@oncoding/bsteam 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,40 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+
+## [Unreleased]
+
+## [0.2.0] - 2026-06-23
+
+### Added
+- `~/.bsteam/config.json` context config — 参考 `kubectl` 的 clusters/users/contexts/currentContext 模型，支持 `--config` / `--context` 指定环境与 token。
+- `auth login/status/check/scopes/list/logout` — 支持本机 `~/.bsteam/credentials.json` 凭证、stdin token 登录、邮箱密码换 token、capability 检查。
+- `api <METHOD> <PATH>` — Platform API raw 调用兜底；写操作默认要求 `--dry-run` 或 `--yes`，否则 exit 10。
+- Platform API client 与凭证解析公共导出，供 `@bsteam/cli-ops` 复用。
+- npm 包名切换为 `@oncoding/bsteam`，终端命令仍为 `bsteam`，新增公网发布配置，并将 `auth` / `api` 注册为核心 topic。
+- 公网安装缺少 workspace-only `@bsteam/cli-ops` 时自动跳过插件加载，避免用户态 CLI 启动失败。
+- `auth token list/create/revoke` — 当前账号 Personal Access Token 生命周期管理，创建结果只展示一次明文。
+- `kb` 命令组 — 支持知识库 list/get/create/update/delete/tree/file/git，以及 ACL grant/list/update/revoke 和 share create/list/revoke。
+- `token` 命令组 — 支持 AI Token list/create/update/delete/reveal/precheck/operations 和内容权限 list/replace；`reveal` 必须显式 `--yes`。
+- `reimbursement` 命令组 — 支持 Token 报销 list/create/update/delete/operations 和内容权限 list/replace。
+
+### Changed
+- `auth login/list/logout/status` 优先写入和展示 context config；旧版 `credentials.json` 保留兼容读取。
+- ExitCodes 新增 `AUTH_REQUIRED = 6`，区分未认证和依赖缺失。
+
+## [0.1.0] - 2026-06-10
+
+### Added
+- oclif v4 框架骨架（BaseCommand、hooks、formatters）
+- `config show` 命令 — 显示合并后配置
+- `version` 命令
+- cosmiconfig 5 层配置合并（内置 → .bsteamrc → .env.local → BSTEAM_* → CLI flags）
+- Profile 支持（dev / staging / prod）
+- JSON Envelope v1 输出协议（{ version, ok, data, error, _notice }）
+- TTY 自动检测（TTY → 彩色表格；管道 → JSON）
+- 标准化 Exit Codes（0/1/2/3/4/5/10/130）
+- 高风险门禁 prerun hook
+- 公共 API 导出供插件扩展（BaseCommand, ExitCodes, loadConfig, formatters）
+- 编程式插件加载机制（绕过 oclif dependencies 限制）

package/README.md

@@ -0,0 +1,260 @@
+# bsteam
+
+bsteam 统一命令行入口（单入口 + 插件化）。
+
+## 架构
+
+- **核心（本包，npm 包名 `@oncoding/bsteam`，终端命令名 `bsteam`）**：`BaseCommand` / 配置加载（cosmiconfig + profiles）/ 本地凭证存储 / Platform API client / envelope 与 table 格式化 / 共享 `init` 与 `prerun` hooks。暴露用户态 `auth` / `kb` / `token` / `reimbursement` / `api` / `config` / `version` 命令。
+- **运维插件 [`@bsteam/cli-ops`](../cli-ops/README.md)**：`db` / `seed` / `dev` / `sync` 命令组，仅在 monorepo workspace 内自动加载。
+- **系统命令（后续）**：各业务域可继续按插件拆分；公开分发包不应携带 DB reset、seed clear、真实 sync 等运维后门。
+
+`@bsteam/cli-ops` 在 monorepo 开发环境内通过 workspace sibling 自动挂载；公网安装 `@oncoding/bsteam` 时由于该插件不发布，CLI 会跳过插件加载，普通用户看不到运维命令。
+
+## Agent 友好原则
+
+本 CLI 参考飞书 CLI 的三层模型，但按 bsteam 当前边界收敛：
+
+- **Shortcut / Domain 命令**：用户态平台对象命令放在核心包，例如 `kb list`、`token list`、`reimbursement list`；本地开发验收命令如 `db status`、`seed list` 由 ops 插件提供。
+- **Auth 命令**：`auth login/status/check/scopes/list/logout` 是核心能力，面向人类和 Agent 共享。
+- **Raw API 命令**：`api <METHOD> <PATH>` 提供兜底访问；`GET/HEAD` 可直接跑，写操作必须 `--dry-run` 或 `--yes`，否则 exit 10。
+
+所有 Agent 场景优先使用 `--json`，失败时读取 envelope 的 `ok/error.code/error.hint`，不要解析 human 输出。
+
+## 开发者使用
+
+在 monorepo 内运行：
+
+```bash
+pnpm bsteam --help
+pnpm bsteam db status        # 由 @bsteam/cli-ops 提供
+pnpm bsteam seed list        # 由 @bsteam/cli-ops 提供
+pnpm bsteam --context staging auth status
+pnpm bsteam config show
+pnpm bsteam version
+```
+
+## Auth 快速开始
+
+CLI 采用类似 `kubectl` 的 context config：一个配置文件同时保存环境、用户、token 和当前 context。默认路径：
+
+```text
+~/.bsteam/config.json
+```
+
+个人中心「安全与 CLI Token」先生成个人访问令牌（PAT），再复制 CLI 登录命令。也可以手动把 PAT 从 stdin 写入指定 context：
+
+```bash
+printf '%s' "$BSTEAM_PLATFORM_TOKEN" \
+  | bsteam auth login --context staging --api-url https://api.example.com --domain baisui-innovation --token-stdin
+
+bsteam --context staging auth status
+bsteam --context staging auth check foundation:members:read
+```
+
+也可以手写 config，适合 CI、Agent 沙箱和一次性 staging 验收：
+
+```json
+{
+  "apiVersion": "bsteam.io/v1",
+  "kind": "Config",
+  "currentContext": "staging",
+  "clusters": {
+    "staging": {
+      "server": "https://api.example.com"
+    }
+  },
+  "users": {
+    "alice": {
+      "token": "bst_pat_xxx"
+    }
+  },
+  "contexts": {
+    "staging": {
+      "cluster": "staging",
+      "user": "alice",
+      "domain": "baisui-innovation"
+    }
+  }
+}
+```
+
+访问解析优先级：
+
+1. `--api-url` / `--token` / `--domain`
+2. `BSTEAM_PLATFORM_API_URL` / `BSTEAM_PLATFORM_TOKEN` / `BSTEAM_ACTIVE_DOMAIN_ID`
+3. `--config` / `BSTEAM_CONFIG` + `--context` / `BSTEAM_CONTEXT` 指向的 context config；未显式指定 context 时使用 `currentContext`
+4. 旧版 `~/.bsteam/credentials.json`（兼容读取）
+5. 本地 profile 默认值，例如 `http://localhost:13001`
+
+配置文件以 `0600` 权限写入；CLI 输出只展示脱敏 token，`config show` 也不会打印明文 token。PAT 明文只在创建时显示一次，服务端只保存 hash、prefix、last4、过期、吊销和最近使用时间。当前 MVP 暂未接 OS keychain，后续如要面向公网分发，应再补 keychain provider。
+
+常用命令：
+
+```bash
+bsteam auth login --context staging --api-url https://api.example.com --token-stdin
+bsteam auth token create --name "MacBook CLI" --expires-in-days 30
+bsteam auth token list
+bsteam auth token revoke <token-id> --yes
+bsteam auth list
+bsteam --context staging auth status
+bsteam --config ./bsteam.config.json --context prod api GET /api/v1/auth/session
+bsteam auth logout --context staging
+```
+
+## 知识库
+
+知识库命令全部走 Platform HTTP API，适合公网 npm 安装后的普通用户和 Agent 使用，不依赖本地仓库或 DB：
+
+```bash
+bsteam kb list
+bsteam kb get product-handbook
+bsteam kb create --slug product-handbook --name "Product Handbook" --visibility members_only --dry-run
+bsteam kb update product-handbook --description "团队产品手册" --dry-run
+bsteam kb tree product-handbook
+bsteam kb file product-handbook README.md
+bsteam kb git product-handbook
+bsteam kb acl grant product-handbook --principal-type user --principal-id user_123 --permission write --path "docs/*" --dry-run
+bsteam kb acl list product-handbook
+bsteam kb share create product-handbook --path "docs/intro.md" --expires-in-hours 24 --dry-run
+bsteam kb delete product-handbook --yes
+```
+
+`kb file` 默认读取渲染/元数据接口；需要原始内容时传 `--raw`。二进制文件应使用 `--output <path>`，避免把不可读内容写入终端。
+
+## 我的 Token 与报销
+
+`token` 对应 AI Token Vault 的“我的 Token”，默认列表只展示脱敏值。创建或更新密钥时优先从 stdin 或 `--data-file` 输入，避免明文进入 shell history：
+
+```bash
+printf '%s' "$OPENAI_API_KEY" \
+  | bsteam token create --api-key-stdin --platform-code openai --platform-name OpenAI --models gpt-4.1,gpt-4.1-mini
+
+bsteam token list
+bsteam token operations
+bsteam token precheck --rows-file ./tokens.import.json
+bsteam token reveal <token-id> --yes
+bsteam token delete <token-id> --yes
+bsteam token permissions list
+bsteam token permissions replace --policies-file ./token-policies.json --dry-run
+```
+
+`token reveal` 是唯一会显式打印 AI Token 明文的命令，必须传 `--yes`。dry-run 和错误预览会自动脱敏 `api_key` / `token` / `secret` 等字段。
+
+Token 报销命令同样只走服务端权限和审计链路：
+
+```bash
+bsteam reimbursement list
+bsteam reimbursement create --payment-date 2026-06-23 --category api-usage --platform-code openai --amount 120.50 --status submitted --dry-run
+bsteam reimbursement update <id> --status approved --dry-run
+bsteam reimbursement delete <id> --yes
+bsteam reimbursement permissions list
+bsteam reimbursement permissions replace --policies-file ./reimbursement-policies.json --dry-run
+```
+
+## Raw API
+
+```bash
+bsteam api GET /api/v1/auth/session
+bsteam api GET /api/v1/platform/authz/capabilities --json
+bsteam api POST /api/v1/account/preferences --data '{"density":"compact"}' --dry-run
+bsteam api POST /api/v1/account/preferences --data '{"density":"compact"}' --yes
+```
+
+写操作没有 `--dry-run` 或 `--yes` 时返回 exit code `10`，供 Agent/HITL 拦截。
+
+## 对外 API（供插件作者）
+
+插件仅通过包顶层入口 import：
+
+```typescript
+import {
+  BaseCommand,
+  ExitCodes,
+  loadConfig,
+  getProfile,
+  formatTable,
+  createEnvelope,
+  platformApiGet,
+  resolvePlatformApiOptions,
+  getCredential,
+  getContextCredential,
+} from '@oncoding/bsteam';
+```
+
+完整公共 API 见 [`src/index.ts`](./src/index.ts)。
+
+## 高风险门禁
+
+由 `prerun` hook 检查命令 `description` 是否含「高风险」字样，结合当前 `--profile` 的 `dangerousOpsAllowed` 拦截。具体门禁参数（如 `db reset` 的三道门禁）由各命令自行实现。
+
+被拒绝时返回 exit code `10`（`ExitCodes.DANGEROUS_REFUSED`）。
+
+## Exit Codes
+
+| Code | 含义 |
+|------|------|
+| 0 | 成功 |
+| 1 | 一般错误 |
+| 2 | 参数错误 |
+| 3 | 配置错误 |
+| 4 | 网络错误 |
+| 5 | 依赖缺失 |
+| 6 | 未认证 / token 无效 |
+| 10 | 高风险操作被拒绝 |
+| 130 | 用户中断（Ctrl+C） |
+
+## 包结构
+
+```
+src/
+├── base-command.ts        # BaseCommand 抽象类
+├── config/
+│   ├── exit-codes.ts      # ExitCodes 枚举
+│   ├── config-loader.ts   # cosmiconfig 5 层合并
+│   └── profiles.ts        # dev / staging / prod
+├── auth/
+│   ├── context-config.ts   # ~/.bsteam/config.json contexts/users/clusters 存取与脱敏
+│   └── credential-store.ts # 旧版 ~/.bsteam/credentials.json 兼容读取
+├── http/
+│   └── platform-api.ts    # Platform API client + auth resolution
+├── formatters/
+│   ├── envelope.ts        # JSON envelope 协议
+│   └── table.ts           # 终端表格
+├── hooks/
+│   ├── init.ts            # TTY 检测、env 默认值
+│   └── prerun.ts          # 高风险门禁
+├── commands/
+│   ├── api.ts
+│   ├── auth/
+│   │   ├── login.ts
+│   │   ├── status.ts
+│   │   ├── check.ts
+│   │   ├── scopes.ts
+│   │   ├── list.ts
+│   │   ├── logout.ts
+│   │   └── token/
+│   ├── kb/
+│   │   ├── acl/
+│   │   └── share/
+│   ├── token/
+│   │   └── permissions/
+│   ├── reimbursement/
+│   │   └── permissions/
+│   ├── version.ts
+│   └── config/show.ts
+└── index.ts               # 唯一公共导出
+bin/
+├── argv.js                 # 前置全局 flags 归一化（支持 bsteam --config x --context y auth status）
+├── run.js                 # 生产入口
+└── dev.js                 # ts-node 开发入口
+```
+
+## 验证
+
+```bash
+(cd backend && pnpm --filter @oncoding/bsteam build)
+(cd backend && pnpm --filter @oncoding/bsteam test)
+(cd backend && pnpm --filter @oncoding/bsteam pack:check)
+node bin/run.js --help
+node bin/run.js --version
+```

package/bin/argv.js

@@ -0,0 +1,35 @@
+const VALUE_FLAGS = new Set(['--config', '--context', '--profile', '--trace-id']);
+const BOOLEAN_FLAGS = new Set(['--json']);
+
+export function normalizeGlobalFlags(argv) {
+  const moved = [];
+  let index = 0;
+
+  while (index < argv.length) {
+    const arg = argv[index];
+    if (!arg || arg === '--') break;
+
+    const equalIndex = arg.indexOf('=');
+    const flagName = equalIndex > 0 ? arg.slice(0, equalIndex) : arg;
+    if (BOOLEAN_FLAGS.has(flagName)) {
+      moved.push(arg);
+      index += 1;
+      continue;
+    }
+    if (VALUE_FLAGS.has(flagName)) {
+      moved.push(arg);
+      if (equalIndex === -1 && index + 1 < argv.length) {
+        moved.push(argv[index + 1]);
+        index += 2;
+      } else {
+        index += 1;
+      }
+      continue;
+    }
+    break;
+  }
+
+  if (moved.length === 0) return argv;
+  if (index >= argv.length) return argv;
+  return [...argv.slice(index), ...moved];
+}

package/bin/dev.js

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+
+// Dev entry: uses tsx to run TypeScript source directly
+import { Config, run, flush, handle } from '@oclif/core';
+import { fileURLToPath } from 'node:url';
+import { dirname, resolve } from 'node:path';
+import { normalizeGlobalFlags } from './argv.js';
+import { loadWorkspacePlugin } from './workspace-plugin.js';
+
+process.env.NODE_ENV = 'development';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const cliRoot = resolve(__dirname, '..');
+const cliOpsRoot = resolve(__dirname, '../../cli-ops');
+
+const config = await Config.load({ root: cliRoot });
+
+await loadWorkspacePlugin(config, { root: cliOpsRoot, name: '@bsteam/cli-ops' });
+
+await run(normalizeGlobalFlags(process.argv.slice(2)), config)
+  .then(async () => flush())
+  .catch(async (err) => handle(err));

package/bin/run.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+
+import { Config, run, flush, handle } from '@oclif/core';
+import { fileURLToPath } from 'node:url';
+import { dirname, resolve } from 'node:path';
+import { normalizeGlobalFlags } from './argv.js';
+import { loadWorkspacePlugin } from './workspace-plugin.js';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const cliRoot = resolve(__dirname, '..');
+const cliOpsRoot = resolve(__dirname, '../../cli-ops');
+
+globalThis.oclif = globalThis.oclif ?? {};
+globalThis.oclif.enableAutoTranspile = false;
+
+// Load CLI config
+const config = await Config.load({ root: cliRoot });
+
+await loadWorkspacePlugin(config, { root: cliOpsRoot, name: '@bsteam/cli-ops' });
+
+// Run the CLI
+await run(normalizeGlobalFlags(process.argv.slice(2)), config)
+  .then(async () => flush())
+  .catch(async (err) => handle(err));

package/bin/workspace-plugin.js

@@ -0,0 +1,16 @@
+import { existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { Plugin } from '@oclif/core';
+
+export async function loadWorkspacePlugin(config, { root, name }) {
+  if (!existsSync(resolve(root, 'package.json'))) {
+    return false;
+  }
+
+  const plugin = new Plugin({ root, type: 'core', name });
+  await plugin.load();
+  config.plugins.set(plugin.name, plugin);
+  config.loadCommands(plugin);
+  config.loadTopics(plugin);
+  return true;
+}

package/dist/auth/context-config.d.ts

@@ -0,0 +1,91 @@
+import { type CredentialUserSnapshot } from './credential-store.js';
+export interface BsteamClusterConfig {
+    server: string;
+    description?: string;
+}
+export interface BsteamUserConfig {
+    token?: string;
+    savedAt?: string;
+    lastVerifiedAt?: string;
+    user?: CredentialUserSnapshot;
+    capabilities?: string[];
+}
+export interface BsteamContextConfig {
+    cluster: string;
+    user: string;
+    domain?: string;
+}
+export interface BsteamContextConfigFile {
+    apiVersion: 'bsteam.io/v1';
+    kind: 'Config';
+    currentContext?: string;
+    clusters: Record<string, BsteamClusterConfig>;
+    users: Record<string, BsteamUserConfig>;
+    contexts: Record<string, BsteamContextConfig>;
+}
+export interface ResolvedContextCredential {
+    contextName: string;
+    clusterName: string;
+    userName: string;
+    apiUrl: string;
+    token?: string;
+    activeDomainId?: string;
+    savedAt?: string;
+    lastVerifiedAt?: string;
+    user?: CredentialUserSnapshot;
+    capabilities?: string[];
+}
+export interface ContextCredentialSummary {
+    contextName: string;
+    clusterName: string;
+    userName: string;
+    apiUrl: string;
+    tokenRedacted: string;
+    isCurrent: boolean;
+    activeDomainId?: string;
+    savedAt?: string;
+    lastVerifiedAt?: string;
+    user?: CredentialUserSnapshot;
+    capabilitiesCount?: number;
+}
+export interface RedactedContextConfigFile {
+    apiVersion: BsteamContextConfigFile['apiVersion'];
+    kind: BsteamContextConfigFile['kind'];
+    currentContext?: string;
+    clusters: BsteamContextConfigFile['clusters'];
+    users: Record<string, Omit<BsteamUserConfig, 'token'> & {
+        tokenRedacted: string;
+    }>;
+    contexts: BsteamContextConfigFile['contexts'];
+}
+export declare function getBsteamConfigFilePath(pathOverride?: string): string;
+export declare function getDefaultContextName(): string;
+export declare function readContextConfig(path?: string): Promise<BsteamContextConfigFile>;
+export declare function writeContextConfig(file: BsteamContextConfigFile, path?: string): Promise<void>;
+export declare function saveContextCredential(credential: {
+    contextName?: string;
+    clusterName?: string;
+    userName?: string;
+    apiUrl: string;
+    token: string;
+    activeDomainId?: string;
+    savedAt?: string;
+    lastVerifiedAt?: string;
+    user?: CredentialUserSnapshot;
+    capabilities?: string[];
+}, options?: {
+    setCurrent?: boolean;
+    configPath?: string;
+}): Promise<ResolvedContextCredential>;
+export declare function getContextCredential(contextName?: string, configPath?: string): Promise<ResolvedContextCredential | undefined>;
+export declare function listContextCredentials(configPath?: string): Promise<ContextCredentialSummary[]>;
+export declare function deleteContext(contextName?: string, configPath?: string): Promise<{
+    deleted: string[];
+    currentContext?: string;
+}>;
+export declare function deleteAllContexts(configPath?: string): Promise<{
+    deleted: string[];
+}>;
+export declare function summarizeContextCredential(credential: ResolvedContextCredential, isCurrent?: boolean): ContextCredentialSummary;
+export declare function redactContextConfig(file: BsteamContextConfigFile): RedactedContextConfigFile;
+//# sourceMappingURL=context-config.d.ts.map

package/dist/auth/context-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-config.d.ts","sourceRoot":"","sources":["../../src/auth/context-config.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,sBAAsB,EAK5B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,cAAc,CAAC;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,uBAAuB,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,GAAG;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,QAAQ,EAAE,uBAAuB,CAAC,UAAU,CAAC,CAAC;CAC/C;AAMD,wBAAgB,uBAAuB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAKrE;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAsB,iBAAiB,CACrC,IAAI,SAA4B,GAC/B,OAAO,CAAC,uBAAuB,CAAC,CAclC;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,uBAAuB,EAC7B,IAAI,SAA4B,GAC/B,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,qBAAqB,CACzC,UAAU,EAAE;IACV,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB,EACD,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,OAAO,CAAC,yBAAyB,CAAC,CAuCpC;AAED,wBAAsB,oBAAoB,CACxC,WAAW,CAAC,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAuBhD;AAED,wBAAsB,sBAAsB,CAC1C,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAoBrC;AAED,wBAAsB,aAAa,CACjC,WAAW,CAAC,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBzD;AAED,wBAAsB,iBAAiB,CACrC,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAMhC;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,yBAAyB,EACrC,SAAS,UAAQ,GAChB,wBAAwB,CAc1B;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,yBAAyB,CAmB5F"}