@miller-tech/uap 2.21.3 → 2.36.4

package/dist/cli/sandbox.d.ts

@@ -6,14 +6,103 @@
  * the KERNEL — for Write/Edit tools, Bash, and any subprocess alike.
  *
  * This is the workdir boundary that `--dangerously-skip-permissions` cannot
- * bypass: the client can't escape the mount namespace. Network is shared so the
- * agent still reaches the local proxy (127.0.0.1:4000).
+ * bypass: the client can't escape the mount namespace.
+ *
+ * Bridge Phase 4 adds two authorities on top of that floor:
+ *
+ * - Per-session GRANTS (`uap sandbox grant`, D2): extra writable holes
+ *   recorded in a consent ledger (session-scoped, TTL-bounded, reason-
+ *   stated, audit-logged). The pre-P4 answer, `UAP_SANDBOX_ALLOW=path:path`,
+ *   still works but is UNRECORDED authority — it is honored for backwards
+ *   compatibility and named as unrecorded in the audit and the banner.
+ *
+ * - The NETWORK EGRESS BOUNDARY (`--net off`, D1): the sandbox gets its own
+ *   network namespace (--unshare-net) and NOTHING is brought up — no TCP,
+ *   no DNS, no loopback, no egress of any kind, at the kernel. This is the
+ *   complete boundary, for untrusted code, evals, and data-only work; model
+ *   access is impossible by design (a harness that needs the model will fail
+ *   loudly with connection refused).
+ *
+ *   Why there is no "--net proxy" (netns cut with a single hole to the
+ *   proxy): rootless Linux cannot express it. AF_UNIX pathname sockets are
+ *   NETWORK-NAMESPACE-SCOPED — a socket bind-mounted across the netns wall
+ *   is unreachable (empirically ECONNREFUSED, see ADR 0011), bwrap closes
+ *   every inherited fd (so no SCM_RIGHTS broker), and the userspace network
+ *   helpers (pasta/slirp4netns) provide no outbound port allowlist. A
+ *   boundary that only works when the right helper is present would be a
+ *   suggestion, not enforcement — so the shipped modes are the two REAL
+ *   ones: shared (no claim) and off (kernel-complete). The proxy's own
+ *   PROXY_SOCKET (0600 AF_UNIX) remains the model-path choke point for
+ *   every non-sandboxed surface; `uap proxy connect` re-serves it on local
+ *   TCP for clients that cannot speak AF_UNIX.
  *
  * Env:
  *   UAP_SANDBOX_WORKDIR   workdir to make writable (default: cwd)
- *   UAP_SANDBOX_ALLOW     extra writable paths, colon-separated
+ *   UAP_SANDBOX_ALLOW     extra writable paths, colon-separated (UNRECORDED)
+ *   UAP_SANDBOX_NET       'off' to default the net mode (shared otherwise)
+ *   UAP_SANDBOX_GRANTS    pins the grant ledger file (tests, odd layouts)
+ *   UAP_SANDBOX_AUDIT     pins the audit JSONL file (tests, odd layouts)
+ *   UAP_SANDBOX_GRANTS_OFF=1  resolve zero grants (escape hatch; the sandbox itself stays)
  *   UAP_SANDBOX_OFF=1     bypass the sandbox entirely (run the command as-is)
  */
+import { type ResolvedGrants } from '../policies/sandbox-grants.js';
+export type SandboxNetMode = 'shared' | 'off';
+export interface SandboxPlanInput {
+    /** Command to run inside the sandbox. */
+    command: string[];
+    /** Session id (scopes the grant lookup; empty = no grants). */
+    session?: string;
+    /** Net mode: 'shared' (default) or 'off' (the kernel egress boundary).
+     *  Undefined = fall back to `envNet`. */
+    net?: SandboxNetMode;
+    /** Writable workdir. */
+    workdir: string;
+    /** $HOME inside the sandbox. */
+    home: string;
+    /** Legacy unrecorded extra writable paths (UAP_SANDBOX_ALLOW, split). */
+    legacyAllow: string[];
+    /** Session-resolved grants (empty when the ledger is off/unreadable). */
+    grants: ResolvedGrants;
+    /** $UAP_SANDBOX_NET — the env default for the net mode (planner stays
+     *  input-only: the CALLER resolves process.env, so the plan is a pure
+     *  function of its inputs and unit tests need no env plumbing). */
+    envNet?: string;
+    /** $ANTHROPIC_CUSTOM_HEADERS — appended to, never clobbered. */
+    existingCustomHeaders?: string;
+    /** The grant-ledger file and audit JSONL, ro-bound into the namespace so
+     *  a sandboxed agent can neither plant rows nor forge audit lines (a
+     *  bind-mounted file cannot be unlinked or replaced inside the ns).
+     *  Resolved by the CALLER (they honor the env overrides). P4 security
+     *  review: without this, the consent store lives inside the writable
+     *  hole and consent is forgeable by the very thing it guards against. */
+    grantsLedgerPath?: string;
+    auditLogPath?: string;
+}
+export interface SandboxPlan {
+    /** Full bwrap argv (bwrap args first, then the inner command). */
+    argv: string[];
+    /** The command bwrap execs (argv tail) — the session command, verbatim. */
+    inner: string[];
+    /** Extra env delivered via --setenv. */
+    setenv: Record<string, string>;
+    /** The net mode actually engaged ('off' = kernel egress boundary). */
+    netMode: SandboxNetMode;
+    /** Granted writable holes actually opened for this run. */
+    grantedPaths: string[];
+    /** Legacy-env holes actually opened (resolved targets — what was bound). */
+    legacyBound: string[];
+    /** Legacy-env entries refused at plan time (raw spellings — over-broad
+     *  resolutions, or resolutions covering the trust-anchor dir). */
+    legacyRefused: string[];
+    /** Human-readable lines for the launch banner (colored at the print site). */
+    notes: string[];
+}
+/** Compute the bwrap invocation. Pure: a function of its inputs only — the
+ *  CALLER resolves process.env into `envNet`/`existingCustomHeaders`. */
+export declare function planSandbox(input: SandboxPlanInput): {
+    plan?: SandboxPlan;
+    error?: string;
+};
 /**
  * Build the ANTHROPIC_CUSTOM_HEADERS value for a sandboxed session: append the
  * `X-Uap-Sandbox: 1` marker (which the proxy uses to strip sandbox-unreachable
@@ -22,5 +111,13 @@
  * (newline-separated "Name: Value" pairs).
  */
 export declare function sandboxCustomHeaders(existing: string | undefined): string;
-export declare function sandboxCommand(command: string[]): Promise<void>;
+/**
+ * Should `command[0]` be dispatched as a ledger verb? Only when the
+ * invocation did NOT use the `--` separator: `uap sandbox -- revoke …` means
+ * the operator wants to run a BINARY named `revoke`, and a positional
+ * intercept that cannot be escaped would shadow legitimate commands (P4
+ * review finding). Exposed for the CLI-surface tests.
+ */
+export declare function shouldDispatchGrantVerb(command: string[], argv?: string[]): boolean;
+export declare function sandboxCommand(command: string[], options?: Record<string, unknown>): Promise<void>;
 //# sourceMappingURL=sandbox.d.ts.map

package/dist/cli/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/cli/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAOH;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CASzE;AAYD,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuErE"}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/cli/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAOH,OAAO,EAUL,KAAK,cAAc,EACpB,MAAM,+BAA+B,CAAC;AAkBvC,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE9C,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;6CACyC;IACzC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,wBAAwB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,yEAAyE;IACzE,MAAM,EAAE,cAAc,CAAC;IACvB;;uEAEmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;6EAKyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,kEAAkE;IAClE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,2EAA2E;IAC3E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,sEAAsE;IACtE,OAAO,EAAE,cAAc,CAAC;IACxB,2DAA2D;IAC3D,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;sEACkE;IAClE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,8EAA8E;IAC9E,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAMD;yEACyE;AACzE,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG;IAAE,IAAI,CAAC,EAAE,WAAW,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAwK3F;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CASzE;AAQD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,MAAM,EAAiB,GAAG,OAAO,CAGjG;AAoGD,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA6G5G"}

package/dist/cli/sandbox.js

@@ -6,18 +6,236 @@
  * the KERNEL — for Write/Edit tools, Bash, and any subprocess alike.
  *
  * This is the workdir boundary that `--dangerously-skip-permissions` cannot
- * bypass: the client can't escape the mount namespace. Network is shared so the
- * agent still reaches the local proxy (127.0.0.1:4000).
+ * bypass: the client can't escape the mount namespace.
+ *
+ * Bridge Phase 4 adds two authorities on top of that floor:
+ *
+ * - Per-session GRANTS (`uap sandbox grant`, D2): extra writable holes
+ *   recorded in a consent ledger (session-scoped, TTL-bounded, reason-
+ *   stated, audit-logged). The pre-P4 answer, `UAP_SANDBOX_ALLOW=path:path`,
+ *   still works but is UNRECORDED authority — it is honored for backwards
+ *   compatibility and named as unrecorded in the audit and the banner.
+ *
+ * - The NETWORK EGRESS BOUNDARY (`--net off`, D1): the sandbox gets its own
+ *   network namespace (--unshare-net) and NOTHING is brought up — no TCP,
+ *   no DNS, no loopback, no egress of any kind, at the kernel. This is the
+ *   complete boundary, for untrusted code, evals, and data-only work; model
+ *   access is impossible by design (a harness that needs the model will fail
+ *   loudly with connection refused).
+ *
+ *   Why there is no "--net proxy" (netns cut with a single hole to the
+ *   proxy): rootless Linux cannot express it. AF_UNIX pathname sockets are
+ *   NETWORK-NAMESPACE-SCOPED — a socket bind-mounted across the netns wall
+ *   is unreachable (empirically ECONNREFUSED, see ADR 0011), bwrap closes
+ *   every inherited fd (so no SCM_RIGHTS broker), and the userspace network
+ *   helpers (pasta/slirp4netns) provide no outbound port allowlist. A
+ *   boundary that only works when the right helper is present would be a
+ *   suggestion, not enforcement — so the shipped modes are the two REAL
+ *   ones: shared (no claim) and off (kernel-complete). The proxy's own
+ *   PROXY_SOCKET (0600 AF_UNIX) remains the model-path choke point for
+ *   every non-sandboxed surface; `uap proxy connect` re-serves it on local
+ *   TCP for clients that cannot speak AF_UNIX.
  *
  * Env:
  *   UAP_SANDBOX_WORKDIR   workdir to make writable (default: cwd)
- *   UAP_SANDBOX_ALLOW     extra writable paths, colon-separated
+ *   UAP_SANDBOX_ALLOW     extra writable paths, colon-separated (UNRECORDED)
+ *   UAP_SANDBOX_NET       'off' to default the net mode (shared otherwise)
+ *   UAP_SANDBOX_GRANTS    pins the grant ledger file (tests, odd layouts)
+ *   UAP_SANDBOX_AUDIT     pins the audit JSONL file (tests, odd layouts)
+ *   UAP_SANDBOX_GRANTS_OFF=1  resolve zero grants (escape hatch; the sandbox itself stays)
  *   UAP_SANDBOX_OFF=1     bypass the sandbox entirely (run the command as-is)
  */
 import { spawnSync } from 'child_process';
 import { existsSync, realpathSync } from 'fs';
 import { homedir } from 'os';
 import { join } from 'path';
+import chalk from 'chalk';
+import { grantAuthority, listAuthority, resolveSessionGrants, revokeAuthority, auditSandboxUse, sandboxGrantsPath, sandboxAuditPath, verifyLedgerIntegrity, } from '../policies/sandbox-grants.js';
+import { pathCoversAnchorDir } from '../policies/sandbox-anchor.js';
+import { termSafe } from '../utils/terminal-safe.js';
+function fail(msg, code = 2) {
+    console.error(`uap sandbox: ${msg}`);
+    process.exit(code);
+}
+function hasBwrap() {
+    const r = spawnSync('bwrap', ['--version'], { stdio: 'ignore' });
+    return !r.error && r.status === 0;
+}
+function planError(msg) {
+    return { error: msg };
+}
+/** Compute the bwrap invocation. Pure: a function of its inputs only — the
+ *  CALLER resolves process.env into `envNet`/`existingCustomHeaders`. */
+export function planSandbox(input) {
+    const workdir = input.workdir;
+    // Guard: never sandbox with an over-broad workdir — it would expose the tree.
+    if (workdir === input.home || workdir === '/' || workdir === '/home') {
+        return planError(`refusing to sandbox with workdir='${workdir}' (too broad)`);
+    }
+    const netMode = input.net === 'off' || input.net === 'shared'
+        ? input.net
+        : input.envNet === 'off'
+            ? 'off'
+            : 'shared';
+    // Read-only root with writable "holes".
+    const args = [
+        '--ro-bind', '/', '/',
+        '--dev', '/dev',
+        '--proc', '/proc',
+        '--tmpfs', '/run',
+        '--die-with-parent',
+        '--new-session',
+        '--unshare-pid',
+    ];
+    if (netMode === 'off') {
+        // The egress boundary: a network namespace with NOTHING brought up —
+        // not even loopback. Any connect() fails at the kernel.
+        args.push('--unshare-net');
+    }
+    // writable holes:
+    args.push('--bind', workdir, workdir, '--bind', '/tmp', '/tmp', '--tmpfs', '/var/tmp');
+    for (const rel of ['.claude', '.cache', '.npm']) {
+        const p = join(input.home, rel);
+        if (existsSync(p))
+            args.push('--bind', p, p);
+    }
+    const grantedPaths = [];
+    // Seeded with the holes the floor already binds, so a legacy entry matching
+    // one skips its (harmless, bwrap-tolerated) duplicate bind. The grants loop
+    // above only WRITES the set (a grant of /tmp or the workdir legitimately
+    // re-binds them — bwrap tolerates the duplicate mount); only the legacy
+    // loop reads it.
+    const boundPaths = new Set([workdir, '/tmp']);
+    // The breadth trio is checked against the RESOLVED value, and $HOME can
+    // itself be a symlink (/home/u -> /disk/users/u): compare against BOTH the
+    // caller's spelling and its resolution, or an entry pointing at the real
+    // home through the symlink would bind the whole home (security review).
+    const homeResolved = (() => {
+        try {
+            return realpathSync(input.home);
+        }
+        catch {
+            return input.home;
+        }
+    })();
+    const tooBroad = (p) => p === '/' || p === '/home' || p === input.home || p === homeResolved;
+    for (const p of input.grants.paths) {
+        // TOCTOU (security review): the row's path was realpath-validated at
+        // LOAD; a concurrent writer could swap it for a symlink in the
+        // load→exec window. Resolve AGAIN at plan time, re-check breadth on the
+        // RESOLVED value, and bind what the resolution says — not the row's
+        // word for it. (A microsecond window remains between this resolution
+        // and bwrap's own; documented as residual in ADR 0011.)
+        let resolved;
+        try {
+            resolved = realpathSync(p);
+        }
+        catch {
+            continue; // vanished between load and plan — open nothing
+        }
+        if (tooBroad(resolved))
+            continue;
+        // The anchor dir is "the one hole that must never open" (grant minting
+        // refuses it outright); plan time re-checks because a grant minted under
+        // a different anchor-dir pin could otherwise open it after a re-pin.
+        if (pathCoversAnchorDir(resolved))
+            continue;
+        grantedPaths.push(resolved);
+        boundPaths.add(resolved);
+        args.push('--bind', resolved, resolved);
+    }
+    const refusedLegacy = [];
+    const legacyBound = [];
+    for (const p of input.legacyAllow) {
+        // The legacy env is UNRECORDED authority — that is the whole complaint
+        // — so it gets the SAME plan-time re-check recorded grants get:
+        // resolve at plan time, refuse over-broad resolutions, bind what the
+        // resolution says. An env var in a shell history is not consent, and
+        // unrecorded must not mean unchecked.
+        if (!p)
+            continue;
+        let resolved;
+        try {
+            resolved = realpathSync(p);
+        }
+        catch {
+            continue; // nonexistent entries stay inert, as before
+        }
+        if (tooBroad(resolved) || pathCoversAnchorDir(resolved)) {
+            // Raw env values are foreign strings reaching an operator terminal
+            // exactly when attention is on them — termSafe before interpolating.
+            refusedLegacy.push(`${termSafe(p)} → ${termSafe(resolved)}`);
+            continue;
+        }
+        if (boundPaths.has(resolved))
+            continue; // already a writable hole; no dup binds
+        boundPaths.add(resolved);
+        legacyBound.push(resolved);
+        args.push('--bind', resolved, resolved);
+    }
+    // The consent store must be TAMPER-PROOF from the untrusted side: ro-bind
+    // the ledger and audit files over their host paths so a sandboxed agent
+    // can neither plant grant rows nor forge audit lines (security review
+    // — a planted well-formed `paths:["/etc"]` row opened the hole for real).
+    // A bind-mounted file cannot be unlinked or replaced inside the namespace;
+    // a MISSING file gets /dev/null bound at its path so planting one is
+    // equally impossible (it reads empty and refuses writes).
+    for (const target of [input.grantsLedgerPath, input.auditLogPath]) {
+        if (!target)
+            continue;
+        args.push('--ro-bind', existsSync(target) ? target : '/dev/null', target);
+    }
+    const setenv = {
+        HOME: input.home,
+        UAP_SANDBOX_ACTIVE: '1',
+    };
+    if (input.session)
+        setenv.UAP_SESSION_ID = input.session;
+    const notes = [];
+    if (netMode === 'off') {
+        notes.push('net: OFF (kernel egress boundary — no network at all, not even loopback; model access impossible by design)');
+    }
+    else {
+        notes.push('net: shared (the sandbox has normal network)');
+    }
+    if (grantedPaths.length > 0)
+        notes.push(`granted holes: ${grantedPaths.join(', ')}`);
+    if (input.grants.paths.length > 0 && grantedPaths.length !== input.grants.paths.length) {
+        notes.push('(some granted paths were not opened: no longer present, or their plan-time resolution is over-broad)');
+    }
+    if (refusedLegacy.length > 0) {
+        notes.push(`refused UAP_SANDBOX_ALLOW entries: ${refusedLegacy.join(', ')} — /, /home, $HOME, and the trust-anchor dir are never writable holes`);
+    }
+    if (input.legacyAllow.filter(Boolean).length > 0) {
+        // The raw env spelling is the operator's own consent surface — show it
+        // verbatim (termSafe'd: env values are foreign strings too).
+        notes.push(`UNRECORDED allow (legacy env, consider 'uap sandbox grant'): ${input.legacyAllow.map((p) => termSafe(p)).join(':')}`);
+    }
+    const argv = [...args];
+    for (const [k, v] of Object.entries(setenv)) {
+        argv.push('--setenv', k, v);
+    }
+    // Tell the proxy this session is sandboxed so it can strip MCP tools the
+    // bubblewrap sandbox can't reach (the claude-in-chrome browser extension
+    // socket is unreachable here — offering browser_batch guarantees dead-end
+    // loops). Claude Code forwards ANTHROPIC_CUSTOM_HEADERS verbatim to its
+    // endpoint; append rather than clobber any pre-existing value.
+    const customHeaders = sandboxCustomHeaders(input.existingCustomHeaders);
+    argv.push('--setenv', 'ANTHROPIC_CUSTOM_HEADERS', customHeaders);
+    argv.push('--chdir', workdir, ...input.command);
+    return {
+        plan: {
+            argv,
+            inner: input.command,
+            setenv: { ...setenv, ANTHROPIC_CUSTOM_HEADERS: customHeaders },
+            netMode,
+            grantedPaths,
+            legacyBound,
+            legacyRefused: refusedLegacy,
+            notes,
+        },
+    };
+}
 /**
  * Build the ANTHROPIC_CUSTOM_HEADERS value for a sandboxed session: append the
  * `X-Uap-Sandbox: 1` marker (which the proxy uses to strip sandbox-unreachable
@@ -36,16 +254,119 @@ export function sandboxCustomHeaders(existing) {
         .some((h) => h.trim().toLowerCase() === marker.toLowerCase());
     return already ? prior : `${prior}\n${marker}`;
 }
-function fail(msg, code = 2) {
-    console.error(`uap sandbox: ${msg}`);
-    process.exit(code);
+// ---------------------------------------------------------------------------
+// Grant verbs (D2).
+// ---------------------------------------------------------------------------
+const GRANT_VERBS = new Set(['grant', 'grants', 'revoke']);
+/**
+ * Should `command[0]` be dispatched as a ledger verb? Only when the
+ * invocation did NOT use the `--` separator: `uap sandbox -- revoke …` means
+ * the operator wants to run a BINARY named `revoke`, and a positional
+ * intercept that cannot be escaped would shadow legitimate commands (P4
+ * review finding). Exposed for the CLI-surface tests.
+ */
+export function shouldDispatchGrantVerb(command, argv = process.argv) {
+    if (!command.length || !GRANT_VERBS.has(command[0]))
+        return false;
+    return !argv.slice(2).includes('--');
 }
-function hasBwrap() {
-    const r = spawnSync('bwrap', ['--version'], { stdio: 'ignore' });
-    return !r.error && r.status === 0;
+function grantsDisabled() {
+    const v = process.env.UAP_SANDBOX_GRANTS_OFF;
+    return v === '1' || v === 'true' || v === 'yes';
 }
-export async function sandboxCommand(command) {
-    // Strip a leading '--' separator if commander passed it through.
+function resolveSessionGrantsSafe(projectRoot, session) {
+    const none = { grants: [], paths: [] };
+    if (!session || grantsDisabled())
+        return none;
+    try {
+        return resolveSessionGrants(projectRoot, session);
+    }
+    catch (err) {
+        console.warn(`[sandbox] grant resolution failed (continuing with NO granted holes): ${err instanceof Error ? err.message : String(err)}`);
+        return none;
+    }
+}
+async function grantVerb(args, options) {
+    const verb = args[0];
+    const projectRoot = process.cwd();
+    if ((verb === 'grant' || verb === 'revoke') && process.env.UAP_SANDBOX_ACTIVE === '1') {
+        // Consent cannot come from the thing being guarded (P4 security
+        // review): UAP_SANDBOX_ACTIVE is set by the sandbox itself, on the
+        // UNTRUSTED side, so a shell inside a sandbox must not be able to
+        // write new authority or remove the operator's. Listing stays
+        // available (read-only — the agent can see what it was granted).
+        fail('refusing to grant/revoke from inside a sandbox — consent must come from the operator (run it outside the sandbox)');
+    }
+    if (verb === 'grant') {
+        const paths = args.slice(1);
+        const input = {
+            sessionId: String(options.session || process.env.UAP_SESSION_ID || process.env.CLAUDE_SESSION_ID || ''),
+            paths,
+            reason: String(options.reason || ''),
+            ttlSecs: options.ttl === undefined ? undefined : Number(options.ttl),
+        };
+        const r = grantAuthority(projectRoot, input);
+        if (!r.ok)
+            fail(r.error);
+        console.log(chalk.green(`✓ grant ${r.grant.id}`) +
+            ` — session '${r.grant.sessionId}' may write:\n  ${r.grant.paths.join('\n  ')}` +
+            chalk.dim(`\n  reason: ${r.grant.reason}\n  expires: ${r.grant.expiresAt} (granted by ${r.grant.grantedBy})`));
+        return;
+    }
+    if (verb === 'grants') {
+        const sid = String(options.session || '');
+        // Tamper evidence (ADR 0011 anchor): the listing is the inspection
+        // surface, so the integrity verdict is stated here — on the human path
+        // as a red banner, on --json via stderr so the data stays pure.
+        const integrity = verifyLedgerIntegrity(projectRoot);
+        if (integrity.state === 'mismatch') {
+            const msg = `ledger INTEGRITY MISMATCH — ${integrity.detail}. Treat every listed row as unverified.`;
+            if (options.json)
+                console.error(`[sandbox] ${msg}`);
+            else
+                console.log(chalk.red(`⚠ ${msg}`));
+        }
+        else if (integrity.state === 'unanchored' && !options.json) {
+            console.log(chalk.dim(`ℹ ${integrity.detail}`));
+        }
+        const all = listAuthority(projectRoot, sid || undefined);
+        if (options.json) {
+            console.log(JSON.stringify(all, null, 2));
+            return;
+        }
+        if (all.length === 0) {
+            console.log(sid ? `No active grants for session '${sid}'.` : 'No active grants.');
+            return;
+        }
+        for (const g of all) {
+            console.log(`${chalk.green(g.id)} session '${g.sessionId}' expires ${g.expiresAt}` +
+                `\n  ${g.paths.join('\n  ')}` +
+                chalk.dim(`\n  reason: ${g.reason} (granted by ${g.grantedBy})`));
+        }
+        return;
+    }
+    if (verb === 'revoke') {
+        const id = args[1];
+        if (!id)
+            fail('usage: uap sandbox revoke <grantId>');
+        if (!revokeAuthority(projectRoot, id)) {
+            // Not found, or the ledger refused to persist the removal — either way
+            // the grant may still be ACTIVE, so the refusal must not sound like
+            // "nothing to do" (the persist failure already warned above).
+            fail(`could not revoke '${id}' — it is not in the ledger, or the ledger failed to persist the removal`);
+        }
+        console.log(chalk.green(`✓ revoked ${id}`));
+        return;
+    }
+    fail(`unknown sandbox grant verb '${verb}' (grant | grants | revoke)`);
+}
+// ---------------------------------------------------------------------------
+// Command entry.
+// ---------------------------------------------------------------------------
+export async function sandboxCommand(command, options = {}) {
+    // Belt-and-braces: commander v12 strips the `--` separator itself (the
+    // marker never reaches command[]), but older parsers and hand-built
+    // invocations (tests) may pass it through — strip if it survived.
     if (command[0] === '--')
         command = command.slice(1);
     if (process.env.UAP_SANDBOX_OFF === '1') {
@@ -54,8 +375,15 @@ export async function sandboxCommand(command) {
         const r = spawnSync(command[0], command.slice(1), { stdio: 'inherit' });
         process.exit(r.status ?? (r.error ? 127 : 0));
     }
+    // Grant verbs are ledger operations, not sandbox runs — but only when the
+    // invocation did NOT use the `--` separator (see shouldDispatchGrantVerb).
+    if (shouldDispatchGrantVerb(command)) {
+        await grantVerb(command, options);
+        return;
+    }
     if (command.length === 0) {
-        fail('no command given. Usage: uap sandbox -- <command> [args...]');
+        fail('no command given. Usage: uap sandbox [--session <id>] [--net shared|off] -- <command> [args...]; ' +
+            `authority: uap sandbox grant <path...> --session <id> --reason "..." | grants | revoke <id>`);
     }
     if (!hasBwrap()) {
         fail('bwrap (bubblewrap) not found — refusing to run unsandboxed. ' +
@@ -69,41 +397,62 @@ export async function sandboxCommand(command) {
     catch {
         workdir = process.env.UAP_SANDBOX_WORKDIR || process.cwd();
     }
-    // Guard: never sandbox with an over-broad workdir — it would expose the tree.
-    if (workdir === home || workdir === '/' || workdir === '/home') {
-        fail(`refusing to sandbox with workdir='${workdir}' (too broad)`);
+    const session = String(options.session || process.env.UAP_SESSION_ID || process.env.CLAUDE_SESSION_ID || '');
+    const rawNet = options.net;
+    if (rawNet !== undefined && rawNet !== 'off' && rawNet !== 'shared') {
+        // Loud, not silent: an unknown --net value (e.g. the documented-then-cut
+        // 'proxy') silently downgrading to full network would be the exact hole
+        // the boundary exists to close.
+        fail(`unknown --net mode '${String(rawNet)}' (shared | off)`);
     }
-    // Read-only root with writable "holes".
-    const args = [
-        '--ro-bind', '/', '/',
-        '--dev', '/dev',
-        '--proc', '/proc',
-        '--tmpfs', '/run',
-        '--die-with-parent',
-        '--unshare-pid',
-        '--new-session',
-        // writable holes:
-        '--bind', workdir, workdir,
-        '--bind', '/tmp', '/tmp',
-        '--tmpfs', '/var/tmp',
-    ];
-    for (const rel of ['.claude', '.cache', '.npm']) {
-        const p = join(home, rel);
-        if (existsSync(p))
-            args.push('--bind', p, p);
+    const netOpt = rawNet === 'off' ? 'off' : rawNet === 'shared' ? 'shared' : undefined;
+    // The env default is validated exactly like the flag (security review):
+    // 'OFF', 'off ', '0ff' silently meaning FULL network is the exact hole
+    // the boundary exists to close. Whitespace is trimmed (shell quirks),
+    // anything else fails loud.
+    const envNet = process.env.UAP_SANDBOX_NET?.trim();
+    if (envNet && envNet !== 'shared' && envNet !== 'off') {
+        fail(`unknown UAP_SANDBOX_NET value '${envNet}' (shared | off)`);
     }
-    for (const p of (process.env.UAP_SANDBOX_ALLOW || '').split(':')) {
-        if (p && existsSync(p))
-            args.push('--bind', p, p);
+    const legacyAllow = (process.env.UAP_SANDBOX_ALLOW || '').split(':');
+    const grants = resolveSessionGrantsSafe(process.cwd(), session);
+    const planned = planSandbox({
+        command,
+        session: session || undefined,
+        net: netOpt,
+        workdir,
+        home,
+        legacyAllow,
+        grants,
+        envNet,
+        existingCustomHeaders: process.env.ANTHROPIC_CUSTOM_HEADERS,
+        // Ro-bound into the namespace by the planner: the consent store must be
+        // untouchable from the sandboxed side (security review finding 1).
+        grantsLedgerPath: sandboxGrantsPath(process.cwd()),
+        auditLogPath: sandboxAuditPath(process.cwd()),
+    });
+    if (planned.error)
+        fail(planned.error);
+    const plan = planned.plan;
+    // The consent record: who granted, what was actually OPENED (not merely
+    // resolved — a granted path that no longer exists opens nothing and must
+    // not be recorded as authority exercised), what ran unrecorded, and the
+    // net boundary actually engaged.
+    const openedGrants = grants.grants.filter((g) => g.paths.some((p) => plan.grantedPaths.includes(p)));
+    // The legacy-env record must state what ACTUALLY opened vs what was
+    // refused at plan time — recording a refused entry under the run's allow
+    // would attribute authority the run never had (the banner and the
+    // durable record must agree).
+    auditSandboxUse(process.cwd(), session, { grants: openedGrants, paths: plan.grantedPaths }, plan.legacyBound, plan.legacyRefused, plan.netMode);
+    console.error(chalk.dim(`uap sandbox: workdir ${workdir} (writable); everything else is EROFS`));
+    for (const n of plan.notes)
+        console.error(chalk.dim(`  ${n}`));
+    if (grantsDisabled())
+        console.error(chalk.dim('  grants: ledger off (UAP_SANDBOX_GRANTS_OFF=1)'));
+    if (!session) {
+        console.error(chalk.dim('  grants: none (no --session; grant one with: uap sandbox grant <path> --session <id> --reason "...")'));
     }
-    // Tell the proxy this session is sandboxed so it can strip MCP tools the
-    // bubblewrap sandbox can't reach (the claude-in-chrome browser extension
-    // socket is unreachable here — offering browser_batch guarantees dead-end
-    // loops). Claude Code forwards ANTHROPIC_CUSTOM_HEADERS verbatim to its
-    // endpoint; append rather than clobber any pre-existing value.
-    const customHeaders = sandboxCustomHeaders(process.env.ANTHROPIC_CUSTOM_HEADERS);
-    args.push('--setenv', 'HOME', home, '--setenv', 'UAP_SANDBOX_ACTIVE', '1', '--setenv', 'ANTHROPIC_CUSTOM_HEADERS', customHeaders, '--chdir', workdir);
-    const r = spawnSync('bwrap', [...args, ...command], { stdio: 'inherit' });
+    const r = spawnSync('bwrap', plan.argv, { stdio: 'inherit' });
     if (r.error)
         fail(`failed to launch bwrap: ${r.error.message}`, 127);
     process.exit(r.status ?? 1);

package/dist/cli/sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/cli/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAA4B;IAC/D,MAAM,MAAM,GAAG,kBAAkB,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,MAAM,OAAO,GAAG,KAAK;SAClB,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,IAAI,CAAC,GAAW,EAAE,IAAI,GAAG,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAiB;IACpD,iEAAiE;IACjE,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEpD,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,GAAG,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,6DAA6D,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChB,IAAI,CACF,8DAA8D;YAC5D,2DAA2D,EAC7D,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IAC3C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7D,CAAC;IAED,8EAA8E;IAC9E,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/D,IAAI,CAAC,qCAAqC,OAAO,eAAe,CAAC,CAAC;IACpE,CAAC;IAED,wCAAwC;IACxC,MAAM,IAAI,GAAa;QACrB,WAAW,EAAE,GAAG,EAAE,GAAG;QACrB,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,MAAM;QACjB,mBAAmB;QACnB,eAAe;QACf,eAAe;QACf,kBAAkB;QAClB,QAAQ,EAAE,OAAO,EAAE,OAAO;QAC1B,QAAQ,EAAE,MAAM,EAAE,MAAM;QACxB,SAAS,EAAE,UAAU;KACtB,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1B,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,+DAA+D;IAC/D,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACjF,IAAI,CAAC,IAAI,CACP,UAAU,EAAE,MAAM,EAAE,IAAI,EACxB,UAAU,EAAE,oBAAoB,EAAE,GAAG,EACrC,UAAU,EAAE,0BAA0B,EAAE,aAAa,EACrD,SAAS,EAAE,OAAO,CACnB,CAAC;IAEF,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC,CAAC,KAAK;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;IACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/cli/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,GAGtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAErD,SAAS,IAAI,CAAC,GAAW,EAAE,IAAI,GAAG,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACpC,CAAC;AA4DD,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED;yEACyE;AACzE,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,8EAA8E;IAC9E,IAAI,OAAO,KAAK,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACrE,OAAO,SAAS,CAAC,qCAAqC,OAAO,eAAe,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,OAAO,GACX,KAAK,CAAC,GAAG,KAAK,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC3C,CAAC,CAAC,KAAK,CAAC,GAAG;QACX,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK;YACtB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,QAAQ,CAAC;IAEjB,wCAAwC;IACxC,MAAM,IAAI,GAAa;QACrB,WAAW,EAAE,GAAG,EAAE,GAAG;QACrB,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,MAAM;QACjB,mBAAmB;QACnB,eAAe;QACf,eAAe;KAChB,CAAC;IACF,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,qEAAqE;QACrE,wDAAwD;QACxD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC;IACD,kBAAkB;IAClB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACvF,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,iBAAiB;IACjB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;QACzB,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAW,EAAE,CACtC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,YAAY,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACnC,qEAAqE;QACrE,+DAA+D;QAC/D,wEAAwE;QACxE,oEAAoE;QACpE,qEAAqE;QACrE,wDAAwD;QACxD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,gDAAgD;QAC5D,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QACjC,uEAAuE;QACvE,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,mBAAmB,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC5C,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,uEAAuE;QACvE,gEAAgE;QAChE,qEAAqE;QACrE,qEAAqE;QACrE,sCAAsC;QACtC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,4CAA4C;QACxD,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,mEAAmE;YACnE,qEAAqE;YACrE,aAAa,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,wCAAwC;QAChF,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IACD,0EAA0E;IAC1E,wEAAwE;IACxE,sEAAsE;IACtE,0EAA0E;IAC1E,2EAA2E;IAC3E,qEAAqE;IACrE,0DAA0D;IAC1D,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAA2B;QACrC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,kBAAkB,EAAE,GAAG;KACxB,CAAC;IACF,IAAI,KAAK,CAAC,OAAO;QAAE,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;IAEzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,6GAA6G,CAAC,CAAC;IAC5H,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACvF,KAAK,CAAC,IAAI,CAAC,sGAAsG,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,sCAAsC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE,CACtI,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,uEAAuE;QACvE,6DAA6D;QAC7D,KAAK,CAAC,IAAI,CACR,gEAAgE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACtH,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,+DAA+D;IAC/D,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACxE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,0BAA0B,EAAE,aAAa,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAEhD,OAAO;QACL,IAAI,EAAE;YACJ,IAAI;YACJ,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,wBAAwB,EAAE,aAAa,EAAE;YAC9D,OAAO;YACP,YAAY;YACZ,WAAW;YACX,aAAa,EAAE,aAAa;YAC5B,KAAK;SACN;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAA4B;IAC/D,MAAM,MAAM,GAAG,kBAAkB,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,MAAM,OAAO,GAAG,KAAK;SAClB,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAiB,EAAE,OAAiB,OAAO,CAAC,IAAI;IACtF,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC7C,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,CAAC;AAClD,CAAC;AAED,SAAS,wBAAwB,CAAC,WAAmB,EAAE,OAAe;IACpE,MAAM,IAAI,GAAmB,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACvD,IAAI,CAAC,OAAO,IAAI,cAAc,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,yEACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAc,EAAE,OAAgC;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG,EAAE,CAAC;QACtF,gEAAgE;QAChE,mEAAmE;QACnE,kEAAkE;QAClE,8DAA8D;QAC9D,iEAAiE;QACjE,IAAI,CAAC,mHAAmH,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAe;YACxB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;YACvG,KAAK;YACL,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YACpC,OAAO,EAAE,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SACrE,CAAC;QACF,MAAM,CAAC,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YAClC,eAAe,CAAC,CAAC,KAAK,CAAC,SAAS,mBAAmB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAC/E,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,MAAM,gBAAgB,CAAC,CAAC,KAAK,CAAC,SAAS,gBAAgB,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAChH,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC1C,mEAAmE;QACnE,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,SAAS,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,+BAA+B,SAAS,CAAC,MAAM,yCAAyC,CAAC;YACrG,IAAI,OAAO,CAAC,IAAI;gBAAE,OAAO,CAAC,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;;gBAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,SAAS,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,EAAE,GAAG,IAAI,SAAS,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CACT,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,SAAS,aAAa,CAAC,CAAC,SAAS,EAAE;gBACpE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC7B,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,SAAS,GAAG,CAAC,CACnE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACrD,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC;YACtC,uEAAuE;YACvE,oEAAoE;YACpE,8DAA8D;YAC9D,IAAI,CAAC,qBAAqB,EAAE,0EAA0E,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IACD,IAAI,CAAC,+BAA+B,IAAI,6BAA6B,CAAC,CAAC;AACzE,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAiB,EAAE,UAAmC,EAAE;IAC3F,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEpD,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,GAAG,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,CACF,mGAAmG;YACjG,6FAA6F,CAChG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChB,IAAI,CACF,8DAA8D;YAC5D,2DAA2D,EAC7D,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IAC3C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAC7G,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAC3B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACpE,yEAAyE;QACzE,wEAAwE;QACxE,gCAAgC;QAChC,IAAI,CAAC,uBAAuB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAA+B,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACjH,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,4BAA4B;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,MAAM,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACtD,IAAI,CAAC,kCAAkC,MAAM,kBAAkB,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;IAEhE,MAAM,OAAO,GAAG,WAAW,CAAC;QAC1B,OAAO;QACP,OAAO,EAAE,OAAO,IAAI,SAAS;QAC7B,GAAG,EAAE,MAAM;QACX,OAAO;QACP,IAAI;QACJ,WAAW;QACX,MAAM;QACN,MAAM;QACN,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QAC3D,wEAAwE;QACxE,mEAAmE;QACnE,gBAAgB,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAClD,YAAY,EAAE,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,KAAK;QAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAK,CAAC;IAE3B,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,iCAAiC;IACjC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,oEAAoE;IACpE,yEAAyE;IACzE,kEAAkE;IAClE,8BAA8B;IAC9B,eAAe,CACb,OAAO,CAAC,GAAG,EAAE,EACb,OAAO,EACP,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,EAClD,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,OAAO,CACb,CAAC;IAEF,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,OAAO,uCAAuC,CAAC,CAAC,CAAC;IACjG,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,cAAc,EAAE;QAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,uGAAuG,CAAC,CACnH,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,KAAK;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;IACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AAC9B,CAAC"}