agent-nuvira 1.59.5 → 1.59.7

package/README.md

@@ -2026,6 +2026,8 @@ npx tsc --noEmit
 | **v1.55.0** | Aug 2026 | `buff models unblock <provider>` escape hatch — manually release a registry-blocked provider (demote unavailable→unverified, clear quota parks + ledger cooldown, live re-probe with honest `stillBlocked`); also fixed the pre-existing `models status --json` / `refresh --json` flag-shadowing bug; 3,011 tests |
 | **v1.59.4** | Aug 2026 | P6 M6.6 Software Bill of Materials: `buff sbom` (CycloneDX 1.5 from lockfile, `--reproducible` pins), `sbom verify` (drift/tamper), `sbom licenses` (copyleft/unknown audit), `doctor --enterprise` Supply Chain check; 3,313 tests |
 | **v1.59.5** | Aug 2026 | Dashboard surfaces mid-stream flakiness end-to-end: violet `⏸ flaky N%` chips on registry rows (mirroring the CLI's `model explain` chip), `⏸ N flaky` provider badges, and a **Flaky mid-stream** stats card — the exact signal `routing.partialFlakiness` uses to deprioritize providers; 3,313 root tests |
+| **v1.59.7** | Aug 2026 | P6 M6.1 **RBAC** — `buff admin role add/remove/list` + `whoami` (admin/operator/viewer permission matrix over the admin surface; OIDC adapter interface; legacy single-user stays permissive until roles assigned) + dashboard **governance policy card** (live `routing.governance.*`) + CLI **flakiness trend tags** (`healing`/`worsening` in `models status`); 3,348 root tests |
+| **v1.59.6** | Aug 2026 | P6 M6.5 **Admin governance API** (`buff admin policy/allow/deny/allow-model/deny-model/max-cost/pii-min/unblock/clear` over the M2.4 policy) + dashboard **flakiness healing sparklines** (per-entry `partialHistory` trajectory, never hard-wiped) + Requests panel `⏸ N` partial chips (partials excluded from error rate); 3,328 root tests |
 | **v1.59.3** | Aug 2026 | `config set routing.<gate>` now accepts the boolean soft-signal keys (`capabilityFit`, `contextFit`, `partialFlakiness`); 3,286 tests |
 | **v1.59.2** | Aug 2026 | P4 M4.4 partial flakiness now feeds the ROUTER: registry `partialRate` EMA (bumped by mid-stream interruptions, healed by clean successes, never flips status) → reliability penalty (capped 40%) gated by `routing.partialFlakiness` (default ON) + transparent `⏸ flaky` chip in `models explain`; 3,284 tests |
 | **v1.59.1** | Aug 2026 | Dashboard: P4 M4.4 partial mid-stream interruption chips surface end-to-end (violet `⏸` timeline segment, day chips with streamed-chunk tooltip, per-action Partial section + stat); 3,276 tests |

package/dist/cli/admin.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Admin command — P6 M6.5 governance policy surface for Auto routing.
+ *
+ * The M2.4 admin schema (routing.governance.*) is enforced inside the
+ * auto-router's hard-constraint slot on every pick — violating providers are
+ * ELIMINATED, never just scored lower. This command promotes that raw config
+ * surface into a first-class admin API:
+ *
+ *   buff admin                        — Show the current policy (alias for `policy`)
+ *   buff admin policy [--json]        — Current allow/deny policy + enforcement status
+ *   buff admin allow <provider...>    — Add providers to governance.allowProviders
+ *   buff admin deny <provider...>     — Add providers to governance.denyProviders
+ *   buff admin allow-model <m...>     — Add models to governance.allowModels
+ *   buff admin deny-model <m...>      — Add models to governance.denyModels
+ *   buff admin max-cost <usd>         — Admin hard max cost per call (joins routing.maxCostUsd)
+ *   buff admin pii-min <0..1>         — Min privacy score for PII-matching tasks (default 1.0)
+ *   buff admin unblock on|off         — May `buff models unblock` override registry blocks?
+ *   buff admin clear <field>          — Remove one governance field (policy becomes permissive on it)
+ *
+ * All writes go through ConfigManager.save() — the same file/path the config
+ * CLI writes — so `buff config get routing.governance.<key>` agrees with the
+ * admin surface. Everything is additive: an empty policy is fully permissive.
+ */
+import { Command } from 'commander';
+import { BaseCommand } from './commands.js';
+export declare class AdminCommand extends BaseCommand {
+    /** P6 M6.1 RBAC — local role file + OIDC adapter seam (see enterprise/rbac.ts). */
+    private rbac;
+    /**
+     * Enforce an RBAC action for the current identity; returns false (after
+     * logging) when denied. Legacy single-user mode (no role file) stays fully
+     * permissive — enabling RBAC never locks you out; once roles are assigned,
+     * policy writes require `admin`. Callers abort on false.
+     */
+    private guard;
+    create(): Command;
+    private policyCommand;
+    private showPolicy;
+    private describeEnforcement;
+    private allowCommand;
+    private denyCommand;
+    private allowModelCommand;
+    private denyModelCommand;
+    private setListField;
+    private maxCostCommand;
+    private piiMinCommand;
+    private unblockCommand;
+    private clearCommand;
+    private roleCommand;
+    private whoamiCommand;
+}
+//# sourceMappingURL=admin.d.ts.map

package/dist/cli/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/cli/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAiB5C,qBAAa,YAAa,SAAQ,WAAW;IAC3C,mFAAmF;IACnF,OAAO,CAAC,IAAI,CAAqB;IAEjC;;;;;OAKG;IACH,OAAO,CAAC,KAAK;IAcb,MAAM,IAAI,OAAO;IAqBjB,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,UAAU;IA0ClB,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,cAAc;IAqBtB,OAAO,CAAC,aAAa;IAqBrB,OAAO,CAAC,cAAc;IAqBtB,OAAO,CAAC,YAAY;IAqBpB,OAAO,CAAC,WAAW;IA6CnB,OAAO,CAAC,aAAa;CAqBtB"}

package/dist/cli/admin.js

@@ -0,0 +1,361 @@
+/**
+ * Admin command — P6 M6.5 governance policy surface for Auto routing.
+ *
+ * The M2.4 admin schema (routing.governance.*) is enforced inside the
+ * auto-router's hard-constraint slot on every pick — violating providers are
+ * ELIMINATED, never just scored lower. This command promotes that raw config
+ * surface into a first-class admin API:
+ *
+ *   buff admin                        — Show the current policy (alias for `policy`)
+ *   buff admin policy [--json]        — Current allow/deny policy + enforcement status
+ *   buff admin allow <provider...>    — Add providers to governance.allowProviders
+ *   buff admin deny <provider...>     — Add providers to governance.denyProviders
+ *   buff admin allow-model <m...>     — Add models to governance.allowModels
+ *   buff admin deny-model <m...>      — Add models to governance.denyModels
+ *   buff admin max-cost <usd>         — Admin hard max cost per call (joins routing.maxCostUsd)
+ *   buff admin pii-min <0..1>         — Min privacy score for PII-matching tasks (default 1.0)
+ *   buff admin unblock on|off         — May `buff models unblock` override registry blocks?
+ *   buff admin clear <field>          — Remove one governance field (policy becomes permissive on it)
+ *
+ * All writes go through ConfigManager.save() — the same file/path the config
+ * CLI writes — so `buff config get routing.governance.<key>` agrees with the
+ * admin surface. Everything is additive: an empty policy is fully permissive.
+ */
+import { Command } from 'commander';
+import { BaseCommand } from './commands.js';
+import { logger } from '../utils/logger.js';
+import { RbacManager, RbacError, ROLES } from '../enterprise/rbac.js';
+/** The governance fields `buff admin clear` accepts. */
+const GOVERNANCE_FIELDS = [
+    'allowProviders', 'denyProviders', 'allowModels', 'denyModels',
+    'maxCostUsd', 'minPrivacyForPii', 'piiPatterns', 'allowUnblock',
+];
+/** Union-append to a comma/space list field (deduped, order preserved). */
+function appendUnique(current, additions) {
+    return [...new Set([...(current || []), ...additions])];
+}
+export class AdminCommand extends BaseCommand {
+    /** P6 M6.1 RBAC — local role file + OIDC adapter seam (see enterprise/rbac.ts). */
+    rbac = new RbacManager();
+    /**
+     * Enforce an RBAC action for the current identity; returns false (after
+     * logging) when denied. Legacy single-user mode (no role file) stays fully
+     * permissive — enabling RBAC never locks you out; once roles are assigned,
+     * policy writes require `admin`. Callers abort on false.
+     */
+    guard(action) {
+        if (this.rbac.isLegacyMode())
+            return true;
+        try {
+            this.rbac.requireCan(action);
+            return true;
+        }
+        catch (err) {
+            if (err instanceof RbacError) {
+                logger.error(`⛔ ${err.message}`);
+                logger.error('   Run `buff admin role add <you> admin` once as the initial admin.');
+            }
+            return false;
+        }
+    }
+    create() {
+        return new Command('admin')
+            .description('Admin governance policy for Auto routing (P6 M6.5) — allow/deny providers & models, hard cost cap, PII privacy, unblock control')
+            .addCommand(this.policyCommand())
+            .addCommand(this.allowCommand())
+            .addCommand(this.denyCommand())
+            .addCommand(this.allowModelCommand())
+            .addCommand(this.denyModelCommand())
+            .addCommand(this.maxCostCommand())
+            .addCommand(this.piiMinCommand())
+            .addCommand(this.unblockCommand())
+            .addCommand(this.clearCommand())
+            .addCommand(this.roleCommand())
+            .addCommand(this.whoamiCommand())
+            .action(() => {
+            this.showPolicy(false);
+        });
+    }
+    // ─── policy ─────────────────────────────────────────────────────────────
+    policyCommand() {
+        return new Command('policy')
+            .description('Show the current governance policy + enforcement status')
+            .option('--json', 'Machine-readable JSON output')
+            .action((options) => {
+            this.showPolicy(options?.json === true);
+        });
+    }
+    showPolicy(json) {
+        const gov = this.configManager.getAll().routing?.governance || {};
+        if (json) {
+            console.log(JSON.stringify({ governance: gov, enforced: this.describeEnforcement() }, null, 2));
+            return;
+        }
+        const hasAny = GOVERNANCE_FIELDS.some((f) => gov[f] !== undefined);
+        logger.highlight('\n  ── Admin Governance Policy (P6 M6.5) ──\n');
+        if (!hasAny) {
+            console.log('  ⚖️  Policy is EMPTY — fully permissive. Auto routing may use any provider × model.');
+            console.log('      Add rules with:  buff admin allow <provider> · buff admin deny <provider>');
+            console.log('                      buff admin allow-model <model> · buff admin max-cost <usd>');
+        }
+        else {
+            const row = (label, value) => {
+                const rendered = Array.isArray(value)
+                    ? value.join(', ')
+                    : typeof value === 'number'
+                        ? label.toLowerCase().includes('cost')
+                            ? `$${value}`
+                            : String(value)
+                        : String(value);
+                console.log(`  ${label}: ${rendered || '(none)'}`);
+            };
+            if (gov.allowProviders?.length)
+                row('allowProviders', gov.allowProviders);
+            else
+                console.log('  allowProviders: (none — all providers allowed)');
+            if (gov.denyProviders?.length)
+                row('denyProviders', gov.denyProviders);
+            else
+                console.log('  denyProviders:  (none)');
+            if (gov.allowModels?.length)
+                row('allowModels', gov.allowModels);
+            else
+                console.log('  allowModels:    (none — all models allowed)');
+            if (gov.denyModels?.length)
+                row('denyModels', gov.denyModels);
+            else
+                console.log('  denyModels:     (none)');
+            row('maxCostUsd', gov.maxCostUsd ?? '(none — no admin cost cap)');
+            row('minPrivacyForPii', gov.minPrivacyForPii ?? '1.0 (local-only for PII)');
+            if (gov.piiPatterns?.length)
+                row('piiPatterns', gov.piiPatterns);
+            else
+                console.log('  piiPatterns:    (none — no PII domain guard)');
+            row('allowUnblock', gov.allowUnblock ?? 'true (unblock escape hatch open)');
+        }
+        console.log(`\n  ${this.describeEnforcement()}`);
+        console.log('  Rules are admin-HARD: violating providers are eliminated, never just scored lower.');
+        console.log('');
+    }
+    describeEnforcement() {
+        const gov = this.configManager.getAll().routing?.governance;
+        const rules = [
+            gov?.allowProviders?.length ? 'provider allow-list' : null,
+            gov?.denyProviders?.length ? 'provider deny-list' : null,
+            gov?.allowModels?.length ? 'model allow-list' : null,
+            gov?.denyModels?.length ? 'model deny-list' : null,
+            gov?.maxCostUsd !== undefined ? 'admin cost cap' : null,
+            gov?.piiPatterns?.length ? 'PII privacy guard' : null,
+        ].filter(Boolean);
+        return rules.length > 0
+            ? `Enforced on every Auto pick (${rules.join(', ')})`
+            : 'No rules active — every provider × model is eligible';
+    }
+    // ─── allow / deny providers ──────────────────────────────────────────────
+    allowCommand() {
+        return new Command('allow')
+            .description('Add providers to the allow-list (empty = all providers allowed)')
+            .argument('<providers...>', 'Provider ids (e.g. groq local)')
+            .action((providers) => {
+            if (!this.guard('policy.write'))
+                return;
+            this.setListField('allowProviders', providers);
+        });
+    }
+    denyCommand() {
+        return new Command('deny')
+            .description('Add providers to the deny-list (wins over the allow-list)')
+            .argument('<providers...>', 'Provider ids (e.g. gemini openrouter)')
+            .action((providers) => {
+            if (!this.guard('policy.write'))
+                return;
+            this.setListField('denyProviders', providers);
+        });
+    }
+    // ─── allow-model / deny-model ────────────────────────────────────────────
+    allowModelCommand() {
+        return new Command('allow-model')
+            .description('Add models to the allow-list — a provider survives only if one of its candidate models is listed')
+            .argument('<models...>', 'Model ids (e.g. llama-3.3-70b-versatile)')
+            .action((models) => {
+            if (!this.guard('policy.write'))
+                return;
+            this.setListField('allowModels', models);
+        });
+    }
+    denyModelCommand() {
+        return new Command('deny-model')
+            .description('Add models to the deny-list (wins over the allow-list)')
+            .argument('<models...>', 'Model ids')
+            .action((models) => {
+            if (!this.guard('policy.write'))
+                return;
+            this.setListField('denyModels', models);
+        });
+    }
+    setListField(field, values) {
+        const gov = this.configManager.getAll().routing?.governance || {};
+        const merged = appendUnique(gov[field], values);
+        this.configManager.save({
+            routing: { governance: { ...gov, [field]: merged } },
+        });
+        logger.success(`${field} = ${merged.join(', ')}`);
+    }
+    // ─── max-cost ────────────────────────────────────────────────────────────
+    maxCostCommand() {
+        return new Command('max-cost')
+            .description('Set the admin hard max cost per call (USD); joins routing.maxCostUsd (stricter wins)')
+            .argument('<usd>', 'Max cost per call in USD (e.g. 0.01)')
+            .action((usd) => {
+            if (!this.guard('policy.write'))
+                return;
+            const num = Number(usd);
+            if (isNaN(num) || num < 0) {
+                logger.error(`Invalid max-cost "${usd}". Must be a non-negative number (USD).`);
+                return;
+            }
+            const gov = this.configManager.getAll().routing?.governance || {};
+            this.configManager.save({
+                routing: { governance: { ...gov, maxCostUsd: num } },
+            });
+            logger.success(`governance.maxCostUsd = ${num}`);
+        });
+    }
+    // ─── pii-min ─────────────────────────────────────────────────────────────
+    piiMinCommand() {
+        return new Command('pii-min')
+            .description('Set the minimum privacy score (0-1) required when a task matches a PII pattern (default 1.0 = local-only)')
+            .argument('<score>', '0 to 1 (1.0 = only fully-local providers may serve PII)')
+            .action((score) => {
+            if (!this.guard('policy.write'))
+                return;
+            const num = Number(score);
+            if (isNaN(num) || num < 0 || num > 1) {
+                logger.error(`Invalid pii-min "${score}". Must be between 0 and 1.`);
+                return;
+            }
+            const gov = this.configManager.getAll().routing?.governance || {};
+            this.configManager.save({
+                routing: { governance: { ...gov, minPrivacyForPii: num } },
+            });
+            logger.success(`governance.minPrivacyForPii = ${num}`);
+        });
+    }
+    // ─── unblock on|off ──────────────────────────────────────────────────────
+    unblockCommand() {
+        return new Command('unblock')
+            .description('Control whether `buff models unblock` may override REGISTRY-learned blocks (false = admin-hard)')
+            .argument('<on|off>', 'on (escape hatch open, default) or off (admin-hard)')
+            .action((mode) => {
+            if (!this.guard('policy.write'))
+                return;
+            const lower = mode.trim().toLowerCase();
+            if (lower !== 'on' && lower !== 'off') {
+                logger.error(`Invalid unblock "${mode}". Use "on" or "off".`);
+                return;
+            }
+            const gov = this.configManager.getAll().routing?.governance || {};
+            this.configManager.save({
+                routing: { governance: { ...gov, allowUnblock: lower === 'on' } },
+            });
+            logger.success(`governance.allowUnblock = ${lower === 'on'} (${lower === 'on' ? 'unblock allowed' : 'registry blocks are admin-hard'})`);
+        });
+    }
+    // ─── clear <field> ───────────────────────────────────────────────────────
+    clearCommand() {
+        return new Command('clear')
+            .description('Remove one governance rule (the policy becomes permissive on that field)')
+            .argument('<field>', `Field to clear: ${GOVERNANCE_FIELDS.join(', ')}`)
+            .action((field) => {
+            if (!this.guard('policy.write'))
+                return;
+            if (!GOVERNANCE_FIELDS.includes(field)) {
+                logger.error(`Unknown governance field "${field}". Valid: ${GOVERNANCE_FIELDS.join(', ')}`);
+                return;
+            }
+            const gov = this.configManager.getAll().routing?.governance || {};
+            const { [field]: _removed, ...rest } = gov;
+            this.configManager.save({
+                routing: { governance: rest },
+            });
+            logger.success(`Cleared governance.${field}`);
+        });
+    }
+    // ─── role add / remove / list (P6 M6.1 RBAC — admin only) ────────────────
+    roleCommand() {
+        return new Command('role')
+            .description('Manage RBAC roles over the admin surface (P6 M6.1 — requires admin role)')
+            .addCommand(new Command('add')
+            .description('Assign a role to a user (first assignment exits legacy single-user mode)')
+            .argument('<user>', 'Username (OS user, or the OIDC subject for token mode)')
+            .argument('<role>', `Role: ${ROLES.join(' | ')}`)
+            .action((user, role) => {
+            if (!this.guard('role.manage'))
+                return;
+            try {
+                const r = this.rbac.assignRole(user, role, 'local');
+                logger.success(`${user} → ${r.role}`);
+                logger.info('Policy writes now require the admin role. Run `buff admin whoami` to confirm yours.');
+            }
+            catch (err) {
+                if (err instanceof RbacError)
+                    logger.error(`⛔ ${err.message}`);
+                else
+                    throw err;
+            }
+        }))
+            .addCommand(new Command('remove')
+            .description('Remove a user\'s role assignment (if none remain, legacy permissive mode resumes)')
+            .argument('<user>', 'Username')
+            .action((user) => {
+            if (!this.guard('role.manage'))
+                return;
+            if (this.rbac.removeUser(user))
+                logger.success(`Removed role for ${user}`);
+            else
+                logger.error(`No role assignment found for ${user}`);
+        }))
+            .addCommand(new Command('list')
+            .description('List all role assignments')
+            .action(() => {
+            if (!this.guard('role.manage'))
+                return;
+            const users = this.rbac.listUsers();
+            logger.highlight('\n  ── RBAC Role Assignments (P6 M6.1) ──\n');
+            if (users.length === 0) {
+                console.log('  Legacy single-user mode — no roles assigned, everything allowed.');
+            }
+            else {
+                for (const u of users) {
+                    console.log(`  ${u.user.padEnd(22)} ${u.role.padEnd(9)} via ${u.via || 'local'} · added ${new Date(u.addedAt).toLocaleString()}`);
+                }
+            }
+            console.log('');
+        }));
+    }
+    // ─── whoami ──────────────────────────────────────────────────────────────
+    whoamiCommand() {
+        return new Command('whoami')
+            .description('Show the current identity and its effective RBAC permissions')
+            .action(() => {
+            const user = RbacManager.currentIdentity();
+            const role = this.rbac.getRole(user);
+            logger.highlight('\n  ── RBAC Identity (P6 M6.1) ──\n');
+            console.log(`  User: ${user}`);
+            if (role) {
+                console.log(`  Role: ${role}`);
+                console.log(`  Can:  ${this.rbac.permissionsFor(role).join(', ')}`);
+            }
+            else if (this.rbac.isLegacyMode()) {
+                console.log('  Role: none (legacy single-user mode — full access)');
+                console.log('  Can:  everything (until roles are assigned)');
+            }
+            else {
+                console.log('  Role: unassigned (viewer-equivalent — read-only)');
+                console.log('  Can:  policy.read');
+            }
+            console.log('');
+        });
+    }
+}
+//# sourceMappingURL=admin.js.map

package/dist/cli/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/cli/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAItE,wDAAwD;AACxD,MAAM,iBAAiB,GAA0C;IAC/D,gBAAgB,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY;IAC9D,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc;CAChE,CAAC;AAEF,2EAA2E;AAC3E,SAAS,YAAY,CAAC,OAA6B,EAAE,SAAmB;IACtE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,WAAW;IAC3C,mFAAmF;IAC3E,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;IAEjC;;;;;OAKG;IACK,KAAK,CAAC,MAAmB;QAC/B,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;gBAC7B,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjC,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;aACxB,WAAW,CAAC,iIAAiI,CAAC;aAC9I,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;aAChC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;aAC/B,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;aAC9B,UAAU,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;aACpC,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;aACnC,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;aACjC,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;aAChC,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;aACjC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;aAC/B,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;aAC9B,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;aAChC,MAAM,CAAC,GAAG,EAAE;YACX,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,2EAA2E;IAEnE,aAAa;QACnB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,yDAAyD,CAAC;aACtE,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;aAChD,MAAM,CAAC,CAAC,OAA4B,EAAE,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,UAAU,CAAC,IAAa;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;QAClE,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QACnE,MAAM,CAAC,SAAS,CAAC,+CAA+C,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAC;YACpG,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;YAC/F,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;QAClG,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,KAAc,EAAQ,EAAE;gBAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBACnC,CAAC,CAAE,KAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;oBAChC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;wBACzB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;4BACpC,CAAC,CAAC,IAAI,KAAK,EAAE;4BACb,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;wBACjB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;YACrD,CAAC,CAAC;YACF,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM;gBAAE,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;;gBACrE,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;YACrE,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM;gBAAE,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;;gBAClE,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM;gBAAE,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;;gBAC5D,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAClE,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM;gBAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;;gBACzD,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAC7C,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,UAAU,IAAI,4BAA4B,CAAC,CAAC;YAClE,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,gBAAgB,IAAI,0BAA0B,CAAC,CAAC;YAC5E,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM;gBAAE,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;;gBAC5D,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;YACnE,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,YAAY,IAAI,kCAAkC,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAC;QACpG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAEO,mBAAmB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;QAC5D,MAAM,KAAK,GAAG;YACZ,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI;YAC1D,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI;YACxD,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI;YACpD,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI;YAClD,GAAG,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI;YACvD,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI;SACtD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,gCAAgC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACrD,CAAC,CAAC,sDAAsD,CAAC;IAC7D,CAAC;IAED,4EAA4E;IAEpE,YAAY;QAClB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;aACxB,WAAW,CAAC,iEAAiE,CAAC;aAC9E,QAAQ,CAAC,gBAAgB,EAAE,gCAAgC,CAAC;aAC5D,MAAM,CAAC,CAAC,SAAmB,EAAE,EAAE;YAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAAE,OAAO;YACxC,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,WAAW;QACjB,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;aACvB,WAAW,CAAC,2DAA2D,CAAC;aACxE,QAAQ,CAAC,gBAAgB,EAAE,uCAAuC,CAAC;aACnE,MAAM,CAAC,CAAC,SAAmB,EAAE,EAAE;YAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAAE,OAAO;YACxC,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACP,CAAC;IAED,4EAA4E;IAEpE,iBAAiB;QACvB,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC;aAC9B,WAAW,CAAC,kGAAkG,CAAC;aAC/G,QAAQ,CAAC,aAAa,EAAE,0CAA0C,CAAC;aACnE,MAAM,CAAC,CAAC,MAAgB,EAAE,EAAE;YAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAAE,OAAO;YACxC,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,gBAAgB;QACtB,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC;aAC7B,WAAW,CAAC,wDAAwD,CAAC;aACrE,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC;aACpC,MAAM,CAAC,CAAC,MAAgB,EAAE,EAAE;YAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAAE,OAAO;YACxC,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,YAAY,CAAC,KAAwE,EAAE,MAAgB;QAC7G,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YACtB,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE;SAC9B,CAAC,CAAC;QAC1B,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,4EAA4E;IAEpE,cAAc;QACpB,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;aAC3B,WAAW,CAAC,sFAAsF,CAAC;aACnG,QAAQ,CAAC,OAAO,EAAE,sCAAsC,CAAC;aACzD,MAAM,CAAC,CAAC,GAAW,EAAE,EAAE;YACtB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAAE,OAAO;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,yCAAyC,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;YAClE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBACtB,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE;aAC9B,CAAC,CAAC;YAC1B,MAAM,CAAC,OAAO,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACP,CAAC;IAED,4EAA4E;IAEpE,aAAa;QACnB,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC;aAC1B,WAAW,CAAC,2GAA2G,CAAC;aACxH,QAAQ,CAAC,SAAS,EAAE,yDAAyD,CAAC;aAC9E,MAAM,CAAC,CAAC,KAAa,EAAE,EAAE;YACxB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAAE,OAAO;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,oBAAoB,KAAK,6BAA6B,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;YAClE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBACtB,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE;aACpC,CAAC,CAAC;YAC1B,MAAM,CAAC,OAAO,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACP,CAAC;IAED,4EAA4E;IAEpE,cAAc;QACpB,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC;aAC1B,WAAW,CAAC,iGAAiG,CAAC;aAC9G,QAAQ,CAAC,UAAU,EAAE,qDAAqD,CAAC;aAC3E,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;YACvB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAAE,OAAO;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACxC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBACtC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,uBAAuB,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;YAClE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBACtB,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,GAAG,EAAE,YAAY,EAAE,KAAK,KAAK,IAAI,EAAE,EAAE;aAC3C,CAAC,CAAC;YAC1B,MAAM,CAAC,OAAO,CAAC,6BAA6B,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gCAAgC,GAAG,CAAC,CAAC;QAC3I,CAAC,CAAC,CAAC;IACP,CAAC;IAED,4EAA4E;IAEpE,YAAY;QAClB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;aACxB,WAAW,CAAC,0EAA0E,CAAC;aACvF,QAAQ,CAAC,SAAS,EAAE,mBAAmB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;aACtE,MAAM,CAAC,CAAC,KAAa,EAAE,EAAE;YACxB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;gBAAE,OAAO;YACxC,IAAI,CAAE,iBAA2C,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClE,MAAM,CAAC,KAAK,CAAC,6BAA6B,KAAK,aAAa,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC5F,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;YAClE,MAAM,EAAE,CAAC,KAA+B,CAAC,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;YACrE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBACtB,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;aACP,CAAC,CAAC;YAC1B,MAAM,CAAC,OAAO,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACP,CAAC;IAED,4EAA4E;IAEpE,WAAW;QACjB,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;aACvB,WAAW,CAAC,0EAA0E,CAAC;aACvF,UAAU,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC;aAC3B,WAAW,CAAC,0EAA0E,CAAC;aACvF,QAAQ,CAAC,QAAQ,EAAE,wDAAwD,CAAC;aAC5E,QAAQ,CAAC,QAAQ,EAAE,SAAS,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;aAChD,MAAM,CAAC,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE;YACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;gBAAE,OAAO;YACvC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAY,EAAE,OAAO,CAAC,CAAC;gBAC5D,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;YACrG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,SAAS;oBAAE,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;;oBAC1D,MAAM,GAAG,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;aACJ,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC;aAC9B,WAAW,CAAC,mFAAmF,CAAC;aAChG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;aAC9B,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;YACvB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;gBAAE,OAAO;YACvC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;;gBACtE,MAAM,CAAC,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;aACJ,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC;aAC5B,WAAW,CAAC,2BAA2B,CAAC;aACxC,MAAM,CAAC,GAAG,EAAE;YACX,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;gBAAE,OAAO;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,MAAM,CAAC,SAAS,CAAC,6CAA6C,CAAC,CAAC;YAChE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;YACpF,CAAC;iBAAM,CAAC;gBACN,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,OAAO,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBACpI,CAAC;YACH,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;IAED,4EAA4E;IAEpE,aAAa;QACnB,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;aACzB,WAAW,CAAC,8DAA8D,CAAC;aAC3E,MAAM,CAAC,GAAG,EAAE;YACX,MAAM,IAAI,GAAG,WAAW,CAAC,eAAe,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YAC/B,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;gBACpE,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;gBAClE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACP,CAAC;CACF"}

package/dist/cli/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/cli/router.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAKrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AA0C9D;;GAEG;AACH,wBAAgB,SAAS,IAAI,OAAO,CA8InC;AASD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,aAAa,EAAE,aAAa,EAC5B,cAAc,CAAC,EAAE,MAAM,GACtB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAoD/C"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/cli/router.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAKrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AA2C9D;;GAEG;AACH,wBAAgB,SAAS,IAAI,OAAO,CAgJnC;AASD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,aAAa,EAAE,aAAa,EAC5B,cAAc,CAAC,EAAE,MAAM,GACtB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAoD/C"}

package/dist/cli/router.js

@@ -35,6 +35,7 @@ import { ProviderCommand } from './provider.js';
 import { SecurityCommand } from './security.js';
 import { AuditCommand } from './audit.js';
 import { SbomCommand } from './sbom.js';
+import { AdminCommand } from './admin.js';
 import { FeedbackCommand } from './feedback.js';
 import { MarketplaceCommand } from './marketplace.js';
 import { MCPCommand } from './mcp.js';
@@ -59,10 +60,12 @@ export function createCLI() {
     const chatCmd = new ChatCommand();
     const editCmd = new EditCommand();
     const planCmd = new PlanCommand();
+    const adminCmd = new AdminCommand();
     const configCmd = new ConfigCommand();
     const cacheCmd = new CacheCommand();
     const modelsCmd = new ModelsCommand();
     const executeCmd = new ExecuteCommand();
+    program.addCommand(adminCmd.create());
     program.addCommand(chatCmd.create());
     program.addCommand(editCmd.create());
     program.addCommand(planCmd.create());

package/dist/cli/router.js.map

@@ -1 +1 @@
-{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/cli/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,mDAAmD;AACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7G,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAG1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,MAAM,CAAC;SACZ,WAAW,CAAC,4DAA4D,CAAC;SACzE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAExB,iBAAiB;IACjB,OAAO;SACJ,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAEjD,oBAAoB;IACpB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;IAExC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpC,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,gCAAgC;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC,gDAAgD;IAChD,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,4BAA4B;IAC5B,MAAM,YAAY,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAC5C,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAE1C,wCAAwC;IACxC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC,kCAAkC;IAClC,MAAM,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvC,kCAAkC;IAClC,MAAM,YAAY,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAC5C,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,MAAM,aAAa,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC9C,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErC,8BAA8B;IAC9B,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpC,qDAAqD;IACrD,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAEzC,0DAA0D;IAC1D,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAEzC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErC,0DAA0D;IAC1D,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAEzC,6DAA6D;IAC7D,MAAM,cAAc,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAChD,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;IAE5C,4DAA4D;IAC5D,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpC,wDAAwD;IACxD,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;IAC9B,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAEnC,yDAAyD;IACzD,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,kEAAkE;IAClE,MAAM,YAAY,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAC5C,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAE1C,4BAA4B;IAC5B,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;QAClB,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,aAA4B,EAC5B,cAAuB;IAEvB,MAAM,OAAO,GAAG,cAAc,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC;IAEzE,oCAAoC;IACpC,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,iBAAiB,CAAC,OAAuB,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,sBAAsB,OAAO,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,sDAAsD;IACtD,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,IAAI,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAuB,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,6BAA6B,OAAO,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,6EAA6E;IAC7E,wEAAwE;IACxE,uEAAuE;IACvE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,kBAAkB,GACtB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1D,IAAI,CAAC;gBACH,OAAO,aAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC;QAC/C,MAAM,CAAC,IAAI,CACT,gGAAgG,kBAAkB,KAAK;YACvH,sDAAsD,CACvD,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,sCAAsC,kBAAkB,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,mDAAmD;IACnD,MAAM,CAAC,IAAI,CAAC,qBAAqB,OAAO,uBAAuB,aAAa,CAAC,MAAM,EAAE,CAAC,eAAe,GAAG,CAAC,CAAC;IAC1G,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC;IAC5D,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,iCAAiC,YAAY,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IACjF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/cli/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,mDAAmD;AACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7G,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAG1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,MAAM,CAAC;SACZ,WAAW,CAAC,4DAA4D,CAAC;SACzE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAExB,iBAAiB;IACjB,OAAO;SACJ,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAEjD,oBAAoB;IACpB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;IAExC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpC,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,gCAAgC;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC,gDAAgD;IAChD,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,4BAA4B;IAC5B,MAAM,YAAY,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAC5C,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAE1C,wCAAwC;IACxC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC,kCAAkC;IAClC,MAAM,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvC,kCAAkC;IAClC,MAAM,YAAY,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAC5C,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,MAAM,aAAa,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC9C,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErC,8BAA8B;IAC9B,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpC,qDAAqD;IACrD,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAEzC,0DAA0D;IAC1D,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAEzC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErC,0DAA0D;IAC1D,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAEzC,6DAA6D;IAC7D,MAAM,cAAc,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAChD,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;IAE5C,4DAA4D;IAC5D,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpC,wDAAwD;IACxD,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;IAC9B,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAEnC,yDAAyD;IACzD,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtC,kEAAkE;IAClE,MAAM,YAAY,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAC5C,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAE1C,4BAA4B;IAC5B,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;QAClB,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,aAA4B,EAC5B,cAAuB;IAEvB,MAAM,OAAO,GAAG,cAAc,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC;IAEzE,oCAAoC;IACpC,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,iBAAiB,CAAC,OAAuB,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,sBAAsB,OAAO,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,sDAAsD;IACtD,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,IAAI,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAuB,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,6BAA6B,OAAO,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,6EAA6E;IAC7E,wEAAwE;IACxE,uEAAuE;IACvE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,kBAAkB,GACtB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1D,IAAI,CAAC;gBACH,OAAO,aAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC;QAC/C,MAAM,CAAC,IAAI,CACT,gGAAgG,kBAAkB,KAAK;YACvH,sDAAsD,CACvD,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,sCAAsC,kBAAkB,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,mDAAmD;IACnD,MAAM,CAAC,IAAI,CAAC,qBAAqB,OAAO,uBAAuB,aAAa,CAAC,MAAM,EAAE,CAAC,eAAe,GAAG,CAAC,CAAC;IAC1G,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC;IAC5D,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,iCAAiC,YAAY,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IACjF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC"}

package/dist/enterprise/rbac.d.ts

@@ -0,0 +1,86 @@
+/**
+ * RbacManager — P6 M6.1 role-based access control over the admin/governance
+ * surface.
+ *
+ * Minimal first milestone, deliberately:
+ * - A local role file (`~/.buff/rbac.json`, or BUFF_CONFIG_DIR override) maps
+ *   OS user → role. **Legacy single-user mode**: when the file has no users,
+ *   everything stays allowed — enabling RBAC can never lock you out.
+ * - A permission matrix (admin / operator / viewer) gates the `buff admin`
+ *   surface: policy *writes* and role management require `admin`; policy
+ *   *reads* are open to every role; `operator` may run routing/models.
+ * - An **OIDC adapter interface** is the seam for token-backed identity: a
+ *   future gateway can implement `OidcAdapter.verify(token)` and swap in
+ *   verified identities without touching the enforcement paths.
+ *
+ * The identity for local mode is the OS username (`process.env.USER`), with
+ * `BUFF_ACT_AS` as an override for CI/tests/multi-tenant tooling.
+ */
+/** Built-in roles — least privilege by default (viewer is read-only). */
+export type Role = 'admin' | 'operator' | 'viewer';
+export declare const ROLES: readonly Role[];
+/** One user's role assignment in the local role file. */
+export interface RbacUser {
+    role: Role;
+    /** Epoch ms the assignment was written. */
+    addedAt: number;
+    /** How the identity was established: 'local' (OS user) or 'oidc'. */
+    via?: 'local' | 'oidc';
+}
+/** Actions on the admin/enterprise surface that roles gate. */
+export type AdminAction = 'policy.read' | 'policy.write' | 'role.manage' | 'credential.write' | 'routing.operate';
+/** Thrown when the current identity lacks permission for an action. */
+export declare class RbacError extends Error {
+    constructor(message: string);
+}
+/**
+ * OIDC adapter interface — the seam for token-backed identity. Implement this
+ * to verify a bearer token into a verified identity; the gateway milestone
+ * (M6.4) will wire it in. `groups` may map to roles downstream.
+ */
+export interface OidcAdapter {
+    /** Verify a bearer token → identity, or null when invalid/expired. */
+    verify(token: string): Promise<{
+        sub: string;
+        email?: string;
+        groups?: string[];
+    } | null>;
+}
+/** Default adapter: no token mode — identity is always the local OS user. */
+export declare class NoOidcAdapter implements OidcAdapter {
+    verify(): Promise<null>;
+}
+export declare class RbacManager {
+    private users;
+    private path;
+    constructor(path?: string);
+    /** The acting identity — OS user, overridable via BUFF_ACT_AS (CI/tests). */
+    static currentIdentity(): string;
+    /** Single-user legacy mode: no role file / no users → fully permissive. */
+    isLegacyMode(): boolean;
+    /** Role assigned to a user, or undefined when unassigned. */
+    getRole(user: string): Role | undefined;
+    /** May `user` perform `action`? Unassigned users have no permissions. */
+    can(user: string, action: AdminAction): boolean;
+    /** Permissions granted to a role (for `whoami` / diagnostics). */
+    permissionsFor(role: Role): AdminAction[];
+    /**
+     * Enforce `action` for the current identity. Throws RbacError when denied.
+     * Callers SHOULD check `isLegacyMode()` first (legacy = permissive), unless
+     * they intend to be strict even before RBAC is configured.
+     */
+    requireCan(action: AdminAction, user?: string): void;
+    /** Assign (or re-assign) a role. Persists. */
+    assignRole(user: string, role: Role, via?: 'local' | 'oidc'): RbacUser;
+    /** Remove a user's role assignment. Returns true when one existed. */
+    removeUser(user: string): boolean;
+    /** All assigned users, sorted by name. */
+    listUsers(): Array<{
+        user: string;
+    } & RbacUser>;
+    /** Reset to legacy mode (tests / recovery). */
+    reset(): void;
+    private load;
+    private persist;
+}
+//# sourceMappingURL=rbac.d.ts.map

package/dist/enterprise/rbac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.d.ts","sourceRoot":"","sources":["../../src/enterprise/rbac.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AASH,yEAAyE;AACzE,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AACnD,eAAO,MAAM,KAAK,EAAE,SAAS,IAAI,EAAoC,CAAC;AAEtE,yDAAyD;AACzD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,IAAI,CAAC;IACX,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,GAAG,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CACxB;AAED,+DAA+D;AAC/D,MAAM,MAAM,WAAW,GACnB,aAAa,GACb,cAAc,GACd,aAAa,GACb,kBAAkB,GAClB,iBAAiB,CAAC;AAgBtB,uEAAuE;AACvE,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,sEAAsE;IACtE,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CAC3F;AAED,6EAA6E;AAC7E,qBAAa,aAAc,YAAW,WAAW;IACzC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CAG9B;AAcD,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAA2B;IACxC,OAAO,CAAC,IAAI,CAAS;gBAET,IAAI,CAAC,EAAE,MAAM;IAKzB,6EAA6E;IAC7E,MAAM,CAAC,eAAe,IAAI,MAAM;IAIhC,2EAA2E;IAC3E,YAAY,IAAI,OAAO;IAIvB,6DAA6D;IAC7D,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS;IAIvC,yEAAyE;IACzE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO;IAM/C,kEAAkE;IAClE,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,WAAW,EAAE;IAIzC;;;;OAIG;IACH,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,MAAsC,GAAG,IAAI;IAQnF,8CAA8C;IAC9C,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,GAAE,OAAO,GAAG,MAAgB,GAAG,QAAQ;IAa/E,sEAAsE;IACtE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAOjC,0CAA0C;IAC1C,SAAS,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,QAAQ,CAAC;IAM/C,+CAA+C;IAC/C,KAAK,IAAI,IAAI;IAOb,OAAO,CAAC,IAAI;IAmBZ,OAAO,CAAC,OAAO;CAShB"}