@peac/policy-kit 0.10.9 → 0.10.10

package/dist/types.js

@@ -1,348 +0,0 @@
-"use strict";
-/**
- * PEAC Policy Kit Types
- *
- * Deterministic policy format for CAL semantics.
- * Version: peac-policy/0.1
- *
- * Design principles:
- * - No scripting, no dynamic code
- * - Deterministic, auditable, side-effect free
- * - First-match-wins rule semantics
- *
- * @packageDocumentation
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EnforcementProfileSchema = exports.PolicyConstraintsSchema = exports.ProfileDefinitionSchema = exports.ProfileParameterSchema = exports.DecisionRequirementsSchema = exports.RateLimitConfigSchema = exports.PolicyDocumentSchema = exports.PolicyDefaultsSchema = exports.PolicyRuleSchema = exports.SubjectMatcherSchema = exports.POLICY_VERSION = void 0;
-exports.parseRateLimit = parseRateLimit;
-exports.formatRateLimit = formatRateLimit;
-const zod_1 = require("zod");
-const schema_1 = require("@peac/schema");
-/**
- * Policy format version
- */
-exports.POLICY_VERSION = 'peac-policy/0.1';
-/**
- * Subject matcher - criteria for matching a subject
- *
- * All fields are optional (omitted = any/wildcard).
- * When multiple fields are present, all must match (AND logic).
- */
-exports.SubjectMatcherSchema = zod_1.z
-    .object({
-    /** Match by subject type(s) - single type or array */
-    type: zod_1.z.union([schema_1.SubjectTypeSchema, zod_1.z.array(schema_1.SubjectTypeSchema)]).optional(),
-    /** Match by label(s) - subject must have ALL specified labels */
-    labels: zod_1.z.array(zod_1.z.string().min(1)).optional(),
-    /** Match by subject ID pattern (exact match or prefix with *) */
-    id: zod_1.z.string().min(1).optional(),
-})
-    .strict();
-/**
- * Policy rule - a single rule in the policy
- *
- * Evaluated in order; first match wins.
- */
-exports.PolicyRuleSchema = zod_1.z
-    .object({
-    /** Rule name (for debugging/auditing) */
-    name: zod_1.z.string().min(1),
-    /** Subject matcher (omit for any subject) */
-    subject: exports.SubjectMatcherSchema.optional(),
-    /** Purpose(s) this rule applies to - single purpose or array */
-    purpose: zod_1.z.union([schema_1.ControlPurposeSchema, zod_1.z.array(schema_1.ControlPurposeSchema)]).optional(),
-    /** Licensing mode(s) this rule applies to */
-    licensing_mode: zod_1.z
-        .union([schema_1.ControlLicensingModeSchema, zod_1.z.array(schema_1.ControlLicensingModeSchema)])
-        .optional(),
-    /** Decision if rule matches */
-    decision: schema_1.ControlDecisionSchema,
-    /** Reason for decision (for audit trail) */
-    reason: zod_1.z.string().optional(),
-})
-    .strict();
-/**
- * Policy defaults - fallback values when no rule matches
- */
-exports.PolicyDefaultsSchema = zod_1.z
-    .object({
-    /** Default decision when no rule matches */
-    decision: schema_1.ControlDecisionSchema,
-    /** Default reason for audit trail */
-    reason: zod_1.z.string().optional(),
-})
-    .strict();
-/**
- * Complete policy document
- */
-exports.PolicyDocumentSchema = zod_1.z
-    .object({
-    /** Policy format version */
-    version: zod_1.z.literal(exports.POLICY_VERSION),
-    /** Policy name/description (optional) */
-    name: zod_1.z.string().optional(),
-    /** Default decision (required) */
-    defaults: exports.PolicyDefaultsSchema,
-    /** Rules evaluated in order (first match wins) */
-    rules: zod_1.z.array(exports.PolicyRuleSchema),
-})
-    .strict();
-// -----------------------------------------------------------------------------
-// Rate Limiting (v0.9.23+)
-// -----------------------------------------------------------------------------
-/**
- * Structured rate limit configuration.
- *
- * Uses `window_seconds` for future-proofing (avoids enum lock-in).
- * CLI parses human-friendly strings like "100/hour" to this format.
- *
- * @example
- * ```typescript
- * const limit: RateLimitConfig = {
- *   limit: 100,
- *   window_seconds: 3600, // 1 hour
- *   burst: 10,
- *   partition: 'agent',
- * };
- * ```
- */
-exports.RateLimitConfigSchema = zod_1.z
-    .object({
-    /** Maximum requests allowed in the window */
-    limit: zod_1.z.number().int().positive(),
-    /** Window size in seconds (e.g., 3600 for 1 hour) */
-    window_seconds: zod_1.z.number().int().positive(),
-    /** Optional burst allowance above the limit */
-    burst: zod_1.z.number().int().nonnegative().optional(),
-    /** How to partition rate limits (default: per-agent) */
-    partition: zod_1.z.union([zod_1.z.enum(['agent', 'ip', 'account']), zod_1.z.string().min(1)]).optional(),
-})
-    .strict();
-/**
- * Parse a human-friendly rate limit string to RateLimitConfig.
- *
- * @example
- * ```typescript
- * parseRateLimit('100/hour');   // { limit: 100, window_seconds: 3600 }
- * parseRateLimit('1000/day');   // { limit: 1000, window_seconds: 86400 }
- * parseRateLimit('10/minute');  // { limit: 10, window_seconds: 60 }
- * ```
- */
-function parseRateLimit(input) {
-    const match = input.match(/^(\d+)\/(second|minute|hour|day)$/i);
-    if (!match) {
-        throw new Error(`Invalid rate limit format: "${input}". Expected format: "100/hour", "1000/day", etc.`);
-    }
-    const limit = parseInt(match[1], 10);
-    const unit = match[2].toLowerCase();
-    const windowMap = {
-        second: 1,
-        minute: 60,
-        hour: 3600,
-        day: 86400,
-    };
-    return {
-        limit,
-        window_seconds: windowMap[unit],
-    };
-}
-/**
- * Format a RateLimitConfig to human-friendly string.
- */
-function formatRateLimit(config) {
-    const { limit, window_seconds } = config;
-    if (window_seconds === 1)
-        return `${limit}/second`;
-    if (window_seconds === 60)
-        return `${limit}/minute`;
-    if (window_seconds === 3600)
-        return `${limit}/hour`;
-    if (window_seconds === 86400)
-        return `${limit}/day`;
-    return `${limit}/${window_seconds}s`;
-}
-// -----------------------------------------------------------------------------
-// Decision Requirements (v0.9.23+)
-// -----------------------------------------------------------------------------
-/**
- * Requirements for 'review' decision (challenge-required semantics).
- *
- * When decision is 'review' and requirements are not met:
- * - Enforcement returns a challenge response (e.g., HTTP 402)
- * - Client provides proof (e.g., PEAC receipt)
- * - On valid proof, access is granted
- *
- * This differs from 'deny' which is unconditional rejection.
- *
- * @example
- * ```typescript
- * const rule: PolicyRule = {
- *   name: 'inference-needs-receipt',
- *   purpose: 'inference',
- *   decision: 'review',
- *   requirements: { receipt: true },
- * };
- * ```
- */
-exports.DecisionRequirementsSchema = zod_1.z
-    .object({
-    /** Require a valid PEAC receipt */
-    receipt: zod_1.z.boolean().optional(),
-    // Extensible: add more requirements as needed
-    // attestation?: boolean;
-    // kyc?: boolean;
-})
-    .strict();
-// -----------------------------------------------------------------------------
-// Profile System (v0.9.23+)
-// -----------------------------------------------------------------------------
-/**
- * Profile parameter definition.
- *
- * Defines a configurable parameter for a profile.
- */
-exports.ProfileParameterSchema = zod_1.z
-    .object({
-    /** Human-readable description */
-    description: zod_1.z.string().min(1),
-    /** Whether this parameter is required */
-    required: zod_1.z.boolean().optional(),
-    /** Default value if not provided */
-    default: zod_1.z.union([zod_1.z.string(), zod_1.z.number(), zod_1.z.boolean()]).optional(),
-    /** Example value for documentation */
-    example: zod_1.z.string().optional(),
-    /** Validation type for the parameter */
-    validate: zod_1.z.enum(['email', 'url', 'rate_limit']).optional(),
-})
-    .strict();
-/**
- * Profile definition.
- *
- * A profile is a pre-configured policy template for a specific use case
- * (e.g., news publisher, SaaS docs, open source project).
- *
- * Profiles are compiled to TypeScript at build time for:
- * - Type safety
- * - No runtime YAML/fs dependencies
- * - Deterministic output
- *
- * @example
- * ```typescript
- * const profile: ProfileDefinition = {
- *   id: 'news-media',
- *   name: 'News Media Publisher',
- *   description: 'Policy for news and media publishers...',
- *   policy: { ... },
- *   parameters: {
- *     contact: { description: 'Contact email', required: true, validate: 'email' },
- *     rate_limit: { description: 'Rate limit', default: '100/hour', validate: 'rate_limit' },
- *   },
- *   defaults: {
- *     requirements: { receipt: true },
- *   },
- * };
- * ```
- */
-exports.ProfileDefinitionSchema = zod_1.z
-    .object({
-    /** Unique profile identifier (e.g., 'news-media') */
-    id: zod_1.z
-        .string()
-        .min(1)
-        .regex(/^[a-z][a-z0-9-]*$/),
-    /** Human-readable profile name */
-    name: zod_1.z.string().min(1),
-    /** Multi-line description of the profile */
-    description: zod_1.z.string().min(1),
-    /** Base policy document */
-    policy: exports.PolicyDocumentSchema,
-    /** Configurable parameters */
-    parameters: zod_1.z.record(zod_1.z.string(), exports.ProfileParameterSchema),
-    /** Default values for profile instances */
-    defaults: zod_1.z
-        .object({
-        /** Default requirements for 'review' decisions */
-        requirements: exports.DecisionRequirementsSchema.optional(),
-        /** Default rate limit */
-        rate_limit: exports.RateLimitConfigSchema.optional(),
-    })
-        .strict()
-        .optional(),
-})
-    .strict();
-// -----------------------------------------------------------------------------
-// Policy Constraints (v0.9.24+)
-// -----------------------------------------------------------------------------
-/**
- * Policy constraints for rate limiting and budget control.
- *
- * These constraints are ADVISORY - enforcement happens at the edge/application layer.
- * PEAC receipts capture what constraints were DECLARED, not whether they were enforced.
- *
- * @example
- * ```typescript
- * const constraints: PolicyConstraints = {
- *   rate_limit: { window_s: 3600, max: 100 },
- *   budget: { max_requests: 1000 },
- * };
- * ```
- */
-exports.PolicyConstraintsSchema = zod_1.z
-    .object({
-    /** Rate limit configuration */
-    rate_limit: zod_1.z
-        .object({
-        /** Window size in seconds */
-        window_s: zod_1.z.number().int().positive(),
-        /** Maximum requests allowed in the window */
-        max: zod_1.z.number().int().positive(),
-        /** Retry-After header value in seconds (optional) */
-        retry_after_s: zod_1.z.number().int().positive().optional(),
-    })
-        .strict()
-        .optional(),
-    /** Budget constraints */
-    budget: zod_1.z
-        .object({
-        /** Maximum tokens allowed */
-        max_tokens: zod_1.z.number().int().positive().optional(),
-        /** Maximum requests allowed */
-        max_requests: zod_1.z.number().int().positive().optional(),
-    })
-        .strict()
-        .optional(),
-})
-    .strict();
-/**
- * Enforcement profile definition.
- *
- * Specifies how to handle requests with undeclared, unknown, or missing purposes.
- */
-exports.EnforcementProfileSchema = zod_1.z
-    .object({
-    /** Profile identifier */
-    id: zod_1.z.enum(['strict', 'balanced', 'open']),
-    /** Human-readable name */
-    name: zod_1.z.string().min(1),
-    /** Description of when to use this profile */
-    description: zod_1.z.string().min(1),
-    /** Decision for requests with no purpose declared (missing header) */
-    undeclared_decision: zod_1.z.enum(['allow', 'deny', 'review']),
-    /** Decision for requests with unknown purpose tokens */
-    unknown_decision: zod_1.z.enum(['allow', 'deny', 'review']),
-    /** Purpose reason to record when undeclared/unknown is processed */
-    purpose_reason: zod_1.z.enum([
-        'allowed',
-        'constrained',
-        'denied',
-        'downgraded',
-        'undeclared_default',
-        'unknown_preserved',
-    ]),
-    /** Default constraints to apply for 'review' decisions */
-    default_constraints: exports.PolicyConstraintsSchema.optional(),
-    /** Whether receipts are required for allowed requests */
-    receipts: zod_1.z.enum(['required', 'optional', 'omit']),
-})
-    .strict();
-//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAmNH,wCAsBC;AAKD,0CASC;AArPD,6BAAwB;AACxB,yCAKsB;AAEtB;;GAEG;AACU,QAAA,cAAc,GAAG,iBAAiB,CAAC;AAsBhD;;;;;GAKG;AACU,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,sDAAsD;IACtD,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,0BAAiB,EAAE,OAAC,CAAC,KAAK,CAAC,0BAAiB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEzE,iEAAiE;IACjE,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAE7C,iEAAiE;IACjE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,yCAAyC;IACzC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEvB,6CAA6C;IAC7C,OAAO,EAAE,4BAAoB,CAAC,QAAQ,EAAE;IAExC,gEAAgE;IAChE,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,6BAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,6BAAoB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAElF,6CAA6C;IAC7C,cAAc,EAAE,OAAC;SACd,KAAK,CAAC,CAAC,mCAA0B,EAAE,OAAC,CAAC,KAAK,CAAC,mCAA0B,CAAC,CAAC,CAAC;SACxE,QAAQ,EAAE;IAEb,+BAA+B;IAC/B,QAAQ,EAAE,8BAAqB;IAE/B,4CAA4C;IAC5C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ;;GAEG;AACU,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,4CAA4C;IAC5C,QAAQ,EAAE,8BAAqB;IAE/B,qCAAqC;IACrC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ;;GAEG;AACU,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,4BAA4B;IAC5B,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,sBAAc,CAAC;IAElC,yCAAyC;IACzC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE3B,kCAAkC;IAClC,QAAQ,EAAE,4BAAoB;IAE9B,kDAAkD;IAClD,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,wBAAgB,CAAC;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AA4CZ,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF;;;;;;;;;;;;;;;GAeG;AACU,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,6CAA6C;IAC7C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAElC,qDAAqD;IACrD,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAE3C,+CAA+C;IAC/C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAEhD,wDAAwD;IACxD,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACvF,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,kDAAkD,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAEpC,MAAM,SAAS,GAA2B;QACxC,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,IAAI;QACV,GAAG,EAAE,KAAK;KACX,CAAC;IAEF,OAAO;QACL,KAAK;QACL,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,MAAuB;IACrD,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IAEzC,IAAI,cAAc,KAAK,CAAC;QAAE,OAAO,GAAG,KAAK,SAAS,CAAC;IACnD,IAAI,cAAc,KAAK,EAAE;QAAE,OAAO,GAAG,KAAK,SAAS,CAAC;IACpD,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,GAAG,KAAK,OAAO,CAAC;IACpD,IAAI,cAAc,KAAK,KAAK;QAAE,OAAO,GAAG,KAAK,MAAM,CAAC;IAEpD,OAAO,GAAG,KAAK,IAAI,cAAc,GAAG,CAAC;AACvC,CAAC;AAED,gFAAgF;AAChF,mCAAmC;AACnC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;GAmBG;AACU,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,mCAAmC;IACnC,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAE/B,8CAA8C;IAC9C,yBAAyB;IACzB,iBAAiB;CAClB,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,iCAAiC;IACjC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAE9B,yCAAyC;IACzC,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAEhC,oCAAoC;IACpC,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAElE,sCAAsC;IACtC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE9B,wCAAwC;IACxC,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACU,QAAA,uBAAuB,GAAG,OAAC;KACrC,MAAM,CAAC;IACN,qDAAqD;IACrD,EAAE,EAAE,OAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,mBAAmB,CAAC;IAE7B,kCAAkC;IAClC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEvB,4CAA4C;IAC5C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAE9B,2BAA2B;IAC3B,MAAM,EAAE,4BAAoB;IAE5B,8BAA8B;IAC9B,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,8BAAsB,CAAC;IAExD,2CAA2C;IAC3C,QAAQ,EAAE,OAAC;SACR,MAAM,CAAC;QACN,kDAAkD;QAClD,YAAY,EAAE,kCAA0B,CAAC,QAAQ,EAAE;QAEnD,yBAAyB;QACzB,UAAU,EAAE,6BAAqB,CAAC,QAAQ,EAAE;KAC7C,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACU,QAAA,uBAAuB,GAAG,OAAC;KACrC,MAAM,CAAC;IACN,+BAA+B;IAC/B,UAAU,EAAE,OAAC;SACV,MAAM,CAAC;QACN,6BAA6B;QAC7B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACrC,6CAA6C;QAC7C,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAChC,qDAAqD;QACrD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACtD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IAEb,yBAAyB;IACzB,MAAM,EAAE,OAAC;SACN,MAAM,CAAC;QACN,6BAA6B;QAC7B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAClD,+BAA+B;QAC/B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACrD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAqBZ;;;;GAIG;AACU,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,yBAAyB;IACzB,EAAE,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAE1C,0BAA0B;IAC1B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEvB,8CAA8C;IAC9C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAE9B,sEAAsE;IACtE,mBAAmB,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAExD,wDAAwD;IACxD,gBAAgB,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAErD,oEAAoE;IACpE,cAAc,EAAE,OAAC,CAAC,IAAI,CAAC;QACrB,SAAS;QACT,aAAa;QACb,QAAQ;QACR,YAAY;QACZ,oBAAoB;QACpB,mBAAmB;KACpB,CAAC;IAEF,0DAA0D;IAC1D,mBAAmB,EAAE,+BAAuB,CAAC,QAAQ,EAAE;IAEvD,yDAAyD;IACzD,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;CACnD,CAAC;KACD,MAAM,EAAE,CAAC"}