@xth26/dsh-plan-build-mode 0.3.1 → 0.5.0

package/lib/index.js

@@ -1,38 +1,56 @@
 /**
  * Host half of `dsh-plan-build-mode`.
  *
- * Implements an OpenCode-style Plan / Build mode that is independent from
- * DSH's built-in `/plan` soft-guidance mode:
+ * Implements an OpenCode-style Plan / Build mode with a tool permission gate:
  *
  * - `/plan-build`             -> Toggle between Plan and Build modes
  * - `/plan-build status`      -> Show the current mode
- * - `/plan-build switch plan`  -> Plan mode + read-only sandbox
- * - `/plan-build switch build` -> Build mode + workspace-write sandbox
- * - Blocks `write`/`edit` tool calls while in Plan mode
+ * - `/plan-build switch plan`  -> Plan mode (read-only by policy)
+ * - `/plan-build switch build` -> Build mode (writable)
+ * - `/permission status|allow|deny` -> Inspect / adjust the permission gate
+ * - Denies write-category tools while in Plan mode (OpenCode `edit` permission)
+ * - Permits reads outside the workspace (DSH reads pass through every mode);
+ *   external writes stay gated by the sandbox unless `external_directory` is
+ *   configured to `ask`
  * - Injects a `plan-build:policy` system prompt section
  *
+ * Mode state lives in the plugin-owned `plan-build/mode` session event; the
+ * `sandbox/mode` event is still written for sandbox enforcement whenever the
+ * target sandbox actually differs.
+ *
  * @module dsh-plan-build-mode
  */
 import z from '@deepseek-ai/schemastery';
-import { DEFAULT_BUILD_SANDBOX, DEFAULT_PLAN_SANDBOX, isPlanModeActive, planModeDenial, setPlanBuildMode, WRITE_TOOLS, } from "./helpers.js";
+import { currentPlanBuildMode, currentSandboxMode, DEFAULT_BUILD_SANDBOX, DEFAULT_PLAN_SANDBOX, isPlanModeActive, setPlanBuildMode, } from "./helpers.js";
+import { approvalDenyReason, canonicalize, categoryDenyReason, categoryOf, DEFAULT_ACTIONS, DEFAULT_EXTERNAL_DEFAULT, DEFAULT_PERMISSION, DEFAULT_PLAN_OVERRIDES, extractCommand, extractTargets, externalDenyReason, externalWriteEscalationReason, gateDecision, matchSubjectsFor, noApprovalChannelReason, planWriteDenyReason, resolveCategory, resolveTarget, sandboxAllowsWrite, } from "./permissions.js";
 /** Cordis plugin name. */
 export const name = 'dsh-plan-build-mode';
-/** Service dependencies for the host half. */
-export const inject = ['agents', 'tools', 'systemPrompt'];
+/**
+ * Service dependencies for the host half. `commands` is injected optionally at
+ * runtime via ctx.inject(['commands'], ...) so headless assemblies stay
+ * unaffected; `approval` is read optionally via ctx.get('approval').
+ */
+export const inject = ['tools', 'systemPrompt'];
+const PERMISSION_ACTIONS = z.union([z.const('allow'), z.const('ask'), z.const('deny')]);
+const PERMISSION_VALUE = z.union([PERMISSION_ACTIONS, z.dict(PERMISSION_ACTIONS)]);
+const CATEGORY_MAP = z.dict(PERMISSION_VALUE);
+const SANDBOX = z.union([z.const('read-only'), z.const('workspace-write'), z.const('danger-full-access')]);
 /** Configuration schema. */
 export const Config = z.object({
-    planSandbox: z.union([
-        z.const('read-only'),
-        z.const('workspace-write'),
-        z.const('danger-full-access'),
-    ]).required(false),
-    buildSandbox: z.union([
-        z.const('read-only'),
-        z.const('workspace-write'),
-        z.const('danger-full-access'),
-    ]).required(false),
+    planSandbox: SANDBOX.required(false),
+    buildSandbox: SANDBOX.required(false),
     denyWriteTools: z.boolean().default(true),
     section: z.boolean().default(true),
+    plansDirectory: z.string().default('.opencode/plans'),
+    permission: CATEGORY_MAP.required(false),
+    externalDirectory: z.object({
+        default: PERMISSION_ACTIONS.required(false),
+        rules: z.array(z.object({ pattern: z.string(), action: PERMISSION_ACTIONS })).required(false),
+    }).required(false),
+    modes: z.object({
+        plan: CATEGORY_MAP.required(false),
+        build: CATEGORY_MAP.required(false),
+    }).required(false),
 });
 /**
  * Plugin entry point.
@@ -42,18 +60,22 @@ export const Config = z.object({
 export function apply(ctx, config = {}) {
     const planSandbox = config.planSandbox ?? DEFAULT_PLAN_SANDBOX;
     const buildSandbox = config.buildSandbox ?? DEFAULT_BUILD_SANDBOX;
-    if (planSandbox === buildSandbox) {
-        throw new Error(`planSandbox and buildSandbox must be different, but both are '${planSandbox}'.`);
-    }
     const denyWriteTools = config.denyWriteTools !== false;
     const enableSection = config.section !== false;
+    const plansDirectory = config.plansDirectory ?? '.opencode/plans';
+    // Session-scoped external-path allowlist (OpenCode "always", in-memory).
+    const allowlist = new Map();
+    const executionConfig = {
+        planSandbox,
+        buildSandbox,
+        denyWriteTools,
+        plansDirectory,
+        permission: config.permission,
+        externalDirectory: config.externalDirectory,
+        modes: config.modes,
+    };
     ctx.effect(() => {
         const disposers = [];
-        // Align existing sessions on load (resumed sessions may already have
-        // sandbox/mode events).
-        for (const _agent of ctx.agents.list()) {
-            // No-op on load: state is already in the log; we only react to commands.
-        }
         // Inject a system prompt section describing the current mode.
         if (enableSection) {
             disposers.push(ctx.systemPrompt.section({
@@ -63,23 +85,48 @@ export function apply(ctx, config = {}) {
                     const agent = context.agent;
                     if (agent === undefined)
                         return '';
-                    return isPlanModeActive(agent.session.events, planSandbox)
-                        ? 'You are in OpenCode Plan Mode. You are READ-ONLY. You may read files, search code, browse directories, ask questions, and inspect data or run quick read-only sanity checks. You are encouraged to write short command-line Python snippets (for example, python -B -c "...") to read data files, compute statistics, sample records, or run fast tests that do not modify the filesystem or write caches. Avoid commands that install packages, write files, generate build artifacts, or change the system. If a verification requires writing files, leave it for Build Mode. Present a complete plan and use /plan-build (or /plan-build switch build) to enter Build Mode before implementing.'
-                        : 'You are in OpenCode Build Mode. You may edit files, run commands, and execute the approved plan. Make minimal changes, run tests/verification after changes, and ask for confirmation before destructive git operations or system-wide changes. Run /plan-build (or /plan-build switch plan) to return to Plan Mode when you need to re-plan.';
+                    return isPlanModeActive(agent.session, planSandbox)
+                        ? 'You are in OpenCode Plan Mode. You are READ-ONLY: you may not modify files except under the configured plans directory. You may read files anywhere (including outside the workspace), search code, browse directories, ask questions, and inspect data or run quick read-only sanity checks. You are encouraged to write short command-line Python snippets (for example, python -B -c "...") to read data files, compute statistics, sample records, or run fast tests that do not modify the filesystem or write caches. Avoid commands that install packages, write files, generate build artifacts, or change the system. If a verification requires writing files, leave it for Build Mode. Present a complete plan and use /plan-build (or /plan-build switch build) to enter Build Mode before implementing. In Plan Mode you may write plan files only under the configured plans directory.'
+                        : 'You are in OpenCode Build Mode. You may edit files, run commands, and execute the approved plan. Make minimal changes, run tests/verification after changes, and ask for confirmation before destructive git operations or system-wide changes. Run /plan-build (or /plan-build switch plan) to return to Plan Mode when you need to re-plan. Reading files outside the session workspace is allowed; writing outside the workspace requires sandbox escalation (retry with sandbox_permissions + justification).';
                 },
             }));
         }
-        // Block mutating tool calls while in Plan mode.
+        // The tool permission gate (OpenCode `permission` + `external_directory`).
         disposers.push(ctx.on('tools/pre-execute', async (exec, next) => {
-            if (!denyWriteTools)
-                return next();
-            const reason = planModeDenial(exec, planSandbox, WRITE_TOOLS);
-            if (reason !== undefined)
-                return { kind: 'deny', reason };
+            const decision = await evaluateExecution(exec, executionConfig, allowlist, ctx);
+            if (decision.kind === 'deny')
+                return { kind: 'deny', reason: decision.reason };
             return next();
         }));
-        // User-facing slash command to check or switch Plan/Build mode.
-        // Activates only when a command registry is composed (headless assemblies stay unaffected).
+        // Pin a deterministic mode event on new sessions (and legacy-loaded ones)
+        // so mode state does not depend on sandbox inference forever.
+        const pinMode = (session) => {
+            if (currentPlanBuildMode(session, planSandbox) !== undefined)
+                return;
+            const sandbox = currentSandboxMode(session);
+            let inferred;
+            if (sandbox === undefined) {
+                inferred = 'build';
+            }
+            else if (planSandbox !== buildSandbox) {
+                inferred = sandbox === planSandbox ? 'plan' : 'build';
+            }
+            else {
+                inferred = sandbox === 'read-only' ? 'plan' : 'build';
+            }
+            session.append('plan-build/mode', { mode: inferred });
+        };
+        disposers.push(ctx.on('session/created', pinMode));
+        const sessions = ctx.sessions;
+        if (sessions !== undefined) {
+            for (const session of sessions.list())
+                pinMode(session);
+        }
+        // Drop session-scoped allowlist entries when their session is disposed.
+        disposers.push(ctx.on('session/disposed', (session) => {
+            allowlist.delete(session.id);
+        }));
+        // User-facing slash commands: mode toggle + permission gate control.
         ctx.inject(['commands'], (commandCtx) => {
             disposers.push(commandCtx.commands.register({
                 name: 'plan-build',
@@ -87,7 +134,7 @@ export function apply(ctx, config = {}) {
                 input: { hint: '[status | switch [plan|build]]' },
                 handler: ({ agent, rawInput }) => {
                     const arg = rawInput.trim().toLowerCase();
-                    const active = isPlanModeActive(agent.session.events, planSandbox);
+                    const active = isPlanModeActive(agent.session, planSandbox);
                     if (arg === '' || arg === 'switch') {
                         const next = active ? 'build' : 'plan';
                         setPlanBuildMode(agent, next, planSandbox, buildSandbox);
@@ -100,7 +147,7 @@ export function apply(ctx, config = {}) {
                         return {
                             kind: 'success',
                             text: active
-                                ? 'Plan mode is active (read-only). Run /plan-build to enter Build mode, or /plan-build switch build.'
+                                ? 'Plan mode is active (read-only by policy). Run /plan-build to enter Build mode, or /plan-build switch build.'
                                 : 'Build mode is active. Run /plan-build to enter Plan mode, or /plan-build switch plan.',
                         };
                     }
@@ -125,6 +172,43 @@ export function apply(ctx, config = {}) {
                     return { kind: 'success', text: `Switched to ${target} mode.` };
                 },
             }));
+            disposers.push(commandCtx.commands.register({
+                name: 'permission',
+                description: 'Inspect or adjust the OpenCode-style permission gate (external-path allowlist)',
+                input: { hint: '[status | allow <pattern> | deny <pattern>]' },
+                handler: ({ agent, rawInput }) => {
+                    const arg = rawInput.trim();
+                    const sessionId = agent.session.id;
+                    const entries = allowlist.get(sessionId) ?? [];
+                    if (arg === '' || arg === 'status') {
+                        const rules = (config.externalDirectory?.rules ?? []).map((r) => `${r.pattern}=${r.action}`).join(', ');
+                        return {
+                            kind: 'success',
+                            text: [
+                                'Permission gate status:',
+                                `- external_directory default: ${config.externalDirectory?.default ?? DEFAULT_EXTERNAL_DEFAULT}`,
+                                `- external_directory rules: ${rules || '(none)'}`,
+                                `- session allowlist: ${entries.join(', ') || '(empty)'}`,
+                            ].join('\n'),
+                        };
+                    }
+                    const parts = arg.split(/\s+/);
+                    const verb = parts[0] ?? '';
+                    const pattern = parts.slice(1).join(' ');
+                    if (verb === 'allow' && pattern !== '') {
+                        if (!entries.includes(pattern)) {
+                            entries.push(pattern);
+                            allowlist.set(sessionId, entries);
+                        }
+                        return { kind: 'success', text: `Allowed external path pattern for this session: ${pattern}` };
+                    }
+                    if (verb === 'deny' && pattern !== '') {
+                        allowlist.set(sessionId, entries.filter((p) => p !== pattern));
+                        return { kind: 'success', text: `Removed external path pattern from this session's allowlist: ${pattern}` };
+                    }
+                    return { kind: 'error', text: 'Usage: /permission status, /permission allow <pattern>, or /permission deny <pattern>.' };
+                },
+            }));
         });
         return () => {
             for (const dispose of disposers)
@@ -132,4 +216,74 @@ export function apply(ctx, config = {}) {
         };
     });
 }
+/** The plugin's view of the effective category policy for a mode. */
+function categorySpecFor(config, mode, category) {
+    const globalValue = config.permission?.[category] ?? DEFAULT_PERMISSION[category];
+    const modeValue = mode === 'plan'
+        ? (config.modes?.plan?.[category] ?? (category === 'edit' && !config.denyWriteTools ? 'allow' : DEFAULT_PLAN_OVERRIDES[category]))
+        : config.modes?.build?.[category];
+    return resolveCategory(modeValue ?? globalValue, DEFAULT_ACTIONS[category]);
+}
+/** Evaluate one tool call through the permission gate; pure decision + approval. */
+async function evaluateExecution(exec, config, allowlist, ctx) {
+    if (exec.agent === undefined)
+        return { kind: 'allow' };
+    const session = exec.agent.session;
+    const mode = currentPlanBuildMode(session, config.planSandbox) ?? 'build';
+    const workspaceRoot = canonicalize(session.header.cwd ?? process.cwd());
+    const plansDir = canonicalize(resolveTarget(config.plansDirectory, workspaceRoot));
+    const category = categoryOf(exec.name);
+    const targets = extractTargets(exec.name, exec.arguments).map((t) => canonicalize(resolveTarget(t, workspaceRoot)));
+    const command = extractCommand(exec.name, exec.arguments);
+    const matchSubjects = matchSubjectsFor(exec.name, targets, workspaceRoot, command);
+    const effectiveSandbox = currentSandboxMode(session);
+    const decision = gateDecision({
+        mode,
+        category,
+        targets,
+        matchSubjects,
+        workspaceRoot,
+        plansDir,
+        allowlist: allowlist.get(session.id) ?? [],
+        externalDefault: config.externalDirectory?.default ?? DEFAULT_EXTERNAL_DEFAULT,
+        externalRules: config.externalDirectory?.rules,
+        categorySpec: category === undefined ? { action: 'allow' } : categorySpecFor(config, mode, category),
+        sandboxAllowsWrite: (target) => sandboxAllowsWrite(effectiveSandbox, target, workspaceRoot),
+    });
+    if (decision.kind === 'allow')
+        return { kind: 'allow' };
+    if (decision.kind === 'deny')
+        return { kind: 'deny', reason: denialReason(exec.name, mode, category, decision) };
+    // ask → approval channel (fail closed on any resolution problem).
+    const approval = ctx.get?.('approval');
+    if (approval === undefined)
+        return { kind: 'deny', reason: noApprovalChannelReason(exec.name) };
+    let outcome;
+    try {
+        outcome = await approval.request({
+            agent: exec.agent,
+            toolName: exec.name,
+            callId: exec.callId,
+            reason: `permission gate: ${exec.name} requires approval under the configured permission`,
+            signal: exec.signal,
+        });
+    }
+    catch {
+        return { kind: 'deny', reason: `Tool '${exec.name}' requires approval, but the approval request failed closed.` };
+    }
+    if (outcome !== 'allowed-once')
+        return { kind: 'deny', reason: approvalDenyReason(exec.name, outcome) };
+    return { kind: 'allow' };
+}
+/** Map a gate decision onto a model-facing reason string. */
+function denialReason(toolName, mode, category, decision) {
+    if (decision.code === 'plan-write' || (mode === 'plan' && category === 'edit' && decision.code === 'category-deny')) {
+        return planWriteDenyReason(toolName);
+    }
+    if (decision.code === 'external-deny')
+        return externalDenyReason(toolName, decision.target ?? '');
+    if (decision.code === 'external-write-escalation')
+        return externalWriteEscalationReason(toolName, decision.target ?? '');
+    return categoryDenyReason(toolName, decision.subject);
+}
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAWxC,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,WAAW,GACZ,MAAM,cAAc,CAAA;AAGrB,0BAA0B;AAC1B,MAAM,CAAC,MAAM,IAAI,GAAG,qBAAqB,CAAA;AACzC,8CAA8C;AAC9C,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAU,CAAA;AAClE,4BAA4B;AAC5B,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC;QACnB,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;QACpB,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC1B,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;KAC9B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IAClB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC;QACpB,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;QACpB,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC1B,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;KAC9B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IAClB,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACnC,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAA8B,EAAE;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,oBAAoB,CAAA;IAC9D,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAA;IACjE,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,iEAAiE,WAAW,IAAI,CAAC,CAAA;IACnG,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,KAAK,KAAK,CAAA;IACtD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,KAAK,KAAK,CAAA;IAE9C,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,MAAM,SAAS,GAAmB,EAAE,CAAA;QAEpC,qEAAqE;QACrE,wBAAwB;QACxB,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAiC,EAAE,CAAC;YACtE,yEAAyE;QAC3E,CAAC;QAED,8DAA8D;QAC9D,IAAI,aAAa,EAAE,CAAC;YAClB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;gBACtC,IAAI,EAAE,mBAAmB;gBACzB,KAAK,EAAE,EAAE;gBACT,IAAI,CAAC,OAAwB;oBAC3B,MAAM,KAAK,GAAI,OAA4C,CAAC,KAAK,CAAA;oBACjE,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,EAAE,CAAA;oBAClC,OAAO,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC;wBACxD,CAAC,CAAC,qqBAAqqB;wBACvqB,CAAC,CAAC,+UAA+U,CAAA;gBACrV,CAAC;aACF,CAAC,CAAC,CAAA;QACL,CAAC;QAED,gDAAgD;QAChD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAmB,EAAE,IAAoC,EAA4B,EAAE;YACvI,IAAI,CAAC,cAAc;gBAAE,OAAO,IAAI,EAAE,CAAA;YAClC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;YAC7D,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YACzD,OAAO,IAAI,EAAE,CAAA;QACf,CAAC,CAAC,CAAC,CAAA;QAEH,gEAAgE;QAChE,4FAA4F;QAC5F,GAAG,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE;YACtC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1C,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,8CAA8C;gBAC3D,KAAK,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE;gBACjD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAqB,EAAiB,EAAE;oBACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;oBACzC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;oBAElE,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;wBACtC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;wBACxD,OAAO;4BACL,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,eAAe,IAAI,8CAA8C;yBACxE,CAAA;oBACH,CAAC;oBAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACrB,OAAO;4BACL,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,MAAM;gCACV,CAAC,CAAC,oGAAoG;gCACtG,CAAC,CAAC,uFAAuF;yBAC5F,CAAA;oBACH,CAAC;oBAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC9B,OAAO;4BACL,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,sFAAsF;yBAC7F,CAAA;oBACH,CAAC;oBAED,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;oBAC9D,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;wBAC5C,OAAO;4BACL,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,8DAA8D;yBACrE,CAAA;oBACH,CAAC;oBAED,MAAM,YAAY,GAAG,MAAM,KAAK,MAAM,CAAA;oBACtC,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;wBAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,MAAM,QAAQ,EAAE,CAAA;oBAChE,CAAC;oBAED,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;oBAC1D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,MAAM,QAAQ,EAAE,CAAA;gBACjE,CAAC;aACF,CAAC,CAAC,CAAA;QACL,CAAC,CAAC,CAAA;QAEF,OAAO,GAAG,EAAE;YACV,KAAK,MAAM,OAAO,IAAI,SAAS;gBAAE,OAAO,EAAE,CAAA;QAC5C,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAWxC,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,cAAc,CAAA;AAErB,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,eAAe,EACf,wBAAwB,EACxB,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,6BAA6B,EAC7B,YAAY,EACZ,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AAIzB,0BAA0B;AAC1B,MAAM,CAAC,MAAM,IAAI,GAAG,qBAAqB,CAAA;AACzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,cAAc,CAAU,CAAA;AAExD,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACvF,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAA;AAClF,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;AAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAA;AAE1G,4BAA4B;AAC5B,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IACpC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IACrC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACrD,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;IACxC,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC1B,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;KAC9F,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;QAClC,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;KACpC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;CACnB,CAAiB,CAAA;AAElB;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAA8B,EAAE;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,oBAAoB,CAAA;IAC9D,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAA;IACjE,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,KAAK,KAAK,CAAA;IACtD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,KAAK,KAAK,CAAA;IAC9C,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,iBAAiB,CAAA;IAEjE,yEAAyE;IACzE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAA;IAE7C,MAAM,eAAe,GAAoB;QACvC,WAAW;QACX,YAAY;QACZ,cAAc;QACd,cAAc;QACd,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAA;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,MAAM,SAAS,GAAmB,EAAE,CAAA;QAEpC,8DAA8D;QAC9D,IAAI,aAAa,EAAE,CAAC;YAClB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;gBACtC,IAAI,EAAE,mBAAmB;gBACzB,KAAK,EAAE,EAAE;gBACT,IAAI,CAAC,OAAwB;oBAC3B,MAAM,KAAK,GAAI,OAA4C,CAAC,KAAK,CAAA;oBACjE,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,EAAE,CAAA;oBAClC,OAAO,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC;wBACjD,CAAC,CAAC,u2BAAu2B;wBACz2B,CAAC,CAAC,mfAAmf,CAAA;gBACzf,CAAC;aACF,CAAC,CAAC,CAAA;QACL,CAAC;QAED,2EAA2E;QAC3E,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAmB,EAAE,IAAoC,EAA4B,EAAE;YACvI,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;YAC/E,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;YAC9E,OAAO,IAAI,EAAE,CAAA;QACf,CAAC,CAAC,CAAC,CAAA;QAEH,0EAA0E;QAC1E,8DAA8D;QAC9D,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAQ,EAAE;YACzC,IAAI,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,SAAS;gBAAE,OAAM;YACpE,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;YAC3C,IAAI,QAAuB,CAAA;YAC3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,QAAQ,GAAG,OAAO,CAAA;YACpB,CAAC;iBAAM,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;gBACxC,QAAQ,GAAG,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;YACvD,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;YACvD,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QACvD,CAAC,CAAA;QACD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAI,GAA4C,CAAC,QAAQ,CAAA;QACvE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;gBAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QACzD,CAAC;QAED,wEAAwE;QACxE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,OAAgB,EAAE,EAAE;YAC7D,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAC,CAAA;QAEH,qEAAqE;QACrE,GAAG,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE;YACtC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1C,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,8CAA8C;gBAC3D,KAAK,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE;gBACjD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAqB,EAAiB,EAAE;oBACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;oBACzC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;oBAE3D,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;wBACtC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;wBACxD,OAAO;4BACL,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,eAAe,IAAI,8CAA8C;yBACxE,CAAA;oBACH,CAAC;oBAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACrB,OAAO;4BACL,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,MAAM;gCACV,CAAC,CAAC,8GAA8G;gCAChH,CAAC,CAAC,uFAAuF;yBAC5F,CAAA;oBACH,CAAC;oBAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC9B,OAAO;4BACL,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,sFAAsF;yBAC7F,CAAA;oBACH,CAAC;oBAED,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;oBAC9D,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;wBAC5C,OAAO;4BACL,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,8DAA8D;yBACrE,CAAA;oBACH,CAAC;oBAED,MAAM,YAAY,GAAG,MAAM,KAAK,MAAM,CAAA;oBACtC,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;wBAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,MAAM,QAAQ,EAAE,CAAA;oBAChE,CAAC;oBAED,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAA;oBAC1D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,MAAM,QAAQ,EAAE,CAAA;gBACjE,CAAC;aACF,CAAC,CAAC,CAAA;YAEH,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1C,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,gFAAgF;gBAC7F,KAAK,EAAE,EAAE,IAAI,EAAE,6CAA6C,EAAE;gBAC9D,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAqB,EAAiB,EAAE;oBACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAA;oBAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAA;oBAClC,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAA;oBAE9C,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACnC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;wBACvG,OAAO;4BACL,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE;gCACJ,yBAAyB;gCACzB,iCAAiC,MAAM,CAAC,iBAAiB,EAAE,OAAO,IAAI,wBAAwB,EAAE;gCAChG,+BAA+B,KAAK,IAAI,QAAQ,EAAE;gCAClD,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE;6BAC1D,CAAC,IAAI,CAAC,IAAI,CAAC;yBACb,CAAA;oBACH,CAAC;oBAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;oBAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;oBAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBACxC,IAAI,IAAI,KAAK,OAAO,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;wBACvC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;4BAC/B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;4BACrB,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;wBACnC,CAAC;wBACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,mDAAmD,OAAO,EAAE,EAAE,CAAA;oBAChG,CAAC;oBACD,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;wBACtC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAA;wBAC9D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,gEAAgE,OAAO,EAAE,EAAE,CAAA;oBAC7G,CAAC;oBACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAA;gBAC1H,CAAC;aACF,CAAC,CAAC,CAAA;QACL,CAAC,CAAC,CAAA;QAEF,OAAO,GAAG,EAAE;YACV,KAAK,MAAM,OAAO,IAAI,SAAS;gBAAE,OAAO,EAAE,CAAA;QAC5C,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAaD,qEAAqE;AACrE,SAAS,eAAe,CACtB,MAAuB,EACvB,IAAsB,EACtB,QAAsB;IAEtB,MAAM,WAAW,GAAoB,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAClG,MAAM,SAAS,GAAgC,IAAI,KAAK,MAAM;QAC5D,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClI,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAA;IACnC,OAAO,eAAe,CAAC,SAAS,IAAI,WAAW,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC7E,CAAC;AAYD,oFAAoF;AACpF,KAAK,UAAU,iBAAiB,CAC9B,IAAmB,EACnB,MAAuB,EACvB,SAAgC,EAChC,GAAY;IAEZ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAA;IAClC,MAAM,IAAI,GAAkB,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,CAAA;IACxF,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACvE,MAAM,QAAQ,GAAG,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAA;IAClF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IACnH,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IACzD,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;IAClF,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAEpD,MAAM,QAAQ,GAAa,YAAY,CAAC;QACtC,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,aAAa;QACb,aAAa;QACb,QAAQ;QACR,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE;QAC1C,eAAe,EAAE,MAAM,CAAC,iBAAiB,EAAE,OAAO,IAAI,wBAAwB;QAC9E,aAAa,EAAE,MAAM,CAAC,iBAAiB,EAAE,KAAK;QAC9C,YAAY,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;QACpG,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,CAAC;KAC5F,CAAC,CAAA;IAEF,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACvD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAA;IAEhH,kEAAkE;IAClE,MAAM,QAAQ,GAAI,GAA2C,CAAC,GAAG,EAAE,CAAC,UAAU,CAA6B,CAAA;IAC3G,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;IAC/F,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,oBAAoB,IAAI,CAAC,IAAI,oDAAoD;YACzF,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,8DAA8D,EAAE,CAAA;IACnH,CAAC;IACD,IAAI,OAAO,KAAK,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAA;IACvG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AAC1B,CAAC;AAED,6DAA6D;AAC7D,SAAS,YAAY,CACnB,QAAgB,EAChB,IAAsB,EACtB,QAAkC,EAClC,QAA6C;IAE7C,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,CAAC,EAAE,CAAC;QACpH,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IACjG,IAAI,QAAQ,CAAC,IAAI,KAAK,2BAA2B;QAAE,OAAO,6BAA6B,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IACxH,OAAO,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;AACvD,CAAC"}

package/lib/invariant.d.ts

@@ -1,10 +1,10 @@
 /**
  * Package-owned invariant companion for `dsh-plan-build-mode`.
  *
- * This plugin stores its state entirely in the existing `sandbox/mode` event
- * (owned by `@deepseek-ai/dsh-sandbox-policy`), so there is no custom event
- * type to validate. The companion is kept as a no-op installer so downstream
- * deployments can still mount `dsh-plan-build-mode/invariant` if desired.
+ * The plugin stores its Plan/Build mode in its own `plan-build/mode` session
+ * event, so the companion validates that event's payload before it reaches
+ * the durable log. The `sandbox/mode` event it also writes is validated by
+ * `@deepseek-ai/dsh-sandbox-policy`.
  *
  * @module dsh-plan-build-mode/invariant
  */

package/lib/invariant.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invariant.d.ts","sourceRoot":"","sources":["../src/invariant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAGlD,oCAAoC;AACpC,eAAO,MAAM,IAAI,kCAAkC,CAAA;AACnD,2EAA2E;AAC3E,eAAO,MAAM,MAAM,yBAA0B,CAAA;AAO7C;;;;GAIG;AACH,eAAO,MAAM,KAAK,QAAS,OAAO,GAAG;IAAE,UAAU,EAAE,OAAO,CAAA;CAAE,KAAG,OAAO,CAAC,MAAM,IAAI,CAM9E,CAAA"}
+{"version":3,"file":"invariant.d.ts","sourceRoot":"","sources":["../src/invariant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAGlD,oCAAoC;AACpC,eAAO,MAAM,IAAI,kCAAkC,CAAA;AACnD,2EAA2E;AAC3E,eAAO,MAAM,MAAM,yBAA0B,CAAA;AA8B7C;;;;GAIG;AACH,eAAO,MAAM,KAAK,GAAI,KAAK,OAAO,GAAG;IAAE,UAAU,EAAE,OAAO,CAAA;CAAE,KAAG,OAAO,CAAC,MAAM,IAAI,CAM9E,CAAA"}

package/lib/invariant.js

@@ -1,10 +1,10 @@
 /**
  * Package-owned invariant companion for `dsh-plan-build-mode`.
  *
- * This plugin stores its state entirely in the existing `sandbox/mode` event
- * (owned by `@deepseek-ai/dsh-sandbox-policy`), so there is no custom event
- * type to validate. The companion is kept as a no-op installer so downstream
- * deployments can still mount `dsh-plan-build-mode/invariant` if desired.
+ * The plugin stores its Plan/Build mode in its own `plan-build/mode` session
+ * event, so the companion validates that event's payload before it reaches
+ * the durable log. The `sandbox/mode` event it also writes is validated by
+ * `@deepseek-ai/dsh-sandbox-policy`.
  *
  * @module dsh-plan-build-mode/invariant
  */
@@ -12,10 +12,33 @@
 export const name = 'dsh-plan-build-mode-invariant';
 /** Service required before the companion can reserve package ownership. */
 export const inject = ['invariants'];
-/** No-op installer: state lives in sandbox/mode, validated by dsh-sandbox-policy. */
-const install = Object.assign(() => {
-    // Intentionally empty: this plugin does not introduce new session event types.
-}, { inject: [] });
+/** Validate one `plan-build/mode` event before it reaches the durable log. */
+function validateEvent(event, fail) {
+    if (event.type !== 'plan-build/mode')
+        return;
+    const mode = event.data?.mode;
+    if (mode !== 'plan' && mode !== 'build') {
+        fail(`plan-build/mode carries invalid mode ${JSON.stringify(mode)}; expected 'plan' or 'build'`);
+    }
+}
+/** Validate loaded and newly appended plan-build/mode state. */
+const install = Object.assign((ctx, fail) => {
+    const seed = (session) => {
+        for (const event of session.snapshotEvents())
+            validateEvent(event, fail);
+    };
+    for (const session of ctx.sessions.list())
+        seed(session);
+    ctx.on('session/created', (session) => {
+        seed(session);
+    }, { global: true });
+    ctx.on('internal/dispatch', (_mode, eventName, args) => {
+        if (eventName !== 'session/event')
+            return;
+        const event = args[1];
+        validateEvent(event, fail);
+    }, { global: true });
+}, { inject: ['sessions'] });
 /**
  * Register the plan-build-mode invariant companion.
  * @param ctx - Cordis context carrying the invariant service.

package/lib/invariant.js.map

@@ -1 +1 @@
-{"version":3,"file":"invariant.js","sourceRoot":"","sources":["../src/invariant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,oCAAoC;AACpC,MAAM,CAAC,MAAM,IAAI,GAAG,+BAA+B,CAAA;AACnD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,YAAY,CAAU,CAAA;AAE7C,qFAAqF;AACrF,MAAM,OAAO,GAAuB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;IACrD,+EAA+E;AACjF,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;AAElB;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,GAAsC,EAAuB,EAAE,CACnF,OAAO,CAAC,OAAO,CACZ,GAAG,CAAC,UAAoF,CAAC,QAAQ,CAChG,qBAAqB,EACrB,OAAO,CACR,CACF,CAAA"}
+{"version":3,"file":"invariant.js","sourceRoot":"","sources":["../src/invariant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,oCAAoC;AACpC,MAAM,CAAC,MAAM,IAAI,GAAG,+BAA+B,CAAA;AACnD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,YAAY,CAAU,CAAA;AAE7C,8EAA8E;AAC9E,SAAS,aAAa,CAAC,KAAsC,EAAE,IAAgC;IAC7F,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAM;IAC5C,MAAM,IAAI,GAAI,KAAK,CAAC,IAA8C,EAAE,IAAI,CAAA;IACxE,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAClG,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,OAAO,GAAuB,MAAM,CAAC,MAAM,CAC/C,CAAC,GAA2G,EAAE,IAAgC,EAAE,EAAE;IAChJ,MAAM,IAAI,GAAG,CAAC,OAAyE,EAAE,EAAE;QACzF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE;YAAE,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAC1E,CAAC,CAAA;IACD,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IACxD,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,OAAyE,EAAE,EAAE;QACtG,IAAI,CAAC,OAAO,CAAC,CAAA;IACf,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACpB,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAa,EAAE,SAAiB,EAAE,IAAW,EAAE,EAAE;QAC5E,IAAI,SAAS,KAAK,eAAe;YAAE,OAAM;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAoC,CAAA;QACxD,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAC5B,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;AACtB,CAAC,EACD,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,CACzB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,GAAsC,EAAuB,EAAE,CACnF,OAAO,CAAC,OAAO,CACZ,GAAG,CAAC,UAAoF,CAAC,QAAQ,CAChG,qBAAqB,EACrB,OAAO,CACR,CACF,CAAA"}

package/lib/permissions.d.ts

@@ -0,0 +1,164 @@
+/**
+ * OpenCode-style tool permission engine for `dsh-plan-build-mode`.
+ *
+ * Models OpenCode's `permission` system — allow | ask | deny per tool
+ * category, object-syntax rules with last-match-wins, `~`/`$HOME` expansion,
+ * and the `external_directory` gate that asks for any path outside the
+ * session workspace — as pure, testable functions evaluated by the plugin's
+ * `tools/pre-execute` hook.
+ *
+ * The DSH sandbox stays the hard enforcement floor: a permission grant can
+ * never widen what the sandbox permits, and the gate only ever `ask`s for
+ * targets the sandbox can actually allow (the single-prompt principle — an
+ * external write the sandbox rejects goes straight to the existing
+ * sandbox-escalation flow instead of asking here first).
+ *
+ * @module dsh-plan-build-mode/permissions
+ */
+import type { SandboxMode } from '@deepseek-ai/dsh-sandbox';
+/** One of OpenCode's permission verdicts. */
+export type PermissionAction = 'allow' | 'ask' | 'deny';
+/** Tool categories the permission engine gates (mirrors OpenCode's permission keys). */
+export type ToolCategory = 'read' | 'edit' | 'glob' | 'grep' | 'bash' | 'pwsh' | 'webfetch' | 'websearch';
+/** A wildcard permission rule: pattern → action. */
+export interface PermissionRule {
+    pattern: string;
+    action: PermissionAction;
+}
+/** Scalar value, or object-syntax rules (`{ pattern: action, ... }`, last-match-wins). */
+export type PermissionValue = PermissionAction | Record<string, PermissionAction>;
+/** The `external_directory` gate config: default action + explicit rules. */
+export interface ExternalDirectoryConfig {
+    default?: PermissionAction;
+    rules?: PermissionRule[];
+}
+/** Per-mode permission overrides, applied over the global `permission`. */
+export interface ModePermissionConfig {
+    plan?: Partial<Record<ToolCategory, PermissionValue>>;
+    build?: Partial<Record<ToolCategory, PermissionValue>>;
+}
+/** Scalar default action per category (the fallback when no value is given). */
+export declare const DEFAULT_ACTIONS: Record<ToolCategory, PermissionAction>;
+/** Global default actions, mirroring OpenCode (most allow; `.env*` reads denied). */
+export declare const DEFAULT_PERMISSION: Record<ToolCategory, PermissionValue>;
+/** Default Plan-mode overrides (write tools denied, commands ask). */
+export declare const DEFAULT_PLAN_OVERRIDES: Partial<Record<ToolCategory, PermissionValue>>;
+/**
+ * Default `external_directory` action. Reads of files outside the workspace
+ * stay permitted (DSH reads pass through every sandbox mode); only writes are
+ * gated. Set to `'ask'` for full OpenCode behavior (external access prompts).
+ */
+export declare const DEFAULT_EXTERNAL_DEFAULT: PermissionAction;
+/** Map a tool name to its permission category, or undefined for ungated tools. */
+export declare function categoryOf(name: string): ToolCategory | undefined;
+/**
+ * Extract the model-controlled path targets from one tool call's parsed
+ * arguments. Unknown or malformed arguments yield no targets: the category
+ * gate still applies, and the sandbox remains the floor for writes.
+ */
+export declare function extractTargets(name: string, args: unknown): string[];
+/** Extract the raw command text for bash/pwsh tools (used for prefix rules). */
+export declare function extractCommand(name: string, args: unknown): string | undefined;
+/** Normalize a path/pattern for cross-platform wildcard matching (forward slashes). */
+export declare function normalizePath(p: string): string;
+/** Expand `~` / `$HOME` at the start of a pattern to the user home directory. */
+export declare function expandHome(pattern: string, home: string): string;
+/** OpenCode wildcard match: `*` = any run, `?` = one char, everything else literal. */
+export declare function wildcardMatch(pattern: string, value: string): boolean;
+/** Matching options for rule evaluation. */
+export interface RuleMatchContext {
+    /** User home for `~` expansion (defaults to `os.homedir()`). */
+    home?: string;
+    /** Whether comparisons ignore case — Windows paths. */
+    caseSensitive?: boolean;
+}
+/** Whether one permission pattern matches a value under the match context. */
+export declare function ruleMatches(pattern: string, value: string, ctx?: RuleMatchContext): boolean;
+/**
+ * Evaluate an ordered rule list against any of several subjects, last matching
+ * rule wins (OpenCode's evaluation order). Returns undefined when nothing matches.
+ */
+export declare function matchRules(rules: readonly PermissionRule[] | undefined, subjects: readonly string[], ctx?: RuleMatchContext): PermissionAction | undefined;
+/** A category's resolved policy: a scalar action plus optional object-form rules. */
+export interface ResolvedCategory {
+    action: PermissionAction;
+    rules?: readonly PermissionRule[];
+}
+/**
+ * Normalize a `PermissionValue` into a scalar action plus ordered rules. The
+ * object form's `*` key becomes the catch-all default; later matching
+ * non-`*` rules override it (last-match-wins).
+ */
+export declare function resolveCategory(value: PermissionValue | undefined, fallback: PermissionAction): ResolvedCategory;
+/** Canonicalize a path (resolve symlinks of the deepest existing ancestor). */
+export declare function canonicalize(path: string): string;
+/** Resolve a model-provided path against the session working directory. */
+export declare function resolveTarget(path: string, cwd: string): string;
+/** Whether `target` is `root` or lies beneath it (lexical, canonical spellings). */
+export declare function isUnder(target: string, root: string, caseSensitive: boolean): boolean;
+/** Host filesystem case sensitivity (Windows paths compare case-insensitively). */
+export declare function caseSensitiveHost(): boolean;
+/**
+ * Whether the effective sandbox mode would permit a WRITE to the given
+ * canonical target — the single-prompt principle: the gate only asks for
+ * writes the sandbox can actually allow.
+ */
+export declare function sandboxAllowsWrite(mode: SandboxMode | undefined, target: string, workspaceRoot: string, tempRoots?: readonly string[]): boolean;
+/** Subjects category rules are matched against: relative and absolute forms. */
+export declare function matchSubjectsFor(name: string, targets: readonly string[], workspaceRoot: string, command: string | undefined): string[];
+/** The resolved verdict of {@link gateDecision}. */
+export type Decision = {
+    kind: 'allow';
+} | {
+    kind: 'ask';
+} | {
+    kind: 'deny';
+    code: 'plan-write' | 'external-deny' | 'external-write-escalation' | 'category-deny';
+    /** The offending external target, when the denial is external. */
+    target?: string | undefined;
+    /** The matched subject, when the denial comes from a category rule. */
+    subject?: string | undefined;
+};
+/** Pure inputs for the gate's decision procedure. */
+export interface GateInput {
+    mode: 'plan' | 'build';
+    category: ToolCategory | undefined;
+    /** Canonical absolute targets (resolved + canonicalized). */
+    targets: readonly string[];
+    /** Subjects matched against category rules. */
+    matchSubjects: readonly string[];
+    /** Canonical workspace root. */
+    workspaceRoot: string;
+    /** Canonical plans directory (`workspaceRoot`/`plansDirectory`). */
+    plansDir: string;
+    /** Session-scoped allowlist patterns (OpenCode "always"). */
+    allowlist: readonly string[];
+    /** `external_directory` default action. */
+    externalDefault: PermissionAction;
+    /** `external_directory` explicit rules (last-match-wins). */
+    externalRules: readonly PermissionRule[] | undefined;
+    /** The category's resolved policy. */
+    categorySpec: ResolvedCategory;
+    /** Per-target sandbox write allowance. */
+    sandboxAllowsWrite: (target: string) => boolean;
+}
+/**
+ * Pure decision procedure. Order: plans-dir carve-out → external-directory
+ * gate → category gate. `ask` is only returned when an approval channel can
+ * resolve it; writes the sandbox cannot permit never ask (single-prompt
+ * principle — they surface as a `external-write-escalation` denial instead).
+ */
+export declare function gateDecision(input: GateInput): Decision;
+/** Denial wording: Plan-mode write (keeps the historical `forbidden in Plan Mode` phrase). */
+export declare function planWriteDenyReason(toolName: string): string;
+/** Denial wording: an explicit external-directory deny rule matched. */
+export declare function externalDenyReason(toolName: string, target: string): string;
+/** Denial wording: a write the sandbox cannot permit (single-prompt handoff). */
+export declare function externalWriteEscalationReason(toolName: string, target: string): string;
+/** Denial wording: a category rule denied the call. */
+export declare function categoryDenyReason(toolName: string, subject: string | undefined): string;
+/** Denial wording: the approval channel rejected/aborted the ask. */
+export declare function approvalDenyReason(toolName: string, outcome: string): string;
+/** Denial wording: no approval channel is composed to resolve an ask. */
+export declare function noApprovalChannelReason(toolName: string): string;
+//# sourceMappingURL=permissions.d.ts.map

package/lib/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAI3D,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;AAEvD,wFAAwF;AACxF,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,CAAA;AAEzG,oDAAoD;AACpD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,gBAAgB,CAAA;CACzB;AAED,0FAA0F;AAC1F,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;AAEjF,6EAA6E;AAC7E,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,KAAK,CAAC,EAAE,cAAc,EAAE,CAAA;CACzB;AAED,2EAA2E;AAC3E,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAA;IACrD,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAA;CACvD;AAED,gFAAgF;AAChF,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,YAAY,EAAE,gBAAgB,CASlE,CAAA;AAED,qFAAqF;AACrF,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,YAAY,EAAE,eAAe,CASpE,CAAA;AAED,sEAAsE;AACtE,eAAO,MAAM,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAIjF,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,EAAE,gBAA0B,CAAA;AAoCjE,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAmBjE;AAWD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CAmBpE;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAK9E;AAED,uFAAuF;AACvF,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED,uFAAuF;AACvF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAQrE;AAED,4CAA4C;AAC5C,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,uDAAuD;IACvD,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,gBAAqB,GAAG,OAAO,CAM/F;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,SAAS,cAAc,EAAE,GAAG,SAAS,EAC5C,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,GAAG,GAAE,gBAAqB,GACzB,gBAAgB,GAAG,SAAS,CAS9B;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,gBAAgB,CAAA;IACxB,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CAClC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,EAAE,QAAQ,EAAE,gBAAgB,GAAG,gBAAgB,CAahH;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,oFAAoF;AACpF,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,GAAG,OAAO,CAQrF;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,WAAW,GAAG,SAAS,EAC7B,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,SAAS,GAAE,SAAS,MAAM,EAAuB,GAChD,OAAO,CAOT;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,MAAM,EAAE,CAOV;AAED,oDAAoD;AACpD,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GACf;IACE,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,YAAY,GAAG,eAAe,GAAG,2BAA2B,GAAG,eAAe,CAAA;IACpF,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC7B,CAAA;AAEL,qDAAqD;AACrD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IACtB,QAAQ,EAAE,YAAY,GAAG,SAAS,CAAA;IAClC,6DAA6D;IAC7D,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B,+CAA+C;IAC/C,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,gCAAgC;IAChC,aAAa,EAAE,MAAM,CAAA;IACrB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAA;IAChB,6DAA6D;IAC7D,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IAC5B,2CAA2C;IAC3C,eAAe,EAAE,gBAAgB,CAAA;IACjC,6DAA6D;IAC7D,aAAa,EAAE,SAAS,cAAc,EAAE,GAAG,SAAS,CAAA;IACpD,sCAAsC;IACtC,YAAY,EAAE,gBAAgB,CAAA;IAC9B,0CAA0C;IAC1C,kBAAkB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;CAChD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,CA6CvD;AAED,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,iFAAiF;AACjF,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtF;AAED,uDAAuD;AACvD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGxF;AAED,qEAAqE;AACrE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,yEAAyE;AACzE,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhE"}