@scopebond/hook 0.6.0 → 0.8.0

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,+EAA+E;AAC/E,gDAAgD;AAChD,EAAE;AACF,kGAAkG;AAClG,wFAAwF;AACxF,4FAA4F;AAC5F,kEAAkE;AAClE,kEAAkE;AAClE,gGAAgG;AAChG,kFAAkF;AAClF,0GAA0G;AAC1G,mGAAmG;AACnG,uFAAuF;AACvF,wGAAwG;AACxG,EAAE;AACF,qDAAqD;AACrD,kEAAkE;AAElE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAe,MAAM,UAAU,CAAC;AAC1G,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EACL,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,mBAAmB,EACpF,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,SAAS,EAClF,kBAAkB,EAAE,sBAAsB,GAC3C,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,cAAc,EAAkB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;uCAEuC;AACvC,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;YACpF,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACtD,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED;6EAC6E;AAC7E,SAAS,aAAa,CAAC,SAA6B,EAAE,KAAmB;IACvE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC,SAAS;QAAE,IAAI,GAAG,KAAK,EAAE,CAAC;SAC1B,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;SAClE,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,SAAS,CAAC;SACvD,CAAC;QAAC,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,GAAG,SAAS,CAAC;QAAC,CAAC;IAAC,CAAC;IACtG,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC;AACnD,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;AAC7E,CAAC;AACD,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;QACpC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;QAC/B,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;QACvC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;QAChC,kEAAkE;QAClE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG;QACtF,iFAAiF;QACjF,+EAA+E;QAC/E,+DAA+D;QAC/D,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrH,CAAC;AACJ,CAAC;AACD,SAAS,SAAS;IAChB,IAAI,CAAC;QAAC,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAClC,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE;KAClH,CAAC,GAAG,IAAI,CAAC,CAAC;IACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,MAAM,IAAI,CAAC,CAAC;IAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;sCAEsC;AACtC,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAClC,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE;KAClH,CAAC,GAAG,IAAI,CAAC,CAAC;IACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAU,EAAE,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AACnI,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAU,EAAE,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACzK,MAAM,eAAe,GAAG,CAAC,IAAc,EAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1I,MAAM,cAAc,GAAG,sFAAsF,CAAC;AAE9G,KAAK,UAAU,aAAa,CAAC,MAAoD,EAAE,OAAkC,UAAU;IAC7H,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAAC,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,KAAM,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5F,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,6EAA6E;QAC7E,wEAAwE;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,iCAAkC,KAAe,CAAC,OAAO,mBAAmB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,aAAa,CAAC,gBAAgB,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,MAAM,aAAa,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,KAAK,GAA4B,EAAE,CAAC;IACxC,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,IAAI,KAAK,EAAE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtF,IAAI,UAAU,GAA6B,MAAM,CAAC;IAClD,IAAI,OAAO,GAAG,8BAA8B,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1G,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,6EAA6E;QAC7E,2EAA2E;QAC3E,UAAU,GAAG,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3D,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,GAAG,MAAM,CAAC;QACpB,OAAO,GAAG,iCAAkC,KAAe,CAAC,OAAO,mBAAmB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;IAChH,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;0CAG0C;AAC1C,SAAS,kBAAkB,CAAC,OAAe,EAAE,IAAc;IACzD,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO;IAC1D,OAAO,CAAC,KAAK,CAAC,aAAa,OAAO,0FAA0F,CAAC,CAAC;IAC9H,OAAO,CAAC,KAAK,CAAC,kCAAkC,UAAU,CAAC,GAAG,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,OAAO,CAAC,IAAc;IAC7B,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,8BAA8B,CAAC,CAAC;IAC1E,iFAAiF;IACjF,8DAA8D;IAC9D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QACnF,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,8BAA8B,QAAQ,EAAE,kCAAkC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,4EAA4E;IAC5E,8DAA8D;IAC9D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACnH,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,cAAc,EAAE,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,oBAAoB,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,8EAA8E;IAC9E,8EAA8E;IAC9E,OAAO,CAAC,GAAG,CAAC,8CAA8C,UAAU,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,SAAS,UAAU,CAAC,QAAQ,CAAC,iCAAiC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC9G,OAAO,CAAC,GAAG,CAAC,oCAAoC,UAAU,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,UAAU,CAAC,OAAgC;IAClD,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAE,OAAO,CAAC,SAAiD,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9F,IAAI,KAAK,KAAK,wBAAwB;QAAE,OAAO,eAAe,CAAC;IAC/D,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,KAAK,KAAK,mBAAmB,IAAI,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IACrG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,OAAgC;IACtD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IACjE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QACxE,CAAC,CAAC,MAAM,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;YAC/E,CAAC,CAAC,MAAM,CAAC,WAAW,KAAK,YAAY,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;gBAClG,CAAC,CAAC,MAAM,CAAC,WAAW,KAAK,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE;oBAC9E,CAAC,CAAC,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAc;IAClC,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACjH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,OAA6C,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAM,6BAA6B,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACtG,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAClJ,MAAM,EAAE,QAAQ,EAAE,GAAG,oBAAoB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAuC,CAAC;QAC7F,IAAI,MAAM,CAAC,KAAK;YAAE,EAAE,IAAI,CAAC,CAAC;aACrB,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9G,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAE,CAAC,CAAC,OAA8C,CAAC,SAAS,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,MAAM,sCAAsC,YAAY,GAAG,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAAC,KAAK,MAAM,CAAC,IAAI,GAAG;YAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAc;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACjG,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAClI,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;YACrE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;YACzE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9H,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9F,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAc;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,uGAAuG,CAAC,CAAC;QACvH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,mFAAmF;IACnF,gFAAgF;IAChF,iFAAiF;IACjF,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClB,IAAI,MAA6B,CAAC;IAClC,IAAI,CAAC;QAAC,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IACrD,MAAM,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,gFAAgF,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC3H,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACvC,kFAAkF;QAClF,+DAA+D;QAC/D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;YAC/D,IAAI,OAAO,KAAK,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,cAAc,EAAE,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,oBAAoB,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,mBAAoB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACjI,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1C,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,EAAE,OAAO,IAAI,CAAC,4BAA4B,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzI,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,qFAAqF;AACrF,SAAS,OAAO;IACd,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED;;gFAEgF;AAChF,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,8BAA8B,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,SAAS,GAAc,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/D,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACxC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACxC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,OAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjH,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,mBAAmB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC1F,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,CAAC;QAC9G,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B,cAAc,EAAE,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,4EAA4E,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjH,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,CAAC,QAAQ,CAAC,qBAAqB,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,oCAAoC,UAAU,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,mBAAmB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,kBAAkB,WAAW,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,2CAA2C,EAAE,CAAC,CAAC;IACrH,OAAO,CAAC,GAAG,CAAC,sBAAsB,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,iCAAiC,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3H,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAC5H,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IACrJ,OAAO,CAAC,GAAG,CAAC,sBAAsB,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,4BAA4B,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC,CAAC;IACvG,IAAI,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC3F,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,+CAA+C,EAAE,CAAC,CAAC;IAClH,IAAI,CAAC,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,8EAA8E,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7J,MAAM,KAAK,GAAG,mBAAmB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAClJ,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;IAC/F,CAAC;SAAM,CAAC;QACN,IAAI,SAAS,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3F,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,MAAM,GAAG,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,SAAS,GAAG,gBAAiB,KAAe,CAAC,OAAO,GAAG,CAAC;QAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,gBAAgB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACzG,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,IAAc;IAClC,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAc,EAAE,CAAC;QAC3D,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,qCAAqC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACrI,CAAC;IACD,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAAC,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAAC,CAAC;;QACzG,OAAO,CAAC,GAAG,CAAC,QAAQ,QAAQ,EAAE,0DAA0D,CAAC,CAAC;AACjG,CAAC;AAED;;8EAE8E;AAC9E,SAAS,QAAQ,CAAC,IAAc;IAC9B,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAClI,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,oGAAoG,CAAC,CAAC;AACpH,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7C,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IAAC,MAAM,SAAS,EAAE,CAAC;AAAC,CAAC;KACvC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IAAC,MAAM,SAAS,EAAE,CAAC;AAAC,CAAC;KAC5C,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAAC,MAAM,QAAQ,EAAE,CAAC;AAAC,CAAC;KAC1C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KACtC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;IAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;IAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAClD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;IAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAC1C,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IAAC,MAAM,SAAS,EAAE,CAAC;AAAC,CAAC;KAC5C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;IAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAC5C,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAAC,MAAM,QAAQ,EAAE,CAAC;AAAC,CAAC;KAC1C,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IAAC,SAAS,EAAE,CAAC;AAAC,CAAC;KACtC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IAAC,MAAM,SAAS,EAAE,CAAC;AAAC,CAAC;KAC5C,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;IAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAChD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAAC,QAAQ,EAAE,CAAC;AAAC,CAAC;KACpC,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KACxC,CAAC;IACJ,OAAO,CAAC,KAAK,CAAC,6MAA6M,CAAC,CAAC;IAC7N,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC","sourcesContent":["#!/usr/bin/env node\n// scopebond-hook — govern a coding agent's tool calls against policy, in-path,\n// before they run, with a signed local receipt.\n//\n//   scopebond-hook claude                     evaluate a Claude Code PreToolUse call (stdin JSON)\n//   scopebond-hook cursor                     evaluate a Cursor hook event (stdin JSON)\n//   scopebond-hook codex                      evaluate a Codex PreToolUse call (stdin JSON)\n//   scopebond-hook init [--cursor|--codex] [--no-install] [--yes]\n//   scopebond-hook connect <url> <bundle.json> [--cursor|--codex]\n//                                             enroll with a Cloud workspace and start exporting\n//   scopebond-hook log [-n N]                 show the most recent local receipts\n//   scopebond-hook verify                     verify every local receipt offline against the attester key\n//   scopebond-hook test \"<shell command>\"     show the decision for a command without recording it\n//   scopebond-hook flush                      deliver any queued receipts to Cloud now\n//   scopebond-hook trust [--yes]              let this project's .scopebond policy govern here (pinned)\n//\n// Config dir: $SCOPEBOND_HOOK_DIR, else ./.scopebond\n// Fail-closed: any error denies the action with a repair message.\n\nimport { readFileSync, existsSync, mkdtempSync, rmSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { tmpdir } from \"node:os\";\nimport { execFileSync } from \"node:child_process\";\nimport type { CloudEnrollmentBundle } from \"@scopebond/gateway\";\nimport { verifyReceipt } from \"@scopebond/gateway\";\nimport { openReceiptStore, loadOrCreateAttester } from \"@scopebond/gateway/node\";\nimport { mapClaudeToolUse, mapCodexToolUse, mapCursorEvent, fillPushBranch, type Mapped } from \"./map.js\";\nimport { createHookRuntime } from \"./runtime.js\";\nimport { scaffold, harnessSnippet, installHarness } from \"./init.js\";\nimport {\n  userHome, userHarnessFile, resolveConfigDir, writeHarnessConfig, removeHarnessConfig,\n  cursorDetected, codexDetected, absoluteHookCommand, isHarnessConfigured, purgeHome, type Harness,\n  trustProjectPolicy, untrustedProjectPolicy,\n} from \"./install.js\";\nimport { connectCloud, loadConnection, connectionPath } from \"./cloud.js\";\nimport { cliCommand, hookVersion } from \"./version.js\";\nimport { fileURLToPath } from \"node:url\";\n\n/** The current git branch in `cwd` (best-effort). A bare `git push` pushes it, so\n *  the runtime fills it in before evaluating; on failure the ref stays absent and\n *  the starter policy fails closed. */\nfunction currentBranch(cwd: string): string | null {\n  try {\n    return execFileSync(\"git\", [\"-C\", cwd, \"symbolic-ref\", \"--quiet\", \"--short\", \"HEAD\"], {\n      encoding: \"utf8\", stdio: [\"ignore\", \"pipe\", \"ignore\"],\n    }).trim() || null;\n  } catch { return null; }\n}\n\n/** Read an enrollment bundle from a file path, an inline base64 blob, or inline raw\n *  JSON (the portal hands out a base64 blob so it is one clean argument). */\nfunction readBundleArg(bundleArg: string | undefined, stdin: () => string): CloudEnrollmentBundle {\n  let text: string;\n  if (!bundleArg) text = stdin();\n  else if (existsSync(bundleArg)) text = readFileSync(bundleArg, \"utf8\");\n  else if (bundleArg.trim().startsWith(\"{\")) text = bundleArg;\n  else { try { text = Buffer.from(bundleArg, \"base64\").toString(\"utf8\"); } catch { text = bundleArg; } }\n  return JSON.parse(text) as CloudEnrollmentBundle;\n}\n\nfunction configDir(): string {\n  return process.env.SCOPEBOND_HOOK_DIR ?? join(process.cwd(), \".scopebond\");\n}\nfunction runtimePaths(dir: string) {\n  const connection = loadConnection(dir);\n  return {\n    policyPath: join(dir, \"policy.json\"),\n    keyPath: join(dir, \"agent.key\"),\n    attesterPath: join(dir, \"attester.key\"),\n    dbPath: join(dir, \"receipts.db\"),\n    // Strict: deny (not just observe) tools with no taxonomy mapping.\n    strict: process.argv.includes(\"--strict\") || process.env.SCOPEBOND_HOOK_STRICT === \"1\",\n    // When connected, auto-export receipts. A short bounded flush keeps the hot path\n    // fast; undelivered receipts persist in the durable outbox and flush next time\n    // (or via `scopebond-hook flush`, e.g. on a session-end hook).\n    ...(connection ? { cloud: { connection, flushTimeoutMs: Number(process.env.SCOPEBOND_HOOK_FLUSH_MS ?? 800) } } : {}),\n  };\n}\nfunction readStdin(): string {\n  try { return readFileSync(0, \"utf8\"); } catch { return \"\"; }\n}\n\nfunction denyClaude(reason: string): never {\n  process.stdout.write(JSON.stringify({\n    hookSpecificOutput: { hookEventName: \"PreToolUse\", permissionDecision: \"deny\", permissionDecisionReason: reason },\n  }) + \"\\n\");\n  process.stderr.write(`Scopebond: ${reason}\\n`);\n  process.exit(2);\n}\n\n/** Codex accepts the structured deny response on a successful hook exit. Keeping\n *  exit 0 lets its UI show a completed policy check instead of a failed hook while\n *  still preventing the tool call. */\nfunction denyCodex(reason: string): never {\n  process.stdout.write(JSON.stringify({\n    hookSpecificOutput: { hookEventName: \"PreToolUse\", permissionDecision: \"deny\", permissionDecisionReason: reason },\n  }) + \"\\n\");\n  process.exit(0);\n}\n\nconst harnessName = (harness: Harness): string => harness === \"claude\" ? \"Claude Code\" : harness === \"cursor\" ? \"Cursor\" : \"Codex\";\nconst harnessFileName = (harness: Harness): string => harness === \"claude\" ? \".claude/settings.json\" : harness === \"cursor\" ? \".cursor/hooks.json\" : \".codex/hooks.json\";\nconst selectedHarness = (args: string[]): Harness => args.includes(\"--codex\") ? \"codex\" : args.includes(\"--cursor\") ? \"cursor\" : \"claude\";\nconst codexTrustStep = \"Open Codex, run `/hooks`, review Scopebond, and choose Trust. Then start a new task.\";\n\nasync function runPreToolUse(mapper: (input: Record<string, unknown>) => Mapped[], deny: (reason: string) => never = denyClaude): Promise<void> {\n  let input: Record<string, unknown>;\n  try { input = JSON.parse(readStdin()); } catch { deny(\"hook received invalid JSON on stdin\"); }\n  try {\n    const cwd = input?.cwd ? String(input.cwd) : process.cwd();\n    const runtime = createHookRuntime(runtimePaths(resolveConfigDir(cwd)));\n    const decision = await runtime.evaluate(fillPushBranch(mapper(input!), currentBranch(cwd)));\n    await runtime.flush();\n    if (decision.decision === \"deny\") deny(decision.reason);\n    // Stay silent on allow/not_evaluated so the coding agent's normal permission\n    // flow remains in charge. Scopebond blocks; it never silently approves.\n    process.exit(0);\n  } catch (error) {\n    deny(`Scopebond hook failed closed: ${(error as Error).message}. Repair: run \\`${cliCommand(\"init\")}\\`.`);\n  }\n}\n\nasync function runClaude(): Promise<void> {\n  await runPreToolUse(mapClaudeToolUse);\n}\n\nasync function runCodex(): Promise<void> {\n  await runPreToolUse(mapCodexToolUse, denyCodex);\n}\n\nasync function runCursor(): Promise<void> {\n  let input: Record<string, unknown> = {};\n  try { input = JSON.parse(readStdin()); } catch { /* fall through to fail-closed deny below */ }\n  const event = String(input?.hook_event_name ?? input?.event ?? process.argv[3] ?? \"\");\n  let permission: \"allow\" | \"deny\" | \"ask\" = \"deny\";\n  let message = \"Scopebond hook failed closed\";\n  try {\n    const cwd = input?.cwd ? String(input.cwd) : process.cwd();\n    const runtime = createHookRuntime(runtimePaths(resolveConfigDir(cwd)));\n    const decision = await runtime.evaluate(fillPushBranch(mapCursorEvent(event, input), currentBranch(cwd)));\n    await runtime.flush();\n    // Only an out-of-policy action is denied outright; an allowed or unevaluated\n    // action defers to Cursor's own prompt (\"ask\"), never a silent auto-allow.\n    permission = decision.decision === \"deny\" ? \"deny\" : \"ask\";\n    message = decision.reason;\n  } catch (error) {\n    permission = \"deny\";\n    message = `Scopebond hook failed closed: ${(error as Error).message}. Repair: run \\`${cliCommand(\"init\")}\\`.`;\n  }\n  process.stdout.write(JSON.stringify({ permission, agentMessage: message }) + \"\\n\");\n  process.exit(0);\n}\n\n/** `init`, `trust` and `uninstall` change what governs the agent, so they are for a\n *  person at a terminal. A coding agent's shell is not interactive: without a TTY on\n *  stdin they refuse unless `--yes` is passed (for scripts and CI). The starter policy\n *  also denies the agent running them. */\nfunction requireInteractive(command: string, args: string[]): void {\n  if (process.stdin.isTTY || args.includes(\"--yes\")) return;\n  console.error(`scopebond ${command} changes what governs your coding agent, so it must be run from an interactive terminal.`);\n  console.error(`In a script or CI, pass --yes: ${cliCommand(`${command} --yes`)}`);\n  process.exit(1);\n}\n\nfunction runInit(args: string[]): void {\n  requireInteractive(\"init\", args);\n  const harness = selectedHarness(args);\n  const dir = configDir();\n  const { agentKid, policyPath } = scaffold(dir, { force: args.includes(\"--force\") });\n  console.log(`Scopebond hook enrolled in ${dir}`);\n  console.log(`  machine key    ${agentKid}`);\n  console.log(`  policy         ${policyPath} (starter — edit the limits)`);\n  // With a user-level install present, a project policy governs only once trusted.\n  // Running init here is that decision, so pin this policy now.\n  if (!process.env.SCOPEBOND_HOOK_DIR && existsSync(join(userHome(), \"policy.json\"))) {\n    trustProjectPolicy(dir);\n    console.log(`  trusted        overrides ${userHome()} here; after editing it, run \\`${cliCommand(\"trust\")}\\``);\n  }\n  console.log(\"\");\n  // Configure the agent automatically by default (idempotent), so there is no\n  // hand-editing step; --no-install prints the snippet instead.\n  if (!args.includes(\"--no-install\")) {\n    let file: string;\n    try { file = installHarness(harness); } catch (error) { console.error((error as Error).message); process.exit(1); }\n    console.log(`✓ ${harnessName(harness)} configured in ${file}`);\n    if (harness === \"codex\") console.log(`\\nOne last step: ${codexTrustStep}`);\n  } else {\n    console.log(`Add this to your ${harnessFileName(harness)}:`);\n    console.log(harnessSnippet(harness));\n  }\n  console.log(\"\");\n  // Print the runnable `npx` form: after `npx @scopebond/hook init` there is no\n  // `scopebond-hook` binary on PATH, so a bare `scopebond-hook log` would fail.\n  console.log(`Next: run one command in the agent, then \\`${cliCommand(\"log\")}\\` to see the receipt`);\n  console.log(`and \\`${cliCommand(\"verify\")}\\` to check it offline. Try \\`${cliCommand('test \"rm -rf /\"')}\\`.`);\n  console.log(`To send receipts to a workspace: ${cliCommand(\"connect <workspace-url> <enrollment>\")}`);\n}\n\nfunction decisionOf(payload: Record<string, unknown>): string {\n  const rr = String(payload.realtime_result ?? \"\");\n  const state = String((payload.execution as Record<string, unknown> | undefined)?.state ?? \"\");\n  if (state === \"observed_not_evaluated\") return \"not_evaluated\";\n  if (rr === \"deny\") return state === \"cooperative_allow\" || state === \"executed\" ? \"monitor\" : \"deny\";\n  return \"allow\";\n}\n\nfunction describeIntent(payload: Record<string, unknown>): string {\n  const intent = (payload.intent ?? {}) as Record<string, unknown>;\n  const p = (intent.params ?? {}) as Record<string, unknown>;\n  const bits = intent.action_type === \"shell.exec\" ? String(p.program ?? \"\")\n    : intent.action_type === \"git.push\" ? `${p.remote ?? \"\"} ${p.ref ?? \"\"}`.trim()\n    : intent.action_type === \"file.write\" || intent.action_type === \"file.read\" ? String(p.path ?? \"\")\n    : intent.action_type === \"mcp.tool.call\" ? `${p.server ?? \"\"}/${p.tool ?? \"\"}`\n    : intent.action_type === \"net.fetch\" ? String(p.host ?? \"\") : \"\";\n  return `${String(intent.action_type ?? \"?\")}${bits ? ` ${bits}` : \"\"}`;\n}\n\nasync function runLog(args: string[]): Promise<void> {\n  const dir = resolveConfigDir(process.cwd());\n  const dbPath = join(dir, \"receipts.db\");\n  if (!existsSync(dbPath)) { console.log(\"no receipts yet — run a command in the agent first.\"); process.exit(0); }\n  const nIdx = args.indexOf(\"-n\");\n  const n = nIdx >= 0 ? Math.max(1, Number(args[nIdx + 1]) || 20) : 20;\n  const { store } = openReceiptStore({ db: dbPath });\n  const all = await Promise.resolve(store.list());\n  const recent = all.slice(-n);\n  if (recent.length === 0) { console.log(\"no receipts yet.\"); process.exit(0); }\n  for (const r of recent) {\n    const p = r.payload as unknown as Record<string, unknown>;\n    console.log(`${String(p.timestamp ?? \"\")}  ${decisionOf(p).padEnd(13)}  ${describeIntent(p)}`);\n  }\n  console.log(`\\n${recent.length} of ${all.length} receipt(s). Verify them: ${cliCommand(\"verify\")}`);\n}\n\nasync function runVerify(): Promise<void> {\n  const dir = resolveConfigDir(process.cwd());\n  const dbPath = join(dir, \"receipts.db\");\n  const attesterPath = join(dir, \"attester.key\");\n  if (!existsSync(dbPath) || !existsSync(attesterPath)) { console.log(\"nothing to verify yet (no receipts or no attester key).\"); process.exit(0); }\n  const { attester } = loadOrCreateAttester({ file: attesterPath });\n  const { store } = openReceiptStore({ db: dbPath });\n  const all = await Promise.resolve(store.list());\n  let ok = 0;\n  const bad: string[] = [];\n  for (const r of all) {\n    const result = verifyReceipt(r, attester.publicKeyPem) as unknown as Record<string, boolean>;\n    if (result.valid) ok += 1;\n    else {\n      const failed = Object.entries(result).filter(([k, v]) => k.endsWith(\"_valid\") && v === false).map(([k]) => k);\n      bad.push(`${String((r.payload as unknown as Record<string, unknown>).timestamp ?? \"\")}: ${failed.join(\", \") || \"invalid\"}`);\n    }\n  }\n  console.log(`${ok}/${all.length} receipt(s) verify offline against ${attesterPath}.`);\n  if (bad.length) { for (const b of bad) console.error(`  ✗ ${b}`); process.exit(1); }\n  process.exit(0);\n}\n\nasync function runTest(args: string[]): Promise<void> {\n  const command = args.find((a) => !a.startsWith(\"-\"));\n  if (!command) { console.error('usage: scopebond-hook test \"<shell command>\"'); process.exit(1); }\n  const dir = resolveConfigDir(process.cwd());\n  if (!existsSync(join(dir, \"policy.json\"))) { console.error(\"no policy yet — run `scopebond-hook init` first.\"); process.exit(1); }\n  // Evaluate against the real policy and keys, but a throwaway store, so `test`\n  // never records a receipt or exports anything.\n  const tmp = mkdtempSync(join(tmpdir(), \"sb-hook-test-\"));\n  try {\n    const runtime = createHookRuntime({\n      policyPath: join(dir, \"policy.json\"), keyPath: join(dir, \"agent.key\"),\n      attesterPath: join(dir, \"attester.key\"), dbPath: join(tmp, \"receipts.db\"),\n      strict: process.argv.includes(\"--strict\"),\n    });\n    const mapped = fillPushBranch(mapClaudeToolUse({ tool_name: \"Bash\", tool_input: { command } }), currentBranch(process.cwd()));\n    console.log(`command: ${command}`);\n    for (const m of mapped) {\n      const d = await runtime.evaluateOne(m);\n      console.log(`  ${describeIntent({ intent: m.intent }).padEnd(28)} → ${d.decision}${d.reason ? `  (${d.reason})` : \"\"}`);\n    }\n    const overall = await runtime.evaluate(mapped);\n    console.log(`\\noverall: ${overall.decision}${overall.reason ? `  · ${overall.reason}` : \"\"}`);\n    process.exit(overall.decision === \"deny\" ? 2 : 0);\n  } finally {\n    rmSync(tmp, { recursive: true, force: true });\n  }\n}\n\nasync function runConnect(args: string[]): Promise<void> {\n  const positional = args.filter((a) => !a.startsWith(\"--\"));\n  const url = positional[0];\n  const bundleArg = positional[1];\n  const harness = selectedHarness(args);\n  if (!url) {\n    console.error(\"usage: scopebond-hook connect <workspace-url> <enrollment> [--claude|--cursor|--codex] [--no-install]\");\n    process.exit(1);\n  }\n  const dir = configDir();\n  // One command sets everything up: scaffold the key, attester and starter policy if\n  // they do not exist, then enroll and persist the scoped machine credential. The\n  // enrollment can be a file, an inline base64 blob (what the portal hands out) or\n  // raw JSON — the user never has to save or open a JSON file.\n  scaffold(dir, {});\n  let bundle: CloudEnrollmentBundle;\n  try { bundle = readBundleArg(bundleArg, readStdin); }\n  catch { console.error(\"could not read the enrollment (expected a file, inline blob, or JSON on stdin)\"); process.exit(1); }\n  try {\n    const c = await connectCloud(dir, url, bundle);\n    console.log(`✓ Connected to ${c.url}`);\n    // Configure the agent automatically (merges into the existing config), unless the\n    // caller opts out. This removes the \"paste this snippet\" step.\n    if (!args.includes(\"--no-install\")) {\n      const file = installHarness(harness);\n      console.log(`✓ ${harnessName(harness)} configured in ${file}`);\n      if (harness === \"codex\") console.log(`\\nOne last step: ${codexTrustStep}`);\n    } else {\n      console.log(`Add this to your ${harnessFileName(harness)}:`);\n      console.log(harnessSnippet(harness));\n    }\n    console.log(\"\");\n    console.log(\"Run your agent — the first action appears in your workspace within seconds.\");\n  } catch (error) {\n    console.error(`connect failed: ${(error as Error).message}`);\n    process.exit(1);\n  }\n}\n\nasync function runFlush(): Promise<void> {\n  const dir = resolveConfigDir(process.cwd());\n  if (!loadConnection(dir)) { console.error(\"not connected to a workspace; run `scopebond-hook connect` first\"); process.exit(1); }\n  const runtime = createHookRuntime(runtimePaths(dir));\n  await runtime.exporter?.flush();\n  const status = runtime.exporter?.status();\n  runtime.exporter?.stop();\n  console.log(`flushed; ${status?.pending ?? 0} receipt(s) still pending${status?.lastError ? ` (last error: ${status.lastError})` : \"\"}`);\n  // Let pending HTTP handles close normally (forced exit can abort on Windows).\n  process.exitCode = status && status.pending > 0 ? 1 : 0;\n}\n\n/** The absolute path to this CLI file, for registering the hook by absolute path. */\nfunction cliPath(): string {\n  return fileURLToPath(import.meta.url);\n}\n\n/** `install` — the once-per-machine, user-level install (SB112). Scaffolds the\n *  user home and registers the hook by absolute path in the user-level agent config,\n *  so every project a developer opens is governed without a per-repo `init`. */\nfunction runInstall(args: string[]): void {\n  const dir = userHome();\n  const { agentKid, policyPath } = scaffold(dir, { force: args.includes(\"--force\") });\n  console.log(`Scopebond installed for this user in ${dir}`);\n  console.log(`  machine key    ${agentKid}`);\n  console.log(`  policy         ${policyPath} (starter — edit the limits)`);\n  console.log(\"\");\n  const harnesses: Harness[] = args.includes(\"--codex\") ? [\"codex\"]\n    : args.includes(\"--cursor\") ? [\"cursor\"]\n    : args.includes(\"--claude\") ? [\"claude\"]\n    : [\"claude\", ...(cursorDetected() ? [\"cursor\" as const] : []), ...(codexDetected() ? [\"codex\" as const] : [])];\n  if (!args.includes(\"--no-install\")) {\n    for (const h of harnesses) {\n      try {\n        const file = writeHarnessConfig(userHarnessFile(h), h, absoluteHookCommand(cliPath(), h));\n        console.log(`✓ ${harnessName(h)} configured in ${file}`);\n      } catch (error) { console.error(`✗ ${harnessName(h)}: ${(error as Error).message}`); process.exitCode = 1; }\n    }\n  } else {\n    console.log(\"Add this to your user-level agent config:\");\n    console.log(harnessSnippet(harnesses[0]));\n  }\n  if (harnesses.includes(\"codex\")) console.log(`\\nOne last step for Codex: ${codexTrustStep}`);\n  console.log(\"\");\n  console.log(`A project's own .scopebond policy applies only after you trust it there (${cliCommand(\"trust\")}).`);\n  console.log(`Check it: ${cliCommand(\"doctor\")} · see decisions: ${cliCommand(\"log\")}`);\n  console.log(`To send receipts to a workspace: ${cliCommand(\"connect <workspace-url> <enrollment>\")}`);\n}\n\nfunction runStatus(): void {\n  const home = userHome();\n  const installed = existsSync(join(home, \"policy.json\"));\n  const claude = isHarnessConfigured(userHarnessFile(\"claude\"));\n  const cursor = isHarnessConfigured(userHarnessFile(\"cursor\"));\n  const codex = isHarnessConfigured(userHarnessFile(\"codex\"));\n  const connected = !!loadConnection(resolveConfigDir(process.cwd()));\n  const dbPath = join(resolveConfigDir(process.cwd()), \"receipts.db\");\n  console.log(`Scopebond hook ${hookVersion()}`);\n  console.log(`  user home        ${home} ${installed ? \"(installed)\" : \"(not installed — run `scopebond install`)\"}`);\n  console.log(`  active config    ${resolveConfigDir(process.cwd())}`);\n  const ignored = untrustedProjectPolicy(process.cwd());\n  if (ignored) console.log(`  project policy   ${ignored} ignored — not trusted (run \\`${cliCommand(\"trust\")}\\` to use it)`);\n  console.log(`  Claude Code     ${claude ? \"configured\" : \"not configured\"}`);\n  console.log(`  Cursor           ${cursor ? \"configured\" : cursorDetected() ? \"detected, not configured\" : \"not detected\"}`);\n  console.log(`  Codex            ${codex ? \"configured (approve once with /hooks)\" : codexDetected() ? \"detected, not configured\" : \"not detected\"}`);\n  console.log(`  cloud workspace  ${connected ? \"connected\" : \"not connected (local only)\"}`);\n  console.log(`  local receipts   ${existsSync(dbPath) ? dbPath : \"none yet\"}`);\n}\n\nasync function runDoctor(): Promise<void> {\n  const problems: string[] = [];\n  const [major, minor] = process.versions.node.split(\".\").map(Number);\n  const nodeOk = major > 22 || (major === 22 && minor >= 13);\n  console.log(`Scopebond doctor`);\n  console.log(`  node             ${process.versions.node} ${nodeOk ? \"ok\" : \"TOO OLD (need >=22.13)\"}`);\n  if (!nodeOk) problems.push(\"node >=22.13 is required (the Cloud outbox uses node:sqlite)\");\n  const cli = cliPath();\n  console.log(`  cli              ${cli} ${existsSync(cli) ? \"ok\" : \"MISSING\"}`);\n  const active = resolveConfigDir(process.cwd());\n  const hasPolicy = existsSync(join(active, \"policy.json\"));\n  console.log(`  active config    ${active} ${hasPolicy ? \"ok\" : \"no policy (run `scopebond install` or `init`)\"}`);\n  if (!hasPolicy) problems.push(\"no policy found in the active config dir\");\n  const ignored = untrustedProjectPolicy(process.cwd());\n  if (ignored) console.log(`  project policy   ${ignored} IGNORED — not trusted (never trusted, or edited since). Review it, then \\`${cliCommand(\"trust\")}\\``);\n  const codex = isHarnessConfigured(userHarnessFile(\"codex\"));\n  console.log(`  Codex hook       ${codex ? \"configured\" : codexDetected() ? \"not configured — run `scopebond install --codex`\" : \"not detected\"}`);\n  if (codex) console.log(`  Codex approval   run /hooks in Codex and approve Scopebond once`);\n  const connection = loadConnection(active);\n  if (!connection) {\n    console.log(`  cloud            not connected (local only) — receipts stay on this machine`);\n  } else {\n    let reachable = \"unknown\";\n    try {\n      const res = await fetch(new URL(\"/healthz\", connection.url).toString(), { method: \"GET\" });\n      reachable = res.ok ? \"reachable\" : `unhealthy (${res.status})`;\n    } catch (error) { reachable = `unreachable (${(error as Error).message})`; }\n    console.log(`  cloud            ${connection.url} — ${reachable}`);\n  }\n  console.log(problems.length ? `\\n${problems.length} problem(s): ${problems.join(\"; \")}` : `\\nAll good.`);\n  process.exitCode = problems.length ? 1 : 0;\n}\n\nfunction runUninstall(args: string[]): void {\n  requireInteractive(\"uninstall\", args);\n  let removed = 0;\n  for (const h of [\"claude\", \"cursor\", \"codex\"] as Harness[]) {\n    if (removeHarnessConfig(userHarnessFile(h))) { console.log(`✓ removed the Scopebond hook from ${userHarnessFile(h)}`); removed++; }\n  }\n  if (removed === 0) console.log(\"no user-level harness config found.\");\n  if (args.includes(\"--purge\")) { purgeHome(); console.log(`✓ purged ${userHome()} (keys, policy, receipts)`); }\n  else console.log(`Kept ${userHome()} (keys, policy, receipts). Use --purge to remove it too.`);\n}\n\n/** `trust` — let this project's .scopebond policy govern here instead of the user\n *  home, pinned to its current contents. Run by the user, not the agent: the file it\n *  writes lives in the user home, which the starter policy write-protects. */\nfunction runTrust(args: string[]): void {\n  requireInteractive(\"trust\", args);\n  const dir = join(process.cwd(), \".scopebond\");\n  if (!existsSync(join(dir, \"policy.json\"))) { console.error(`no project policy at ${join(dir, \"policy.json\")}`); process.exit(1); }\n  const digest = trustProjectPolicy(dir);\n  console.log(`✓ trusted ${join(dir, \"policy.json\")} (sha256 ${digest.slice(0, 12)}…)`);\n  console.log(\"It governs agents in this project until it changes; after any edit, review it and run trust again.\");\n}\n\nfunction runLogin(): void {\n  console.log(\"Device-code login is not available yet.\");\n  console.log(`For now, connect with a one-time enrollment from your workspace:`);\n  console.log(`  ${cliCommand(\"connect <workspace-url> <enrollment>\")}`);\n  process.exit(0);\n}\n\nconst [cmd, ...rest] = process.argv.slice(2);\nif (cmd === \"claude\") { await runClaude(); }\nelse if (cmd === \"cursor\") { await runCursor(); }\nelse if (cmd === \"codex\") { await runCodex(); }\nelse if (cmd === \"init\") { runInit(rest); }\nelse if (cmd === \"install\") { runInstall(rest); }\nelse if (cmd === \"connect\") { await runConnect(rest); }\nelse if (cmd === \"log\") { await runLog(rest); }\nelse if (cmd === \"verify\") { await runVerify(); }\nelse if (cmd === \"test\") { await runTest(rest); }\nelse if (cmd === \"flush\") { await runFlush(); }\nelse if (cmd === \"status\") { runStatus(); }\nelse if (cmd === \"doctor\") { await runDoctor(); }\nelse if (cmd === \"uninstall\") { runUninstall(rest); }\nelse if (cmd === \"login\") { runLogin(); }\nelse if (cmd === \"trust\") { runTrust(rest); }\nelse {\n  console.error(\"usage: scopebond <claude|cursor|codex|init|install|connect|log|verify|test|flush|status|doctor|uninstall|login|trust> [--cursor] [--claude] [--codex] [--force] [--strict] [--no-install] [--purge] [--yes]\");\n  process.exit(1);\n}\n"]}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,+EAA+E;AAC/E,gDAAgD;AAChD,EAAE;AACF,sFAAsF;AACtF,wFAAwF;AACxF,oCAAoC;AACpC,EAAE;AACF,qDAAqD;AACrD,kEAAkE;AAElE,uFAAuF;AACvF,uFAAuF;AACvF,yFAAyF;AACzF,wFAAwF;AACxF,wFAAwF;AACxF,CAAC;IACC,MAAM,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzD,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAqB,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO;QACtF,KAAK,MAAM,OAAO,IAAI,mBAAmB;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAe,MAAM,UAAU,CAAC;AAC1G,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAsB,MAAM,WAAW,CAAC;AACpF,OAAO,EACL,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,mBAAmB,EACpF,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,SAAS,EAClF,aAAa,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EACjG,gBAAgB,EAAE,aAAa,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,sBAAsB,GACtG,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,cAAc,EAAkB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAChH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;uCAEuC;AACvC,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;YACpF,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACtD,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED;6EAC6E;AAC7E,SAAS,aAAa,CAAC,SAA6B,EAAE,KAAmB;IACvE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC,SAAS;QAAE,IAAI,GAAG,KAAK,EAAE,CAAC;SAC1B,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;SAClE,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,SAAS,CAAC;SACvD,CAAC;QAAC,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,GAAG,SAAS,CAAC;QAAC,CAAC;IAAC,CAAC;IACtG,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC;AACnD,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;AAC7E,CAAC;AACD,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;QACpC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;QAC/B,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;QACvC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;QAChC,kEAAkE;QAClE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG;QACtF,iFAAiF;QACjF,+EAA+E;QAC/E,+DAA+D;QAC/D,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrH,CAAC;AACJ,CAAC;AACD,SAAS,SAAS;IAChB,IAAI,CAAC;QAAC,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAClC,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE;KAClH,CAAC,GAAG,IAAI,CAAC,CAAC;IACX,6EAA6E;IAC7E,0CAA0C;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;sCAEsC;AACtC,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAClC,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE;KAClH,CAAC,GAAG,IAAI,CAAC,CAAC;IACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAU,EAAE,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AACnI,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAU,EAAE,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACzK,MAAM,eAAe,GAAG,CAAC,IAAc,EAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1I,MAAM,cAAc,GAAG,sFAAsF,CAAC;AAC9G;;;mFAGmF;AACnF,MAAM,kBAAkB,GAAG;IACzB,6BAA6B;IAC7B,mFAAmF;IACnF,+EAA+E;IAC/E,oEAAoE;IACpE,sFAAsF;IACtF,yBAAyB;CAC1B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,KAAK,UAAU,aAAa,CAAC,MAAoD,EAAE,OAAkC,UAAU;IAC7H,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAAC,CAAC;IAC/F,IAAI,OAAyD,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,YAAY,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,KAAM,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5F,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,kFAAkF;QAClF,4DAA4D;QAC5D,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,GAAG,SAAS,CAAC;QACpB,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,6EAA6E;QAC7E,wEAAwE;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;QACzF,IAAI,CAAC,iCAAkC,KAAe,CAAC,OAAO,mBAAmB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,aAAa,CAAC,gBAAgB,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,MAAM,aAAa,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,mFAAmF;IACnF,8EAA8E;IAC9E,iFAAiF;IACjF,uEAAuE;IACvE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,UAAU,CAAC,gDAAgD,CAAC,CAAC;IAAC,CAAC;IACjH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,UAAU,CAAC,8DAA8D,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,MAAiC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,IAAI,UAAU,GAA6B,MAAM,CAAC;IAClD,IAAI,OAAO,GAAG,8BAA8B,CAAC;IAC7C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAyD,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,YAAY,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,cAAc,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,8EAA8E;QAC9E,qEAAqE;QACrE,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACxC,iCAAiC;QACjC,6CAA6C;QAC7C,8EAA8E;QAC9E,iFAAiF;QACjF,kFAAkF;QAClF,+EAA+E;QAC/E,6DAA6D;QAC7D,gFAAgF;QAChF,iFAAiF;QACjF,8BAA8B;QAC9B,UAAU,GAAG,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QACrG,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,GAAG,MAAM,CAAC;QACpB,OAAO,GAAG,iCAAkC,KAAe,CAAC,OAAO,mBAAmB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;IAChH,CAAC;YAAS,CAAC;QACT,0EAA0E;QAC1E,2DAA2D;QAC3D,IAAI,CAAC;YAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QACrC,OAAO,GAAG,GAAG,OAAO,uHAAuH,CAAC;IAC9I,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;0CAG0C;AAC1C,SAAS,kBAAkB,CAAC,OAAe,EAAE,IAAc;IACzD,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO;IAC1D,OAAO,CAAC,KAAK,CAAC,aAAa,OAAO,yEAAyE,CAAC,CAAC;IAC7G,OAAO,CAAC,KAAK,CAAC,6FAA6F,CAAC,CAAC;IAC7G,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACpF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACjG,OAAO,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,GAAG,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,OAAO,CAAC,IAAc;IAC7B,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,mEAAmE;IACnE,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;YACzE,CAAC,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,gEAAgE,CAAC,CAAC;QACxG,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,2BAA2B,eAAe,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACnG,CAAC;aAAM,IAAI,QAAQ,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,uBAAuB,QAAQ,uCAAuC,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,iCAAiC,aAAa,CAAC,WAAW,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;YACzF,OAAO,CAAC,GAAG,CAAC,6FAA6F,CAAC,CAAC;YAC3G,IAAI,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,iEAAiE,MAAM,EAAE,CAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,4BAA4B,CAAC,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,uBAAuB,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC1G,OAAO,CAAC,GAAG,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,SAAS,kCAAkC,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,6CAA6C,CAAC,CAAC;IACzF,iFAAiF;IACjF,8DAA8D;IAC9D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QACnF,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,8BAA8B,QAAQ,EAAE,kCAAkC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjH,CAAC;IACD,qFAAqF;IACrF,mFAAmF;IACnF,kFAAkF;IAClF,oFAAoF;IACpF,yCAAyC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,aAAsB,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3I,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,4EAA4E;IAC5E,8DAA8D;IAC9D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YAAC,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACpJ,oFAAoF;QACpF,kFAAkF;QAClF,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,KAAK,KAAK,UAAU;YACzD,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,0DAA0D;YACtE,CAAC,CAAC,uBAAuB,WAAW,EAAE,8CAA8C,EAAE,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,kBAAkB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU;YACrC,CAAC,CAAC,oGAAoG;YACtG,CAAC,CAAC,gFAAgF,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,0CAA0C,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,CAAC;QACjJ,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,cAAc,EAAE,CAAC,CAAC;QAC3E,IAAI,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,kBAAkB,EAAE,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,oFAAoF;QACpF,oFAAoF;QACpF,OAAO,CAAC,GAAG,CAAC,oBAAoB,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,yDAAyD,KAAK,uCAAuC,CAAC,CAAC;YACnH,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,kBAAkB,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,8EAA8E;IAC9E,8EAA8E;IAC9E,OAAO,CAAC,GAAG,CAAC,8CAA8C,UAAU,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,SAAS,UAAU,CAAC,QAAQ,CAAC,iCAAiC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC9G,OAAO,CAAC,GAAG,CAAC,oCAAoC,UAAU,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,UAAU,CAAC,OAAgC;IAClD,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAE,OAAO,CAAC,SAAiD,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9F,IAAI,KAAK,KAAK,wBAAwB;QAAE,OAAO,eAAe,CAAC;IAC/D,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,KAAK,KAAK,mBAAmB,IAAI,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IACrG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,OAAgC;IACtD,OAAO,cAAc,CAAC,OAAO,CAAC,MAAmC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;2DAK2D;AAC3D,KAAK,UAAU,MAAM,CAAC,IAAc;IAClC,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACjH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,IAAI,QAAQ,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACpC,OAAO,CAAC,KAAK,CAAC,uEAAuE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;QACxH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAChH,qFAAqF;QACrF,yEAAyE;QACzE,MAAM,MAAM,GAAG,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM;YAC1B,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,OAA6C,CAAC;YAC1D,IAAI,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YACvD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK;oBAAE,OAAO,KAAK,CAAC;YACvD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,sCAAsC;QACpF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC,OAA6C,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7H,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,GAAG,MAAM,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,KAAK,OAAO,KAAK,cAAc,MAAM,CAAC,CAAC,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChK,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;;8FAI8F;AAC9F,SAAS,QAAQ,CAAC,IAAc;IAC9B,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,8BAA8B,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC;IAC/C,MAAM,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,SAAS,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACpH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,uBAAuB,CAAC,iCAAiC,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,uBAAuB,CAAC,4BAA4B,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,wBAAwB,CAAC,kCAAkC,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,6BAA6B,CAAC,oBAAoB,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,WAAW,SAAS,CAAC,GAAG,CAAC,qBAAqB,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACpG,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,WAAW,IAAI,4BAA4B,UAAU,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QACjL,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC;YACjD,KAAK,CAAC,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/G,IAAI,KAAK,CAAC,oBAAoB,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,kDAAkD,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAC/I,OAAO,GAAG,GAAG,KAAK,uBAAuB,CAAC;YAC1C,MAAM;QACR,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACtJ,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACrD,OAAO,GAAG,GAAG,KAAK,iBAAiB,CAAC;YACpC,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC;QAAC,KAAK,WAAW,CAAC,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;YACxE,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACxH,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvB,OAAO,GAAG,aAAa,IAAI,CAAC,KAAK,kBAAkB,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvH,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAClC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,8CAA8C,CAAC,CAAC;oBACpE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC;wBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;oBACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,OAAO,GAAG,aAAa,KAAK,oBAAoB,CAAC;YACnD,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,IAAI,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACtJ,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO,GAAG,aAAa,KAAK,kBAAkB,CAAC;YAC/C,MAAM;QACR,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAC/C,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3G,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACnI,OAAO,GAAG,aAAa,KAAK,oBAAoB,CAAC;YACjD,MAAM;QACR,CAAC;QACD,KAAK,OAAO;YACV,OAAO,GAAG,mBAAmB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM;QACR;YACE,OAAO,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;YACxC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,yEAAyE;IACzE,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;IACnG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,oBAAoB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,eAAe,CAAC,CAAC;IAC3D,yEAAyE;IACzE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QACnF,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;2BAM2B;AAC3B,KAAK,UAAU,QAAQ,CAAC,IAAc;IACpC,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACvG,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,oBAAoB,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,oBAAoB,CAAC,4BAA4B,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,oEAAoE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;QACtH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,KAGd,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,GAAG,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,MAAM,IAAI,CAAC,CAAC;QAClG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;YACvF,OAAO,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,kBAAkB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,qBAAqB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvG,aAAa,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAC3C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,aAAa,CAAC,CAAC;QACtD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC;QAClG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,kBAAmB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,KAAyB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC5E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAqB,CAAC,CAAC;QACvG,OAAO,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IAC3C,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAClJ,MAAM,EAAE,QAAQ,EAAE,GAAG,oBAAoB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,uFAAuF;IACvF,oFAAoF;IACpF,0DAA0D;IAC1D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC;IAC5D,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAuC,CAAC;QAC7F,IAAI,MAAM,CAAC,KAAK;YAAE,EAAE,IAAI,CAAC,CAAC;aACrB,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9G,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAE,CAAC,CAAC,OAA8C,CAAC,SAAS,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;QAC9H,CAAC;QACD,IAAI,QAAQ,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,QAAQ;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,MAAM,sCAAsC,YAAY,GAAG,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAAC,KAAK,MAAM,CAAC,IAAI,GAAG;YAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAc;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACjG,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACtI,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;YACrE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;YACzE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9H,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACvC,2EAA2E;YAC3E,4EAA4E;YAC5E,gDAAgD;YAChD,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAc;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,iFAAiF,CAAC,EAAE,CAAC,CAAC;QACzH,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,mFAAmF;IACnF,gFAAgF;IAChF,iFAAiF;IACjF,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClB,IAAI,MAA6B,CAAC;IAClC,IAAI,CAAC;QAAC,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IACrD,MAAM,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,mFAAmF,cAAc,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC9I,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;+DAC+D;AAC/D,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,GAAW,EAAE,MAA6B,EAAE,OAAgB,EAAE,IAAc;IACpH,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACvC,kFAAkF;QAClF,sFAAsF;QACtF,gFAAgF;QAChF,iEAAiE;QACjE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC;QAC/D,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QAC7E,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;YAC/D,IAAI,OAAO,KAAK,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,cAAc,EAAE,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,oBAAoB,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAI,KAAe,CAAC,OAAO,CAAC;QACzC,OAAO,CAAC,KAAK,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAC5C,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;eAEe;AACf,MAAM,cAAc,GAAG;IACrB,yFAAyF;IACzF,uFAAuF;IACvF,qFAAqF;IACrF,8CAA8C;CAC/C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,KAAK,UAAU,QAAQ;IACrB,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,uCAAuC,UAAU,CAAC,sCAAsC,CAAC,UAAU,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAClK,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1C,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,EAAE,OAAO,IAAI,CAAC,4BAA4B,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzI,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,qFAAqF;AACrF,SAAS,OAAO;IACd,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED;;gFAEgF;AAChF,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IACvB,oFAAoF;IACpF,kFAAkF;IAClF,oFAAoF;IACpF,iEAAiE;IACjE,MAAM,UAAU,GAAG,CAAC,CAAU,EAAU,EAAE;QACxC,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAC3D,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,GAAc,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACxE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACxC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACxC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,OAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjH,uFAAuF;IACvF,qFAAqF;IACrF,kDAAkD;IAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,oDAAoD,CAAC,CAAC;QAC5F,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;YAC7D,IAAI,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,mBAAmB,CAAC,CAAC;YACxE,uEAAuE;YACvE,OAAO,CAAC,GAAG,CAAC,uBAAuB,mBAAmB,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACpI,IAAI,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;QACtI,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,8BAA8B,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,MAAM,SAAS,GAAc,YAAY,EAAE,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxE,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;gBACzD,IAAI,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,CAAC;QAC9G,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B,cAAc,EAAE,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,4EAA4E,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjH,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,CAAC,QAAQ,CAAC,qBAAqB,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,oCAAoC,UAAU,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED;;mEAEmE;AACnE,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IACpG,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAChI,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC;YAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAAC,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC;IAAC,CAAC;IACzB,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,gBAAgB,KAAK,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IACxD,iFAAiF;IACjF,gFAAgF;IAChF,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,kBAAkB,WAAW,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,0BAA0B,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9H,OAAO,CAAC,GAAG,CAAC,sBAAsB,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,iCAAiC,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3H,OAAO,CAAC,GAAG,CAAC,sBAAsB,iBAAiB,CAAC,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,sBAAsB,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACnI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAC5L,OAAO,CAAC,GAAG,CAAC,sBAAsB,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,4BAA4B,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9G,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAU,EAAE,CAAC;QACtG,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;YAAE,IAAI,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAChH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,EAAE,CAAC,CAAC;IACvG,IAAI,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC3F,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,UAAU,CAAC,MAAM,CAAC,iBAAiB,UAAU,CAAC,SAAS,CAAC,wBAAwB,EAAE,CAAC,CAAC;IACvK,IAAI,CAAC,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,8EAA8E,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7J,+EAA+E;IAC/E,iFAAiF;IACjF,sEAAsE;IACtE,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,OAAO,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAU,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YACrG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,0BAA0B,UAAU,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YAClK,SAAS;QACX,CAAC;QACD,UAAU,GAAG,IAAI,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,kFAAkF;YAClF,+EAA+E;YAC/E,oFAAoF;YACpF,+EAA+E;YAC/E,MAAM,KAAK,GAAG,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACrE,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,WAAW,CAAC;YAC5D,KAAK,MAAM,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,MAAM,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,EAAE,IAAI,MAAM,IAAI,wBAAwB,CAAC,OAAO,CAAC,CAAC;gBAChE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC7D,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,OAAO,CAAC,GAAG,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;oBACzD,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,uCAAuC,IAAI,YAAY,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBACnH,CAAC;qBAAM,IAAI,KAAK,EAAE,CAAC;oBACjB,OAAO,CAAC,GAAG,CAAC,2DAA2D,OAAO,EAAE,CAAC,CAAC;oBAClF,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,YAAY,IAAI,sJAAsJ,UAAU,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,EAAE,CAAC,uCAAuC,CAAC,CAAC;gBACtS,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,UAAU;QAAE,QAAQ,CAAC,IAAI,CAAC,yCAAyC,UAAU,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACrH,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;IAC/F,CAAC;SAAM,CAAC;QACN,IAAI,SAAS,GAAG,SAAS,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3F,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,MAAM,GAAG,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,SAAS,GAAG,gBAAiB,KAAe,CAAC,OAAO,GAAG,CAAC;QAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,gBAAgB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACzG,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,IAAc;IAClC,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,qFAAqF;IACrF,+EAA+E;IAC/E,uEAAuE;IACvE,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAc,EAAE,CAAC;QAC3D,KAAK,MAAM,IAAI,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClH,IAAI,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAC,CAAC;QACjH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAAC,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAAC,CAAC;;QACzG,OAAO,CAAC,GAAG,CAAC,QAAQ,QAAQ,EAAE,0DAA0D,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,QAAQ,UAAU,sFAAsF,CAAC,CAAC;IACxH,CAAC;AACH,CAAC;AAED;;8EAE8E;AAC9E,SAAS,QAAQ,CAAC,IAAc;IAC9B,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAClI,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,oGAAoG,CAAC,CAAC;AACpH,CAAC;AAED;;;;kFAIkF;AAClF,KAAK,UAAU,QAAQ,CAAC,IAAc;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;QAChH,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC/G,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,UAAU,UAAU,CAAC,kEAAkE,CAAC,EAAE,CAAC,CAAC;QAC1G,OAAO,CAAC,KAAK,CAAC,wGAAwG,CAAC,CAAC;QACxH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAE,IAAa,EAA8D,EAAE;QAC7G,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YAClD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC3F,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACvD,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA4B,EAAE,CAAC;IAC/G,CAAC,CAAC;IACF,IAAI,KAAwD,CAAC;IAC7D,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAAC,CAAC;IACpF,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC3G,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,gCAAgC,KAAK,CAAC,MAAM,sCAAsC,UAAU,CAAC,sCAAsC,CAAC,GAAG,CAAC,CAAC;QAChK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,IAAI,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,MAAM,CAAC,CAAC;IACrG,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,wCAAwC,MAAM,yCAAyC,QAAQ,IAAI,CAAC,CAAC;IACjH,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QAChE,IAAI,MAAyD,CAAC;QAC9D,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QAAC,CAAC;QAC7E,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC,CAAC,6DAA6D;QACjF,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC1B,MAAM,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,UAAmC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACjG,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,IAAI,KAAK,KAAK,uBAAuB;YAAE,SAAS;QAChD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAAC,UAAU,IAAI,KAAK,CAAC;YAAC,SAAS;QAAC,CAAC;QAC7D,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACrI,IAAI,KAAK,KAAK,eAAe;YAAE,MAAM;QACrC,OAAO,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,KAAK,IAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC,0CAA0C,CAAC,CAAC;QACnH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;IAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;+CAE+C;AAC/C,MAAM,QAAQ,GAA+E;IAC3F,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oFAAoF;QACxG,OAAO,EAAE,+EAA+E;QACxF,MAAM,EAAE;YACN,sFAAsF;YACtF,yFAAyF;YACzF,uFAAuF;YACvF,uFAAuF;YACvF,oFAAoF;YACpF,wFAAwF;YACxF,oFAAoF;YACpF,6EAA6E;YAC7E,qFAAqF;SACtF,EAAE;IACL,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,+DAA+D;QACtF,OAAO,EAAE,kEAAkE;QAC3E,MAAM,EAAE;YACN,gFAAgF;YAChF,sFAAsF;YACtF,qEAAqE;SACtE,EAAE;IACL,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,oFAAoF;QACzG,OAAO,EAAE,2CAA2C;QACpD,MAAM,EAAE;YACN,sFAAsF;YACtF,qFAAqF;YACrF,mCAAmC;YACnC,yDAAyD;YACzD,mDAAmD;YACnD,mCAAmC;YACnC,4EAA4E;SAC7E,EAAE;IACL,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACtF,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,oEAAoE;QAC7F,MAAM,EAAE,CAAC,kEAAkE,CAAC,EAAE;IAChF,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B;QACjD,OAAO,EAAE,sBAAsB;QAC/B,MAAM,EAAE,CAAC,0EAA0E,EAAE,QAAQ,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC,EAAE;IACvI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kEAAkE;QAC3F,MAAM,EAAE,CAAC,8DAA8D,CAAC,EAAE;IAC5E,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB;QACvC,OAAO,EAAE,iEAAiE;QAC1E,MAAM,EAAE,CAAC,QAAQ,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE;IACrD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB;QAC7C,OAAO,EAAE,4CAA4C;QACrD,MAAM,EAAE;YACN,qFAAqF;YACrF,uFAAuF;YACvF,kEAAkE;SACnE,EAAE;IACL,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,4DAA4D;QACjF,OAAO,EAAE,sFAAsF;QAC/F,MAAM,EAAE;YACN,uFAAuF;YACvF,4EAA4E;SAC7E,EAAE;IACL,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,0DAA0D;QACjF,OAAO,EAAE,8EAA8E,EAAE;IAC3F,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACrF,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,mEAAmE,EAAE;IAChH,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,uEAAuE,EAAE;IAClI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kEAAkE,EAAE;IAC/F,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wDAAwD,EAAE;IACrF,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,4DAA4D,EAAE;CACzF,CAAC;AAEF,SAAS,SAAS,CAAC,KAAyB,EAAE,QAAQ,GAAG,KAAK;IAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,IAAI,KAAK,EAAE,CAAC;QACV,GAAG,CAAC,kBAAkB,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM;gBAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QACjF,OAAO;IACT,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QAAC,GAAG,CAAC,oBAAoB,KAAK,EAAE,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IACzD,GAAG,CAAC,sFAAsF,CAAC,CAAC;IAC5F,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACjD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,KAAK,UAAU,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC9D,GAAG,CAAC,KAAK,UAAU,CAAC,iBAAiB,CAAC,qCAAqC,CAAC,CAAC;IAC7E,GAAG,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC,wBAAwB,CAAC,CAAC;IAC3D,GAAG,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC;IAC5E,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,WAAW,CAAC,CAAC;IACjB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QACvD,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC/F,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,oFAAoF,CAAC,CAAC;IAC1F,GAAG,CAAC,2EAA2E,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7C,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IAAC,MAAM,SAAS,EAAE,CAAC;AAAC,CAAC;KACvC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IAAC,MAAM,SAAS,EAAE,CAAC;AAAC,CAAC;KAC5C,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAAC,MAAM,QAAQ,EAAE,CAAC;AAAC,CAAC;KAC1C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KACtC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;IAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;IAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAClD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;IAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAC1C,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IAAC,MAAM,SAAS,EAAE,CAAC;AAAC,CAAC;KAC5C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;IAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAC5C,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAAC,MAAM,QAAQ,EAAE,CAAC;AAAC,CAAC;KAC1C,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IAAC,SAAS,EAAE,CAAC;AAAC,CAAC;KACtC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IAAC,MAAM,SAAS,EAAE,CAAC;AAAC,CAAC;KAC5C,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;IAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAChD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAC9C,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KACxC,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KAC9C,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAAC,CAAC;KACxC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;IAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAAC,CAAC;KACpG,CAAC;IACJ,OAAO,CAAC,KAAK,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;IACzC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC","sourcesContent":["#!/usr/bin/env node\n// scopebond-hook — govern a coding agent's tool calls against policy, in-path,\n// before they run, with a signed local receipt.\n//\n// The command list, arguments and examples live in `COMMANDS` near the bottom of this\n// file, which is what `scopebond-hook help [command]` prints — one source rather than a\n// comment here that drifts from it.\n//\n// Config dir: $SCOPEBOND_HOOK_DIR, else ./.scopebond\n// Fail-closed: any error denies the action with a repair message.\n\n// `node:sqlite` (the receipt store) is still flagged experimental on Node 22, and Node\n// prints a warning on stderr the first time it loads — on every `verify`, and into the\n// agent's transcript on every hook call. It is a notice about Node, not about the user's\n// setup, so it is dropped; every other warning still prints through Node's own handler.\n// (The store is required lazily, after this module has run, so the filter is in place.)\n{\n  const nodeWarningHandlers = process.listeners(\"warning\");\n  process.removeAllListeners(\"warning\");\n  process.on(\"warning\", (warning) => {\n    if (warning.name === \"ExperimentalWarning\" && /sqlite/i.test(warning.message)) return;\n    for (const handler of nodeWarningHandlers) handler.call(process, warning);\n  });\n}\n\nimport { readFileSync, writeFileSync, existsSync, mkdtempSync, rmSync, statSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { hostname, tmpdir } from \"node:os\";\nimport { execFileSync } from \"node:child_process\";\nimport type { CloudEnrollmentBundle } from \"@scopebond/gateway\";\nimport { verifyReceipt } from \"@scopebond/gateway\";\nimport { openReceiptStore, loadOrCreateAttester } from \"@scopebond/gateway/node\";\nimport { mapClaudeToolUse, mapCodexToolUse, mapCursorEvent, fillPushBranch, type Mapped } from \"./map.js\";\nimport { createHookRuntime } from \"./runtime.js\";\nimport { useDigestKey, loadOrCreateDigestKey } from \"./minimize.js\";\nimport { scaffold, harnessSnippet, placeHook, type HookPlacement } from \"./init.js\";\nimport {\n  userHome, userHarnessFile, resolveConfigDir, writeHarnessConfig, removeHarnessConfig,\n  cursorDetected, codexDetected, absoluteHookCommand, isHarnessConfigured, purgeHome, type Harness,\n  harnessScopes, harnessScopeLabel, configuredHookCommands, hookCommandResolves, projectHarnessFile,\n  localHarnessFile, gitShareState, isMachineSpecificCommand, trustProjectPolicy, untrustedProjectPolicy,\n} from \"./install.js\";\nimport { connectCloud, loadConnection, connectionPath } from \"./cloud.js\";\nimport { compile, defaultRules, describeRules, loadRules, saveRules, rulesPath, pathRuleFor } from \"./rules.js\";\nimport { createSigner } from \"@scopebond/sdk\";\nimport { describeAction, type ExplainIntent } from \"./explain.js\";\nimport { ensureDurableRuntime, pinnedCliPath, isEphemeralPath } from \"./runtime-install.js\";\nimport { cliCommand, hookCommand, hookVersion } from \"./version.js\";\nimport { fileURLToPath } from \"node:url\";\n\n/** The current git branch in `cwd` (best-effort). A bare `git push` pushes it, so\n *  the runtime fills it in before evaluating; on failure the ref stays absent and\n *  the starter policy fails closed. */\nfunction currentBranch(cwd: string): string | null {\n  try {\n    return execFileSync(\"git\", [\"-C\", cwd, \"symbolic-ref\", \"--quiet\", \"--short\", \"HEAD\"], {\n      encoding: \"utf8\", stdio: [\"ignore\", \"pipe\", \"ignore\"],\n    }).trim() || null;\n  } catch { return null; }\n}\n\n/** Read an enrollment bundle from a file path, an inline base64 blob, or inline raw\n *  JSON (the portal hands out a base64 blob so it is one clean argument). */\nfunction readBundleArg(bundleArg: string | undefined, stdin: () => string): CloudEnrollmentBundle {\n  let text: string;\n  if (!bundleArg) text = stdin();\n  else if (existsSync(bundleArg)) text = readFileSync(bundleArg, \"utf8\");\n  else if (bundleArg.trim().startsWith(\"{\")) text = bundleArg;\n  else { try { text = Buffer.from(bundleArg, \"base64\").toString(\"utf8\"); } catch { text = bundleArg; } }\n  return JSON.parse(text) as CloudEnrollmentBundle;\n}\n\nfunction configDir(): string {\n  return process.env.SCOPEBOND_HOOK_DIR ?? join(process.cwd(), \".scopebond\");\n}\nfunction runtimePaths(dir: string) {\n  const connection = loadConnection(dir);\n  return {\n    policyPath: join(dir, \"policy.json\"),\n    keyPath: join(dir, \"agent.key\"),\n    attesterPath: join(dir, \"attester.key\"),\n    dbPath: join(dir, \"receipts.db\"),\n    // Strict: deny (not just observe) tools with no taxonomy mapping.\n    strict: process.argv.includes(\"--strict\") || process.env.SCOPEBOND_HOOK_STRICT === \"1\",\n    // When connected, auto-export receipts. A short bounded flush keeps the hot path\n    // fast; undelivered receipts persist in the durable outbox and flush next time\n    // (or via `scopebond-hook flush`, e.g. on a session-end hook).\n    ...(connection ? { cloud: { connection, flushTimeoutMs: Number(process.env.SCOPEBOND_HOOK_FLUSH_MS ?? 800) } } : {}),\n  };\n}\nfunction readStdin(): string {\n  try { return readFileSync(0, \"utf8\"); } catch { return \"\"; }\n}\n\nfunction denyClaude(reason: string): never {\n  process.stdout.write(JSON.stringify({\n    hookSpecificOutput: { hookEventName: \"PreToolUse\", permissionDecision: \"deny\", permissionDecisionReason: reason },\n  }) + \"\\n\");\n  // A composed explanation already names Scopebond in its first line; only the\n  // bare internal messages need the prefix.\n  process.stderr.write(`${reason.startsWith(\"Scopebond\") ? reason : `Scopebond: ${reason}`}\\n`);\n  process.exit(2);\n}\n\n/** Codex accepts the structured deny response on a successful hook exit. Keeping\n *  exit 0 lets its UI show a completed policy check instead of a failed hook while\n *  still preventing the tool call. */\nfunction denyCodex(reason: string): never {\n  process.stdout.write(JSON.stringify({\n    hookSpecificOutput: { hookEventName: \"PreToolUse\", permissionDecision: \"deny\", permissionDecisionReason: reason },\n  }) + \"\\n\");\n  process.exit(0);\n}\n\nconst harnessName = (harness: Harness): string => harness === \"claude\" ? \"Claude Code\" : harness === \"cursor\" ? \"Cursor\" : \"Codex\";\nconst harnessFileName = (harness: Harness): string => harness === \"claude\" ? \".claude/settings.json\" : harness === \"cursor\" ? \".cursor/hooks.json\" : \".codex/hooks.json\";\nconst selectedHarness = (args: string[]): Harness => args.includes(\"--codex\") ? \"codex\" : args.includes(\"--cursor\") ? \"cursor\" : \"claude\";\nconst codexTrustStep = \"Open Codex, run `/hooks`, review Scopebond, and choose Trust. Then start a new task.\";\n/** What Cursor can and cannot stop. Cursor has before-hooks for shell commands, MCP\n *  calls and file reads, but reports file *edits* only after they are written, so an\n *  out-of-policy edit is recorded and flagged rather than prevented. Said at install\n *  time, because someone choosing a guardrail needs to know its edges up front. */\nconst cursorCoverageNote = [\n  \"What this covers in Cursor:\",\n  \"  prevented  shell commands, MCP tool calls, file reads — checked before they run\",\n  \"  recorded   file edits — Cursor reports an edit only after writing it, so an\",\n  \"             out-of-policy edit is signed and flagged, not blocked\",\n  \"For edits that must be blocked before they land, use the GitHub Action as a required\",\n  \"check on pull requests.\",\n].join(\"\\n\");\n\nasync function runPreToolUse(mapper: (input: Record<string, unknown>) => Mapped[], deny: (reason: string) => never = denyClaude): Promise<void> {\n  let input: Record<string, unknown>;\n  try { input = JSON.parse(readStdin()); } catch { deny(\"hook received invalid JSON on stdin\"); }\n  let runtime: ReturnType<typeof createHookRuntime> | undefined;\n  try {\n    const cwd = input?.cwd ? String(input.cwd) : process.cwd();\n    const dir = resolveConfigDir(cwd);\n    runtime = createHookRuntime(runtimePaths(dir));\n    useDigestKey(loadOrCreateDigestKey(dir));\n    const decision = await runtime.evaluate(fillPushBranch(mapper(input!), currentBranch(cwd)));\n    await runtime.flush();\n    // Close before deciding: the receipt is already committed, and leaving the handle\n    // open is what made the write-ahead log grow without bound.\n    runtime.close();\n    runtime = undefined;\n    if (decision.decision === \"deny\") deny(decision.reason);\n    // Stay silent on allow/not_evaluated so the coding agent's normal permission\n    // flow remains in charge. Scopebond blocks; it never silently approves.\n    process.exit(0);\n  } catch (error) {\n    try { runtime?.close(); } catch { /* already failing; the deny below is what matters */ }\n    deny(`Scopebond hook failed closed: ${(error as Error).message}. Repair: run \\`${cliCommand(\"init\")}\\`.`);\n  }\n}\n\nasync function runClaude(): Promise<void> {\n  await runPreToolUse(mapClaudeToolUse);\n}\n\nasync function runCodex(): Promise<void> {\n  await runPreToolUse(mapCodexToolUse, denyCodex);\n}\n\nfunction denyCursor(reason: string): never {\n  process.stdout.write(JSON.stringify({ permission: \"deny\", agentMessage: reason }) + \"\\n\");\n  process.exit(0);\n}\n\nasync function runCursor(): Promise<void> {\n  // Unparseable input denies, like every other adapter. Previously this fell through\n  // to evaluation with an empty payload, which mapped to no known action and so\n  // answered \"ask\" — handing an unreadable request to a prompt the user would very\n  // likely accept. Deny-by-default on unparseable input is not optional.\n  let parsed: unknown;\n  try { parsed = JSON.parse(readStdin()); } catch { denyCursor(\"Scopebond: hook received invalid JSON on stdin\"); }\n  if (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n    denyCursor(\"Scopebond: hook received a payload that is not a JSON object\");\n  }\n  const input = parsed as Record<string, unknown>;\n  const event = String(input.hook_event_name ?? input.event ?? process.argv[3] ?? \"\");\n  let permission: \"allow\" | \"deny\" | \"ask\" = \"deny\";\n  let message = \"Scopebond hook failed closed\";\n  let postHoc = false;\n  let runtime: ReturnType<typeof createHookRuntime> | undefined;\n  try {\n    const cwd = input?.cwd ? String(input.cwd) : process.cwd();\n    const dir = resolveConfigDir(cwd);\n    runtime = createHookRuntime(runtimePaths(dir));\n    useDigestKey(loadOrCreateDigestKey(dir));\n    const mapped = fillPushBranch(mapCursorEvent(event, input), currentBranch(cwd));\n    const decision = await runtime.evaluate(mapped);\n    await runtime.flush();\n    // An `afterFileEdit` violation is real and recorded, but the edit has already\n    // landed. Say so rather than letting \"blocked\" imply it was stopped.\n    postHoc = mapped.some((m) => m.postHoc);\n    // Three outcomes, three answers:\n    //   deny  — out of policy, blocked outright.\n    //   allow — a rule was evaluated and permitted it. Returning \"ask\" here put a\n    //           confirmation prompt in front of every ordinary command, which is not\n    //           \"your agent works as normal\"; it also trained people to click through\n    //           prompts, which makes the real denials easier to miss. An evaluated\n    //           allow is a decision, not a silent auto-approval.\n    //   ask   — nothing was evaluated (no rule covers this action), so Cursor's own\n    //           permission flow stays in charge. That is the fail-closed case and it\n    //           keeps its prompt.\n    permission = decision.decision === \"deny\" ? \"deny\" : decision.decision === \"allow\" ? \"allow\" : \"ask\";\n    message = decision.reason;\n  } catch (error) {\n    permission = \"deny\";\n    message = `Scopebond hook failed closed: ${(error as Error).message}. Repair: run \\`${cliCommand(\"init\")}\\`.`;\n  } finally {\n    // Release the SQLite handles on every path: an unclosed writer leaves its\n    // write-ahead log behind for the next tool call to extend.\n    try { runtime?.close(); } catch { /* the decision is already recorded */ }\n  }\n  if (postHoc && permission === \"deny\") {\n    message = `${message}\\nCursor reports a file edit only after it is written, so this edit was not prevented. Review and revert it yourself.`;\n  }\n  process.stdout.write(JSON.stringify({ permission, agentMessage: message }) + \"\\n\");\n  process.exit(0);\n}\n\n/** `init`, `trust` and `uninstall` change what governs the agent, so they are for a\n *  person at a terminal. A coding agent's shell is not interactive: without a TTY on\n *  stdin they refuse unless `--yes` is passed (for scripts and CI). The starter policy\n *  also denies the agent running them. */\nfunction requireInteractive(command: string, args: string[]): void {\n  if (process.stdin.isTTY || args.includes(\"--yes\")) return;\n  console.error(`scopebond ${command} changes what governs your coding agent, so it does not run unattended.`);\n  console.error(`There is no terminal on stdin here — which is also what it looks like when the agent itself`);\n  console.error(`tries to run this, so the refusal is deliberate rather than a bug.`);\n  console.error(``);\n  console.error(`If you are a person: run it in your own terminal, or confirm it now with --yes:`);\n  console.error(`  ${cliCommand(`${command} --yes`)}`);\n  console.error(`Scripts, CI and container builds should always pass --yes.`);\n  process.exit(1);\n}\n\nfunction runInit(args: string[]): void {\n  const harness = selectedHarness(args);\n  const dir = configDir();\n  // A dry run changes nothing, so it needs no terminal and no --yes.\n  if (args.includes(\"--dry-run\")) {\n    const shared = projectHarnessFile(harness, process.cwd());\n    const local = localHarnessFile(harness, process.cwd());\n    const personal = args.includes(\"--shared\") || args.includes(\"--npx\") ? null\n      : local ?? (gitShareState(shared) === \"tracked\" ? null : shared);\n    console.log(`Dry run — nothing is written.\\n`);\n    console.log(`Would scaffold      ${dir} (machine key, countersigning key, starter policy, .gitignore)`);\n    if (args.includes(\"--no-install\")) {\n      console.log(`Would print         the ${harnessFileName(harness)} snippet instead of writing it`);\n    } else if (personal) {\n      console.log(`Would configure     ${personal} (this machine only; kept out of git)`);\n      console.log(`  adding hook       \"<node>\" \"${pinnedCliPath(hookVersion())}\" ${harness}`);\n      console.log(`                    (or the path this copy runs from, when it is already installed durably)`);\n      if (local) console.log(`  and remove        any machine-specific Scopebond entry from ${shared}`);\n    } else {\n      console.log(`Would configure     ${shared} (shared — safe to commit)`);\n      console.log(`  adding hook       ${hookCommand(harness)}`);\n    }\n    console.log(`\\nNothing else in those files is changed. Run without --dry-run to apply.`);\n    process.exit(0);\n  }\n  requireInteractive(\"init\", args);\n  const { agentKid, policyPath, rulesPath: rulesFile } = scaffold(dir, { force: args.includes(\"--force\") });\n  console.log(`Scopebond hook enrolled in ${dir}`);\n  console.log(`  machine key    ${agentKid}`);\n  console.log(`  rules          ${rulesFile} (the readable list — edit this)`);\n  console.log(`  policy         ${policyPath} (compiled from the rules; don't hand-edit)`);\n  // With a user-level install present, a project policy governs only once trusted.\n  // Running init here is that decision, so pin this policy now.\n  if (!process.env.SCOPEBOND_HOOK_DIR && existsSync(join(userHome(), \"policy.json\"))) {\n    trustProjectPolicy(dir);\n    console.log(`  trusted        overrides ${userHome()} here; after editing it, run \\`${cliCommand(\"trust\")}\\``);\n  }\n  // The hook command runs once per tool call, so it must start fast. `npx` re-resolves\n  // a package that is already on disk and costs ~830 ms a call; the same CLI invoked\n  // directly costs ~110 ms. Pin a durable copy and use that, and fall back to `npx`\n  // (slow, but it always starts) when no durable copy can be made. `--npx` forces the\n  // portable form for anyone who wants it.\n  const shared = args.includes(\"--shared\");\n  const pin = args.includes(\"--npx\") || shared ? { cli: null, how: \"unavailable\" as const } : ensureDurableRuntime(cliPath(), hookVersion());\n  const command = pin.cli ? absoluteHookCommand(pin.cli, harness) : undefined;\n  // Configure the agent automatically by default (idempotent), so there is no\n  // hand-editing step; --no-install prints the snippet instead.\n  if (!args.includes(\"--no-install\")) {\n    let placed: HookPlacement;\n    try { placed = placeHook(harness, process.cwd(), command, { shared }); } catch (error) { console.error((error as Error).message); process.exit(1); }\n    // No per-action millisecond claim here: it varies by machine, and this project only\n    // states numbers it has measured. The measured comparison lives in the changelog.\n    console.log(`  hook runtime   ${placed.scope === \"personal\"\n      ? `${pin.cli}\\n                 pinned — no npx resolution per action`\n      : `npx @scopebond/hook@${hookVersion()} — portable, but re-resolves on every action`}`);\n    console.log(\"\");\n    console.log(`✓ ${harnessName(harness)} configured in ${placed.file}`);\n    console.log(placed.scope === \"personal\"\n      ? `  this machine only — kept out of git, so no teammate inherits a path that does not exist for them`\n      : `  shared — the portable command starts on any machine that clones this project`);\n    if (placed.repaired > 0) console.log(`  moved a machine-specific hook out of ${projectHarnessFile(harness, process.cwd())}; commit that change`);\n    if (placed.note) console.log(`  note: ${placed.note}`);\n    if (harness === \"codex\") console.log(`\\nOne last step: ${codexTrustStep}`);\n    if (harness === \"cursor\") console.log(`\\n${cursorCoverageNote}`);\n  } else {\n    // The snippet is for a file the user will likely commit, so it carries the portable\n    // command; the pinned one is offered separately, for a file only this machine uses.\n    console.log(`Add this to your ${harnessFileName(harness)}:`);\n    console.log(harnessSnippet(harness));\n    const local = localHarnessFile(harness, process.cwd());\n    if (command && local) {\n      console.log(`\\nFaster, for this machine only — use this command in ${local} instead (keep that file out of git):`);\n      console.log(`  ${command}`);\n    }\n    if (harness === \"cursor\") console.log(`\\n${cursorCoverageNote}`);\n  }\n  console.log(\"\");\n  // Print the runnable `npx` form: after `npx @scopebond/hook init` there is no\n  // `scopebond-hook` binary on PATH, so a bare `scopebond-hook log` would fail.\n  console.log(`Next: run one command in the agent, then \\`${cliCommand(\"log\")}\\` to see the receipt`);\n  console.log(`and \\`${cliCommand(\"verify\")}\\` to check it offline. Try \\`${cliCommand('test \"rm -rf /\"')}\\`.`);\n  console.log(`To send receipts to a workspace: ${cliCommand(\"connect <workspace-url> <enrollment>\")}`);\n}\n\nfunction decisionOf(payload: Record<string, unknown>): string {\n  const rr = String(payload.realtime_result ?? \"\");\n  const state = String((payload.execution as Record<string, unknown> | undefined)?.state ?? \"\");\n  if (state === \"observed_not_evaluated\") return \"not_evaluated\";\n  if (rr === \"deny\") return state === \"cooperative_allow\" || state === \"executed\" ? \"monitor\" : \"deny\";\n  return \"allow\";\n}\n\nfunction describeIntent(payload: Record<string, unknown>): string {\n  return describeAction(payload.intent as ExplainIntent | undefined);\n}\n\n/** `log [-n N] [--deny] [--since <when>]` — the recent decisions.\n *\n *  \"What did my agents get blocked on this week\" had no answer at the CLI: the only\n *  output was an unfiltered tail. `--deny` and `--since` make it answerable, and the\n *  tail is read as a tail (`ORDER BY id DESC LIMIT`) rather than by loading and parsing\n *  every receipt ever recorded and slicing the end off. */\nasync function runLog(args: string[]): Promise<void> {\n  const dir = resolveConfigDir(process.cwd());\n  const dbPath = join(dir, \"receipts.db\");\n  if (!existsSync(dbPath)) { console.log(\"no receipts yet — run a command in the agent first.\"); process.exit(0); }\n  const nIdx = args.indexOf(\"-n\");\n  const n = nIdx >= 0 ? Math.max(1, Number(args[nIdx + 1]) || 20) : 20;\n  const denyOnly = args.includes(\"--deny\");\n  const sinceIdx = args.indexOf(\"--since\");\n  const since = sinceIdx >= 0 ? parseSince(args[sinceIdx + 1]) : null;\n  if (sinceIdx >= 0 && since === null) {\n    console.error(`--since wants a duration (7d, 24h, 30m) or a date (2026-09-25); got ${args[sinceIdx + 1] ?? \"nothing\"}`);\n    process.exit(1);\n  }\n  const { store } = openReceiptStore({ db: dbPath });\n  try {\n    const total = store.count ? await Promise.resolve(store.count()) : (await Promise.resolve(store.list())).length;\n    // A filter has to look past the last N to find N matches; without one, read only the\n    // tail. The scan is still bounded so a huge log cannot hang the command.\n    const budget = denyOnly || since ? Math.min(Math.max(n * 50, 1000), 20000) : n;\n    const scanned = store.recent\n      ? await Promise.resolve(store.recent(budget))\n      : (await Promise.resolve(store.list())).slice(-budget).reverse();\n    const matching = scanned.filter((r) => {\n      const p = r.payload as unknown as Record<string, unknown>;\n      if (denyOnly && decisionOf(p) !== \"deny\") return false;\n      if (since) {\n        const at = Date.parse(String(p.timestamp ?? \"\"));\n        if (!Number.isFinite(at) || at < since) return false;\n      }\n      return true;\n    });\n    const shown = matching.slice(0, n).reverse(); // oldest-first on screen, newest last\n    if (shown.length === 0) {\n      console.log(denyOnly || since ? \"no receipts match that filter.\" : \"no receipts yet.\");\n      process.exit(0);\n    }\n    for (const r of shown) {\n      const p = r.payload as unknown as Record<string, unknown>;\n      console.log(`${String(p.timestamp ?? \"\")}  ${decisionOf(p).padEnd(13)}  ${describeIntent(p)}`);\n    }\n    const filters = [denyOnly ? \"denied\" : \"\", since ? `since ${new Date(since).toISOString()}` : \"\"].filter(Boolean).join(\", \");\n    const scope = filters ? ` matching ${filters}` : \"\";\n    const capped = (denyOnly || since) && scanned.length >= budget && total > budget;\n    console.log(`\\n${shown.length}${scope} of ${total} receipt(s)${capped ? ` — searched the most recent ${budget}` : \"\"}. Verify them: ${cliCommand(\"verify\")}`);\n  } finally {\n    try { store.close?.(); } catch { /* read-only */ }\n  }\n}\n\n/** `rules` — read and change the limits in plain terms.\n *\n *  Without this, \"edit the limits\" meant hand-writing a ~700-character case-folded\n *  negative lookahead, which nobody does — so the starter policy was effectively the only\n *  policy. The lists live in `.scopebond/rules.json`; `policy.json` is compiled from them. */\nfunction runRules(args: string[]): void {\n  const dir = resolveConfigDir(process.cwd());\n  if (!existsSync(join(dir, \"policy.json\"))) {\n    console.error(`no policy here yet — run \\`${cliCommand(\"init\")}\\` first.`);\n    process.exit(1);\n  }\n  const rules = loadRules(dir) ?? defaultRules();\n  const [verb, ...values] = args.filter((a) => !a.startsWith(\"--\"));\n  const value = values.join(\" \").trim();\n\n  if (!verb || verb === \"show\") {\n    console.log(`Rules for ${dir}`);\n    if (!loadRules(dir)) console.log(`(showing the defaults — ${rulesPath(dir)} will be written on your first change)`);\n    console.log(\"\");\n    console.log(describeRules(rules));\n    console.log(\"\");\n    console.log(`Change them:`);\n    console.log(`  ${cliCommand(\"rules allow <program>\")}        stop blocking a program`);\n    console.log(`  ${cliCommand(\"rules block <program>\")}        start blocking one`);\n    console.log(`  ${cliCommand(\"rules protect <path>\")}         never write there`);\n    console.log(`  ${cliCommand(\"rules unprotect <path>\")}       allow writing there again`);\n    console.log(`  ${cliCommand(\"rules protect-branch <name>\")}  never push there`);\n    console.log(`  ${cliCommand(\"rules unprotect-branch <name>\")}`);\n    console.log(`Or edit ${rulesPath(dir)} directly, then \\`${cliCommand(\"rules apply\")}\\`.`);\n    process.exit(0);\n  }\n\n  const needsValue = [\"allow\", \"block\", \"protect\", \"unprotect\", \"protect-branch\", \"unprotect-branch\"];\n  if (needsValue.includes(verb) && !value) {\n    console.error(`\\`rules ${verb}\\` needs a value, e.g. \\`${cliCommand(`rules ${verb} ${verb.includes(\"branch\") ? \"production\" : verb.includes(\"protect\") ? \"infra/\" : \"dd\"}`)}\\``);\n    process.exit(1);\n  }\n\n  let changed = \"\";\n  switch (verb) {\n    case \"allow\": {\n      const before = rules.destructive_programs.length;\n      rules.destructive_programs = rules.destructive_programs.filter((p) => p.toLowerCase() !== value.toLowerCase());\n      if (rules.destructive_programs.length === before) { console.log(`${value} was not in the blocked list; nothing to change.`); process.exit(0); }\n      changed = `${value} is no longer blocked`;\n      break;\n    }\n    case \"block\": {\n      if (rules.destructive_programs.some((p) => p.toLowerCase() === value.toLowerCase())) { console.log(`${value} is already blocked.`); process.exit(0); }\n      rules.destructive_programs.push(value.toLowerCase());\n      changed = `${value} is now blocked`;\n      break;\n    }\n    case \"protect\": case \"unprotect\": {\n      const list = verb === \"protect\" ? \"protected_write\" : \"protected_write\";\n      const rule = pathRuleFor(value);\n      if (verb === \"protect\") {\n        if (rules[list].some((r) => r.label === rule.label)) { console.log(`${value} is already protected.`); process.exit(0); }\n        rules[list].push(rule);\n        changed = `writes to ${rule.label} are now blocked`;\n      } else {\n        const before = rules[list].length;\n        rules[list] = rules[list].filter((r) => r.label !== rule.label && !r.label.startsWith(`${value.replace(/\\/$/, \"\")}/`));\n        if (rules[list].length === before) {\n          console.log(`${value} is not in the protected list. Current list:`);\n          for (const r of rules[list]) console.log(`  ${r.label}`);\n          process.exit(1);\n        }\n        changed = `writes to ${value} are allowed again`;\n      }\n      break;\n    }\n    case \"protect-branch\": {\n      if (rules.protected_branches.some((b) => b.toLowerCase() === value.toLowerCase())) { console.log(`${value} is already protected.`); process.exit(0); }\n      rules.protected_branches.push(value);\n      changed = `pushes to ${value} are now blocked`;\n      break;\n    }\n    case \"unprotect-branch\": {\n      const before = rules.protected_branches.length;\n      rules.protected_branches = rules.protected_branches.filter((b) => b.toLowerCase() !== value.toLowerCase());\n      if (rules.protected_branches.length === before) { console.log(`${value} was not protected; nothing to change.`); process.exit(0); }\n      changed = `pushes to ${value} are allowed again`;\n      break;\n    }\n    case \"apply\":\n      changed = `recompiled from ${rulesPath(dir)}`;\n      break;\n    default:\n      console.error(`unknown: rules ${verb}`);\n      printHelp(\"rules\", true);\n      process.exit(1);\n  }\n\n  // Changing what governs the agent is the same class of action as `init`.\n  requireInteractive(\"rules\", args);\n  const policyPath = join(dir, \"policy.json\");\n  const agentKid = createSigner({ privateKeyPem: readFileSync(join(dir, \"agent.key\"), \"utf8\") }).kid;\n  saveRules(dir, rules);\n  writeFileSync(policyPath, `${JSON.stringify(compile(rules, agentKid), null, 2)}\\n`);\n  console.log(`✓ ${changed}`);\n  console.log(`  rules          ${rulesPath(dir)}`);\n  console.log(`  policy         ${policyPath} (recompiled)`);\n  // A project policy governs only once trusted, and the hash just changed.\n  if (!process.env.SCOPEBOND_HOOK_DIR && existsSync(join(userHome(), \"policy.json\"))) {\n    trustProjectPolicy(dir);\n    console.log(`  trusted        re-pinned for this project`);\n  }\n  console.log(`\\nCheck it: ${cliCommand('test \"rm -rf /\"')}`);\n  process.exit(0);\n}\n\n/** `prune --before <when> [--yes]` — bound the local receipt store.\n *\n *  Signed receipts are the product, so this never runs on its own and never quietly\n *  destroys anything: it archives what it will remove to a JSONL file beside the\n *  database first, and it refuses entirely once the log has been anchored, because a\n *  receipt's position is its anchor leaf index. Without a `--before` it reports the\n *  footprint and exits. */\nasync function runPrune(args: string[]): Promise<void> {\n  const dir = resolveConfigDir(process.cwd());\n  const dbPath = join(dir, \"receipts.db\");\n  if (!existsSync(dbPath)) { console.log(\"no local receipts yet — nothing to prune.\"); process.exit(0); }\n  const beforeIdx = args.indexOf(\"--before\");\n  if (beforeIdx < 0) {\n    console.log(`local receipts   ${dbPath}`);\n    console.log(`                 ${describeStore(dbPath)}`);\n    console.log(`\\nNothing is removed automatically. To bound it, name a cutoff:`);\n    console.log(`  ${cliCommand(\"prune --before 90d\")}      # older than 90 days`);\n    console.log(`  ${cliCommand(\"prune --before 2026-01-01\")}`);\n    console.log(`Receipts are archived beside the database before removal.`);\n    process.exit(0);\n  }\n  const cutoff = parseSince(args[beforeIdx + 1]);\n  if (cutoff === null) {\n    console.error(`--before wants a duration (90d, 24h) or a date (2026-01-01); got ${args[beforeIdx + 1] ?? \"nothing\"}`);\n    process.exit(1);\n  }\n  const iso = new Date(cutoff).toISOString();\n  const { store } = openReceiptStore({ db: dbPath });\n  const sqlite = store as typeof store & {\n    before?(iso: string): unknown[];\n    removeBefore?(iso: string): { removed: number };\n  };\n  if (!sqlite.before || !sqlite.removeBefore) {\n    console.error(\"this receipt store does not support pruning (no SQLite available).\");\n    process.exit(1);\n  }\n  try {\n    const doomed = sqlite.before(iso);\n    if (doomed.length === 0) { console.log(`no receipts older than ${iso}.`); process.exit(0); }\n    const before = describeStore(dbPath);\n    console.log(`${doomed.length} receipt(s) recorded before ${iso} (store is currently ${before}).`);\n    if (!args.includes(\"--yes\") && !process.stdin.isTTY) {\n      console.error(`\\nThis removes signed evidence, so it needs an explicit confirmation:`);\n      console.error(`  ${cliCommand(`prune --before ${args[beforeIdx + 1]} --yes`)}`);\n      process.exit(1);\n    }\n    const archive = join(dir, `receipts-archived-${new Date().toISOString().replace(/[:.]/g, \"-\")}.jsonl`);\n    writeFileSync(archive, `${doomed.map((r) => JSON.stringify(r)).join(\"\\n\")}\\n`);\n    console.log(`archived to      ${archive}`);\n    const { removed } = sqlite.removeBefore(iso);\n    console.log(`removed          ${removed} receipt(s)`);\n    store.close?.();\n    console.log(`store now        ${describeStore(dbPath)}`);\n    console.log(`\\nThe archive is a plain JSONL of signed receipts — still verifiable, still yours.`);\n    process.exit(0);\n  } catch (error) {\n    try { store.close?.(); } catch { /* closing after a failure */ }\n    console.error(`prune refused: ${(error as Error).message}`);\n    process.exit(1);\n  }\n}\n\n/** A `--since` value: a duration (`7d`, `24h`, `30m`) or an ISO-ish date. */\nexport function parseSince(value: string | undefined, now: number = Date.now()): number | null {\n  if (!value) return null;\n  const duration = /^(\\d+)\\s*([dhm])$/i.exec(value.trim());\n  if (duration) {\n    const scale = { d: 86_400_000, h: 3_600_000, m: 60_000 }[duration[2].toLowerCase() as \"d\" | \"h\" | \"m\"];\n    return now - Number(duration[1]) * scale;\n  }\n  const at = Date.parse(value);\n  return Number.isFinite(at) ? at : null;\n}\n\nasync function runVerify(): Promise<void> {\n  const dir = resolveConfigDir(process.cwd());\n  const dbPath = join(dir, \"receipts.db\");\n  const attesterPath = join(dir, \"attester.key\");\n  if (!existsSync(dbPath) || !existsSync(attesterPath)) { console.log(\"nothing to verify yet (no receipts or no attester key).\"); process.exit(0); }\n  const { attester } = loadOrCreateAttester({ file: attesterPath });\n  const { store } = openReceiptStore({ db: dbPath });\n  // Verification is the one command that must read everything — that is the point of it.\n  // It just should not look hung while doing so: at ~2.6 s per 20,000 receipts a long\n  // history is a visible wait, so report progress on a TTY.\n  const all = await Promise.resolve(store.list());\n  try { store.close?.(); } catch { /* read-only */ }\n  const progress = process.stdout.isTTY && all.length >= 2000;\n  let ok = 0;\n  const bad: string[] = [];\n  for (const [index, r] of all.entries()) {\n    const result = verifyReceipt(r, attester.publicKeyPem) as unknown as Record<string, boolean>;\n    if (result.valid) ok += 1;\n    else {\n      const failed = Object.entries(result).filter(([k, v]) => k.endsWith(\"_valid\") && v === false).map(([k]) => k);\n      bad.push(`${String((r.payload as unknown as Record<string, unknown>).timestamp ?? \"\")}: ${failed.join(\", \") || \"invalid\"}`);\n    }\n    if (progress && (index + 1) % 1000 === 0) process.stderr.write(`\\rverifying ${index + 1}/${all.length}…`);\n  }\n  if (progress) process.stderr.write(\"\\r\".padEnd(40) + \"\\r\");\n  console.log(`${ok}/${all.length} receipt(s) verify offline against ${attesterPath}.`);\n  if (bad.length) { for (const b of bad) console.error(`  ✗ ${b}`); process.exit(1); }\n  process.exit(0);\n}\n\nasync function runTest(args: string[]): Promise<void> {\n  const command = args.find((a) => !a.startsWith(\"-\"));\n  if (!command) { console.error('usage: scopebond-hook test \"<shell command>\"'); process.exit(1); }\n  const dir = resolveConfigDir(process.cwd());\n  if (!existsSync(join(dir, \"policy.json\"))) { console.error(`no policy yet — run \\`${cliCommand(\"init\")}\\` first.`); process.exit(1); }\n  // Evaluate against the real policy and keys, but a throwaway store, so `test`\n  // never records a receipt or exports anything.\n  const tmp = mkdtempSync(join(tmpdir(), \"sb-hook-test-\"));\n  try {\n    const runtime = createHookRuntime({\n      policyPath: join(dir, \"policy.json\"), keyPath: join(dir, \"agent.key\"),\n      attesterPath: join(dir, \"attester.key\"), dbPath: join(tmp, \"receipts.db\"),\n      strict: process.argv.includes(\"--strict\"),\n    });\n    const mapped = fillPushBranch(mapClaudeToolUse({ tool_name: \"Bash\", tool_input: { command } }), currentBranch(process.cwd()));\n    console.log(`command: ${command}`);\n    for (const m of mapped) {\n      const d = await runtime.evaluateOne(m);\n      // One tidy row per action. A deny's full explanation is multi-line, so the\n      // row carries only the deciding rule and the whole message is printed once,\n      // below — exactly as the agent will receive it.\n      const note = d.decision === \"deny\" ? (d.clauseId ? `rule \"${d.clauseId}\"` : \"\")\n        : d.decision === \"not_evaluated\" ? d.reason : \"\";\n      console.log(`  ${describeIntent({ intent: m.intent }).padEnd(28)} → ${d.decision.padEnd(14)}${note}`);\n    }\n    const overall = await runtime.evaluate(mapped);\n    console.log(`\\noverall: ${overall.decision}`);\n    if (overall.decision === \"deny\" && overall.reason) console.log(`\\n${overall.reason}`);\n    process.exit(overall.decision === \"deny\" ? 2 : 0);\n  } finally {\n    rmSync(tmp, { recursive: true, force: true });\n  }\n}\n\nasync function runConnect(args: string[]): Promise<void> {\n  const positional = args.filter((a) => !a.startsWith(\"--\"));\n  const url = positional[0];\n  const bundleArg = positional[1];\n  const harness = selectedHarness(args);\n  if (!url) {\n    console.error(`usage: ${cliCommand(\"connect <workspace-url> <enrollment> [--claude|--cursor|--codex] [--no-install]\")}`);\n    console.error(enrollmentHelp);\n    process.exit(1);\n  }\n  const dir = configDir();\n  // One command sets everything up: scaffold the key, attester and starter policy if\n  // they do not exist, then enroll and persist the scoped machine credential. The\n  // enrollment can be a file, an inline base64 blob (what the portal hands out) or\n  // raw JSON — the user never has to save or open a JSON file.\n  scaffold(dir, {});\n  let bundle: CloudEnrollmentBundle;\n  try { bundle = readBundleArg(bundleArg, readStdin); }\n  catch { console.error(`could not read the enrollment (expected a file, inline blob, or JSON on stdin)\\n${enrollmentHelp}`); process.exit(1); }\n  await finishConnect(dir, url, bundle, harness, args);\n}\n\n/** Enroll with a bundle and wire the agent: shared by `connect` (a pasted enrollment)\n *  and `login` (one received through device-code approval). */\nasync function finishConnect(dir: string, url: string, bundle: CloudEnrollmentBundle, harness: Harness, args: string[]): Promise<void> {\n  try {\n    const c = await connectCloud(dir, url, bundle);\n    console.log(`✓ Connected to ${c.url}`);\n    // Configure the agent automatically (merges into the existing config), unless the\n    // caller opts out. This removes the \"paste this snippet\" step. A hook that is already\n    // configured — pinned by `init`, or user-level by `install` — is left as it is:\n    // connecting changes where receipts go, not how the hook starts.\n    const scopes = harnessScopes(harness, process.cwd());\n    const existing = scopes.local ?? scopes.project ?? scopes.user;\n    if (existing && !args.includes(\"--no-install\")) {\n      console.log(`✓ ${harnessName(harness)} already configured in ${existing}`);\n    } else if (!args.includes(\"--no-install\")) {\n      const { file } = placeHook(harness, process.cwd(), undefined);\n      console.log(`✓ ${harnessName(harness)} configured in ${file}`);\n      if (harness === \"codex\") console.log(`\\nOne last step: ${codexTrustStep}`);\n    } else {\n      console.log(`Add this to your ${harnessFileName(harness)}:`);\n      console.log(harnessSnippet(harness));\n    }\n    console.log(\"\");\n    console.log(\"Run your agent — the first action appears in your workspace within seconds.\");\n  } catch (error) {\n    const message = (error as Error).message;\n    console.error(`connect failed: ${message}`);\n    if (/enrollment|expired|401|403/i.test(message)) console.error(enrollmentHelp);\n    process.exit(1);\n  }\n}\n\n/** Where an enrollment comes from, for every connect error that means \"this one will\n *  not work\": the bare \"invalid enrollment token\" told the reader nothing about what to\n *  do next. */\nconst enrollmentHelp = [\n  \"An enrollment comes from your Scopebond workspace: open it, choose to connect an agent,\",\n  \"and copy the command it shows — it includes the workspace URL and a fresh enrollment.\",\n  \"Each enrollment is single-use and expires soon after it is created; if this one was\",\n  \"used or has expired, create a new one there.\",\n].join(\"\\n\");\n\nasync function runFlush(): Promise<void> {\n  const dir = resolveConfigDir(process.cwd());\n  if (!loadConnection(dir)) { console.error(`not connected to a workspace; run \\`${cliCommand(\"connect <workspace-url> <enrollment>\")}\\` first`); process.exit(1); }\n  const runtime = createHookRuntime(runtimePaths(dir));\n  await runtime.exporter?.flush();\n  const status = runtime.exporter?.status();\n  runtime.exporter?.stop();\n  console.log(`flushed; ${status?.pending ?? 0} receipt(s) still pending${status?.lastError ? ` (last error: ${status.lastError})` : \"\"}`);\n  // Let pending HTTP handles close normally (forced exit can abort on Windows).\n  process.exitCode = status && status.pending > 0 ? 1 : 0;\n}\n\n/** The absolute path to this CLI file, for registering the hook by absolute path. */\nfunction cliPath(): string {\n  return fileURLToPath(import.meta.url);\n}\n\n/** `install` — the once-per-machine, user-level install (SB112). Scaffolds the\n *  user home and registers the hook by absolute path in the user-level agent config,\n *  so every project a developer opens is governed without a per-repo `init`. */\nfunction runInstall(args: string[]): void {\n  const dir = userHome();\n  // Run through `npx`, this CLI lives in npm's throwaway cache; registering that path\n  // would leave a hook that stops starting whenever npm clears it — and a hook that\n  // cannot start lets every action through. Pin the durable copy, as `init` does, and\n  // fall back to the portable `npx` command when none can be made.\n  const commandFor = (h: Harness): string => {\n    const pin = ensureDurableRuntime(cliPath(), hookVersion());\n    return pin.cli ? absoluteHookCommand(pin.cli, h) : hookCommand(h);\n  };\n  const harnessesFor = (): Harness[] => args.includes(\"--codex\") ? [\"codex\"]\n    : args.includes(\"--cursor\") ? [\"cursor\"]\n    : args.includes(\"--claude\") ? [\"claude\"]\n    : [\"claude\", ...(cursorDetected() ? [\"cursor\" as const] : []), ...(codexDetected() ? [\"codex\" as const] : [])];\n  // `install` rewrites agent config files the user did not create — their theme, plugins\n  // and permissions live in ~/.claude/settings.json — so there is a way to see exactly\n  // what it would touch before it touches anything.\n  if (args.includes(\"--dry-run\")) {\n    console.log(`Dry run — nothing is written.\\n`);\n    console.log(`Would scaffold      ${dir} (machine key, countersigning key, starter policy)`);\n    for (const h of harnessesFor()) {\n      const file = userHarnessFile(h);\n      const exists = existsSync(file);\n      console.log(`Would ${exists ? \"modify\" : \"create\"} ${file}`);\n      if (exists) console.log(`  backing it up to  ${file}.scopebond-backup`);\n      // Previewed without copying anything: the path the real run would pin.\n      console.log(`  adding hook       ${absoluteHookCommand(isEphemeralPath(cliPath()) ? pinnedCliPath(hookVersion()) : cliPath(), h)}`);\n      if (exists && isHarnessConfigured(file)) console.log(`  (a Scopebond hook is already there; it would be replaced, not duplicated)`);\n    }\n    console.log(`\\nNothing else in those files is changed. Run without --dry-run to apply.`);\n    process.exit(0);\n  }\n  const { agentKid, policyPath } = scaffold(dir, { force: args.includes(\"--force\") });\n  console.log(`Scopebond installed for this user in ${dir}`);\n  console.log(`  machine key    ${agentKid}`);\n  console.log(`  policy         ${policyPath} (starter — edit the limits)`);\n  console.log(\"\");\n  const harnesses: Harness[] = harnessesFor();\n  if (!args.includes(\"--no-install\")) {\n    for (const h of harnesses) {\n      try {\n        const target = userHarnessFile(h);\n        const backup = existsSync(target) ? `${target}.scopebond-backup` : null;\n        const file = writeHarnessConfig(target, h, commandFor(h));\n        console.log(`✓ ${harnessName(h)} configured in ${file}`);\n        if (backup && existsSync(backup)) console.log(`  original kept at ${backup}`);\n      } catch (error) { console.error(`✗ ${harnessName(h)}: ${(error as Error).message}`); process.exitCode = 1; }\n    }\n  } else {\n    console.log(\"Add this to your user-level agent config:\");\n    console.log(harnessSnippet(harnesses[0]));\n  }\n  if (harnesses.includes(\"codex\")) console.log(`\\nOne last step for Codex: ${codexTrustStep}`);\n  console.log(\"\");\n  console.log(`A project's own .scopebond policy applies only after you trust it there (${cliCommand(\"trust\")}).`);\n  console.log(`Check it: ${cliCommand(\"doctor\")} · see decisions: ${cliCommand(\"log\")}`);\n  console.log(`To send receipts to a workspace: ${cliCommand(\"connect <workspace-url> <enrollment>\")}`);\n}\n\n/** Size and count of the local receipt store, plus its write-ahead log. Signed evidence\n *  accumulates in the user's project directory and there is no automatic deletion — so\n *  the footprint is reported rather than left to be discovered. */\nfunction describeStore(dbPath: string): string {\n  const bytes = (file: string): number => { try { return statSync(file).size; } catch { return 0; } };\n  const total = bytes(dbPath) + bytes(`${dbPath}-wal`) + bytes(`${dbPath}-shm`);\n  const human = total >= 1024 * 1024 ? `${(total / 1024 / 1024).toFixed(1)} MiB` : `${Math.max(1, Math.round(total / 1024))} KiB`;\n  let count: number | null = null;\n  try {\n    const { store } = openReceiptStore({ db: dbPath });\n    try { count = store.count ? Number(store.count()) : null; } finally { store.close?.(); }\n  } catch { count = null; }\n  return count === null ? human : `${count} receipt(s), ${human}`;\n}\n\nfunction runStatus(): void {\n  const home = userHome();\n  const installed = existsSync(join(home, \"policy.json\"));\n  // Both scopes, always: `init` writes the project config and `install` writes the\n  // user one, so a single-scope check contradicts whichever command the user ran.\n  const claude = harnessScopes(\"claude\", process.cwd());\n  const cursor = harnessScopes(\"cursor\", process.cwd());\n  const codex = harnessScopes(\"codex\", process.cwd());\n  const connected = !!loadConnection(resolveConfigDir(process.cwd()));\n  const dbPath = join(resolveConfigDir(process.cwd()), \"receipts.db\");\n  console.log(`Scopebond hook ${hookVersion()}`);\n  console.log(`  user home        ${home} ${installed ? \"(installed)\" : `(not installed — run \\`${cliCommand(\"install\")}\\`)`}`);\n  console.log(`  active config    ${resolveConfigDir(process.cwd())}`);\n  const ignored = untrustedProjectPolicy(process.cwd());\n  if (ignored) console.log(`  project policy   ${ignored} ignored — not trusted (run \\`${cliCommand(\"trust\")}\\` to use it)`);\n  console.log(`  Claude Code      ${harnessScopeLabel(claude) || \"not configured\"}`);\n  console.log(`  Cursor           ${harnessScopeLabel(cursor) || (cursorDetected() ? \"detected, not configured\" : \"not detected\")}`);\n  console.log(`  Codex            ${codex.project || codex.user ? `${harnessScopeLabel(codex)} — approve once with /hooks` : codexDetected() ? \"detected, not configured\" : \"not detected\"}`);\n  console.log(`  cloud workspace  ${connected ? \"connected\" : \"not connected (local only)\"}`);\n  console.log(`  local receipts   ${existsSync(dbPath) ? `${dbPath} (${describeStore(dbPath)})` : \"none yet\"}`);\n  for (const [name, scopes] of [[\"Claude Code\", claude], [\"Cursor\", cursor], [\"Codex\", codex]] as const) {\n    for (const file of [scopes.project, scopes.local, scopes.user]) if (file) console.log(`    ${name}: ${file}`);\n  }\n}\n\nasync function runDoctor(): Promise<void> {\n  const problems: string[] = [];\n  const [major, minor] = process.versions.node.split(\".\").map(Number);\n  const nodeOk = major > 22 || (major === 22 && minor >= 13);\n  console.log(`Scopebond doctor`);\n  console.log(`  node             ${process.versions.node} ${nodeOk ? \"ok\" : \"TOO OLD (need >=22.13)\"}`);\n  if (!nodeOk) problems.push(\"node >=22.13 is required (the Cloud outbox uses node:sqlite)\");\n  const cli = cliPath();\n  console.log(`  cli              ${cli} ${existsSync(cli) ? \"ok\" : \"MISSING\"}`);\n  const active = resolveConfigDir(process.cwd());\n  const hasPolicy = existsSync(join(active, \"policy.json\"));\n  console.log(`  active config    ${active} ${hasPolicy ? \"ok\" : `no policy (run \\`${cliCommand(\"init\")}\\` here, or \\`${cliCommand(\"install\")}\\` once for your user)`}`);\n  if (!hasPolicy) problems.push(\"no policy found in the active config dir\");\n  const ignored = untrustedProjectPolicy(process.cwd());\n  if (ignored) console.log(`  project policy   ${ignored} IGNORED — not trusted (never trusted, or edited since). Review it, then \\`${cliCommand(\"trust\")}\\``);\n  // Every harness, in both scopes, plus a check that each configured command can\n  // actually start. A pinned path that has gone missing is the one failure mode of\n  // the fast absolute-path install, so doctor is where it must surface.\n  let anyHarness = false;\n  for (const harness of [\"claude\", \"cursor\", \"codex\"] as const) {\n    const scopes = harnessScopes(harness, process.cwd());\n    const label = harnessScopeLabel(scopes);\n    const name = harnessName(harness);\n    if (!label) {\n      const detected = harness === \"claude\" || (harness === \"cursor\" ? cursorDetected() : codexDetected());\n      console.log(`  ${name.padEnd(15)} ${detected ? `not configured — run \\`${cliCommand(`init${harness === \"claude\" ? \"\" : ` --${harness}`}`)}\\`` : \"not detected\"}`);\n      continue;\n    }\n    anyHarness = true;\n    console.log(`  ${name.padEnd(15)} ${label}`);\n    for (const file of [scopes.project, scopes.local, scopes.user]) {\n      if (!file) continue;\n      // A project file git shares must not name a path on this machine: it starts here,\n      // so the resolve check below passes, but on every teammate's machine it cannot\n      // start — and a hook that cannot start is a non-blocking error, so their agent runs\n      // unchecked. Only the doctor on the machine that wrote it can see this coming.\n      const share = file === scopes.project ? gitShareState(file) : \"none\";\n      const shared = share === \"tracked\" || share === \"untracked\";\n      for (const command of configuredHookCommands(file)) {\n        const ok = hookCommandResolves(command);\n        const leaks = ok && shared && isMachineSpecificCommand(command);\n        console.log(`    ${ok && !leaks ? \"ok  \" : \"BAD \"} ${file}`);\n        if (!ok) {\n          console.log(`         command cannot start: ${command}`);\n          problems.push(`${name} hook command no longer resolves in ${file} — run \\`${cliCommand(\"init\")}\\` to repair it`);\n        } else if (leaks) {\n          console.log(`         machine-specific command in a file git shares: ${command}`);\n          problems.push(`${name} hook in ${file} names a path on this machine and git shares that file — anyone who clones it gets a hook that cannot start, and their agent runs unchecked. Run \\`${cliCommand(`init${harness === \"claude\" ? \"\" : ` --${harness}`}`)}\\` to move it, then commit the change`);\n        }\n      }\n    }\n    if (harness === \"codex\") console.log(`    run /hooks in Codex and approve Scopebond once`);\n  }\n  if (!anyHarness) problems.push(`no coding agent is configured — run \\`${cliCommand(\"init\")}\\` in your project root`);\n  const connection = loadConnection(active);\n  if (!connection) {\n    console.log(`  cloud            not connected (local only) — receipts stay on this machine`);\n  } else {\n    let reachable = \"unknown\";\n    try {\n      const res = await fetch(new URL(\"/healthz\", connection.url).toString(), { method: \"GET\" });\n      reachable = res.ok ? \"reachable\" : `unhealthy (${res.status})`;\n    } catch (error) { reachable = `unreachable (${(error as Error).message})`; }\n    console.log(`  cloud            ${connection.url} — ${reachable}`);\n  }\n  console.log(problems.length ? `\\n${problems.length} problem(s): ${problems.join(\"; \")}` : `\\nAll good.`);\n  process.exitCode = problems.length ? 1 : 0;\n}\n\nfunction runUninstall(args: string[]): void {\n  requireInteractive(\"uninstall\", args);\n  let removed = 0;\n  // Both scopes. Checking only the user config meant that after a per-project `init` —\n  // the install the site actually tells people to run — `uninstall` reported \"no\n  // user-level harness config found\" and left the project hook in place.\n  for (const h of [\"claude\", \"cursor\", \"codex\"] as Harness[]) {\n    for (const file of [projectHarnessFile(h, process.cwd()), localHarnessFile(h, process.cwd()), userHarnessFile(h)]) {\n      if (file && removeHarnessConfig(file)) { console.log(`✓ removed the Scopebond hook from ${file}`); removed++; }\n    }\n  }\n  if (removed === 0) console.log(\"no Scopebond hook found in this project or your user config.\");\n  if (args.includes(\"--purge\")) { purgeHome(); console.log(`✓ purged ${userHome()} (keys, policy, receipts)`); }\n  else console.log(`Kept ${userHome()} (keys, policy, receipts). Use --purge to remove it too.`);\n  const projectDir = resolveConfigDir(process.cwd());\n  if (existsSync(join(projectDir, \"policy.json\"))) {\n    console.log(`Kept ${projectDir} (this project's keys, policy and receipts) — delete it by hand if you want it gone.`);\n  }\n}\n\n/** `trust` — let this project's .scopebond policy govern here instead of the user\n *  home, pinned to its current contents. Run by the user, not the agent: the file it\n *  writes lives in the user home, which the starter policy write-protects. */\nfunction runTrust(args: string[]): void {\n  requireInteractive(\"trust\", args);\n  const dir = join(process.cwd(), \".scopebond\");\n  if (!existsSync(join(dir, \"policy.json\"))) { console.error(`no project policy at ${join(dir, \"policy.json\")}`); process.exit(1); }\n  const digest = trustProjectPolicy(dir);\n  console.log(`✓ trusted ${join(dir, \"policy.json\")} (sha256 ${digest.slice(0, 12)}…)`);\n  console.log(\"It governs agents in this project until it changes; after any edit, review it and run trust again.\");\n}\n\n/** `login <workspace-url>` — connect this computer without pasting anything. It asks\n *  the workspace for a short code, shows it with the page to open, and waits while a\n *  person who can manage the workspace approves it there for an environment and agent.\n *  The approval hands back a single-use enrollment, which completes exactly as\n *  `connect` does. Nothing secret is printed: the device code stays in memory. */\nasync function runLogin(args: string[]): Promise<void> {\n  const positional = args.filter((a) => !a.startsWith(\"--\"));\n  const harness = selectedHarness(args);\n  let origin: string;\n  try {\n    const parsed = new URL(positional[0] ?? \"\");\n    const local = parsed.hostname === \"localhost\" || parsed.hostname === \"127.0.0.1\" || parsed.hostname === \"[::1]\";\n    if (parsed.protocol !== \"https:\" && !(local && parsed.protocol === \"http:\")) throw new Error(\"https required\");\n    origin = parsed.origin;\n  } catch {\n    console.error(`usage: ${cliCommand(\"login <workspace-url> [--claude|--cursor|--codex] [--no-install]\")}`);\n    console.error(\"The workspace URL is the address of your Scopebond workspace, for example https://cloud.scopebond.com.\");\n    process.exit(1);\n  }\n  const post = async (path: string, body: unknown): Promise<{ status: number; json: Record<string, unknown> }> => {\n    const response = await fetch(new URL(path, origin), {\n      method: \"POST\", headers: { \"content-type\": \"application/json\" }, body: JSON.stringify(body),\n      redirect: \"error\", signal: AbortSignal.timeout(15_000),\n    });\n    return { status: response.status, json: await response.json().catch(() => ({})) as Record<string, unknown> };\n  };\n  let start: { status: number; json: Record<string, unknown> };\n  try { start = await post(\"/v1/device/code\", { client_name: hostname(), harness }); }\n  catch (error) { console.error(`could not reach ${origin}: ${(error as Error).message}`); process.exit(1); }\n  const deviceCode = typeof start.json.device_code === \"string\" ? start.json.device_code : \"\";\n  if (start.status !== 200 || !deviceCode) {\n    console.error(`${origin} did not start a login (HTTP ${start.status}). Check the workspace URL, or use ${cliCommand(\"connect <workspace-url> <enrollment>\")}.`);\n    process.exit(1);\n  }\n  const userCode = String(start.json.user_code ?? \"\");\n  const verify = String(start.json.verification_uri_complete ?? start.json.verification_uri ?? origin);\n  let intervalMs = Math.max(1, Number(start.json.interval ?? 5)) * 1000;\n  const deadline = Date.now() + Math.max(60, Number(start.json.expires_in ?? 600)) * 1000;\n  console.log(`To connect this computer, open:\\n\\n  ${verify}\\n\\nand check that it shows the code  ${userCode}\\n`);\n  console.log(\"Waiting for approval (the code expires in 10 minutes; Ctrl+C to stop)…\");\n  const dir = configDir();\n  scaffold(dir, {});\n  while (Date.now() < deadline) {\n    await new Promise((resolve) => setTimeout(resolve, intervalMs));\n    let polled: { status: number; json: Record<string, unknown> };\n    try { polled = await post(\"/v1/device/token\", { device_code: deviceCode }); }\n    catch { continue; } // a transient network error: keep waiting until the deadline\n    if (polled.status === 200 && polled.json.enrollment && typeof polled.json.enrollment === \"object\") {\n      console.log(\"✓ Approved\");\n      await finishConnect(dir, origin, polled.json.enrollment as CloudEnrollmentBundle, harness, args);\n      return;\n    }\n    const error = polled.json.error;\n    if (error === \"authorization_pending\") continue;\n    if (error === \"slow_down\") { intervalMs += 5_000; continue; }\n    if (error === \"access_denied\") { console.error(\"The request was denied in the workspace. Nothing was connected.\"); process.exit(1); }\n    if (error === \"expired_token\") break;\n    console.error(`login failed (${String(error ?? `HTTP ${polled.status}`)}). Run the command again for a new code.`);\n    process.exit(1);\n  }\n  console.error(\"The code expired before it was approved. Run the command again for a new one.\");\n  process.exit(1);\n}\n\n/** What each command does, its arguments, and one example. The whole help used to be a\n *  single usage line listing 15 command names, which told a reader nothing about what any\n *  of them did or what arguments they take. */\nconst COMMANDS: Array<{ name: string; args?: string; summary: string; detail?: string[] }> = [\n  { name: \"init\", args: \"[--cursor|--codex] [--shared] [--dry-run] [--no-install] [--npx] [--force] [--yes]\",\n    summary: \"set this project up: keys, a starter policy, and your agent wired to the hook\",\n    detail: [\n      \"Writes .scopebond/ (machine key, countersigning key, starter policy, .gitignore) and\",\n      \"wires your agent to the hook. It pins a durable copy of this package so the hook starts\",\n      \"fast, and because that command names paths on this machine it goes where git will not\",\n      \"share it: .claude/settings.local.json (kept out of git for this clone), or for Cursor\",\n      \"and Codex their project file only while git does not track it. --shared writes the\",\n      \"portable npx command to .claude/settings.json, .cursor/hooks.json or .codex/hooks.json\",\n      \"instead, so everyone who clones the project gets the hook. --dry-run shows what it\",\n      \"would write. --no-install prints the config snippet rather than writing it.\",\n      \"Needs a terminal, or --yes in a script, because it changes what governs your agent.\",\n    ] },\n  { name: \"install\", args: \"[--claude] [--cursor] [--codex] [--dry-run] [--force] [--yes]\",\n    summary: \"set up once for this user, so every project you open is governed\",\n    detail: [\n      \"Scaffolds ~/.scopebond and registers the hook in your user-level agent config.\",\n      \"--dry-run prints exactly which files it would touch and changes nothing. Each config\",\n      \"is copied to <file>.scopebond-backup before its first modification.\",\n    ] },\n  { name: \"rules\", args: \"[show|allow|block|protect|unprotect|protect-branch|unprotect-branch|apply] [value]\",\n    summary: \"read and change the limits in plain terms\",\n    detail: [\n      \"With no arguments, prints what is blocked in plain English — no regular expressions.\",\n      \"The editable lists are .scopebond/rules.json; policy.json is compiled from them, so\",\n      \"you never hand-write a lookahead.\",\n      \"  rules allow dd                stop blocking a program\",\n      \"  rules protect infra/          never write there\",\n      \"  rules protect-branch production\",\n      \"  rules apply                   recompile after editing rules.json by hand\",\n    ] },\n  { name: \"status\", summary: \"what is configured, where, and how big the local log is\" },\n  { name: \"doctor\", summary: \"check the setup and whether each configured hook command can start\",\n    detail: [\"Exits non-zero when something is wrong, so it works in a script.\"] },\n  { name: \"log\", args: \"[-n N] [--deny] [--since 7d]\",\n    summary: \"the recent decisions\",\n    detail: [`--deny shows only blocked actions; --since takes 7d, 24h, 30m or a date.`, `e.g. ${cliCommand(\"log --deny --since 7d\")}`] },\n  { name: \"verify\", summary: \"check every local receipt offline against the countersigning key\",\n    detail: [\"No network, no account. Exits non-zero if any receipt fails.\"] },\n  { name: \"test\", args: '\"<shell command>\"',\n    summary: \"show the decision for a command without running or recording it\",\n    detail: [`e.g. ${cliCommand('test \"rm -rf /\"')}`] },\n  { name: \"prune\", args: \"[--before 90d] [--yes]\",\n    summary: \"report the local store's size, or bound it\",\n    detail: [\n      \"With no --before it only reports. With one, it archives the receipts it will remove\",\n      \"to a JSONL file beside the database, then removes them. Refuses once the log has been\",\n      \"anchored, because a receipt's position is its anchor leaf index.\",\n    ] },\n  { name: \"login\", args: \"<workspace-url> [--claude|--cursor|--codex] [--no-install]\",\n    summary: \"connect this computer to a Scopebond Cloud workspace by approving a short code there\",\n    detail: [\n      \"Prints a code and a link; someone who manages the workspace opens it, checks the code\",\n      \"and approves it for an environment and agent. Nothing is copied or pasted.\",\n    ] },\n  { name: \"connect\", args: \"<workspace-url> <enrollment> [--claude|--cursor|--codex]\",\n    summary: \"send receipts to a Scopebond Cloud workspace as well as keeping them locally\" },\n  { name: \"flush\", summary: \"deliver any receipts still queued for the workspace now\" },\n  { name: \"trust\", args: \"[--yes]\", summary: \"let this project's .scopebond policy govern here (pinned by hash)\" },\n  { name: \"uninstall\", args: \"[--purge] [--yes]\", summary: \"remove the hook from your agent config; --purge also deletes the home\" },\n  { name: \"claude\", summary: \"(internal) decide one Claude Code PreToolUse call, JSON on stdin\" },\n  { name: \"cursor\", summary: \"(internal) decide one Cursor hook event, JSON on stdin\" },\n  { name: \"codex\", summary: \"(internal) decide one Codex PreToolUse call, JSON on stdin\" },\n];\n\nfunction printHelp(topic: string | undefined, toStderr = false): void {\n  const out = toStderr ? console.error : console.log;\n  const match = topic ? COMMANDS.find((c) => c.name === topic.replace(/^--?/, \"\")) : undefined;\n  if (match) {\n    out(`scopebond-hook ${match.name}${match.args ? ` ${match.args}` : \"\"}`);\n    out(\"\");\n    out(`  ${match.summary}`);\n    if (match.detail) { out(\"\"); for (const line of match.detail) out(`  ${line}`); }\n    return;\n  }\n  if (topic) { out(`no such command: ${topic}`); out(\"\"); }\n  out(`scopebond-hook — govern a coding agent's tool calls against policy, before they run.`);\n  out(\"\");\n  out(`Usage: scopebond-hook <command> [options]`);\n  out(\"\");\n  out(`  ${cliCommand(\"init\")}            set up this project`);\n  out(`  ${cliCommand('test \"rm -rf /\"')}  see a decision without running it`);\n  out(`  ${cliCommand(\"log --deny\")}      what got blocked`);\n  out(`  ${cliCommand(\"rules\")}           what is blocked, in plain English`);\n  out(\"\");\n  out(\"Commands:\");\n  const width = Math.max(...COMMANDS.map((c) => c.name.length));\n  for (const command of COMMANDS) {\n    if (command.summary.startsWith(\"(internal)\")) continue;\n    out(`  ${command.name.padEnd(width)}  ${command.summary}`);\n  }\n  out(\"\");\n  out(`  ${\"help\".padEnd(width)}  \\`help <command>\\` for that command's arguments and examples`);\n  out(\"\");\n  out(`Receipts and keys stay in .scopebond/ in this project. Nothing leaves your machine`);\n  out(`unless you run \\`connect\\`. Docs: https://github.com/avouro-com/scopebond`);\n}\n\nconst [cmd, ...rest] = process.argv.slice(2);\nif (cmd === \"claude\") { await runClaude(); }\nelse if (cmd === \"cursor\") { await runCursor(); }\nelse if (cmd === \"codex\") { await runCodex(); }\nelse if (cmd === \"init\") { runInit(rest); }\nelse if (cmd === \"install\") { runInstall(rest); }\nelse if (cmd === \"connect\") { await runConnect(rest); }\nelse if (cmd === \"log\") { await runLog(rest); }\nelse if (cmd === \"verify\") { await runVerify(); }\nelse if (cmd === \"test\") { await runTest(rest); }\nelse if (cmd === \"flush\") { await runFlush(); }\nelse if (cmd === \"status\") { runStatus(); }\nelse if (cmd === \"doctor\") { await runDoctor(); }\nelse if (cmd === \"uninstall\") { runUninstall(rest); }\nelse if (cmd === \"login\") { await runLogin(rest); }\nelse if (cmd === \"trust\") { runTrust(rest); }\nelse if (cmd === \"prune\") { await runPrune(rest); }\nelse if (cmd === \"rules\") { runRules(rest); }\nelse if (cmd === \"help\" || cmd === \"--help\" || cmd === \"-h\" || cmd === undefined) { printHelp(rest[0]); }\nelse {\n  console.error(`unknown command: ${cmd}`);\n  printHelp(undefined, true);\n  process.exit(1);\n}\n"]}

package/dist/cloud.d.ts

@@ -1,4 +1,5 @@
 import { type CloudEnrollmentBundle, type CloudEnrollmentResult, type CloudExporter, type ReceiptStore } from "@scopebond/gateway";
+import { SqliteCloudOutbox } from "@scopebond/gateway/node";
 /** The persisted connection between this machine and a Cloud workspace. Holds the
  *  scoped machine credential; treat cloud.json as a secret (written 0600). */
 export interface HookConnection extends CloudEnrollmentResult {
@@ -16,6 +17,7 @@ export declare function connectCloud(dir: string, url: string, bundle: CloudEnro
 export declare function attachExporter(outboxDbPath: string, connection: HookConnection, store: ReceiptStore, fetchImpl?: typeof fetch): {
     store: ReceiptStore;
     exporter: CloudExporter;
+    outbox: SqliteCloudOutbox;
 };
 /** Attempt delivery with a bounded timeout so a per-invocation hook never hangs the
  *  agent; undelivered receipts stay in the durable outbox and flush next time. */

package/dist/cloud.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAC9F,MAAM,oBAAoB,CAAC;AAG5B;8EAC8E;AAC9E,MAAM,WAAW,cAAe,SAAQ,qBAAqB;IAC3D,GAAG,EAAE,MAAM,CAAC;CACb;AAED,eAAO,MAAM,cAAc,GAAI,KAAK,MAAM,KAAG,MAAiC,CAAC;AAE/E,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAQjE;AAED;;wFAEwF;AACxF,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,GAChF,OAAO,CAAC,cAAc,CAAC,CAOzB;AAED;oFACoF;AACpF,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,GAC9F;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAA;CAAE,CAIlD;AAED;kFACkF;AAClF,wBAAsB,YAAY,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAK3F"}
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAC9F,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAwB,MAAM,yBAAyB,CAAC;AAElF;8EAC8E;AAC9E,MAAM,WAAW,cAAe,SAAQ,qBAAqB;IAC3D,GAAG,EAAE,MAAM,CAAC;CACb;AAED,eAAO,MAAM,cAAc,GAAI,KAAK,MAAM,KAAG,MAAiC,CAAC;AAE/E,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAQjE;AAED;;wFAEwF;AACxF,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,GAChF,OAAO,CAAC,cAAc,CAAC,CAOzB;AAED;oFACoF;AACpF,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,GAC9F;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAI7E;AAED;kFACkF;AAClF,wBAAsB,YAAY,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAK3F"}

package/dist/cloud.js

@@ -37,7 +37,7 @@ export async function connectCloud(dir, url, bundle, fetchImpl) {
 export function attachExporter(outboxDbPath, connection, store, fetchImpl) {
     const outbox = new SqliteCloudOutbox(outboxDbPath);
     const exporter = createCloudExporter({ url: connection.url, credential: connection.credential, outbox, fetch: fetchImpl });
-    return { store: withCloudExporter(store, exporter), exporter };
+    return { store: withCloudExporter(store, exporter), exporter, outbox };
 }
 /** Attempt delivery with a bounded timeout so a per-invocation hook never hangs the
  *  agent; undelivered receipts stay in the durable outbox and flush next time. */

package/dist/cloud.js.map

@@ -1 +1 @@
-{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,iFAAiF;AACjF,oFAAoF;AACpF,qFAAqF;AACrF,oFAAoF;AAEpF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,uBAAuB,EAAE,mBAAmB,EAAE,iBAAiB,GAEhE,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAQlF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AAE/E,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;QACjF,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YAAE,OAAO,MAAwB,CAAC;IAC/G,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;wFAEwF;AACxF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAW,EAAE,GAAW,EAAE,MAA6B,EAAE,SAAwB;IAEjF,MAAM,EAAE,QAAQ,EAAE,GAAG,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjG,MAAM,UAAU,GAAmB,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IACtD,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;oFACoF;AACpF,MAAM,UAAU,cAAc,CAC5B,YAAoB,EAAE,UAA0B,EAAE,KAAmB,EAAE,SAAwB;IAE/F,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3H,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED;kFACkF;AAClF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAuB,EAAE,SAAS,GAAG,IAAI;IAC1E,MAAM,OAAO,CAAC,IAAI,CAAC;QACjB,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QAChC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;KACtF,CAAC,CAAC;AACL,CAAC","sourcesContent":["// scopebond-hook → Scopebond Cloud: enroll the machine's countersigning key with a\n// workspace and auto-export signed receipts to the hosted portal, so a connected\n// hook starts monitoring automatically. Reuses the gateway's enrollment and bounded\n// durable exporter (D40 — no new transport). The machine credential and the complete\n// receipt log stay local-first; export is best-effort and never blocks a tool call.\n\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport {\n  completeCloudEnrollment, createCloudExporter, withCloudExporter,\n  type CloudEnrollmentBundle, type CloudEnrollmentResult, type CloudExporter, type ReceiptStore,\n} from \"@scopebond/gateway\";\nimport { SqliteCloudOutbox, loadOrCreateAttester } from \"@scopebond/gateway/node\";\n\n/** The persisted connection between this machine and a Cloud workspace. Holds the\n *  scoped machine credential; treat cloud.json as a secret (written 0600). */\nexport interface HookConnection extends CloudEnrollmentResult {\n  url: string;\n}\n\nexport const connectionPath = (dir: string): string => join(dir, \"cloud.json\");\n\n/** Read the persisted connection, or null when the hook is not connected to Cloud. */\nexport function loadConnection(dir: string): HookConnection | null {\n  const path = connectionPath(dir);\n  if (!existsSync(path)) return null;\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\")) as Partial<HookConnection>;\n    if (typeof parsed.url === \"string\" && typeof parsed.credential === \"string\") return parsed as HookConnection;\n  } catch { /* fall through */ }\n  return null;\n}\n\n/** Enroll the machine's attester with a workspace using the portal's one-use handoff,\n *  then persist the scoped machine credential. The attester whose possession is proved\n *  here is the same key the hook countersigns receipts with, so ingest accepts them. */\nexport async function connectCloud(\n  dir: string, url: string, bundle: CloudEnrollmentBundle, fetchImpl?: typeof fetch,\n): Promise<HookConnection> {\n  const { attester } = loadOrCreateAttester({ file: join(dir, \"attester.key\") });\n  const { attester: agent } = loadOrCreateAttester({ file: join(dir, \"agent.key\") });\n  const result = await completeCloudEnrollment({ url, bundle, attester, agent, fetch: fetchImpl });\n  const connection: HookConnection = { url, ...result };\n  writeFileSync(connectionPath(dir), JSON.stringify(connection, null, 2) + \"\\n\", { mode: 0o600 });\n  return connection;\n}\n\n/** Wrap a receipt store so every stored receipt is enqueued to a durable outbox and\n *  exported to Cloud. Returns the wrapped store and the exporter (flush + stop). */\nexport function attachExporter(\n  outboxDbPath: string, connection: HookConnection, store: ReceiptStore, fetchImpl?: typeof fetch,\n): { store: ReceiptStore; exporter: CloudExporter } {\n  const outbox = new SqliteCloudOutbox(outboxDbPath);\n  const exporter = createCloudExporter({ url: connection.url, credential: connection.credential, outbox, fetch: fetchImpl });\n  return { store: withCloudExporter(store, exporter), exporter };\n}\n\n/** Attempt delivery with a bounded timeout so a per-invocation hook never hangs the\n *  agent; undelivered receipts stay in the durable outbox and flush next time. */\nexport async function flushBounded(exporter: CloudExporter, timeoutMs = 3000): Promise<void> {\n  await Promise.race([\n    exporter.flush().catch(() => {}),\n    new Promise<void>((resolve) => setTimeout(resolve, Math.max(0, timeoutMs)).unref?.()),\n  ]);\n}\n"]}
+{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,iFAAiF;AACjF,oFAAoF;AACpF,qFAAqF;AACrF,oFAAoF;AAEpF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,uBAAuB,EAAE,mBAAmB,EAAE,iBAAiB,GAEhE,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAQlF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AAE/E,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;QACjF,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YAAE,OAAO,MAAwB,CAAC;IAC/G,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;wFAEwF;AACxF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAW,EAAE,GAAW,EAAE,MAA6B,EAAE,SAAwB;IAEjF,MAAM,EAAE,QAAQ,EAAE,GAAG,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjG,MAAM,UAAU,GAAmB,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IACtD,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;oFACoF;AACpF,MAAM,UAAU,cAAc,CAC5B,YAAoB,EAAE,UAA0B,EAAE,KAAmB,EAAE,SAAwB;IAE/F,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3H,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACzE,CAAC;AAED;kFACkF;AAClF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAuB,EAAE,SAAS,GAAG,IAAI;IAC1E,MAAM,OAAO,CAAC,IAAI,CAAC;QACjB,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QAChC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;KACtF,CAAC,CAAC;AACL,CAAC","sourcesContent":["// scopebond-hook → Scopebond Cloud: enroll the machine's countersigning key with a\n// workspace and auto-export signed receipts to the hosted portal, so a connected\n// hook starts monitoring automatically. Reuses the gateway's enrollment and bounded\n// durable exporter (D40 — no new transport). The machine credential and the complete\n// receipt log stay local-first; export is best-effort and never blocks a tool call.\n\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport {\n  completeCloudEnrollment, createCloudExporter, withCloudExporter,\n  type CloudEnrollmentBundle, type CloudEnrollmentResult, type CloudExporter, type ReceiptStore,\n} from \"@scopebond/gateway\";\nimport { SqliteCloudOutbox, loadOrCreateAttester } from \"@scopebond/gateway/node\";\n\n/** The persisted connection between this machine and a Cloud workspace. Holds the\n *  scoped machine credential; treat cloud.json as a secret (written 0600). */\nexport interface HookConnection extends CloudEnrollmentResult {\n  url: string;\n}\n\nexport const connectionPath = (dir: string): string => join(dir, \"cloud.json\");\n\n/** Read the persisted connection, or null when the hook is not connected to Cloud. */\nexport function loadConnection(dir: string): HookConnection | null {\n  const path = connectionPath(dir);\n  if (!existsSync(path)) return null;\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\")) as Partial<HookConnection>;\n    if (typeof parsed.url === \"string\" && typeof parsed.credential === \"string\") return parsed as HookConnection;\n  } catch { /* fall through */ }\n  return null;\n}\n\n/** Enroll the machine's attester with a workspace using the portal's one-use handoff,\n *  then persist the scoped machine credential. The attester whose possession is proved\n *  here is the same key the hook countersigns receipts with, so ingest accepts them. */\nexport async function connectCloud(\n  dir: string, url: string, bundle: CloudEnrollmentBundle, fetchImpl?: typeof fetch,\n): Promise<HookConnection> {\n  const { attester } = loadOrCreateAttester({ file: join(dir, \"attester.key\") });\n  const { attester: agent } = loadOrCreateAttester({ file: join(dir, \"agent.key\") });\n  const result = await completeCloudEnrollment({ url, bundle, attester, agent, fetch: fetchImpl });\n  const connection: HookConnection = { url, ...result };\n  writeFileSync(connectionPath(dir), JSON.stringify(connection, null, 2) + \"\\n\", { mode: 0o600 });\n  return connection;\n}\n\n/** Wrap a receipt store so every stored receipt is enqueued to a durable outbox and\n *  exported to Cloud. Returns the wrapped store and the exporter (flush + stop). */\nexport function attachExporter(\n  outboxDbPath: string, connection: HookConnection, store: ReceiptStore, fetchImpl?: typeof fetch,\n): { store: ReceiptStore; exporter: CloudExporter; outbox: SqliteCloudOutbox } {\n  const outbox = new SqliteCloudOutbox(outboxDbPath);\n  const exporter = createCloudExporter({ url: connection.url, credential: connection.credential, outbox, fetch: fetchImpl });\n  return { store: withCloudExporter(store, exporter), exporter, outbox };\n}\n\n/** Attempt delivery with a bounded timeout so a per-invocation hook never hangs the\n *  agent; undelivered receipts stay in the durable outbox and flush next time. */\nexport async function flushBounded(exporter: CloudExporter, timeoutMs = 3000): Promise<void> {\n  await Promise.race([\n    exporter.flush().catch(() => {}),\n    new Promise<void>((resolve) => setTimeout(resolve, Math.max(0, timeoutMs)).unref?.()),\n  ]);\n}\n"]}

package/dist/explain.d.ts

@@ -0,0 +1,44 @@
+/** A policy clause, as much of it as the message needs. */
+export interface ExplainClause {
+    id?: unknown;
+    mode?: unknown;
+    description?: unknown;
+}
+export interface ExplainPolicy {
+    clauses?: unknown;
+}
+/** An intent, as much of it as the message needs. */
+export interface ExplainIntent {
+    action_type?: unknown;
+    params?: unknown;
+}
+/** One line naming the action: `git.push origin main`, `shell.exec rm`,
+ *  `file.read .env`. Shared with `log` so a decision reads the same in both. */
+export declare function describeAction(intent: ExplainIntent | undefined): string;
+/** Find the clause that decided, by the id the verdict reported. */
+export declare function findClause(policy: ExplainPolicy | undefined, clauseId: string | null | undefined): ExplainClause | null;
+export interface ExplainDenyInput {
+    /** The loaded policy, for the deciding clause's own words. */
+    policy?: ExplainPolicy;
+    /** The clause id the verdict reported, when it reported one. */
+    clauseId?: string | null;
+    /** The engine's reason — kept verbatim as the technical detail. */
+    detail: string;
+    /** The action that was blocked. */
+    intent?: ExplainIntent;
+    /** Where the rule lives, so the next step is a real path. */
+    policyPath?: string;
+    /** How to change it, when there is something better to say than "edit this file" — the
+     *  compiled policy is generated, so pointing a reader at it invites them to hand-edit
+     *  something that will be overwritten. */
+    remedy?: string;
+    /** The harness reported this action only after it happened, so the decision records
+     *  and flags it but did not prevent it. The wording must not claim otherwise. */
+    postHoc?: boolean;
+}
+/** Compose the block message. Degrades in order: with a clause and a description
+ *  it explains the rule; with a clause but no description it still names it; with
+ *  no clause at all (an undetermined verdict, a kill switch) it reports the
+ *  engine's reason unchanged rather than inventing a rule that did not decide. */
+export declare function explainDeny(input: ExplainDenyInput): string;
+//# sourceMappingURL=explain.d.ts.map

package/dist/explain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../src/explain.ts"],"names":[],"mappings":"AAcA,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAQD;gFACgF;AAChF,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,CASxE;AAWD,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,GAAG,IAAI,CAQvH;AAED,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;8CAE0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;qFACiF;IACjF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;kFAGkF;AAClF,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAoB3D"}