botmux 3.7.1 → 3.8.0

package/dist/adapters/cli/fs-policy.d.ts

@@ -46,6 +46,11 @@ export interface FsPolicy {
     denyRegexes?: string[];
     /** Narrow read-only exceptions emitted after denyRegexes (macOS gateway socket). */
     finalReadOnlyPaths?: string[];
+    /** No-transport turns: caller-supplied allow paths (extraWrite / readonlyRoots /
+     *  user RW+RO) that fell inside a Feishu-authority root and were dropped before
+     *  merge (fail-closed). Empty/absent otherwise. The worker LOGS these so a
+     *  silently-suppressed grant is diagnosable (codex: "至少要记录被抑制项"). */
+    suppressedAuthorityPaths?: string[];
 }
 export interface FsPolicyUserPaths {
     readWrite?: readonly string[];
@@ -67,6 +72,11 @@ export interface FsPolicyContext {
     sessionId?: string;
     /** This bot's BOT_HOME (`<botmuxHome>/bots/<appId>`) — always readWrite. */
     botHome: string;
+    /** This bot's OWN role-library subtree (`<roleLibraryRoot>/<appId>`) — readWrite.
+     *  Optional: absent when the subtree does not exist (bot never used roles) or
+     *  when building a non-session policy. See the emission site for why the whole
+     *  subtree — not just the active role dir — has to be writable. */
+    roleLibrarySubtree?: string;
     /** True when the CLI's data root is redirected into BOT_HOME
      *  (CLAUDE_CONFIG_DIR / CODEX_HOME). False → cliDataPaths are exposed rw. */
     redirectedCliData: boolean;
@@ -98,6 +108,36 @@ export interface FsPolicyContext {
     net?: boolean;
     /** Seatbelt write-allow regex passthrough (see FsPolicy.writeRegexes). */
     writeRegexes?: readonly string[];
+    /** FALSE = a no-Lark-transport session (core-only apiOnly bot or HTTP virtual
+     *  chat). Generic read-isolation is NOT a credential boundary: it still grants
+     *  the bot's own lark-cli identity readWrite AND, when workingDir defaults to
+     *  `~`, re-opens $HOME (incl. bots.json + sibling BOT_HOMEs) readWrite. When
+     *  false, buildFsPolicy freezes the botmux authority ROOTS (configured + default
+     *  `~/.botmux`, `~/.lark-cli(-bots)`, macOS lark-cli store) as WHOLE-DIR denies,
+     *  withholds this bot's own lark-cli identity / keystore carve-out, and
+     *  FAIL-CLOSES any caller allow path (workingDir / userPaths / readonlyRoots)
+     *  that would fall inside an authority root — dropped BEFORE merge so a deeper
+     *  grant can't re-open the deny (deepest-prefix-wins). The model CLI's own
+     *  authPaths (`~/.codex` etc.) are NOT Feishu creds and stay granted readWrite.
+     *  Absent/true = normal behavior. */
+    larkTransportEnabled?: boolean;
+    /** No-transport ONLY: the SECOND botmux authority root to freeze, when the
+     *  daemon runs with a custom SESSION_DATA_DIR so `configuredBotmuxHome`
+     *  (= dirname(dataDir), passed as `botmuxHome`) differs from the default
+     *  `~/.botmux`. BOTH must be denied wholesale — the default root still holds
+     *  the live `.dashboard-secret` HMAC + bots.json even when the data dir moved
+     *  (codex P1: custom SESSION_DATA_DIR leaked the default `~/.botmux`). Ignored
+     *  when equal to `botmuxHome`. MUST be canonical + host-frozen (never derived
+     *  from agent-controllable env). */
+    defaultBotmuxHome?: string;
+    /** No-transport ONLY: the ACTUAL loaded bots-config path, frozen by the daemon
+     *  (`getLoadedConfigPath()`), NOT guessed from BOTS_CONFIG env by the worker.
+     *  When it lives INSIDE a frozen authority root the parent mask already covers
+     *  it (no extra rule needed). When it lives OUTSIDE every authority root,
+     *  buildFsPolicy THROWS {@link FsPolicyConfigError} — a no-transport turn must
+     *  not silently mask an arbitrary parent dir (`/tmp`, `/etc`, a project root),
+     *  which would break the core CLI (codex P1). Absent = default `~/.botmux/bots.json`. */
+    loadedBotsConfigPath?: string;
 }
 /** Normalize: require absolute, strip trailing slashes, reject `..` segments.
  *  Returns null for anything unusable (silently-dropped relative paths are a
@@ -176,6 +216,44 @@ export declare function accessForPath(rules: readonly FsRule[], path: string): {
     access: FsAccess | 'none';
     rule?: FsRule;
 };
+/**
+ * A no-transport (apiOnly / HTTP-virtual) session whose layout cannot be safely
+ * confined — e.g. an external `BOTS_CONFIG` sitting outside every botmux
+ * authority root, or a `workingDir` that IS a Feishu-authority root. buildFsPolicy
+ * throws this instead of silently masking an arbitrary parent dir (which would
+ * hide `/tmp`/`/etc`/a project root and brick the core CLI) or silently dropping
+ * the working dir. The worker turns it into a hard spawn-abort with a diagnostic —
+ * fail-closed, never fail-open (codex P1). Carries `.kind` so callers/tests can
+ * branch without string-matching the message. */
+export declare class FsPolicyConfigError extends Error {
+    readonly kind: 'external-bots-config' | 'working-dir-is-authority' | 'bots-config-in-carveout';
+    constructor(kind: FsPolicyConfigError['kind'], message: string);
+}
+/**
+ * Compute the frozen Feishu-authority roots for a no-transport turn. PURE +
+ * exported so the worker's real path assembly and the unit matrix lock the SAME
+ * provenance logic (codex P2: prior tests hand-fed roots and never touched this).
+ *
+ *  - ALWAYS freezes BOTH the configured botmux root (`botmuxHome` = dirname of the
+ *    data dir) AND the canonical default `~/.botmux` — a custom SESSION_DATA_DIR
+ *    moves the data dir but the default root still holds the live `.dashboard-secret`
+ *    HMAC + bots.json, so denying only one leaves the sibling-daemon escalation
+ *    open (codex P1).
+ *  - freezes the lark-cli identity/key stores: bare `~/.lark-cli` (repo marks it
+ *    sensitive), `~/.lark-cli-bots`, macOS lark-cli store.
+ *  - the loaded bots-config path: OUTSIDE every root → THROW here (fail-closed);
+ *    never mask its parent dir. Being INSIDE a root is necessary but NOT
+ *    sufficient — a deeper trusted carve-out (own BOT_HOME / bin / attachments /
+ *    outbox) can re-open it via deepest-prefix-wins, so buildFsPolicy ALSO runs a
+ *    post-merge `accessForPath` self-check that the config + its dirname resolve
+ *    to `deny`, else throws `bots-config-in-carveout` (codex P1).
+ */
+export declare function computeNoTransportAuthorityRoots(input: {
+    homeDir: string;
+    botmuxHome: string;
+    defaultBotmuxHome?: string;
+    loadedBotsConfigPath?: string;
+}): string[];
 /**
  * Build the unified FsPolicy: baseline preset (platform) + adapter-declared
  * paths + botmux-internal injections + user sandboxPaths (highest precedence).
@@ -191,7 +269,7 @@ export declare function ancestorsNeedingTraverse(rules: readonly FsRule[]): stri
  * Compile the policy to a macOS Seatbelt profile. `(deny default)` + Apple's
  * bsd.sb base makes it deny-by-default for BOTH files and other operations,
  * then we re-allow the non-file operation classes the CLI needs (process/mach/
- * ipc/sysctl/signal, network gated on policy.net) and the three file tiers
+ * ipc/sysctl/signal/iokit-open, network gated on policy.net) and the three file tiers
  * emitted shallow→deep (Seatbelt applies the LAST matching rule → deepest rule
  * wins, matching accessForPath()).
  */

package/dist/adapters/cli/fs-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fs-policy.d.ts","sourceRoot":"","sources":["../../../src/adapters/cli/fs-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AACzD,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,WAAW,CAAC;AAEtF,MAAM,WAAW,MAAM;IACrB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,CAAC;IACjB,gFAAgF;IAChF,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,iFAAiF;IACjF,GAAG,EAAE,OAAO,CAAC;IACb;2EACuE;IACvE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC7B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB;;;yDAGqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB;iFAC6E;IAC7E,iBAAiB,EAAE,OAAO,CAAC;IAC3B;8EAC0E;IAC1E,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,4EAA4E;IAC5E,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B;mEAC+D;IAC/D,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,wEAAwE;IACxE,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;8EAG0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,yEAAyE;IACzE,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,+DAA+D;IAC/D,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,0EAA0E;IAC1E,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;qDAEqD;AACrD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMxD;AAQD,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI5D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,MAAM,EAAE,CAQV;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,GAAG,MAAM,EAAE,CAGX;AAWD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAepE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CASlH;AAuGD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,eAAe,GAAG,QAAQ,CAgG5D;AAWD;;;iEAGiE;AACjE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAc3E;AAUD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,CA6C1D;AAID,MAAM,WAAW,gBAAgB;IAC/B;mEAC+D;IAC/D,QAAQ,CAAC,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvD;;;;;;;;wDAQoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;4BAGwB;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB;;;4EAGwE;IACxE,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,EAAE,CAAC;IACf;2DACuD;IACvD,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnD;;;;;;;;0EAQsE;IACtE,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,EAAE,CAAC;CACtD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CA+EzF;AAID,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC/E;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,mBAAmB,GAAG;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,qBAAqB,GAAG,IAAI,CAiBhI"}
+{"version":3,"file":"fs-policy.d.ts","sourceRoot":"","sources":["../../../src/adapters/cli/fs-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AACzD,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,WAAW,CAAC;AAEtF,MAAM,WAAW,MAAM;IACrB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,CAAC;IACjB,gFAAgF;IAChF,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,iFAAiF;IACjF,GAAG,EAAE,OAAO,CAAC;IACb;2EACuE;IACvE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B;;;yEAGqE;IACrE,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC7B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB;;;yDAGqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB;;;uEAGmE;IACnE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;iFAC6E;IAC7E,iBAAiB,EAAE,OAAO,CAAC;IAC3B;8EAC0E;IAC1E,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,4EAA4E;IAC5E,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B;mEAC+D;IAC/D,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,wEAAwE;IACxE,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;8EAG0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,yEAAyE;IACzE,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,+DAA+D;IAC/D,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,0EAA0E;IAC1E,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;;;;;;;;;yCAWqC;IACrC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;wCAOoC;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;6FAMyF;IACzF,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;qDAEqD;AACrD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMxD;AAQD,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI5D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,MAAM,EAAE,CAQV;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,GAAG,MAAM,EAAE,CAGX;AAWD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAepE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CASlH;AAuGD;;;;;;;;iDAQiD;AACjD,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,GAAG,0BAA0B,GAAG,yBAAyB,CAAC;gBACnF,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM;CAK/D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,GAAG,MAAM,EAAE,CAmBX;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,eAAe,GAAG,QAAQ,CAkT5D;AAWD;;;iEAGiE;AACjE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAc3E;AAUD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,CA4D1D;AAID,MAAM,WAAW,gBAAgB;IAC/B;mEAC+D;IAC/D,QAAQ,CAAC,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvD;;;;;;;;wDAQoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;4BAGwB;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB;;;4EAGwE;IACxE,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,EAAE,CAAC;IACf;2DACuD;IACvD,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnD;;;;;;;;0EAQsE;IACtE,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,EAAE,CAAC;CACtD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CA+EzF;AAID,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC/E;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,mBAAmB,GAAG;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,qBAAqB,GAAG,IAAI,CAiBhI"}

package/dist/adapters/cli/fs-policy.js

@@ -266,6 +266,59 @@ function linuxBaseline(h) {
     ];
 }
 // ───────────────────────────── policy assembly ───────────────────────────────
+/**
+ * A no-transport (apiOnly / HTTP-virtual) session whose layout cannot be safely
+ * confined — e.g. an external `BOTS_CONFIG` sitting outside every botmux
+ * authority root, or a `workingDir` that IS a Feishu-authority root. buildFsPolicy
+ * throws this instead of silently masking an arbitrary parent dir (which would
+ * hide `/tmp`/`/etc`/a project root and brick the core CLI) or silently dropping
+ * the working dir. The worker turns it into a hard spawn-abort with a diagnostic —
+ * fail-closed, never fail-open (codex P1). Carries `.kind` so callers/tests can
+ * branch without string-matching the message. */
+export class FsPolicyConfigError extends Error {
+    kind;
+    constructor(kind, message) {
+        super(message);
+        this.name = 'FsPolicyConfigError';
+        this.kind = kind;
+    }
+}
+/**
+ * Compute the frozen Feishu-authority roots for a no-transport turn. PURE +
+ * exported so the worker's real path assembly and the unit matrix lock the SAME
+ * provenance logic (codex P2: prior tests hand-fed roots and never touched this).
+ *
+ *  - ALWAYS freezes BOTH the configured botmux root (`botmuxHome` = dirname of the
+ *    data dir) AND the canonical default `~/.botmux` — a custom SESSION_DATA_DIR
+ *    moves the data dir but the default root still holds the live `.dashboard-secret`
+ *    HMAC + bots.json, so denying only one leaves the sibling-daemon escalation
+ *    open (codex P1).
+ *  - freezes the lark-cli identity/key stores: bare `~/.lark-cli` (repo marks it
+ *    sensitive), `~/.lark-cli-bots`, macOS lark-cli store.
+ *  - the loaded bots-config path: OUTSIDE every root → THROW here (fail-closed);
+ *    never mask its parent dir. Being INSIDE a root is necessary but NOT
+ *    sufficient — a deeper trusted carve-out (own BOT_HOME / bin / attachments /
+ *    outbox) can re-open it via deepest-prefix-wins, so buildFsPolicy ALSO runs a
+ *    post-merge `accessForPath` self-check that the config + its dirname resolve
+ *    to `deny`, else throws `bots-config-in-carveout` (codex P1).
+ */
+export function computeNoTransportAuthorityRoots(input) {
+    const roots = [...new Set([
+            input.botmuxHome,
+            ...(input.defaultBotmuxHome ? [input.defaultBotmuxHome] : []),
+            `${input.homeDir}/.lark-cli`,
+            `${input.homeDir}/.lark-cli-bots`,
+            `${input.homeDir}/Library/Application Support/lark-cli`,
+        ])].map(normalizeFsPath).filter((r) => !!r);
+    const cfg = input.loadedBotsConfigPath ? normalizeFsPath(input.loadedBotsConfigPath) : null;
+    if (cfg && !roots.some(root => coversPath(root, cfg))) {
+        throw new FsPolicyConfigError('external-bots-config', `no-transport session refuses an external bots-config at ${cfg}: it lives outside every `
+            + `botmux authority root (${roots.join(', ')}). A no-transport turn cannot safely mask its `
+            + `parent directory (would hide arbitrary host paths like /tmp or /etc); move the config `
+            + `under ~/.botmux or a dedicated data-dir root.`);
+    }
+    return roots;
+}
 /**
  * Build the unified FsPolicy: baseline preset (platform) + adapter-declared
  * paths + botmux-internal injections + user sandboxPaths (highest precedence).
@@ -277,17 +330,152 @@ export function buildFsPolicy(ctx) {
         for (const p of paths ?? [])
             candidates.push({ path: p, access, source });
     };
-    candidates.push(...(ctx.platform === 'darwin' ? darwinBaseline(ctx.homeDir) : linuxBaseline(ctx.homeDir)));
+    // No-Lark-transport credential profile: a core-only (apiOnly) bot or HTTP
+    // virtual session must never be handed any Feishu credential, even under a
+    // wide workingDir=~ grant. When false we (a) suppress every Feishu-cred grant
+    // below and (b) append MANDATORY denies for those paths so longest-prefix deny
+    // beats any broad readWrite that would otherwise re-expose them.
+    const larkTransport = ctx.larkTransportEnabled !== false;
+    // No-Lark-transport authority roots (whole dirs, not exact files). A grant that
+    // falls INSIDE one of these (workingDir=~, hostile user sandboxPaths, external
+    // readonlyRoots) must be FAIL-CLOSED — dropped before it enters the rule set —
+    // so a deeper allow can't re-open the authority deny (deepest-prefix wins).
+    // The bot's OWN BOT_HOME is the sole exception (re-allowed deeper, minus
+    // send-cred). Model-CLI authPaths live outside these roots and are unaffected.
+    // computeNoTransportAuthorityRoots freezes BOTH the configured + default botmux
+    // roots and THROWS on an external bots-config (fail-closed, never silent-mask).
+    const authorityRoots = larkTransport ? [] : computeNoTransportAuthorityRoots({
+        homeDir: ctx.homeDir,
+        botmuxHome: ctx.botmuxHome,
+        defaultBotmuxHome: ctx.defaultBotmuxHome,
+        loadedBotsConfigPath: ctx.loadedBotsConfigPath,
+    });
+    // A path is authority-restricted when it's inside an authority root but NOT
+    // inside the bot's own BOT_HOME (which is legitimately re-allowed).
+    const insideAuthority = (p) => authorityRoots.some(root => coversPath(root, p)) && !coversPath(ctx.botHome, p);
+    // Dropped caller allow paths are RECORDED so the worker can log the suppression
+    // (codex: a silently-dropped grant is a diagnosability hole).
+    const suppressedAuthorityPaths = [];
+    const dropAuthority = (paths) => (paths ?? []).filter(p => {
+        const n = normalizeFsPath(p);
+        if (n === null)
+            return false;
+        if (insideAuthority(n)) {
+            suppressedAuthorityPaths.push(n);
+            return false;
+        }
+        return true;
+    });
+    // workingDir is the CLI's cwd — it MUST be granted, so we cannot silently drop
+    // it. A workingDir that IS (or is inside) a Feishu-authority root — own BOT_HOME
+    // excepted — is an unresolvable no-transport layout: fail-closed with a clear
+    // config error rather than dropAuthority-then-spawn into an ungranted cwd
+    // (codex P1). A workingDir that is merely an ANCESTOR of an authority root
+    // (the common `workingDir=~` HTTP-trigger default) is fine — the deeper parent
+    // deny masks the nested authority, so it stays granted below.
+    if (!larkTransport) {
+        const wd = normalizeFsPath(ctx.workingDir);
+        if (wd !== null && insideAuthority(wd)) {
+            throw new FsPolicyConfigError('working-dir-is-authority', `no-transport session refuses workingDir ${wd}: it lives inside a Feishu-authority root `
+                + `(${authorityRoots.join(', ')}) that a core-only turn must deny; choose a workingDir `
+                + `outside these roots (or the bot's own BOT_HOME).`);
+        }
+    }
+    // Hoisted into a named const (vs the upstream inline `candidates.push(...)`)
+    // because roleLibAccess() below inspects baseline's DENY entries.
+    const baseline = ctx.platform === 'darwin' ? darwinBaseline(ctx.homeDir) : linuxBaseline(ctx.homeDir);
+    candidates.push(...baseline);
     // Adapter-declared surfaces.
     push(ctx.execPaths, 'readOnly', 'adapter');
+    // authPaths = the model CLI's OWN login/state surface (~/.codex, ~/.claude
+    // credentials, Seed/bytedcli SSO, Gemini OAuth, OpenCode DB, …) — NOT Feishu.
+    // These MUST stay granted even for a no-transport turn, else the CLI can't
+    // authenticate and the core functionality breaks. The no-Lark-transport gate
+    // only denies Feishu-authority paths (below), never the CLI's own auth.
     push(ctx.authPaths, 'readWrite', 'adapter');
     if (!ctx.redirectedCliData)
         push(ctx.cliDataPaths, 'readWrite', 'adapter');
-    // botmux internals.
-    push([ctx.workingDir, ctx.botHome], 'readWrite', 'internal');
+    // botmux internals. workingDir/extraWrite/readonlyRoots are FAIL-CLOSED against
+    // the authority roots for a no-transport turn (dropAuthority is identity when
+    // larkTransport). botHome is always kept — it's the sanctioned carve-out.
+    push([...dropAuthority([ctx.workingDir]), ctx.botHome], 'readWrite', 'internal');
+    // Own role-library subtree (`~/botmux-roles/<self>`). workingDir alone covers
+    // only the ACTIVE role dir, which silently disables the whole role system
+    // under sandbox: 「切换角色/有哪些角色」enumerates the sibling role dirs and
+    // reads each `.botmux-dir.json`, 「新建角色」writes `users/<openId>/<slug>/`
+    // and copies the library-root `_role-protocol.md` into it, and after a switch
+    // 「沉淀知识」writes `knowledge/` + `.botmux-dir.json` in the NEW role dir —
+    // all of them outside the pre-switch workingDir. readWrite (not readOnly) for
+    // that last reason: a read-only grant looks fine through switch+enumerate and
+    // only EPERMs later, at the knowledge write.
+    // Scoped to `<appId>` on purpose — NOT the shared library root: a sibling
+    // bot's roles (and its users' private role dirs) stay denied by construction,
+    // so cross-bot read isolation is preserved. (`validateRoleLibraryPath` narrows
+    // `botmux role switch` to the same `<root>/<appId>` boundary, so the daemon-side
+    // check and this fs-side grant agree — but the fs rule stands on its own: it
+    // still holds for a session pointed elsewhere by other means.)
+    // …and it never OVERRIDES a covering deny/readOnly. Source rank only settles
+    // conflicts on the SAME path — different paths are always decided by depth — so
+    // a shallower `deny: ["~/botmux-roles"]` (or `readOnly:`) would otherwise be
+    // silently re-opened/upgraded at `<appId>` by this deeper internal rule. An
+    // owner who locks the library must get a locked library, not a hole in it:
+    //   covering deny (baseline / user / mandatory, path OR mandatory regex) → no rule
+    //   covering readOnly (user / mandatoryReadOnly)                         → readOnly
+    // A readOnly grant still lets the role system enumerate + switch; only the
+    // knowledge write fails — strictly closer to what the owner asked for than
+    // either silently upgrading to rw or dropping the rule entirely.
+    // Asymmetry on purpose: baseline DENY counts (a ceiling), baseline readOnly does
+    // NOT (a floor internal grants are meant to lift — e.g. toolchain dirs).
+    // NO-TRANSPORT GATE: a core-only (apiOnly) / HTTP-virtual session has no Feishu
+    // sender identity and no business with the role system, so it gets NO grant at
+    // all. This is an EXPLICIT gate, not a consequence of dropAuthority /
+    // authorityRoots — the role library (`~/botmux-roles`) is deliberately NOT one
+    // of the authority roots (those are Feishu-credential dirs), and roleLibAccess
+    // reads ctx.mandatoryDenyPaths, not the local authorityRoots list, so the
+    // suppression above would never reach it. (This gate only withholds the SPECIAL
+    // whole-subtree grant; it does not by itself make the role library unreadable —
+    // a no-transport workingDir=~ still covers it via the parent grant. The claim is
+    // narrow: "no extra role-library rw is injected for a no-transport turn".)
+    const roleLibAccess = (raw) => {
+        const p = normalizeFsPath(raw);
+        if (!p)
+            return null; // unusable path → no rule (mergeFsRules would drop it anyway)
+        const covered = (paths) => (paths ?? []).map(normalizeFsPath).some((d) => !!d && coversPath(d, p));
+        if (covered([
+            ...baseline.filter(r => r.access === 'deny').map(r => r.path),
+            ...(ctx.userPaths?.deny ?? []),
+            ...(ctx.mandatoryDenyPaths ?? []),
+        ]))
+            return null;
+        // Regex denies: Seatbelt emits them after every path allow (deny wins there),
+        // but compileToBwrap does not consume denyRegexes at all — Linux has no such
+        // backstop, so an rw grant inside a regex-denied tree would simply win. Today
+        // mandatoryDenyRegexes only ever point at BOT_HOME credential sidecars, never
+        // at the role library; this keeps that from silently becoming a hole.
+        // KNOWN BOUNDARY (codex review): this tests the subtree ROOT, which catches
+        // ancestor-shaped regexes (the only shape botmux generates) but NOT one that
+        // matches only a DESCENDANT (`<subtree>/secret$`) — regex-vs-subtree
+        // intersection is not decidable from a prefix. Closing it properly means
+        // either emitting a concrete deny path alongside every internal regex, or
+        // making compileToBwrap consume denyRegexes (a pre-existing gap that applies
+        // to EVERY rw grant — workingDir, botHome, … — not just this one).
+        for (const rx of ctx.mandatoryDenyRegexes ?? []) {
+            try {
+                if (new RegExp(rx).test(p))
+                    return null;
+            }
+            catch { /* unusable regex: not a grant decision */ }
+        }
+        if (covered([...(ctx.userPaths?.readOnly ?? []), ...(ctx.mandatoryReadOnlyPaths ?? [])]))
+            return 'readOnly';
+        return 'readWrite';
+    };
+    const roleLibGrant = larkTransport && ctx.roleLibrarySubtree ? roleLibAccess(ctx.roleLibrarySubtree) : null;
+    if (roleLibGrant)
+        push([ctx.roleLibrarySubtree], roleLibGrant, 'internal');
     push(ctx.outbox ? [ctx.outbox] : [], 'readWrite', 'internal');
-    push(ctx.extraWritePaths, 'readWrite', 'internal');
-    push(ctx.readonlyRoots, 'readOnly', 'internal');
+    push(dropAuthority(ctx.extraWritePaths), 'readWrite', 'internal');
+    push(dropAuthority(ctx.readonlyRoots), 'readOnly', 'internal');
     // Own routing metadata (`botmux send` reply routing) — read-only.
     push([`${ctx.sessionDataDir}/sessions-${ctx.currentAppId}.json`], 'readOnly', 'internal');
     // Own upload bucket — readWRITE: `botmux quoted` / downloadResources writes the
@@ -295,8 +483,10 @@ export function buildFsPolicy(ctx) {
     // pre-uploaded files). The worker mkdirs it pre-spawn so it survives the
     // existence-filter and gets bound rw. Siblings' buckets stay uncovered.
     push([`${ctx.sessionDataDir}/attachments/${ctx.currentAppId}`], 'readWrite', 'internal');
-    // Own per-bot lark-cli config (agent-facing lark-cli identity).
-    push([`${ctx.homeDir}/.lark-cli-bots/${ctx.currentAppId}`], 'readWrite', 'internal');
+    // Own per-bot lark-cli config (agent-facing lark-cli identity). Withheld from
+    // a no-transport turn — it IS this bot's Feishu credential surface.
+    if (larkTransport)
+        push([`${ctx.homeDir}/.lark-cli-bots/${ctx.currentAppId}`], 'readWrite', 'internal');
     // ── botmux CLI runtime surface (deny-by-default ALLOW-LIST) ──
     // The agent runs `botmux …` and claude fires SessionStart / AskUserQuestion
     // hooks that exec `node <install>/dist/cli.js …`. They need the install dir +
@@ -317,7 +507,11 @@ export function buildFsPolicy(ctx) {
         `${bh}/bin`, // the daemon-written `botmux` wrapper (head of PATH)
         `${bh}/claude-plugin`, // skill/plugin dir (claude --plugin-dir); no secrets
         `${bh}/lark-scopes.json`, // static scope catalog
-        `${sd}/dashboard-daemons`, // per-bot {ipcPort, resolvedAllowedUsers} — hook IPC discovery (operational, not secret)
+        // dashboard-daemons (sibling IPC port table) is the discovery half of the
+        // trusted-host escalation — a no-transport turn must NOT get it (paired with
+        // .dashboard-secret it lets an agent reach sibling daemons). Granted only for
+        // transport-enabled bots; for no-transport it stays denied by the authority root.
+        ...(larkTransport ? [`${sd}/dashboard-daemons`] : []),
         `${sd}/bots-info.json`, // bot display names / avatars for <available_bots> + recipient rendering
         `${sd}/bot-openids-${app}.json`, // OWN routing cross-ref (sibling ones stay denied)
         // own sessions-<self>.json + attachments/<self> already pushed above (readOnly)
@@ -347,22 +541,90 @@ export function buildFsPolicy(ctx) {
     // read (verified: sibling ciphertext still DENIED). Linux keeps its keys in the
     // per-bot `.lark-cli-bots/<self>` dir (already readWrite above), so this is
     // darwin-only.
-    if (ctx.platform === 'darwin') {
+    if (ctx.platform === 'darwin' && larkTransport) {
         const larkStore = `${ctx.homeDir}/Library/Application Support/lark-cli`;
         push([`${larkStore}/master.key.file`, `${larkStore}/appsecret_${ctx.currentAppId}.enc`], 'readOnly', 'internal');
     }
     // User config — highest precedence.
-    push(ctx.userPaths?.readWrite, 'readWrite', 'user');
-    push(ctx.userPaths?.readOnly, 'readOnly', 'user');
+    // User config — highest precedence, but readWrite/readOnly grants are
+    // FAIL-CLOSED against the authority roots for a no-transport turn (a hostile
+    // `sandboxPaths.readWrite ~/.lark-cli-bots/<self>` must not re-open the deny).
+    // User DENY entries are always kept (they only tighten).
+    push(dropAuthority(ctx.userPaths?.readWrite), 'readWrite', 'user');
+    push(dropAuthority(ctx.userPaths?.readOnly), 'readOnly', 'user');
     push(ctx.userPaths?.deny, 'deny', 'user');
     push(ctx.mandatoryDenyPaths, 'deny', 'mandatory');
     push(ctx.mandatoryReadOnlyPaths, 'readOnly', 'mandatory');
+    // No-Lark-transport HOST-AUTHORITY denies + minimal carve-out (codex escalation
+    // fix). We DENY THE WHOLE authority ROOT(s) — not exact credential files, which
+    // miss .bak/.tmp sidecars, future files, and `.dashboard-secret` (the
+    // trusted-host HMAC that would let a no-transport agent sign sibling-daemon
+    // routes). Conflicting deeper grants were already dropped above (dropAuthority),
+    // so these denies aren't re-opened. The model CLI's own authPaths (~/.codex …)
+    // live OUTSIDE these roots and stay granted.
+    if (!larkTransport) {
+        push(authorityRoots, 'deny', 'mandatory');
+        // Minimal carve-out — re-allowed at a DEEPER prefix so it wins the
+        // deepest-prefix resolution, WITHOUT re-exposing any authority file:
+        //  • own BOT_HOME readWrite (working dir / scratch) — but its send-cred.json
+        //    (the Feishu secret) stays denied at a deeper path still.
+        push([ctx.botHome], 'readWrite', 'internal');
+        push([`${ctx.botHome}/send-cred.json`], 'deny', 'mandatory');
+        //  • own routing cross-ref + session file the CLI legitimately reads (read-only,
+        //    own-app-scoped — NOT the shared secret/port table).
+        push([
+            `${ctx.sessionDataDir}/bots-info.json`, // display names for <available_bots> (public-ish)
+            `${ctx.sessionDataDir}/sessions-${ctx.currentAppId}.json`,
+            `${ctx.sessionDataDir}/bot-openids-${ctx.currentAppId}.json`,
+            // Core-only writes its `botmux` wrapper into <dataDir>/bin (dedicated, NOT
+            // the shared ~/.botmux/bin) and prepends it to the worker PATH — read-only
+            // so the sandboxed `botmux send` hook can exec it. Under the state root, so
+            // no separate authority-root concern.
+            `${ctx.sessionDataDir}/bin`,
+        ], 'readOnly', 'internal');
+        if (ctx.sessionId)
+            push([`${ctx.sessionDataDir}/turn-sends/${ctx.sessionId}.jsonl`], 'readWrite', 'internal');
+        // NOTE: dashboard-daemons (sibling IPC port table) and .dashboard-secret/-token
+        // are deliberately NOT re-allowed — a no-transport turn has no business
+        // reaching sibling daemons, and the secret is the escalation vector.
+    }
+    const rules = mergeFsRules(candidates);
+    // Post-merge self-check for the loaded bots-config (codex P1). Being inside a
+    // frozen authority root is necessary but NOT sufficient: this is a white-in-black
+    // policy where the DEEPEST rule wins, and the no-transport carve-outs re-open
+    // subtrees of the authority roots (own BOT_HOME readWrite, `bin` readOnly,
+    // `attachments`/outbox readWrite, session metadata, install-root). BOTS_CONFIG
+    // may be ANY file, so a config that happens to sit under one of those carve-outs
+    // — or a future one — would be readable again, re-exposing every bot's secret
+    // (and its .bak/.tmp sidecars). Assert the resolved policy actually DENIES both
+    // the config file AND its containing dir (covers sidecars created next to it);
+    // any readOnly/readWrite means a carve-out re-opened it → fail the layout closed.
+    // This auto-covers carve-outs added later without re-enumerating filenames.
+    if (!larkTransport && ctx.loadedBotsConfigPath) {
+        const cfg = normalizeFsPath(ctx.loadedBotsConfigPath);
+        if (cfg) {
+            const dir = cfg.slice(0, cfg.lastIndexOf('/')) || '/';
+            for (const probe of [cfg, dir]) {
+                const eff = accessForPath(rules, probe).access;
+                if (eff !== 'deny') {
+                    throw new FsPolicyConfigError('bots-config-in-carveout', `no-transport session refuses bots-config at ${cfg}: it (or its directory ${dir}) `
+                        + `resolves to '${eff}', not 'deny' — a trusted carve-out (own BOT_HOME / bin / `
+                        + `attachments / outbox / install-root) re-opens it under deepest-prefix-wins, which `
+                        + `would re-expose every bot's secret. Move the config out of the botmux data/BOT_HOME `
+                        + `carve-out surface (a plain ~/.botmux/bots.json is denied wholesale).`);
+                }
+            }
+        }
+    }
     return {
-        rules: mergeFsRules(candidates),
+        rules,
         net: ctx.net !== false,
         writeRegexes: [...(ctx.writeRegexes ?? [])],
         denyRegexes: [...(ctx.mandatoryDenyRegexes ?? [])],
         finalReadOnlyPaths: [...(ctx.mandatoryReadOnlyPaths ?? [])],
+        suppressedAuthorityPaths: suppressedAuthorityPaths.length
+            ? [...new Set(suppressedAuthorityPaths)].sort()
+            : undefined,
     };
 }
 // ───────────────────────────── Seatbelt compiler ─────────────────────────────
@@ -405,7 +667,7 @@ const SEATBELT_BASE_PROFILE = '/System/Library/Sandbox/Profiles/bsd.sb';
  * Compile the policy to a macOS Seatbelt profile. `(deny default)` + Apple's
  * bsd.sb base makes it deny-by-default for BOTH files and other operations,
  * then we re-allow the non-file operation classes the CLI needs (process/mach/
- * ipc/sysctl/signal, network gated on policy.net) and the three file tiers
+ * ipc/sysctl/signal/iokit-open, network gated on policy.net) and the three file tiers
  * emitted shallow→deep (Seatbelt applies the LAST matching rule → deepest rule
  * wins, matching accessForPath()).
  */
@@ -422,6 +684,21 @@ export function compileToSeatbelt(policy) {
         '(allow ipc*)',
         '(allow sysctl*)',
         '(allow file-ioctl)',
+        // IOKit user clients. bsd.sb carries NO iokit rule, so `(deny default)` denies
+        // every IOServiceOpen — and the frameworks that need one (CoreGraphics /
+        // IOSurface / IOPMrootDomain power monitoring) often do NOT check the failure:
+        // the process dies with a bare SIGSEGV inside IOKit, no sandbox diagnostic at
+        // all. Reproduced with `chrome-headless-shell` (the binary behind an agent's
+        // puppeteer/playwright screenshots): SEGV_ACCERR before first paint, every run.
+        // NOT a claim that IOKit is security-irrelevant — opening user clients is real
+        // kernel attack surface. It is an explicit COMPATIBILITY TRADE-OFF, of a piece
+        // with the wholesale mach*/ipc*/sysctl* grants above: this sandbox's threat
+        // model is the file isolation enforced by the tiers below (cross-bot reads and
+        // credentials), not kernel-surface reduction. A per-user-client-class allow-list
+        // would be tighter, but the required set drifts with macOS/silicon/toolchain and
+        // every miss fails as that same silent crash. Tighten it behind an opt-in tier
+        // if a deployment ever needs the kernel surface closed too.
+        '(allow iokit-open)',
         ...(policy.net ? ['(allow network*)', '(allow system-socket)'] : []),
     ];
     for (const r of policy.rules) {

package/dist/adapters/cli/fs-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"fs-policy.js","sourceRoot":"","sources":["../../../src/adapters/cli/fs-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAiFH;;qDAEqD;AACrD,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACvC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC;IACxB,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,CAAS,EAAE,KAAa;IACjD,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,iCAAiC,CAC/C,SAA4B,EAC5B,YAA+B;IAE/B,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,6CAA6C;QAC7C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAIjD;IACC,IAAI,CAAC,KAAK,CAAC,mBAAmB;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACpE,OAAO,iCAAiC,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,WAAW,GAAiC;IAChD,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,SAAS,EAAE,CAAC;CACb,CAAC;AACF,MAAM,eAAe,GAA6B,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAEzF;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,UAA6B;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,IAAI,GAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAChD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxI,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAwB,EAAE,IAAY;IAClE,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,IAAI,IAAwB,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACzE,CAAC;AAED,gFAAgF;AAEhF;iFACiF;AACjF,SAAS,kBAAkB,CAAC,CAAS;IACnC,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACxF,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACtF,OAAO;QACL,0EAA0E;QAC1E,4EAA4E;QAC5E,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;QAC3D,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACjE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACtG,yEAAyE;QACzE,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,6CAA6C;QAC7C,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC;QAC3E,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzF,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrF,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1G,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;QACrC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;QACjD,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;QACxE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;QACrD,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;QACjG,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;QAC9C,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,4BAA4B,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,4BAA4B,CAAC;QACtC,iDAAiD;QACjD,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC;QAC3D,uEAAuE;QACvE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC;QACxD,yEAAyE;QACzE,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9E,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACpF,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACpF,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/F,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACxF,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACtF,OAAO;QACL,GAAG,kBAAkB,CAAC,CAAC,CAAC;QACxB,4EAA4E;QAC5E,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC;QAC9E,EAAE,CAAC,cAAc,CAAC;QAClB,EAAE,CAAC,qBAAqB,CAAC,EAAI,iBAAiB;QAC9C,EAAE,CAAC,0BAA0B,CAAC;QAC9B,EAAE,CAAC,kBAAkB,CAAC,EAAO,cAAc;QAC3C,IAAI,CAAC,oBAAoB,CAAC;QAC1B,8DAA8D;QAC9D,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC;QAClF,4EAA4E;QAC5E,2EAA2E;QAC3E,uCAAuC;QACvC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;QAClB,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACzB,EAAE,CAAC,GAAG,CAAC,8BAA8B,CAAC;QACtC,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC9B,4EAA4E;QAC5E,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,CAAC,GAAG,CAAC,uCAAuC,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACxF,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACzF,OAAO;QACL,GAAG,kBAAkB,CAAC,CAAC,CAAC;QACxB,yEAAyE;QACzE,qEAAqE;QACrE,sEAAsE;QACtE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC;QAClC,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAoB;IAChD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,KAAoC,EAAE,MAAgB,EAAE,MAAoB,EAAE,EAAE;QAC5F,KAAK,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3G,6BAA6B;IAC7B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,iBAAiB;QAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAE3E,oBAAoB;IACpB,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAChD,kEAAkE;IAClE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,cAAc,aAAa,GAAG,CAAC,YAAY,OAAO,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC1F,gFAAgF;IAChF,+EAA+E;IAC/E,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,cAAc,gBAAgB,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACzF,gEAAgE;IAChE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,mBAAmB,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAErF,gEAAgE;IAChE,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,gFAAgF;IAChF,0EAA0E;IAC1E,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,GAAG,CAAC,cAAc,EAAE,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC;IAC3E,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,GAAG,EAAE,YAAY,EAAW,6BAA6B;QACzD,GAAG,EAAE,kBAAkB,EAAK,sDAAsD;QAClF,GAAG,EAAE,MAAM,EAAiB,qDAAqD;QACjF,GAAG,EAAE,gBAAgB,EAAO,qDAAqD;QACjF,GAAG,EAAE,mBAAmB,EAAI,uBAAuB;QACnD,GAAG,EAAE,oBAAoB,EAAG,yFAAyF;QACrH,GAAG,EAAE,iBAAiB,EAAM,yEAAyE;QACrG,GAAG,EAAE,gBAAgB,GAAG,OAAO,EAAG,mDAAmD;QACrF,gFAAgF;KACjF,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC3B,sDAAsD;IACtD,+EAA+E;IAC/E,wEAAwE;IACxE,gFAAgF;IAChF,8EAA8E;IAC9E,yEAAyE;IACzE,yEAAyE;IACzE,IAAI,GAAG,CAAC,SAAS;QAAE,IAAI,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,CAAC,SAAS,QAAQ,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC9F,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,oEAAoE;IACpE,+EAA+E;IAC/E,+EAA+E;IAC/E,0EAA0E;IAC1E,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,gFAAgF;IAChF,4EAA4E;IAC5E,eAAe;IACf,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,OAAO,uCAAuC,CAAC;QACxE,IAAI,CAAC,CAAC,GAAG,SAAS,kBAAkB,EAAE,GAAG,SAAS,cAAc,GAAG,CAAC,YAAY,MAAM,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACnH,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAE1D,OAAO;QACL,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC;QAC/B,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,KAAK;QACtB,YAAY,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC3C,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAClD,kBAAkB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AACD,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,yCAAyC;AACxE,CAAC;AAED;;;iEAGiE;AACjE,MAAM,UAAU,wBAAwB,CAAC,KAAwB;IAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,SAAS;QAClC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACf,SAAS,CAAC;YACR,MAAM,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;YACxE,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChB,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM;YAC1B,CAAC,GAAG,MAAM,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;kEAKkE;AAClE,MAAM,qBAAqB,GAAG,yCAAyC,CAAC;AAExE;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAgB;IAChD,MAAM,KAAK,GAAG;QACZ,aAAa;QACb,gBAAgB;QAChB,YAAY,qBAAqB,IAAI;QACrC,+EAA+E;QAC/E,iFAAiF;QACjF,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;QACf,cAAc;QACd,iBAAiB;QACjB,oBAAoB;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;gBAAE,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;;gBAC5E,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC,CAAC,wDAAwD;QAClH,CAAC;IACH,CAAC;IACD,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,KAAK,MAAM,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,uCAAuC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,+BAA+B,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,6BAA6B,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,8BAA8B,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,+BAA+B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,+BAA+B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAkDD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,cAAc,CAAC,MAAgB,EAAE,IAAsB;IACrE,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,MAAM,UAAU,GAA2C,EAAE,CAAC;IAC9D,MAAM,UAAU,GAA6C,EAAE,CAAC;IAChE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC3F,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE;QAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAE3E,MAAM,OAAO,GAAa,EAAE,CAAC,CAAC,wDAAwD;IACtF,MAAM,SAAS,GAAa,EAAE,CAAC,CAAC,2DAA2D;IAC3F,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAAE,SAAS,CAAC,0CAA0C;YACnG,uEAAuE;YACvE,0EAA0E;YAC1E,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,sEAAsE;YACtE,yEAAyE;YACzE,8EAA8E;YAC9E,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC3C,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1E,2EAA2E;YAC3E,0EAA0E;YAC1E,uEAAuE;YACvE,2EAA2E;YAC3E,wEAAwE;YACxE,iEAAiE;YACjE,wEAAwE;YACxE,0EAA0E;YAC1E,4EAA4E;YAC5E,yCAAyC;YACzC,IAAI,eAAmC,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;oBAAE,SAAS,CAAC,uBAAuB;gBACvF,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,SAAS,CAAC,0CAA0C;gBAC1G,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS,CAAC,kCAAkC;gBAClH,IAAI,CAAC,eAAe,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC;oBAAE,eAAe,GAAG,CAAC,CAAC;YACnG,CAAC;YACD,MAAM,cAAc,GAAG,CAAC,cAAc,IAAI,eAAe,EAAE,MAAM,KAAK,MAAM,CAAC;YAC7E,IAAI,cAAc;gBAAE,SAAS;YAC7B,IAAI,cAAc,EAAE,CAAC;gBACnB,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC1B,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACvB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,mEAAmE;gBACnE,mEAAmE;gBACnE,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,UAAU,SAAS,QAAQ,EAAE,EAAE,CAAC;gBACtD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACnC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,sEAAsE;gBACtE,sEAAsE;gBACtE,qEAAqE;gBACrE,uEAAuE;gBACvE,kCAAkC;gBAClC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC3C,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,SAAS;QACX,CAAC;QACD,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,oCAAoC;IACpC,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAErD,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC;IACpG,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC7C,CAAC;AAiBD;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAuD;IAChG,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,2BAA2B;IAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,KAAK,IAAI;WACzC,CAAC,KAAK,CAAC,oBAAoB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;WAC7C,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;WACzC,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC;IACvE,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,gDAAgD;IAC7E,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,YAAY,GAA0C,EAAE,CAAC;IAC/D,IAAI,QAAQ,CAAC,MAAM;QAAE,YAAY,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM;QAAE,YAAY,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,OAAO;QACL,OAAO;QACP,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"fs-policy.js","sourceRoot":"","sources":["../../../src/adapters/cli/fs-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAyHH;;qDAEqD;AACrD,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACvC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC;IACxB,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,CAAS,EAAE,KAAa;IACjD,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,iCAAiC,CAC/C,SAA4B,EAC5B,YAA+B;IAE/B,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,6CAA6C;QAC7C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iCAAiC,CAAC,KAIjD;IACC,IAAI,CAAC,KAAK,CAAC,mBAAmB;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACpE,OAAO,iCAAiC,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,WAAW,GAAiC;IAChD,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,SAAS,EAAE,CAAC;CACb,CAAC;AACF,MAAM,eAAe,GAA6B,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAEzF;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,UAA6B;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,IAAI,GAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAChD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxI,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAwB,EAAE,IAAY;IAClE,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,IAAI,IAAwB,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACzE,CAAC;AAED,gFAAgF;AAEhF;iFACiF;AACjF,SAAS,kBAAkB,CAAC,CAAS;IACnC,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACxF,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACtF,OAAO;QACL,0EAA0E;QAC1E,4EAA4E;QAC5E,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;QAC3D,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACjE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACtG,yEAAyE;QACzE,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,6CAA6C;QAC7C,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC;QAC3E,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzF,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrF,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1G,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;QACrC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;QACjD,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;QACxE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;QACrD,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;QACjG,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;QAC9C,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,4BAA4B,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,4BAA4B,CAAC;QACtC,iDAAiD;QACjD,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC;QAC3D,uEAAuE;QACvE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC;QACxD,yEAAyE;QACzE,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9E,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC3E,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACpF,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACpF,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/F,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACxF,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACtF,OAAO;QACL,GAAG,kBAAkB,CAAC,CAAC,CAAC;QACxB,4EAA4E;QAC5E,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC;QAC9E,EAAE,CAAC,cAAc,CAAC;QAClB,EAAE,CAAC,qBAAqB,CAAC,EAAI,iBAAiB;QAC9C,EAAE,CAAC,0BAA0B,CAAC;QAC9B,EAAE,CAAC,kBAAkB,CAAC,EAAO,cAAc;QAC3C,IAAI,CAAC,oBAAoB,CAAC;QAC1B,8DAA8D;QAC9D,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC;QAClF,4EAA4E;QAC5E,2EAA2E;QAC3E,uCAAuC;QACvC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC;QAClB,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACzB,EAAE,CAAC,GAAG,CAAC,8BAA8B,CAAC;QACtC,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC9B,4EAA4E;QAC5E,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,CAAC,GAAG,CAAC,uCAAuC,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACxF,MAAM,EAAE,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACzF,OAAO;QACL,GAAG,kBAAkB,CAAC,CAAC,CAAC;QACxB,yEAAyE;QACzE,qEAAqE;QACrE,sEAAsE;QACtE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC;QAClC,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;iDAQiD;AACjD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,CAAkF;IAC/F,YAAY,IAAiC,EAAE,OAAe;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gCAAgC,CAAC,KAKhD;IACC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;YACxB,KAAK,CAAC,UAAU;YAChB,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,KAAK,CAAC,OAAO,YAAY;YAC5B,GAAG,KAAK,CAAC,OAAO,iBAAiB;YACjC,GAAG,KAAK,CAAC,OAAO,uCAAuC;SACxD,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,mBAAmB,CAC3B,sBAAsB,EACtB,2DAA2D,GAAG,2BAA2B;cACvF,0BAA0B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gDAAgD;cAC1F,wFAAwF;cACxF,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAoB;IAChD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,KAAoC,EAAE,MAAgB,EAAE,MAAoB,EAAE,EAAE;QAC5F,KAAK,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9E,+EAA+E;IAC/E,iEAAiE;IACjE,MAAM,aAAa,GAAG,GAAG,CAAC,oBAAoB,KAAK,KAAK,CAAC;IAEzD,gFAAgF;IAChF,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,yEAAyE;IACzE,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gCAAgC,CAAC;QAC3E,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;KAC/C,CAAC,CAAC;IACH,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,eAAe,GAAG,CAAC,CAAS,EAAW,EAAE,CAC7C,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClF,gFAAgF;IAChF,8DAA8D;IAC9D,MAAM,wBAAwB,GAAa,EAAE,CAAC;IAC9C,MAAM,aAAa,GAAG,CAAC,KAAoC,EAAY,EAAE,CACvE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACvB,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,+EAA+E;IAC/E,iFAAiF;IACjF,8EAA8E;IAC9E,0EAA0E;IAC1E,2EAA2E;IAC3E,+EAA+E;IAC/E,8DAA8D;IAC9D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,EAAE,KAAK,IAAI,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,mBAAmB,CAC3B,0BAA0B,EAC1B,2CAA2C,EAAE,4CAA4C;kBACvF,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,yDAAyD;kBACtF,kDAAkD,CACrD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,kEAAkE;IAClE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtG,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAE7B,6BAA6B;IAC7B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC3C,2EAA2E;IAC3E,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,iBAAiB;QAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAE3E,gFAAgF;IAChF,8EAA8E;IAC9E,0EAA0E;IAC1E,IAAI,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACjF,8EAA8E;IAC9E,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,8EAA8E;IAC9E,uEAAuE;IACvE,8EAA8E;IAC9E,8EAA8E;IAC9E,6CAA6C;IAC7C,0EAA0E;IAC1E,8EAA8E;IAC9E,+EAA+E;IAC/E,iFAAiF;IACjF,6EAA6E;IAC7E,+DAA+D;IAC/D,6EAA6E;IAC7E,gFAAgF;IAChF,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,mFAAmF;IACnF,oFAAoF;IACpF,2EAA2E;IAC3E,2EAA2E;IAC3E,iEAAiE;IACjE,iFAAiF;IACjF,yEAAyE;IACzE,gFAAgF;IAChF,+EAA+E;IAC/E,sEAAsE;IACtE,+EAA+E;IAC/E,+EAA+E;IAC/E,0EAA0E;IAC1E,gFAAgF;IAChF,gFAAgF;IAChF,iFAAiF;IACjF,2EAA2E;IAC3E,MAAM,aAAa,GAAG,CAAC,GAAW,EAAmB,EAAE;QACrD,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,8DAA8D;QACnF,MAAM,OAAO,GAAG,CAAC,KAAoC,EAAE,EAAE,CACvD,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC;YACV,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7D,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC;SAClC,CAAC;YAAE,OAAO,IAAI,CAAC;QAChB,8EAA8E;QAC9E,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,sEAAsE;QACtE,4EAA4E;QAC5E,6EAA6E;QAC7E,qEAAqE;QACrE,yEAAyE;QACzE,0EAA0E;QAC1E,6EAA6E;QAC7E,mEAAmE;QACnE,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC;gBAAC,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,UAAU,CAAC;QAC5G,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,aAAa,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5G,IAAI,YAAY;QAAE,IAAI,CAAC,CAAC,GAAG,CAAC,kBAAmB,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAC5E,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC/D,kEAAkE;IAClE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,cAAc,aAAa,GAAG,CAAC,YAAY,OAAO,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC1F,gFAAgF;IAChF,+EAA+E;IAC/E,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,cAAc,gBAAgB,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACzF,8EAA8E;IAC9E,oEAAoE;IACpE,IAAI,aAAa;QAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,mBAAmB,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAExG,gEAAgE;IAChE,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,gFAAgF;IAChF,0EAA0E;IAC1E,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,GAAG,CAAC,cAAc,EAAE,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC;IAC3E,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,GAAG,EAAE,YAAY,EAAW,6BAA6B;QACzD,GAAG,EAAE,kBAAkB,EAAK,sDAAsD;QAClF,GAAG,EAAE,MAAM,EAAiB,qDAAqD;QACjF,GAAG,EAAE,gBAAgB,EAAO,qDAAqD;QACjF,GAAG,EAAE,mBAAmB,EAAI,uBAAuB;QACnD,0EAA0E;QAC1E,6EAA6E;QAC7E,8EAA8E;QAC9E,kFAAkF;QAClF,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,EAAE,iBAAiB,EAAM,yEAAyE;QACrG,GAAG,EAAE,gBAAgB,GAAG,OAAO,EAAG,mDAAmD;QACrF,gFAAgF;KACjF,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC3B,sDAAsD;IACtD,+EAA+E;IAC/E,wEAAwE;IACxE,gFAAgF;IAChF,8EAA8E;IAC9E,yEAAyE;IACzE,yEAAyE;IACzE,IAAI,GAAG,CAAC,SAAS;QAAE,IAAI,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,CAAC,SAAS,QAAQ,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC9F,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,oEAAoE;IACpE,+EAA+E;IAC/E,+EAA+E;IAC/E,0EAA0E;IAC1E,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,gFAAgF;IAChF,4EAA4E;IAC5E,eAAe;IACf,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,aAAa,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,OAAO,uCAAuC,CAAC;QACxE,IAAI,CAAC,CAAC,GAAG,SAAS,kBAAkB,EAAE,GAAG,SAAS,cAAc,GAAG,CAAC,YAAY,MAAM,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACnH,CAAC;IAED,oCAAoC;IACpC,sEAAsE;IACtE,6EAA6E;IAC7E,+EAA+E;IAC/E,yDAAyD;IACzD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACnE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAE1D,gFAAgF;IAChF,gFAAgF;IAChF,sEAAsE;IACtE,4EAA4E;IAC5E,iFAAiF;IACjF,+EAA+E;IAC/E,6CAA6C;IAC7C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,mEAAmE;QACnE,qEAAqE;QACrE,6EAA6E;QAC7E,8DAA8D;QAC9D,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7D,iFAAiF;QACjF,yDAAyD;QACzD,IAAI,CAAC;YACH,GAAG,GAAG,CAAC,cAAc,iBAAiB,EAAgB,kDAAkD;YACxG,GAAG,GAAG,CAAC,cAAc,aAAa,GAAG,CAAC,YAAY,OAAO;YACzD,GAAG,GAAG,CAAC,cAAc,gBAAgB,GAAG,CAAC,YAAY,OAAO;YAC5D,2EAA2E;YAC3E,2EAA2E;YAC3E,4EAA4E;YAC5E,sCAAsC;YACtC,GAAG,GAAG,CAAC,cAAc,MAAM;SAC5B,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,SAAS;YAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,cAAc,eAAe,GAAG,CAAC,SAAS,QAAQ,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QAC9G,gFAAgF;QAChF,wEAAwE;QACxE,qEAAqE;IACvE,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAEvC,8EAA8E;IAC9E,kFAAkF;IAClF,8EAA8E;IAC9E,2EAA2E;IAC3E,+EAA+E;IAC/E,iFAAiF;IACjF,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,kFAAkF;IAClF,4EAA4E;IAC5E,IAAI,CAAC,aAAa,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;YACtD,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC;gBAC/C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;oBACnB,MAAM,IAAI,mBAAmB,CAC3B,yBAAyB,EACzB,+CAA+C,GAAG,0BAA0B,GAAG,IAAI;0BACjF,gBAAgB,GAAG,4DAA4D;0BAC/E,oFAAoF;0BACpF,sFAAsF;0BACtF,sEAAsE,CACzE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,KAAK;QACtB,YAAY,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC3C,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAClD,kBAAkB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAC3D,wBAAwB,EAAE,wBAAwB,CAAC,MAAM;YACvD,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,EAAE;YAC/C,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AACD,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,yCAAyC;AACxE,CAAC;AAED;;;iEAGiE;AACjE,MAAM,UAAU,wBAAwB,CAAC,KAAwB;IAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,SAAS;QAClC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACf,SAAS,CAAC;YACR,MAAM,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;YACxE,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChB,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM;YAC1B,CAAC,GAAG,MAAM,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;kEAKkE;AAClE,MAAM,qBAAqB,GAAG,yCAAyC,CAAC;AAExE;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAgB;IAChD,MAAM,KAAK,GAAG;QACZ,aAAa;QACb,gBAAgB;QAChB,YAAY,qBAAqB,IAAI;QACrC,+EAA+E;QAC/E,iFAAiF;QACjF,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;QACf,cAAc;QACd,iBAAiB;QACjB,oBAAoB;QACpB,+EAA+E;QAC/E,yEAAyE;QACzE,+EAA+E;QAC/E,8EAA8E;QAC9E,6EAA6E;QAC7E,gFAAgF;QAChF,+EAA+E;QAC/E,+EAA+E;QAC/E,4EAA4E;QAC5E,+EAA+E;QAC/E,iFAAiF;QACjF,iFAAiF;QACjF,+EAA+E;QAC/E,4DAA4D;QAC5D,oBAAoB;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;gBAAE,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;;gBAC5E,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC,CAAC,wDAAwD;QAClH,CAAC;IACH,CAAC;IACD,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,KAAK,MAAM,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,uCAAuC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,+BAA+B,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,6BAA6B,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,8BAA8B,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,+BAA+B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,+BAA+B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAkDD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,cAAc,CAAC,MAAgB,EAAE,IAAsB;IACrE,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,MAAM,UAAU,GAA2C,EAAE,CAAC;IAC9D,MAAM,UAAU,GAA6C,EAAE,CAAC;IAChE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC3F,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE;QAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAE3E,MAAM,OAAO,GAAa,EAAE,CAAC,CAAC,wDAAwD;IACtF,MAAM,SAAS,GAAa,EAAE,CAAC,CAAC,2DAA2D;IAC3F,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAAE,SAAS,CAAC,0CAA0C;YACnG,uEAAuE;YACvE,0EAA0E;YAC1E,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,sEAAsE;YACtE,yEAAyE;YACzE,8EAA8E;YAC9E,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC3C,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1E,2EAA2E;YAC3E,0EAA0E;YAC1E,uEAAuE;YACvE,2EAA2E;YAC3E,wEAAwE;YACxE,iEAAiE;YACjE,wEAAwE;YACxE,0EAA0E;YAC1E,4EAA4E;YAC5E,yCAAyC;YACzC,IAAI,eAAmC,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;oBAAE,SAAS,CAAC,uBAAuB;gBACvF,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,SAAS,CAAC,0CAA0C;gBAC1G,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS,CAAC,kCAAkC;gBAClH,IAAI,CAAC,eAAe,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC;oBAAE,eAAe,GAAG,CAAC,CAAC;YACnG,CAAC;YACD,MAAM,cAAc,GAAG,CAAC,cAAc,IAAI,eAAe,EAAE,MAAM,KAAK,MAAM,CAAC;YAC7E,IAAI,cAAc;gBAAE,SAAS;YAC7B,IAAI,cAAc,EAAE,CAAC;gBACnB,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC1B,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACvB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,mEAAmE;gBACnE,mEAAmE;gBACnE,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,UAAU,SAAS,QAAQ,EAAE,EAAE,CAAC;gBACtD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACnC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,sEAAsE;gBACtE,sEAAsE;gBACtE,qEAAqE;gBACrE,uEAAuE;gBACvE,kCAAkC;gBAClC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC3C,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,SAAS;QACX,CAAC;QACD,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,oCAAoC;IACpC,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAErD,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC;IACpG,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC7C,CAAC;AAiBD;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAuD;IAChG,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,2BAA2B;IAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,KAAK,IAAI;WACzC,CAAC,KAAK,CAAC,oBAAoB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;WAC7C,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;WACzC,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC;IACvE,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,gDAAgD;IAC7E,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,YAAY,GAA0C,EAAE,CAAC;IAC/D,IAAI,QAAQ,CAAC,MAAM;QAAE,YAAY,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM;QAAE,YAAY,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,OAAO;QACL,OAAO;QACP,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC"}

package/dist/adapters/cli/grok.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grok.d.ts","sourceRoot":"","sources":["../../../src/adapters/cli/grok.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,YAAY,CAAC;AAoBxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,UAAU,CA8OnE;AAED,eAAO,MAAM,MAAM,0BAAoB,CAAC"}
+{"version":3,"file":"grok.d.ts","sourceRoot":"","sources":["../../../src/adapters/cli/grok.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,YAAY,CAAC;AAoBxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,UAAU,CAiPnE;AAED,eAAO,MAAM,MAAM,0BAAoB,CAAC"}