@mulmoclaude/accounting-plugin 2.1.0 → 3.0.0

package/README.md

@@ -4,6 +4,43 @@ Double-entry accounting plugin for MulmoClaude and MulmoTerminal. Three surfaces
 
 A plugin for [MulmoClaude](https://github.com/receptron/mulmoclaude) and [MulmoTerminal](https://github.com/receptron/mulmoterminal) — loaded by the host, not run standalone.
 
+## Host wiring
+
+A single-workspace host (MulmoClaude) wires three calls once at boot:
+
+```ts
+configureAccountingServer({ workspaceRoot, logger });
+initAccountingEventPublisher(pubsub);
+app.use(createAccountingRouter());
+```
+
+A host that serves one root per project directory (MulmoTerminal) wires the same three
+differently:
+
+```ts
+configureAccountingServer({
+  workspaceRoot: null,                    // explicit-root mode: a forgotten root throws
+  logger,
+  channelScopeForRoot: (root) => projectIdForRoot(root), // opaque id, or null for the default root
+});
+initAccountingEventPublisher(pubsub);     // unchanged — the scope comes from the dep above
+app.use(createAccountingRouter({ resolveWorkspaceRoot: (req) => rootForRequest(req) }));
+configureAccountingHost({ apiCall, subscribe, localeTag, projectScope });  // the Vue surface
+```
+
+Both are opt-in and default to today's behaviour. The invariants behind them:
+
+1. **A bookId is unique within a root and nowhere else.** Anything keyed by bookId alone —
+   a channel, a rebuild queue, a card — is a cross-project collision waiting to happen.
+2. **`workspaceRoot: null` is the safety net.** With N roots, a forgotten root is not a
+   crash but a silent read or write against the wrong project; explicit-root mode turns it
+   into a clear throw.
+3. **A project is named by an opaque id, never a path.** Channel names and card envelopes
+   reach the browser; an absolute root there publishes the user's home directory.
+4. **The model never picks a project.** `manageAccounting`'s schema has no project
+   parameter (pinned by a test), and this package never resolves one off a request body —
+   only the host's own `resolveWorkspaceRoot` does.
+
 ## Dev loop
 
 ```bash

package/dist/server/context.d.ts

@@ -9,16 +9,58 @@ export interface IPubSub {
 export type AccountingLogger = StructuredLogger;
 export interface AccountingServerDeps {
     /** Absolute path to the workspace root (where `data/` lives). Used as
-     *  the default when a service/io call doesn't pass an explicit root. */
-    workspaceRoot: string;
+     *  the default when a service/io call doesn't pass an explicit root.
+     *
+     *  `null` declares STRICT mode: this host always passes an explicit
+     *  root per call, and `defaultWorkspaceRoot()` throws instead of
+     *  guessing. A multi-root host (MulmoTerminal, one root per project
+     *  directory) MUST use it — with N roots a forgotten option is not a
+     *  crash but a silent read/write against the wrong project. Mirrors
+     *  `CollectionHost.workspaceRoot: string | null` in
+     *  `@mulmoclaude/core/collection/server`. */
+    workspaceRoot: string | null;
     logger: AccountingLogger;
+    /** Optional: map an absolute root to the OPAQUE scope id the host uses
+     *  for that project, used to namespace pub/sub channel names so two
+     *  roots owning one bookId do not cross-notify. Return `null` for the
+     *  host's default root, which keeps channel names byte-identical to a
+     *  single-root host's (`accounting:<bookId>`).
+     *
+     *  It must be an opaque id, NEVER a path: channel names reach the
+     *  browser, and an absolute root there publishes the user's home
+     *  directory to the client. Same rule as a collection view token. */
+    channelScopeForRoot?: (workspaceRoot: string) => string | null;
 }
 /** Called once by the host before the accounting router is mounted. */
 export declare function configureAccountingServer(context: AccountingServerDeps): void;
 /** Default workspace root for io calls that don't pass one explicitly.
  *  Throws if the host never configured the server — a real wiring bug
- *  (unit tests always pass an explicit root, so they never hit this). */
+ *  (unit tests always pass an explicit root, so they never hit this) —
+ *  and also under STRICT mode (`workspaceRoot: null`), where there is no
+ *  ambient root to fall back to and a missing option is a bug rather
+ *  than a default. */
 export declare function defaultWorkspaceRoot(): string;
+/** The opaque channel scope for a root, or `null` when the host declared
+ *  none (single-root hosts, and a multi-root host's default root). Used
+ *  by the event publisher; never contains a path.
+ *
+ *  A missing root throws under explicit-root mode, exactly as
+ *  `defaultWorkspaceRoot()` does. Returning `null` there would be worse
+ *  than the io-path bug it mirrors: the event would go out on the
+ *  UNSCOPED channel name, which every project's default-scope
+ *  subscriber receives. The publisher catches it and logs, so a dropped
+ *  root costs one event and a warning rather than a silent cross-project
+ *  notification. */
+export declare function channelScopeFor(workspaceRoot?: string): string | null;
+/** Whether the host declared project scoping at all.
+ *
+ *  The difference matters where a card records the project it belongs
+ *  to: on a scoped host, "no scope" is a REAL answer (the default root)
+ *  and must be recorded as `null`, not left out — an omitted field means
+ *  "ask the host what is active now", which is precisely the drift a
+ *  pinned card exists to prevent. On an unscoped host the field is left
+ *  out entirely and every payload stays byte-identical to today's. */
+export declare function isProjectScopedHost(): boolean;
 /** Logger proxy — forwards to the injected logger, console fallback
  *  before configuration. Lets call sites keep `log.warn("accounting", …)`. */
 export declare const log: AccountingLogger;

package/dist/server/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/server/context.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;kEAEkE;AAClE,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;CACtD;AAED,0GAA0G;AAC1G,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC;4EACwE;IACxE,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAID,uEAAuE;AACvE,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAE7E;AAED;;yEAEyE;AACzE,wBAAgB,oBAAoB,IAAI,MAAM,CAK7C;AASD;8EAC8E;AAC9E,eAAO,MAAM,GAAG,EAAE,gBAKjB,CAAC"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/server/context.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D;;kEAEkE;AAClE,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;CACtD;AAED,0GAA0G;AAC1G,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;;iDAS6C;IAC7C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;yEAQqE;IACrE,mBAAmB,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAChE;AAID,uEAAuE;AACvE,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAE7E;AAED;;;;;sBAKsB;AACtB,wBAAgB,oBAAoB,IAAI,MAAM,CAU7C;AAED;;;;;;;;;;oBAUoB;AACpB,wBAAgB,eAAe,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGrE;AAED;;;;;;;sEAOsE;AACtE,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AASD;8EAC8E;AAC9E,eAAO,MAAM,GAAG,EAAE,gBAKjB,CAAC"}

package/dist/server/eventPublisher.d.ts

@@ -3,12 +3,17 @@ import { type IPubSub } from "./context.js";
 export declare function initAccountingEventPublisher(instance: IPubSub): void;
 /** Per-book change notification. `period` should be the entry's
  *  YYYY-MM bucket (or the earliest invalidated month for snapshot
- *  events). */
-export declare function publishBookChange(bookId: string, payload: AccountingBookChannelPayload): void;
+ *  events).
+ *
+ *  `workspaceRoot` is the root the write happened under; the channel
+ *  name is namespaced by the host's opaque scope for it (see
+ *  `channelScopeFor`). Omit it — as a single-root host's service calls
+ *  do — and the name is what it has always been. */
+export declare function publishBookChange(bookId: string, payload: AccountingBookChannelPayload, workspaceRoot?: string): void;
 /** Fired when the *list* of books changes (createBook, deleteBook).
  *  Payload is intentionally empty — subscribers refetch from
- *  /api/accounting. */
-export declare function publishBooksChanged(): void;
+ *  /api/accounting. Scoped by root like `publishBookChange`. */
+export declare function publishBooksChanged(workspaceRoot?: string): void;
 /** Test-only — drop the module singleton so each test starts clean. */
 export declare function _resetAccountingEventPublisherForTesting(): void;
 //# sourceMappingURL=eventPublisher.d.ts.map

package/dist/server/eventPublisher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eventPublisher.d.ts","sourceRoot":"","sources":["../../src/server/eventPublisher.ts"],"names":[],"mappings":"AASA,OAAO,EAAkE,KAAK,kBAAkB,IAAI,4BAA4B,EAAE,MAAM,WAAW,CAAC;AACpJ,OAAO,EAAO,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AAKjD,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAEpE;AAgBD;;eAEe;AACf,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,4BAA4B,GAAG,IAAI,CAE7F;AAED;;uBAEuB;AACvB,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,uEAAuE;AACvE,wBAAgB,wCAAwC,IAAI,IAAI,CAE/D"}
+{"version":3,"file":"eventPublisher.d.ts","sourceRoot":"","sources":["../../src/server/eventPublisher.ts"],"names":[],"mappings":"AASA,OAAO,EAGL,KAAK,kBAAkB,IAAI,4BAA4B,EACxD,MAAM,WAAW,CAAC;AACnB,OAAO,EAAwB,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AAKlE,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAEpE;AAuBD;;;;;;;oDAOoD;AACpD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,4BAA4B,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAErH;AAED;;gEAEgE;AAChE,wBAAgB,mBAAmB,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAEhE;AAED,uEAAuE;AACvE,wBAAgB,wCAAwC,IAAI,IAAI,CAE/D"}

package/dist/server/index.d.ts

@@ -1,4 +1,5 @@
 export { createAccountingRouter } from "./router.js";
+export type { AccountingRouterOptions, AccountingDispatchRequest, AccountingActionBody } from "./router.js";
 export { configureAccountingServer } from "./context.js";
 export type { AccountingServerDeps, AccountingLogger, IPubSub } from "./context.js";
 export { initAccountingEventPublisher } from "./eventPublisher.js";

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAKnE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAItD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,YAAY,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC5G,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAKnE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAItD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}

package/dist/server/router.d.ts

@@ -1,7 +1,31 @@
-import { Router } from "express";
+import { Router, Request } from "express";
+export interface AccountingActionBody {
+    action: string;
+    [key: string]: unknown;
+}
+/** The request shape the dispatch route hands a host resolver — the
+ *  same one the route itself is typed with, so a host can read headers,
+ *  query and the parsed body without casting. */
+export type AccountingDispatchRequest = Request<object, unknown, AccountingActionBody>;
+export interface AccountingRouterOptions {
+    /** Resolve the workspace root ONE request operates on, for a host
+     *  that serves more than one (MulmoTerminal: one root per project
+     *  directory). Return `undefined` to use the host's configured root.
+     *
+     *  The resolver is entirely host-owned and the package never reads a
+     *  root or a project id off the request body itself. That is what
+     *  keeps the model out of it: `manageAccounting`'s tool schema has no
+     *  project parameter, so an LLM cannot name a project even by
+     *  guessing — the host derives the scope from the session, exactly as
+     *  `manageCollection` does. A host that DOES accept a project id from
+     *  a browser must resolve it against its own list of projects and
+     *  never accept a path (see `AccountingServerDeps.channelScopeForRoot`). */
+    resolveWorkspaceRoot?: (req: AccountingDispatchRequest) => string | undefined;
+}
 /** Build the accounting Express router. The host injects its workspace
  *  root + logger via `configureAccountingServer(...)` and pub/sub via
  *  `initAccountingEventPublisher(...)`, then mounts the returned router
- *  with `app.use(...)`. */
-export declare function createAccountingRouter(): Router;
+ *  with `app.use(...)`. Pass `resolveWorkspaceRoot` to serve more than
+ *  one root; omit it and every request uses the configured one. */
+export declare function createAccountingRouter(options?: AccountingRouterOptions): Router;
 //# sourceMappingURL=router.d.ts.map

package/dist/server/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/server/router.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAqWpD;;;2BAG2B;AAC3B,wBAAgB,sBAAsB,IAAI,MAAM,CAsC/C"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/server/router.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAY,MAAM,SAAS,CAAC;AA6BpD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AA6WD;;iDAEiD;AACjD,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAEvF,MAAM,WAAW,uBAAuB;IACtC;;;;;;;;;;;gFAW4E;IAC5E,oBAAoB,CAAC,EAAE,CAAC,GAAG,EAAE,yBAAyB,KAAK,MAAM,GAAG,SAAS,CAAC;CAC/E;AAED;;;;mEAImE;AACnE,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,uBAA4B,GAAG,MAAM,CA4CpF"}

package/dist/server/snapshotCache.d.ts

@@ -31,16 +31,16 @@ export declare function scheduleRebuild(bookId: string, fromPeriod: string, work
  *  `bookId`. Also called by `deleteBook` after `cancelRebuild` to
  *  ensure a previously running rebuild has fully stopped before the
  *  caller removes the book's directory on disk. */
-export declare function awaitRebuildIdle(bookId: string): Promise<void>;
+export declare function awaitRebuildIdle(bookId: string, workspaceRoot?: string): Promise<void>;
 /** Mark the book's in-flight rebuild as cancelled. The runRebuild
  *  loop checks before each write and bails out, so a subsequent
  *  `removeBookDir` cannot race with a `writeSnapshot` that would
  *  re-create the directory tree. Pair with `awaitRebuildIdle(bookId)`
  *  to wait for the in-flight rebuild to finish bailing. */
-export declare function cancelRebuild(bookId: string): void;
+export declare function cancelRebuild(bookId: string, workspaceRoot?: string): void;
 /** Test/diagnostic: snapshot of the per-book queue state. Stable
  *  enough to assert against; fields may grow over time. */
-export declare function inspectRebuildQueue(bookId: string): {
+export declare function inspectRebuildQueue(bookId: string, workspaceRoot?: string): {
     running: boolean;
     runningFromPeriod: string | null;
     pendingFromPeriod: string | null;

package/dist/server/snapshotCache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"snapshotCache.d.ts","sourceRoot":"","sources":["../../src/server/snapshotCache.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAgB,MAAM,oBAAoB,CAAC;AA2BvE;;;oEAGoE;AACpE,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA8BvH;AAED;;;6BAG6B;AAC7B,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CASvH;AAED;;sDAEsD;AACtD,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAExI;AAED;;eAEe;AACf,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAOhH;AA4HD;;;uEAGuE;AACvE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAShG;AAED;;;mDAGmD;AACnD,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMpE;AAED;;;;2DAI2D;AAC3D,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAOlD;AAED;2DAC2D;AAC3D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG;IACnD,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAWA;AAED;;mEAEmE;AACnE,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,IAAI,CAAC,CAUlE"}
+{"version":3,"file":"snapshotCache.d.ts","sourceRoot":"","sources":["../../src/server/snapshotCache.ts"],"names":[],"mappings":"AAyCA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAgB,MAAM,oBAAoB,CAAC;AA2BvE;;;oEAGoE;AACpE,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA8BvH;AAED;;;6BAG6B;AAC7B,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CASvH;AAED;;sDAEsD;AACtD,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAExI;AAED;;eAEe;AACf,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAOhH;AA2JD;;;uEAGuE;AACvE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAUhG;AAED;;;mDAGmD;AACnD,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO5F;AAED;;;;2DAI2D;AAC3D,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAO1E;AAED;2DAC2D;AAC3D,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,GACrB;IACD,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAWA;AAED;;mEAEmE;AACnE,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,IAAI,CAAC,CAUlE"}