@project-ava-supernova/core 0.2.71

package/dist/security/scanner.js

@@ -0,0 +1,422 @@
+/**
+ * Security Scanner — automated vulnerability detection
+ *
+ * Scans for:
+ * 1. Dependency vulnerabilities (npm audit equivalent)
+ * 2. Hardcoded secrets (API keys, tokens, passwords)
+ * 3. Common code vulnerabilities (SQL injection, XSS, command injection)
+ *
+ * Pure TypeScript — no native dependencies.
+ */
+import { readFile, readdir, stat } from 'fs/promises';
+import { join, extname, relative } from 'path';
+const SECRET_PATTERNS = [
+    { name: 'API Key (sk-)', regex: /sk-[a-zA-Z0-9]{20,}/g },
+    { name: 'GitHub Token', regex: /ghp_[a-zA-Z0-9]{36}/g },
+    { name: 'GitHub OAuth', regex: /gho_[a-zA-Z0-9]{36}/g },
+    { name: 'GitHub App Token', regex: /ghu_[a-zA-Z0-9]{36}/g },
+    { name: 'GitHub Refresh Token', regex: /ghr_[a-zA-Z0-9]{36}/g },
+    { name: 'Private Key', regex: /-----BEGIN\s(?:RSA\s|EC\s)?PRIVATE KEY-----/g },
+    { name: 'JWT Token', regex: /eyJ[a-zA-Z0-9_-]{10,}\.[a-zA-Z0-9_-]{10,}/g },
+    { name: 'AWS Access Key', regex: /AKIA[0-9A-Z]{16}/g },
+    { name: 'Slack Token', regex: /xox[bpras]-[a-zA-Z0-9-]+/g },
+    { name: 'Stripe Key', regex: /sk_live_[a-zA-Z0-9]{20,}/g },
+    { name: 'Stripe Publishable', regex: /pk_live_[a-zA-Z0-9]{20,}/g },
+    { name: 'SendGrid Key', regex: /SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43}/g },
+    { name: 'Twilio Key', regex: /SK[a-f0-9]{32}/g },
+    { name: 'Supabase Service Role', regex: /sbp_[a-f0-9]{40}/g },
+];
+/** Variable-name patterns that suggest hardcoded credentials */
+const CREDENTIAL_VAR_PATTERN = /(?:password|secret|api_key|apiKey|api_secret|apiSecret|access_token|accessToken|private_key|privateKey|auth_token|authToken)\s*[:=]\s*['"`]([^'"`\s]{8,})['"`]/gi;
+const CODE_VULN_PATTERNS = [
+    // SQL Injection
+    {
+        name: 'SQL Injection (string concat)',
+        regex: /(?:query|execute|raw)\s*\(\s*['"`].*?\$\{/g,
+        severity: 'critical',
+        description: 'String interpolation in SQL query — use parameterised queries instead',
+    },
+    {
+        name: 'SQL Injection (concat operator)',
+        regex: /(?:query|execute|raw)\s*\(\s*['"`].*?\+\s*(?:req|params|query|body|input|user)/gi,
+        severity: 'critical',
+        description: 'String concatenation with user input in SQL query',
+    },
+    // XSS
+    {
+        name: 'XSS (innerHTML)',
+        regex: /\.innerHTML\s*=\s*(?!['"`]<)/g,
+        severity: 'high',
+        description: 'Direct innerHTML assignment — use textContent or sanitise input',
+    },
+    {
+        name: 'XSS (dangerouslySetInnerHTML)',
+        regex: /dangerouslySetInnerHTML\s*=\s*\{\s*\{\s*__html\s*:\s*(?!DOMPurify|sanitize|purify)/gi,
+        severity: 'high',
+        description: 'dangerouslySetInnerHTML without visible sanitisation',
+    },
+    {
+        name: 'XSS (document.write)',
+        regex: /document\.write\s*\(/g,
+        severity: 'medium',
+        description: 'document.write can introduce XSS vulnerabilities',
+    },
+    // Command Injection
+    {
+        name: 'Command Injection (exec)',
+        regex: /(?:exec|execSync)\s*\(\s*(?:`.*\$\{|['"`].*\+\s*(?:req|params|query|body|input|user))/gi,
+        severity: 'critical',
+        description: 'User input passed to exec — use execFile with argument array instead',
+    },
+    {
+        name: 'Command Injection (spawn shell)',
+        regex: /spawn\s*\(\s*['"`](?:sh|bash|cmd|powershell)/gi,
+        severity: 'high',
+        description: 'Shell spawned directly — validate and sanitise all arguments',
+    },
+    // Path Traversal
+    {
+        name: 'Path Traversal',
+        regex: /(?:readFile|readFileSync|createReadStream|access|stat)\s*\(\s*(?:req|params|query|body|input|user)/gi,
+        severity: 'high',
+        description: 'User input used directly in file path — validate and resolve paths',
+    },
+    {
+        name: 'Path Traversal (join unsanitised)',
+        regex: /path\.join\s*\([^)]*(?:req\.|params\.|query\.|body\.|input)/gi,
+        severity: 'medium',
+        description: 'User input in path.join without traversal check',
+    },
+    // Eval
+    {
+        name: 'Eval Usage',
+        regex: /\beval\s*\(/g,
+        severity: 'high',
+        description: 'eval() executes arbitrary code — avoid or use safe alternatives',
+    },
+    {
+        name: 'Function Constructor',
+        regex: /new\s+Function\s*\(/g,
+        severity: 'high',
+        description: 'new Function() is equivalent to eval — avoid dynamic code execution',
+    },
+    // Insecure crypto
+    {
+        name: 'Weak Hash (MD5)',
+        regex: /createHash\s*\(\s*['"`]md5['"`]\s*\)/g,
+        severity: 'medium',
+        description: 'MD5 is cryptographically broken — use SHA-256 or better',
+    },
+    {
+        name: 'Weak Hash (SHA1)',
+        regex: /createHash\s*\(\s*['"`]sha1['"`]\s*\)/g,
+        severity: 'low',
+        description: 'SHA-1 is deprecated for security use — prefer SHA-256',
+    },
+    // Insecure randomness
+    {
+        name: 'Insecure Random',
+        regex: /Math\.random\s*\(\s*\)/g,
+        severity: 'low',
+        description: 'Math.random() is not cryptographically secure — use crypto.randomBytes for secrets',
+    },
+];
+/* ── File Scanning Helpers ──────────────────────────────────────── */
+const SOURCE_EXTENSIONS = new Set([
+    '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
+    '.py', '.rb', '.go', '.rs', '.java', '.php',
+    '.vue', '.svelte', '.astro',
+]);
+const IGNORE_DIRS = new Set([
+    'node_modules', '.git', '.next', 'dist', 'build', 'out',
+    '.turbo', '.cache', 'coverage', '.nyc_output', '__pycache__',
+    '.vscode', '.idea', 'vendor',
+]);
+const IGNORE_FILES = new Set([
+    'package-lock.json', 'yarn.lock', 'pnpm-lock.yaml',
+    '.env.example', '.env.template', '.env.sample',
+]);
+async function walkFiles(dir, extensions, results = []) {
+    let entries;
+    try {
+        entries = await readdir(dir, { withFileTypes: true });
+    }
+    catch {
+        return results;
+    }
+    for (const entry of entries) {
+        const fullPath = join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (!IGNORE_DIRS.has(entry.name)) {
+                await walkFiles(fullPath, extensions, results);
+            }
+        }
+        else if (entry.isFile()) {
+            if (IGNORE_FILES.has(entry.name))
+                continue;
+            const ext = extname(entry.name).toLowerCase();
+            if (extensions.has(ext)) {
+                results.push(fullPath);
+            }
+        }
+    }
+    return results;
+}
+function maskSecret(value) {
+    if (value.length <= 8)
+        return '***';
+    return value.slice(0, 4) + '...' + value.slice(-4);
+}
+/* ── Scanner Functions ──────────────────────────────────────────── */
+/**
+ * Scan dependencies for known vulnerabilities.
+ * Reads package.json and checks against known patterns.
+ * For full CVE database checking, use `npm audit` — this provides fast heuristic checks.
+ */
+export async function scanDependencies(projectPath) {
+    const vulns = [];
+    // Find all package.json files
+    const packageFiles = [];
+    // Check workspace packages
+    async function findAllPackageJsons(rootDir) {
+        const rootPkg = join(rootDir, 'package.json');
+        packageFiles.push(rootPkg);
+        // Check packages/ subdirectories
+        const packagesDir = join(rootDir, 'packages');
+        try {
+            const entries = await readdir(packagesDir, { withFileTypes: true });
+            for (const entry of entries) {
+                if (entry.isDirectory()) {
+                    const pkgFile = join(packagesDir, entry.name, 'package.json');
+                    try {
+                        await stat(pkgFile);
+                        packageFiles.push(pkgFile);
+                    }
+                    catch {
+                        // No package.json here
+                    }
+                }
+            }
+        }
+        catch {
+            // No packages dir
+        }
+    }
+    await findAllPackageJsons(projectPath);
+    // Known vulnerable packages (sample — extend as needed)
+    const knownVulnerable = {
+        'lodash': [{ below: '4.17.21', severity: 'high', cve: 'CVE-2021-23337', description: 'Prototype pollution in lodash', fix: 'Upgrade to 4.17.21+' }],
+        'minimist': [{ below: '1.2.6', severity: 'critical', cve: 'CVE-2021-44906', description: 'Prototype pollution in minimist', fix: 'Upgrade to 1.2.6+' }],
+        'node-fetch': [{ below: '2.6.7', severity: 'high', cve: 'CVE-2022-0235', description: 'Exposure of sensitive information', fix: 'Upgrade to 2.6.7+ or 3.1.1+' }],
+        'jsonwebtoken': [{ below: '9.0.0', severity: 'high', cve: 'CVE-2022-23529', description: 'Insecure token verification', fix: 'Upgrade to 9.0.0+' }],
+        'express': [{ below: '4.19.2', severity: 'medium', cve: 'CVE-2024-29041', description: 'Open redirect vulnerability', fix: 'Upgrade to 4.19.2+' }],
+        'axios': [{ below: '1.6.0', severity: 'medium', cve: 'CVE-2023-45857', description: 'SSRF vulnerability', fix: 'Upgrade to 1.6.0+' }],
+        'semver': [{ below: '7.5.2', severity: 'medium', cve: 'CVE-2022-25883', description: 'ReDoS vulnerability', fix: 'Upgrade to 7.5.2+' }],
+        'tough-cookie': [{ below: '4.1.3', severity: 'medium', cve: 'CVE-2023-26136', description: 'Prototype pollution', fix: 'Upgrade to 4.1.3+' }],
+        'xml2js': [{ below: '0.5.0', severity: 'medium', cve: 'CVE-2023-0842', description: 'Prototype pollution', fix: 'Upgrade to 0.5.0+' }],
+        'tar': [{ below: '6.1.9', severity: 'high', cve: 'CVE-2021-37713', description: 'Arbitrary file creation/overwrite', fix: 'Upgrade to 6.1.9+' }],
+    };
+    function isVersionBelow(current, threshold) {
+        const parse = (v) => v.replace(/^[^0-9]*/, '').split('.').map(Number);
+        const c = parse(current);
+        const t = parse(threshold);
+        for (let i = 0; i < 3; i++) {
+            const cv = c[i] || 0;
+            const tv = t[i] || 0;
+            if (cv < tv)
+                return true;
+            if (cv > tv)
+                return false;
+        }
+        return false;
+    }
+    for (const pkgFile of packageFiles) {
+        try {
+            const content = await readFile(pkgFile, 'utf-8');
+            const pkg = JSON.parse(content);
+            const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+            for (const [name, versionRange] of Object.entries(allDeps)) {
+                const version = String(versionRange).replace(/^[\^~>=<\s]+/, '');
+                const known = knownVulnerable[name];
+                if (known) {
+                    for (const vuln of known) {
+                        if (isVersionBelow(version, vuln.below)) {
+                            vulns.push({
+                                package: name,
+                                version,
+                                severity: vuln.severity,
+                                cve: vuln.cve,
+                                description: `${vuln.description} (found in ${relative(projectPath, pkgFile)})`,
+                                fix: vuln.fix,
+                            });
+                        }
+                    }
+                }
+            }
+        }
+        catch {
+            // Skip unreadable files
+        }
+    }
+    return vulns;
+}
+/**
+ * Scan source files for hardcoded secrets, API keys, tokens, and passwords.
+ */
+export async function scanSecrets(projectPath, filePatterns) {
+    const findings = [];
+    const allExtensions = filePatterns
+        ? new Set(filePatterns.map((p) => (p.startsWith('.') ? p : `.${p}`)))
+        : new Set([...SOURCE_EXTENSIONS, '.json', '.yaml', '.yml', '.toml', '.env', '.cfg', '.conf', '.ini']);
+    const files = await walkFiles(projectPath, allExtensions);
+    for (const filePath of files) {
+        // Skip test fixtures, snapshots, lock files
+        const rel = relative(projectPath, filePath);
+        if (rel.includes('__snapshots__') || rel.includes('fixture') || rel.includes('.test.') || rel.includes('.spec.')) {
+            continue;
+        }
+        // Skip .env.example style files
+        if (rel.endsWith('.example') || rel.endsWith('.template') || rel.endsWith('.sample')) {
+            continue;
+        }
+        let content;
+        try {
+            content = await readFile(filePath, 'utf-8');
+        }
+        catch {
+            continue;
+        }
+        const lines = content.split('\n');
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            const lineNum = i + 1;
+            // Skip comments
+            const trimmed = line.trim();
+            if (trimmed.startsWith('//') || trimmed.startsWith('#') || trimmed.startsWith('*') || trimmed.startsWith('/*')) {
+                // Only skip if the pattern is in the comment part (still check — secrets in comments are a finding)
+            }
+            // Check each secret pattern
+            for (const pattern of SECRET_PATTERNS) {
+                pattern.regex.lastIndex = 0;
+                const match = pattern.regex.exec(line);
+                if (match) {
+                    // Skip if it's clearly a regex pattern definition or test
+                    if (line.includes('RegExp') || line.includes('regex') || line.includes('pattern') || line.includes('PATTERN')) {
+                        continue;
+                    }
+                    // Skip placeholder/example values
+                    if (match[0].includes('xxx') || match[0].includes('your_') || match[0].includes('example')) {
+                        continue;
+                    }
+                    findings.push({
+                        file: rel,
+                        line: lineNum,
+                        type: pattern.name,
+                        preview: maskSecret(match[0]),
+                    });
+                }
+            }
+            // Check credential variable patterns
+            CREDENTIAL_VAR_PATTERN.lastIndex = 0;
+            const credMatch = CREDENTIAL_VAR_PATTERN.exec(line);
+            if (credMatch) {
+                const value = credMatch[1];
+                // Skip common non-secret values
+                if (value.startsWith('process.env') ||
+                    value.startsWith('env.') ||
+                    value === 'undefined' ||
+                    value === 'null' ||
+                    value === 'true' ||
+                    value === 'false' ||
+                    value.includes('${') ||
+                    value.startsWith('your_') ||
+                    value.includes('xxx') ||
+                    value.includes('placeholder')) {
+                    continue;
+                }
+                findings.push({
+                    file: rel,
+                    line: lineNum,
+                    type: 'Hardcoded Credential',
+                    preview: maskSecret(value),
+                });
+            }
+        }
+    }
+    return findings;
+}
+/**
+ * Scan source code for common vulnerability patterns:
+ * SQL injection, XSS, command injection, path traversal, etc.
+ */
+export async function scanCodeVulns(projectPath) {
+    const findings = [];
+    const files = await walkFiles(projectPath, SOURCE_EXTENSIONS);
+    for (const filePath of files) {
+        const rel = relative(projectPath, filePath);
+        let content;
+        try {
+            content = await readFile(filePath, 'utf-8');
+        }
+        catch {
+            continue;
+        }
+        const lines = content.split('\n');
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            const lineNum = i + 1;
+            // Skip comments
+            const trimmed = line.trim();
+            if (trimmed.startsWith('//') || trimmed.startsWith('#'))
+                continue;
+            for (const pattern of CODE_VULN_PATTERNS) {
+                pattern.regex.lastIndex = 0;
+                if (pattern.regex.test(line)) {
+                    // Skip test files for low-severity issues
+                    if ((pattern.severity === 'low' || pattern.severity === 'medium') &&
+                        (rel.includes('.test.') || rel.includes('.spec.') || rel.includes('__tests__'))) {
+                        continue;
+                    }
+                    findings.push({
+                        file: rel,
+                        line: lineNum,
+                        type: pattern.name,
+                        severity: pattern.severity,
+                        description: pattern.description,
+                        code: trimmed.length > 200 ? trimmed.slice(0, 200) + '...' : trimmed,
+                    });
+                }
+            }
+        }
+    }
+    return findings;
+}
+/**
+ * Run all scanners and return a combined report.
+ */
+export async function runFullScan(projectPath) {
+    const startTime = Date.now();
+    const [dependencies, secrets, codeVulns] = await Promise.all([
+        scanDependencies(projectPath),
+        scanSecrets(projectPath),
+        scanCodeVulns(projectPath),
+    ]);
+    const allSeverities = [
+        ...dependencies.map((d) => d.severity),
+        ...codeVulns.map((v) => v.severity),
+        // Secrets are always treated as high severity
+        ...secrets.map(() => 'high'),
+    ];
+    const summary = {
+        totalFindings: dependencies.length + secrets.length + codeVulns.length,
+        critical: allSeverities.filter((s) => s === 'critical').length,
+        high: allSeverities.filter((s) => s === 'high').length,
+        medium: allSeverities.filter((s) => s === 'medium').length,
+        low: allSeverities.filter((s) => s === 'low').length,
+        info: allSeverities.filter((s) => s === 'info').length,
+        scannedAt: new Date().toISOString(),
+        durationMs: Date.now() - startTime,
+    };
+    return { dependencies, secrets, codeVulns, summary };
+}
+//# sourceMappingURL=scanner.js.map

package/dist/security/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/security/scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAoD/C,MAAM,eAAe,GAAoB;IACvC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,sBAAsB,EAAE;IACxD,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB,EAAE;IACvD,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB,EAAE;IACvD,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,sBAAsB,EAAE;IAC3D,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,sBAAsB,EAAE;IAC/D,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,8CAA8C,EAAE;IAC9E,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,4CAA4C,EAAE;IAC1E,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,EAAE;IACtD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,2BAA2B,EAAE;IAC3D,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,2BAA2B,EAAE;IAC1D,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,2BAA2B,EAAE;IAClE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,2CAA2C,EAAE;IAC5E,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAChD,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,mBAAmB,EAAE;CAC9D,CAAC;AAEF,gEAAgE;AAChE,MAAM,sBAAsB,GAC1B,kKAAkK,CAAC;AAWrK,MAAM,kBAAkB,GAAkB;IACxC,gBAAgB;IAChB;QACE,IAAI,EAAE,+BAA+B;QACrC,KAAK,EAAE,4CAA4C;QACnD,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,uEAAuE;KACrF;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE,kFAAkF;QACzF,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,mDAAmD;KACjE;IACD,MAAM;IACN;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,+BAA+B;QACtC,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iEAAiE;KAC/E;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,KAAK,EAAE,sFAAsF;QAC7F,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,sDAAsD;KACpE;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,uBAAuB;QAC9B,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,kDAAkD;KAChE;IACD,oBAAoB;IACpB;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,yFAAyF;QAChG,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,sEAAsE;KACpF;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE,gDAAgD;QACvD,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,8DAA8D;KAC5E;IACD,iBAAiB;IACjB;QACE,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,sGAAsG;QAC7G,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,oEAAoE;KAClF;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,KAAK,EAAE,+DAA+D;QACtE,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,iDAAiD;KAC/D;IACD,OAAO;IACP;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iEAAiE;KAC/E;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,sBAAsB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,qEAAqE;KACnF;IACD,kBAAkB;IAClB;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,uCAAuC;QAC9C,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,yDAAyD;KACvE;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,wCAAwC;QAC/C,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,uDAAuD;KACrE;IACD,sBAAsB;IACtB;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,yBAAyB;QAChC,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,oFAAoF;KAClG;CACF,CAAC;AAEF,uEAAuE;AAEvE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5C,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM;IAC3C,MAAM,EAAE,SAAS,EAAE,QAAQ;CAC5B,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;IACvD,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa;IAC5D,SAAS,EAAE,OAAO,EAAE,QAAQ;CAC7B,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,mBAAmB,EAAE,WAAW,EAAE,gBAAgB;IAClD,cAAc,EAAE,eAAe,EAAE,aAAa;CAC/C,CAAC,CAAC;AAEH,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,UAAuB,EACvB,UAAoB,EAAE;IAEtB,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,MAAM,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1B,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,uEAAuE;AAEvE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACxD,MAAM,KAAK,GAAqB,EAAE,CAAC;IAEnC,8BAA8B;IAC9B,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,2BAA2B;IAC3B,KAAK,UAAU,mBAAmB,CAAC,OAAe;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC9C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3B,iCAAiC;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;oBAC9D,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;wBACpB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC7B,CAAC;oBAAC,MAAM,CAAC;wBACP,uBAAuB;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAEvC,wDAAwD;IACxD,MAAM,eAAe,GAA6H;QAChJ,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,+BAA+B,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC;QACnJ,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,iCAAiC,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC;QACvJ,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,WAAW,EAAE,mCAAmC,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC;QAChK,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,6BAA6B,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC;QACnJ,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,6BAA6B,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC;QAClJ,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC;QACrI,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,qBAAqB,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC;QACvI,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,qBAAqB,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC;QAC7I,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,WAAW,EAAE,qBAAqB,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC;QACtI,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,WAAW,EAAE,mCAAmC,EAAE,GAAG,EAAE,mBAAmB,EAAE,CAAC;KACjJ,CAAC;IAEF,SAAS,cAAc,CAAC,OAAe,EAAE,SAAiB;QACxD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9E,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACrB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACrB,IAAI,EAAE,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,IAAI,EAAE,GAAG,EAAE;gBAAE,OAAO,KAAK,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;YAEhE,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBACjE,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,KAAK,EAAE,CAAC;oBACV,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBACzB,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;4BACxC,KAAK,CAAC,IAAI,CAAC;gCACT,OAAO,EAAE,IAAI;gCACb,OAAO;gCACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;gCACvB,GAAG,EAAE,IAAI,CAAC,GAAG;gCACb,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,cAAc,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG;gCAC/E,GAAG,EAAE,IAAI,CAAC,GAAG;6BACd,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,WAAmB,EACnB,YAAuB;IAEvB,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,YAAY;QAChC,CAAC,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAExG,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAE1D,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,4CAA4C;QAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjH,SAAS;QACX,CAAC;QACD,gCAAgC;QAChC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACrF,SAAS;QACX,CAAC;QAED,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YAEtB,gBAAgB;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/G,oGAAoG;YACtG,CAAC;YAED,4BAA4B;YAC5B,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACtC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,KAAK,EAAE,CAAC;oBACV,0DAA0D;oBAC1D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC9G,SAAS;oBACX,CAAC;oBACD,kCAAkC;oBAClC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC3F,SAAS;oBACX,CAAC;oBACD,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,GAAG;wBACT,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,qCAAqC;YACrC,sBAAsB,CAAC,SAAS,GAAG,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC3B,gCAAgC;gBAChC,IACE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;oBAC/B,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;oBACxB,KAAK,KAAK,WAAW;oBACrB,KAAK,KAAK,MAAM;oBAChB,KAAK,KAAK,MAAM;oBAChB,KAAK,KAAK,OAAO;oBACjB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACpB,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBACzB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACrB,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAC7B,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,GAAG;oBACT,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAmB;IACrD,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAE9D,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE5C,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YAEtB,gBAAgB;YAChB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAElE,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;gBACzC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBAC5B,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,0CAA0C;oBAC1C,IACE,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;wBAC7D,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAC/E,CAAC;wBACD,SAAS;oBACX,CAAC;oBAED,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,GAAG;wBACT,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO;qBACrE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,WAAmB;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3D,gBAAgB,CAAC,WAAW,CAAC;QAC7B,WAAW,CAAC,WAAW,CAAC;QACxB,aAAa,CAAC,WAAW,CAAC;KAC3B,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG;QACpB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnC,8CAA8C;QAC9C,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAe,CAAC;KACtC,CAAC;IAEF,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,YAAY,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM;QACtE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,MAAM;QAC9D,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM;QACtD,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,MAAM;QAC1D,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM;QACpD,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM;QACtD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC;IAEF,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACvD,CAAC"}

package/dist/social/day-plan.d.ts

@@ -0,0 +1,38 @@
+/** One planned thing. Rows sharing `group_id` are ONE STORY going out across
+ *  platforms in the same slot — that is the unit the operator thinks in. */
+export interface DayPlanItem {
+    id: string;
+    /** Local day, YYYY-MM-DD. Never derived from a UTC timestamp: a plan written
+     *  at 23:50 belongs to the day it was written on. */
+    plan_date: string;
+    /** Local wall-clock, HH:MM. Null means "anytime today". */
+    plan_time: string | null;
+    title: string;
+    notes: string | null;
+    kind: 'post' | 'work';
+    platform: string | null;
+    status: 'planned' | 'done' | 'dropped' | 'carried';
+    /** HOW it is known to be done. 'system' = it published itself and said so;
+     *  'operator' = they said so. Never claim 'ava' for something you did not
+     *  witness — that is the difference between a record and an opinion. */
+    done_by: 'ava' | 'operator' | 'system' | null;
+    /** Rows sharing this are one story. */
+    group_id: string | null;
+}
+export interface NewDayPlanItem {
+    title: string;
+    plan_time?: string | null;
+    kind?: 'post' | 'work';
+    platform?: string | null;
+    notes?: string | null;
+    group_id?: string | null;
+}
+export interface DayPlanStore {
+    /** Everything planned for a local day, in time order. */
+    list(date: string): Promise<DayPlanItem[]>;
+    /** Add items. Returns how many landed. */
+    add(date: string, items: NewDayPlanItem[]): Promise<number>;
+    /** Change one item's status. Returns false when the id is unknown. */
+    setStatus(id: string, status: 'planned' | 'done' | 'dropped' | 'carried', doneBy?: 'ava' | 'operator' | 'system' | null): Promise<boolean>;
+}
+//# sourceMappingURL=day-plan.d.ts.map

package/dist/social/day-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"day-plan.d.ts","sourceRoot":"","sources":["../../src/social/day-plan.ts"],"names":[],"mappings":"AAeA;4EAC4E;AAC5E,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX;yDACqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACnD;;4EAEwE;IACxE,OAAO,EAAE,KAAK,GAAG,UAAU,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC9C,uCAAuC;IACvC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3C,0CAA0C;IAC1C,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,sEAAsE;IACtE,SAAS,CACP,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,EAClD,MAAM,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,QAAQ,GAAG,IAAI,GAC5C,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB"}

package/dist/social/day-plan.js

@@ -0,0 +1,16 @@
+// ─── The day's plan — what was agreed, readable by both of them ─────────────
+//
+// The operator and Ava plan the day together every morning. Until now that
+// conversation lived in chat scrollback: gone by lunchtime, and invisible to
+// her afterwards, so she could not say "the 13:00 has not gone out" or build
+// tomorrow around what today did not manage.
+//
+// The same lesson as the health room, arrived at twice. She could create plans
+// there and never see one, so she archived the plan someone was four days into
+// and told them nothing was displaced. A list she cannot read is a list she
+// will contradict.
+//
+// Surface-injected like every other store: the hub owns the rows, core owns
+// the rules.
+export {};
+//# sourceMappingURL=day-plan.js.map

package/dist/social/day-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"day-plan.js","sourceRoot":"","sources":["../../src/social/day-plan.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,6CAA6C;AAC7C,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,mBAAmB;AACnB,EAAE;AACF,4EAA4E;AAC5E,aAAa"}