@wernerbisschoff/pi-gatekeeper 0.1.1 → 0.1.3

package/dist/default-rules.json

@@ -71,6 +71,8 @@
         "basename *",
         "env",
         "env *",
+        "grep",
+        "grep *",
         "printenv",
         "printenv *",
         "ps",

package/dist/gatekeeper.d.ts

@@ -51,6 +51,24 @@ export type PermissionDecision = {
     decision: "allow" | "ask" | "deny";
     reason: string;
 };
+/**
+ * Outcome of prompting for a compound (multi-segment) command. Maps each segment to its
+ * scoped decision and records whether the Allow All Once shortcut was triggered.
+ * Used as the return type of {@link promptForCompoundCommand} (FLOW-12 Step 3).
+ *
+ * Flow references:
+ * - FLOW-12 Step 3 ("CompoundDecision as return type of promptForCompoundCommand")
+ * - FLOW-08 Step 3 (scope-based persistence routing from scope field)
+ */
+export type CompoundDecision = {
+    segments: Array<{
+        segment: string;
+        decision: "allow" | "deny";
+        scope: "ephemeral" | "session" | "persist";
+        pattern?: string;
+    }>;
+    allowAllOnceUsed: boolean;
+};
 /** ─── Sensitive Path Guard (compile-time, not user-configurable) ─── */
 /**
  * Compile-time regex pattern + human-readable label for a sensitive path category.
@@ -235,17 +253,23 @@ export declare const PERMISSION_STATUS_KEY = "perm";
  * TUI footer labels keyed by PermissionLevel. Specific emoji + label pairs are
  * documented in AC-010-01 / AC-010-02
  * (`specs/001-pi-gatekeeper/issues/001-foundation-packaging.md:33`):
- *   - `low`    → `🟢 LOW`     (green circle = restricted/safe)
- *   - `medium` → `🟡 MEDIUM`  (yellow circle = balanced)
- *   - `high`   → `🟠 HIGH`    (orange circle = permissive/warning)
+ *   - `low`    → `LOW`      (restricted/safe)
+ *   - `medium` → `MEDIUM`   (balanced)
+ *   - `high`   → `HIGH`     (permissive)
  * The status key (`PERMISSION_STATUS_KEY`) is reserved by `architecture.md:157` — no other extension
  * may write to it (otherwise the level indicator could be shadowed on the TUI footer).
  */
+/**
+ * Plain-text level labels used by {@link updateStatus} to build the
+ * TUI footer indicator. The labels are intentionally simple — the
+ * `/perm` hint is appended at render time so the indicator is
+ * self-documenting without coloured circles.
+ */
 export declare const MODE_LABELS: Record<PermissionLevel, string>;
 /**
  * Render the active permission level into the TUI footer via `ctx.ui.setStatus(...)` using the
  * reserved `PERMISSION_STATUS_KEY`. The custom footer extension (`footer.ts`) reads the
- * `~/.pi/agent/perm-mode` file directly and overlays the circle indicator (🟢/🟡/🟠) in the
+ * `~/.pi/agent/perm-mode` file directly and overlays the level indicator in the
  * bottom powerline bar — so the `setStatus` call here serves as the fallback for built-in
  * footer mode and as a data source for any extension that reads status keys directly.
  *
@@ -521,34 +545,80 @@ export declare function isEnvAssignment(segment: string): boolean;
  */
 export declare function stripLeadingEnvAssignments(command: string): string;
 /**
- * Compute the list of entries that "Allow Always" will persist for `command`, in the
- * AC-008-01-mandated order: **first non-bare segment, then full trimmed command, then remaining
- * non-bare segments in parser order**. Bare-path entries are filtered by
- * {@link isBarePath} so `/tmp/out` / `~/notes.md`-style tokens do not escape as standalone
- * allowlist entries. Duplicates are removed with an order-preserving Set-then-spread pass so the
- * "full + segments" formula collapses to a single entry when the full command equals the first
- * segment (e.g. `echo hello` → `["echo hello"]`).
- *
- * **Ordering contract** (PRD AC-008-01 verbatim — pinned by `test/allowlist.test.ts`):
- *   - `getAllowListEntries("npm install express && npm test")`
- *     → `["npm install express", "npm install express && npm test", "npm test"]`
- *   - `getAllowListEntries("a && b && c")` → `["a", "a && b && c", "b", "c"]`
- *   - `getAllowListEntries("cat /tmp/output.txt")` → `["cat /tmp/output.txt"]`
- *     (bare path inside the segment survives; the bare path as a standalone entry is filtered)
- *   - `getAllowListEntries("echo hello")` → `["echo hello"]` (single segment, no dedup)
- *   - `getAllowListEntries("npm test && npm test")` → `["npm test", "npm test && npm test"]`
- *     (first-occurrence-wins dedup; duplicate segment removed, full compound preserved)
- *
- * Contract anchors:
- *   - `data-model.md:177-228` (FR-008: allowlist entry computation)
- *   - PRD AC-008-01 / AC-008-02 / AC-008-03 (`["npm install express", "npm install express && npm test", "npm test"]`)
- *   - `architecture.md:152-163` (prompt preview ordering)
- *
- * Pure data transformation — no I/O, no `ExtensionContext`, no `os.homedir()` access. The
- * empty-input early-return keeps dedup logic clean and matches PRD's "empty command → empty array"
- * exception strategy.
+ * Compute allowlist entries for a command — returns the FULL parsed segments
+ * (not command stems). These entries are used by:
+ *   - `promptForPermission` for the "Will allow" preview (which further filters
+ *     to show only the "ask" segments' command stems)
+ *   - `appendStemsToAllowList` for persistence (each entry is already a command stem
+ *     extracted by the caller — this function does NOT do the stem extraction)
+ *   - "allow-session" and "allow-once" for session/ephemeral caching of the
+ *     full resolved command
+ *
+ * Returns full segments so the caller can decide how to display/persist them.
  */
 export declare function getAllowListEntries(command: string): string[];
+/**
+ * Compute the list of positional wildcard candidates for a single shell segment. Used by
+ * FLOW-12's segment-by-segment prompt (TSK-009-04) to build `<candidate> * This Session` and
+ * `<candidate> * Always` options from the segment's executable token chain.
+ *
+ * Pipeline:
+ *   1. {@link stripLeadingEnvAssignments} — drop transient `VAR=val` prefixes so they do not
+ *      leak into the candidate list.
+ *   2. {@link splitShellWords} — tokenize on whitespace, respecting single/double quotes so
+ *      `"hello world"` is one token, not two.
+ *   3. {@link stripRedirectsFromTokens} — drop redirect operators (`>`, `>>`, `<`, `<<`,
+ *      `2>`, `2>&1`, …) and their targets so `pnpm exec biome check test/ 2>&1` produces the
+ *      same candidates as `pnpm exec biome check test/`.
+ *   4. Prefix-depth unfolding — emit one candidate per prefix depth `k`:
+ *      `<tokens[0..k).join(" ") + " *">`. The wildcard is always on the LAST emitted token,
+ *      never between tokens.
+ *
+ * Contract (pinned by `test/prompt.test.ts` FLOW-12 sub-describe):
+ *   - `unfoldPositionalCandidates("pnpm exec biome check test/")` →
+ *     `["pnpm *", "pnpm exec *", "pnpm exec biome *", "pnpm exec biome check *", "pnpm exec biome check test/ *"]`
+ *   - `unfoldPositionalCandidates("pnpm exec biome check test/ 2>&1")` → identical to above
+ *     (the `2>&1` redirect contributes nothing).
+ *   - `unfoldPositionalCandidates("> /dev/null")` → `[]` (bare redirect consumes its target).
+ *   - `unfoldPositionalCandidates("NODE_ENV=test pnpm test")` → `["pnpm *", "pnpm test *"]`
+ *     (env-var prefix stripped, then unfolded).
+ *   - `unfoldPositionalCandidates("head")` → `["head *"]` (single-word segment).
+ *   - `unfoldPositionalCandidates("")` → `[]` (empty / whitespace-only inputs never throw).
+ *
+ * Pure function — no I/O, no side effects, no module-level state. O(n) over the segment's
+ * character count.
+ *
+ * Source anchor: AC-ADHOC-012-01 / AC-ADHOC-012-02 (positional wildcard unfolding).
+ */
+export declare function unfoldPositionalCandidates(segment: string): string[];
+/**
+ * Validate that every `*` wildcard in `pattern` is preceded by either a whitespace character or
+ * the start of the pattern. Used by FLOW-12 as the write-time guard inside
+ * {@link appendStemsToAllowList} (defense-in-depth) and by the ingest-time check on any
+ * programmatically-built wildcard before it lands in `perm-rules.json`.
+ *
+ * Rule (Issue 009 Hard Inclusion #2, AC-ADHOC-012-04):
+ *   - Every `*` in `pattern` MUST be at position 0 OR immediately preceded by whitespace
+ *     (` `, `\t`, or `\n`).
+ *   - Patterns without a `*` are vacuously valid.
+ *
+ * Why: a pattern like `git*` (no space before the wildcard) compiles to the regex
+ * `^git.*$`, which matches `gitlog`, `git-fetch`, and any other input that merely STARTS
+ * with `git`. The full-token-boundary rule prevents this class of accidental over-match
+ * — `git *` is the correct pattern for "git followed by anything" and matches only inputs
+ * where `git` is its own whitespace-delimited token.
+ *
+ * Pure predicate — single linear scan, O(n) over `pattern.length`. Sub-microsecond per call.
+ *
+ * Contract (pinned by `test/prompt.test.ts` FLOW-12 sub-describe):
+ *   - `validateFullTokenBoundary("git *")` → `true`
+ *   - `validateFullTokenBoundary("git*")` → `false`
+ *   - `validateFullTokenBoundary("*")` → `true` (position 0)
+ *   - `validateFullTokenBoundary("git diff *")` → `true`
+ *   - `validateFullTokenBoundary("npm install express")` → `true` (no `*`, vacuously valid)
+ *   - `validateFullTokenBoundary("")` → `true` (vacuously valid)
+ */
+export declare function validateFullTokenBoundary(pattern: string): boolean;
 /**
  * Add `command` to the in-memory ephemeral allow set so the next evaluation that matches the
  * command returns `{ allow: true }` without consulting the classifier or showing a prompt. Consumed
@@ -578,6 +648,67 @@ export declare function sessionAllow(command: string): void;
  * {@link setCurrentMode}.
  */
 export declare function isSessionAllowed(command: string): boolean;
+/**
+ * Set the Allow All Once flag. After this call, the next
+ * {@link consumeAllowAllOnce} returns `true` and clears the flag.
+ * Exported so the TSK-009-03 lifecycle tests can drive it directly
+ * without going through {@link promptForCompoundCommand}.
+ */
+export declare function setAllowAllOnce(): void;
+/**
+ * Consume (read-and-clear) the Allow All Once flag. Returns `true`
+ * exactly once when the flag was set by a prior {@link setAllowAllOnce}
+ * call; subsequent calls return `false` until the flag is re-set.
+ * This one-shot semantics mirrors the existing {@link isEphemeralAllowed}
+ * pattern.
+ */
+export declare function consumeAllowAllOnce(): boolean;
+/**
+ * Unconditionally clear the Allow All Once flag. Idempotent — calling
+ * when the flag is already `false` is a no-op. Primed as the test-teardown
+ * seam (per-test `beforeEach` in the FLOW-12 lifecycle describe); intended
+ * for cleanup after compound command execution resolves (FLOW-12 Step 8 —
+ * integration pending).
+ */
+export declare function resetAllowAllOnce(): void;
+/**
+ * Persist command stems from "ask" segments to the current level's allow list.
+ * Each stem is written in two forms — bare (`"git diff"`) and wildcard (`"git diff *"`)
+ * — matching the default-rules convention without being overly broad (`"git *"`
+ * would allow all subcommands). Dedup via {@link appendUnique} so re-clicking
+ * "Allow Always" on the same compound does NOT duplicate entries.
+ *
+ * Defense-in-depth (Issue 009 §Hard Inclusion #2, AC-ADHOC-012-04): each candidate
+ * is filtered through {@link validateFullTokenBoundary}, silently dropping
+ * glued-wildcard forms (`"git*"`) so future programmatic callers (FLOW-12's
+ * `promptForCompoundCommand`) cannot seed `perm-rules.json` with an over-broad
+ * pattern that would match `gitlog` / `git-fetch`. Empty input is a no-op (no write).
+ */
+export declare function appendStemsToAllowList(stems: readonly string[], ctx: ExtensionContext): void;
+/**
+ * Segment-by-segment interactive prompt for compound commands (FLOW-12).
+ *
+ * For each "ask" segment, computes positional wildcard candidates via
+ * {@link unfoldPositionalCandidates}, presents them in a `ctx.ui.select()`
+ * dialog with Allow All Once / This Session / Always / Deny options, and
+ * returns a {@link CompoundDecision} mapping each segment to its scoped result.
+ *
+ * The Allow All Once option short-circuits remaining segments without prompting
+ * and sets the Allow All Once flag so {@link runPermissionGate} can skip
+ * re-prompting for subsequent segments of the same compound execution.
+ *
+ * Headless short-circuit (FLOW-11): when `ctx.hasUI === false`, returns an empty
+ * `CompoundDecision` immediately without calling `ctx.ui.select` — the caller
+ * should treat this as a deny per the existing headless auto-deny contract.
+ * Similarly, when `ctx.ui.select` is not a function (UI is absent at runtime),
+ * returns an empty result conservatively.
+ *
+ * Flow references:
+ *   - FLOW-12 Step 3 ("segment-by-segment prompt loop")
+ *   - FLOW-12 Step 8 ("Allow All Once flag lifecycle")
+ *   - FLOW-08 Step 3 ("scope-based persistence routing")
+ */
+export declare function promptForCompoundCommand(segments: string[], ctx: ExtensionContext): Promise<CompoundDecision>;
 /**
  * Four-branch permission gate — the user-visible keystone for FLOW-07 (interactive prompt),
  * FLOW-08 (scope: ephemeral / persist-allow / persist-deny), and FLOW-11 (headless auto-deny).

package/dist/gatekeeper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gatekeeper.d.ts","sourceRoot":"","sources":["../src/gatekeeper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH,OAAO,KAAK,EAGV,YAAY,EACZ,gBAAgB,EAGjB,MAAM,iCAAiC,CAAC;AAKzC,mEAAmE;AAEnE,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AACxD;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG,eAAe,GAAG,KAAK,CAAC;AAE7D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IACpC,KAAK,EAAE;QACL,GAAG,EAAE,UAAU,CAAC;QAChB,MAAM,EAAE,UAAU,CAAC;QACnB,IAAI,EAAE,UAAU,CAAC;KAClB,CAAC;CACH;AAED;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,yEAAyE;AAEzE;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;CACpC;AAED;;;;;;GAMG;AACH,QAAA,MAAM,MAAM;;;;;;;;;;;;;CAaF,CAAC;AAEX;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,OAAO,MAAM,CAAC,CAAC;AAEtE;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EA6BnD,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAgC,CAAC;AAEpE;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,kBAAkB,GAAG,EAAE,CAAA;CAAE,CAOhG;AA4KD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,GAAG,CAAC,EAAE,gBAAgB,GACrB,IAAI,CAON;AAED,yDAAyD;AAEzD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAIrC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,eAAe,CASlD;AAiDD;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,eAAe,CAEhD;AAkED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,eAAe,CA+BnF;AAsCD;;;GAGG;AACH,wBAAgB,cAAc,IAAI,eAAe,CAEhD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAI3D;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,SAAS,CAAC;AAE5C;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAIvD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CASxD;AAED,6CAA6C;AAE7C;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAuD/C;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CASxD;AAED,2CAA2C;AAE3C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAIrD;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAMlE;AAqDD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAiBzD;AAgCD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAS3F;AAED,6DAA6D;AAE7D;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAqalC,gEAAgE;AAEhE;;;;;;GAMG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAInD;AAED,oGAAoG;AACpG,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAGxC;AAqJD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,eAAe,GACrB,kBAAkB,CAcpB;AAiBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI9E;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,eAAe,GACrB,kBAAkB,CAwCpB;AA+ID,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,EAAE,CAyO9D;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKjD;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAExD;AA2CD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAelE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CA6B7D;AAcD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAEpD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAM3D;AAeD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAElD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEzD;AA8HD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC;IACT,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,eAAe,CAAC;QAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACtF,CAAC,CA4FD;AA2UD,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CA4CzD"}
+{"version":3,"file":"gatekeeper.d.ts","sourceRoot":"","sources":["../src/gatekeeper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH,OAAO,KAAK,EAGV,YAAY,EACZ,gBAAgB,EAGjB,MAAM,iCAAiC,CAAC;AAKzC,mEAAmE;AAEnE,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AACxD;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG,eAAe,GAAG,KAAK,CAAC;AAE7D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IACpC,KAAK,EAAE;QACL,GAAG,EAAE,UAAU,CAAC;QAChB,MAAM,EAAE,UAAU,CAAC;QACnB,IAAI,EAAE,UAAU,CAAC;KAClB,CAAC;CACH;AAED;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,KAAK,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;QAC3B,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;QAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,yEAAyE;AAEzE;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;CACpC;AAED;;;;;;GAMG;AACH,QAAA,MAAM,MAAM;;;;;;;;;;;;;CAaF,CAAC;AAEX;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,OAAO,MAAM,CAAC,CAAC;AAEtE;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EA6BnD,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAgC,CAAC;AAEpE;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,kBAAkB,GAAG,EAAE,CAAA;CAAE,CAOhG;AA4KD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,GAAG,CAAC,EAAE,gBAAgB,GACrB,IAAI,CAON;AAED,yDAAyD;AAEzD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAIrC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,eAAe,CASlD;AAiDD;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,eAAe,CAEhD;AAkED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,eAAe,CA+BnF;AAsCD;;;GAGG;AACH,wBAAgB,cAAc,IAAI,eAAe,CAEhD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAI3D;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,SAAS,CAAC;AAE5C;;;;;;;;;GASG;AACH;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAIvD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAaxD;AAED,6CAA6C;AAE7C;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAuD/C;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CASxD;AAED,2CAA2C;AAE3C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAIrD;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAMlE;AAqDD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAiBzD;AAgCD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAS3F;AAED,6DAA6D;AAE7D;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAqalC,gEAAgE;AAEhE;;;;;;GAMG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAInD;AAED,oGAAoG;AACpG,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAGxC;AAwID;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,eAAe,GACrB,kBAAkB,CAcpB;AAiBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI9E;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,eAAe,GACrB,kBAAkB,CAiDpB;AA+ID,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,EAAE,CAyO9D;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKjD;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAExD;AA2CD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAelE;AA4DD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAyB7D;AA8CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAWpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAWlE;AAcD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAEpD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAM3D;AAeD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAElD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEzD;AAcD;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAM7C;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAExC;AAeD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAY5F;AA8MD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAAE,EAClB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAuD3B;AAiCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC;IACT,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,eAAe,CAAC;QAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACtF,CAAC,CA0ID;AAsVD,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CA4CzD"}