@npm-safe/core-dsh 1.0.5

package/dist/index.d.ts

@@ -0,0 +1,513 @@
+/**
+ * Unified composition layer for @npm-safe/core.
+ *
+ * {@link NpmSafeEngine} combines the database, cache, registry client, rate
+ * limiter, static analyzer, and refresh scheduler into a single facade that
+ * exposes the full public API of the engine.
+ *
+ * @module index
+ */
+import type { SearchResult } from './registry/types.js';
+import { type RuleDescriptor } from './scanner/static-rules.js';
+import type { ScanRule } from './scanner/types.js';
+import { SecurityLevel, Severity } from './scanner/types.js';
+import type { StaticScanReport } from './scanner/types.js';
+import type { LlmScanReport } from './scanner/types.js';
+import { RuleConfigManager } from './scanner/rule-config.js';
+import type { CiReport, CiScanOptions } from './scanner/ci-scan.js';
+import type { LlmProviderOptions } from './llm/provider.js';
+import type { LlmConfig, LlmStatus } from './llm/llm-config.js';
+/**
+ * Options accepted by the {@link NpmSafeEngine} constructor.
+ */
+export interface NpmSafeEngineOptions {
+    /**
+     * Filesystem path to the SQLite database file.
+     * @default './npm-safe.db'
+     */
+    readonly dbPath?: string;
+    /**
+     * Base URL of the npm registry.
+     * @default 'https://registry.npmjs.org'
+     */
+    readonly registryUrl?: string;
+    /**
+     * Token bucket refill rate (tokens per second).
+     * @default 5
+     */
+    readonly rateLimit?: number;
+    /**
+     * Maximum burst size for the token bucket.
+     * @default 10
+     */
+    readonly rateLimitBurst?: number;
+    /**
+     * Cache TTL for package metadata in milliseconds.
+     * @default 3600000 (1 hour)
+     */
+    readonly cacheTtlMs?: number;
+    /**
+     * HTTP proxy URL used for registry requests (e.g.
+     * `http://127.0.0.1:7897`). When omitted, the conventional environment
+     * variables (`HTTPS_PROXY`, `HTTP_PROXY`, `ALL_PROXY`) are consulted.
+     */
+    readonly proxy?: string;
+    /** Optional LLM security scanner configuration (OpenAI / Gemini / Anthropic). */
+    readonly llm?: LlmProviderOptions;
+    /**
+     * Path to the LLM provider configuration JSON file.
+     * @default '~/.npm-safe/llm.json'
+     */
+    readonly llmConfigPath?: string;
+    /**
+     * Path to the per-rule configuration JSON file.
+     * @default '~/.npm-safe/rules.json'
+     */
+    readonly rulesConfigPath?: string;
+    /**
+     * Directory scanned for third-party rule plugin files (`*.mjs` / `*.js`).
+     * @default '~/.npm-safe/rules/'
+     */
+    readonly rulesDir?: string;
+}
+/**
+ * Result of a {@link NpmSafeEngine.checkPackage} call.
+ */
+export interface CheckResult {
+    /** Name of the checked package. */
+    readonly packageName: string;
+    /** Whether the package exists on the registry. */
+    readonly exists: boolean;
+    /** The latest available version, or an empty string when `exists` is `false`. */
+    readonly latestVersion: string;
+    /** Security assessment of the package. */
+    readonly security: {
+        /** Overall security level derived from the combined scan. */
+        readonly overallLevel: SecurityLevel;
+        /** Numeric security score (0–100, higher is safer). */
+        readonly overallScore: number;
+        /** Full static scan report, or `null` if one is not available. */
+        readonly staticScan: StaticScanReport | null;
+        /** Optional semantic analysis from the configured LLM provider. */
+        readonly llmScan?: LlmScanReport;
+    };
+    /**
+     * Basic registry metadata, or `null` when the package does not exist.
+     */
+    readonly registryInfo: {
+        /** Human-readable description of the package. */
+        readonly description: string;
+        /** URL to the package's homepage. */
+        readonly homepage: string;
+        /** Repository descriptor as a string (e.g. `"github:user/repo"`). */
+        readonly repository: string;
+    } | null;
+    /**
+     * ISO-8601 timestamp of when this result was last cached, or `null` when
+     * the exact cached-at time is not known (e.g. served from an earlier cache
+     * hit whose timestamp was not recorded).
+     */
+    readonly cachedAt: string | null;
+}
+/**
+ * Options accepted by {@link NpmSafeEngine.checkPackage}.
+ */
+export interface CheckPackageOptions {
+    /**
+     * When `true`, skip the ENTIRE cache-hit fast path (including
+     * `cache.getPackage`, `cache.getSecurityReport`, and
+     * `cache.getLlmScanReport`) and always execute the cache-miss path: fetch
+     * fresh metadata from the registry, persist it, re-run the static analyzer,
+     * persist the security report, and run the LLM scan. In other words,
+     * `forceRefresh` mirrors the stale-fetch path exactly. Useful when the
+     * caller knows the cached data is stale or wants to re-validate against the
+     * live registry regardless of TTL.
+     * @default false
+     */
+    readonly forceRefresh?: boolean;
+    /**
+     * Optional external abort signal. When supplied, the signal is forwarded
+     * to the registry fetch (`client.getPackageMetadata`) and the LLM scan so
+     * an abort during in-flight work settles the promise promptly with
+     * `DOMException('The operation was aborted.', 'AbortError')` (cooperative
+     * cancellation).
+     */
+    readonly signal?: AbortSignal;
+}
+/**
+ * Options accepted by {@link NpmSafeEngine.checkPackages}.
+ */
+export interface BatchCheckOptions {
+    /**
+     * Maximum number of concurrent checks. Every check still consumes one
+     * token from the rate limiter.
+     * @default 5
+     */
+    readonly concurrency?: number;
+    /**
+     * Optional external abort signal forwarded to each worker's
+     * {@link NpmSafeEngine.checkPackage} call. The worker loop short-circuits
+     * at the top of each iteration when this signal is aborted, so a long
+     * batch settles promptly instead of continuing to iterate.
+     */
+    readonly signal?: AbortSignal;
+    /**
+     * Progress callback invoked after each package completes. `done` counts
+     * completed packages (both successes and failures); `total` is the input
+     * length.
+     */
+    readonly onProgress?: (done: number, total: number, entry: BatchPackageResult) => void;
+}
+/**
+ * One entry of the result array returned by
+ * {@link NpmSafeEngine.checkPackages}, in input order.
+ */
+export interface BatchPackageResult {
+    /** Input package name. */
+    readonly name: string;
+    /** Whether the check succeeded. */
+    readonly ok: boolean;
+    /** The check result when `ok` is `true`. */
+    readonly result?: CheckResult;
+    /** Error message when `ok` is `false`. */
+    readonly error?: string;
+}
+/**
+ * Unified facade that composes every @npm-safe/core module into a single
+ * public API surface.
+ *
+ * Construct an instance with optional {@link NpmSafeEngineOptions}, then use
+ * its methods to check, search, watch, refresh, and configure npm packages.
+ *
+ * @example
+ * ```ts
+ * const engine = new NpmSafeEngine({ dbPath: './my-cache.db' });
+ * const result = await engine.checkPackage('lodash');
+ * console.log(result.security.overallLevel);
+ * await engine.close();
+ * ```
+ */
+export declare class NpmSafeEngine {
+    /** Database connection manager. */
+    private readonly database;
+    /** Cache read/write layer. */
+    private readonly cache;
+    /** HTTP client for the npm registry. */
+    private readonly client;
+    /** Token bucket rate limiter. */
+    private readonly limiter;
+    /** Static analysis engine. */
+    private readonly analyzer;
+    /** Per-rule configuration (enabled / severity / options). */
+    private readonly ruleConfig;
+    /** Auto-refresh scheduler. */
+    private readonly scheduler;
+    /** LLM provider configuration manager. */
+    private readonly llmConfig;
+    /** Optional semantic security scanner. */
+    private llmProvider?;
+    /**
+     * @param options - Optional configuration overrides; see
+     *   {@link NpmSafeEngineOptions} for available options.
+     */
+    constructor(options?: NpmSafeEngineOptions);
+    /**
+     * Check a package by name, returning cached data if still fresh, or fetching
+     * from the registry, running static analysis, and caching the result.
+     *
+     * When the package does not exist on the registry (HTTP 404) the returned
+     * {@link CheckResult.exists} is `false` and the security / registry info
+     * fields are empty. All other errors (network failure, timeout, …) are
+     * rethrown so the caller can handle them appropriately.
+     *
+     * Pass `{ forceRefresh: true }` to skip the cache-hit fast path entirely
+     * and always re-fetch from the registry. Pass `{ signal }` to make the
+     * check cooperatively cancellable — an abort settles the promise promptly
+     * with `DOMException('The operation was aborted.', 'AbortError')`.
+     *
+     * @param name - Fully-qualified package name (scope included when scoped).
+     * @param options - Optional check options (forceRefresh, signal).
+     * @returns A promise that resolves to the check result.
+     */
+    checkPackage(name: string, options?: CheckPackageOptions): Promise<CheckResult>;
+    /**
+     * Search the npm registry for packages matching a text query.
+     *
+     * @param query - Free-text search query.
+     * @param options - Optional search options. `options.size` caps the number
+     *   of results (defaults to 20); `options.signal` is forwarded to the
+     *   registry client for cooperative cancellation. Search is not cached, so
+     *   there is no `forceRefresh` option here.
+     * @returns An array of search-result hits, ordered by relevance.
+     */
+    searchPackages(query: string, options?: {
+        readonly size?: number;
+        readonly signal?: AbortSignal;
+    }): Promise<SearchResult[]>;
+    /**
+     * Check many packages in parallel with a shared concurrency cap.
+     *
+     * Every check consumes one token from the rate limiter, so the batch
+     * respects the configured request budget even when running concurrently.
+     * Individual failures are isolated: a package that throws (network error,
+     * timeout, …) yields a `{ ok: false, error }` entry instead of rejecting
+     * the whole batch. Use `checkPackage` when the raw error must propagate.
+     *
+     * @param names - Package names to check.
+     * @param options - Batch options (concurrency, progress callback).
+     * @returns One entry per input name, in input order.
+     */
+    checkPackages(names: readonly string[], options?: BatchCheckOptions): Promise<BatchPackageResult[]>;
+    /**
+     * Scan a project's dependencies and return a CI report with a failure gate.
+     *
+     * Reads dependencies from `package.json` (or `package-lock.json` when
+     * `options.lockfile` is set), checks each one via {@link checkPackage}, and
+     * aggregates the results into a {@link CiReport}. The report's `failed` flag
+     * is `true` when any dependency reaches `options.failLevel` (inclusive) or
+     * when any check throws.
+     *
+     * This method is a pure computation — it does NOT log, format, or set process
+     * exit codes. The caller (CLI or plugin) renders the report and maps `failed`
+     * to an exit code.
+     *
+     * When `options.signal` is supplied, the loop short-circuits at the top of
+     * each iteration on abort and rejects with
+     * `DOMException('The operation was aborted.', 'AbortError')` so an aborted
+     * scan does not keep iterating deps (cooperative cancellation).
+     *
+     * @param options - Optional scan configuration. Defaults:
+     *   `dir = process.cwd()`, `failLevel = SecurityLevel.Dangerous`.
+     * @returns A {@link CiReport} describing every checked dependency.
+     */
+    ciScan(options?: CiScanOptions): Promise<CiReport>;
+    /**
+     * Returns the list of package names currently on the watchlist.
+     *
+     * @returns All watched package names, in insertion order.
+     */
+    getWatchlist(): Promise<string[]>;
+    /**
+     * Add a package to the watchlist. Idempotent — adding a name that is already
+     * watched is a no-op.
+     *
+     * @param name - Fully-qualified package name to watch.
+     */
+    addToWatchlist(name: string): Promise<void>;
+    /**
+     * Remove a package from the watchlist. No-op if the name was not watched.
+     *
+     * @param name - Fully-qualified package name to stop watching.
+     */
+    removeFromWatchlist(name: string): Promise<void>;
+    /**
+     * Refresh a single package: fetch its latest metadata from the registry,
+     * re-run static analysis, and persist the results.
+     *
+     * Per-package failures are surfaced via the scheduler's `refresh:error`
+     * event and represented by a `false` result rather than thrown, so a
+     * failing package does not abort a batch. An external abort
+     * (`options.signal` aborted) propagates as
+     * `DOMException('The operation was aborted.', 'AbortError')`.
+     *
+     * @param name - Fully-qualified package name to refresh.
+     * @param options - Optional refresh options. `options.signal` is forwarded
+     *   to the registry fetch and LLM scan.
+     */
+    refreshPackage(name: string, options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<boolean>;
+    /**
+     * Refresh every package whose cached metadata has passed its TTL.
+     *
+     * Packages are processed sequentially so the rate limiter is respected.
+     * When `options.signal` is supplied, the loop short-circuits at the top of
+     * each iteration on abort and rejects with
+     * `DOMException('The operation was aborted.', 'AbortError')`.
+     *
+     * @param options - Optional refresh options. `options.signal` is forwarded
+     *   to each per-package refresh.
+     */
+    refreshAll(options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<boolean>;
+    /**
+     * Retrieve a setting value by key.
+     *
+     * @param key - Settings key.
+     * @returns The stored value, or `null` if the key is unset.
+     */
+    getSetting(key: string): Promise<string | null>;
+    /**
+     * Upsert a setting value by key.
+     *
+     * @param key - Settings key.
+     * @param value - Value to persist.
+     */
+    setSetting(key: string, value: string): Promise<void>;
+    /**
+     * Record a check into the persistent history database. Used by the CLI and
+     * the desktop extension so history is shared across both frontends.
+     *
+     * @param result - A check result for an existing package.
+     */
+    recordCheckHistory(result: CheckResult): Promise<void>;
+    /**
+     * Append a raw history entry (newest-first, capped at 1000).
+     */
+    recordHistoryEntry(entry: {
+        readonly packageName: string;
+        readonly level: string;
+        readonly score: number;
+        readonly timestamp: string;
+    }): Promise<void>;
+    /**
+     * Return the persistent check history, newest first (capped at 1000).
+     */
+    getCheckHistory(limit?: number): Promise<ReadonlyArray<{
+        readonly packageName: string;
+        readonly level: string;
+        readonly score: number;
+        readonly timestamp: string;
+    }>>;
+    /**
+     * Clear the persistent check history.
+     */
+    clearCheckHistory(): Promise<void>;
+    /**
+     * Register a scan rule at runtime. A rule with the same id replaces the
+     * existing one.
+     *
+     * @param rule - The rule to register.
+     */
+    registerRule(rule: ScanRule): void;
+    /**
+     * Remove a scan rule by id.
+     *
+     * @param ruleId - Id of the rule to remove.
+     * @returns `true` if a rule was removed, `false` if no such rule exists.
+     */
+    unregisterRule(ruleId: string): boolean;
+    /**
+     * Describe every registered rule with its effective status.
+     *
+     * @returns Rule descriptors in registration order.
+     */
+    listRules(): RuleDescriptor[];
+    /**
+     * Enable or disable a rule (persisted in the rules config file).
+     *
+     * @param ruleId - Id of the rule.
+     * @param enabled - Whether the rule should run.
+     */
+    setRuleEnabled(ruleId: string, enabled: boolean): void;
+    /**
+     * Override a rule's severity (persisted). Pass `undefined` to clear the
+     * override and return to the rule's default severity.
+     *
+     * @param ruleId - Id of the rule.
+     * @param severity - Severity override, or `undefined` to clear.
+     */
+    setRuleSeverity(ruleId: string, severity: Severity | undefined): void;
+    /**
+     * Set free-form options for a rule (persisted). Rule implementations can
+     * read these via the rule config manager.
+     *
+     * @param ruleId - Id of the rule.
+     * @param options - Free-form options.
+     */
+    setRuleOptions(ruleId: string, options: Readonly<Record<string, unknown>>): void;
+    /**
+     * Access the rule configuration manager for low-level inspection.
+     *
+     * @returns The rule configuration manager backing this engine.
+     */
+    getRuleConfig(): RuleConfigManager;
+    /**
+     * Load third-party rules from a directory of ES module files.
+     *
+     * Each `*.mjs` / `*.js` file may export a `rule`, `rules`, or `default`
+     * binding holding one or more {@link ScanRule}s. Files that fail to load
+     * are skipped.
+     *
+     * @param dir - Directory to scan. Defaults to `~/.npm-safe/rules/`.
+     * @returns The number of rules loaded.
+     */
+    loadRulePlugins(dir?: string): Promise<number>;
+    /**
+     * Get the raw LLM configuration, including the API key.
+     *
+     * @returns The current persisted LLM config.
+     */
+    getLlmConfig(): LlmConfig;
+    /**
+     * Get a masked, display-safe view of the LLM status.
+     *
+     * @returns Status object safe to render in a UI.
+     */
+    getLlmStatus(): LlmStatus;
+    /**
+     * Update the LLM configuration and recreate the provider.
+     *
+     * The change is persisted immediately. If LLM scanning is disabled or no
+     * API key is available, the provider is set to `undefined` so the rest of the
+     * engine continues unaffected.
+     *
+     * @param update - Partial config update. Pass `{ enabled: false }` to disable.
+     */
+    setLlmConfig(update: Partial<LlmConfig>): void;
+    /**
+     * Test whether the current LLM configuration can connect to its provider.
+     *
+     * @returns `true` if the provider is enabled, configured, and the test call
+     *   succeeds; `false` otherwise.
+     */
+    testLlmConnection(): Promise<boolean>;
+    /**
+     * Start the periodic auto-refresh loop.
+     *
+     * The first refresh cycle kicks off immediately in the background; subsequent
+     * cycles repeat at `intervalMs`. Safe to call multiple times — calling while
+     * already running resets the interval.
+     *
+     * @param intervalMs - Milliseconds between refresh cycles.
+     *   Defaults to 1 hour.
+     */
+    startAutoRefresh(intervalMs?: number): void;
+    /**
+     * Stop the periodic auto-refresh loop.
+     *
+     * Safe to call when the scheduler is not running. Any in-flight refresh
+     * continues to completion.
+     */
+    stopAutoRefresh(): void;
+    /**
+     * Release all resources held by the engine.
+     *
+     * Stops the auto-refresh scheduler, disposes the rate-limiter timer, and
+     * closes the database connection. After calling this method the engine
+     * instance must not be used for further operations.
+     */
+    close(): void;
+    /**
+     * Assemble a {@link CheckResult} from its constituent parts.
+     */
+    private buildCheckResult;
+    private scanWithLlm;
+}
+export { createLlmProvider, LlmProviderError } from './llm/provider.js';
+export type { LlmProviderOptions, LlmScanInput, LlmScanProvider, } from './llm/provider.js';
+export { LlmConfigManager, getDefaultLlmConfigPath } from './llm/llm-config.js';
+export type { LlmConfig, LlmStatus } from './llm/llm-config.js';
+export { RuleConfigManager } from './scanner/rule-config.js';
+export type { RuleConfig, RuleConfigFile, RuleOptions } from './scanner/rule-config.js';
+export { loadRulesFromDirectory } from './scanner/rule-loader.js';
+export type { LoadedRuleFile, RuleModuleExport } from './scanner/rule-loader.js';
+export type { RuleDescriptor } from './scanner/static-rules.js';
+export { DatabaseManager } from './store/database.js';
+export { CacheManager, DEFAULT_CACHE_TTL_MS, MAX_CHECK_HISTORY } from './store/cache-manager.js';
+export type { CacheManagerOptions } from './store/cache-manager.js';
+export { SecurityLevel, Severity } from './scanner/types.js';
+export { LEVEL_RANK, readDependencies, readLockfileDependencies } from './scanner/ci-scan.js';
+export type { CiReport, CiScanOptions, PackageResult, Dependency } from './scanner/ci-scan.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAsC,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE5F,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAA6B,MAAM,sBAAsB,CAAC;AAE/F,OAAO,KAAK,EAAE,kBAAkB,EAAmB,MAAM,mBAAmB,CAAC;AAE7E,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAMhE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,iFAAiF;IACjF,QAAQ,CAAC,GAAG,CAAC,EAAE,kBAAkB,CAAC;IAElC;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAElC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,kDAAkD;IAClD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEzB,iFAAiF;IACjF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,EAAE;QACjB,6DAA6D;QAC7D,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;QACrC,uDAAuD;QACvD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,kEAAkE;QAClE,QAAQ,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAC;QAC7C,mEAAmE;QACnE,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;KAClC,CAAC;IAEF;;OAEG;IACH,QAAQ,CAAC,YAAY,EAAE;QACrB,iDAAiD;QACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,qCAAqC;QACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,qEAAqE;QACrE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,GAAG,IAAI,CAAC;IAET;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAEhC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAE9B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CACpB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,kBAAkB,KACtB,IAAI,CAAC;CACX;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,aAAa;IACxB,mCAAmC;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,8BAA8B;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,iCAAiC;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,8BAA8B;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,6DAA6D;IAC7D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,8BAA8B;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,0CAA0C;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,0CAA0C;IAC1C,OAAO,CAAC,WAAW,CAAC,CAAkB;IAEtC;;;OAGG;gBACS,OAAO,CAAC,EAAE,oBAAoB;IAiC1C;;;;;;;;;;;;;;;;;OAiBG;IACG,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,WAAW,CAAC;IAyFvB;;;;;;;;;OASG;IACG,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAClE,OAAO,CAAC,YAAY,EAAE,CAAC;IAO1B;;;;;;;;;;;;OAYG;IACG,aAAa,CACjB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAoDhC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,MAAM,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC;IAiFxD;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAIvC;;;;;OAKG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD;;;;OAIG;IACG,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQtD;;;;;;;;;;;;;OAaG;IACG,cAAc,CAClB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC1C,OAAO,CAAC,OAAO,CAAC;IAInB;;;;;;;;;;OAUG;IACG,UAAU,CACd,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC1C,OAAO,CAAC,OAAO,CAAC;IAQnB;;;;;OAKG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIrD;;;;;OAKG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3D;;;;;OAKG;IACG,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5D;;OAEG;IACG,kBAAkB,CAAC,KAAK,EAAE;QAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjB;;OAEG;IACG,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAC5C,aAAa,CAAC;QACZ,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC,CACH;IAID;;OAEG;IACG,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQxC;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI;IAIlC;;;;;OAKG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIvC;;;;OAIG;IACH,SAAS,IAAI,cAAc,EAAE;IAI7B;;;;;OAKG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAItD;;;;;;OAMG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI;IAIrE;;;;;;OAMG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI;IAIhF;;;;OAIG;IACH,aAAa,IAAI,iBAAiB;IAIlC;;;;;;;;;OASG;IACG,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBpD;;;;OAIG;IACH,YAAY,IAAI,SAAS;IAIzB;;;;OAIG;IACH,YAAY,IAAI,SAAS;IAIzB;;;;;;;;OAQG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI;IAM9C;;;;;OAKG;IACG,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC;IAQ3C;;;;;;;;;OASG;IACH,gBAAgB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAI3C;;;;;OAKG;IACH,eAAe,IAAI,IAAI;IAQvB;;;;;;OAMG;IACH,KAAK,IAAI,IAAI;IAUb;;OAEG;IACH,OAAO,CAAC,gBAAgB;YA6BV,WAAW;CAoC1B;AAqCD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACxE,YAAY,EACV,kBAAkB,EAClB,YAAY,EACZ,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAChF,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjF,YAAY,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACjG,YAAY,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAC9F,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC"}