@nklisch/pi-enhanced 0.2.3 → 0.2.5

package/node_modules/@nklisch/pi-plugins/dist/domain/time.js

@@ -1,4 +0,0 @@
-import { z } from "zod";
-/** Wall-clock values are the only time evidence that may cross processes. */
-export const EpochMillisecondsSchema = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
-//# sourceMappingURL=time.js.map

package/node_modules/@nklisch/pi-plugins/dist/domain/time.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"time.js","sourceRoot":"","sources":["../../src/domain/time.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/domain/trust-policy.d.ts

@@ -1,181 +0,0 @@
-import { z } from "zod";
-import { type CompatibilityReport } from "./compatibility.js";
-import { type ContentDigest, type ContentManifest } from "./content-manifest.js";
-import { type NormalizedPlugin } from "./plugin.js";
-import { type ResolvedMarketplaceSource, type Sha256 } from "./source.js";
-import { type TrustSubjectEvidence, type TrustStateRecord } from "./state/trust-state.js";
-import { type TrustSubjectRef } from "./state/references.js";
-import { type ScopeReference } from "./state/scope.js";
-import { type PluginKey } from "./identity.js";
-export declare const TrustCandidateSchema: z.ZodReadonly<z.ZodObject<{
-    subject: z.core.$ZodBranded<z.ZodString, "TrustSubjectRef", "out">;
-    evidence: z.ZodReadonly<z.ZodObject<{
-        plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
-        scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"user">;
-        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"project">;
-            projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
-        }, z.core.$strict>>], "kind">;
-        marketplaceSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
-        pluginSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
-        immutableRevision: z.ZodString;
-        executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
-    }, z.core.$strict>>;
-    surface: z.ZodReadonly<z.ZodObject<{
-        version: z.ZodLiteral<"executable-surface-v1">;
-        entries: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"skill">;
-            id: z.ZodString;
-            name: z.ZodString;
-            root: z.ZodString;
-        }, z.core.$strict>> | z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"hook">;
-            id: z.ZodString;
-            event: z.ZodString;
-            matcher: z.ZodOptional<z.ZodString>;
-            handler: z.ZodUnknown;
-        }, z.core.$strict>> | z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"mcp-server">;
-            id: z.ZodString;
-            nativeKey: z.ZodString;
-            declaration: z.ZodUnknown;
-        }, z.core.$strict>> | z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"configuration">;
-            key: z.ZodString;
-            valueKind: z.ZodString;
-            required: z.ZodBoolean;
-            sensitive: z.ZodBoolean;
-            constraints: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-        }, z.core.$strict>>, ...(z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"skill">;
-            id: z.ZodString;
-            name: z.ZodString;
-            root: z.ZodString;
-        }, z.core.$strict>> | z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"hook">;
-            id: z.ZodString;
-            event: z.ZodString;
-            matcher: z.ZodOptional<z.ZodString>;
-            handler: z.ZodUnknown;
-        }, z.core.$strict>> | z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"mcp-server">;
-            id: z.ZodString;
-            nativeKey: z.ZodString;
-            declaration: z.ZodUnknown;
-        }, z.core.$strict>> | z.ZodReadonly<z.ZodObject<{
-            kind: z.ZodLiteral<"configuration">;
-            key: z.ZodString;
-            valueKind: z.ZodString;
-            required: z.ZodBoolean;
-            sensitive: z.ZodBoolean;
-            constraints: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-        }, z.core.$strict>>)[]], "kind">>>>;
-    }, z.core.$strict>>;
-}, z.core.$strict>>;
-export type TrustCandidate = z.infer<typeof TrustCandidateSchema>;
-export declare const TrustDecisionSchema: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
-    kind: z.ZodLiteral<"authorized">;
-    subject: z.core.$ZodBranded<z.ZodString, "TrustSubjectRef", "out">;
-}, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
-    kind: z.ZodLiteral<"denied">;
-    reason: z.ZodEnum<{
-        ABSENT: "ABSENT";
-        EVIDENCE_MISMATCH: "EVIDENCE_MISMATCH";
-        REVOKED: "REVOKED";
-    }>;
-}, z.core.$strict>>], "kind">;
-export type TrustDecision = z.infer<typeof TrustDecisionSchema>;
-declare const TrustSurfaceSummarySchema: z.ZodReadonly<z.ZodObject<{
-    kind: z.ZodEnum<{
-        configuration: "configuration";
-        hook: "hook";
-        "mcp-server": "mcp-server";
-        skill: "skill";
-    }>;
-    identity: z.ZodString;
-}, z.core.$strict>>;
-export type TrustSurfaceSummary = z.infer<typeof TrustSurfaceSummarySchema>;
-declare const TrustSurfaceChangeSchema: z.ZodReadonly<z.ZodObject<{
-    kind: z.ZodEnum<{
-        configuration: "configuration";
-        hook: "hook";
-        "mcp-server": "mcp-server";
-        skill: "skill";
-    }>;
-    identity: z.ZodString;
-    changedFields: z.ZodReadonly<z.ZodArray<z.ZodString>>;
-}, z.core.$strict>>;
-export type TrustSurfaceChange = z.infer<typeof TrustSurfaceChangeSchema>;
-export declare const TrustChangeDescriptionSchema: z.ZodReadonly<z.ZodObject<{
-    marketplaceSourceChanged: z.ZodBoolean;
-    pluginSourceChanged: z.ZodBoolean;
-    sourceIdentityChanged: z.ZodBoolean;
-    revisionChanged: z.ZodBoolean;
-    executableSurfaceChanged: z.ZodBoolean;
-    added: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodEnum<{
-            configuration: "configuration";
-            hook: "hook";
-            "mcp-server": "mcp-server";
-            skill: "skill";
-        }>;
-        identity: z.ZodString;
-    }, z.core.$strict>>>>;
-    removed: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodEnum<{
-            configuration: "configuration";
-            hook: "hook";
-            "mcp-server": "mcp-server";
-            skill: "skill";
-        }>;
-        identity: z.ZodString;
-    }, z.core.$strict>>>>;
-    changed: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodEnum<{
-            configuration: "configuration";
-            hook: "hook";
-            "mcp-server": "mcp-server";
-            skill: "skill";
-        }>;
-        identity: z.ZodString;
-        changedFields: z.ZodReadonly<z.ZodArray<z.ZodString>>;
-    }, z.core.$strict>>>>;
-    configurationDescriptorChanges: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
-        kind: z.ZodEnum<{
-            configuration: "configuration";
-            hook: "hook";
-            "mcp-server": "mcp-server";
-            skill: "skill";
-        }>;
-        identity: z.ZodString;
-        changedFields: z.ZodReadonly<z.ZodArray<z.ZodString>>;
-    }, z.core.$strict>>>>;
-}, z.core.$strict>>;
-export type TrustChangeDescription = z.infer<typeof TrustChangeDescriptionSchema>;
-/**
- * Verify every input that can affect an exact trust subject before deriving the
- * subject. The optional binding is a caller assertion, never an authority.
- */
-export declare function createTrustCandidate(input: Readonly<{
-    scope: ScopeReference;
-    marketplaceSource: ResolvedMarketplaceSource;
-    plugin: NormalizedPlugin;
-    compatibility: CompatibilityReport;
-    content: ContentManifest;
-    materializationBinding?: ContentDigest;
-}>, sha256: Sha256): TrustCandidate;
-/** Verify all derived evidence in a candidate, including persisted digests. */
-export declare function verifyTrustCandidate(input: unknown, sha256: Sha256): TrustCandidate;
-/** Evaluate only an exact, verified subject; no name/source/revision fallback exists. */
-export declare function evaluateTrust(candidateInput: TrustCandidate, records: readonly TrustStateRecord[], sha256: Sha256): TrustDecision;
-/** Return a proposed exact grant record; persistence is owned by state services. */
-export declare function grantTrust(candidate: TrustCandidate, sha256: Sha256): TrustStateRecord;
-/** Return a proposed exact revocation record; sibling subjects remain untouched. */
-export declare function revokeTrust(candidate: TrustCandidate, sha256: Sha256): TrustStateRecord;
-/**
- * Produce presentation metadata from safe canonical fields only. This function
- * intentionally accepts candidates, never configured values or secret locators.
- */
-export declare function describeTrustChange(previous: TrustCandidate | undefined, candidateInput: TrustCandidate, sha256: Sha256): TrustChangeDescription;
-export type { ContentDigest, PluginKey, ScopeReference, TrustSubjectEvidence, TrustSubjectRef, TrustStateRecord, };

package/node_modules/@nklisch/pi-plugins/dist/domain/trust-policy.js

@@ -1,237 +0,0 @@
-import { z } from "zod";
-import { createExecutableSurface, digestExecutableSurface, ExecutableSurfaceSchema, } from "./executable-surface.js";
-import { CompatibilityReportSchema, } from "./compatibility.js";
-import { createMaterializationBinding, verifyContentManifest, } from "./content-manifest.js";
-import { NormalizedPluginSchema, } from "./plugin.js";
-import { verifyResolvedMarketplaceSource, verifyResolvedPluginSource, } from "./source.js";
-import { TrustSubjectEvidenceSchema, TrustDecisionStatusSchema, createTrustStateRecord, deriveTrustSubject, verifyTrustStateRecord, } from "./state/trust-state.js";
-import { TrustSubjectRefSchema, } from "./state/references.js";
-import { ScopeReferenceSchema } from "./state/scope.js";
-import {} from "./identity.js";
-export const TrustCandidateSchema = z.object({
-    subject: TrustSubjectRefSchema,
-    evidence: TrustSubjectEvidenceSchema,
-    surface: ExecutableSurfaceSchema,
-}).strict().readonly();
-export const TrustDecisionSchema = z.discriminatedUnion("kind", [
-    z.object({
-        kind: z.literal("authorized"),
-        subject: TrustSubjectRefSchema,
-    }).strict().readonly(),
-    z.object({
-        kind: z.literal("denied"),
-        reason: z.enum(["ABSENT", "REVOKED", "EVIDENCE_MISMATCH"]),
-    }).strict().readonly(),
-]);
-const TrustSurfaceSummarySchema = z.object({
-    kind: z.enum(["skill", "hook", "mcp-server", "configuration"]),
-    identity: z.string().min(1),
-}).strict().readonly();
-const TrustSurfaceChangeSchema = z.object({
-    kind: z.enum(["skill", "hook", "mcp-server", "configuration"]),
-    identity: z.string().min(1),
-    changedFields: z.array(z.string().min(1)).nonempty().readonly(),
-}).strict().readonly();
-export const TrustChangeDescriptionSchema = z.object({
-    marketplaceSourceChanged: z.boolean(),
-    pluginSourceChanged: z.boolean(),
-    sourceIdentityChanged: z.boolean(),
-    revisionChanged: z.boolean(),
-    executableSurfaceChanged: z.boolean(),
-    added: z.array(TrustSurfaceSummarySchema).readonly(),
-    removed: z.array(TrustSurfaceSummarySchema).readonly(),
-    changed: z.array(TrustSurfaceChangeSchema).readonly(),
-    configurationDescriptorChanges: z.array(TrustSurfaceChangeSchema).readonly(),
-}).strict().readonly();
-function samePluginIdentity(plugin, report) {
-    return plugin.identity.key === report.plugin.key &&
-        plugin.identity.marketplaceName === report.plugin.marketplaceName &&
-        plugin.identity.marketplaceEntryName === report.plugin.marketplaceEntryName &&
-        plugin.identity.manifestName === report.plugin.manifestName;
-}
-function createEvidence(scope, marketplaceSource, pluginSource, plugin, surface, materializationBinding, sha256) {
-    const evidence = TrustSubjectEvidenceSchema.parse({
-        plugin: plugin.identity.key,
-        scope,
-        marketplaceSource: marketplaceSource.canonical,
-        pluginSource: pluginSource.canonical,
-        immutableRevision: materializationBinding,
-        executableSurfaceDigest: digestExecutableSurface(surface, sha256),
-    });
-    return evidence;
-}
-/**
- * Verify every input that can affect an exact trust subject before deriving the
- * subject. The optional binding is a caller assertion, never an authority.
- */
-export function createTrustCandidate(input, sha256) {
-    const scope = ScopeReferenceSchema.parse(input.scope);
-    const marketplaceSource = verifyResolvedMarketplaceSource(input.marketplaceSource, sha256);
-    const plugin = NormalizedPluginSchema.parse(input.plugin);
-    const pluginSource = verifyResolvedPluginSource(plugin.source, sha256);
-    const compatibility = CompatibilityReportSchema.parse(input.compatibility);
-    if (!samePluginIdentity(plugin, compatibility)) {
-        throw new Error("compatibility report identity does not match plugin");
-    }
-    const content = verifyContentManifest(input.content, sha256);
-    const binding = createMaterializationBinding(pluginSource.hash, content.rootDigest, sha256);
-    if (input.materializationBinding !== undefined && input.materializationBinding !== binding) {
-        throw new Error("materialization binding does not match source and content");
-    }
-    if (pluginSource.kind === "marketplace-path" &&
-        pluginSource.marketplaceRevision !== marketplaceSource.revision) {
-        throw new Error("marketplace-relative plugin source does not match marketplace revision");
-    }
-    const surface = createExecutableSurface(plugin, compatibility);
-    const evidence = createEvidence(scope, marketplaceSource, pluginSource, plugin, surface, binding, sha256);
-    const subject = deriveTrustSubject(evidence, sha256);
-    return TrustCandidateSchema.parse({ subject, evidence, surface });
-}
-/** Verify all derived evidence in a candidate, including persisted digests. */
-export function verifyTrustCandidate(input, sha256) {
-    const candidate = TrustCandidateSchema.parse(input);
-    const evidence = TrustSubjectEvidenceSchema.parse(candidate.evidence);
-    const surface = ExecutableSurfaceSchema.parse(candidate.surface);
-    if (digestExecutableSurface(surface, sha256) !== evidence.executableSurfaceDigest) {
-        throw new Error("trust candidate executable surface digest does not match evidence");
-    }
-    if (deriveTrustSubject(evidence, sha256) !== candidate.subject) {
-        throw new Error("trust candidate subject does not match evidence");
-    }
-    return candidate;
-}
-function sameEvidence(left, right) {
-    return left.plugin === right.plugin &&
-        left.scope.kind === right.scope.kind &&
-        (left.scope.kind === "user" ||
-            (right.scope.kind === "project" && left.scope.projectKey === right.scope.projectKey)) &&
-        left.marketplaceSource === right.marketplaceSource &&
-        left.pluginSource === right.pluginSource &&
-        left.immutableRevision === right.immutableRevision &&
-        left.executableSurfaceDigest === right.executableSurfaceDigest;
-}
-/** Evaluate only an exact, verified subject; no name/source/revision fallback exists. */
-export function evaluateTrust(candidateInput, records, sha256) {
-    let candidate;
-    try {
-        candidate = verifyTrustCandidate(candidateInput, sha256);
-    }
-    catch {
-        return { kind: "denied", reason: "EVIDENCE_MISMATCH" };
-    }
-    const validRecords = [];
-    const subjects = new Set();
-    try {
-        for (const raw of records) {
-            const record = verifyTrustStateRecord(raw, sha256);
-            if (subjects.has(record.subject)) {
-                return { kind: "denied", reason: "EVIDENCE_MISMATCH" };
-            }
-            subjects.add(record.subject);
-            validRecords.push(record);
-        }
-    }
-    catch {
-        return { kind: "denied", reason: "EVIDENCE_MISMATCH" };
-    }
-    const record = validRecords.find((entry) => entry.subject === candidate.subject);
-    if (record === undefined)
-        return { kind: "denied", reason: "ABSENT" };
-    if (!sameEvidence(record.evidence, candidate.evidence)) {
-        return { kind: "denied", reason: "EVIDENCE_MISMATCH" };
-    }
-    if (record.status === "revoked")
-        return { kind: "denied", reason: "REVOKED" };
-    return { kind: "authorized", subject: candidate.subject };
-}
-function createTrustRecord(candidateInput, status, sha256) {
-    const candidate = verifyTrustCandidate(candidateInput, sha256);
-    return createTrustStateRecord({
-        subject: candidate.subject,
-        evidence: candidate.evidence,
-        status,
-    }, sha256);
-}
-/** Return a proposed exact grant record; persistence is owned by state services. */
-export function grantTrust(candidate, sha256) {
-    return createTrustRecord(candidate, "granted", sha256);
-}
-/** Return a proposed exact revocation record; sibling subjects remain untouched. */
-export function revokeTrust(candidate, sha256) {
-    return createTrustRecord(candidate, "revoked", sha256);
-}
-function entryIdentity(entry) {
-    switch (entry.kind) {
-        case "skill":
-        case "hook":
-        case "mcp-server":
-            return entry.id;
-        case "configuration":
-            return entry.key;
-        default:
-            return assertNever(entry);
-    }
-}
-function changedFields(left, right) {
-    const fields = new Set([...Object.keys(left), ...Object.keys(right)]);
-    fields.delete("kind");
-    fields.delete("id");
-    fields.delete("key");
-    return [...fields].filter((field) => JSON.stringify(left[field]) !==
-        JSON.stringify(right[field])).sort();
-}
-function summary(entry) {
-    return { kind: entry.kind, identity: entryIdentity(entry) };
-}
-/**
- * Produce presentation metadata from safe canonical fields only. This function
- * intentionally accepts candidates, never configured values or secret locators.
- */
-export function describeTrustChange(previous, candidateInput, sha256) {
-    const candidate = verifyTrustCandidate(candidateInput, sha256);
-    const prior = previous === undefined ? undefined : verifyTrustCandidate(previous, sha256);
-    const marketplaceSourceChanged = prior !== undefined &&
-        prior.evidence.marketplaceSource !== candidate.evidence.marketplaceSource;
-    const pluginSourceChanged = prior !== undefined &&
-        prior.evidence.pluginSource !== candidate.evidence.pluginSource;
-    const revisionChanged = prior !== undefined &&
-        prior.evidence.immutableRevision !== candidate.evidence.immutableRevision;
-    const executableSurfaceChanged = prior === undefined
-        ? candidate.evidence.executableSurfaceDigest !== ""
-        : prior.evidence.executableSurfaceDigest !== candidate.evidence.executableSurfaceDigest;
-    const previousByIdentity = new Map((prior?.surface.entries ?? []).map((entry) => [entryIdentity(entry), entry]));
-    const currentByIdentity = new Map(candidate.surface.entries.map((entry) => [entryIdentity(entry), entry]));
-    const added = [];
-    const removed = [];
-    const changed = [];
-    for (const entry of candidate.surface.entries) {
-        const priorEntry = previousByIdentity.get(entryIdentity(entry));
-        if (priorEntry === undefined) {
-            added.push(summary(entry));
-            continue;
-        }
-        const fields = changedFields(priorEntry, entry);
-        if (fields.length > 0)
-            changed.push({ ...summary(entry), changedFields: fields });
-    }
-    for (const entry of prior?.surface.entries ?? []) {
-        if (!currentByIdentity.has(entryIdentity(entry)))
-            removed.push(summary(entry));
-    }
-    const configurationDescriptorChanges = changed.filter((entry) => entry.kind === "configuration");
-    return TrustChangeDescriptionSchema.parse({
-        marketplaceSourceChanged,
-        pluginSourceChanged,
-        sourceIdentityChanged: marketplaceSourceChanged || pluginSourceChanged,
-        revisionChanged,
-        executableSurfaceChanged,
-        added,
-        removed,
-        changed,
-        configurationDescriptorChanges,
-    });
-}
-function assertNever(value) {
-    throw new Error(`unhandled trust surface variant: ${String(value)}`);
-}
-//# sourceMappingURL=trust-policy.js.map

package/node_modules/@nklisch/pi-plugins/dist/domain/trust-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trust-policy.js","sourceRoot":"","sources":["../../src/domain/trust-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,GAGxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,yBAAyB,GAE1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,GAGtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,GAEvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,+BAA+B,EAC/B,0BAA0B,GAI3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,GAGvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,GAEtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAuB,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAkB,MAAM,eAAe,CAAC;AAE/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,qBAAqB;IAC9B,QAAQ,EAAE,0BAA0B;IACpC,OAAO,EAAE,uBAAuB;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAGvB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9D,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC7B,OAAO,EAAE,qBAAqB;KAC/B,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtB,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;KAC3D,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvB,CAAC,CAAC;AAGH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAGvB,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAChE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAGvB,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE;IACrC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;IAChC,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE;IAClC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;IACpD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;IACtD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IACrD,8BAA8B,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;CAC7E,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAGvB,SAAS,kBAAkB,CAAC,MAAwB,EAAE,MAA2B;IAC/E,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,GAAG;QAC9C,MAAM,CAAC,QAAQ,CAAC,eAAe,KAAK,MAAM,CAAC,MAAM,CAAC,eAAe;QACjE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,KAAK,MAAM,CAAC,MAAM,CAAC,oBAAoB;QAC3E,MAAM,CAAC,QAAQ,CAAC,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;AAChE,CAAC;AAED,SAAS,cAAc,CACrB,KAAqB,EACrB,iBAA4C,EAC5C,YAAkC,EAClC,MAAwB,EACxB,OAA0B,EAC1B,sBAAqC,EACrC,MAAc;IAEd,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC;QAChD,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;QAC3B,KAAK;QACL,iBAAiB,EAAE,iBAAiB,CAAC,SAAS;QAC9C,YAAY,EAAE,YAAY,CAAC,SAAS;QACpC,iBAAiB,EAAE,sBAAsB;QACzC,uBAAuB,EAAE,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC;KAClE,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAOE,EACF,MAAc;IAEd,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,+BAA+B,CAAC,KAAK,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC3E,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,4BAA4B,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5F,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS,IAAI,KAAK,CAAC,sBAAsB,KAAK,OAAO,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,IACE,YAAY,CAAC,IAAI,KAAK,kBAAkB;QACxC,YAAY,CAAC,mBAAmB,KAAK,iBAAiB,CAAC,QAAQ,EAC/D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,cAAc,CAC7B,KAAK,EACL,iBAAiB,EACjB,YAAY,EACZ,MAAM,EACN,OAAO,EACP,OAAO,EACP,MAAM,CACP,CAAC;IACF,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrD,OAAO,oBAAoB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,MAAc;IAEd,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,QAAQ,CAAC,uBAAuB,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,IAA0B,EAAE,KAA2B;IAC3E,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QACjC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI;QACpC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;YACzB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvF,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;QAClD,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;QACxC,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB;QAClD,IAAI,CAAC,uBAAuB,KAAK,KAAK,CAAC,uBAAuB,CAAC;AACnE,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAC3B,cAA8B,EAC9B,OAAoC,EACpC,MAAc;IAEd,IAAI,SAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,SAAS,GAAG,oBAAoB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,YAAY,GAAuB,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YACzD,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7B,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACtE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,iBAAiB,CACxB,cAA8B,EAC9B,MAAiD,EACjD,MAAc;IAEd,MAAM,SAAS,GAAG,oBAAoB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO,sBAAsB,CAAC;QAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,MAAM;KACP,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,SAAyB,EAAE,MAAc;IAClE,OAAO,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,SAAyB,EAAE,MAAc;IACnE,OAAO,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,KAA6B;IAClD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY;YACf,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,KAAK,eAAe;YAClB,OAAO,KAAK,CAAC,GAAG,CAAC;QACnB;YACE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAA4B,EAAE,KAA6B;IAChF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAClC,IAAI,CAAC,SAAS,CAAE,IAAgC,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,CAAE,KAAiC,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC,IAAI,EAAE,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,KAA6B;IAC5C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAoC,EACpC,cAA8B,EAC9B,MAAc;IAEd,MAAM,SAAS,GAAG,oBAAoB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1F,MAAM,wBAAwB,GAAG,KAAK,KAAK,SAAS;QAClD,KAAK,CAAC,QAAQ,CAAC,iBAAiB,KAAK,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC5E,MAAM,mBAAmB,GAAG,KAAK,KAAK,SAAS;QAC7C,KAAK,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;IAClE,MAAM,eAAe,GAAG,KAAK,KAAK,SAAS;QACzC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,KAAK,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC5E,MAAM,wBAAwB,GAAG,KAAK,KAAK,SAAS;QAClD,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,uBAAuB,KAAK,EAAE;QACnD,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,uBAAuB,KAAK,SAAS,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAE1F,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3G,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,8BAA8B,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;IACjG,OAAO,4BAA4B,CAAC,KAAK,CAAC;QACxC,wBAAwB;QACxB,mBAAmB;QACnB,qBAAqB,EAAE,wBAAwB,IAAI,mBAAmB;QACtE,eAAe;QACf,wBAAwB;QACxB,KAAK;QACL,OAAO;QACP,OAAO;QACP,8BAA8B;KAC/B,CAAC,CAAC;AACL,CAAC;AAWD,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACvE,CAAC"}