase)/i,
+            ],
+        },
+        permissionMode: "default",
+        disallowedTools: [
+            "write", // Block file writes
+            "edit", // Block file edits
+        ],
+    };
+}
+/**
+ * Read-only preset - maximum restrictions for audit-only agents.
+ *
+ * Features:
+ * - Blocks all write and modification commands
+ * - 30 second timeout
+ * - Very limited file operations (read-only, 5MB max)
+ * - Plan mode (no tool execution)
+ * - Blocks all write operations
+ *
+ * @internal
+ */
+function getReadOnlyPolicy() {
+    return {
+        sandbox: {
+            allowDangerous: false,
+            timeout: 30000, // 30 seconds
+            maxFileSizeMb: 5,
+            // Use blockedCommands from LocalSandbox.readOnly() pattern
+            blockedCommands: [
+                /\brm\b/i,
+                /\bmv\b/i,
+                /\bcp\b/i,
+                /\btouch\b/i,
+                /\bmkdir\b/i,
+                /\brmdir\b/i,
+                /\bchmod\b/i,
+                /\bchown\b/i,
+                /\bln\b/i,
+                />/,
+                /\bdd\b/i,
+                /\bwrite\b/i,
+                /\bnpm\s+(install|uninstall|update|publish)/i,
+                /\byarn\s+(add|remove|upgrade|publish)/i,
+                /\bpip\s+(install|uninstall)/i,
+                /\bgit\s+(push|commit|merge|rebase)/i,
+            ],
+        },
+        permissionMode: "plan", // No tool execution
+        disallowedTools: ["bash", "execute", "write", "edit"],
+        allowedTools: ["read", "glob", "grep", "ls"],
+    };
+}
+/**
+ * Helper function to get sandbox options that block shell-based file operations.
+ * Use this when you want to enable "acceptEdits" permission mode while preventing
+ * bash commands from bypassing the file edit restrictions.
+ *
+ * @param baseOptions - Optional base sandbox options to extend
+ * @returns Sandbox options with file operation blocking enabled
+ *
+ * @example
+ * ```typescript
+ * import { LocalSandbox } from "@lleverage-ai/agent-sdk/backends";
+ * import { getSandboxOptionsForAcceptEdits } from "@lleverage-ai/agent-sdk/security";
+ *
+ * const agent = createAgent({
+ *   model,
+ *   backend: new LocalSandbox(getSandboxOptionsForAcceptEdits()),
+ *   permissionMode: "acceptEdits",
+ * });
+ * ```
+ *
+ * @category Security
+ */
+export function getSandboxOptionsForAcceptEdits(baseOptions) {
+    const existingBlocked = baseOptions?.blockedCommands ?? [];
+    return {
+        ...baseOptions,
+        blockedCommands: [...existingBlocked, ...ACCEPT_EDITS_BLOCKED_PATTERNS],
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAa;IACrD,qBAAqB;IACrB,GAAG;IACH,6BAA6B;IAC7B,SAAS;IACT,SAAS;IACT,iCAAiC;IACjC,YAAY;IACZ,SAAS;IACT,uBAAuB;IACvB,YAAY;IACZ,YAAY;IACZ,mBAAmB;IACnB,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,SAAS;IACT,kBAAkB;IAClB,SAAS;IACT,kDAAkD;IAClD,iCAAiC;IACjC,0CAA0C;IAC1C,qCAAqC;IACrC,wBAAwB;IACxB,8BAA8B;CAC/B,CAAC;AAoEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA4B,EAC5B,SAAmC;IAQnC,6BAA6B;IAC7B,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAE3C,uBAAuB;IACvB,MAAM,MAAM,GAAmB;QAC7B,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE;QACzD,cAAc,EAAE,SAAS,EAAE,cAAc,IAAI,UAAU,CAAC,cAAc;QACtE,YAAY,EAAE,SAAS,EAAE,YAAY,IAAI,UAAU,CAAC,YAAY;QAChE,eAAe,EAAE,SAAS,EAAE,eAAe,IAAI,UAAU,CAAC,eAAe;QACzE,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,UAAU,CAAC,KAAK;QAC3C,iBAAiB,EAAE,SAAS,EAAE,iBAAiB,IAAI,UAAU,CAAC,iBAAiB,IAAI,IAAI;KACxF,CAAC;IAEF,gEAAgE;IAChE,wDAAwD;IACxD,IAAI,MAAM,CAAC,cAAc,KAAK,aAAa,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACxE,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,EAAE,eAAe,IAAI,EAAE,CAAC;QAC9D,MAAM,CAAC,OAAO,GAAG;YACf,GAAG,MAAM,CAAC,OAAO;YACjB,eAAe,EAAE,CAAC,GAAG,eAAe,EAAE,GAAG,6BAA6B,CAAC;SACxE,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEjD,uBAAuB;IACvB,OAAO;QACL,OAAO;QACP,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,MAA4B;IACnD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,aAAa;YAChB,OAAO,oBAAoB,EAAE,CAAC;QAChC,KAAK,IAAI;YACP,OAAO,WAAW,EAAE,CAAC;QACvB,KAAK,YAAY;YACf,OAAO,mBAAmB,EAAE,CAAC;QAC/B,KAAK,UAAU;YACb,OAAO,iBAAiB,EAAE,CAAC;QAC7B;YACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,oBAAoB;IAC3B,OAAO;QACL,OAAO,EAAE;YACP,cAAc,EAAE,IAAI;YACpB,OAAO,EAAE,MAAM;YACf,aAAa,EAAE,GAAG;SACnB;QACD,cAAc,EAAE,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,WAAW;IAClB,OAAO;QACL,OAAO,EAAE;YACP,cAAc,EAAE,KAAK;YACrB,OAAO,EAAE,MAAM,EAAE,YAAY;YAC7B,aAAa,EAAE,EAAE;YACjB,eAAe,EAAE;gBACf,kDAAkD;gBAClD,OAAO;gBACP,OAAO;gBACP,aAAa;gBACb,gBAAgB;gBAChB,gBAAgB;aACjB;SACF;QACD,cAAc,EAAE,MAAM,EAAE,0BAA0B;QAClD,eAAe,EAAE;YACf,MAAM,EAAE,2BAA2B;YACnC,SAAS,EAAE,wBAAwB;SACpC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,mBAAmB;IAC1B,OAAO;QACL,OAAO,EAAE;YACP,cAAc,EAAE,KAAK;YACrB,OAAO,EAAE,KAAK,EAAE,WAAW;YAC3B,aAAa,EAAE,EAAE;YACjB,eAAe,EAAE;gBACf,kDAAkD;gBAClD,2CAA2C;gBAC3C,sCAAsC;gBACtC,4BAA4B;gBAC5B,mBAAmB;gBACnB,mCAAmC;aACpC;SACF;QACD,cAAc,EAAE,SAAS;QACzB,eAAe,EAAE;YACf,OAAO,EAAE,oBAAoB;YAC7B,MAAM,EAAE,mBAAmB;SAC5B;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB;IACxB,OAAO;QACL,OAAO,EAAE;YACP,cAAc,EAAE,KAAK;YACrB,OAAO,EAAE,KAAK,EAAE,aAAa;YAC7B,aAAa,EAAE,CAAC;YAChB,2DAA2D;YAC3D,eAAe,EAAE;gBACf,SAAS;gBACT,SAAS;gBACT,SAAS;gBACT,YAAY;gBACZ,YAAY;gBACZ,YAAY;gBACZ,YAAY;gBACZ,YAAY;gBACZ,SAAS;gBACT,GAAG;gBACH,SAAS;gBACT,YAAY;gBACZ,6CAA6C;gBAC7C,wCAAwC;gBACxC,8BAA8B;gBAC9B,qCAAqC;aACtC;SACF;QACD,cAAc,EAAE,MAAM,EAAE,oBAAoB;QAC5C,eAAe,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC;QACrD,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,+BAA+B,CAC7C,WAAiC;IAEjC,MAAM,eAAe,GAAG,WAAW,EAAE,eAAe,IAAI,EAAE,CAAC;IAC3D,OAAO;QACL,GAAG,WAAW;QACd,eAAe,EAAE,CAAC,GAAG,eAAe,EAAE,GAAG,6BAA6B,CAAC;KACxE,CAAC;AACJ,CAAC"}