audit-tools 0.32.35 → 0.32.37

package/dist/shared/validation/sessionConfig.js

@@ -1,38 +1,427 @@
 /**
- * SessionConfig validation utilities.
+ * Canonical SessionConfig validation — the single source of truth for BOTH
+ * orchestrators (audit + remediate). Field-shape checks emit `error`-severity
+ * issues (the config cannot be used safely as-is); the
+ * `dangerously_skip_permissions` surface is a `warning` (a legitimate but
+ * security-sensitive operator choice that must never be silently honored —
+ * INV-shared-core-08).
  *
- * INV-shared-core-08: ClaudeCodeConfig.dangerously_skip_permissions is a
- * security-sensitive flag that must be validated/surfaced rather than silently
- * honored. This module provides the canonical validation pass for SessionConfig
- * so both orchestrators produce consistent, auditable warnings.
+ * Rule (Auditor-agnostic robustness): both orchestrators MUST reject a malformed
+ * `session-config.json` at load rather than degrade silently to a floor. The
+ * shared {@link readValidatedSessionConfig} helper is the load-boundary chokepoint
+ * that guarantees this without either orchestrator having to remember to call the
+ * validator itself.
  */
-import { pushValidationIssue } from "./basic.js";
+import { readOptionalJsonFile } from "../io/json.js";
+import { ANALYZER_SETTINGS, DISPATCHABLE_SOURCE_PROVIDERS, PROVIDER_NAMES, SESSION_UI_MODES, } from "../types/sessionConfig.js";
+import { formatValidationIssues, isRecord, pushValidationIssue, } from "./basic.js";
+const VALID_PROVIDERS = new Set(PROVIDER_NAMES);
+const VALID_UI_MODES = new Set(SESSION_UI_MODES);
+const VALID_ANALYZER_SETTINGS = new Set(ANALYZER_SETTINGS);
+const VALID_DISPATCHABLE_SOURCE_PROVIDERS = new Set(DISPATCHABLE_SOURCE_PROVIDERS);
 /**
- * Validate a SessionConfig for security-sensitive and misconfiguration issues.
- *
- * Returns a (possibly empty) list of ValidationIssues. Severity "error" means
- * the config cannot be used safely; severity "warning" means the caller should
- * surface the concern before proceeding.
- *
- * INV-shared-core-08: dangerously_skip_permissions=true is flagged as a
- * high-severity warning so operators are always aware when host permission
- * checks are being bypassed.
+ * Every `QuotaModelLimits` field is a positive-integer count (token windows,
+ * per-minute rate limits, in-flight cap) that feeds admission sizing / rate
+ * limiting directly — an out-of-range value silently over- or under-admits (a
+ * too-large `context_tokens` over-sizes packets → the exact overrun C1 guards
+ * against). Reject it at config load rather than let it reach the scheduler.
+ */
+// Token windows and per-minute rate limits must be strictly positive integers.
+// `max_concurrent` is separate: the runtime treats 0 as the documented
+// "unlimited" sentinel (`positiveIntCapOrNull` maps 0 → null), so it allows a
+// non-negative integer.
+const QUOTA_POSITIVE_INT_FIELDS = [
+    "context_tokens",
+    "output_tokens",
+    "requests_per_minute",
+    "input_tokens_per_minute",
+    "output_tokens_per_minute",
+];
+function validateQuotaModelLimits(value, path, issues) {
+    if (!isRecord(value)) {
+        pushIssue(issues, path, "quota must be a JSON object.");
+        return;
+    }
+    const badFields = new Set();
+    for (const key of QUOTA_POSITIVE_INT_FIELDS) {
+        const entry = value[key];
+        if (entry !== undefined &&
+            (typeof entry !== "number" || !Number.isInteger(entry) || entry <= 0)) {
+            pushIssue(issues, `${path}.${key}`, `${key} must be a positive integer when provided.`);
+            badFields.add(key);
+        }
+    }
+    const maxConcurrent = value.max_concurrent;
+    if (maxConcurrent !== undefined &&
+        (typeof maxConcurrent !== "number" ||
+            !Number.isInteger(maxConcurrent) ||
+            maxConcurrent < 0)) {
+        pushIssue(issues, `${path}.max_concurrent`, "max_concurrent must be a non-negative integer when provided (0 = unlimited).");
+    }
+    // Cross-field: a reserved output that meets or exceeds the context leaves no
+    // room for input. Skip when either field already failed its per-field check
+    // (the per-field error is the actionable one; a second message here is noise).
+    const context = value.context_tokens;
+    const output = value.output_tokens;
+    if (typeof context === "number" &&
+        typeof output === "number" &&
+        Number.isFinite(context) &&
+        Number.isFinite(output) &&
+        !badFields.has("context_tokens") &&
+        !badFields.has("output_tokens") &&
+        output >= context) {
+        pushIssue(issues, `${path}.output_tokens`, "output_tokens must be less than context_tokens (no room for input otherwise).");
+    }
+}
+/**
+ * Validate `sessionConfig.sources[]` — the explicit dispatchable-source pool
+ * list. Shape-guards each entry's provider and (the C1 concern) its `quota`,
+ * which is now the single source of truth for a source pool's admission budget.
+ */
+function validateDispatchableSources(value, issues) {
+    if (value === undefined)
+        return;
+    if (!Array.isArray(value)) {
+        pushIssue(issues, "sources", "sources must be an array of dispatchable source objects.");
+        return;
+    }
+    value.forEach((source, index) => {
+        const path = `sources[${index}]`;
+        if (!isRecord(source)) {
+            pushIssue(issues, path, "each source must be a JSON object.");
+            return;
+        }
+        const provider = source.provider;
+        if (typeof provider !== "string" ||
+            !VALID_DISPATCHABLE_SOURCE_PROVIDERS.has(provider)) {
+            pushIssue(issues, `${path}.provider`, `provider must be one of: ${Array.from(VALID_DISPATCHABLE_SOURCE_PROVIDERS).join(", ")}.`);
+        }
+        if (source.quota !== undefined) {
+            validateQuotaModelLimits(source.quota, `${path}.quota`, issues);
+        }
+    });
+}
+function pushIssue(issues, path, message) {
+    pushValidationIssue(issues, path, message);
+}
+function validateStringArray(value, path, label, issues, options = {}) {
+    if (!Array.isArray(value)) {
+        pushIssue(issues, path, `${label} must be an array of strings.`);
+        return;
+    }
+    if (!options.allowEmptyArray && value.length === 0) {
+        pushIssue(issues, path, `${label} must not be empty.`);
+    }
+    for (const [index, item] of value.entries()) {
+        if (typeof item !== "string" || item.trim().length === 0) {
+            pushIssue(issues, `${path}[${index}]`, `${label} entries must be non-empty strings.`);
+        }
+    }
+}
+function validateEnvOverlay(value, path, issues) {
+    if (!isRecord(value)) {
+        pushIssue(issues, path, "env must be an object of string values.");
+        return;
+    }
+    for (const [key, entry] of Object.entries(value)) {
+        if (typeof entry !== "string") {
+            pushIssue(issues, `${path}.${key}`, "Environment override values must be strings.");
+        }
+    }
+}
+function validateTemplateProviderSection(value, path, issues, required) {
+    if (value === undefined) {
+        if (required) {
+            pushIssue(issues, path, "Provider requires this config section with a non-empty command_template.");
+        }
+        return;
+    }
+    if (!isRecord(value)) {
+        pushIssue(issues, path, "Provider config must be a JSON object.");
+        return;
+    }
+    if (value.command_template === undefined) {
+        if (required) {
+            pushIssue(issues, `${path}.command_template`, "command_template is required for this provider.");
+        }
+    }
+    else {
+        validateStringArray(value.command_template, `${path}.command_template`, "command_template", issues);
+    }
+    if (value.env !== undefined) {
+        validateEnvOverlay(value.env, `${path}.env`, issues);
+    }
+}
+function validateAgentProviderSection(value, path, issues) {
+    if (value === undefined) {
+        return;
+    }
+    if (!isRecord(value)) {
+        pushIssue(issues, path, "Provider config must be a JSON object.");
+        return;
+    }
+    if (value.command !== undefined) {
+        if (typeof value.command !== "string" || value.command.trim().length === 0) {
+            pushIssue(issues, `${path}.command`, "command must be a non-empty string when provided.");
+        }
+        else if (!isSupportedConfiguredCommand(value.command)) {
+            pushIssue(issues, `${path}.command`, "command must be a bare executable name or direct executable path. Put CLI flags in extra_args.");
+        }
+    }
+    if (value.extra_args !== undefined) {
+        validateStringArray(value.extra_args, `${path}.extra_args`, "extra_args", issues, { allowEmptyArray: true });
+    }
+    if (path === "claude_code" && value.dangerously_skip_permissions !== undefined) {
+        if (typeof value.dangerously_skip_permissions !== "boolean") {
+            pushIssue(issues, `${path}.dangerously_skip_permissions`, "dangerously_skip_permissions must be a boolean when provided.");
+        }
+        else if (value.dangerously_skip_permissions === true) {
+            // INV-shared-core-08: never silently honor a host-permission bypass —
+            // surface it as a warning (a legitimate but security-sensitive choice), not
+            // an error that blocks the config from loading.
+            pushValidationIssue(issues, `${path}.dangerously_skip_permissions`, "dangerously_skip_permissions is set to true — this bypasses host permission controls and should only be used in fully trusted, isolated environments. Verify this is intentional.", "warning");
+        }
+    }
+}
+/**
+ * Validate the `openai_compatible` provider section. Unlike the agentic CLI
+ * sections, this one has no `command`/PATH semantics — it is an HTTP endpoint, so
+ * we type-check the URL/model/key/tuning fields and, when this provider is the
+ * selected one, require the endpoint + model (the API key is resolved from the
+ * environment at launch, so its presence is not validated here).
+ */
+function validateOpenAiCompatibleSection(value, path, issues, required) {
+    if (value === undefined) {
+        if (required) {
+            pushIssue(issues, path, "Provider requires this config section with base_url and model.");
+        }
+        return;
+    }
+    if (!isRecord(value)) {
+        pushIssue(issues, path, "Provider config must be a JSON object.");
+        return;
+    }
+    for (const key of ["base_url", "model", "api_key_env", "api_key"]) {
+        const entry = value[key];
+        if (entry !== undefined &&
+            (typeof entry !== "string" || entry.trim().length === 0)) {
+            pushIssue(issues, `${path}.${key}`, `${key} must be a non-empty string when provided.`);
+        }
+    }
+    if (required) {
+        for (const key of ["base_url", "model"]) {
+            if (value[key] === undefined) {
+                pushIssue(issues, `${path}.${key}`, `${key} is required for the openai-compatible provider.`);
+            }
+        }
+    }
+    if (value.headers !== undefined) {
+        validateEnvOverlay(value.headers, `${path}.headers`, issues);
+    }
+    for (const key of [
+        "temperature",
+        "max_output_tokens",
+        "referenced_files_max",
+        "referenced_file_byte_cap",
+        "referenced_files_total_byte_cap",
+    ]) {
+        const entry = value[key];
+        if (entry !== undefined && (typeof entry !== "number" || !Number.isFinite(entry))) {
+            pushIssue(issues, `${path}.${key}`, `${key} must be a finite number when provided.`);
+        }
+    }
+    for (const key of ["response_format_json", "include_referenced_files"]) {
+        if (value[key] !== undefined && typeof value[key] !== "boolean") {
+            pushIssue(issues, `${path}.${key}`, `${key} must be a boolean when provided.`);
+        }
+    }
+    if (value.quota !== undefined) {
+        validateQuotaModelLimits(value.quota, `${path}.quota`, issues);
+    }
+}
+function startsWithPathPrefix(command) {
+    return (command.startsWith(".") ||
+        command.startsWith("/") ||
+        command.startsWith("\\\\") ||
+        /^[A-Za-z]:[\\/]/.test(command));
+}
+function containsForbiddenCommandSyntax(command) {
+    return /[\r\n"'`|&;<>]/.test(command);
+}
+/**
+ * A configured provider `command` must be either a bare executable name or a
+ * direct executable path — never a compound string with flags/metacharacters
+ * (those go in `extra_args`). Shared so the field validator and the audit
+ * env-probe agree on what a valid command looks like.
+ */
+export function isBareExecutableName(command) {
+    return (command.length > 0 &&
+        !/\s/.test(command) &&
+        !containsForbiddenCommandSyntax(command) &&
+        !/[\\/]/.test(command) &&
+        !/^[A-Za-z]:/.test(command));
+}
+export function isDirectExecutablePath(command) {
+    return (command.length > 0 &&
+        !containsForbiddenCommandSyntax(command) &&
+        startsWithPathPrefix(command));
+}
+export function isSupportedConfiguredCommand(command) {
+    const trimmed = command.trim();
+    if (trimmed.length === 0 || trimmed !== command) {
+        return false;
+    }
+    return isBareExecutableName(trimmed) || isDirectExecutablePath(trimmed);
+}
+function validateRoutingTiers(value, issues) {
+    if (!isRecord(value)) {
+        pushIssue(issues, "dispatch.routing_tiers", "dispatch.routing_tiers must be a JSON object.");
+        return;
+    }
+    for (const key of ["deep_at", "standard_at"]) {
+        const cut = value[key];
+        if (cut !== undefined &&
+            (typeof cut !== "number" || !Number.isFinite(cut) || cut < 0 || cut > 1)) {
+            pushIssue(issues, `dispatch.routing_tiers.${key}`, `dispatch.routing_tiers.${key} must be a number in [0, 1] when provided.`);
+        }
+    }
+    if (typeof value.deep_at === "number" &&
+        typeof value.standard_at === "number" &&
+        value.deep_at < value.standard_at) {
+        pushIssue(issues, "dispatch.routing_tiers", "dispatch.routing_tiers.deep_at must be >= standard_at.");
+    }
+}
+/**
+ * Validate a SessionConfig's field shapes and surface security-sensitive
+ * settings. Returns a (possibly empty) list of {@link ValidationIssue}s; `error`
+ * severity means the config cannot be used safely, `warning` means the caller
+ * should surface the concern before proceeding (see {@link readValidatedSessionConfig}).
  */
-export function validateSessionConfig(config, path = "") {
+export function validateSessionConfig(value) {
     const issues = [];
-    if (config === null || typeof config !== "object") {
-        pushValidationIssue(issues, path, `Expected a SessionConfig object, got ${typeof config}.`);
+    if (value === undefined) {
         return issues;
     }
-    const c = config;
-    // INV-shared-core-08: flag dangerously_skip_permissions so it is never
-    // silently honored. This is a security-sensitive flag — bypasses host
-    // permission checks that are the primary guard against unintended writes.
-    if (c["claude_code"] !== null &&
-        typeof c["claude_code"] === "object" &&
-        c["claude_code"]["dangerously_skip_permissions"] === true) {
-        pushValidationIssue(issues, path ? `${path}.claude_code.dangerously_skip_permissions` : "claude_code.dangerously_skip_permissions", "dangerously_skip_permissions is set to true — this bypasses host permission controls and should only be used in fully trusted, isolated environments. Verify this is intentional.", "warning");
+    if (!isRecord(value)) {
+        pushIssue(issues, "session_config", "Session config must be a JSON object.");
+        return issues;
+    }
+    const provider = value.provider;
+    if (provider !== undefined) {
+        if (typeof provider !== "string") {
+            pushIssue(issues, "provider", "provider must be a string.");
+        }
+        else if (!VALID_PROVIDERS.has(provider)) {
+            pushIssue(issues, "provider", `Unsupported provider "${provider}". Expected one of: ${Array.from(VALID_PROVIDERS).join(", ")}.`);
+        }
+    }
+    const hostProvider = value.host_provider;
+    if (hostProvider !== undefined) {
+        if (typeof hostProvider !== "string") {
+            pushIssue(issues, "host_provider", "host_provider must be a string.");
+        }
+        else if (!VALID_PROVIDERS.has(hostProvider)) {
+            pushIssue(issues, "host_provider", `Unsupported host_provider "${hostProvider}". Expected one of: ${Array.from(VALID_PROVIDERS).join(", ")}.`);
+        }
+    }
+    const timeoutMs = value.timeout_ms;
+    if (timeoutMs !== undefined &&
+        (!Number.isInteger(timeoutMs) || Number(timeoutMs) <= 0)) {
+        pushIssue(issues, "timeout_ms", "timeout_ms must be a positive integer number of milliseconds.");
+    }
+    const uiMode = value.ui_mode;
+    if (uiMode !== undefined) {
+        if (typeof uiMode !== "string" || !VALID_UI_MODES.has(uiMode)) {
+            pushIssue(issues, "ui_mode", `ui_mode must be one of: ${Array.from(VALID_UI_MODES).join(", ")}.`);
+        }
+    }
+    if (value.host_can_dispatch_subagents !== undefined &&
+        typeof value.host_can_dispatch_subagents !== "boolean") {
+        pushIssue(issues, "host_can_dispatch_subagents", "host_can_dispatch_subagents must be a boolean when provided.");
+    }
+    if (value.autonomous_mode !== undefined &&
+        typeof value.autonomous_mode !== "boolean") {
+        pushIssue(issues, "autonomous_mode", "autonomous_mode must be a boolean when provided.");
+    }
+    validateTemplateProviderSection(value.subprocess_template, "subprocess_template", issues, provider === "subprocess-template");
+    validateTemplateProviderSection(value.vscode_task, "vscode_task", issues, provider === "vscode-task");
+    validateTemplateProviderSection(value.antigravity, "antigravity", issues, provider === "antigravity");
+    validateAgentProviderSection(value.claude_code, "claude_code", issues);
+    validateAgentProviderSection(value.codex, "codex", issues);
+    validateAgentProviderSection(value.opencode, "opencode", issues);
+    validateOpenAiCompatibleSection(value.openai_compatible, "openai_compatible", issues, provider === "openai-compatible");
+    validateDispatchableSources(value.sources, issues);
+    if (value.synthesis !== undefined) {
+        if (!isRecord(value.synthesis)) {
+            pushIssue(issues, "synthesis", "synthesis must be a JSON object.");
+        }
+        else if (value.synthesis.narrative !== undefined &&
+            typeof value.synthesis.narrative !== "boolean") {
+            pushIssue(issues, "synthesis.narrative", "synthesis.narrative must be a boolean when provided.");
+        }
+    }
+    if (value.dispatch !== undefined) {
+        if (!isRecord(value.dispatch)) {
+            pushIssue(issues, "dispatch", "dispatch must be a JSON object.");
+        }
+        else {
+            if (value.dispatch.confirm_threshold !== undefined &&
+                (!Number.isInteger(value.dispatch.confirm_threshold) ||
+                    Number(value.dispatch.confirm_threshold) < 0)) {
+                pushIssue(issues, "dispatch.confirm_threshold", "dispatch.confirm_threshold must be a non-negative integer when provided.");
+            }
+            if (value.dispatch.max_packets !== undefined &&
+                (!Number.isInteger(value.dispatch.max_packets) ||
+                    Number(value.dispatch.max_packets) < 0)) {
+                pushIssue(issues, "dispatch.max_packets", "dispatch.max_packets must be a non-negative integer when provided.");
+            }
+            if (value.dispatch.routing_tiers !== undefined) {
+                validateRoutingTiers(value.dispatch.routing_tiers, issues);
+            }
+        }
+    }
+    if (value.analyzers !== undefined) {
+        if (!isRecord(value.analyzers)) {
+            pushIssue(issues, "analyzers", "analyzers must be a JSON object mapping analyzer id to a setting.");
+        }
+        else {
+            for (const [id, setting] of Object.entries(value.analyzers)) {
+                if (typeof setting !== "string" ||
+                    !VALID_ANALYZER_SETTINGS.has(setting)) {
+                    pushIssue(issues, `analyzers.${id}`, `analyzers.${id} must be one of: ${Array.from(VALID_ANALYZER_SETTINGS).join(", ")}.`);
+                }
+            }
+        }
     }
     return issues;
 }
+/**
+ * Read `session-config.json` from `path` and validate it at the load boundary —
+ * the single chokepoint both orchestrators route through so a malformed config
+ * fails loud instead of degrading silently to a floor (Auditor-agnostic
+ * robustness; "keep orchestrators in parity"). Returns `undefined` when the file
+ * is absent (a run with no session config is legal), the typed config when valid,
+ * and THROWS on any `error`-severity issue. `warning`-severity issues (e.g.
+ * `dangerously_skip_permissions=true`) do not block the load; they are surfaced
+ * via `onWarnings` (defaulting to a stderr write so a security-sensitive setting
+ * is never silently honored — same surface both orchestrators get).
+ */
+export async function readValidatedSessionConfig(path, options = {}) {
+    const raw = await readOptionalJsonFile(path);
+    if (raw === undefined) {
+        return undefined;
+    }
+    const issues = validateSessionConfig(raw);
+    const errors = issues.filter((issue) => issue.severity === "error");
+    if (errors.length > 0) {
+        throw new Error(`Invalid ${path}:\n${formatValidationIssues(errors).replace(/^ {2}/gm, "- ")}`);
+    }
+    const warnings = issues.filter((issue) => issue.severity === "warning");
+    if (warnings.length > 0) {
+        const surface = options.onWarnings ??
+            ((w) => console.warn(`Warnings in ${path}:\n${formatValidationIssues(w).replace(/^ {2}/gm, "- ")}`));
+        surface(warnings);
+    }
+    return raw;
+}
 //# sourceMappingURL=sessionConfig.js.map

package/dist/shared/validation/sessionConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionConfig.js","sourceRoot":"","sources":["../../../src/shared/validation/sessionConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAe,EACf,IAAI,GAAG,EAAE;IAET,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,mBAAmB,CACjB,MAAM,EACN,IAAI,EACJ,wCAAwC,OAAO,MAAM,GAAG,CACzD,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,GAAG,MAAiC,CAAC;IAE5C,uEAAuE;IACvE,sEAAsE;IACtE,0EAA0E;IAC1E,IACE,CAAC,CAAC,aAAa,CAAC,KAAK,IAAI;QACzB,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ;QACnC,CAAC,CAAC,aAAa,CAA6B,CAAC,8BAA8B,CAAC,KAAK,IAAI,EACtF,CAAC;QACD,mBAAmB,CACjB,MAAM,EACN,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,2CAA2C,CAAC,CAAC,CAAC,0CAA0C,EACtG,mLAAmL,EACnL,SAAS,CACV,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"sessionConfig.js","sourceRoot":"","sources":["../../../src/shared/validation/sessionConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,cAAc,EACd,gBAAgB,GAKjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,EACtB,QAAQ,EACR,mBAAmB,GAEpB,MAAM,YAAY,CAAC;AAEpB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAe,cAAc,CAAC,CAAC;AAC9D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAgB,gBAAgB,CAAC,CAAC;AAChE,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAkB,iBAAiB,CAAC,CAAC;AAC5E,MAAM,mCAAmC,GAAG,IAAI,GAAG,CACjD,6BAA6B,CAC9B,CAAC;AAEF;;;;;;GAMG;AACH,+EAA+E;AAC/E,uEAAuE;AACvE,8EAA8E;AAC9E,wBAAwB;AACxB,MAAM,yBAAyB,GAAG;IAChC,gBAAgB;IAChB,eAAe;IACf,qBAAqB;IACrB,yBAAyB;IACzB,0BAA0B;CAClB,CAAC;AAEX,SAAS,wBAAwB,CAC/B,KAAc,EACd,IAAY,EACZ,MAAyB;IAEzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,yBAAyB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IACE,KAAK,KAAK,SAAS;YACnB,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,EACrE,CAAC;YACD,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,GAAG,GAAG,4CAA4C,CACnD,CAAC;YACF,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC;IAC3C,IACE,aAAa,KAAK,SAAS;QAC3B,CAAC,OAAO,aAAa,KAAK,QAAQ;YAChC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC;YAChC,aAAa,GAAG,CAAC,CAAC,EACpB,CAAC;QACD,SAAS,CACP,MAAM,EACN,GAAG,IAAI,iBAAiB,EACxB,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC;IACnC,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvB,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAChC,CAAC,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC;QAC/B,MAAM,IAAI,OAAO,EACjB,CAAC;QACD,SAAS,CACP,MAAM,EACN,GAAG,IAAI,gBAAgB,EACvB,+EAA+E,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,2BAA2B,CAClC,KAAc,EACd,MAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CACP,MAAM,EACN,SAAS,EACT,0DAA0D,CAC3D,CAAC;QACF,OAAO;IACT,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,WAAW,KAAK,GAAG,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,oCAAoC,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IACE,OAAO,QAAQ,KAAK,QAAQ;YAC5B,CAAC,mCAAmC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAClD,CAAC;YACD,SAAS,CACP,MAAM,EACN,GAAG,IAAI,WAAW,EAClB,4BAA4B,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,wBAAwB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAChB,MAAyB,EACzB,IAAY,EACZ,OAAe;IAEf,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAc,EACd,IAAY,EACZ,KAAa,EACb,MAAyB,EACzB,UAAyC,EAAE;IAE3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,+BAA+B,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,KAAK,GAAG,EACnB,GAAG,KAAK,qCAAqC,CAC9C,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,IAAY,EACZ,MAAyB;IAEzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,yCAAyC,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,8CAA8C,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,KAAc,EACd,IAAY,EACZ,MAAyB,EACzB,QAAiB;IAEjB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,CACP,MAAM,EACN,IAAI,EACJ,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,CACP,MAAM,EACN,GAAG,IAAI,mBAAmB,EAC1B,iDAAiD,CAClD,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,mBAAmB,CACjB,KAAK,CAAC,gBAAgB,EACtB,GAAG,IAAI,mBAAmB,EAC1B,kBAAkB,EAClB,MAAM,CACP,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC5B,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAc,EACd,IAAY,EACZ,MAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3E,SAAS,CACP,MAAM,EACN,GAAG,IAAI,UAAU,EACjB,mDAAmD,CACpD,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,SAAS,CACP,MAAM,EACN,GAAG,IAAI,UAAU,EACjB,gGAAgG,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,mBAAmB,CACjB,KAAK,CAAC,UAAU,EAChB,GAAG,IAAI,aAAa,EACpB,YAAY,EACZ,MAAM,EACN,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,4BAA4B,KAAK,SAAS,EAAE,CAAC;QAC/E,IAAI,OAAO,KAAK,CAAC,4BAA4B,KAAK,SAAS,EAAE,CAAC;YAC5D,SAAS,CACP,MAAM,EACN,GAAG,IAAI,+BAA+B,EACtC,+DAA+D,CAChE,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,IAAI,EAAE,CAAC;YACvD,sEAAsE;YACtE,4EAA4E;YAC5E,gDAAgD;YAChD,mBAAmB,CACjB,MAAM,EACN,GAAG,IAAI,+BAA+B,EACtC,mLAAmL,EACnL,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,+BAA+B,CACtC,KAAc,EACd,IAAY,EACZ,MAAyB,EACzB,QAAiB;IAEjB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,CACP,MAAM,EACN,IAAI,EACJ,gEAAgE,CACjE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAU,EAAE,CAAC;QAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IACE,KAAK,KAAK,SAAS;YACnB,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EACxD,CAAC;YACD,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,GAAG,GAAG,4CAA4C,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAU,EAAE,CAAC;YACjD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC7B,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,GAAG,GAAG,kDAAkD,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,MAAM,GAAG,IAAI;QAChB,aAAa;QACb,mBAAmB;QACnB,sBAAsB;QACtB,0BAA0B;QAC1B,iCAAiC;KACzB,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAClF,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,GAAG,GAAG,yCAAyC,CAChD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,sBAAsB,EAAE,0BAA0B,CAAU,EAAE,CAAC;QAChF,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAChE,SAAS,CACP,MAAM,EACN,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,GAAG,GAAG,mCAAmC,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,CACL,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1B,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,OAAe;IACrD,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,CACL,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QACnB,CAAC,8BAA8B,CAAC,OAAO,CAAC;QACxC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,CACL,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,8BAA8B,CAAC,OAAO,CAAC;QACxC,oBAAoB,CAAC,OAAO,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAe;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,oBAAoB,CAAC,OAAO,CAAC,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAc,EACd,MAAyB;IAEzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CACP,MAAM,EACN,wBAAwB,EACxB,+CAA+C,CAChD,CAAC;QACF,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAU,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IACE,GAAG,KAAK,SAAS;YACjB,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EACxE,CAAC;YACD,SAAS,CACP,MAAM,EACN,0BAA0B,GAAG,EAAE,EAC/B,0BAA0B,GAAG,4CAA4C,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IACE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,EACjC,CAAC;QACD,SAAS,CACP,MAAM,EACN,wBAAwB,EACxB,wDAAwD,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,uCAAuC,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,4BAA4B,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAwB,CAAC,EAAE,CAAC;YAC1D,SAAS,CACP,MAAM,EACN,UAAU,EACV,yBAAyB,QAAQ,uBAAuB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC;IACzC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,iCAAiC,CAAC,CAAC;QACxE,CAAC;aAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,YAA4B,CAAC,EAAE,CAAC;YAC9D,SAAS,CACP,MAAM,EACN,eAAe,EACf,8BAA8B,YAAY,uBAAuB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IACnC,IACE,SAAS,KAAK,SAAS;QACvB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EACxD,CAAC;QACD,SAAS,CACP,MAAM,EACN,YAAY,EACZ,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAuB,CAAC,EAAE,CAAC;YAC/E,SAAS,CACP,MAAM,EACN,SAAS,EACT,2BAA2B,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IACE,KAAK,CAAC,2BAA2B,KAAK,SAAS;QAC/C,OAAO,KAAK,CAAC,2BAA2B,KAAK,SAAS,EACtD,CAAC;QACD,SAAS,CACP,MAAM,EACN,6BAA6B,EAC7B,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,IACE,KAAK,CAAC,eAAe,KAAK,SAAS;QACnC,OAAO,KAAK,CAAC,eAAe,KAAK,SAAS,EAC1C,CAAC;QACD,SAAS,CACP,MAAM,EACN,iBAAiB,EACjB,kDAAkD,CACnD,CAAC;IACJ,CAAC;IAED,+BAA+B,CAC7B,KAAK,CAAC,mBAAmB,EACzB,qBAAqB,EACrB,MAAM,EACN,QAAQ,KAAK,qBAAqB,CACnC,CAAC;IACF,+BAA+B,CAC7B,KAAK,CAAC,WAAW,EACjB,aAAa,EACb,MAAM,EACN,QAAQ,KAAK,aAAa,CAC3B,CAAC;IACF,+BAA+B,CAC7B,KAAK,CAAC,WAAW,EACjB,aAAa,EACb,MAAM,EACN,QAAQ,KAAK,aAAa,CAC3B,CAAC;IACF,4BAA4B,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACvE,4BAA4B,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3D,4BAA4B,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACjE,+BAA+B,CAC7B,KAAK,CAAC,iBAAiB,EACvB,mBAAmB,EACnB,MAAM,EACN,QAAQ,KAAK,mBAAmB,CACjC,CAAC;IACF,2BAA2B,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEnD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,kCAAkC,CAAC,CAAC;QACrE,CAAC;aAAM,IACL,KAAK,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS;YACvC,OAAO,KAAK,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,EAC9C,CAAC;YACD,SAAS,CACP,MAAM,EACN,qBAAqB,EACrB,sDAAsD,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,iCAAiC,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,IACE,KAAK,CAAC,QAAQ,CAAC,iBAAiB,KAAK,SAAS;gBAC9C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC;oBAClD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAC/C,CAAC;gBACD,SAAS,CACP,MAAM,EACN,4BAA4B,EAC5B,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,IACE,KAAK,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS;gBACxC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAC5C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EACzC,CAAC;gBACD,SAAS,CACP,MAAM,EACN,sBAAsB,EACtB,oEAAoE,CACrE,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC/C,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,SAAS,CACP,MAAM,EACN,WAAW,EACX,mEAAmE,CACpE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5D,IACE,OAAO,OAAO,KAAK,QAAQ;oBAC3B,CAAC,uBAAuB,CAAC,GAAG,CAAC,OAA0B,CAAC,EACxD,CAAC;oBACD,SAAS,CACP,MAAM,EACN,aAAa,EAAE,EAAE,EACjB,aAAa,EAAE,oBAAoB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAAY,EACZ,UAAkE,EAAE;IAEpE,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAU,IAAI,CAAC,CAAC;IACtD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IACxE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GACX,OAAO,CAAC,UAAU;YAClB,CAAC,CAAC,CAAoB,EAAE,EAAE,CACxB,OAAO,CAAC,IAAI,CACV,eAAe,IAAI,MAAM,sBAAsB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAC9E,CAAC,CAAC;QACP,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,GAAoB,CAAC;AAC9B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "audit-tools",
-  "version": "0.32.35",
+  "version": "0.32.37",
   "private": false,
   "license": "ISC",
   "description": "Portable hybrid code auditing + remediation orchestrators for arbitrary repositories.",