@luckydraw/cumulus 1.0.6 → 1.0.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,12 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## v1.0.7
|
|
4
|
+
|
|
5
|
+
Patch release. Closes a blind spot in how an allow-list is turned into a restriction.
|
|
6
|
+
|
|
7
|
+
- A thread's allow-list is enforced by denying every tool that is not on it, which requires knowing the complete set of tool names. That set was read from what the Claude CLI advertises at startup, and the CLI recognises nine permission names it does not advertise — among them `Glob` and `Grep`, both of which can read files. A name the gateway never knew about was never denied, however the thread was configured. Those names are now included, so an allow-listed thread is restricted to what it lists.
|
|
8
|
+
- No change for a thread without an allow-list: the tool inventory is only consulted when compiling one.
|
|
9
|
+
|
|
3
10
|
## v1.0.6
|
|
4
11
|
|
|
5
12
|
Patch release. Closes a gap in the file-reading restriction for threads that use an allow-list.
|
|
@@ -31,12 +31,45 @@
|
|
|
31
31
|
* constrained thread is allowed to reach.
|
|
32
32
|
*/
|
|
33
33
|
/**
|
|
34
|
-
* Built-in Claude CLI tools
|
|
34
|
+
* Built-in Claude CLI tools.
|
|
35
35
|
*
|
|
36
36
|
* This is a FLOOR for the inventory, not a fallback — see the module comment. Adding a
|
|
37
37
|
* name here can only ever deny more on an allowlisted thread; it has no effect on a
|
|
38
38
|
* thread without `allowedTools`. Safe to update from a probe of a newer CLI.
|
|
39
|
+
*
|
|
40
|
+
* TWO CLASSES OF NAME LIVE HERE, and the second is why the seed cannot be replaced by
|
|
41
|
+
* the probe (@pursuit, 2026-08-15):
|
|
42
|
+
*
|
|
43
|
+
* 1. Names `system:init` advertises in `tools[]` (29 on CLI 2.1.217). The probe finds
|
|
44
|
+
* these, so for this class the seed is merely a floor against a short probe.
|
|
45
|
+
*
|
|
46
|
+
* 2. Names the CLI's PERMISSION system recognizes but `system:init` does NOT advertise
|
|
47
|
+
* (`ATTACHED_TOOL_NAMES` below). The probe is structurally blind to these, so the
|
|
48
|
+
* seed is the ONLY thing that puts them in the inventory — and the inventory is what
|
|
49
|
+
* the allowlist is subtracted from. Without them, an allowlisted thread would leave
|
|
50
|
+
* them ungoverned no matter what the author allowed.
|
|
51
|
+
*
|
|
52
|
+
* Measured on CLI 2.1.217: a deny rule for an unrecognized name prints `Permission deny
|
|
53
|
+
* rule "X" matches no known tool`; every name in class 2 is accepted silently, so the CLI
|
|
54
|
+
* does know them. `Grep`/`Glob` are additionally NOT callable on this version (a real
|
|
55
|
+
* turn asked for `Grep`, `ToolSearch select:Grep` returned nothing, and the model fell
|
|
56
|
+
* back to `Bash`) — they are listed as insurance against a CLI that restores them, not
|
|
57
|
+
* because they are reachable today.
|
|
58
|
+
*/
|
|
59
|
+
export declare const ADVERTISED_BUILTIN_TOOLS: readonly string[];
|
|
60
|
+
/**
|
|
61
|
+
* Class 2 (see SEED_BUILTIN_TOOLS): names the CLI's permission system accepts as deny
|
|
62
|
+
* rules but which `system:init` does not list in `tools[]`, so `probeBuiltinTools` can
|
|
63
|
+
* never discover them. Verified name-by-name against CLI 2.1.217 by checking for the
|
|
64
|
+
* "matches no known tool" warning; `MultiEdit`, `SlashCommand`, `NotebookRead` and `LS`
|
|
65
|
+
* were rejected and are therefore deliberately absent.
|
|
66
|
+
*
|
|
67
|
+
* `Agent` is the display name for the `Task` permission — denying `Task` already removes
|
|
68
|
+
* the subagent tool (measured: the model reported "the Agent tool is unavailable"), so
|
|
69
|
+
* this entry is redundant reinforcement, not the thing that closes that path.
|
|
39
70
|
*/
|
|
71
|
+
export declare const ATTACHED_TOOL_NAMES: readonly string[];
|
|
72
|
+
/** The inventory floor: everything the CLI advertises, plus everything it merely accepts. */
|
|
40
73
|
export declare const SEED_BUILTIN_TOOLS: readonly string[];
|
|
41
74
|
/**
|
|
42
75
|
* Tools served by the `gateway-agents` MCP server.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"tool-inventory.d.ts","sourceRoot":"","sources":["../../src/lib/tool-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAOH
|
|
1
|
+
{"version":3,"file":"tool-inventory.d.ts","sourceRoot":"","sources":["../../src/lib/tool-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAOH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EA8BrD,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAUhD,CAAC;AAEF,6FAA6F;AAC7F,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAG/C,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAgBtD,CAAC;AASF,mEAAmE;AACnE,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAI9C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAmFxE;AAKD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAgBvE;AAED,iEAAiE;AACjE,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIjD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EAAE,GAAG,SAAS,EAClC,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,kBAAkB,EAAE,MAAM,EAAE,GAAG,SAAS,GACvC,MAAM,EAAE,GAAG,SAAS,CAUtB;AAED,qFAAqF;AACrF,MAAM,WAAW,UAAU;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAKvE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,kBAAkB,CAUzE;AASD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAOvF"}
|
|
@@ -34,13 +34,32 @@ import { spawn } from 'child_process';
|
|
|
34
34
|
import * as os from 'os';
|
|
35
35
|
import { getToolDefinitions } from '../mcp/tool-handler.js';
|
|
36
36
|
/**
|
|
37
|
-
* Built-in Claude CLI tools
|
|
37
|
+
* Built-in Claude CLI tools.
|
|
38
38
|
*
|
|
39
39
|
* This is a FLOOR for the inventory, not a fallback — see the module comment. Adding a
|
|
40
40
|
* name here can only ever deny more on an allowlisted thread; it has no effect on a
|
|
41
41
|
* thread without `allowedTools`. Safe to update from a probe of a newer CLI.
|
|
42
|
+
*
|
|
43
|
+
* TWO CLASSES OF NAME LIVE HERE, and the second is why the seed cannot be replaced by
|
|
44
|
+
* the probe (@pursuit, 2026-08-15):
|
|
45
|
+
*
|
|
46
|
+
* 1. Names `system:init` advertises in `tools[]` (29 on CLI 2.1.217). The probe finds
|
|
47
|
+
* these, so for this class the seed is merely a floor against a short probe.
|
|
48
|
+
*
|
|
49
|
+
* 2. Names the CLI's PERMISSION system recognizes but `system:init` does NOT advertise
|
|
50
|
+
* (`ATTACHED_TOOL_NAMES` below). The probe is structurally blind to these, so the
|
|
51
|
+
* seed is the ONLY thing that puts them in the inventory — and the inventory is what
|
|
52
|
+
* the allowlist is subtracted from. Without them, an allowlisted thread would leave
|
|
53
|
+
* them ungoverned no matter what the author allowed.
|
|
54
|
+
*
|
|
55
|
+
* Measured on CLI 2.1.217: a deny rule for an unrecognized name prints `Permission deny
|
|
56
|
+
* rule "X" matches no known tool`; every name in class 2 is accepted silently, so the CLI
|
|
57
|
+
* does know them. `Grep`/`Glob` are additionally NOT callable on this version (a real
|
|
58
|
+
* turn asked for `Grep`, `ToolSearch select:Grep` returned nothing, and the model fell
|
|
59
|
+
* back to `Bash`) — they are listed as insurance against a CLI that restores them, not
|
|
60
|
+
* because they are reachable today.
|
|
42
61
|
*/
|
|
43
|
-
export const
|
|
62
|
+
export const ADVERTISED_BUILTIN_TOOLS = [
|
|
44
63
|
'Bash',
|
|
45
64
|
'CronCreate',
|
|
46
65
|
'CronDelete',
|
|
@@ -71,6 +90,33 @@ export const SEED_BUILTIN_TOOLS = [
|
|
|
71
90
|
'Workflow',
|
|
72
91
|
'Write',
|
|
73
92
|
];
|
|
93
|
+
/**
|
|
94
|
+
* Class 2 (see SEED_BUILTIN_TOOLS): names the CLI's permission system accepts as deny
|
|
95
|
+
* rules but which `system:init` does not list in `tools[]`, so `probeBuiltinTools` can
|
|
96
|
+
* never discover them. Verified name-by-name against CLI 2.1.217 by checking for the
|
|
97
|
+
* "matches no known tool" warning; `MultiEdit`, `SlashCommand`, `NotebookRead` and `LS`
|
|
98
|
+
* were rejected and are therefore deliberately absent.
|
|
99
|
+
*
|
|
100
|
+
* `Agent` is the display name for the `Task` permission — denying `Task` already removes
|
|
101
|
+
* the subagent tool (measured: the model reported "the Agent tool is unavailable"), so
|
|
102
|
+
* this entry is redundant reinforcement, not the thing that closes that path.
|
|
103
|
+
*/
|
|
104
|
+
export const ATTACHED_TOOL_NAMES = [
|
|
105
|
+
'Agent',
|
|
106
|
+
'AskUserQuestion',
|
|
107
|
+
'Artifact',
|
|
108
|
+
'BashOutput',
|
|
109
|
+
'ExitPlanMode',
|
|
110
|
+
'Glob',
|
|
111
|
+
'Grep',
|
|
112
|
+
'KillShell',
|
|
113
|
+
'TodoWrite',
|
|
114
|
+
];
|
|
115
|
+
/** The inventory floor: everything the CLI advertises, plus everything it merely accepts. */
|
|
116
|
+
export const SEED_BUILTIN_TOOLS = [
|
|
117
|
+
...ADVERTISED_BUILTIN_TOOLS,
|
|
118
|
+
...ATTACHED_TOOL_NAMES,
|
|
119
|
+
];
|
|
74
120
|
/**
|
|
75
121
|
* Tools served by the `gateway-agents` MCP server.
|
|
76
122
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"tool-inventory.js","sourceRoot":"","sources":["../../src/lib/tool-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D
|
|
1
|
+
{"version":3,"file":"tool-inventory.js","sourceRoot":"","sources":["../../src/lib/tool-inventory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IACzD,MAAM;IACN,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,MAAM;IACN,eAAe;IACf,cAAc;IACd,SAAS;IACT,cAAc;IACd,kBAAkB;IAClB,MAAM;IACN,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;IACb,OAAO;IACP,MAAM;IACN,YAAY;IACZ,SAAS;IACT,UAAU;IACV,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,WAAW;IACX,UAAU;IACV,OAAO;CACR,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD,OAAO;IACP,iBAAiB;IACjB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,MAAM;IACN,MAAM;IACN,WAAW;IACX,WAAW;CACZ,CAAC;AAEF,6FAA6F;AAC7F,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,GAAG,wBAAwB;IAC3B,GAAG,mBAAmB;CACvB,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,YAAY;IACZ,iBAAiB;IACjB,oBAAoB;IACpB,SAAS;IACT,aAAa;IACb,aAAa;IACb,WAAW;IACX,gBAAgB;IAChB,aAAa;IACb,SAAS;IACT,kBAAkB;IAClB,YAAY;IACZ,eAAe;IACf,iBAAiB;IACjB,cAAc;CACf,CAAC;AAEF,uEAAuE;AACvE,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AACjD,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAE/C,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,mEAAmE;AACnE,MAAM,UAAU,mBAAmB;IACjC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,sBAAsB,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,qBAAqB,KAAK,CAAC,EAAE,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAmB;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,UAAU,IAAI,QAAQ,CAAC;QACnC,kFAAkF;QAClF,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CACjC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAChC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,YAAY,CAC7D,CACF,CAAC;QAEF,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CACX,GAAG,EACH;gBACE,SAAS;gBACT,iBAAiB;gBACjB,aAAa;gBACb,WAAW;gBACX,mBAAmB;gBACnB,mBAAmB;gBACnB,GAAG;aACJ,EACD,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CACzE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,GAAG,GAAG,EAAE,CAAC;QAEb,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;YACD,EAAE,EAAE,CAAC;QACP,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC,EACvE,gBAAgB,CACjB,CAAC;QACF,mEAAmE;QACnE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEhB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxB,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBAAE,SAAS;gBAC3B,IAAI,MAA4D,CAAC;gBACjE,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM;oBAAE,SAAS;gBACpE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;oBACvC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;oBAChE,CAAC,CAAC,EAAE,CAAC;gBACP,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC;oBAC/D,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpD,sFAAsF;QACtF,iFAAiF;QACjF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mEAAmE;AACnE,IAAI,gBAAgB,GAA6B,IAAI,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,gBAAgB,GAAG,iBAAiB,CAAC,UAAU,CAAC;aAC7C,KAAK,CAAC,GAAG,CAAC,EAAE;YACX,OAAO,CAAC,IAAI,CACV,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK;gBACrF,wDAAwD,CAC3D,CAAC;YACF,OAAO,EAAc,CAAC;QACxB,CAAC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,EAAE;YACb,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,kBAAkB,EAAE,GAAG,MAAM,EAAE,GAAG,mBAAmB,EAAE,CAAC,CAAC,CAAC;YAC1F,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,uBAAuB;IACrC,gBAAgB,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAkC,EAClC,SAA4B,EAC5B,kBAAwC;IAExC,IAAI,CAAC,YAAY;QAAE,OAAO,kBAAkB,CAAC;IAE7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACnE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAkB;IAC5D,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAChG,IAAI,MAAM;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC/E,CAAC;AAgBD,MAAM,UAAU,kBAAkB,CAAC,MAAkB;IACnD,OAAO;QACL,qEAAqE;QACrE,yEAAyE;QACzE,2EAA2E;QAC3E,kCAAkC;QAClC,cAAc,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC;QACjF,UAAU,EAAE,aAAa,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACrD,UAAU,EAAE,aAAa,CAAC,eAAe,EAAE,MAAM,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,cAAc,GAAsD;IACxE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;IACtC,CAAC,YAAY,EAAE,YAAY,CAAC;IAC5B,CAAC,YAAY,EAAE,wBAAwB,CAAC;CACzC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,IAAwB;IAC7E,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC9F,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/C,OAAO,QAAQ;SACZ,KAAK,CAAC,MAAM,CAAC;SACb,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;SACvE,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC"}
|