approval-md 0.4.5 → 0.4.7

package/dist/src/cli/hook-exec-code.d.ts

@@ -0,0 +1,150 @@
+/**
+ * The disk half of `exec.code` (APRV-510): what a harness hook binds for an
+ * opaque program once the policy has opened the class.
+ *
+ * The classifier (`core/command-class.ts`) reads the TEXT and says which word
+ * of which segment carries a program. This module turns that into the bytes a
+ * record binds, and it is impure on purpose: a file program is read from disk
+ * here, at hook time, and hashed.
+ *
+ * ## What is bound, and what never is
+ *
+ * The payload carries, per program, `{interpreter, mode, code_sha256,
+ * code_bytes, argv, workdir}` (plus the `path` of a file program), and for a
+ * shell call the SHA-256 and length of the whole command line beside the
+ * segments that are not programs. The program TEXT is never in it: the
+ * payload's hash is what a log record carries and the payload itself is what
+ * the payload store and a phone card hold, and a program written by an agent
+ * is exactly where a secret it was handed would sit (SPEC.md §11.1 invariant
+ * 3). The word of the argv that held the program is replaced by a marker
+ * naming its hash. The command line's own hash still binds every byte, so a
+ * grant over this payload is a grant over that exact command.
+ *
+ * ## A file that cannot be read is refused, never guessed
+ *
+ * `hook-exec-code-unreadable`: the file is absent, unreadable by this process
+ * (EACCES under co-location, where the daemon's user cannot list the
+ * resident's 0700 home), not a regular file, larger than
+ * {@link EXEC_CODE_MAX_FILE_BYTES}, or relative after a `cd` this module
+ * cannot place. The same code refuses a file this module cannot place by the
+ * kernel's reading rather than its own (fix round 2): a path with a `..`
+ * component, a `.` or empty component after the first, or a directory whose
+ * realpath is not the directory as written (refuter M1: the hook folds `..`
+ * lexically, the kernel follows a symlink first); a file program on a line
+ * with any other segment (refuter M2: an earlier `echo > x.py`, `cp`, `mv`,
+ * `tee` or `ln -sf` rewrites the file after the hash); and a harness that
+ * states no working directory (refuter N8: the hook's own cwd is a guess).
+ * That is the OPPOSITE of the skill-script pass (APRV-502),
+ * which lets the text stand where the disk is unreadable, and deliberately:
+ * a skill script's path is the thing that pass checks, while here the file's
+ * bytes ARE the binding, and a record with no hash would record nothing.
+ *
+ * A file that resolves onto a credential or a protected path is refused
+ * `hook-unclassified`, naming the landing, exactly as a skill script that
+ * lands there is.
+ *
+ * ## What the hash does not close
+ *
+ * A file program is hashed when the hook runs and opened by the interpreter
+ * afterwards. The program itself is not running in that window, and the
+ * sole-segment rule closes every writer on the same line, so what remains is
+ * a writer OTHER than the hooked call: a background job an earlier hooked
+ * call started, another session, cron. One that rewrites the file in between
+ * makes the interpreter run bytes the record never saw (fix round 3, refuter
+ * S2). The record binds the bytes the hook saw; a writer the agent controls is
+ * itself an earlier hooked, logged call, so the trail that explains a mismatch
+ * is in the log. The record says which program the agent ASKED to run, which
+ * is what the class is for; it is not a sandbox, and hash-then-exec cannot
+ * close this without handing the interpreter the descriptor that was hashed.
+ */
+import { type ClassifiedSegment, type ExecCodeSource, type ProtectedPathEntry } from "../core/command-class.js";
+/** The largest file program this hook will read and hash. */
+export declare const EXEC_CODE_MAX_FILE_BYTES: number;
+/** How a bound program reached the hook. */
+export type ExecCodeBindingMode = "inline" | "file" | "execute_code";
+/** One program, as a payload binds it. Never its text. */
+export interface ExecCodeBinding {
+    interpreter: string;
+    mode: ExecCodeBindingMode;
+    code_sha256: string;
+    code_bytes: number;
+    /** The argv from the binary on, the program word replaced by a hash marker. */
+    argv: string[];
+    /** The absolute directory the program runs in, or `null` when none is stated. */
+    workdir: string | null;
+    /** A file program's path as written. */
+    path?: string;
+}
+/** A shell segment in an `exec.code` payload: its text, or the program it runs. */
+export type ExecCodeSegment = {
+    text: string;
+} | {
+    exec_code: number;
+};
+/** The payload a shell call carrying `exec.code` segments binds. */
+export interface ExecCodeShellPayload {
+    exec_code: ExecCodeBinding[];
+    command_sha256: string;
+    command_bytes: number;
+    segments: ExecCodeSegment[];
+    cwd: string;
+}
+export type ExecCodeBindResult = {
+    ok: true;
+    payload: ExecCodeShellPayload;
+    headline: string;
+    notes: string[];
+} | {
+    ok: false;
+    code: "hook-exec-code-unreadable" | "hook-unclassified";
+    detail: string;
+};
+/** SHA-256, lowercase hex. */
+export declare function sha256Hex(bytes: string | Buffer): string;
+/** The marker that stands in an argv where the program text was. */
+export declare function programMarker(sha: string, bytes: number): string;
+/**
+ * A program named WITHOUT its text, for a refusal or a note (refuter S1, S2):
+ * the interpreter, the mode, and the inline program's hash and length or the
+ * file's path as written. A deny string reaches the harness and the agent's
+ * transcript, and a program is where a secret it was handed sits.
+ */
+export declare function describeProgram(source: ExecCodeSource): string;
+/**
+ * Is `text` well-formed UTF-16, with no lone surrogate? (Refuter S5.) A lone
+ * surrogate encodes to U+FFFD in UTF-8, so two programs that differ only there
+ * would hash alike while a Python harness passes them on as different bytes.
+ * Such a program or command is refused rather than bound by a lossy hash.
+ */
+export declare function isWellFormedText(text: string): boolean;
+/**
+ * Bind every `exec.code` segment of a classified shell command, or refuse.
+ *
+ * `null` when no segment carries a program: the caller binds the command the
+ * way it always has. `workdir` is the directory the command runs in (the
+ * per-call one where the harness states it), and `cwd` is the value the
+ * ordinary payload would have carried as its `cwd`. `fileWorkdir` is the
+ * directory a file program is resolved against: the one the HARNESS states
+ * (the per-call key, else the envelope's `cwd`), or `null` when it states
+ * none, which refuses file mode rather than guess with the hook's own cwd
+ * (fix round 2, refuter N8).
+ */
+export declare function bindExecCodeCommand(raw: string, segments: readonly ClassifiedSegment[], workdir: string, cwd: string, protectedPaths: readonly ProtectedPathEntry[], fileWorkdir: string | null): ExecCodeBindResult | null;
+/** The payload a Hermes `execute_code` call binds. */
+export interface ExecuteCodePayload {
+    tool: "execute_code";
+    exec_code: ExecCodeBinding;
+    /** The SHA-256 of the whole `tool_input`, canonical JSON, so every key is bound. */
+    input_sha256: string;
+}
+/** Bind a Hermes `execute_code` call: the `code` string, by hash and length. */
+export declare function bindExecuteCode(toolInput: Record<string, unknown>, inputHash: string): {
+    ok: true;
+    payload: ExecuteCodePayload;
+    headline: string;
+    notes: string[];
+} | {
+    ok: false;
+    code: "hook-io" | "hook-exec-code-unreadable";
+    detail: string;
+};

package/dist/src/cli/hook-exec-code.js

@@ -0,0 +1,357 @@
+/**
+ * The disk half of `exec.code` (APRV-510): what a harness hook binds for an
+ * opaque program once the policy has opened the class.
+ *
+ * The classifier (`core/command-class.ts`) reads the TEXT and says which word
+ * of which segment carries a program. This module turns that into the bytes a
+ * record binds, and it is impure on purpose: a file program is read from disk
+ * here, at hook time, and hashed.
+ *
+ * ## What is bound, and what never is
+ *
+ * The payload carries, per program, `{interpreter, mode, code_sha256,
+ * code_bytes, argv, workdir}` (plus the `path` of a file program), and for a
+ * shell call the SHA-256 and length of the whole command line beside the
+ * segments that are not programs. The program TEXT is never in it: the
+ * payload's hash is what a log record carries and the payload itself is what
+ * the payload store and a phone card hold, and a program written by an agent
+ * is exactly where a secret it was handed would sit (SPEC.md §11.1 invariant
+ * 3). The word of the argv that held the program is replaced by a marker
+ * naming its hash. The command line's own hash still binds every byte, so a
+ * grant over this payload is a grant over that exact command.
+ *
+ * ## A file that cannot be read is refused, never guessed
+ *
+ * `hook-exec-code-unreadable`: the file is absent, unreadable by this process
+ * (EACCES under co-location, where the daemon's user cannot list the
+ * resident's 0700 home), not a regular file, larger than
+ * {@link EXEC_CODE_MAX_FILE_BYTES}, or relative after a `cd` this module
+ * cannot place. The same code refuses a file this module cannot place by the
+ * kernel's reading rather than its own (fix round 2): a path with a `..`
+ * component, a `.` or empty component after the first, or a directory whose
+ * realpath is not the directory as written (refuter M1: the hook folds `..`
+ * lexically, the kernel follows a symlink first); a file program on a line
+ * with any other segment (refuter M2: an earlier `echo > x.py`, `cp`, `mv`,
+ * `tee` or `ln -sf` rewrites the file after the hash); and a harness that
+ * states no working directory (refuter N8: the hook's own cwd is a guess).
+ * That is the OPPOSITE of the skill-script pass (APRV-502),
+ * which lets the text stand where the disk is unreadable, and deliberately:
+ * a skill script's path is the thing that pass checks, while here the file's
+ * bytes ARE the binding, and a record with no hash would record nothing.
+ *
+ * A file that resolves onto a credential or a protected path is refused
+ * `hook-unclassified`, naming the landing, exactly as a skill script that
+ * lands there is.
+ *
+ * ## What the hash does not close
+ *
+ * A file program is hashed when the hook runs and opened by the interpreter
+ * afterwards. The program itself is not running in that window, and the
+ * sole-segment rule closes every writer on the same line, so what remains is
+ * a writer OTHER than the hooked call: a background job an earlier hooked
+ * call started, another session, cron. One that rewrites the file in between
+ * makes the interpreter run bytes the record never saw (fix round 3, refuter
+ * S2). The record binds the bytes the hook saw; a writer the agent controls is
+ * itself an earlier hooked, logged call, so the trail that explains a mismatch
+ * is in the log. The record says which program the agent ASKED to run, which
+ * is what the class is for; it is not a sandbox, and hash-then-exec cannot
+ * close this without handing the interpreter the descriptor that was hashed.
+ */
+import { createHash } from "node:crypto";
+import { readFileSync, realpathSync, statSync } from "node:fs";
+import { basename, dirname, isAbsolute, join, resolve as resolvePathSegments } from "node:path";
+import { commandSegmentWords, isCredentialPath, protectedPathClass, } from "../core/command-class.js";
+/** The largest file program this hook will read and hash. */
+export const EXEC_CODE_MAX_FILE_BYTES = 16 * 1024 * 1024;
+/** SHA-256, lowercase hex. */
+export function sha256Hex(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+/** The marker that stands in an argv where the program text was. */
+export function programMarker(sha, bytes) {
+    return `<program sha256:${sha} ${String(bytes)} bytes>`;
+}
+/**
+ * A program named WITHOUT its text, for a refusal or a note (refuter S1, S2):
+ * the interpreter, the mode, and the inline program's hash and length or the
+ * file's path as written. A deny string reaches the harness and the agent's
+ * transcript, and a program is where a secret it was handed sits.
+ */
+export function describeProgram(source) {
+    if (source.mode === "file")
+        return `${source.interpreter} file ${source.source}`;
+    const bytes = Buffer.from(source.source, "utf8");
+    return `${source.interpreter} inline program sha256:${sha256Hex(bytes)} (${String(bytes.length)} bytes)`;
+}
+/**
+ * Is `text` well-formed UTF-16, with no lone surrogate? (Refuter S5.) A lone
+ * surrogate encodes to U+FFFD in UTF-8, so two programs that differ only there
+ * would hash alike while a Python harness passes them on as different bytes.
+ * Such a program or command is refused rather than bound by a lossy hash.
+ */
+export function isWellFormedText(text) {
+    return !/[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/u.test(text);
+}
+/** A short form of a binding for a headline: `python3 -c sha256:0123456789ab (42 bytes)`. */
+function headlineOf(binding) {
+    const how = binding.mode === "inline"
+        ? `${binding.interpreter} inline`
+        : binding.mode === "file"
+            ? `${binding.interpreter} ${binding.path ?? "file"}`
+            : "execute_code";
+    return `exec.code ${how} sha256:${binding.code_sha256.slice(0, 12)} (${String(binding.code_bytes)} bytes)`;
+}
+/** Does an earlier segment move the working directory (`cd`, `pushd`, `popd`)? */
+function directoryMovedBefore(segments, index) {
+    for (const earlier of segments.slice(0, index)) {
+        const parsed = commandSegmentWords(earlier.text)?.[0];
+        if (parsed === undefined)
+            continue;
+        const bin = parsed.bin.split("/").pop() ?? parsed.bin;
+        if (bin === "cd" || bin === "pushd" || bin === "popd")
+            return true;
+    }
+    return false;
+}
+/** The `code` of a filesystem error, or `null`. */
+function fsCode(error) {
+    if (typeof error !== "object" || error === null || !("code" in error))
+        return null;
+    const code = error.code;
+    return typeof code === "string" ? code : null;
+}
+/** Read one file program, refusing everything this module cannot vouch for. */
+function readProgramFile(source, spelled, protectedPaths) {
+    const unreadable = (why) => ({
+        ok: false,
+        code: "hook-exec-code-unreadable",
+        detail: `the program file ${JSON.stringify(source)} ${why}, so its bytes cannot be hashed and nothing could bind what would run. Nothing was appended. Run it as an inline program, or from a file this hook can read`,
+    });
+    let real;
+    try {
+        real = realpathSync(spelled);
+    }
+    catch (error) {
+        return unreadable(`cannot be resolved at ${spelled} (${fsCode(error) ?? "unknown error"})`);
+    }
+    if (isCredentialPath(real)) {
+        return {
+            ok: false,
+            code: "hook-unclassified",
+            detail: `the program file ${JSON.stringify(source)} resolves to ${real}, a credential path (account.credential); a program read from credential material is not run as exec.code`,
+        };
+    }
+    const protectedClass = protectedPathClass(real, protectedPaths);
+    if (protectedClass !== null) {
+        return {
+            ok: false,
+            code: "hook-unclassified",
+            detail: `the program file ${JSON.stringify(source)} resolves to ${real}, a protected path (${protectedClass}); a program read from the gate's own files is not run as exec.code`,
+        };
+    }
+    try {
+        const stat = statSync(real);
+        if (!stat.isFile())
+            return unreadable(`resolves to ${real}, which is not a regular file`);
+        if (stat.size > EXEC_CODE_MAX_FILE_BYTES) {
+            return unreadable(`is ${String(stat.size)} bytes, above the ${String(EXEC_CODE_MAX_FILE_BYTES)}-byte limit this hook hashes`);
+        }
+        return { ok: true, bytes: readFileSync(real) };
+    }
+    catch (error) {
+        return unreadable(`cannot be read at ${real} (${fsCode(error) ?? "unknown error"})`);
+    }
+}
+/**
+ * Does a file program's path carry a component the kernel reads differently
+ * from a lexical join? (Fix round 2, refuter M1.) A `..` anywhere (the kernel
+ * follows a symlink before it climbs, `path.resolve` folds it first), and a
+ * `.` or empty component after the first (`./x.py` and an absolute path's
+ * leading `/` stay). Stricter than the kernel needs, on purpose: such a path
+ * is refused, never folded.
+ */
+function indirectPathComponent(path) {
+    const parts = path.split("/");
+    if (parts.includes(".."))
+        return "a `..` component";
+    if (parts.slice(1).includes("."))
+        return "a `.` component after the first";
+    if (parts.slice(1).includes(""))
+        return "an empty component (`//` or a trailing `/`)";
+    return null;
+}
+/** One segment's program, bound. */
+function bindSegment(source, segments, index, workdir, fileWorkdir, protectedPaths) {
+    let bytes;
+    if (source.mode === "inline") {
+        bytes = Buffer.from(source.source, "utf8");
+    }
+    else {
+        const refuse = (why) => ({
+            ok: false,
+            code: "hook-exec-code-unreadable",
+            detail: `the program file ${JSON.stringify(source.source)} ${why}, so this hook cannot tell which file would run. Nothing was appended. Run it as an inline program, or as the only command of the line, by a path with no \`..\` and no symlinked directory`,
+        });
+        if (!isAbsolute(source.source) && directoryMovedBefore(segments, index)) {
+            return {
+                ok: false,
+                code: "hook-exec-code-unreadable",
+                detail: `the program file ${JSON.stringify(source.source)} is relative and an earlier segment of the command moves the working directory, so this hook cannot tell which file would run. Nothing was appended. Name the file by its absolute path`,
+            };
+        }
+        // Refuter M2: the hash is taken now and every other segment of the line
+        // runs before or beside the interpreter, so any of them can rewrite,
+        // move or relink the file (`echo … > x.py; python3 x.py`). File mode
+        // opens only for a program that is the line's sole segment.
+        if (segments.length !== 1) {
+            return refuse("shares the line with another segment, which may write, move or relink it after this hook hashes it (file mode is open only when the program is the line's sole command)");
+        }
+        // Refuter N8: the directory the harness says the command runs in, or
+        // nothing. The hook's own cwd is not evidence of where a relative path
+        // lands, so a harness that states none gets no file mode.
+        if (fileWorkdir === null || !isAbsolute(fileWorkdir)) {
+            return refuse("is named on a call whose harness states no absolute working directory");
+        }
+        // Refuter M1: no `..` to fold, and the directory resolved by the kernel's
+        // reading (realpath) must be the directory as written, so a symlinked
+        // directory, a symlinked workdir included, is refused rather than folded.
+        const indirect = indirectPathComponent(source.source);
+        if (indirect !== null)
+            return refuse(`has ${indirect}`);
+        const directory = resolvePathSegments(fileWorkdir, dirname(source.source));
+        let realDirectory;
+        try {
+            realDirectory = realpathSync(directory);
+        }
+        catch (error) {
+            return refuse(`sits in ${directory}, which cannot be resolved (${fsCode(error) ?? "unknown error"})`);
+        }
+        if (realDirectory !== directory) {
+            return refuse(`sits in ${directory}, which resolves through a symlink to ${realDirectory}`);
+        }
+        const read = readProgramFile(source.source, join(realDirectory, basename(source.source)), protectedPaths);
+        if (!read.ok)
+            return read;
+        bytes = read.bytes;
+    }
+    const sha = sha256Hex(bytes);
+    const argv = [...source.argv];
+    if (source.mode === "inline")
+        argv[source.sourceIndex] = programMarker(sha, bytes.length);
+    return {
+        ok: true,
+        binding: {
+            interpreter: source.interpreter,
+            mode: source.mode,
+            code_sha256: sha,
+            code_bytes: bytes.length,
+            argv,
+            workdir: source.mode === "file" ? fileWorkdir : workdir,
+            ...(source.mode === "file" ? { path: source.source } : {}),
+        },
+    };
+}
+/**
+ * Bind every `exec.code` segment of a classified shell command, or refuse.
+ *
+ * `null` when no segment carries a program: the caller binds the command the
+ * way it always has. `workdir` is the directory the command runs in (the
+ * per-call one where the harness states it), and `cwd` is the value the
+ * ordinary payload would have carried as its `cwd`. `fileWorkdir` is the
+ * directory a file program is resolved against: the one the HARNESS states
+ * (the per-call key, else the envelope's `cwd`), or `null` when it states
+ * none, which refuses file mode rather than guess with the hook's own cwd
+ * (fix round 2, refuter N8).
+ */
+export function bindExecCodeCommand(raw, segments, workdir, cwd, protectedPaths, fileWorkdir) {
+    if (!segments.some((segment) => segment.execCode !== undefined))
+        return null;
+    if (!isWellFormedText(raw)) {
+        return {
+            ok: false,
+            code: "hook-exec-code-unreadable",
+            detail: "the command carries a lone UTF-16 surrogate, which has no exact byte encoding, so the program's hash could not bind what the harness hands the interpreter. Nothing was appended. Send the command as well-formed text",
+        };
+    }
+    // Fix round 3 (refuter N-b): an embedded NUL is not text a command line can
+    // carry. No argv word holds one (Node `spawn` and Python `subprocess` refuse
+    // it), and a harness that writes the line to a script file hands bash bytes
+    // it then drops, so the hash would bind `print(1)\0junk` while the
+    // interpreter got `print(1)junk`, or nothing at all. Refused as not
+    // well-formed text, the lone surrogate's code, rather than bound.
+    if (raw.includes("\u0000")) {
+        return {
+            ok: false,
+            code: "hook-exec-code-unreadable",
+            detail: "the command carries an embedded NUL (U+0000), which no argv word can hold, so the program's hash could not bind what the harness hands the interpreter. Nothing was appended. Send the command as well-formed text",
+        };
+    }
+    const bindings = [];
+    const shown = [];
+    for (const [index, segment] of segments.entries()) {
+        if (segment.execCode === undefined) {
+            shown.push({ text: segment.text });
+            continue;
+        }
+        const bound = bindSegment(segment.execCode, segments, index, workdir, fileWorkdir, protectedPaths);
+        if (!bound.ok)
+            return bound;
+        shown.push({ exec_code: bindings.length });
+        bindings.push(bound.binding);
+    }
+    const others = shown.filter((entry) => "text" in entry);
+    const headline = [
+        ...bindings.map(headlineOf),
+        ...(others.length === 0 ? [] : [`with ${others.map((entry) => entry.text).join(" ; ")}`]),
+    ].join("; ");
+    return {
+        ok: true,
+        payload: {
+            exec_code: bindings,
+            command_sha256: sha256Hex(raw),
+            command_bytes: Buffer.byteLength(raw, "utf8"),
+            segments: shown,
+            cwd,
+        },
+        headline,
+        notes: [
+            `exec.code (APRV-510): ${bindings
+                .map((binding) => `${binding.interpreter} ${binding.mode} program sha256:${binding.code_sha256} (${String(binding.code_bytes)} bytes)`)
+                .join(", ")} bound by hash and length, never by text; the record says the program existed, and each tool call it makes is its own hook event`,
+        ],
+    };
+}
+/** Bind a Hermes `execute_code` call: the `code` string, by hash and length. */
+export function bindExecuteCode(toolInput, inputHash) {
+    const code = toolInput["code"];
+    if (typeof code !== "string") {
+        return { ok: false, code: "hook-io", detail: "execute_code tool_input carries no code string" };
+    }
+    if (!isWellFormedText(code)) {
+        return {
+            ok: false,
+            code: "hook-exec-code-unreadable",
+            detail: "the execute_code program carries a lone UTF-16 surrogate, which has no exact byte encoding, so its hash could not bind what the kernel would run. Nothing was appended",
+        };
+    }
+    const bytes = Buffer.from(code, "utf8");
+    const sha = sha256Hex(bytes);
+    const declared = toolInput["workdir"];
+    const binding = {
+        interpreter: "execute_code",
+        mode: "execute_code",
+        code_sha256: sha,
+        code_bytes: bytes.length,
+        argv: [],
+        workdir: typeof declared === "string" && isAbsolute(declared) ? declared : null,
+    };
+    return {
+        ok: true,
+        payload: { tool: "execute_code", exec_code: binding, input_sha256: inputHash },
+        headline: headlineOf(binding),
+        notes: [
+            `exec.code (APRV-510): execute_code program sha256:${sha} (${String(bytes.length)} bytes) bound by hash and length, never by text; each tool call made from inside the kernel is its own hook event (the policy declares exec.code.execute_code: hooked)`,
+        ],
+    };
+}
+//# sourceMappingURL=hook-exec-code.js.map

package/dist/src/cli/hook-exec-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-exec-code.js","sourceRoot":"","sources":["../../../src/cli/hook-exec-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhG,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GAInB,MAAM,0BAA0B,CAAC;AAElC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAmCzD,8BAA8B;AAC9B,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,KAAa;IACtD,OAAO,mBAAmB,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,GAAG,MAAM,CAAC,WAAW,SAAS,MAAM,CAAC,MAAM,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,GAAG,MAAM,CAAC,WAAW,0BAA0B,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;AAC3G,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,CAAC,yEAAyE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/F,CAAC;AAED,6FAA6F;AAC7F,SAAS,UAAU,CAAC,OAAwB;IAC1C,MAAM,GAAG,GACP,OAAO,CAAC,IAAI,KAAK,QAAQ;QACvB,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,SAAS;QACjC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM;YACvB,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE;YACpD,CAAC,CAAC,cAAc,CAAC;IACvB,OAAO,aAAa,GAAG,WAAW,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;AAC7G,CAAC;AAED,kFAAkF;AAClF,SAAS,oBAAoB,CAAC,QAAsC,EAAE,KAAa;IACjF,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC;QACtD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mDAAmD;AACnD,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnF,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;IAC/C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAMD,+EAA+E;AAC/E,SAAS,eAAe,CACtB,MAAc,EACd,OAAe,EACf,cAA6C;IAE7C,MAAM,UAAU,GAAG,CAAC,GAAW,EAAY,EAAE,CAAC,CAAC;QAC7C,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,GAAG,6JAA6J;KACvN,CAAC,CAAC;IACH,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,yBAAyB,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,eAAe,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,IAAI,2GAA2G;SAClL,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAChE,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,IAAI,uBAAuB,cAAc,qEAAqE;SACjL,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,UAAU,CAAC,eAAe,IAAI,+BAA+B,CAAC,CAAC;QAC1F,IAAI,IAAI,CAAC,IAAI,GAAG,wBAAwB,EAAE,CAAC;YACzC,OAAO,UAAU,CACf,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,wBAAwB,CAAC,8BAA8B,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,qBAAqB,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,eAAe,GAAG,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACpD,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,iCAAiC,CAAC;IAC3E,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,6CAA6C,CAAC;IACtF,OAAO,IAAI,CAAC;AACd,CAAC;AAMD,oCAAoC;AACpC,SAAS,WAAW,CAClB,MAAsB,EACtB,QAAsC,EACtC,KAAa,EACb,OAAe,EACf,WAA0B,EAC1B,cAA6C;IAE7C,IAAI,KAAa,CAAC;IAClB,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,CAAC,GAAW,EAAe,EAAE,CAAC,CAAC;YAC5C,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,2BAA2B;YACjC,MAAM,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,6LAA6L;SAC9P,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,2BAA2B;gBACjC,MAAM,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,yLAAyL;aACnP,CAAC;QACJ,CAAC;QACD,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,4DAA4D;QAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM,CACX,yKAAyK,CAC1K,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,uEAAuE;QACvE,0DAA0D;QAC1D,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC,uEAAuE,CAAC,CAAC;QACzF,CAAC;QACD,0EAA0E;QAC1E,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,WAAW,SAAS,+BAA+B,MAAM,CAAC,KAAK,CAAC,IAAI,eAAe,GAAG,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,WAAW,SAAS,yCAAyC,aAAa,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAC1G,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACrB,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1F,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE;YACP,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,GAAG;YAChB,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,IAAI;YACJ,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;YACvD,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,QAAsC,EACtC,OAAe,EACf,GAAW,EACX,cAA6C,EAC7C,WAA0B;IAE1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,2BAA2B;YACjC,MAAM,EACJ,wNAAwN;SAC3N,CAAC;IACJ,CAAC;IACD,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,mEAAmE;IACnE,oEAAoE;IACpE,kEAAkE;IAClE,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,2BAA2B;YACjC,MAAM,EACJ,oNAAoN;SACvN,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;QACnG,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG;QACf,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;QAC3B,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;KAC1F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE;YACP,SAAS,EAAE,QAAQ;YACnB,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC;YAC9B,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;YAC7C,QAAQ,EAAE,KAAK;YACf,GAAG;SACJ;QACD,QAAQ;QACR,KAAK,EAAE;YACL,yBAAyB,QAAQ;iBAC9B,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,IAAI,mBAAmB,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;iBACtI,IAAI,CAAC,IAAI,CAAC,kIAAkI;SAChJ;KACF,CAAC;AACJ,CAAC;AAUD,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAC7B,SAAkC,EAClC,SAAiB;IAIjB,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,2BAA2B;YACjC,MAAM,EACJ,wKAAwK;SAC3K,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAAoB;QAC/B,WAAW,EAAE,cAAc;QAC3B,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,GAAG;QAChB,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,OAAO,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;KAChF,CAAC;IACF,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE;QAC9E,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC;QAC7B,KAAK,EAAE;YACL,qDAAqD,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,wKAAwK;SAC1P;KACF,CAAC;AACJ,CAAC"}