@taliesinb/mash 0.0.0-stage → 0.1.0

package/dist/src/machine.d.ts

@@ -0,0 +1,139 @@
+/**
+ * The public entry point: a {@link Machine} runs bash snippets under a policy,
+ * with behavior definitions, hooks and a trace event stream.
+ *
+ * ```ts
+ * const m = new Machine({ cwd, policy: { mode: 'workspace-write', workspaceRoot: cwd } })
+ * m.on((e) => console.log(e.type))
+ * const r = await m.run('ls | wc -l')
+ * ```
+ */
+import type * as A from './parser/ast.ts';
+import { BehaviorRegistry } from './behaviors/registry.ts';
+import { type Policy } from './policy/policy.ts';
+import type { Hooks, TraceListener } from './trace/events.ts';
+import { type SpawnFn } from './vm/external.ts';
+import { type FdPassing } from './vm/fifo.ts';
+import { Capture, type DataListener } from './vm/io.ts';
+import { type AnalysisReport, type AnalyzeOptions } from './analysis/analyze.ts';
+export interface MachineOptions {
+    /** Initial working directory (default: process.cwd()). */
+    cwd?: string;
+    /** Environment (default: process.env). */
+    env?: Record<string, string | undefined>;
+    /** Sandbox policy (default: workspace-write rooted at cwd). */
+    policy?: Policy;
+    behaviors?: BehaviorRegistry;
+    hooks?: Hooks;
+    /** Host stdin (default: empty). */
+    stdin?: AsyncIterable<Uint8Array | string>;
+    /** Host stdout/stderr sinks. Default: captured and returned by `run`. */
+    stdout?: (chunk: Uint8Array) => void | Promise<void>;
+    stderr?: (chunk: Uint8Array) => void | Promise<void>;
+    /** Spawn function for external commands (wrap it to confine children). */
+    spawn?: SpawnFn;
+    /** Report `data` events for every channel (pipes, redirections, captures). Default false. */
+    traceData?: boolean;
+    /**
+     * What to do with background jobs still running when the script ends:
+     * `detach` (like bash: leave them running), `wait`, or `kill`. Default `wait`.
+     */
+    background?: 'detach' | 'wait' | 'kill';
+    /**
+     * Deny commands whose policy verdict is `unknown` (effects not provably
+     * allowed). Default false: unknown effects are allowed (the OS sandbox
+     * still confines them) but reported.
+     */
+    denyUnknown?: boolean;
+    /** Status of a denied command (default 126). */
+    deniedStatus?: number;
+    /** Abort the whole run on the first denial instead of failing the command. */
+    abortOnDeny?: boolean;
+    /** Dry run: never execute external commands; report their predicted effects instead. */
+    dryRun?: boolean;
+    /** `$0` (default `mash`). */
+    arg0?: string;
+    /**
+     * Run nested `bash -c`, `bash file` and bash/sh shebang scripts inside the
+     * VM so their commands are traced and checked individually (default true).
+     */
+    inlineScripts?: boolean;
+    /**
+     * Emulate `xargs` and `find -exec/-delete` inside the VM so every command
+     * they run is traced and checked individually (default true).
+     */
+    emulate?: boolean;
+    /**
+     * How process substitutions and other `/dev/fd/N` arguments naming VM fds
+     * reach external commands. `devfd`: an extra stdio slot, passed as
+     * `/dev/fd/K` (works on macOS, where the child can open a socket by that
+     * name). `fifo`: a named FIFO in a private temp dir, passed by path (needed
+     * on Linux, where opening `/dev/fd/K` on a socket fails with ENXIO).
+     * Default: the `MASH_PROCSUBST` environment variable (`fifo`|`devfd`), else
+     * `devfd` on macOS and `fifo` elsewhere.
+     */
+    procSubst?: FdPassing;
+}
+export interface RunOptions {
+    /** Positional parameters ($1...). */
+    args?: string[];
+    signal?: AbortSignal;
+}
+export interface RunResult {
+    status: number;
+    /** Captured output when no stdout/stderr sink was configured. */
+    stdout: string;
+    stderr: string;
+    /** Set when the run was aborted (policy abort or signal). */
+    aborted?: string;
+    /** Commands denied by policy or hooks during the run. */
+    denials: {
+        argv: string[];
+        reason: string;
+    }[];
+}
+export declare class Machine {
+    readonly options: MachineOptions;
+    readonly policy: Policy;
+    readonly behaviors: BehaviorRegistry;
+    private readonly listeners;
+    private readonly dataListeners;
+    private nextId;
+    private readonly sources;
+    private channelCounter;
+    private pidCounter;
+    private execCounter;
+    private runCounter;
+    private readonly contexts;
+    constructor(options?: MachineOptions);
+    /** Subscribe to trace events. Returns an unsubscribe function. */
+    on(listener: TraceListener): () => void;
+    /** Tap the bytes flowing through every channel (pipes, redirections, captures, stdio). */
+    tap(listener: DataListener): () => void;
+    private emit;
+    /** Parse source, registering it so trace consumers can map node ids back to text. */
+    parse(source: string, origin?: string, opts?: {
+        partial?: boolean;
+    }): A.Script;
+    private sourceOf;
+    /** Source text of a node. */
+    textOf(node: {
+        id: number;
+        span: A.Span;
+    }): string;
+    /** Static analysis: predicted commands, effects and policy findings, without running anything. */
+    analyze(source: string | A.Script, options?: Partial<AnalyzeOptions>): AnalysisReport;
+    private analyzeNested;
+    private initialEnv;
+    /** Run a snippet. */
+    run(source: string | A.Script, opts?: RunOptions): Promise<RunResult>;
+    private nextPidValue;
+    private channel;
+    /** Effects of a builtin (most have none). */
+    private builtinEffects;
+    private invocation;
+    private assess;
+    private assessEffectsOnly;
+}
+export { Capture };
+//# sourceMappingURL=machine.d.ts.map

package/dist/src/machine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../src/machine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,KAAK,CAAC,MAAM,iBAAiB,CAAA;AAGzC,OAAO,EAAE,gBAAgB,EAAY,MAAM,yBAAyB,CAAA;AAIpE,OAAO,EAAmE,KAAK,MAAM,EAAsB,MAAM,oBAAoB,CAAA;AAErI,OAAO,KAAK,EAAgC,KAAK,EAAc,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACvG,OAAO,EAAgB,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,cAAc,CAAA;AAE/D,OAAO,EAAE,OAAO,EAAuD,KAAK,YAAY,EAAE,MAAM,YAAY,CAAA;AAG5G,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE/F,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACxC,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,gBAAgB,CAAA;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,mCAAmC;IACnC,KAAK,CAAC,EAAE,aAAa,CAAC,UAAU,GAAG,MAAM,CAAC,CAAA;IAC1C,yEAAyE;IACzE,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,0EAA0E;IAC1E,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,6FAA6F;IAC7F,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAA;IACvC;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,wFAAwF;IACxF,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,SAAS,CAAA;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,yDAAyD;IACzD,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAC9C;AASD,qBAAa,OAAO;IAClB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,MAAM,CAAI;IAClB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,cAAc,CAAI;IAC1B,OAAO,CAAC,UAAU,CAAI;IACtB,OAAO,CAAC,WAAW,CAAI;IACvB,OAAO,CAAC,UAAU,CAAI;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;gBAEjD,OAAO,GAAE,cAAmB;IAYxC,kEAAkE;IAClE,EAAE,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI;IAQvC,0FAA0F;IAC1F,GAAG,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,IAAI;IAQvC,OAAO,CAAC,IAAI;IAUZ,qFAAqF;IACrF,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAW,EAAE,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,CAAC,CAAC,MAAM;IAQpF,OAAO,CAAC,QAAQ;IAQhB,6BAA6B;IAC7B,MAAM,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAA;KAAE,GAAG,MAAM;IAKlD,kGAAkG;IAClG,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,GAAE,OAAO,CAAC,cAAc,CAAM,GAAG,cAAc;IAazF,OAAO,CAAC,aAAa;IAmCrB,OAAO,CAAC,UAAU;IAMlB,qBAAqB;IACf,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,SAAS,CAAC;IA2G/E,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,OAAO;IAUf,6CAA6C;IAC7C,OAAO,CAAC,cAAc;IAwBtB,OAAO,CAAC,UAAU;YAUJ,MAAM;YAiEN,iBAAiB;CAYhC;AAED,OAAO,EAAE,OAAO,EAAE,CAAA"}

package/dist/src/machine.js

@@ -0,0 +1,400 @@
+/**
+ * The public entry point: a {@link Machine} runs bash snippets under a policy,
+ * with behavior definitions, hooks and a trace event stream.
+ *
+ * ```ts
+ * const m = new Machine({ cwd, policy: { mode: 'workspace-write', workspaceRoot: cwd } })
+ * m.on((e) => console.log(e.type))
+ * const r = await m.run('ls | wc -l')
+ * ```
+ */
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { parse, lineColumn } from "./parser/parser.js";
+import { known } from "./analysis/value.js";
+import { BehaviorRegistry, basename } from "./behaviors/registry.js";
+import { defaultBehaviors } from "./behaviors/index.js";
+import { checkCommandName, checkEffects, checkExecEffects, defaultPolicy } from "./policy/policy.js";
+import { asPossible, viaSuffix, withVia } from "./policy/effects.js";
+import { defaultSpawn } from "./vm/external.js";
+import { defaultFdPassing } from "./vm/fifo.js";
+import { Interpreter } from "./vm/interp.js";
+import { Capture, FdTable, HostStream } from "./vm/io.js";
+import { AbortRun, Proc } from "./vm/proc.js";
+import { initShellVars, newVar, ShellState } from "./vm/state.js";
+import { analyzeScript } from "./analysis/analyze.js";
+export class Machine {
+    options;
+    policy;
+    behaviors;
+    listeners = [];
+    dataListeners = [];
+    nextId = 1;
+    sources = [];
+    channelCounter = 0;
+    pidCounter = 0;
+    execCounter = 0;
+    runCounter = 0;
+    contexts = new Map();
+    constructor(options = {}) {
+        this.options = options;
+        const cwd = path.resolve(options.cwd ?? process.cwd());
+        this.policy = options.policy ?? defaultPolicy(cwd);
+        this.behaviors = options.behaviors ?? defaultBehaviors();
+        this.behaviors.scriptAnalyzer ??= (source, positional, inv, info) => this.analyzeNested(source, positional, inv, info);
+        if (options.traceData) {
+            this.dataListeners.push((channel, bytes, direction) => this.emit({ type: 'data', channel, bytes, direction }));
+        }
+        this.pidCounter = 10000 + (process.pid % 1000) * 10;
+    }
+    /** Subscribe to trace events. Returns an unsubscribe function. */
+    on(listener) {
+        this.listeners.push(listener);
+        return () => {
+            const i = this.listeners.indexOf(listener);
+            if (i >= 0)
+                this.listeners.splice(i, 1);
+        };
+    }
+    /** Tap the bytes flowing through every channel (pipes, redirections, captures, stdio). */
+    tap(listener) {
+        this.dataListeners.push(listener);
+        return () => {
+            const i = this.dataListeners.indexOf(listener);
+            if (i >= 0)
+                this.dataListeners.splice(i, 1);
+        };
+    }
+    emit(e) {
+        for (const l of this.listeners) {
+            try {
+                l(e);
+            }
+            catch {
+                // listeners must not break execution
+            }
+        }
+    }
+    /** Parse source, registering it so trace consumers can map node ids back to text. */
+    parse(source, origin = 'script', opts = {}) {
+        const firstId = this.nextId;
+        const script = parse(source, { firstId, partial: opts.partial });
+        this.nextId = script.id + 1;
+        this.sources.push({ firstId, lastId: script.id, text: source, origin });
+        return script;
+    }
+    sourceOf(id) {
+        for (let i = this.sources.length - 1; i >= 0; i--) {
+            const s = this.sources[i];
+            if (id >= s.firstId && id <= s.lastId)
+                return s;
+        }
+        return undefined;
+    }
+    /** Source text of a node. */
+    textOf(node) {
+        const s = this.sourceOf(node.id);
+        return s ? s.text.slice(node.span.start, node.span.end) : '';
+    }
+    /** Static analysis: predicted commands, effects and policy findings, without running anything. */
+    analyze(source, options = {}) {
+        const script = typeof source === 'string' ? this.parse(source, 'analysis') : source;
+        const text = typeof source === 'string' ? source : this.sourceOf(source.id)?.text ?? '';
+        const cwd = path.resolve(this.options.cwd ?? process.cwd());
+        return analyzeScript(script, text, {
+            cwd: known(cwd),
+            env: this.initialEnv(),
+            policy: this.policy,
+            behaviors: this.behaviors,
+            ...options,
+        });
+    }
+    analyzeNested(source, positional, inv, info = {}) {
+        const text = source.alts.length === 1 && source.alts[0].every((s) => typeof s === 'string') ? source.alts[0].join('') : undefined;
+        if (text === undefined)
+            return { effects: [{ kind: 'unknown', detail: 'script text is not known statically' }], complete: false };
+        const file = info.file ? path.normalize(info.file) : undefined;
+        if (file && inv.mayHaveChanged?.(file))
+            return { effects: [{ kind: 'unknown', detail: `script ${file} may be changed by the snippet before it runs` }], complete: false };
+        let script;
+        try {
+            script = parse(text, { firstId: 2_000_000_000 });
+        }
+        catch (e) {
+            return { effects: [{ kind: 'unknown', detail: `script does not parse: ${e.message}` }], complete: false };
+        }
+        const env = {};
+        const report = analyzeScript(script, text, {
+            cwd: inv.cwd,
+            env,
+            envValues: (n) => inv.env(n),
+            policy: this.policy,
+            behaviors: this.behaviors,
+            positional,
+            nested: true,
+        });
+        // Every effect says which inner command it comes from. Conditional (`may`)
+        // effects are only possible effects of the outer command: never a definite
+        // violation, and checked individually when the script runs.
+        // External commands become `exec` effects, so denied command names are seen.
+        const effects = report.commands.flatMap((c) => {
+            const own = c.kind === 'external' || c.kind === 'not-found' ? [{ kind: 'exec', argv: c.argv }, ...c.effects] : c.effects;
+            return own.map((e) => {
+                const nested = withVia(e, { text: c.text, line: c.line, ...(file ? { file } : {}) });
+                return c.reach === 'may' ? asPossible(nested) : nested;
+            });
+        });
+        return { effects, complete: report.commands.every((c) => c.complete), readsStdin: 'maybe' };
+    }
+    initialEnv() {
+        const env = {};
+        for (const [k, v] of Object.entries(this.options.env ?? process.env))
+            if (v !== undefined)
+                env[k] = v;
+        return env;
+    }
+    /** Run a snippet. */
+    async run(source, opts = {}) {
+        // bash reads scripts line by line: lines before a syntax error still run
+        const script = typeof source === 'string' ? this.parse(source, 'script', { partial: true }) : source;
+        const runId = ++this.runCounter;
+        const controller = new AbortController();
+        const external = opts.signal;
+        const onExternalAbort = () => controller.abort();
+        external?.addEventListener('abort', onExternalAbort, { once: true });
+        if (external?.aborted)
+            controller.abort();
+        const cwd = path.resolve(this.options.cwd ?? process.cwd());
+        const state = new ShellState(cwd);
+        for (const [k, v] of Object.entries(this.initialEnv()))
+            state.globals.set(k, newVar({ kind: 'string', value: v }, { exported: true }));
+        state.globals.set('PWD', newVar({ kind: 'string', value: cwd }, { exported: true }));
+        if (!state.globals.has('HOME'))
+            state.globals.set('HOME', newVar({ kind: 'string', value: os.homedir() }, { exported: true }));
+        const shlvl = Number(state.getString('SHLVL') ?? '0') + 1;
+        state.globals.set('SHLVL', newVar({ kind: 'string', value: String(shlvl) }, { exported: true }));
+        initShellVars(state);
+        state.positional = opts.args ?? [];
+        state.arg0 = this.options.arg0 ?? 'mash';
+        const stdoutCapture = [];
+        const stderrCapture = [];
+        const denials = [];
+        const fds = new FdTable();
+        const dl = this.dataListeners;
+        fds.set(0, new HostStream(this.channel('host', 'stdin'), dl, { input: this.options.stdin ?? (async function* () { })() }));
+        fds.set(1, new HostStream(this.channel('host', 'stdout'), dl, { write: this.options.stdout ?? ((c) => void stdoutCapture.push(c)) }));
+        fds.set(2, new HostStream(this.channel('host', 'stderr'), dl, { write: this.options.stderr ?? ((c) => void stderrCapture.push(c)) }));
+        const shellPid = this.nextPidValue();
+        const jobs = new Map();
+        const allJobs = [];
+        const tracked = [];
+        const proc = new Proc(state, fds, shellPid, process.pid, 0, jobs, false);
+        const rt = {
+            emit: (e) => this.emit(e),
+            listeners: dl,
+            channel: (kind, label, extra) => this.channel(kind, label, extra),
+            nextPid: () => this.nextPidValue(),
+            nextExecId: () => ++this.execCounter,
+            shellPid,
+            assess: async (intent) => {
+                const a = await this.assess(intent);
+                if (a.action === 'deny' || a.action === 'abort')
+                    denials.push({ argv: intent.argv, reason: a.reason });
+                return a;
+            },
+            assessRedirects: async (effects, node, p) => {
+                const a = await this.assessEffectsOnly(effects, node);
+                if (a.action === 'deny' || a.action === 'abort')
+                    denials.push({ argv: [this.textOf(node)], reason: a.reason });
+                return a;
+            },
+            afterCommand: async (execId, status) => {
+                const ctx = this.contexts.get(execId);
+                this.contexts.delete(execId);
+                if (ctx && this.options.hooks?.afterCommand)
+                    await this.options.hooks.afterCommand(ctx, status);
+            },
+            spawn: this.options.spawn ?? defaultSpawn,
+            signal: controller.signal,
+            text: (node) => this.textOf(node),
+            line: (node) => {
+                const s = this.sourceOf(node.id);
+                return s ? lineColumn(s.text, node.span.start).line : 0;
+            },
+            parse: (text, origin, opts) => this.parse(text, origin, opts),
+            findJob: (pid) => allJobs.find((j) => j.pid === pid),
+            track: (p) => void tracked.push(p.catch(() => { })),
+            registerJob: (job) => void allJobs.push(job),
+            inlineScripts: this.options.inlineScripts ?? true,
+            emulate: this.options.emulate ?? true,
+            fdPassing: this.options.procSubst ?? defaultFdPassing(),
+        };
+        const interp = new Interpreter(rt);
+        this.emit({ type: 'run:start', runId, pid: shellPid });
+        let status;
+        let aborted;
+        try {
+            status = await interp.runTop(script, proc);
+        }
+        catch (e) {
+            if (e instanceof AbortRun) {
+                status = e.status;
+                aborted = e.message;
+                controller.abort();
+                for (const j of allJobs)
+                    j.kill();
+                const errText = `mash: aborted: ${e.message}\n`;
+                await fds.get(2)?.write(errText).catch(() => { });
+            }
+            else {
+                throw e;
+            }
+        }
+        const bg = this.options.background ?? 'wait';
+        if (bg === 'wait')
+            await Promise.all(allJobs.map((j) => j.done.catch(() => 0)));
+        else if (bg === 'kill') {
+            for (const j of allJobs)
+                if (j.status === null)
+                    j.kill();
+            await Promise.all(allJobs.map((j) => j.done.catch(() => 0)));
+        }
+        if (bg !== 'detach')
+            await Promise.all(tracked);
+        fds.closeAll();
+        external?.removeEventListener('abort', onExternalAbort);
+        this.emit({ type: 'run:end', runId, status });
+        const dec = new TextDecoder();
+        const join = (chunks) => chunks.map((c) => dec.decode(c, { stream: true })).join('') + dec.decode();
+        return { status, stdout: join(stdoutCapture), stderr: join(stderrCapture), aborted, denials };
+    }
+    nextPidValue() {
+        return ++this.pidCounter;
+    }
+    channel(kind, label, extra = {}) {
+        const ch = { id: ++this.channelCounter, kind, label, ...extra };
+        if (kind !== 'host' && kind !== 'null')
+            this.emit({ type: 'channel:open', channel: ch });
+        return ch;
+    }
+    // -------------------------------------------------------------------------
+    // Assessment: behavior → effects → policy → hooks
+    // -------------------------------------------------------------------------
+    /** Effects of a builtin (most have none). */
+    builtinEffects(argv, cwd, env) {
+        const name = argv[0];
+        const resolve = (p) => known(path.resolve(cwd, p));
+        switch (name) {
+            case 'cd':
+            case 'pushd':
+                return { effects: argv[1] && argv[1] !== '-' ? [{ kind: 'chdir', path: resolve(argv[1]) }] : [] };
+            case 'source':
+            case '.':
+                return { effects: argv[1] ? [{ kind: 'read', path: resolve(argv[1]) }] : [] };
+            case 'exec':
+            case 'command':
+            case 'builtin': {
+                const rest = argv.slice(1).filter((a, i) => !(i === 0 && a.startsWith('-')));
+                if (rest.length === 0 || argv.slice(1).some((a) => a === '-v' || a === '-V'))
+                    return { effects: [] };
+                return this.behaviors.analyze(this.invocation(rest, cwd, env));
+            }
+            case 'kill':
+                return { effects: [{ kind: 'process', detail: `kill ${argv.slice(1).join(' ')}` }] };
+            default:
+                return { effects: [] };
+        }
+    }
+    invocation(argv, cwd, env, stdin = 'unknown') {
+        return {
+            name: basename(argv[0]),
+            argv: argv.map(known),
+            cwd: known(cwd),
+            env: (n) => (env[n] === undefined ? undefined : known(env[n])),
+            stdin,
+        };
+    }
+    async assess(intent) {
+        const policy = this.policy;
+        let result;
+        if (intent.kind === 'external') {
+            result = this.behaviors.analyze(this.invocation(intent.argv, intent.cwd, intent.env, intent.stdinKind));
+        }
+        else if (intent.kind === 'builtin') {
+            result = this.builtinEffects(intent.argv, intent.cwd, intent.env);
+        }
+        else {
+            result = { effects: [] };
+        }
+        const effects = [...intent.redirectEffects, ...result.effects];
+        const findings = checkEffects(effects, policy, { runtime: true });
+        const nameFinding = intent.kind === 'external' || intent.kind === 'not-found' ? checkCommandName(intent.argv[0], policy) : null;
+        if (nameFinding)
+            findings.unshift(nameFinding);
+        findings.unshift(...checkExecEffects(result.effects, policy));
+        const denied = findings.filter((f) => f.verdict === 'deny');
+        const unknown = findings.filter((f) => f.verdict === 'unknown');
+        let decision = denied.length > 0 || (this.options.denyUnknown && unknown.length > 0) ? 'deny' : 'allow';
+        const ctx = {
+            execId: intent.execId,
+            nodeId: intent.node.id,
+            span: intent.node.span,
+            text: this.textOf(intent.node),
+            argv: intent.argv,
+            kind: intent.kind,
+            path: intent.path,
+            cwd: intent.cwd,
+            env: intent.env,
+            effects,
+            effectsComplete: result.complete !== false,
+            findings,
+            decision,
+            pid: intent.pid,
+        };
+        this.contexts.set(intent.execId, ctx);
+        let hook = undefined;
+        if (this.options.hooks?.beforeCommand)
+            hook = await this.options.hooks.beforeCommand(ctx);
+        const reasonOf = () => (denied.length > 0 ? denied : unknown).map((f) => f.reason + viaSuffix(f.effect)).join('; ') || 'denied by policy';
+        const status = this.options.deniedStatus ?? 126;
+        if (hook) {
+            switch (hook.action) {
+                case 'allow':
+                    decision = 'allow';
+                    break;
+                case 'deny':
+                    this.emit({ type: 'command:denied', execId: intent.execId, nodeId: intent.node.id, argv: intent.argv, reason: hook.reason, findings });
+                    return { action: 'deny', reason: hook.reason, status: hook.status ?? status };
+                case 'abort':
+                    this.emit({ type: 'command:denied', execId: intent.execId, nodeId: intent.node.id, argv: intent.argv, reason: hook.reason, findings });
+                    return { action: 'abort', reason: hook.reason, status: hook.status ?? status };
+                case 'simulate':
+                    return { action: 'simulate', stdout: hook.stdout ?? '', stderr: hook.stderr ?? '', status: hook.status ?? 0 };
+            }
+        }
+        if (decision === 'deny') {
+            const reason = `denied by policy: ${reasonOf()}`;
+            this.emit({ type: 'command:denied', execId: intent.execId, nodeId: intent.node.id, argv: intent.argv, reason, findings });
+            return this.options.abortOnDeny ? { action: 'abort', reason, status } : { action: 'deny', reason, status };
+        }
+        if (this.options.dryRun && intent.kind === 'external') {
+            return { action: 'simulate', stdout: '', stderr: '', status: 0 };
+        }
+        return { action: 'run', readsStdin: result.readsStdin ?? 'maybe' };
+    }
+    async assessEffectsOnly(effects, node) {
+        if (effects.length === 0)
+            return { action: 'run', readsStdin: 'maybe' };
+        const findings = checkEffects(effects, this.policy, { runtime: true });
+        const denied = findings.filter((f) => f.verdict === 'deny');
+        if (denied.length > 0) {
+            const reason = `denied by policy: ${denied.map((f) => f.reason + viaSuffix(f.effect)).join('; ')}`;
+            this.emit({ type: 'command:denied', execId: 0, nodeId: node.id, argv: [this.textOf(node)], reason, findings });
+            const status = this.options.deniedStatus ?? 126;
+            return this.options.abortOnDeny ? { action: 'abort', reason, status } : { action: 'deny', reason, status };
+        }
+        return { action: 'run', readsStdin: 'maybe' };
+    }
+}
+export { Capture };
+//# sourceMappingURL=machine.js.map

package/dist/src/machine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine.js","sourceRoot":"","sources":["../../src/machine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,KAAK,EAAe,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAGvD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAmC,MAAM,oBAAoB,CAAA;AACrI,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAEpE,OAAO,EAAE,YAAY,EAAgB,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAkB,MAAM,cAAc,CAAA;AAC/D,OAAO,EAAE,WAAW,EAAkD,MAAM,gBAAgB,CAAA;AAC5F,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAqD,MAAM,YAAY,CAAA;AAC5G,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAY,MAAM,cAAc,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AACjE,OAAO,EAAE,aAAa,EAA4C,MAAM,uBAAuB,CAAA;AAqF/F,MAAM,OAAO,OAAO;IACT,OAAO,CAAgB;IACvB,MAAM,CAAQ;IACd,SAAS,CAAkB;IACnB,SAAS,GAAoB,EAAE,CAAA;IAC/B,aAAa,GAAmB,EAAE,CAAA;IAC3C,MAAM,GAAG,CAAC,CAAA;IACD,OAAO,GAAmB,EAAE,CAAA;IACrC,cAAc,GAAG,CAAC,CAAA;IAClB,UAAU,GAAG,CAAC,CAAA;IACd,WAAW,GAAG,CAAC,CAAA;IACf,UAAU,GAAG,CAAC,CAAA;IACL,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAA;IAE7D,YAAY,UAA0B,EAAE;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QACtD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,CAAA;QAClD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAA;QACxD,IAAI,CAAC,SAAS,CAAC,cAAc,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QACtH,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;QAChH,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACrD,CAAC;IAED,kEAAkE;IAClE,EAAE,CAAC,QAAuB;QACxB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC7B,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC1C,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACzC,CAAC,CAAA;IACH,CAAC;IAED,0FAA0F;IAC1F,GAAG,CAAC,QAAsB;QACxB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACjC,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC9C,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7C,CAAC,CAAA;IACH,CAAC;IAEO,IAAI,CAAC,CAAa;QACxB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,CAAC,CAAC,CAAC,CAAC,CAAA;YACN,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,MAAc,EAAE,MAAM,GAAG,QAAQ,EAAE,OAA8B,EAAE;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAA;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;QAChE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACvE,OAAO,MAAM,CAAA;IACf,CAAC;IAEO,QAAQ,CAAC,EAAU;QACzB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YACzB,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM;gBAAE,OAAO,CAAC,CAAA;QACjD,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,6BAA6B;IAC7B,MAAM,CAAC,IAAkC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAChC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,CAAC;IAED,kGAAkG;IAClG,OAAO,CAAC,MAAyB,EAAE,UAAmC,EAAE;QACtE,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QACnF,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,EAAE,CAAA;QACvF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QAC3D,OAAO,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE;YACjC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;YACf,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,OAAO;SACX,CAAC,CAAA;IACJ,CAAC;IAEO,aAAa,CAAC,MAAc,EAAE,UAAoB,EAAE,GAAe,EAAE,OAAmB,EAAE;QAChG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/I,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QACjI,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9D,IAAI,IAAI,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,IAAI,+CAA+C,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QACzK,IAAI,MAAgB,CAAA;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;QAClD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,0BAA2B,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;QACtH,CAAC;QACD,MAAM,GAAG,GAA2B,EAAE,CAAA;QACtC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE;YACzC,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,GAAG;YACH,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU;YACV,MAAM,EAAE,IAAI;SACb,CAAC,CAAA;QACF,2EAA2E;QAC3E,2EAA2E;QAC3E,4DAA4D;QAC5D,6EAA6E;QAC7E,MAAM,OAAO,GAAa,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACtD,MAAM,GAAG,GAAa,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YAClI,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACnB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;gBACpF,OAAO,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;YACxD,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;IAC7F,CAAC;IAEO,UAAU;QAChB,MAAM,GAAG,GAA2B,EAAE,CAAA;QACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACrG,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,qBAAqB;IACrB,KAAK,CAAC,GAAG,CAAC,MAAyB,EAAE,OAAmB,EAAE;QACxD,yEAAyE;QACzE,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QACpG,MAAM,KAAK,GAAG,EAAE,IAAI,CAAC,UAAU,CAAA;QAC/B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAA;QAC5B,MAAM,eAAe,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;QACtD,QAAQ,EAAE,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACpE,IAAI,QAAQ,EAAE,OAAO;YAAE,UAAU,CAAC,KAAK,EAAE,CAAA;QAEzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QAC3D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;QACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACtI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACpF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC9H,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QACzD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAChG,aAAa,CAAC,KAAK,CAAC,CAAA;QACpB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAA;QAClC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAA;QAExC,MAAM,aAAa,GAAiB,EAAE,CAAA;QACtC,MAAM,aAAa,GAAiB,EAAE,CAAA;QACtC,MAAM,OAAO,GAAyB,EAAE,CAAA;QACxC,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAA;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,CAAA;QAC7B,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,KAAK,SAAS,CAAC,MAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACzH,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACrI,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAErI,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAe,CAAA;QACnC,MAAM,OAAO,GAAU,EAAE,CAAA;QACzB,MAAM,OAAO,GAAuB,EAAE,CAAA;QACtC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QAExE,MAAM,EAAE,GAAY;YAClB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACzB,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;YACjE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE;YAClC,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,WAAW;YACpC,QAAQ;YACR,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACvB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBACnC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;gBACtG,OAAO,CAAC,CAAA;YACV,CAAC;YACD,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE;gBAC1C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;gBACrD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;gBAC9G,OAAO,CAAC,CAAA;YACV,CAAC;YACD,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBAC5B,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY;oBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YACjG,CAAC;YACD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,YAAY;YACzC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBACb,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBAChC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YACzD,CAAC;YACD,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;YAC7D,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC;YACpD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAClD,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5C,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI;YACjD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI;YACrC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,gBAAgB,EAAE;SACxD,CAAA;QAED,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAA;QAClC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtD,IAAI,MAAc,CAAA;QAClB,IAAI,OAA2B,CAAA;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAC5C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC;gBAC1B,MAAM,GAAG,CAAC,CAAC,MAAM,CAAA;gBACjB,OAAO,GAAG,CAAC,CAAC,OAAO,CAAA;gBACnB,UAAU,CAAC,KAAK,EAAE,CAAA;gBAClB,KAAK,MAAM,CAAC,IAAI,OAAO;oBAAE,CAAC,CAAC,IAAI,EAAE,CAAA;gBACjC,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,OAAO,IAAI,CAAA;gBAC/C,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAClD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,CAAA;YACT,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,MAAM,CAAA;QAC5C,IAAI,EAAE,KAAK,MAAM;YAAE,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;aAC1E,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,IAAI,OAAO;gBAAE,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;oBAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YACxD,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9D,CAAC;QACD,IAAI,EAAE,KAAK,QAAQ;YAAE,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC/C,GAAG,CAAC,QAAQ,EAAE,CAAA;QACd,QAAQ,EAAE,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;QACvD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAC7C,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;QAC7B,MAAM,IAAI,GAAG,CAAC,MAAoB,EAAU,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAA;QACzH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;IAC/F,CAAC;IAEO,YAAY;QAClB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAA;IAC1B,CAAC;IAEO,OAAO,CAAC,IAAiB,EAAE,KAAa,EAAE,QAA0B,EAAE;QAC5E,MAAM,EAAE,GAAY,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAA;QACxE,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;QACxF,OAAO,EAAE,CAAA;IACX,CAAC;IAED,4EAA4E;IAC5E,kDAAkD;IAClD,4EAA4E;IAE5E,6CAA6C;IACrC,cAAc,CAAC,IAAc,EAAE,GAAW,EAAE,GAA2B;QAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;QAClE,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,IAAI,CAAC;YACV,KAAK,OAAO;gBACV,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;YACnG,KAAK,QAAQ,CAAC;YACd,KAAK,GAAG;gBACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;YAC/E,KAAK,MAAM,CAAC;YACZ,KAAK,SAAS,CAAC;YACf,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC;oBAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;gBACpG,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;YAChE,CAAC;YACD,KAAK,MAAM;gBACT,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;YACtF;gBACE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QAC1B,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,IAAc,EAAE,GAAW,EAAE,GAA2B,EAAE,QAA6B,SAAS;QACjH,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YACrB,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;YACf,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,KAAK;SACN,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,MAAkB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,IAAI,MAAsB,CAAA;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;QACzG,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QAC1B,CAAC;QACD,MAAM,OAAO,GAAa,CAAC,GAAG,MAAM,CAAC,eAAe,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;QACxE,MAAM,QAAQ,GAAoB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAClF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/H,IAAI,WAAW;YAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC9C,QAAQ,CAAC,OAAO,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAA;QAC/D,IAAI,QAAQ,GAAqB,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;QACzH,MAAM,GAAG,GAAmB;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;YACtB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO;YACP,eAAe,EAAE,MAAM,CAAC,QAAQ,KAAK,KAAK;YAC1C,QAAQ;YACR,QAAQ;YACR,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,CAAA;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACrC,IAAI,IAAI,GAAwB,SAAS,CAAA;QACzC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa;YAAE,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACzF,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAA;QACjJ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,GAAG,CAAA;QAC/C,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,KAAK,OAAO;oBACV,QAAQ,GAAG,OAAO,CAAA;oBAClB,MAAK;gBACP,KAAK,MAAM;oBACT,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;oBACtI,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAAA;gBAC/E,KAAK,OAAO;oBACV,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;oBACtI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAAA;gBAChF,KAAK,UAAU;oBACb,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAA;YACjH,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,qBAAqB,QAAQ,EAAE,EAAE,CAAA;YAChD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;YACzH,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAC5G,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACtD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;QAClE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,OAAO,EAAE,CAAA;IACpE,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAAiB,EAAE,IAAY;QAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;QACvE,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QACtE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAA;QAC3D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,qBAAqB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;YAClG,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC9G,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,GAAG,CAAA;YAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAC5G,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;IAC/C,CAAC;CACF;AAED,OAAO,EAAE,OAAO,EAAE,CAAA"}