@smooai/smooth-operator-core 0.21.0 → 0.23.0

package/dist/index.d.ts

@@ -13,8 +13,14 @@ export { InMemoryCheckpointStore } from './checkpoint.js';
 export type { Checkpoint, CheckpointStore } from './checkpoint.js';
 export { CostTracker, DEFAULT_PRICING } from './cost.js';
 export type { CostBudget, ModelPricing, Usage } from './cost.js';
-export { approve, deny, HumanDecision, isApproved } from './humanGate.js';
+export { approve, approveAlways, deny, HumanDecision, isApproved } from './humanGate.js';
 export type { HumanApprovalRequest, HumanApprovalResponse, HumanGate } from './humanGate.js';
+export { AutoMode, autoModeFromEnv, autoModeFromValue, decide, domainMatchesSuffixList, extractHosts, hostFromToken, PermissionHook, splitCompound, stripWrappersAndSudo, toolCategory, } from './permission.js';
+export type { Category, ToolCall, ToolHook, Verdict } from './permission.js';
+export { hostMatchesGlob, PermissionGrants } from './permissionGrants.js';
+export type { GrantQuery } from './permissionGrants.js';
+export { DenyPolicy, DenyRules, globMatch } from './denyPolicy.js';
+export type { DenyPredicate } from './denyPolicy.js';
 export { InMemoryKnowledge } from './knowledge.js';
 export type { Knowledge, KnowledgeHit } from './knowledge.js';
 export { MockLlmProvider, textResponse, toolCallResponse } from './llmProvider.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3E,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAC/G,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAChE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACzD,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC1E,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACnF,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5D,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC7D,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3E,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAC/G,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAChE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACzD,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzF,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EACH,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,MAAM,EACN,uBAAuB,EACvB,YAAY,EACZ,aAAa,EACb,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,YAAY,GACf,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC1E,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACnE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACnF,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5D,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC7D,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -9,7 +9,10 @@ export { delegateTool, effectiveMaxTokens, SmoothAgent } from './agent.js';
 export { Cast, Clearance, makeRole, RoleKind } from './cast.js';
 export { InMemoryCheckpointStore } from './checkpoint.js';
 export { CostTracker, DEFAULT_PRICING } from './cost.js';
-export { approve, deny, HumanDecision, isApproved } from './humanGate.js';
+export { approve, approveAlways, deny, HumanDecision, isApproved } from './humanGate.js';
+export { AutoMode, autoModeFromEnv, autoModeFromValue, decide, domainMatchesSuffixList, extractHosts, hostFromToken, PermissionHook, splitCompound, stripWrappersAndSudo, toolCategory, } from './permission.js';
+export { hostMatchesGlob, PermissionGrants } from './permissionGrants.js';
+export { DenyPolicy, DenyRules, globMatch } from './denyPolicy.js';
 export { InMemoryKnowledge } from './knowledge.js';
 export { MockLlmProvider, textResponse, toolCallResponse } from './llmProvider.js';
 export { InMemoryMemory } from './memory.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE3E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEnF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE3E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEzF,OAAO,EACH,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,MAAM,EACN,uBAAuB,EACvB,YAAY,EACZ,aAAa,EACb,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,YAAY,GACf,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE1E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEnF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/permission.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Native tool-call permission gate for the TypeScript engine.
+ *
+ * The TypeScript sibling of the Rust reference engine's `permission.rs`. A
+ * {@link PermissionHook} runs the pure, deterministic {@link decide} classifier
+ * on every tool call and blocks (throws) on a **Deny**. An **Ask** is routed to
+ * a human approver (the existing {@link HumanGate} seam) when one is wired, and
+ * **fails closed** (blocks) when it is not.
+ *
+ * The classification model is ported natively from smooth's `auto_mode` /
+ * `smooth-narc::judge`. This is the security-critical core and is exhaustively
+ * tested — including adversarial compound-command and credential-path inputs.
+ *
+ * A stored grant ({@link PermissionGrants}) auto-approves a matching `Ask`
+ * without prompting, and answering "approve always" persists a new grant. A
+ * grant can only upgrade an `Ask` — it can **never** waive a `Deny`
+ * circuit-breaker. A consumer-supplied {@link DenyPolicy} is evaluated FIRST and
+ * is a circuit-breaker too: no grant waives it and no mode downgrades it.
+ */
+import type { DenyPolicy } from './denyPolicy.js';
+import type { HumanGate } from './humanGate.js';
+import { PermissionGrants } from './permissionGrants.js';
+/** A tool call presented to a {@link ToolHook}. Mirrors the Rust engine's `ToolCall`. */
+export interface ToolCall {
+    id: string;
+    name: string;
+    arguments: Record<string, unknown>;
+}
+/**
+ * A pre-execution gate on tool calls. `preCall` throws to block the call (the
+ * agent surfaces the error to the model); returning resolves the gate. Mirrors
+ * the Rust engine's `ToolHook::pre_call -> Result<()>`.
+ */
+export interface ToolHook {
+    preCall(call: ToolCall): Promise<void>;
+}
+/**
+ * How aggressively the hook enforces. Mirrors the Rust engine's `AutoMode` (a
+ * trimmed Claude Code `auto-mode` set). Selected via the `SMOOTH_AUTO_MODE` env
+ * var through {@link autoModeFromEnv}.
+ */
+export declare enum AutoMode {
+    /** Read-only allow, mutating ask, dangerous deny. Default. */
+    Ask = "ask",
+    /** Like {@link AutoMode.Ask} but filesystem-edit (`Write`) tools auto-approve. Mirrors `acceptEdits`. */
+    AcceptEdits = "accept-edits",
+    /** Like {@link AutoMode.Ask} but an unmatched verdict is a deny (fail-closed). Headless / CI posture (`dontAsk`). */
+    DenyUnmatched = "deny-unmatched",
+    /** Allow everything **except** the hard circuit-breakers. Escape hatch (`bypassPermissions`, which keeps its breakers). */
+    Bypass = "bypass"
+}
+/** Parse a `SMOOTH_AUTO_MODE` value. Unknown / unset ⇒ {@link AutoMode.Ask}. */
+export declare function autoModeFromValue(v: string | undefined): AutoMode;
+/** Read the mode from the process `SMOOTH_AUTO_MODE` environment variable. */
+export declare function autoModeFromEnv(): AutoMode;
+/** The pure verdict returned by {@link decide}. A discriminated union on `kind`. */
+export type Verdict = {
+    kind: 'allow';
+} | {
+    kind: 'deny';
+    reason: string;
+} | {
+    kind: 'ask';
+    reason: string;
+};
+/** Match a domain against a suffix list (exact or subdomain), case-insensitive. */
+export declare function domainMatchesSuffixList(domain: string, suffixes: readonly string[]): boolean;
+/**
+ * Split a shell command line into subcommands on the operators that sequence
+ * independent commands: `&&`, `||`, `;`, `|`, `&`, and newlines. Command /
+ * process substitution (`$(…)`, `` `…` ``, `<(…)`) is surfaced as its own
+ * segment so it can't ride in on a safe outer command.
+ *
+ * ponytail: substring split, not a real shell lexer — upgrade only if quoting
+ * edge-cases (`echo "a && b"`) start mattering for policy.
+ */
+export declare function splitCompound(command: string): string[];
+/** Pull a bare hostname out of a URL-ish or `host:port` token. */
+export declare function hostFromToken(tok: string): string | undefined;
+/** Extract candidate hostnames from a single (already split) net-tool subcommand. */
+export declare function extractHosts(subcommand: string): string[];
+/**
+ * Strip leading transparent wrappers and any leading `sudo` from a single
+ * subcommand, returning the remaining command text. Used by the deny policy so a
+ * rule anchored on the real binary (`aws …`) still matches `sudo aws …` /
+ * `timeout 5 aws …`.
+ */
+export declare function stripWrappersAndSudo(subcommand: string): string;
+/** Category a tool falls into, derived from its name. Drives the default posture for non-bash tools. */
+export type Category = 'bash' | 'network' | 'write' | 'safe' | 'unknown';
+export declare function toolCategory(name: string): Category;
+/**
+ * The pure, deterministic permission decision. No async, no I/O — the
+ * security-critical core, tested exhaustively.
+ *
+ * `args` is the raw tool-call argument object; the relevant field is pulled per
+ * category (`cmd` for bash, `path` for writes, `url`/`host` for network).
+ */
+export declare function decide(mode: AutoMode, toolName: string, args: Record<string, unknown>): Verdict;
+/**
+ * A {@link ToolHook} that enforces {@link decide} on every tool call.
+ *
+ * **`Ask` routing**: with an approver wired via {@link PermissionHook.withApprover}
+ * (the existing {@link HumanGate} seam), an `Ask` verdict prompts a human and
+ * blocks until they approve; with no approver it **fails closed** (throws).
+ * {@link AutoMode.Bypass} / {@link AutoMode.AcceptEdits} downgrade eligible asks
+ * inside {@link decide} before they reach the approver. A `Deny` always blocks
+ * and is never routed to the human — circuit-breakers are not waivable. A
+ * consumer {@link DenyPolicy}, when attached, is evaluated FIRST and is a
+ * circuit-breaker of the same tier.
+ */
+export declare class PermissionHook implements ToolHook {
+    private readonly autoMode;
+    private approver?;
+    private grants?;
+    private denyPolicyRef?;
+    constructor(autoMode?: AutoMode);
+    /** Build a hook reading the mode from `SMOOTH_AUTO_MODE` (default `Ask`). */
+    static fromEnv(): PermissionHook;
+    /**
+     * Wire an interactive approver. When set, an `Ask` verdict consults the
+     * {@link HumanGate} and blocks on its response — approve lets the call run,
+     * anything else blocks it. Answering with `remember: true`
+     * ({@link approveAlways}) persists a grant when {@link withGrants} is set.
+     */
+    withApprover(gate: HumanGate): this;
+    /**
+     * Wire the in-memory allow-list. A matching grant auto-approves an `Ask`
+     * *before* prompting; an `approve always` answer adds a fresh grant so the
+     * next identical `Ask` is silent. The consumer owns persisting `grants`.
+     */
+    withGrants(grants: PermissionGrants): this;
+    /**
+     * Attach a consumer {@link DenyPolicy}. Purely additive: with none attached
+     * enforcement is identical to before. When set it is evaluated **first** — a
+     * match is a hard deny (circuit-breaker tier) no grant can waive and no
+     * {@link AutoMode} can downgrade.
+     */
+    withDenyPolicy(policy: DenyPolicy): this;
+    /** The mode this hook enforces. */
+    get mode(): AutoMode;
+    preCall(call: ToolCall): Promise<void>;
+    /** Add an approve-always grant to the in-memory allow-list. */
+    private persistGrant;
+}
+//# sourceMappingURL=permission.d.ts.map

package/dist/permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../src/permission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,yFAAyF;AACzF,MAAM,WAAW,QAAQ;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED;;;;GAIG;AACH,oBAAY,QAAQ;IAChB,8DAA8D;IAC9D,GAAG,QAAQ;IACX,yGAAyG;IACzG,WAAW,iBAAiB;IAC5B,qHAAqH;IACrH,aAAa,mBAAmB;IAChC,2HAA2H;IAC3H,MAAM,WAAW;CACpB;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAuBjE;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,IAAI,QAAQ,CAE1C;AAED,oFAAoF;AACpF,MAAM,MAAM,OAAO,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAgI7G,mFAAmF;AACnF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAM5F;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAYvD;AAmBD,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW7D;AAED,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAUzD;AA6BD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAQ/D;AAuJD,wGAAwG;AACxG,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAEzE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAWnD;AAoCD;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAS/F;AAoFD;;;;;;;;;;;GAWG;AACH,qBAAa,cAAe,YAAW,QAAQ;IAK/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJrC,OAAO,CAAC,QAAQ,CAAC,CAAY;IAC7B,OAAO,CAAC,MAAM,CAAC,CAAmB;IAClC,OAAO,CAAC,aAAa,CAAC,CAAa;gBAEN,QAAQ,GAAE,QAAuB;IAE9D,6EAA6E;IAC7E,MAAM,CAAC,OAAO,IAAI,cAAc;IAIhC;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI;IAKnC;;;;OAIG;IACH,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAK1C;;;;;OAKG;IACH,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAKxC,mCAAmC;IACnC,IAAI,IAAI,IAAI,QAAQ,CAEnB;IAEK,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA4B5C,+DAA+D;IAC/D,OAAO,CAAC,YAAY;CAKvB"}