@zaowu-labs/auto 1.0.1

package/README.md

@@ -0,0 +1,21 @@
+# @zaowu-labs/auto
+
+Automation workflow package for ZaoWu.
+
+This package validates JSON or YAML workflow files, builds execution plans, and
+previews workflow runs. It owns workflow permissions, runtime policy output, and
+the foundation execution sandbox for automation commands.
+
+Safety:
+
+- Workflow runs preview by default.
+- Shell commands are planned but blocked in this foundation version.
+- Structured `writeFile` steps require `permissions.fileWrites: prompt` and
+  explicit confirmation.
+- Confirmed writes can only create new files inside the real workflow-directory
+  sandbox; existing files and linked-directory escapes are refused.
+- Network access remains blocked by the execution sandbox.
+- The sandbox reports the resolved workflow directory and active file-write
+  boundary.
+- Plan steps include per-step operation plans so callers can audit risk and
+  planned execution before running.

package/dist/contracts.d.ts

@@ -0,0 +1,94 @@
+import type { OperationPlan } from '@zaowu-labs/core';
+export interface AutomationStep {
+    name: string;
+    message?: string;
+    run?: string;
+    writeFile?: {
+        path: string;
+        content: string;
+    };
+}
+export type AutomationPermissionMode = 'blocked' | 'prompt';
+export type AutomationPermissionName = 'shell' | 'fileWrites' | 'network';
+export interface AutomationWorkflowPermissions {
+    shell: AutomationPermissionMode;
+    fileWrites: AutomationPermissionMode;
+    network: AutomationPermissionMode;
+}
+export interface AutomationExecutionPolicy extends AutomationWorkflowPermissions {
+    schemaVersion: 1;
+}
+export interface AutomationExecutionSandbox {
+    schemaVersion: 1;
+    root: 'workflow-directory';
+    workflowDirectory: string;
+    shellCommands: 'blocked';
+    fileWrites: 'blocked' | 'workflow-directory';
+    network: 'blocked';
+}
+export interface AutomationWorkflow {
+    version: number;
+    name: string;
+    variables: Record<string, string>;
+    permissions: AutomationWorkflowPermissions;
+    steps: AutomationStep[];
+}
+export interface ParsedAutomationWorkflow extends AutomationWorkflow {
+    versionWarning?: string;
+    permissionWarnings: string[];
+}
+export interface AutomationValidationResult {
+    schemaVersion: 1;
+    status: 'ok';
+    filePath: string;
+    workflow: AutomationWorkflow;
+    policy: AutomationExecutionPolicy;
+    sandbox: AutomationExecutionSandbox;
+    warnings: string[];
+}
+export interface AutomationRunResult {
+    schemaVersion: 1;
+    status: 'ok' | 'preview';
+    filePath: string;
+    workflow: AutomationWorkflow;
+    policy: AutomationExecutionPolicy;
+    sandbox: AutomationExecutionSandbox;
+    executed: string[];
+    skipped: string[];
+    receipts: AutomationExecutionReceipt[];
+}
+export interface AutomationExecutionReceipt {
+    index: number;
+    name: string;
+    action: AutomationPlanStep['action'];
+    status: 'executed' | 'skipped' | 'blocked';
+    detail: string;
+    targetPath?: string;
+    contentSha256?: string;
+    contentLength?: number;
+}
+export interface AutomationPlanStep {
+    index: number;
+    name: string;
+    action: 'message' | 'shell' | 'writeFile' | 'unsupported';
+    preview: string;
+    targetPath?: string;
+    contentLength?: number;
+    contentSha256?: string;
+    blocked: boolean;
+    requiredPermission?: AutomationPermissionName;
+    policyDecision: 'allowed' | 'blocked';
+    reason?: string;
+    operationPlan: OperationPlan;
+}
+export interface AutomationPlanResult {
+    schemaVersion: 1;
+    status: 'ok';
+    filePath: string;
+    workflow: AutomationWorkflow;
+    policy: AutomationExecutionPolicy;
+    sandbox: AutomationExecutionSandbox;
+    steps: AutomationPlanStep[];
+    warnings: string[];
+}
+//# sourceMappingURL=contracts.d.ts.map

package/dist/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C;AAED,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC5D,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,YAAY,GAAG,SAAS,CAAC;AAE1E,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,wBAAwB,CAAC;IAChC,UAAU,EAAE,wBAAwB,CAAC;IACrC,OAAO,EAAE,wBAAwB,CAAC;CACnC;AAED,MAAM,WAAW,yBAA0B,SAAQ,6BAA6B;IAC9E,aAAa,EAAE,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,CAAC,CAAC;IACjB,IAAI,EAAE,oBAAoB,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,SAAS,CAAC;IACzB,UAAU,EAAE,SAAS,GAAG,oBAAoB,CAAC;IAC7C,OAAO,EAAE,SAAS,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,WAAW,EAAE,6BAA6B,CAAC;IAC3C,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAClE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,CAAC,CAAC;IACjB,MAAM,EAAE,IAAI,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,yBAAyB,CAAC;IAClC,OAAO,EAAE,0BAA0B,CAAC;IACpC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAC;IACjB,MAAM,EAAE,IAAI,GAAG,SAAS,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,yBAAyB,CAAC;IAClC,OAAO,EAAE,0BAA0B,CAAC;IACpC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,0BAA0B,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,aAAa,CAAC;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IAC9C,cAAc,EAAE,SAAS,GAAG,SAAS,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,CAAC,CAAC;IACjB,MAAM,EAAE,IAAI,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,yBAAyB,CAAC;IAClC,OAAO,EAAE,0BAA0B,CAAC;IACpC,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}

package/dist/contracts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contracts.js.map

package/dist/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":""}

package/dist/domain.d.ts

@@ -0,0 +1,3 @@
+import { type DomainDefinition } from '@zaowu-labs/core';
+export declare const AUTO_DOMAIN: DomainDefinition;
+//# sourceMappingURL=domain.d.ts.map

package/dist/domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.d.ts","sourceRoot":"","sources":["../src/domain.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEjF,eAAO,MAAM,WAAW,EAAE,gBAkBzB,CAAC"}

package/dist/domain.js

@@ -0,0 +1,21 @@
+import { createCapabilityLedger } from '@zaowu-labs/core';
+export const AUTO_DOMAIN = {
+    name: 'auto',
+    summary: 'Automation workflows with validation, dry-run, and confirmation',
+    capabilities: createCapabilityLedger({ readsFiles: true, writesFiles: true }),
+    commands: [
+        { name: 'validate', summary: 'Validate an automation workflow file', status: 'available' },
+        {
+            name: 'plan',
+            summary: 'Preview the execution plan for an automation workflow',
+            status: 'available',
+        },
+        {
+            name: 'run',
+            summary: 'Run an automation workflow with dry-run and confirmation',
+            status: 'available',
+            sensitive: true,
+        },
+    ],
+};
+//# sourceMappingURL=domain.js.map

package/dist/domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.js","sourceRoot":"","sources":["../src/domain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAyB,MAAM,kBAAkB,CAAC;AAEjF,MAAM,CAAC,MAAM,WAAW,GAAqB;IAC3C,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,iEAAiE;IAC1E,YAAY,EAAE,sBAAsB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7E,QAAQ,EAAE;QACR,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,sCAAsC,EAAE,MAAM,EAAE,WAAW,EAAE;QAC1F;YACE,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,uDAAuD;YAChE,MAAM,EAAE,WAAW;SACpB;QACD;YACE,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,0DAA0D;YACnE,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,IAAI;SAChB;KACF;CACF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+import type { AutomationPlanResult, AutomationRunResult, AutomationValidationResult } from './contracts.js';
+export * from './contracts.js';
+export { AUTO_DOMAIN } from './domain.js';
+export { checkShellSafety } from './shell-safety.js';
+export declare const validateWorkflowContent: (content: string, filePath?: string) => AutomationValidationResult;
+export declare const validateWorkflowFile: (filePath: string) => Promise<AutomationValidationResult>;
+export declare const planWorkflowContent: (content: string, filePath?: string) => AutomationPlanResult;
+export declare const planWorkflowFile: (filePath: string) => Promise<AutomationPlanResult>;
+export declare const runWorkflowPlan: (plan: AutomationPlanResult, options?: {
+    yes?: boolean;
+}) => Promise<AutomationRunResult>;
+export declare const runWorkflowFile: (filePath: string, options?: {
+    yes?: boolean;
+}) => Promise<AutomationRunResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAMV,oBAAoB,EAEpB,mBAAmB,EAEnB,0BAA0B,EAI3B,MAAM,gBAAgB,CAAC;AAGxB,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAuerD,eAAO,MAAM,uBAAuB,GAClC,SAAS,MAAM,EACf,iBAAyB,KACxB,0BAuFF,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,UAAU,MAAM,KACf,OAAO,CAAC,0BAA0B,CAepC,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,SAAS,MAAM,EACf,iBAAyB,KACxB,oBAmLF,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAU,UAAU,MAAM,KAAG,OAAO,CAAC,oBAAoB,CAerF,CAAC;AAEF,eAAO,MAAM,eAAe,GAC1B,MAAM,oBAAoB,EAC1B,UAAS;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAO,KAC9B,OAAO,CAAC,mBAAmB,CAyH7B,CAAC;AAEF,eAAO,MAAM,eAAe,GAC1B,UAAU,MAAM,EAChB,UAAS;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAO,KAC9B,OAAO,CAAC,mBAAmB,CAA+D,CAAC"}

package/dist/index.js

@@ -0,0 +1,762 @@
+import { readFile, realpath, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import YAML from 'yaml';
+import { hashOperationContent, createOperationPlan, stripUtf8Bom, ZaoWuError, } from '@zaowu-labs/core';
+import { checkShellSafety } from './shell-safety.js';
+export * from './contracts.js';
+export { AUTO_DOMAIN } from './domain.js';
+export { checkShellSafety } from './shell-safety.js';
+const SUPPORTED_WORKFLOW_VERSION = 1;
+const AUTO_RESULT_SCHEMA_VERSION = 1;
+const AUTO_POLICY_SCHEMA_VERSION = 1;
+const MAX_WORKFLOW_CHARACTERS = 1_000_000;
+const MAX_WRITE_FILE_CHARACTERS = 256 * 1024;
+const DEFAULT_WORKFLOW_PERMISSIONS = {
+    shell: 'blocked',
+    fileWrites: 'blocked',
+    network: 'blocked',
+};
+const DEFAULT_EXECUTION_SANDBOX = {
+    schemaVersion: 1,
+    root: 'workflow-directory',
+    shellCommands: 'blocked',
+    fileWrites: 'blocked',
+    network: 'blocked',
+};
+const KNOWN_PERMISSIONS = ['shell', 'fileWrites', 'network'];
+const createExecutionPolicy = (permissions) => ({
+    schemaVersion: AUTO_POLICY_SCHEMA_VERSION,
+    shell: 'blocked',
+    fileWrites: permissions.fileWrites === 'prompt' ? 'prompt' : 'blocked',
+    network: 'blocked',
+});
+const resolveWorkflowDirectory = (filePath) => path.resolve(path.dirname(filePath));
+const createExecutionSandbox = (filePath, policy) => ({
+    ...DEFAULT_EXECUTION_SANDBOX,
+    fileWrites: policy.fileWrites === 'prompt' ? 'workflow-directory' : 'blocked',
+    workflowDirectory: resolveWorkflowDirectory(filePath),
+});
+const getWorkflowFormat = (filePath) => {
+    const extension = path.extname(filePath).toLowerCase();
+    if (extension === '.json') {
+        return 'json';
+    }
+    if (extension === '.yml' || extension === '.yaml') {
+        return 'yaml';
+    }
+    throw new ZaoWuError({
+        code: 'WORKFLOW_FORMAT_UNSUPPORTED',
+        message: 'Workflow format is not supported yet.',
+        why: `ZaoWu can read JSON and YAML workflow files. It cannot parse \`${extension || 'unknown'}\` files as workflows.`,
+        fix: 'Use a workflow file ending in `.json`, `.yml`, or `.yaml`.',
+    });
+};
+const parseWorkflowVersion = (value) => {
+    if (value === undefined || value === null || value === '') {
+        return {
+            version: SUPPORTED_WORKFLOW_VERSION,
+        };
+    }
+    const normalizedValue = typeof value === 'string' ? value.trim() : value;
+    const version = typeof normalizedValue === 'number'
+        ? normalizedValue
+        : typeof normalizedValue === 'string' && /^\d+$/.test(normalizedValue)
+            ? Number.parseInt(normalizedValue, 10)
+            : Number.NaN;
+    if (Number.isInteger(version) && version > 0) {
+        return {
+            version,
+        };
+    }
+    return {
+        version: SUPPORTED_WORKFLOW_VERSION,
+        versionWarning: `Workflow version \`${String(value)}\` is invalid; defaulting to ${SUPPORTED_WORKFLOW_VERSION}.`,
+    };
+};
+const parsePermissionMode = (value, permission) => {
+    if (value === undefined || value === null || value === '') {
+        return {
+            mode: DEFAULT_WORKFLOW_PERMISSIONS[permission],
+        };
+    }
+    if (value === 'blocked' || value === 'prompt') {
+        return {
+            mode: value,
+        };
+    }
+    return {
+        mode: DEFAULT_WORKFLOW_PERMISSIONS[permission],
+        warning: `Permission \`${permission}\` value \`${String(value)}\` is invalid; defaulting to blocked.`,
+    };
+};
+const parseExecutionPolicy = (value) => {
+    const permissionWarnings = [];
+    if (value !== undefined && (!value || typeof value !== 'object' || Array.isArray(value))) {
+        permissionWarnings.push('Permissions must be an object; defaulting to blocked.');
+    }
+    const input = value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : {};
+    for (const key of Object.keys(input)) {
+        if (!KNOWN_PERMISSIONS.includes(key)) {
+            permissionWarnings.push(`Permission \`${key}\` is not supported; ignoring it.`);
+        }
+    }
+    const shell = parsePermissionMode(input.shell, 'shell');
+    const fileWrites = parsePermissionMode(input.fileWrites, 'fileWrites');
+    const network = parsePermissionMode(input.network, 'network');
+    return {
+        policy: {
+            shell: shell.mode,
+            fileWrites: fileWrites.mode,
+            network: network.mode,
+        },
+        permissionWarnings: [
+            ...permissionWarnings,
+            shell.warning,
+            fileWrites.warning,
+            network.warning,
+        ].filter((warning) => Boolean(warning)),
+    };
+};
+const parseWorkflowJson = (content) => {
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch (error) {
+        const detail = error instanceof SyntaxError ? `: ${error.message}` : '';
+        throw new ZaoWuError({
+            code: 'WORKFLOW_PARSE_FAILED',
+            message: 'Could not parse workflow.',
+            why: `Workflow content is not valid JSON${detail}.`,
+            fix: 'Verify the JSON syntax and run `zw auto validate` again.',
+        });
+    }
+    const version = parseWorkflowVersion(parsed.version);
+    const { policy, permissionWarnings } = parseExecutionPolicy(parsed.permissions);
+    const variables = parsed.variables && typeof parsed.variables === 'object' && !Array.isArray(parsed.variables)
+        ? Object.fromEntries(Object.entries(parsed.variables).map(([key, value]) => [key, String(value)]))
+        : {};
+    return {
+        ...version,
+        name: typeof parsed.name === 'string' && parsed.name ? parsed.name : 'workflow',
+        variables,
+        permissions: policy,
+        permissionWarnings,
+        steps: Array.isArray(parsed.steps)
+            ? parsed.steps.map((step) => {
+                if (!step || typeof step !== 'object') {
+                    return { name: '' };
+                }
+                const stepObj = step;
+                const writeFileValue = stepObj.writeFile;
+                const writeFileAction = writeFileValue && typeof writeFileValue === 'object' && !Array.isArray(writeFileValue)
+                    ? writeFileValue
+                    : undefined;
+                return {
+                    name: typeof stepObj.name === 'string' ? stepObj.name : '',
+                    ...(typeof stepObj.message === 'string' ? { message: stepObj.message } : {}),
+                    ...(typeof stepObj.run === 'string' ? { run: stepObj.run } : {}),
+                    ...(writeFileAction
+                        ? {
+                            writeFile: {
+                                path: typeof writeFileAction.path === 'string'
+                                    ? writeFileAction.path
+                                    : String(writeFileAction.path ?? ''),
+                                content: typeof writeFileAction.content === 'string'
+                                    ? writeFileAction.content
+                                    : String(writeFileAction.content ?? ''),
+                            },
+                        }
+                        : {}),
+                };
+            })
+            : [],
+    };
+};
+/**
+ * YAML workflow parsing is intentionally schema-shaped even though it now uses
+ * a real parser. The foundation runtime normalizes only the fields it supports
+ * and reports unsupported or unsafe behavior through warnings and operation
+ * plans instead of executing arbitrary YAML-driven actions.
+ */
+const parseWorkflowYaml = (content) => {
+    let parsedRaw;
+    try {
+        parsedRaw = YAML.parse(content);
+    }
+    catch (error) {
+        throw new ZaoWuError({
+            code: 'WORKFLOW_PARSE_FAILED',
+            message: 'Could not parse workflow.',
+            why: error instanceof Error ? error.message : 'The YAML parser rejected the file.',
+            fix: 'Fix the YAML syntax and run `zw auto validate` again.',
+        });
+    }
+    if (parsedRaw === null || parsedRaw === undefined) {
+        parsedRaw = {};
+    }
+    else if (typeof parsedRaw !== 'object' || Array.isArray(parsedRaw)) {
+        throw new ZaoWuError({
+            code: 'WORKFLOW_PARSE_FAILED',
+            message: 'Could not parse workflow.',
+            why: 'Workflow content is not a YAML object.',
+            fix: 'Verify the workflow format and run `zw auto validate` again.',
+        });
+    }
+    const parsed = parsedRaw;
+    const version = parseWorkflowVersion(parsed.version);
+    const name = typeof parsed.name === 'string' && parsed.name ? parsed.name.trim() : 'workflow';
+    const variables = {};
+    const rawVars = parsed.vars ?? parsed.variables;
+    if (rawVars && typeof rawVars === 'object' && !Array.isArray(rawVars)) {
+        for (const [k, v] of Object.entries(rawVars)) {
+            variables[k] = v === null || v === undefined ? '' : String(v).trim();
+        }
+    }
+    const { policy, permissionWarnings } = parseExecutionPolicy(parsed.permissions);
+    const steps = [];
+    if (Array.isArray(parsed.steps)) {
+        for (const step of parsed.steps) {
+            if (step && typeof step === 'object') {
+                const stepObj = step;
+                const stepName = typeof stepObj.name === 'string' && stepObj.name ? stepObj.name.trim() : '';
+                const stepMessage = typeof stepObj.message === 'string' ? stepObj.message.trim() : undefined;
+                const stepRun = typeof stepObj.run === 'string' ? stepObj.run.trim() : undefined;
+                const writeFileValue = stepObj.writeFile;
+                const writeFileAction = writeFileValue && typeof writeFileValue === 'object' && !Array.isArray(writeFileValue)
+                    ? writeFileValue
+                    : undefined;
+                const stepWriteFile = writeFileAction
+                    ? {
+                        path: typeof writeFileAction.path === 'string'
+                            ? writeFileAction.path.trim()
+                            : String(writeFileAction.path ?? '').trim(),
+                        content: typeof writeFileAction.content === 'string'
+                            ? writeFileAction.content
+                            : String(writeFileAction.content ?? ''),
+                    }
+                    : undefined;
+                steps.push({
+                    name: stepName,
+                    ...(stepMessage !== undefined ? { message: stepMessage } : {}),
+                    ...(stepRun !== undefined ? { run: stepRun } : {}),
+                    ...(stepWriteFile !== undefined ? { writeFile: stepWriteFile } : {}),
+                });
+            }
+        }
+    }
+    return {
+        ...version,
+        name,
+        variables,
+        permissions: policy,
+        permissionWarnings,
+        steps,
+    };
+};
+const parseWorkflow = (content, filePath) => {
+    const normalizedContent = stripUtf8Bom(content);
+    const format = getWorkflowFormat(filePath);
+    try {
+        return format === 'json'
+            ? parseWorkflowJson(normalizedContent)
+            : parseWorkflowYaml(normalizedContent);
+    }
+    catch (error) {
+        if (error instanceof ZaoWuError) {
+            throw error;
+        }
+        throw new ZaoWuError({
+            code: 'WORKFLOW_PARSE_FAILED',
+            message: 'Could not parse workflow.',
+            why: 'ZaoWu supports simple JSON and YAML workflow files in this first version.',
+            fix: 'Use `name` and `steps` with `message` steps, then run `zw auto validate` again.',
+        });
+    }
+};
+const stripWorkflowMetadata = (workflow) => ({
+    version: workflow.version,
+    name: workflow.name,
+    variables: workflow.variables,
+    permissions: workflow.permissions,
+    steps: workflow.steps,
+});
+const VARIABLE_PATTERN = /\{\{\s*([A-Za-z0-9_-]+)\s*\}\}/g;
+const getReferencedVariables = (value) => value ? [...value.matchAll(VARIABLE_PATTERN)].map((match) => match[1]) : [];
+const getMissingVariables = (step, variables) => [
+    ...new Set([
+        ...getReferencedVariables(step.message),
+        ...getReferencedVariables(step.run),
+        ...getReferencedVariables(step.writeFile?.path),
+        ...getReferencedVariables(step.writeFile?.content),
+    ]),
+].filter((name) => !(name in variables));
+const substituteVariables = (value, variables) => value.replace(VARIABLE_PATTERN, (_match, name) => variables[name] ?? `{{${name}}}`);
+const getStepActionCount = (step) => [step.message, step.run, step.writeFile].filter((value) => value !== undefined).length;
+const resolveWorkflowWritePath = (workflowDirectory, requestedPath) => {
+    const trimmedPath = requestedPath.trim();
+    if (!trimmedPath) {
+        return {
+            reason: 'writeFile.path is required.',
+        };
+    }
+    if (path.isAbsolute(trimmedPath)) {
+        return {
+            reason: 'writeFile.path must be relative to the workflow directory.',
+        };
+    }
+    const targetPath = path.resolve(workflowDirectory, trimmedPath);
+    const relativeTarget = path.relative(workflowDirectory, targetPath);
+    if (!relativeTarget ||
+        relativeTarget === '..' ||
+        relativeTarget.startsWith(`..${path.sep}`) ||
+        path.isAbsolute(relativeTarget)) {
+        return {
+            reason: 'writeFile.path must name a file inside the workflow directory.',
+        };
+    }
+    return { targetPath };
+};
+const resolveSandboxedWriteTarget = async (workflowDirectory, targetPath, stepName) => {
+    let realWorkflowDirectory;
+    let realTargetDirectory;
+    try {
+        [realWorkflowDirectory, realTargetDirectory] = await Promise.all([
+            realpath(workflowDirectory),
+            realpath(path.dirname(targetPath)),
+        ]);
+    }
+    catch {
+        throw new ZaoWuError({
+            code: 'WORKFLOW_STEP_FAILED',
+            message: `Workflow step \`${stepName}\` failed.`,
+            why: `ZaoWu could not resolve the real workflow or target directory for \`${targetPath}\`.`,
+            fix: 'Use an existing directory inside the workflow directory, then try again.',
+        });
+    }
+    const relativeDirectory = path.relative(realWorkflowDirectory, realTargetDirectory);
+    if (relativeDirectory === '..' ||
+        relativeDirectory.startsWith(`..${path.sep}`) ||
+        path.isAbsolute(relativeDirectory)) {
+        throw new ZaoWuError({
+            code: 'WORKFLOW_STEP_FAILED',
+            message: `Workflow step \`${stepName}\` failed.`,
+            why: `ZaoWu refused to follow a linked directory outside the workflow sandbox for \`${targetPath}\`.`,
+            fix: 'Choose a writeFile.path whose parent directory resolves inside the workflow directory.',
+        });
+    }
+    return path.join(realTargetDirectory, path.basename(targetPath));
+};
+const createStepOperationPlan = (step) => {
+    const blockedNote = step.blocked ? [`Step is blocked: ${step.reason ?? 'blocked'}.`] : [];
+    if (step.action === 'shell') {
+        return createOperationPlan({
+            risk: 'high',
+            confirmationRequired: true,
+            executes: step.preview ? [step.preview] : [],
+            notes: blockedNote,
+        });
+    }
+    if (step.action === 'message') {
+        return createOperationPlan({
+            risk: 'low',
+            confirmationRequired: false,
+            notes: [
+                ...blockedNote,
+                'Message steps do not read files, write files, run shell commands, or use network.',
+            ],
+        });
+    }
+    if (step.action === 'writeFile') {
+        return createOperationPlan({
+            risk: 'medium',
+            confirmationRequired: true,
+            subjects: [
+                ...(step.contentSha256 ? [`content-sha256:${step.contentSha256}`] : []),
+                ...(step.contentLength !== undefined ? [`content-length:${step.contentLength}`] : []),
+            ],
+            writes: step.targetPath ? [step.targetPath] : [],
+            notes: [
+                ...blockedNote,
+                'writeFile steps can only create new files inside the workflow directory.',
+            ],
+        });
+    }
+    return createOperationPlan({
+        risk: 'low',
+        confirmationRequired: false,
+        notes: [...blockedNote, 'Unsupported steps have no executable action.'],
+    });
+};
+export const validateWorkflowContent = (content, filePath = 'workflow.yml') => {
+    if (content.length > MAX_WORKFLOW_CHARACTERS) {
+        throw new ZaoWuError({
+            code: 'WORKFLOW_PARSE_FAILED',
+            message: 'Workflow file is too large.',
+            why: `ZaoWu limits workflow files to ${MAX_WORKFLOW_CHARACTERS} characters, but \`${filePath}\` contains ${content.length}.`,
+            fix: 'Split the workflow into smaller files and keep generated content in bounded writeFile steps.',
+        });
+    }
+    const parsedWorkflow = parseWorkflow(content, filePath);
+    const workflow = stripWorkflowMetadata(parsedWorkflow);
+    const warnings = [];
+    if (parsedWorkflow.versionWarning) {
+        warnings.push(parsedWorkflow.versionWarning);
+    }
+    warnings.push(...parsedWorkflow.permissionWarnings);
+    if (workflow.version !== SUPPORTED_WORKFLOW_VERSION) {
+        warnings.push(`Workflow version ${workflow.version} is not supported; this foundation version expects ${SUPPORTED_WORKFLOW_VERSION}.`);
+    }
+    if (workflow.steps.length === 0) {
+        warnings.push('Workflow has no steps.');
+    }
+    for (const step of workflow.steps) {
+        if (!step.name.trim()) {
+            warnings.push('A workflow step has an empty name.');
+        }
+        const actionCount = getStepActionCount(step);
+        if (actionCount === 0) {
+            warnings.push(`Step \`${step.name}\` has no supported action.`);
+        }
+        if (actionCount > 1) {
+            warnings.push(`Step \`${step.name}\` declares multiple actions; choose exactly one action.`);
+        }
+        if (step.run) {
+            const safetyError = checkShellSafety(step.run);
+            if (safetyError) {
+                warnings.push(`Step \`${step.name}\` safety violation: ${safetyError}`);
+            }
+            warnings.push(`Step \`${step.name}\` uses shell execution, which this first version will not run.`);
+        }
+        if (step.writeFile) {
+            if (!step.writeFile.path.trim()) {
+                warnings.push(`Step \`${step.name}\` writeFile.path is required.`);
+            }
+            if (workflow.permissions.fileWrites !== 'prompt') {
+                warnings.push(`Step \`${step.name}\` writes a file, but permissions.fileWrites is not prompt.`);
+            }
+            if (step.writeFile.content.length > MAX_WRITE_FILE_CHARACTERS) {
+                warnings.push(`Step \`${step.name}\` writeFile.content exceeds the ${MAX_WRITE_FILE_CHARACTERS}-character limit.`);
+            }
+        }
+        for (const missingVariable of getMissingVariables(step, workflow.variables)) {
+            warnings.push(`Step \`${step.name}\` references undefined variable \`${missingVariable}\`.`);
+        }
+    }
+    const policy = createExecutionPolicy(workflow.permissions);
+    return {
+        schemaVersion: AUTO_RESULT_SCHEMA_VERSION,
+        status: 'ok',
+        filePath,
+        workflow,
+        policy,
+        sandbox: createExecutionSandbox(filePath, policy),
+        warnings,
+    };
+};
+export const validateWorkflowFile = async (filePath) => {
+    let content;
+    try {
+        content = await readFile(filePath, 'utf8');
+    }
+    catch {
+        throw new ZaoWuError({
+            code: 'WORKFLOW_READ_FAILED',
+            message: 'Could not read workflow file.',
+            why: `ZaoWu tried to read \`${filePath}\`, but the file was not readable.`,
+            fix: 'Check the path and file permissions, then run the command again.',
+        });
+    }
+    return validateWorkflowContent(content, filePath);
+};
+export const planWorkflowContent = (content, filePath = 'workflow.yml') => {
+    const validation = validateWorkflowContent(content, filePath);
+    const steps = validation.workflow.steps.map((step, index) => {
+        const missingVariables = getMissingVariables(step, validation.workflow.variables);
+        const actionCount = getStepActionCount(step);
+        if (actionCount > 1) {
+            const reason = 'Step declares multiple actions; choose exactly one action.';
+            return {
+                index: index + 1,
+                name: step.name,
+                action: 'unsupported',
+                preview: '',
+                blocked: true,
+                policyDecision: 'blocked',
+                reason,
+                operationPlan: createStepOperationPlan({
+                    action: 'unsupported',
+                    preview: '',
+                    blocked: true,
+                    reason,
+                }),
+            };
+        }
+        if (missingVariables.length > 0) {
+            const action = step.run
+                ? 'shell'
+                : step.message
+                    ? 'message'
+                    : step.writeFile
+                        ? 'writeFile'
+                        : 'unsupported';
+            const preview = step.message ?? step.run ?? step.writeFile?.path ?? '';
+            const reason = `Missing variable(s): ${missingVariables.join(', ')}`;
+            return {
+                index: index + 1,
+                name: step.name,
+                action,
+                preview,
+                blocked: true,
+                requiredPermission: step.run ? 'shell' : step.writeFile ? 'fileWrites' : undefined,
+                policyDecision: 'blocked',
+                reason,
+                operationPlan: createStepOperationPlan({
+                    action,
+                    preview,
+                    blocked: true,
+                    reason,
+                }),
+            };
+        }
+        if (step.run) {
+            const shellPolicy = validation.policy.shell;
+            const preview = substituteVariables(step.run, validation.workflow.variables);
+            const safetyError = checkShellSafety(preview);
+            const isBlocked = shellPolicy === 'blocked' || !!safetyError;
+            const reason = safetyError
+                ? safetyError
+                : isBlocked
+                    ? 'Shell execution is disabled in this foundation version.'
+                    : undefined;
+            return {
+                index: index + 1,
+                name: step.name,
+                action: 'shell',
+                preview,
+                blocked: isBlocked,
+                requiredPermission: 'shell',
+                policyDecision: isBlocked ? 'blocked' : 'allowed',
+                reason,
+                operationPlan: createStepOperationPlan({
+                    action: 'shell',
+                    preview,
+                    blocked: isBlocked,
+                    reason,
+                }),
+            };
+        }
+        if (step.message) {
+            const preview = substituteVariables(step.message, validation.workflow.variables);
+            return {
+                index: index + 1,
+                name: step.name,
+                action: 'message',
+                preview,
+                blocked: false,
+                policyDecision: 'allowed',
+                operationPlan: createStepOperationPlan({
+                    action: 'message',
+                    preview,
+                    blocked: false,
+                }),
+            };
+        }
+        if (step.writeFile) {
+            const requestedPath = substituteVariables(step.writeFile.path, validation.workflow.variables);
+            const contentPreview = substituteVariables(step.writeFile.content, validation.workflow.variables);
+            const contentSha256 = hashOperationContent(contentPreview);
+            const resolvedPath = resolveWorkflowWritePath(validation.sandbox.workflowDirectory, requestedPath);
+            const contentTooLarge = contentPreview.length > MAX_WRITE_FILE_CHARACTERS;
+            const isBlocked = validation.policy.fileWrites !== 'prompt' ||
+                Boolean(resolvedPath.reason) ||
+                contentTooLarge;
+            const reason = resolvedPath.reason ??
+                (contentTooLarge
+                    ? `writeFile.content exceeds the ${MAX_WRITE_FILE_CHARACTERS}-character limit.`
+                    : undefined) ??
+                (isBlocked ? 'File writes require permissions.fileWrites: prompt.' : undefined);
+            const preview = `write ${requestedPath} (${contentPreview.length} chars)`;
+            return {
+                index: index + 1,
+                name: step.name,
+                action: 'writeFile',
+                preview,
+                targetPath: resolvedPath.targetPath,
+                contentLength: contentPreview.length,
+                contentSha256,
+                blocked: isBlocked,
+                requiredPermission: 'fileWrites',
+                policyDecision: isBlocked ? 'blocked' : 'allowed',
+                reason,
+                operationPlan: createStepOperationPlan({
+                    action: 'writeFile',
+                    preview,
+                    targetPath: resolvedPath.targetPath,
+                    contentLength: contentPreview.length,
+                    contentSha256,
+                    blocked: isBlocked,
+                    reason,
+                }),
+            };
+        }
+        const reason = 'Step has no supported action.';
+        return {
+            index: index + 1,
+            name: step.name,
+            action: 'unsupported',
+            preview: '',
+            blocked: true,
+            policyDecision: 'blocked',
+            reason,
+            operationPlan: createStepOperationPlan({
+                action: 'unsupported',
+                preview: '',
+                blocked: true,
+                reason,
+            }),
+        };
+    });
+    return {
+        schemaVersion: AUTO_RESULT_SCHEMA_VERSION,
+        status: 'ok',
+        filePath,
+        workflow: validation.workflow,
+        policy: validation.policy,
+        sandbox: validation.sandbox,
+        steps,
+        warnings: validation.warnings,
+    };
+};
+export const planWorkflowFile = async (filePath) => {
+    let content;
+    try {
+        content = await readFile(filePath, 'utf8');
+    }
+    catch {
+        throw new ZaoWuError({
+            code: 'WORKFLOW_READ_FAILED',
+            message: 'Could not read workflow file.',
+            why: `ZaoWu tried to read \`${filePath}\`, but the file was not readable.`,
+            fix: 'Check the path and file permissions, then run the command again.',
+        });
+    }
+    return planWorkflowContent(content, filePath);
+};
+export const runWorkflowPlan = async (plan, options = {}) => {
+    const executed = [];
+    const skipped = [];
+    const receipts = [];
+    for (const step of plan.steps) {
+        if (step.blocked) {
+            const detail = step.reason ?? 'blocked';
+            skipped.push(`${step.name}: ${detail}`);
+            receipts.push({
+                index: step.index,
+                name: step.name,
+                action: step.action,
+                status: 'blocked',
+                detail,
+                targetPath: step.targetPath,
+                contentSha256: step.contentSha256,
+                contentLength: step.contentLength,
+            });
+            continue;
+        }
+        if (!options.yes) {
+            skipped.push(`${step.name}: dry-run`);
+            receipts.push({
+                index: step.index,
+                name: step.name,
+                action: step.action,
+                status: 'skipped',
+                detail: 'dry-run',
+                targetPath: step.targetPath,
+                contentSha256: step.contentSha256,
+                contentLength: step.contentLength,
+            });
+            continue;
+        }
+        if (step.action === 'message') {
+            executed.push(`${step.name}: ${step.preview}`);
+            receipts.push({
+                index: step.index,
+                name: step.name,
+                action: step.action,
+                status: 'executed',
+                detail: step.preview,
+            });
+        }
+        else if (step.action === 'writeFile') {
+            const workflowStep = plan.workflow.steps[step.index - 1];
+            const writeFileAction = workflowStep?.writeFile;
+            if (!step.targetPath || !writeFileAction || !step.contentSha256) {
+                const detail = 'missing write target';
+                skipped.push(`${step.name}: ${detail}`);
+                receipts.push({
+                    index: step.index,
+                    name: step.name,
+                    action: step.action,
+                    status: 'skipped',
+                    detail,
+                    targetPath: step.targetPath,
+                    contentSha256: step.contentSha256,
+                    contentLength: step.contentLength,
+                });
+                continue;
+            }
+            const content = substituteVariables(writeFileAction.content, plan.workflow.variables);
+            if (hashOperationContent(content) !== step.contentSha256) {
+                throw new ZaoWuError({
+                    code: 'WORKFLOW_STEP_FAILED',
+                    message: `Workflow step \`${step.name}\` failed.`,
+                    why: 'The planned file content no longer matches its content fingerprint.',
+                    fix: 'Re-run the workflow preview and confirm the current operation plan.',
+                });
+            }
+            const sandboxedTarget = await resolveSandboxedWriteTarget(plan.sandbox.workflowDirectory, step.targetPath, step.name);
+            try {
+                await writeFile(sandboxedTarget, content, { encoding: 'utf8', flag: 'wx' });
+            }
+            catch (error) {
+                const exists = error.code === 'EEXIST';
+                throw new ZaoWuError({
+                    code: 'WORKFLOW_STEP_FAILED',
+                    message: `Workflow step \`${step.name}\` failed.`,
+                    why: exists
+                        ? `ZaoWu refused to overwrite existing file \`${step.targetPath}\`.`
+                        : `ZaoWu tried to write \`${step.targetPath}\`, but the file system rejected the write.`,
+                    fix: exists
+                        ? 'Choose a new writeFile.path or remove the existing file yourself first.'
+                        : 'Check the workflow directory permissions, then try again.',
+                });
+            }
+            executed.push(`${step.name}: wrote ${step.targetPath}`);
+            receipts.push({
+                index: step.index,
+                name: step.name,
+                action: step.action,
+                status: 'executed',
+                detail: `wrote ${step.targetPath}`,
+                targetPath: step.targetPath,
+                contentSha256: step.contentSha256,
+                contentLength: step.contentLength,
+            });
+        }
+    }
+    return {
+        schemaVersion: AUTO_RESULT_SCHEMA_VERSION,
+        status: options.yes ? 'ok' : 'preview',
+        filePath: plan.filePath,
+        workflow: plan.workflow,
+        policy: plan.policy,
+        sandbox: plan.sandbox,
+        executed,
+        skipped,
+        receipts,
+    };
+};
+export const runWorkflowFile = async (filePath, options = {}) => runWorkflowPlan(await planWorkflowFile(filePath), options);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,UAAU,GAEX,MAAM,kBAAkB,CAAC;AAgB1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAC1C,MAAM,yBAAyB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC7C,MAAM,4BAA4B,GAAkC;IAClE,KAAK,EAAE,SAAS;IAChB,UAAU,EAAE,SAAS;IACrB,OAAO,EAAE,SAAS;CACnB,CAAC;AACF,MAAM,yBAAyB,GAA0D;IACvF,aAAa,EAAE,CAAC;IAChB,IAAI,EAAE,oBAAoB;IAC1B,aAAa,EAAE,SAAS;IACxB,UAAU,EAAE,SAAS;IACrB,OAAO,EAAE,SAAS;CACnB,CAAC;AACF,MAAM,iBAAiB,GAAwC,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAElG,MAAM,qBAAqB,GAAG,CAC5B,WAA0C,EACf,EAAE,CAAC,CAAC;IAC/B,aAAa,EAAE,0BAA0B;IACzC,KAAK,EAAE,SAAS;IAChB,UAAU,EAAE,WAAW,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;IACtE,OAAO,EAAE,SAAS;CACnB,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AAEpG,MAAM,sBAAsB,GAAG,CAC7B,QAAgB,EAChB,MAAiC,EACL,EAAE,CAAC,CAAC;IAChC,GAAG,yBAAyB;IAC5B,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;IAC7E,iBAAiB,EAAE,wBAAwB,CAAC,QAAQ,CAAC;CACtD,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,QAAgB,EAAmB,EAAE;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAEvD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,UAAU,CAAC;QACnB,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,uCAAuC;QAChD,GAAG,EAAE,kEAAkE,SAAS,IAAI,SAAS,wBAAwB;QACrH,GAAG,EAAE,4DAA4D;KAClE,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAgD,EAAE;IAC5F,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1D,OAAO;YACL,OAAO,EAAE,0BAA0B;SACpC,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACzE,MAAM,OAAO,GACX,OAAO,eAAe,KAAK,QAAQ;QACjC,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,OAAO,eAAe,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;YACpE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC;YACtC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IAEnB,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,OAAO;SACR,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,0BAA0B;QACnC,cAAc,EAAE,sBAAsB,MAAM,CAAC,KAAK,CAAC,gCAAgC,0BAA0B,GAAG;KACjH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,KAAc,EACd,UAAoC,EACkB,EAAE;IACxD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1D,OAAO;YACL,IAAI,EAAE,4BAA4B,CAAC,UAAU,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO;YACL,IAAI,EAAE,KAAK;SACZ,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,4BAA4B,CAAC,UAAU,CAAC;QAC9C,OAAO,EAAE,gBAAgB,UAAU,cAAc,MAAM,CAAC,KAAK,CAAC,uCAAuC;KACtG,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,KAAc,EAC2D,EAAE;IAC3E,MAAM,kBAAkB,GAAa,EAAE,CAAC;IAExC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACzF,kBAAkB,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,KAAK,GACT,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzD,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;IAET,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAA+B,CAAC,EAAE,CAAC;YACjE,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,GAAG,mCAAmC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAE9D,OAAO;QACL,MAAM,EAAE;YACN,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,UAAU,EAAE,UAAU,CAAC,IAAI;YAC3B,OAAO,EAAE,OAAO,CAAC,IAAI;SACtB;QACD,kBAAkB,EAAE;YAClB,GAAG,kBAAkB;YACrB,KAAK,CAAC,OAAO;YACb,UAAU,CAAC,OAAO;YAClB,OAAO,CAAC,OAAO;SAChB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAA4B,EAAE;IACtE,IAAI,MAAmC,CAAC;IAExC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,2BAA2B;YACpC,GAAG,EAAE,qCAAqC,MAAM,GAAG;YACnD,GAAG,EAAE,0DAA0D;SAChE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAChF,MAAM,SAAS,GACb,MAAM,CAAC,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QAC1F,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAC7E;QACH,CAAC,CAAC,EAAE,CAAC;IAET,OAAO;QACL,GAAG,OAAO;QACV,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;QAC/E,SAAS;QACT,WAAW,EAAE,MAAM;QACnB,kBAAkB;QAClB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAkB,EAAE;gBACxC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACtB,CAAC;gBAED,MAAM,OAAO,GAAG,IAA0C,CAAC;gBAC3D,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;gBACzC,MAAM,eAAe,GACnB,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;oBACpF,CAAC,CAAE,cAA0C;oBAC7C,CAAC,CAAC,SAAS,CAAC;gBAEhB,OAAO;oBACL,IAAI,EAAE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;oBAC1D,GAAG,CAAC,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5E,GAAG,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,GAAG,CAAC,eAAe;wBACjB,CAAC,CAAC;4BACE,SAAS,EAAE;gCACT,IAAI,EACF,OAAO,eAAe,CAAC,IAAI,KAAK,QAAQ;oCACtC,CAAC,CAAC,eAAe,CAAC,IAAI;oCACtB,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC;gCACxC,OAAO,EACL,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ;oCACzC,CAAC,CAAC,eAAe,CAAC,OAAO;oCACzB,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,IAAI,EAAE,CAAC;6BAC5C;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;YACJ,CAAC,CAAC;YACJ,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAA4B,EAAE;IACtE,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,2BAA2B;YACpC,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oCAAoC;YAClF,GAAG,EAAE,uDAAuD;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAClD,SAAS,GAAG,EAAE,CAAC;IACjB,CAAC;SAAM,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,2BAA2B;YACpC,GAAG,EAAE,wCAAwC;YAC7C,GAAG,EAAE,8DAA8D;SACpE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,SAAoC,CAAC;IAEpD,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IAE9F,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC;IAChD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEhF,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,MAAM,OAAO,GAAG,IAA+B,CAAC;gBAChD,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,MAAM,WAAW,GACf,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3E,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACjF,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;gBACzC,MAAM,eAAe,GACnB,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;oBACpF,CAAC,CAAE,cAA0C;oBAC7C,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,aAAa,GAAG,eAAe;oBACnC,CAAC,CAAC;wBACE,IAAI,EACF,OAAO,eAAe,CAAC,IAAI,KAAK,QAAQ;4BACtC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE;4BAC7B,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;wBAC/C,OAAO,EACL,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ;4BACzC,CAAC,CAAC,eAAe,CAAC,OAAO;4BACzB,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,IAAI,EAAE,CAAC;qBAC5C;oBACH,CAAC,CAAC,SAAS,CAAC;gBAEd,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,QAAQ;oBACd,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,OAAO;QACV,IAAI;QACJ,SAAS;QACT,WAAW,EAAE,MAAM;QACnB,kBAAkB;QAClB,KAAK;KACN,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,QAAgB,EAA4B,EAAE;IACpF,MAAM,iBAAiB,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAE3C,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,MAAM;YACtB,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;YACtC,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,2BAA2B;YACpC,GAAG,EAAE,2EAA2E;YAChF,GAAG,EAAE,iFAAiF;SACvF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,QAAkC,EAAsB,EAAE,CAAC,CAAC;IACzF,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;IACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;IAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;IACjC,KAAK,EAAE,QAAQ,CAAC,KAAK;CACtB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,iCAAiC,CAAC;AAE3D,MAAM,sBAAsB,GAAG,CAAC,KAAyB,EAAY,EAAE,CACrE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAE9E,MAAM,mBAAmB,GAAG,CAAC,IAAoB,EAAE,SAAiC,EAAY,EAAE,CAChG;IACE,GAAG,IAAI,GAAG,CAAC;QACT,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;QACvC,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;QACnC,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;QAC/C,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;KACnD,CAAC;CACH,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC;AAE3C,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAE,SAAiC,EAAU,EAAE,CACvF,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC;AAE9F,MAAM,kBAAkB,GAAG,CAAC,IAAoB,EAAU,EAAE,CAC1D,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;AAEzF,MAAM,wBAAwB,GAAG,CAC/B,iBAAyB,EACzB,aAAqB,EACqB,EAAE;IAC5C,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IAEzC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,6BAA6B;SACtC,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,4DAA4D;SACrE,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IAEpE,IACE,CAAC,cAAc;QACf,cAAc,KAAK,IAAI;QACvB,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,gEAAgE;SACzE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,KAAK,EACvC,iBAAyB,EACzB,UAAkB,EAClB,QAAgB,EACC,EAAE;IACnB,IAAI,qBAA6B,CAAC;IAClC,IAAI,mBAA2B,CAAC;IAEhC,IAAI,CAAC;QACH,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC/D,QAAQ,CAAC,iBAAiB,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,mBAAmB,QAAQ,YAAY;YAChD,GAAG,EAAE,uEAAuE,UAAU,KAAK;YAC3F,GAAG,EAAE,0EAA0E;SAChF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;IACpF,IACE,iBAAiB,KAAK,IAAI;QAC1B,iBAAiB,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAClC,CAAC;QACD,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,mBAAmB,QAAQ,YAAY;YAChD,GAAG,EAAE,iFAAiF,UAAU,KAAK;YACrG,GAAG,EAAE,wFAAwF;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,IAQhC,EAAiB,EAAE;IAClB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,MAAM,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1F,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,mBAAmB,CAAC;YACzB,IAAI,EAAE,MAAM;YACZ,oBAAoB,EAAE,IAAI;YAC1B,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;YAC5C,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,mBAAmB,CAAC;YACzB,IAAI,EAAE,KAAK;YACX,oBAAoB,EAAE,KAAK;YAC3B,KAAK,EAAE;gBACL,GAAG,WAAW;gBACd,mFAAmF;aACpF;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO,mBAAmB,CAAC;YACzB,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,IAAI;YAC1B,QAAQ,EAAE;gBACR,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF;YACD,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;YAChD,KAAK,EAAE;gBACL,GAAG,WAAW;gBACd,0EAA0E;aAC3E;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,KAAK;QACX,oBAAoB,EAAE,KAAK;QAC3B,KAAK,EAAE,CAAC,GAAG,WAAW,EAAE,8CAA8C,CAAC;KACxE,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,OAAe,EACf,QAAQ,GAAG,cAAc,EACG,EAAE;IAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC7C,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,6BAA6B;YACtC,GAAG,EAAE,kCAAkC,uBAAuB,sBAAsB,QAAQ,eAAe,OAAO,CAAC,MAAM,GAAG;YAC5H,GAAG,EAAE,8FAA8F;SACpG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,cAAc,CAAC,cAAc,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAEpD,IAAI,QAAQ,CAAC,OAAO,KAAK,0BAA0B,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CACX,oBAAoB,QAAQ,CAAC,OAAO,sDAAsD,0BAA0B,GAAG,CACxH,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,6BAA6B,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,0DAA0D,CAAC,CAAC;QAC/F,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,WAAW,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,wBAAwB,WAAW,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,QAAQ,CAAC,IAAI,CACX,UAAU,IAAI,CAAC,IAAI,iEAAiE,CACrF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,gCAAgC,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,QAAQ,CAAC,WAAW,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACjD,QAAQ,CAAC,IAAI,CACX,UAAU,IAAI,CAAC,IAAI,6DAA6D,CACjF,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;gBAC9D,QAAQ,CAAC,IAAI,CACX,UAAU,IAAI,CAAC,IAAI,oCAAoC,yBAAyB,mBAAmB,CACpG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,MAAM,eAAe,IAAI,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5E,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,sCAAsC,eAAe,KAAK,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE3D,OAAO;QACL,aAAa,EAAE,0BAA0B;QACzC,MAAM,EAAE,IAAI;QACZ,QAAQ;QACR,QAAQ;QACR,MAAM;QACN,OAAO,EAAE,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC;QACjD,QAAQ;KACT,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACvC,QAAgB,EACqB,EAAE;IACvC,IAAI,OAAe,CAAC;IAEpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,+BAA+B;YACxC,GAAG,EAAE,yBAAyB,QAAQ,oCAAoC;YAC1E,GAAG,EAAE,kEAAkE;SACxE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACpD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,OAAe,EACf,QAAQ,GAAG,cAAc,EACH,EAAE;IACxB,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAsB,EAAE;QAC9E,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,4DAA4D,CAAC;YAE5E,OAAO;gBACL,KAAK,EAAE,KAAK,GAAG,CAAC;gBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,cAAc,EAAE,SAAS;gBACzB,MAAM;gBACN,aAAa,EAAE,uBAAuB,CAAC;oBACrC,MAAM,EAAE,aAAa;oBACrB,OAAO,EAAE,EAAE;oBACX,OAAO,EAAE,IAAI;oBACb,MAAM;iBACP,CAAC;aACH,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG;gBACrB,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,IAAI,CAAC,OAAO;oBACZ,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,CAAC,SAAS;wBACd,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,aAAa,CAAC;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC;YACvE,MAAM,MAAM,GAAG,wBAAwB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAErE,OAAO;gBACL,KAAK,EAAE,KAAK,GAAG,CAAC;gBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM;gBACN,OAAO;gBACP,OAAO,EAAE,IAAI;gBACb,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;gBAClF,cAAc,EAAE,SAAS;gBACzB,MAAM;gBACN,aAAa,EAAE,uBAAuB,CAAC;oBACrC,MAAM;oBACN,OAAO;oBACP,OAAO,EAAE,IAAI;oBACb,MAAM;iBACP,CAAC;aACH,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;YAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC7E,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,CAAC;YAC7D,MAAM,MAAM,GAAG,WAAW;gBACxB,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,SAAS;oBACT,CAAC,CAAC,yDAAyD;oBAC3D,CAAC,CAAC,SAAS,CAAC;YAEhB,OAAO;gBACL,KAAK,EAAE,KAAK,GAAG,CAAC;gBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,OAAO;gBACf,OAAO;gBACP,OAAO,EAAE,SAAS;gBAClB,kBAAkB,EAAE,OAAO;gBAC3B,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACjD,MAAM;gBACN,aAAa,EAAE,uBAAuB,CAAC;oBACrC,MAAM,EAAE,OAAO;oBACf,OAAO;oBACP,OAAO,EAAE,SAAS;oBAClB,MAAM;iBACP,CAAC;aACH,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAEjF,OAAO;gBACL,KAAK,EAAE,KAAK,GAAG,CAAC;gBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,SAAS;gBACjB,OAAO;gBACP,OAAO,EAAE,KAAK;gBACd,cAAc,EAAE,SAAS;gBACzB,aAAa,EAAE,uBAAuB,CAAC;oBACrC,MAAM,EAAE,SAAS;oBACjB,OAAO;oBACP,OAAO,EAAE,KAAK;iBACf,CAAC;aACH,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC9F,MAAM,cAAc,GAAG,mBAAmB,CACxC,IAAI,CAAC,SAAS,CAAC,OAAO,EACtB,UAAU,CAAC,QAAQ,CAAC,SAAS,CAC9B,CAAC;YACF,MAAM,aAAa,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;YAC3D,MAAM,YAAY,GAAG,wBAAwB,CAC3C,UAAU,CAAC,OAAO,CAAC,iBAAiB,EACpC,aAAa,CACd,CAAC;YACF,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,GAAG,yBAAyB,CAAC;YAC1E,MAAM,SAAS,GACb,UAAU,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ;gBACzC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;gBAC5B,eAAe,CAAC;YAClB,MAAM,MAAM,GACV,YAAY,CAAC,MAAM;gBACnB,CAAC,eAAe;oBACd,CAAC,CAAC,iCAAiC,yBAAyB,mBAAmB;oBAC/E,CAAC,CAAC,SAAS,CAAC;gBACd,CAAC,SAAS,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAClF,MAAM,OAAO,GAAG,SAAS,aAAa,KAAK,cAAc,CAAC,MAAM,SAAS,CAAC;YAE1E,OAAO;gBACL,KAAK,EAAE,KAAK,GAAG,CAAC;gBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,WAAW;gBACnB,OAAO;gBACP,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,aAAa,EAAE,cAAc,CAAC,MAAM;gBACpC,aAAa;gBACb,OAAO,EAAE,SAAS;gBAClB,kBAAkB,EAAE,YAAY;gBAChC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACjD,MAAM;gBACN,aAAa,EAAE,uBAAuB,CAAC;oBACrC,MAAM,EAAE,WAAW;oBACnB,OAAO;oBACP,UAAU,EAAE,YAAY,CAAC,UAAU;oBACnC,aAAa,EAAE,cAAc,CAAC,MAAM;oBACpC,aAAa;oBACb,OAAO,EAAE,SAAS;oBAClB,MAAM;iBACP,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,+BAA+B,CAAC;QAE/C,OAAO;YACL,KAAK,EAAE,KAAK,GAAG,CAAC;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,SAAS;YACzB,MAAM;YACN,aAAa,EAAE,uBAAuB,CAAC;gBACrC,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,MAAM;aACP,CAAC;SACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,aAAa,EAAE,0BAA0B;QACzC,MAAM,EAAE,IAAI;QACZ,QAAQ;QACR,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,KAAK;QACL,QAAQ,EAAE,UAAU,CAAC,QAAQ;KAC9B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EAAE,QAAgB,EAAiC,EAAE;IACxF,IAAI,OAAe,CAAC;IAEpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,+BAA+B;YACxC,GAAG,EAAE,yBAAyB,QAAQ,oCAAoC;YAC1E,GAAG,EAAE,kEAAkE;SACxE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,IAA0B,EAC1B,UAA6B,EAAE,EACD,EAAE;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAiC,EAAE,CAAC;IAElD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,SAAS;gBACjB,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,IAAI,CAAC,OAAO;aACrB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACvC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACzD,MAAM,eAAe,GAAG,YAAY,EAAE,SAAS,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBAChE,MAAM,MAAM,GAAG,sBAAsB,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,MAAM,EAAE,SAAS;oBACjB,MAAM;oBACN,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,aAAa,EAAE,IAAI,CAAC,aAAa;iBAClC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACtF,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;gBACzD,MAAM,IAAI,UAAU,CAAC;oBACnB,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,mBAAmB,IAAI,CAAC,IAAI,YAAY;oBACjD,GAAG,EAAE,qEAAqE;oBAC1E,GAAG,EAAE,qEAAqE;iBAC3E,CAAC,CAAC;YACL,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,2BAA2B,CACvD,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAC9B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,IAAI,CACV,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,eAAe,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GAAI,KAA2B,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAC9D,MAAM,IAAI,UAAU,CAAC;oBACnB,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,mBAAmB,IAAI,CAAC,IAAI,YAAY;oBACjD,GAAG,EAAE,MAAM;wBACT,CAAC,CAAC,8CAA8C,IAAI,CAAC,UAAU,KAAK;wBACpE,CAAC,CAAC,0BAA0B,IAAI,CAAC,UAAU,6CAA6C;oBAC1F,GAAG,EAAE,MAAM;wBACT,CAAC,CAAC,yEAAyE;wBAC3E,CAAC,CAAC,2DAA2D;iBAChE,CAAC,CAAC;YACL,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,SAAS,IAAI,CAAC,UAAU,EAAE;gBAClC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,0BAA0B;QACzC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ;QACR,OAAO;QACP,QAAQ;KACT,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,QAAgB,EAChB,UAA6B,EAAE,EACD,EAAE,CAAC,eAAe,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC"}

package/dist/shell-safety.d.ts

@@ -0,0 +1,3 @@
+/** Returns a reason when a shell command matches a high-risk execution pattern. */
+export declare function checkShellSafety(command: string): string | undefined;
+//# sourceMappingURL=shell-safety.d.ts.map

package/dist/shell-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-safety.d.ts","sourceRoot":"","sources":["../src/shell-safety.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CA+CpE"}

package/dist/shell-safety.js

@@ -0,0 +1,42 @@
+/** Returns a reason when a shell command matches a high-risk execution pattern. */
+export function checkShellSafety(command) {
+    const normalized = command.toLowerCase().trim();
+    if (/\brm\s+-[a-z]*[rf]/i.test(normalized) || /\brm\s+--(recursive|force)/i.test(normalized))
+        return 'Dangerous command pattern found: `rm` with recursive/force flags.';
+    if (/\b(del|erase|rd|rmdir)\b/i.test(normalized) &&
+        (/\/[a-z]*s/i.test(normalized) || /\b-(recurse|s)\b/i.test(normalized)))
+        return 'Dangerous command pattern found: recursive deletion (`del`, `rd`, or `rmdir` with `/s` or `-recurse`).';
+    if (/\bformat\s+[a-z]:/i.test(normalized))
+        return 'Dangerous command pattern found: disk formatting (`format`).';
+    if (/\bsudo\b/i.test(normalized))
+        return 'Dangerous command pattern found: execution with administrative privileges (`sudo`).';
+    if (/\bchmod\b/i.test(normalized))
+        return 'Dangerous command pattern found: modifying file permissions (`chmod`).';
+    if (/\bchown\b/i.test(normalized))
+        return 'Dangerous command pattern found: changing file ownership (`chown`).';
+    if (/\|\s*(sh|bash|zsh|fish|cmd|powershell|pwsh|iex)\b/i.test(normalized) ||
+        /\biex\b/i.test(normalized) ||
+        /\binvoke-expression\b/i.test(normalized))
+        return 'Dangerous command pattern found: piped shell execution or dynamic command evaluation.';
+    if (/\bbase64\b/i.test(normalized) &&
+        (/\|\s*(sh|bash|zsh|fish|cmd|powershell|pwsh|iex)\b/i.test(normalized) ||
+            /\b--decode\b/i.test(normalized) ||
+            /\b-d\b/i.test(normalized)))
+        return 'Dangerous command pattern found: decoding base64 payload into shell execution.';
+    if (/\/dev\/(tcp|udp)\//i.test(normalized))
+        return 'Dangerous command pattern found: network redirect / reverse shell redirection (`/dev/tcp` or `/dev/udp`).';
+    if (/\b(nc|netcat|ncat)\b/i.test(normalized) && /\s+-e\b/i.test(normalized))
+        return 'Dangerous command pattern found: netcat executable execution flag (`-e` redirection).';
+    if (/\b(bash|sh|zsh|dash|ksh)\s+-i\b/i.test(normalized))
+        return 'Dangerous command pattern found: interactive shell spawn (`-i` flag).';
+    if (/\b(curl|wget)\b/i.test(normalized) &&
+        /\b(sh|bash|zsh|cmd|powershell|pwsh)\b/i.test(normalized) &&
+        (/\.sh\b/i.test(normalized) || /\.ps1\b/i.test(normalized) || /\.bat\b/i.test(normalized)))
+        return 'Dangerous command pattern found: download and sequential script execution.';
+    if (/>>?\s*([/\\]etc[/\\]|c:[/\\]windows[/\\])/i.test(normalized))
+        return 'Dangerous command pattern found: write redirection to sensitive system directory.';
+    if (/\btee\b.*([/\\]etc[/\\]|c:[/\\]windows[/\\])/i.test(normalized))
+        return 'Dangerous command pattern found: writing to sensitive system path using tee.';
+    return undefined;
+}
+//# sourceMappingURL=shell-safety.js.map

package/dist/shell-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-safety.js","sourceRoot":"","sources":["../src/shell-safety.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC;QAC1F,OAAO,mEAAmE,CAAC;IAC7E,IACE,2BAA2B,CAAC,IAAI,CAAC,UAAU,CAAC;QAC5C,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEvE,OAAO,wGAAwG,CAAC;IAClH,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC;QACvC,OAAO,8DAA8D,CAAC;IACxE,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;QAC9B,OAAO,qFAAqF,CAAC;IAC/F,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAC/B,OAAO,wEAAwE,CAAC;IAClF,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAC/B,OAAO,qEAAqE,CAAC;IAC/E,IACE,oDAAoD,CAAC,IAAI,CAAC,UAAU,CAAC;QACrE,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;QAC3B,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC;QAEzC,OAAO,uFAAuF,CAAC;IACjG,IACE,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QAC9B,CAAC,oDAAoD,CAAC,IAAI,CAAC,UAAU,CAAC;YACpE,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;YAChC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE7B,OAAO,gFAAgF,CAAC;IAC1F,IAAI,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC;QACxC,OAAO,2GAA2G,CAAC;IACrH,IAAI,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;QACzE,OAAO,uFAAuF,CAAC;IACjG,IAAI,kCAAkC,CAAC,IAAI,CAAC,UAAU,CAAC;QACrD,OAAO,uEAAuE,CAAC;IACjF,IACE,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;QACnC,wCAAwC,CAAC,IAAI,CAAC,UAAU,CAAC;QACzD,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE1F,OAAO,4EAA4E,CAAC;IACtF,IAAI,4CAA4C,CAAC,IAAI,CAAC,UAAU,CAAC;QAC/D,OAAO,mFAAmF,CAAC;IAC7F,IAAI,+CAA+C,CAAC,IAAI,CAAC,UAAU,CAAC;QAClE,OAAO,8EAA8E,CAAC;IACxF,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@zaowu-labs/auto",
+  "version": "1.0.1",
+  "description": "ZaoWu automation workflows",
+  "type": "module",
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -b --pretty false",
+    "typecheck": "tsc -b --pretty false",
+    "dev": "tsc -b --watch"
+  },
+  "dependencies": {
+    "@zaowu-labs/core": "workspace:*",
+    "yaml": "^2.9.0"
+  },
+  "keywords": [
+    "zaowu",
+    "automation"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/zaowu-labs/zaowu.git",
+    "directory": "packages/auto"
+  },
+  "homepage": "https://github.com/zaowu-labs/zaowu",
+  "bugs": "https://github.com/zaowu-labs/zaowu/issues"
+}