@rosthq/cli 0.7.112 → 0.7.114
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/forge-workspace.d.ts +3 -1
- package/dist/forge-workspace.d.ts.map +1 -1
- package/dist/index.js +124 -12
- package/dist/index.js.map +3 -3
- package/dist/runner-sandbox.d.ts +51 -1
- package/dist/runner-sandbox.d.ts.map +1 -1
- package/dist/runner-serve.d.ts +1 -0
- package/dist/runner-serve.d.ts.map +1 -1
- package/package.json +1 -1
package/dist/runner-sandbox.d.ts
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
export declare const SANDBOX_EXEC_PATH = "/usr/bin/sandbox-exec";
|
|
2
2
|
export declare const RUNNER_ASKPASS_DIR: string;
|
|
3
|
-
export declare const RUNNER_TEMP_PREFIXES: readonly ["rost-runner-mcp-", "rost-runner-sandbox-", "rost-runner-askpass-"];
|
|
3
|
+
export declare const RUNNER_TEMP_PREFIXES: readonly ["rost-runner-mcp-", "rost-runner-sandbox-", "rost-runner-askpass-", "rost-runner-claude-config-"];
|
|
4
4
|
export declare const RUNNER_TEMP_STARTUP_SWEEP_MAX_AGE_MS: number;
|
|
5
5
|
export declare const RUNNER_TEMP_TURN_SWEEP_MAX_AGE_MS: number;
|
|
6
6
|
export type SandboxMode = "auto" | "off" | "strict";
|
|
@@ -81,6 +81,56 @@ export declare function isSandboxExecAvailable(): boolean;
|
|
|
81
81
|
*/
|
|
82
82
|
export declare function resolveSandboxSpec(options: ResolveSandboxOptions): SandboxSpec;
|
|
83
83
|
export declare function forgeBuildUnsupportedReason(platform: NodeJS.Platform): string | null;
|
|
84
|
+
/**
|
|
85
|
+
* DER-2109: the runner-side fail-closed belt to the server-side Forge-claim gate
|
|
86
|
+
* (DER-1564, `apps/web/src/lib/runner/service.ts`). That server gate withholds
|
|
87
|
+
* Forge-phase claims from a runner without a proven-safe sandbox posture, but it is a
|
|
88
|
+
* belt-and-suspenders control, not the only one — the runner itself must never actually
|
|
89
|
+
* EXECUTE a turn that requires OS confinement without one, regardless of what the
|
|
90
|
+
* server offered or what a stale/misconfigured local state believes. This function is
|
|
91
|
+
* that local, pure, fail-closed decision: given the resolved sandbox posture for a
|
|
92
|
+
* turn, decide PROCEED (`null`) or REFUSE (a stated, human-readable reason).
|
|
93
|
+
*
|
|
94
|
+
* Applies invariant #10 ("conservative by default" — AGENTS.md) at the narrowest
|
|
95
|
+
* possible point: it governs ONLY turns that REQUIRE OS confinement — workspace-bearing
|
|
96
|
+
* Forge build/review/merge turns that run attacker-influenceable model tools (Bash,
|
|
97
|
+
* file writes) at the operator's own uid against a real checkout. Lane-1 seat/
|
|
98
|
+
* interactive/read turns carry no attacker-controlled workspace and need no OS sandbox
|
|
99
|
+
* under the threat model (see docs/solutions/2026-07-05-runner-sandbox-threat-model.md
|
|
100
|
+
* and docs/adr/0021-runner-build-execution-trust-boundary.md); callers for those turns
|
|
101
|
+
* must never invoke this function at all — it has no opinion on turns that don't need a
|
|
102
|
+
* sandbox, only on what to do when one was needed and could not be honored.
|
|
103
|
+
*
|
|
104
|
+
* Decision, in order:
|
|
105
|
+
* 1. `spec.kind === "seatbelt"` → PROCEED. An active OS sandbox is present; the turn
|
|
106
|
+
* runs confined.
|
|
107
|
+
* 2. `mode === "off"` → PROCEED. The operator DELIBERATELY opted out via
|
|
108
|
+
* `RUNNER_SANDBOX=off` — the founder-authorized loosened fallback for trusted
|
|
109
|
+
* machines (logged loudly by the caller). The matching server-side authorization
|
|
110
|
+
* is the trusted-tenant allowlist (`FORGE_SANDBOX_TRUSTED_TENANT_IDS`); this
|
|
111
|
+
* function does not re-check that allowlist, it only honors the operator's own
|
|
112
|
+
* explicit local choice.
|
|
113
|
+
* 3. Otherwise: `mode` was `auto`/`strict` (a `guard`/`strict` posture was
|
|
114
|
+
* configured) but `resolveSandboxSpec` could not honor it — either seatbelt is
|
|
115
|
+
* unavailable on this macOS host, or the host is not macOS at all — and the
|
|
116
|
+
* operator did NOT opt out. REFUSE. Silently degrading to an unconfined run here
|
|
117
|
+
* is exactly the failure mode invariant #10 forbids: a configured protective
|
|
118
|
+
* posture must never be quietly downgraded. The reason names the platform, states
|
|
119
|
+
* why confinement could not be applied, and tells the operator the one sanctioned
|
|
120
|
+
* override (`RUNNER_SANDBOX=off` on a trusted, founder-authorized host).
|
|
121
|
+
*
|
|
122
|
+
* Pure and side-effect-free — no logging, no process exit — so the caller decides how
|
|
123
|
+
* to surface the refusal (CLI stderr, `error_logs`, turn-failure event, etc.). The
|
|
124
|
+
* returned string is direct CLI-facing copy: sentence case, no exclamation marks, no
|
|
125
|
+
* emoji, no AI-magic language, and it carries no secrets — only the static prose, the
|
|
126
|
+
* platform name, the mode label, and `spec.reason` (itself a static, secret-free reason
|
|
127
|
+
* string produced by `resolveSandboxSpec`).
|
|
128
|
+
*/
|
|
129
|
+
export declare function sandboxRequiredTurnRefusal(input: {
|
|
130
|
+
mode: SandboxMode;
|
|
131
|
+
platform: NodeJS.Platform;
|
|
132
|
+
spec: SandboxSpec;
|
|
133
|
+
}): string | null;
|
|
84
134
|
export type WrappedCommand = {
|
|
85
135
|
command: string;
|
|
86
136
|
args: string[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"runner-sandbox.d.ts","sourceRoot":"","sources":["../src/runner-sandbox.ts"],"names":[],"mappings":"AAgCA,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAYzD,eAAO,MAAM,kBAAkB,QAA6C,CAAC;
|
|
1
|
+
{"version":3,"file":"runner-sandbox.d.ts","sourceRoot":"","sources":["../src/runner-sandbox.ts"],"names":[],"mappings":"AAgCA,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAYzD,eAAO,MAAM,kBAAkB,QAA6C,CAAC;AAO7E,eAAO,MAAM,oBAAoB,6GAKvB,CAAC;AAYX,eAAO,MAAM,oCAAoC,QAAiB,CAAC;AACnE,eAAO,MAAM,iCAAiC,QAAiB,CAAC;AA0ChE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEpD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAQvE;AAMD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG;IAAE,YAAY,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CASrH;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAGhB,aAAa,EAAE,MAAM,EAAE,CAAC;IAOxB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAG/B,eAAe,EAAE,MAAM,EAAE,CAAC;IAQ1B,cAAc,EAAE,MAAM,EAAE,CAAC;IAEzB,YAAY,EAAE,OAAO,CAAC;IAGtB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAwCF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAsIvE;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC;AAEjF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,EAAE,MAAM,CAAC;IAGlB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAK3B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC;AAuBF,wBAAgB,sBAAsB,IAAI,OAAO,CAMhD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,GAAG,WAAW,CA8E9E;AAUD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,GAAG,IAAI,CAKpF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,IAAI,EAAE,WAAW,CAAC;CACnB,GAAG,MAAM,GAAG,IAAI,CAyBhB;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IAGf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAKF,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,WAAW,EAAE,MAAM,GAAG,IAAI,GACzB,cAAc,CAShB;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAChD,OAAO,CAAC,MAAM,EAAE,CAAC,CA+BnB"}
|
package/dist/runner-serve.d.ts
CHANGED
|
@@ -162,6 +162,7 @@ type TurnRunContext = {
|
|
|
162
162
|
export type ResolvedTurnPlan = {
|
|
163
163
|
profile: RunnerExecutionContract["profile"];
|
|
164
164
|
claudeAllowedTools: string[];
|
|
165
|
+
localBuiltinTools: readonly string[];
|
|
165
166
|
codexSandbox: "read-only" | "workspace-write";
|
|
166
167
|
outputFormat: "text" | "json";
|
|
167
168
|
repoDir: string | null;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"runner-serve.d.ts","sourceRoot":"","sources":["../src/runner-serve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAS5F,OAAO,EAA2F,KAAK,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAE/K,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;
|
|
1
|
+
{"version":3,"file":"runner-serve.d.ts","sourceRoot":"","sources":["../src/runner-serve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAS5F,OAAO,EAA2F,KAAK,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAE/K,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAsBzD,OAAO,EAUL,KAAK,WAAW,EAChB,KAAK,WAAW,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAA4C,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAIxF,KAAK,aAAa,GAAG;IACnB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,EAAE,EAAE,aAAa,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAGzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;CACzD,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAMF,KAAK,qBAAqB,GAAG;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,CAAC,EAAE;QACjB,MAAM,EAAE,iBAAiB,GAAG,aAAa,CAAC;QAC1C,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,OAAO,EAAE;QAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,CAAC;IAChH,eAAe,EAAE;QAAE,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;IAI/C,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpD,EAAE,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;IAG3E,SAAS,EAAE;QAAE,mBAAmB,EAAE,MAAM,CAAC;QAAC,8BAA8B,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC1F,IAAI,EAAE;QAAE,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC7C,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAKF,KAAK,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;AACjD,KAAK,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEvC,KAAK,WAAW,GAAG;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,aAAa,CAAC;IAIvB,OAAO,EAAE,WAAW,CAAC;IAIrB,WAAW,EAAE,WAAW,CAAC;IACzB,mBAAmB,EAAE,OAAO,CAAC;IAG7B,OAAO,EAAE,MAAM,CAAC;IAGhB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AA+CF,wBAAsB,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2IjF;AAgFD,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAGzF;AAcD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,YAAY,EAAE,kBAAkB,CAAC;IACjC,SAAS,EAAE,eAAe,CAAC;IAC3B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAS1B;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,SAAS,EAAE,OAAO,KAAK,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,kBAAkB,CAAC;IACjC,EAAE,EAAE,aAAa,CAAC;IAClB,SAAS,EAAE,MAAM,eAAe,CAAC;IAGjC,aAAa,EAAE,MAAM,MAAM,EAAE,CAAC;IAK9B,qBAAqB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC3C,2BAA2B,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD,GAAG,MAAM,IAAI,CAiDb;AA6LD,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAW5F;AA0HD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK9E;AA+ED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,GAAG,cAAc,CAa1E;AAQD,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAgB1E;AA0DD,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAI3E;AAkUD,KAAK,cAAc,GAAG;IACpB,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACzD,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC;IAI5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAIxB,UAAU,CAAC,EAAE,MAAM,CAAC;IAKpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IAKjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAKF,KAAK,cAAc,GAAG;IACpB,SAAS,EAAE,OAAO,KAAK,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;IACpB,EAAE,EAAE,aAAa,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAKF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAI5C,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAK7B,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,YAAY,EAAE,WAAW,GAAG,iBAAiB,CAAC;IAC9C,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IAG9B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAGlB,uBAAuB,EAAE,OAAO,CAAC;CAClC,CAAC;AAIF,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,uBAAuB,GAAG,IAAI,CAM1G;AAqBD,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,IAAI,EAAE,YAAY,GAAG,gBAAgB,CAAC;IACtC,SAAS,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAE1C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,GAAG,gBAAgB,CA8CnB;AAKD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,gBAAgB,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IASrC,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,GAAG;IAAE,OAAO,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAiD5C;AAgJD,eAAO,MAAM,uBAAuB,OAAQ,CAAC;AAC7C,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAYjD,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAMnG;AAgFD,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,IAAI,EAAE,YAAY,GAAG,gBAAgB,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC1C,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,MAAM,CA0FT;AAydD,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClC,SAAS,EAAE,uBAAuB,EAClC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,gBAAgB,CAAC,CA4C3B;AAwGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAgBzD;AAOD,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAErC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6G5B;AAqFD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE,CAmBtE;AAMD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAoBtF"}
|