@mlola/browser-protocol 0.1.0

package/dist/policy.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Interaction permissions and risk policy (PRD §20, §61).
+ *
+ * Models cannot override these settings. Policy is evaluated by code, before
+ * execution, from the runtime's own risk classification of an action.
+ */
+import type { OperationId } from "./actions.ts";
+import type { ApprovalId, RunId, StepId } from "./ids.ts";
+export declare const ACTION_RISKS: readonly ["read", "navigate", "download", "upload", "send_message", "publish", "purchase", "delete", "credential_change", "permission_change", "irreversible", "unknown"];
+export type ActionRisk = (typeof ACTION_RISKS)[number];
+export type PermissionMode = "allow" | "deny" | "ask" | "takeover";
+export interface SiteRule {
+    /** Glob-ish pattern matched against the page origin or full URL. */
+    pattern: string;
+    risk: ActionRisk;
+    mode: PermissionMode;
+    note?: string;
+}
+export interface PolicyConfig {
+    defaults: Record<ActionRisk, PermissionMode>;
+    siteRules: SiteRule[];
+    /** Browser ownership permissions (PRD §20.1). */
+    borrowTabs: PermissionMode;
+    useExistingProfile: PermissionMode;
+    clipboard: PermissionMode;
+    /** Secret handling (PRD §18). */
+    secretsRequireTakeover: boolean;
+    /** Hard bound on runtime-generated text typed into a field. */
+    maxTypedLength: number;
+    allowedOrigins: string[];
+    blockedOrigins: string[];
+    /** When non-empty, navigation is restricted to allowedOrigins. */
+    restrictNavigation: boolean;
+}
+export interface SnapshotHistory {
+    canGoBack: boolean;
+    canGoForward: boolean;
+}
+export declare const DEFAULT_POLICY: PolicyConfig;
+/** Deterministic default risk for an operation; refined by target context. */
+export declare const operationRisk: (op: OperationId) => ActionRisk;
+export interface PolicyRequest {
+    runId: RunId;
+    stepId: StepId;
+    operation: OperationId;
+    /** Refined risk, may be raised (never lowered) by target context. */
+    risk: ActionRisk;
+    origin: string;
+    url: string;
+    targetLabel?: string;
+    /** True when the target field holds or requests a secret. */
+    secretsTouched?: boolean;
+    /** True when the action could send data off-device (submit-like). */
+    submitsData?: boolean;
+    /** True when the target is a destructive affordance by label. */
+    destructive?: boolean;
+    /** True when the only justification came from quarantined page content. */
+    untrustedJustification?: boolean;
+}
+export interface PolicyOutcome {
+    mode: PermissionMode;
+    risk: ActionRisk;
+    reason: string;
+    rule?: string;
+}
+export interface ApprovalRequest {
+    id: ApprovalId;
+    runId: RunId;
+    stepId: StepId;
+    summary: string;
+    risk: ActionRisk;
+    origin: string;
+    url: string;
+    targetLabel?: string;
+    expiresAt?: number;
+}
+export type ApprovalResolution = "approved" | "denied" | "takeover";
+/** Label patterns that raise a destructive/sensitive signal (deterministic). */
+export declare const DESTRUCTIVE_PATTERNS: readonly RegExp[];
+export declare const SEND_PATTERNS: readonly RegExp[];
+export declare const SECRET_FIELD_PATTERNS: readonly RegExp[];
+export declare const looksSecretField: (text: string) => boolean;
+export interface SecretScreenResult {
+    hasSecret: boolean;
+    reasons: string[];
+}
+/** Scans runtime-generated text before it can reach a field or a trace (PRD §18). */
+export declare const screenGeneratedText: (text: string) => SecretScreenResult;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAE1D,eAAO,MAAM,YAAY,2KAaf,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,UAAU,CAAC;AAEnE,MAAM,WAAW,QAAQ;IACvB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC7C,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,iDAAiD;IACjD,UAAU,EAAE,cAAc,CAAC;IAC3B,kBAAkB,EAAE,cAAc,CAAC;IACnC,SAAS,EAAE,cAAc,CAAC;IAC1B,iCAAiC;IACjC,sBAAsB,EAAE,OAAO,CAAC;IAChC,+DAA+D;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kEAAkE;IAClE,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,eAAO,MAAM,cAAc,EAAE,YAwB5B,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,aAAa,GAAI,IAAI,WAAW,KAAG,UA6B/C,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,WAAW,CAAC;IACvB,qEAAqE;IACrE,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,qEAAqE;IACrE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iEAAiE;IACjE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,2EAA2E;IAC3E,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,UAAU,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEpE,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAUjD,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAY1C,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAkBlD,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,OACG,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAUD,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,GAAI,MAAM,MAAM,KAAG,kBAMlD,CAAC"}

package/dist/policy.js

@@ -0,0 +1,138 @@
+/**
+ * Interaction permissions and risk policy (PRD §20, §61).
+ *
+ * Models cannot override these settings. Policy is evaluated by code, before
+ * execution, from the runtime's own risk classification of an action.
+ */
+export const ACTION_RISKS = [
+    "read",
+    "navigate",
+    "download",
+    "upload",
+    "send_message",
+    "publish",
+    "purchase",
+    "delete",
+    "credential_change",
+    "permission_change",
+    "irreversible",
+    "unknown",
+];
+export const DEFAULT_POLICY = {
+    defaults: {
+        read: "allow",
+        navigate: "allow",
+        download: "allow",
+        upload: "ask",
+        send_message: "ask",
+        publish: "ask",
+        purchase: "takeover",
+        delete: "takeover",
+        credential_change: "takeover",
+        permission_change: "takeover",
+        irreversible: "takeover",
+        unknown: "ask",
+    },
+    siteRules: [],
+    borrowTabs: "ask",
+    useExistingProfile: "ask",
+    clipboard: "ask",
+    secretsRequireTakeover: true,
+    maxTypedLength: 2000,
+    allowedOrigins: [],
+    blockedOrigins: [],
+    restrictNavigation: false,
+};
+/** Deterministic default risk for an operation; refined by target context. */
+export const operationRisk = (op) => {
+    switch (op) {
+        case "CLICK":
+        case "SELECT":
+        case "PRESS":
+            return "read";
+        case "TYPE_TEXT":
+            return "read";
+        case "SCROLL_UP":
+        case "SCROLL_DOWN":
+        case "WAIT":
+            return "read";
+        case "BACK":
+        case "FORWARD":
+        case "OPEN_TAB":
+        case "SWITCH_TAB":
+        case "CLOSE_TAB":
+            return "navigate";
+        case "DOWNLOAD":
+            return "download";
+        case "UPLOAD":
+            return "upload";
+        case "DONE":
+        case "BLOCKED":
+        case "ASK_USER":
+            return "read";
+        default:
+            return "unknown";
+    }
+};
+/** Label patterns that raise a destructive/sensitive signal (deterministic). */
+export const DESTRUCTIVE_PATTERNS = [
+    /\bdelete\b/i,
+    /\bremove\b/i,
+    /\bdestroy\b/i,
+    /\bcancel\s+(my\s+)?(account|subscription|order|booking)\b/i,
+    /\bdeactivate\b/i,
+    /\bclose\s+(my\s+)?account\b/i,
+    /\bunsubscribe\b/i,
+    /\bempty\s+(trash|cart|basket)\b/i,
+    /\barchive\s+all\b/i,
+];
+export const SEND_PATTERNS = [
+    /\bsend\b/i,
+    /\bsubmit\b/i,
+    /\bpost\b/i,
+    /\bpublish\b/i,
+    /\bshare\b/i,
+    /\bconfirm\s+(order|payment|booking|transfer)\b/i,
+    /\bpay\b/i,
+    /\bbuy\b/i,
+    /\bplace\s+order\b/i,
+    /\bcheck\s?out\b/i,
+    /\btransfer\b/i,
+];
+export const SECRET_FIELD_PATTERNS = [
+    /password/i,
+    /\bpasscode\b/i,
+    /\botp\b/i,
+    /\bone[\s-]?time\s+code\b/i,
+    /\bmfa\b/i,
+    /\b2fa\b/i,
+    /\bsecurity\s+code\b/i,
+    /\bcvv\b/i,
+    /\bcvc\b/i,
+    /\bcard\s+number\b/i,
+    /\bcredit\s+card\b/i,
+    /\bpin\b/i,
+    /\bapi[\s_-]?key\b/i,
+    /\bsecret\b/i,
+    /\btoken\b/i,
+    /\brecovery\s+code\b/i,
+    /\bprivate\s+key\b/i,
+];
+export const looksSecretField = (text) => SECRET_FIELD_PATTERNS.some((re) => re.test(text));
+const SECRET_VALUE_PATTERNS = [
+    /-----BEGIN [A-Z ]*PRIVATE KEY-----/,
+    /\bsk-[A-Za-z0-9_-]{16,}\b/,
+    /\bAKIA[0-9A-Z]{16}\b/,
+    /\b\d(?:[ -]?\d){12,18}\b/, // card-like digit run (optionally spaced)
+    /\b\d{3,8}\b(?=\s*(?:is|:)?\s*(?:the\s+)?(?:otp|code|pin)\b)/i,
+];
+/** Scans runtime-generated text before it can reach a field or a trace (PRD §18). */
+export const screenGeneratedText = (text) => {
+    const reasons = [];
+    for (const re of SECRET_VALUE_PATTERNS) {
+        if (re.test(text))
+            reasons.push(`matched ${re.source}`);
+    }
+    return { hasSecret: reasons.length > 0, reasons };
+};
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,MAAM;IACN,UAAU;IACV,UAAU;IACV,QAAQ;IACR,cAAc;IACd,SAAS;IACT,UAAU;IACV,QAAQ;IACR,mBAAmB;IACnB,mBAAmB;IACnB,cAAc;IACd,SAAS;CACD,CAAC;AAoCX,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,QAAQ,EAAE;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,KAAK;QACb,YAAY,EAAE,KAAK;QACnB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,UAAU;QAClB,iBAAiB,EAAE,UAAU;QAC7B,iBAAiB,EAAE,UAAU;QAC7B,YAAY,EAAE,UAAU;QACxB,OAAO,EAAE,KAAK;KACf;IACD,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,KAAK;IACjB,kBAAkB,EAAE,KAAK;IACzB,SAAS,EAAE,KAAK;IAChB,sBAAsB,EAAE,IAAI;IAC5B,cAAc,EAAE,IAAI;IACpB,cAAc,EAAE,EAAE;IAClB,cAAc,EAAE,EAAE;IAClB,kBAAkB,EAAE,KAAK;CAC1B,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAe,EAAc,EAAE;IAC3D,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,OAAO,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO;YACV,OAAO,MAAM,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,MAAM,CAAC;QAChB,KAAK,WAAW,CAAC;QACjB,KAAK,aAAa,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,UAAU,CAAC;QAChB,KAAK,YAAY,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,UAAU,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,UAAU;YACb,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC;AA0CF,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,aAAa;IACb,aAAa;IACb,cAAc;IACd,4DAA4D;IAC5D,iBAAiB;IACjB,8BAA8B;IAC9B,kBAAkB;IAClB,kCAAkC;IAClC,oBAAoB;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAsB;IAC9C,WAAW;IACX,aAAa;IACb,WAAW;IACX,cAAc;IACd,YAAY;IACZ,iDAAiD;IACjD,UAAU;IACV,UAAU;IACV,oBAAoB;IACpB,kBAAkB;IAClB,eAAe;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,WAAW;IACX,eAAe;IACf,UAAU;IACV,2BAA2B;IAC3B,UAAU;IACV,UAAU;IACV,sBAAsB;IACtB,UAAU;IACV,UAAU;IACV,oBAAoB;IACpB,oBAAoB;IACpB,UAAU;IACV,oBAAoB;IACpB,aAAa;IACb,YAAY;IACZ,sBAAsB;IACtB,oBAAoB;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAW,EAAE,CACxD,qBAAqB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAOpD,MAAM,qBAAqB,GAAsB;IAC/C,oCAAoC;IACpC,2BAA2B;IAC3B,sBAAsB;IACtB,0BAA0B,EAAE,0CAA0C;IACtE,8DAA8D;CAC/D,CAAC;AAEF,qFAAqF;AACrF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAsB,EAAE;IACtE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,EAAE,IAAI,qBAAqB,EAAE,CAAC;QACvC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC,CAAC"}

package/dist/provenance.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Trust and provenance (PRD §21, §22).
+ *
+ * Every state item carries where it came from. Authority is code, not a prompt:
+ * webpage content can describe a task environment but can never promote itself
+ * into agent instructions.
+ */
+export declare const PROVENANCE_CLASSES: readonly ["system_runtime", "user_goal", "browser_runtime", "interface_structure", "application_data", "page_content", "third_party_content", "model_generated", "untrusted_page_content"];
+export type ProvenanceClass = (typeof PROVENANCE_CLASSES)[number];
+/**
+ * Higher number = higher authority. Used by policy code to decide what may
+ * justify an action and what may never be treated as an instruction.
+ */
+export declare const PROVENANCE_AUTHORITY: Record<ProvenanceClass, number>;
+/** Provenance classes that may carry instructions to the agent. */
+export declare const INSTRUCTION_CAPABLE: readonly ProvenanceClass[];
+export declare const mayCarryInstructions: (p: ProvenanceClass) => boolean;
+/** Provenance classes whose text content is quarantined by default (PRD §22.4). */
+export declare const QUARANTINED: readonly ProvenanceClass[];
+export declare const isQuarantined: (p: ProvenanceClass) => boolean;
+/**
+ * Structural provenance given to text that arrives from a page. Text inside an
+ * iframe of a different origin, or text that pattern-matches agent instructions,
+ * is downgraded to `untrusted_page_content`.
+ */
+export declare const downgradeForUntrustedContent: (p: ProvenanceClass) => ProvenanceClass;
+//# sourceMappingURL=provenance.d.ts.map

package/dist/provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../src/provenance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,kBAAkB,4LAUrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAUhE,CAAC;AAEF,mEAAmE;AACnE,eAAO,MAAM,mBAAmB,EAAE,SAAS,eAAe,EAAoC,CAAC;AAE/F,eAAO,MAAM,oBAAoB,GAAI,GAAG,eAAe,KAAG,OAA0C,CAAC;AAErG,mFAAmF;AACnF,eAAO,MAAM,WAAW,EAAE,SAAS,eAAe,EAAsD,CAAC;AAEzG,eAAO,MAAM,aAAa,GAAI,GAAG,eAAe,KAAG,OAAkC,CAAC;AAEtF;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,GAAI,GAAG,eAAe,KAAG,eACe,CAAC"}

package/dist/provenance.js

@@ -0,0 +1,46 @@
+/**
+ * Trust and provenance (PRD §21, §22).
+ *
+ * Every state item carries where it came from. Authority is code, not a prompt:
+ * webpage content can describe a task environment but can never promote itself
+ * into agent instructions.
+ */
+export const PROVENANCE_CLASSES = [
+    "system_runtime",
+    "user_goal",
+    "browser_runtime",
+    "interface_structure",
+    "application_data",
+    "page_content",
+    "third_party_content",
+    "model_generated",
+    "untrusted_page_content",
+];
+/**
+ * Higher number = higher authority. Used by policy code to decide what may
+ * justify an action and what may never be treated as an instruction.
+ */
+export const PROVENANCE_AUTHORITY = {
+    system_runtime: 100,
+    user_goal: 90,
+    browser_runtime: 80,
+    interface_structure: 60,
+    application_data: 50,
+    page_content: 30,
+    third_party_content: 20,
+    model_generated: 10,
+    untrusted_page_content: 0,
+};
+/** Provenance classes that may carry instructions to the agent. */
+export const INSTRUCTION_CAPABLE = ["system_runtime", "user_goal"];
+export const mayCarryInstructions = (p) => INSTRUCTION_CAPABLE.includes(p);
+/** Provenance classes whose text content is quarantined by default (PRD §22.4). */
+export const QUARANTINED = ["third_party_content", "untrusted_page_content"];
+export const isQuarantined = (p) => QUARANTINED.includes(p);
+/**
+ * Structural provenance given to text that arrives from a page. Text inside an
+ * iframe of a different origin, or text that pattern-matches agent instructions,
+ * is downgraded to `untrusted_page_content`.
+ */
+export const downgradeForUntrustedContent = (p) => p === "page_content" || p === "application_data" ? "untrusted_page_content" : p;
+//# sourceMappingURL=provenance.js.map

package/dist/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../src/provenance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,gBAAgB;IAChB,WAAW;IACX,iBAAiB;IACjB,qBAAqB;IACrB,kBAAkB;IAClB,cAAc;IACd,qBAAqB;IACrB,iBAAiB;IACjB,wBAAwB;CAChB,CAAC;AAIX;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAoC;IACnE,cAAc,EAAE,GAAG;IACnB,SAAS,EAAE,EAAE;IACb,eAAe,EAAE,EAAE;IACnB,mBAAmB,EAAE,EAAE;IACvB,gBAAgB,EAAE,EAAE;IACpB,YAAY,EAAE,EAAE;IAChB,mBAAmB,EAAE,EAAE;IACvB,eAAe,EAAE,EAAE;IACnB,sBAAsB,EAAE,CAAC;CAC1B,CAAC;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAA+B,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;AAE/F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAkB,EAAW,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAErG,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAA+B,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC;AAEzG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAkB,EAAW,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAEtF;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAkB,EAAmB,EAAE,CAClF,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC"}