codexgpt 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (654) hide show
  1. package/AGENTS.example.md +20 -0
  2. package/CHANGELOG.md +342 -0
  3. package/CHATGPT_PROMPT.md +12 -0
  4. package/CLOUDFLARED_VERIFIED_INSTALL.md +94 -0
  5. package/CODEX_PROMPT.md +12 -0
  6. package/CONTRIBUTING.md +62 -0
  7. package/DOMAIN_SETUP.md +275 -0
  8. package/FAQ.md +366 -0
  9. package/FAQ_ZH.md +329 -0
  10. package/LICENSE +21 -0
  11. package/PUBLIC_LAUNCH_CHECKLIST.md +111 -0
  12. package/README.md +490 -0
  13. package/README_ZH.md +747 -0
  14. package/SECURITY.md +295 -0
  15. package/config.example.env +103 -0
  16. package/dist/access/fullAccessLease.js +148 -0
  17. package/dist/access/fullAccessLease.js.map +1 -0
  18. package/dist/access/protectedRoots.js +122 -0
  19. package/dist/access/protectedRoots.js.map +1 -0
  20. package/dist/access/rootAdmission.js +347 -0
  21. package/dist/access/rootAdmission.js.map +1 -0
  22. package/dist/analysis/cache.js +27 -0
  23. package/dist/analysis/cache.js.map +1 -0
  24. package/dist/analysis/classify.js +102 -0
  25. package/dist/analysis/classify.js.map +1 -0
  26. package/dist/analysis/extract.js +139 -0
  27. package/dist/analysis/extract.js.map +1 -0
  28. package/dist/analysis/graph.js +22 -0
  29. package/dist/analysis/graph.js.map +1 -0
  30. package/dist/analysis/impact.js +167 -0
  31. package/dist/analysis/impact.js.map +1 -0
  32. package/dist/analysis/index.js +215 -0
  33. package/dist/analysis/index.js.map +1 -0
  34. package/dist/analysis/inventory.js +51 -0
  35. package/dist/analysis/inventory.js.map +1 -0
  36. package/dist/analysis/providers.js +24 -0
  37. package/dist/analysis/providers.js.map +1 -0
  38. package/dist/analysis/rank.js +27 -0
  39. package/dist/analysis/rank.js.map +1 -0
  40. package/dist/analysis/types.js +8 -0
  41. package/dist/analysis/types.js.map +1 -0
  42. package/dist/audit/canonicalJson.js +79 -0
  43. package/dist/audit/canonicalJson.js.map +1 -0
  44. package/dist/audit/diagnostics.js +128 -0
  45. package/dist/audit/diagnostics.js.map +1 -0
  46. package/dist/audit/index.js +12 -0
  47. package/dist/audit/index.js.map +1 -0
  48. package/dist/audit/lifecycleV3.js +53 -0
  49. package/dist/audit/lifecycleV3.js.map +1 -0
  50. package/dist/audit/lifecycleV4.js +70 -0
  51. package/dist/audit/lifecycleV4.js.map +1 -0
  52. package/dist/audit/lock.js +195 -0
  53. package/dist/audit/lock.js.map +1 -0
  54. package/dist/audit/queryTool.js +120 -0
  55. package/dist/audit/queryTool.js.map +1 -0
  56. package/dist/audit/runtime.js +48 -0
  57. package/dist/audit/runtime.js.map +1 -0
  58. package/dist/audit/schemas.js +640 -0
  59. package/dist/audit/schemas.js.map +1 -0
  60. package/dist/audit/store.js +1309 -0
  61. package/dist/audit/store.js.map +1 -0
  62. package/dist/audit/transactionParticipant.js +45 -0
  63. package/dist/audit/transactionParticipant.js.map +1 -0
  64. package/dist/audit/types.js +11 -0
  65. package/dist/audit/types.js.map +1 -0
  66. package/dist/auth/audit.js +44 -0
  67. package/dist/auth/audit.js.map +1 -0
  68. package/dist/auth/authorizationStore.js +333 -0
  69. package/dist/auth/authorizationStore.js.map +1 -0
  70. package/dist/auth/challenges.js +25 -0
  71. package/dist/auth/challenges.js.map +1 -0
  72. package/dist/auth/clientStore.js +469 -0
  73. package/dist/auth/clientStore.js.map +1 -0
  74. package/dist/auth/cloudflareConfig.js +112 -0
  75. package/dist/auth/cloudflareConfig.js.map +1 -0
  76. package/dist/auth/configuration.js +167 -0
  77. package/dist/auth/configuration.js.map +1 -0
  78. package/dist/auth/credentialStore.js +65 -0
  79. package/dist/auth/credentialStore.js.map +1 -0
  80. package/dist/auth/deploymentLock.js +220 -0
  81. package/dist/auth/deploymentLock.js.map +1 -0
  82. package/dist/auth/deploymentRegistry.js +149 -0
  83. package/dist/auth/deploymentRegistry.js.map +1 -0
  84. package/dist/auth/errors.js +26 -0
  85. package/dist/auth/errors.js.map +1 -0
  86. package/dist/auth/grantStore.js +307 -0
  87. package/dist/auth/grantStore.js.map +1 -0
  88. package/dist/auth/index.js +39 -0
  89. package/dist/auth/index.js.map +1 -0
  90. package/dist/auth/keyManager.js +148 -0
  91. package/dist/auth/keyManager.js.map +1 -0
  92. package/dist/auth/localAdminSession.js +173 -0
  93. package/dist/auth/localAdminSession.js.map +1 -0
  94. package/dist/auth/metadata.js +69 -0
  95. package/dist/auth/metadata.js.map +1 -0
  96. package/dist/auth/oauthProvider.js +589 -0
  97. package/dist/auth/oauthProvider.js.map +1 -0
  98. package/dist/auth/ownerApproval.js +51 -0
  99. package/dist/auth/ownerApproval.js.map +1 -0
  100. package/dist/auth/policyIdentity.js +189 -0
  101. package/dist/auth/policyIdentity.js.map +1 -0
  102. package/dist/auth/rateLimits.js +66 -0
  103. package/dist/auth/rateLimits.js.map +1 -0
  104. package/dist/auth/recovery.js +275 -0
  105. package/dist/auth/recovery.js.map +1 -0
  106. package/dist/auth/requestContext.js +34 -0
  107. package/dist/auth/requestContext.js.map +1 -0
  108. package/dist/auth/resourceMiddleware.js +147 -0
  109. package/dist/auth/resourceMiddleware.js.map +1 -0
  110. package/dist/auth/runtimeStatus.js +51 -0
  111. package/dist/auth/runtimeStatus.js.map +1 -0
  112. package/dist/auth/schemas.js +84 -0
  113. package/dist/auth/schemas.js.map +1 -0
  114. package/dist/auth/stateStore.js +468 -0
  115. package/dist/auth/stateStore.js.map +1 -0
  116. package/dist/auth/tokenService.js +631 -0
  117. package/dist/auth/tokenService.js.map +1 -0
  118. package/dist/auth/toolSecurity.js +108 -0
  119. package/dist/auth/toolSecurity.js.map +1 -0
  120. package/dist/auth/types.js +6 -0
  121. package/dist/auth/types.js.map +1 -0
  122. package/dist/auth/windowsDpapi.js +193 -0
  123. package/dist/auth/windowsDpapi.js.map +1 -0
  124. package/dist/bashOps.js +292 -0
  125. package/dist/bashOps.js.map +1 -0
  126. package/dist/capabilitiesOps.js +412 -0
  127. package/dist/capabilitiesOps.js.map +1 -0
  128. package/dist/changesets/crypto.js +92 -0
  129. package/dist/changesets/crypto.js.map +1 -0
  130. package/dist/changesets/index.js +9 -0
  131. package/dist/changesets/index.js.map +1 -0
  132. package/dist/changesets/moveStore.js +237 -0
  133. package/dist/changesets/moveStore.js.map +1 -0
  134. package/dist/changesets/moveUndo.js +386 -0
  135. package/dist/changesets/moveUndo.js.map +1 -0
  136. package/dist/changesets/schemas.js +234 -0
  137. package/dist/changesets/schemas.js.map +1 -0
  138. package/dist/changesets/store.js +573 -0
  139. package/dist/changesets/store.js.map +1 -0
  140. package/dist/changesets/types.js +9 -0
  141. package/dist/changesets/types.js.map +1 -0
  142. package/dist/changesets/undo.js +525 -0
  143. package/dist/changesets/undo.js.map +1 -0
  144. package/dist/changesets/unifiedUndo.js +31 -0
  145. package/dist/changesets/unifiedUndo.js.map +1 -0
  146. package/dist/cliEnvironment.js +85 -0
  147. package/dist/cliEnvironment.js.map +1 -0
  148. package/dist/codexSessions.js +733 -0
  149. package/dist/codexSessions.js.map +1 -0
  150. package/dist/codexgptSupertool.js +216 -0
  151. package/dist/codexgptSupertool.js.map +1 -0
  152. package/dist/codexproSupertool.js +204 -0
  153. package/dist/codexproSupertool.js.map +1 -0
  154. package/dist/config.js +733 -0
  155. package/dist/config.js.map +1 -0
  156. package/dist/control/localApprovalClient.js +287 -0
  157. package/dist/control/localApprovalClient.js.map +1 -0
  158. package/dist/control/localApprovalServer.js +466 -0
  159. package/dist/control/localApprovalServer.js.map +1 -0
  160. package/dist/control/runtime.js +178 -0
  161. package/dist/control/runtime.js.map +1 -0
  162. package/dist/control/schemas.js +184 -0
  163. package/dist/control/schemas.js.map +1 -0
  164. package/dist/control/windowsLocalControl.js +348 -0
  165. package/dist/control/windowsLocalControl.js.map +1 -0
  166. package/dist/fsOps.js +541 -0
  167. package/dist/fsOps.js.map +1 -0
  168. package/dist/git/admission.js +26 -0
  169. package/dist/git/admission.js.map +1 -0
  170. package/dist/git/branchService.js +51 -0
  171. package/dist/git/branchService.js.map +1 -0
  172. package/dist/git/capabilities.js +143 -0
  173. package/dist/git/capabilities.js.map +1 -0
  174. package/dist/git/commitService.js +344 -0
  175. package/dist/git/commitService.js.map +1 -0
  176. package/dist/git/durableState.js +151 -0
  177. package/dist/git/durableState.js.map +1 -0
  178. package/dist/git/execution.js +451 -0
  179. package/dist/git/execution.js.map +1 -0
  180. package/dist/git/fileTransaction.js +50 -0
  181. package/dist/git/fileTransaction.js.map +1 -0
  182. package/dist/git/indexService.js +421 -0
  183. package/dist/git/indexService.js.map +1 -0
  184. package/dist/git/integrations.js +653 -0
  185. package/dist/git/integrations.js.map +1 -0
  186. package/dist/git/locks.js +287 -0
  187. package/dist/git/locks.js.map +1 -0
  188. package/dist/git/mutationContext.js +92 -0
  189. package/dist/git/mutationContext.js.map +1 -0
  190. package/dist/git/mutationJournal.js +91 -0
  191. package/dist/git/mutationJournal.js.map +1 -0
  192. package/dist/git/mutationService.js +352 -0
  193. package/dist/git/mutationService.js.map +1 -0
  194. package/dist/git/normalization.js +57 -0
  195. package/dist/git/normalization.js.map +1 -0
  196. package/dist/git/objectQuarantine.js +243 -0
  197. package/dist/git/objectQuarantine.js.map +1 -0
  198. package/dist/git/opaqueRecordStore.js +187 -0
  199. package/dist/git/opaqueRecordStore.js.map +1 -0
  200. package/dist/git/operationStore.js +287 -0
  201. package/dist/git/operationStore.js.map +1 -0
  202. package/dist/git/parsers.js +311 -0
  203. package/dist/git/parsers.js.map +1 -0
  204. package/dist/git/privateIndex.js +79 -0
  205. package/dist/git/privateIndex.js.map +1 -0
  206. package/dist/git/productionBootstrap.js +39 -0
  207. package/dist/git/productionBootstrap.js.map +1 -0
  208. package/dist/git/readService.js +846 -0
  209. package/dist/git/readService.js.map +1 -0
  210. package/dist/git/recovery.js +417 -0
  211. package/dist/git/recovery.js.map +1 -0
  212. package/dist/git/repositoryIdentity.js +611 -0
  213. package/dist/git/repositoryIdentity.js.map +1 -0
  214. package/dist/git/repositoryStore.js +237 -0
  215. package/dist/git/repositoryStore.js.map +1 -0
  216. package/dist/git/resources.js +113 -0
  217. package/dist/git/resources.js.map +1 -0
  218. package/dist/git/restoreService.js +178 -0
  219. package/dist/git/restoreService.js.map +1 -0
  220. package/dist/git/reviewToken.js +86 -0
  221. package/dist/git/reviewToken.js.map +1 -0
  222. package/dist/git/stashService.js +566 -0
  223. package/dist/git/stashService.js.map +1 -0
  224. package/dist/git/stateToken.js +139 -0
  225. package/dist/git/stateToken.js.map +1 -0
  226. package/dist/gitOps.js +147 -0
  227. package/dist/gitOps.js.map +1 -0
  228. package/dist/guard.js +608 -0
  229. package/dist/guard.js.map +1 -0
  230. package/dist/guidance/diagnostics.js +14 -0
  231. package/dist/guidance/diagnostics.js.map +1 -0
  232. package/dist/guidance/instructions.js +167 -0
  233. package/dist/guidance/instructions.js.map +1 -0
  234. package/dist/guidance/mode.js +18 -0
  235. package/dist/guidance/mode.js.map +1 -0
  236. package/dist/guidance/openaiSkillMetadata.js +29 -0
  237. package/dist/guidance/openaiSkillMetadata.js.map +1 -0
  238. package/dist/guidance/safeTextReader.js +171 -0
  239. package/dist/guidance/safeTextReader.js.map +1 -0
  240. package/dist/guidance/skillCatalog.js +70 -0
  241. package/dist/guidance/skillCatalog.js.map +1 -0
  242. package/dist/guidance/skillDiscovery.js +353 -0
  243. package/dist/guidance/skillDiscovery.js.map +1 -0
  244. package/dist/guidance/skillMetadata.js +115 -0
  245. package/dist/guidance/skillMetadata.js.map +1 -0
  246. package/dist/guidance/skillResources.js +146 -0
  247. package/dist/guidance/skillResources.js.map +1 -0
  248. package/dist/handoffOps.js +449 -0
  249. package/dist/handoffOps.js.map +1 -0
  250. package/dist/http/localAdminApp.js +203 -0
  251. package/dist/http/localAdminApp.js.map +1 -0
  252. package/dist/http/oauthMcpRuntime.js +294 -0
  253. package/dist/http/oauthMcpRuntime.js.map +1 -0
  254. package/dist/http/publicApp.js +350 -0
  255. package/dist/http/publicApp.js.map +1 -0
  256. package/dist/http/securityHeaders.js +11 -0
  257. package/dist/http/securityHeaders.js.map +1 -0
  258. package/dist/http.js +2076 -0
  259. package/dist/http.js.map +1 -0
  260. package/dist/moves/engine.js +1079 -0
  261. package/dist/moves/engine.js.map +1 -0
  262. package/dist/moves/index.js +6 -0
  263. package/dist/moves/index.js.map +1 -0
  264. package/dist/moves/planner.js +270 -0
  265. package/dist/moves/planner.js.map +1 -0
  266. package/dist/moves/recovery.js +557 -0
  267. package/dist/moves/recovery.js.map +1 -0
  268. package/dist/moves/service.js +300 -0
  269. package/dist/moves/service.js.map +1 -0
  270. package/dist/moves/types.js +11 -0
  271. package/dist/moves/types.js.map +1 -0
  272. package/dist/mutations/index.js +4 -0
  273. package/dist/mutations/index.js.map +1 -0
  274. package/dist/mutations/lifecycle.js +165 -0
  275. package/dist/mutations/lifecycle.js.map +1 -0
  276. package/dist/mutations/localService.js +163 -0
  277. package/dist/mutations/localService.js.map +1 -0
  278. package/dist/mutations/runtime.js +322 -0
  279. package/dist/mutations/runtime.js.map +1 -0
  280. package/dist/mutations/types.js +2 -0
  281. package/dist/mutations/types.js.map +1 -0
  282. package/dist/mutations/writers.js +360 -0
  283. package/dist/mutations/writers.js.map +1 -0
  284. package/dist/patchOps.js +420 -0
  285. package/dist/patchOps.js.map +1 -0
  286. package/dist/policy/approval.js +306 -0
  287. package/dist/policy/approval.js.map +1 -0
  288. package/dist/policy/audit.js +88 -0
  289. package/dist/policy/audit.js.map +1 -0
  290. package/dist/policy/authorizationFacts.js +187 -0
  291. package/dist/policy/authorizationFacts.js.map +1 -0
  292. package/dist/policy/compat.js +104 -0
  293. package/dist/policy/compat.js.map +1 -0
  294. package/dist/policy/context.js +31 -0
  295. package/dist/policy/context.js.map +1 -0
  296. package/dist/policy/enforcement.js +46 -0
  297. package/dist/policy/enforcement.js.map +1 -0
  298. package/dist/policy/evaluator.js +338 -0
  299. package/dist/policy/evaluator.js.map +1 -0
  300. package/dist/policy/executionCapabilities.js +80 -0
  301. package/dist/policy/executionCapabilities.js.map +1 -0
  302. package/dist/policy/executionResources.js +192 -0
  303. package/dist/policy/executionResources.js.map +1 -0
  304. package/dist/policy/fullAccessResources.js +23 -0
  305. package/dist/policy/fullAccessResources.js.map +1 -0
  306. package/dist/policy/hardPolicy.js +50 -0
  307. package/dist/policy/hardPolicy.js.map +1 -0
  308. package/dist/policy/identity.js +142 -0
  309. package/dist/policy/identity.js.map +1 -0
  310. package/dist/policy/integration.js +331 -0
  311. package/dist/policy/integration.js.map +1 -0
  312. package/dist/policy/pendingApprovals.js +301 -0
  313. package/dist/policy/pendingApprovals.js.map +1 -0
  314. package/dist/policy/profileStore.js +367 -0
  315. package/dist/policy/profileStore.js.map +1 -0
  316. package/dist/policy/resources.js +249 -0
  317. package/dist/policy/resources.js.map +1 -0
  318. package/dist/policy/runtime.js +713 -0
  319. package/dist/policy/runtime.js.map +1 -0
  320. package/dist/policy/schemas.js +625 -0
  321. package/dist/policy/schemas.js.map +1 -0
  322. package/dist/policy/toolPolicy.js +141 -0
  323. package/dist/policy/toolPolicy.js.map +1 -0
  324. package/dist/policy/transport.js +10 -0
  325. package/dist/policy/transport.js.map +1 -0
  326. package/dist/policy/types.js +31 -0
  327. package/dist/policy/types.js.map +1 -0
  328. package/dist/proContext.js +675 -0
  329. package/dist/proContext.js.map +1 -0
  330. package/dist/process/authority.js +18 -0
  331. package/dist/process/authority.js.map +1 -0
  332. package/dist/process/backendDiscovery.js +83 -0
  333. package/dist/process/backendDiscovery.js.map +1 -0
  334. package/dist/process/commandCompiler.js +71 -0
  335. package/dist/process/commandCompiler.js.map +1 -0
  336. package/dist/process/outputCursor.js +67 -0
  337. package/dist/process/outputCursor.js.map +1 -0
  338. package/dist/process/outputQuota.js +94 -0
  339. package/dist/process/outputQuota.js.map +1 -0
  340. package/dist/process/outputRing.js +138 -0
  341. package/dist/process/outputRing.js.map +1 -0
  342. package/dist/process/processAuditCoordinator.js +52 -0
  343. package/dist/process/processAuditCoordinator.js.map +1 -0
  344. package/dist/process/processManager.js +311 -0
  345. package/dist/process/processManager.js.map +1 -0
  346. package/dist/process/runCommand.js +332 -0
  347. package/dist/process/runCommand.js.map +1 -0
  348. package/dist/process/streamingRedactor.js +105 -0
  349. package/dist/process/streamingRedactor.js.map +1 -0
  350. package/dist/process/types.js +2 -0
  351. package/dist/process/types.js.map +1 -0
  352. package/dist/process/windowsHostClient.js +604 -0
  353. package/dist/process/windowsHostClient.js.map +1 -0
  354. package/dist/process/windowsHostProtocol.js +270 -0
  355. package/dist/process/windowsHostProtocol.js.map +1 -0
  356. package/dist/process/windowsPersistentBackend.js +263 -0
  357. package/dist/process/windowsPersistentBackend.js.map +1 -0
  358. package/dist/productionRuntime.js +907 -0
  359. package/dist/productionRuntime.js.map +1 -0
  360. package/dist/profileStore.js +231 -0
  361. package/dist/profileStore.js.map +1 -0
  362. package/dist/redact.js +124 -0
  363. package/dist/redact.js.map +1 -0
  364. package/dist/searchOps.js +186 -0
  365. package/dist/searchOps.js.map +1 -0
  366. package/dist/selfTestOps.js +786 -0
  367. package/dist/selfTestOps.js.map +1 -0
  368. package/dist/semantic/budgets.js +12 -0
  369. package/dist/semantic/budgets.js.map +1 -0
  370. package/dist/semantic/builtin/typescriptAssets.js +68 -0
  371. package/dist/semantic/builtin/typescriptAssets.js.map +1 -0
  372. package/dist/semantic/builtin/typescriptProvider.js +211 -0
  373. package/dist/semantic/builtin/typescriptProvider.js.map +1 -0
  374. package/dist/semantic/builtin/typescriptWorker.js +365 -0
  375. package/dist/semantic/builtin/typescriptWorker.js.map +1 -0
  376. package/dist/semantic/diffPreview.js +36 -0
  377. package/dist/semantic/diffPreview.js.map +1 -0
  378. package/dist/semantic/index.js +11 -0
  379. package/dist/semantic/index.js.map +1 -0
  380. package/dist/semantic/manager.js +522 -0
  381. package/dist/semantic/manager.js.map +1 -0
  382. package/dist/semantic/positions.js +86 -0
  383. package/dist/semantic/positions.js.map +1 -0
  384. package/dist/semantic/previewStore.js +276 -0
  385. package/dist/semantic/previewStore.js.map +1 -0
  386. package/dist/semantic/projectResolver.js +309 -0
  387. package/dist/semantic/projectResolver.js.map +1 -0
  388. package/dist/semantic/sourceSnapshot.js +54 -0
  389. package/dist/semantic/sourceSnapshot.js.map +1 -0
  390. package/dist/semantic/status.js +46 -0
  391. package/dist/semantic/status.js.map +1 -0
  392. package/dist/semantic/types.js +2 -0
  393. package/dist/semantic/types.js.map +1 -0
  394. package/dist/server.js +8676 -0
  395. package/dist/server.js.map +1 -0
  396. package/dist/stdio.js +64 -0
  397. package/dist/stdio.js.map +1 -0
  398. package/dist/toolCardWidget.js +2000 -0
  399. package/dist/toolCardWidget.js.map +1 -0
  400. package/dist/tools/contracts/catalog.js +111 -0
  401. package/dist/tools/contracts/catalog.js.map +1 -0
  402. package/dist/tools/contracts/index.js +8 -0
  403. package/dist/tools/contracts/index.js.map +1 -0
  404. package/dist/tools/contracts/registration.js +27 -0
  405. package/dist/tools/contracts/registration.js.map +1 -0
  406. package/dist/tools/contracts/schemas.js +11 -0
  407. package/dist/tools/contracts/schemas.js.map +1 -0
  408. package/dist/tools/contracts/types.js +2 -0
  409. package/dist/tools/contracts/types.js.map +1 -0
  410. package/dist/tools/contracts/v3.js +76 -0
  411. package/dist/tools/contracts/v3.js.map +1 -0
  412. package/dist/tools/contracts/v4.js +39 -0
  413. package/dist/tools/contracts/v4.js.map +1 -0
  414. package/dist/tools/contracts/v5.js +20 -0
  415. package/dist/tools/contracts/v5.js.map +1 -0
  416. package/dist/tools/phase3dServer.js +350 -0
  417. package/dist/tools/phase3dServer.js.map +1 -0
  418. package/dist/tools/schemas/applyPatch.js +388 -0
  419. package/dist/tools/schemas/applyPatch.js.map +1 -0
  420. package/dist/tools/schemas/bash.js +202 -0
  421. package/dist/tools/schemas/bash.js.map +1 -0
  422. package/dist/tools/schemas/closeWorkspace.js +105 -0
  423. package/dist/tools/schemas/closeWorkspace.js.map +1 -0
  424. package/dist/tools/schemas/codexContext.js +402 -0
  425. package/dist/tools/schemas/codexContext.js.map +1 -0
  426. package/dist/tools/schemas/codexSessions.js +328 -0
  427. package/dist/tools/schemas/codexSessions.js.map +1 -0
  428. package/dist/tools/schemas/codexgpt.js +1068 -0
  429. package/dist/tools/schemas/codexgpt.js.map +1 -0
  430. package/dist/tools/schemas/codexgptInventory.js +359 -0
  431. package/dist/tools/schemas/codexgptInventory.js.map +1 -0
  432. package/dist/tools/schemas/codexgptSelfTest.js +563 -0
  433. package/dist/tools/schemas/codexgptSelfTest.js.map +1 -0
  434. package/dist/tools/schemas/codexpro.js +917 -0
  435. package/dist/tools/schemas/codexpro.js.map +1 -0
  436. package/dist/tools/schemas/codexproInventory.js +352 -0
  437. package/dist/tools/schemas/codexproInventory.js.map +1 -0
  438. package/dist/tools/schemas/codexproSelfTest.js +546 -0
  439. package/dist/tools/schemas/codexproSelfTest.js.map +1 -0
  440. package/dist/tools/schemas/common.js +21 -0
  441. package/dist/tools/schemas/common.js.map +1 -0
  442. package/dist/tools/schemas/createTaskWorktree.js +51 -0
  443. package/dist/tools/schemas/createTaskWorktree.js.map +1 -0
  444. package/dist/tools/schemas/edit.js +321 -0
  445. package/dist/tools/schemas/edit.js.map +1 -0
  446. package/dist/tools/schemas/execution.js +330 -0
  447. package/dist/tools/schemas/execution.js.map +1 -0
  448. package/dist/tools/schemas/exportProContext.js +370 -0
  449. package/dist/tools/schemas/exportProContext.js.map +1 -0
  450. package/dist/tools/schemas/getTaskWorktree.js +19 -0
  451. package/dist/tools/schemas/getTaskWorktree.js.map +1 -0
  452. package/dist/tools/schemas/gitBranch.js +42 -0
  453. package/dist/tools/schemas/gitBranch.js.map +1 -0
  454. package/dist/tools/schemas/gitCommit.js +40 -0
  455. package/dist/tools/schemas/gitCommit.js.map +1 -0
  456. package/dist/tools/schemas/gitCreateBranch.js +22 -0
  457. package/dist/tools/schemas/gitCreateBranch.js.map +1 -0
  458. package/dist/tools/schemas/gitDiff.js +222 -0
  459. package/dist/tools/schemas/gitDiff.js.map +1 -0
  460. package/dist/tools/schemas/gitLog.js +41 -0
  461. package/dist/tools/schemas/gitLog.js.map +1 -0
  462. package/dist/tools/schemas/gitRestore.js +47 -0
  463. package/dist/tools/schemas/gitRestore.js.map +1 -0
  464. package/dist/tools/schemas/gitStage.js +33 -0
  465. package/dist/tools/schemas/gitStage.js.map +1 -0
  466. package/dist/tools/schemas/gitStash.js +102 -0
  467. package/dist/tools/schemas/gitStash.js.map +1 -0
  468. package/dist/tools/schemas/gitStatus.js +226 -0
  469. package/dist/tools/schemas/gitStatus.js.map +1 -0
  470. package/dist/tools/schemas/gitV4Common.js +205 -0
  471. package/dist/tools/schemas/gitV4Common.js.map +1 -0
  472. package/dist/tools/schemas/guidance.js +40 -0
  473. package/dist/tools/schemas/guidance.js.map +1 -0
  474. package/dist/tools/schemas/handoffToAgent.js +276 -0
  475. package/dist/tools/schemas/handoffToAgent.js.map +1 -0
  476. package/dist/tools/schemas/handoffToCodex.js +137 -0
  477. package/dist/tools/schemas/handoffToCodex.js.map +1 -0
  478. package/dist/tools/schemas/inspectWorkspace.js +379 -0
  479. package/dist/tools/schemas/inspectWorkspace.js.map +1 -0
  480. package/dist/tools/schemas/listTaskWorktrees.js +21 -0
  481. package/dist/tools/schemas/listTaskWorktrees.js.map +1 -0
  482. package/dist/tools/schemas/listWorkspaces.js +134 -0
  483. package/dist/tools/schemas/listWorkspaces.js.map +1 -0
  484. package/dist/tools/schemas/loadSkill.js +619 -0
  485. package/dist/tools/schemas/loadSkill.js.map +1 -0
  486. package/dist/tools/schemas/mergeTaskWorktree.js +105 -0
  487. package/dist/tools/schemas/mergeTaskWorktree.js.map +1 -0
  488. package/dist/tools/schemas/movePaths.js +175 -0
  489. package/dist/tools/schemas/movePaths.js.map +1 -0
  490. package/dist/tools/schemas/openCurrentWorkspace.js +174 -0
  491. package/dist/tools/schemas/openCurrentWorkspace.js.map +1 -0
  492. package/dist/tools/schemas/openFullAccessWorkspace.js +81 -0
  493. package/dist/tools/schemas/openFullAccessWorkspace.js.map +1 -0
  494. package/dist/tools/schemas/openWorkspace.js +193 -0
  495. package/dist/tools/schemas/openWorkspace.js.map +1 -0
  496. package/dist/tools/schemas/queryAuditEvents.js +193 -0
  497. package/dist/tools/schemas/queryAuditEvents.js.map +1 -0
  498. package/dist/tools/schemas/read.js +199 -0
  499. package/dist/tools/schemas/read.js.map +1 -0
  500. package/dist/tools/schemas/readCodexSession.js +353 -0
  501. package/dist/tools/schemas/readCodexSession.js.map +1 -0
  502. package/dist/tools/schemas/readHandoff.js +446 -0
  503. package/dist/tools/schemas/readHandoff.js.map +1 -0
  504. package/dist/tools/schemas/removeTaskWorktree.js +40 -0
  505. package/dist/tools/schemas/removeTaskWorktree.js.map +1 -0
  506. package/dist/tools/schemas/search.js +235 -0
  507. package/dist/tools/schemas/search.js.map +1 -0
  508. package/dist/tools/schemas/semantic.js +195 -0
  509. package/dist/tools/schemas/semantic.js.map +1 -0
  510. package/dist/tools/schemas/serverConfig.js +157 -0
  511. package/dist/tools/schemas/serverConfig.js.map +1 -0
  512. package/dist/tools/schemas/showChanges.js +283 -0
  513. package/dist/tools/schemas/showChanges.js.map +1 -0
  514. package/dist/tools/schemas/transactionResult.js +11 -0
  515. package/dist/tools/schemas/transactionResult.js.map +1 -0
  516. package/dist/tools/schemas/tree.js +136 -0
  517. package/dist/tools/schemas/tree.js.map +1 -0
  518. package/dist/tools/schemas/undoChangeSet.js +152 -0
  519. package/dist/tools/schemas/undoChangeSet.js.map +1 -0
  520. package/dist/tools/schemas/waitForHandoff.js +462 -0
  521. package/dist/tools/schemas/waitForHandoff.js.map +1 -0
  522. package/dist/tools/schemas/workspaceSnapshot.js +145 -0
  523. package/dist/tools/schemas/workspaceSnapshot.js.map +1 -0
  524. package/dist/tools/schemas/write.js +285 -0
  525. package/dist/tools/schemas/write.js.map +1 -0
  526. package/dist/transactions/atomicFs.js +438 -0
  527. package/dist/transactions/atomicFs.js.map +1 -0
  528. package/dist/transactions/atomicStateFile.js +190 -0
  529. package/dist/transactions/atomicStateFile.js.map +1 -0
  530. package/dist/transactions/engine.js +574 -0
  531. package/dist/transactions/engine.js.map +1 -0
  532. package/dist/transactions/index.js +12 -0
  533. package/dist/transactions/index.js.map +1 -0
  534. package/dist/transactions/installation.js +158 -0
  535. package/dist/transactions/installation.js.map +1 -0
  536. package/dist/transactions/manifestV2Store.js +96 -0
  537. package/dist/transactions/manifestV2Store.js.map +1 -0
  538. package/dist/transactions/participantRecovery.js +98 -0
  539. package/dist/transactions/participantRecovery.js.map +1 -0
  540. package/dist/transactions/recovery.js +513 -0
  541. package/dist/transactions/recovery.js.map +1 -0
  542. package/dist/transactions/schemas.js +365 -0
  543. package/dist/transactions/schemas.js.map +1 -0
  544. package/dist/transactions/stateRoot.js +63 -0
  545. package/dist/transactions/stateRoot.js.map +1 -0
  546. package/dist/transactions/types.js +11 -0
  547. package/dist/transactions/types.js.map +1 -0
  548. package/dist/transactions/workspaceLock.js +201 -0
  549. package/dist/transactions/workspaceLock.js.map +1 -0
  550. package/dist/workspaceOps.js +924 -0
  551. package/dist/workspaceOps.js.map +1 -0
  552. package/dist/worktrees/candidateWorkspace.js +566 -0
  553. package/dist/worktrees/candidateWorkspace.js.map +1 -0
  554. package/dist/worktrees/manager.js +258 -0
  555. package/dist/worktrees/manager.js.map +1 -0
  556. package/dist/worktrees/materializer.js +60 -0
  557. package/dist/worktrees/materializer.js.map +1 -0
  558. package/dist/worktrees/mergeExecute.js +498 -0
  559. package/dist/worktrees/mergeExecute.js.map +1 -0
  560. package/dist/worktrees/mergePlanStore.js +247 -0
  561. package/dist/worktrees/mergePlanStore.js.map +1 -0
  562. package/dist/worktrees/mergePrepare.js +709 -0
  563. package/dist/worktrees/mergePrepare.js.map +1 -0
  564. package/dist/worktrees/recovery.js +294 -0
  565. package/dist/worktrees/recovery.js.map +1 -0
  566. package/dist/worktrees/remove.js +296 -0
  567. package/dist/worktrees/remove.js.map +1 -0
  568. package/dist/worktrees/remover.js +57 -0
  569. package/dist/worktrees/remover.js.map +1 -0
  570. package/dist/worktrees/root.js +47 -0
  571. package/dist/worktrees/root.js.map +1 -0
  572. package/dist/worktrees/service.js +245 -0
  573. package/dist/worktrees/service.js.map +1 -0
  574. package/dist/worktrees/store.js +156 -0
  575. package/dist/worktrees/store.js.map +1 -0
  576. package/dist/worktrees/treeManifest.js +106 -0
  577. package/dist/worktrees/treeManifest.js.map +1 -0
  578. package/dist/worktrees/verificationReceipts.js +215 -0
  579. package/dist/worktrees/verificationReceipts.js.map +1 -0
  580. package/dist/worktrees/verificationTerminal.js +23 -0
  581. package/dist/worktrees/verificationTerminal.js.map +1 -0
  582. package/dist/worktrees/workspaceAuthority.js +64 -0
  583. package/dist/worktrees/workspaceAuthority.js.map +1 -0
  584. package/docs/favicon.svg +5 -0
  585. package/docs/index.html +624 -0
  586. package/docs/og.svg +52 -0
  587. package/docs/script.js +33 -0
  588. package/docs/star.svg +11 -0
  589. package/docs/styles.css +1571 -0
  590. package/docs/zh.html +428 -0
  591. package/package.json +121 -0
  592. package/scripts/analysis-cli-smoke.mjs +81 -0
  593. package/scripts/analysis-smoke.mjs +179 -0
  594. package/scripts/atomic-file.mjs +137 -0
  595. package/scripts/ci-change-classifier.mjs +59 -0
  596. package/scripts/ci-failure-summary.mjs +92 -0
  597. package/scripts/cloudflared-installer.mjs +215 -0
  598. package/scripts/cloudflared-release.mjs +63 -0
  599. package/scripts/codexgpt-entry.mjs +235 -0
  600. package/scripts/codexgpt.mjs +4987 -0
  601. package/scripts/connector-auth-output-shim.cjs +66 -0
  602. package/scripts/doctor-smoke.mjs +90 -0
  603. package/scripts/doctor.mjs +165 -0
  604. package/scripts/exact-head-ci.mjs +126 -0
  605. package/scripts/execute-handoff-smoke-platform-compat.mjs +38 -0
  606. package/scripts/execute-handoff-smoke.mjs +1117 -0
  607. package/scripts/g8-u-live-probe.mjs +208 -0
  608. package/scripts/http-smoke-compat.mjs +151 -0
  609. package/scripts/http-smoke.mjs +776 -0
  610. package/scripts/long-task-runner.mjs +1037 -0
  611. package/scripts/oauth-admin.mjs +1608 -0
  612. package/scripts/output-bounds.mjs +29 -0
  613. package/scripts/owned-temp-root.d.mts +50 -0
  614. package/scripts/owned-temp-root.mjs +567 -0
  615. package/scripts/phase-4a-smoke.mjs +36 -0
  616. package/scripts/policy-windows-spike.mjs +135 -0
  617. package/scripts/pro-apply.mjs +152 -0
  618. package/scripts/pro-bundle.mjs +121 -0
  619. package/scripts/pro-smoke.mjs +97 -0
  620. package/scripts/process-identity.mjs +67 -0
  621. package/scripts/repository-policy.mjs +166 -0
  622. package/scripts/run-and-summarize.mjs +134 -0
  623. package/scripts/run-smoke.mjs +52 -0
  624. package/scripts/run-with-cleanup.mjs +98 -0
  625. package/scripts/settings-smoke-platform-compat.mjs +85 -0
  626. package/scripts/settings-smoke.mjs +769 -0
  627. package/scripts/smoke-platform-compat.mjs +302 -0
  628. package/scripts/smoke.mjs +1180 -0
  629. package/scripts/stress-contract-compat.mjs +94 -0
  630. package/scripts/stress.mjs +882 -0
  631. package/scripts/test-domains.mjs +247 -0
  632. package/scripts/test-execution-profile-manifest.mjs +273 -0
  633. package/scripts/test-execution-profiles.mjs +147 -0
  634. package/scripts/test-performance-reporter.mjs +291 -0
  635. package/scripts/toolchain-manager.mjs +266 -0
  636. package/scripts/toolchains.json +19 -0
  637. package/scripts/windows-conpty-probe-child.mjs +82 -0
  638. package/scripts/windows-conpty-worker.ps1 +24 -0
  639. package/scripts/windows-credential-host-manifest.json +16 -0
  640. package/scripts/windows-credential-host-protocol-v1.json +16 -0
  641. package/scripts/windows-credential-host.cs +256 -0
  642. package/scripts/windows-credential-host.ps1 +26 -0
  643. package/scripts/windows-local-control-manifest.json +23 -0
  644. package/scripts/windows-local-control-spike.cs +738 -0
  645. package/scripts/windows-local-control-spike.mjs +415 -0
  646. package/scripts/windows-local-control-spike.ps1 +35 -0
  647. package/scripts/windows-local-control.cs +738 -0
  648. package/scripts/windows-local-control.ps1 +35 -0
  649. package/scripts/windows-native-api-inventory-v1.json +90 -0
  650. package/scripts/windows-process-host-manifest.json +20 -0
  651. package/scripts/windows-process-host-protocol-v1.json +59 -0
  652. package/scripts/windows-process-host.cs +2385 -0
  653. package/scripts/windows-process-host.ps1 +59 -0
  654. package/scripts/windows-realpath-shim.cjs +78 -0
package/dist/guard.js ADDED
@@ -0,0 +1,608 @@
1
+ import fs from "node:fs";
2
+ import { createHash, randomBytes as nodeRandomBytes, randomUUID } from "node:crypto";
3
+ import fsp from "node:fs/promises";
4
+ import os from "node:os";
5
+ import path from "node:path";
6
+ import { minimatch } from "minimatch";
7
+ import { expandHome } from "./config.js";
8
+ import { ProtectedRootPolicy } from "./access/protectedRoots.js";
9
+ export class CodexGPTError extends Error {
10
+ constructor(message) {
11
+ super(message);
12
+ this.name = "CodexGPTError";
13
+ }
14
+ }
15
+ export function isSubpath(child, parent) {
16
+ const relative = path.relative(parent, child);
17
+ return relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative));
18
+ }
19
+ export function normalizeRelPath(relPath) {
20
+ const normalized = relPath.split(path.sep).join("/");
21
+ if (normalized === "")
22
+ return ".";
23
+ return normalized;
24
+ }
25
+ export function parentObjectIdentity(canonicalParentPath, stat) {
26
+ const generation = stat.birthtimeNs > 0n
27
+ ? `birth:${stat.birthtimeNs}`
28
+ : `ctime:${stat.ctimeNs}`;
29
+ return `parent_${createHash("sha256")
30
+ .update(`${canonicalParentPath}\0${stat.dev}\0${stat.ino}\0${generation}`, "utf8")
31
+ .digest("hex")
32
+ .slice(0, 24)}`;
33
+ }
34
+ const WINDOWS_RESERVED_BASENAME = /^(?:CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])$/i;
35
+ const RESERVED_TRANSACTION_PREFIX = ".codexgpt-txn-";
36
+ export function isReservedTransactionRelativePath(relPath, platform = process.platform) {
37
+ const segments = normalizeRelPath(relPath)
38
+ .replace(/^\.\//, "")
39
+ .split("/")
40
+ .filter(Boolean);
41
+ return segments.some((segment) => {
42
+ const compared = platform === "win32" ? segment.toLocaleLowerCase("en-US") : segment;
43
+ return compared.startsWith(RESERVED_TRANSACTION_PREFIX);
44
+ });
45
+ }
46
+ export function assertSafePathInput(inputPath, platform = process.platform) {
47
+ if (inputPath.includes("\0")) {
48
+ throw new CodexGPTError("Path contains a null byte.");
49
+ }
50
+ if (platform !== "win32")
51
+ return;
52
+ const normalized = inputPath.replace(/\//g, "\\");
53
+ if (/^\\\\[?.]\\/.test(normalized)) {
54
+ throw new CodexGPTError(`Windows device paths are not allowed: ${inputPath}`);
55
+ }
56
+ if (/^\\\\/.test(normalized)) {
57
+ throw new CodexGPTError(`UNC paths are not allowed: ${inputPath}`);
58
+ }
59
+ if (/^[A-Za-z]:(?!\\)/.test(normalized)) {
60
+ throw new CodexGPTError(`Drive-relative Windows paths are not allowed: ${inputPath}`);
61
+ }
62
+ const withoutDrive = /^[A-Za-z]:/.test(normalized) ? normalized.slice(2) : normalized;
63
+ if (withoutDrive.includes(":")) {
64
+ throw new CodexGPTError(`NTFS alternate data stream paths are not allowed: ${inputPath}`);
65
+ }
66
+ for (const segment of withoutDrive.split(/\\+/).filter(Boolean)) {
67
+ if (segment === "." || segment === "..")
68
+ continue;
69
+ if (segment.endsWith(".") || segment.endsWith(" ")) {
70
+ throw new CodexGPTError(`Windows path segments may not end with a dot or space: ${inputPath}`);
71
+ }
72
+ const basename = segment.split(".", 1)[0];
73
+ if (WINDOWS_RESERVED_BASENAME.test(basename)) {
74
+ throw new CodexGPTError(`Windows reserved device name is not allowed: ${inputPath}`);
75
+ }
76
+ }
77
+ }
78
+ export function displayPath(absPath, root) {
79
+ const rel = path.relative(root, absPath) || ".";
80
+ return normalizeRelPath(rel);
81
+ }
82
+ function normalizeWorkspaceIdentityPath(root, platform) {
83
+ const normalized = root.replace(/\\/g, "/").normalize("NFC").replace(/\/+$/, "");
84
+ return platform === "win32" ? normalized.toLocaleLowerCase("en-US") : normalized;
85
+ }
86
+ export function workspaceKeyForRoot(realRoot, platform = process.platform) {
87
+ const normalized = normalizeWorkspaceIdentityPath(realRoot, platform);
88
+ return `wk_${createHash("sha256").update(normalized).digest("hex").slice(0, 24)}`;
89
+ }
90
+ function maybeRealpath(existingPath) {
91
+ try {
92
+ return fs.realpathSync.native(existingPath);
93
+ }
94
+ catch {
95
+ return undefined;
96
+ }
97
+ }
98
+ function closestExistingParent(absPath) {
99
+ let current = path.resolve(absPath);
100
+ while (!fs.existsSync(current)) {
101
+ const parent = path.dirname(current);
102
+ if (parent === current)
103
+ break;
104
+ current = parent;
105
+ }
106
+ return current;
107
+ }
108
+ export class WorkspaceManager {
109
+ config;
110
+ records = new Map();
111
+ workspaceIdsByKey = new Map();
112
+ tombstones = new Map();
113
+ transportSessionId;
114
+ identityBinding;
115
+ policyRevision;
116
+ now;
117
+ randomBytes;
118
+ beforeWorkspaceUse;
119
+ ttlMs;
120
+ maxTombstones;
121
+ confirmedRoots;
122
+ taskWorktrees;
123
+ revocationListeners = new Set();
124
+ constructor(config, options = {}) {
125
+ this.config = config;
126
+ const fallbackSessionId = `local-${randomUUID()}`;
127
+ this.transportSessionId = options.transportSessionId ?? (() => fallbackSessionId);
128
+ this.identityBinding = options.identityBinding?.trim() || `local-${randomUUID()}`;
129
+ this.policyRevision = () => options.policyRevision?.() ?? null;
130
+ this.now = options.now ?? Date.now;
131
+ this.randomBytes = options.randomBytes ?? nodeRandomBytes;
132
+ this.beforeWorkspaceUse = options.beforeWorkspaceUse ?? (() => undefined);
133
+ this.ttlMs = Math.max(60_000, Math.min(24 * 60 * 60_000, config.workspaceTtlMs ?? config.httpSessionTtlMs ?? 30 * 60_000));
134
+ this.maxTombstones = Math.max(16, Math.min(4096, options.maxTombstones ?? 256));
135
+ this.confirmedRoots = options.confirmedRoots;
136
+ this.taskWorktrees = options.taskWorktrees;
137
+ }
138
+ defaultWorkspace() {
139
+ return this.openWorkspace(this.config.defaultRoot);
140
+ }
141
+ openWorkspace(rootInput) {
142
+ this.pruneExpired();
143
+ const requested = rootInput?.trim() ? expandHome(rootInput.trim()) : this.config.defaultRoot;
144
+ assertSafePathInput(requested);
145
+ const resolved = path.resolve(requested);
146
+ if (!fs.existsSync(resolved)) {
147
+ throw new CodexGPTError(`Workspace root does not exist: ${resolved}`);
148
+ }
149
+ const stat = fs.statSync(resolved);
150
+ if (!stat.isDirectory()) {
151
+ throw new CodexGPTError(`Workspace root is not a directory: ${resolved}`);
152
+ }
153
+ const realRoot = fs.realpathSync.native(resolved);
154
+ const allowed = this.config.allowedRoots.some((allowedRoot) => isSubpath(realRoot, allowedRoot));
155
+ if (!allowed) {
156
+ throw new CodexGPTError(`Workspace root is outside allowed roots: ${realRoot}\nAllowed roots:\n${this.config.allowedRoots.map((r) => `- ${r}`).join("\n")}`);
157
+ }
158
+ this.beforeWorkspaceUse(realRoot);
159
+ const key = workspaceKeyForRoot(realRoot);
160
+ const existingId = this.workspaceIdsByKey.get(key);
161
+ if (existingId) {
162
+ const existing = this.records.get(existingId);
163
+ if (existing && this.recordMatchesCurrentBinding(existing)) {
164
+ return this.touch(existing);
165
+ }
166
+ if (existing)
167
+ this.revokeRecord(existing, "policy_revision_changed");
168
+ }
169
+ const now = this.now();
170
+ const id = this.nextWorkspaceId();
171
+ const workspace = {
172
+ id,
173
+ root: realRoot,
174
+ openedAt: new Date(now).toISOString()
175
+ };
176
+ const record = {
177
+ workspace,
178
+ key,
179
+ expiresAtMs: now + this.ttlMs,
180
+ transportSessionId: this.currentTransportSessionId(),
181
+ identityBinding: this.identityBinding,
182
+ policyRevision: this.policyRevision()
183
+ };
184
+ this.records.set(id, record);
185
+ this.workspaceIdsByKey.set(key, id);
186
+ return { ...workspace };
187
+ }
188
+ getWorkspace(id) {
189
+ if (typeof id !== "string" || !id.trim()) {
190
+ throw new CodexGPTError("workspace_id is required. Call open_workspace first.");
191
+ }
192
+ this.pruneExpired();
193
+ const record = this.records.get(id);
194
+ if (!record) {
195
+ try {
196
+ const confirmed = this.confirmedRoots?.getWorkspace(id);
197
+ if (confirmed)
198
+ return { ...confirmed };
199
+ }
200
+ catch {
201
+ // Preserve the same opaque not-found result for stale or foreign handles.
202
+ }
203
+ try {
204
+ const task = this.taskWorktrees?.getWorkspace(id);
205
+ if (task)
206
+ return { ...task };
207
+ }
208
+ catch {
209
+ // Preserve the same opaque not-found result for stale or foreign handles.
210
+ }
211
+ }
212
+ if (!record || !this.recordMatchesCurrentBinding(record)) {
213
+ if (record)
214
+ this.revokeRecord(record, "policy_revision_changed");
215
+ throw new CodexGPTError(`Unknown workspace_id: ${id}. Call open_workspace first.`);
216
+ }
217
+ this.beforeWorkspaceUse(record.workspace.root);
218
+ return this.touch(record);
219
+ }
220
+ resolveWorkspace(id) {
221
+ return typeof id === "string" && id.trim() ? this.getWorkspace(id.trim()) : this.defaultWorkspace();
222
+ }
223
+ closeWorkspace(id) {
224
+ if (typeof id !== "string" || !id.trim()) {
225
+ throw new CodexGPTError("workspace_id is required. Call open_workspace first.");
226
+ }
227
+ this.pruneExpired();
228
+ const record = this.records.get(id);
229
+ if (!record) {
230
+ try {
231
+ const closed = this.confirmedRoots?.closeWorkspace(id);
232
+ if (closed) {
233
+ this.emitExternalRevocation(id, "closed", closed.closedAt);
234
+ return closed;
235
+ }
236
+ }
237
+ catch {
238
+ // Preserve the same opaque not-found result for stale or foreign handles.
239
+ }
240
+ try {
241
+ const closed = this.taskWorktrees?.closeWorkspace(id);
242
+ if (closed) {
243
+ this.emitExternalRevocation(id, "closed", closed.closedAt);
244
+ return closed;
245
+ }
246
+ }
247
+ catch {
248
+ // Preserve the same opaque not-found result for stale or foreign handles.
249
+ }
250
+ }
251
+ if (!record || !this.recordMatchesCurrentBinding(record)) {
252
+ if (record)
253
+ this.revokeRecord(record, "policy_revision_changed");
254
+ throw new CodexGPTError(`Unknown workspace_id: ${id}. Call open_workspace first.`);
255
+ }
256
+ const closedAt = new Date(this.now()).toISOString();
257
+ this.revokeRecord(record, "closed", closedAt);
258
+ return { workspaceId: id, closedAt, state: "closed" };
259
+ }
260
+ listWorkspaces() {
261
+ this.pruneExpired();
262
+ const configured = [...this.records.values()]
263
+ .filter((record) => this.recordMatchesCurrentBinding(record))
264
+ .map((record) => ({ ...record.workspace }));
265
+ let confirmed = [];
266
+ try {
267
+ confirmed = this.confirmedRoots?.listWorkspaces().map((workspace) => ({ ...workspace })) ?? [];
268
+ }
269
+ catch { }
270
+ let tasks = [];
271
+ try {
272
+ tasks = this.taskWorktrees?.listWorkspaces().map((workspace) => ({ ...workspace })) ?? [];
273
+ }
274
+ catch { }
275
+ return [...configured, ...confirmed, ...tasks];
276
+ }
277
+ revokeAll(reason = "transport_closed") {
278
+ const revokedAt = new Date(this.now()).toISOString();
279
+ for (const record of [...this.records.values()]) {
280
+ this.revokeRecord(record, reason, revokedAt);
281
+ }
282
+ try {
283
+ for (const workspace of this.confirmedRoots?.listWorkspaces() ?? []) {
284
+ this.confirmedRoots?.closeWorkspace(workspace.id);
285
+ this.emitExternalRevocation(workspace.id, reason, revokedAt);
286
+ }
287
+ }
288
+ catch { }
289
+ try {
290
+ for (const workspace of this.taskWorktrees?.listWorkspaces() ?? []) {
291
+ this.taskWorktrees?.closeWorkspace(workspace.id);
292
+ this.emitExternalRevocation(workspace.id, reason, revokedAt);
293
+ }
294
+ }
295
+ catch { }
296
+ }
297
+ revokeForPolicyRevision(activePolicyRevision) {
298
+ const revokedAt = new Date(this.now()).toISOString();
299
+ for (const record of [...this.records.values()]) {
300
+ if (record.policyRevision === activePolicyRevision)
301
+ continue;
302
+ this.revokeRecord(record, "policy_revision_changed", revokedAt);
303
+ }
304
+ }
305
+ onWorkspaceRevoked(listener) {
306
+ this.revocationListeners.add(listener);
307
+ return () => this.revocationListeners.delete(listener);
308
+ }
309
+ workspaceBindingDigest(id) {
310
+ const workspace = this.getWorkspace(id);
311
+ const record = this.records.get(id);
312
+ return `sha256:${createHash("sha256").update(JSON.stringify({
313
+ domain: "codexgpt.workspace.semantic-binding.v1",
314
+ workspaceId: workspace.id,
315
+ workspaceKey: record?.key ?? workspaceKeyForRoot(workspace.root),
316
+ openedAt: workspace.openedAt,
317
+ accessClass: workspace.accessClass ?? null,
318
+ access: workspace.access ?? null,
319
+ leaseId: workspace.leaseId ?? null,
320
+ idleExpiresAt: workspace.idleExpiresAt ?? null,
321
+ absoluteExpiresAt: workspace.absoluteExpiresAt ?? null,
322
+ transportSessionId: record?.transportSessionId ?? this.currentTransportSessionId(),
323
+ identityBinding: record?.identityBinding ?? this.identityBinding,
324
+ policyRevision: record?.policyRevision ?? this.policyRevision()
325
+ }), "utf8").digest("hex")}`;
326
+ }
327
+ workspaceAuthorityDigest(id) {
328
+ const workspace = this.getWorkspace(id);
329
+ const record = this.records.get(id);
330
+ return `sha256:${createHash("sha256").update(JSON.stringify({
331
+ domain: "codexgpt.workspace.semantic-authority.v1",
332
+ workspaceKey: record?.key ?? workspaceKeyForRoot(workspace.root),
333
+ accessClass: workspace.accessClass ?? null,
334
+ access: workspace.access ?? null,
335
+ leaseId: workspace.leaseId ?? null,
336
+ identityBinding: record?.identityBinding ?? this.identityBinding,
337
+ policyRevision: record?.policyRevision ?? this.policyRevision()
338
+ }), "utf8").digest("hex")}`;
339
+ }
340
+ emitExternalRevocation(id, reason, revokedAt) {
341
+ this.tombstones.set(id, { workspaceId: id, revokedAt, reason });
342
+ while (this.tombstones.size > this.maxTombstones) {
343
+ const oldest = this.tombstones.keys().next().value;
344
+ if (typeof oldest !== "string")
345
+ break;
346
+ this.tombstones.delete(oldest);
347
+ }
348
+ const key = `external:${id}`;
349
+ for (const listener of this.revocationListeners) {
350
+ try {
351
+ const pending = listener({ id, key, reason });
352
+ if (pending && typeof pending.then === "function") {
353
+ void Promise.resolve(pending).catch(() => undefined);
354
+ }
355
+ }
356
+ catch {
357
+ // Revocation remains authoritative even if an observer fails.
358
+ }
359
+ }
360
+ }
361
+ touch(record) {
362
+ record.expiresAtMs = this.now() + this.ttlMs;
363
+ return { ...record.workspace };
364
+ }
365
+ currentTransportSessionId() {
366
+ const sessionId = this.transportSessionId().trim();
367
+ if (!sessionId || sessionId === "pending") {
368
+ throw new CodexGPTError("Workspace transport session is unavailable.");
369
+ }
370
+ return sessionId;
371
+ }
372
+ recordMatchesCurrentBinding(record) {
373
+ return record.transportSessionId === this.currentTransportSessionId() &&
374
+ record.identityBinding === this.identityBinding &&
375
+ record.policyRevision === this.policyRevision();
376
+ }
377
+ nextWorkspaceId() {
378
+ for (let attempt = 0; attempt < 8; attempt += 1) {
379
+ const bytes = this.randomBytes(16);
380
+ if (!Buffer.isBuffer(bytes) || bytes.length !== 16) {
381
+ throw new CodexGPTError("Workspace id generator returned an invalid value.");
382
+ }
383
+ const id = `ws_${bytes.toString("hex")}`;
384
+ if (!this.records.has(id) && !this.tombstones.has(id))
385
+ return id;
386
+ }
387
+ throw new CodexGPTError("Workspace id generation failed.");
388
+ }
389
+ pruneExpired() {
390
+ const now = this.now();
391
+ for (const record of [...this.records.values()]) {
392
+ if (record.expiresAtMs <= now) {
393
+ this.revokeRecord(record, "expired", new Date(now).toISOString());
394
+ }
395
+ }
396
+ }
397
+ revokeRecord(record, reason, revokedAt = new Date(this.now()).toISOString()) {
398
+ this.records.delete(record.workspace.id);
399
+ if (this.workspaceIdsByKey.get(record.key) === record.workspace.id) {
400
+ this.workspaceIdsByKey.delete(record.key);
401
+ }
402
+ this.tombstones.set(record.workspace.id, {
403
+ workspaceId: record.workspace.id,
404
+ revokedAt,
405
+ reason
406
+ });
407
+ const event = {
408
+ id: record.workspace.id,
409
+ key: record.key,
410
+ reason
411
+ };
412
+ for (const listener of this.revocationListeners) {
413
+ void Promise.resolve(listener(event)).catch(() => undefined);
414
+ }
415
+ while (this.tombstones.size > this.maxTombstones) {
416
+ const oldest = this.tombstones.keys().next().value;
417
+ if (typeof oldest !== "string")
418
+ break;
419
+ this.tombstones.delete(oldest);
420
+ }
421
+ }
422
+ }
423
+ export class PathGuard {
424
+ config;
425
+ platform;
426
+ protectedRoots;
427
+ confirmedFileBindings = new Map();
428
+ constructor(config, platform = process.platform) {
429
+ this.config = config;
430
+ this.platform = platform;
431
+ this.protectedRoots = new ProtectedRootPolicy({ platform });
432
+ }
433
+ isBlockedRelativePath(relPath) {
434
+ const rel = normalizeRelPath(relPath).replace(/^\.\//, "");
435
+ if (isReservedTransactionRelativePath(rel, this.platform))
436
+ return true;
437
+ if (!rel || rel === ".")
438
+ return false;
439
+ return this.config.blockedGlobs.some((glob) => minimatch(rel, glob, { dot: true, nocase: this.platform === "win32", matchBase: false }) ||
440
+ minimatch(path.basename(rel), glob, { dot: true, nocase: this.platform === "win32", matchBase: true }));
441
+ }
442
+ assertNotBlocked(relPath) {
443
+ if (this.isBlockedRelativePath(relPath)) {
444
+ throw new CodexGPTError(`Path is blocked by safety rules: ${relPath}`);
445
+ }
446
+ }
447
+ resolve(workspace, inputPath = ".", options = {}) {
448
+ if (workspace.accessClass === "confirmed_root" && options.forWrite && workspace.access !== "read_write") {
449
+ throw new CodexGPTError("Confirmed-root workspace is read-only.");
450
+ }
451
+ assertSafePathInput(inputPath || ".", this.platform);
452
+ const expanded = expandHome(inputPath || ".");
453
+ const candidate = path.isAbsolute(expanded) ? expanded : path.join(workspace.root, expanded);
454
+ let absPath = path.resolve(candidate);
455
+ const realTarget = maybeRealpath(absPath);
456
+ let relPath = displayPath(absPath, workspace.root);
457
+ if (workspace.accessClass === "confirmed_root" && this.protectedRoots.classify(absPath).blocked) {
458
+ throw new CodexGPTError("Path is protected from confirmed-root access.");
459
+ }
460
+ if (!isSubpath(absPath, workspace.root)) {
461
+ if (realTarget && isSubpath(realTarget, workspace.root)) {
462
+ absPath = realTarget;
463
+ relPath = displayPath(realTarget, workspace.root);
464
+ }
465
+ else if (options.forWrite) {
466
+ const parent = closestExistingParent(path.dirname(absPath));
467
+ const realParent = maybeRealpath(parent);
468
+ if (!realParent || !isSubpath(realParent, workspace.root)) {
469
+ throw new CodexGPTError(`Path escapes workspace root: ${inputPath}`);
470
+ }
471
+ absPath = path.resolve(realParent, path.relative(parent, absPath));
472
+ relPath = displayPath(absPath, workspace.root);
473
+ }
474
+ else {
475
+ throw new CodexGPTError(`Path escapes workspace root: ${inputPath}`);
476
+ }
477
+ }
478
+ this.assertNotBlocked(relPath);
479
+ if (realTarget) {
480
+ if (!isSubpath(realTarget, workspace.root)) {
481
+ throw new CodexGPTError(`Path resolves outside workspace root through a symlink: ${inputPath}`);
482
+ }
483
+ const realRel = displayPath(realTarget, workspace.root);
484
+ this.assertNotBlocked(realRel);
485
+ if (workspace.accessClass === "confirmed_root") {
486
+ if (this.protectedRoots.classify(realTarget).blocked) {
487
+ throw new CodexGPTError("Resolved path is protected from confirmed-root access.");
488
+ }
489
+ const targetStat = fs.statSync(realTarget, { bigint: true });
490
+ if (targetStat.isFile() && targetStat.nlink !== 1n) {
491
+ throw new CodexGPTError("Confirmed-root ordinary files must have exactly one hard link.");
492
+ }
493
+ if (targetStat.isFile()) {
494
+ this.confirmedFileBindings.set(realTarget, {
495
+ dev: targetStat.dev.toString(),
496
+ ino: targetStat.ino.toString(),
497
+ nlink: Number(targetStat.nlink)
498
+ });
499
+ }
500
+ }
501
+ }
502
+ if (options.forWrite) {
503
+ try {
504
+ if (fs.lstatSync(absPath).isSymbolicLink()) {
505
+ throw new CodexGPTError(`Refusing to write through a symlink: ${inputPath}`);
506
+ }
507
+ }
508
+ catch (error) {
509
+ if (error instanceof CodexGPTError)
510
+ throw error;
511
+ }
512
+ const parent = closestExistingParent(path.dirname(absPath));
513
+ const realParent = maybeRealpath(parent);
514
+ if (realParent && !isSubpath(realParent, workspace.root)) {
515
+ throw new CodexGPTError(`Write path resolves through a parent outside the workspace: ${inputPath}`);
516
+ }
517
+ if (realParent) {
518
+ const realParentRel = displayPath(realParent, workspace.root);
519
+ this.assertNotBlocked(realParentRel);
520
+ if (workspace.accessClass === "confirmed_root" && this.protectedRoots.classify(realParent).blocked) {
521
+ throw new CodexGPTError("Write parent is protected from confirmed-root access.");
522
+ }
523
+ }
524
+ }
525
+ return { absPath, relPath };
526
+ }
527
+ resolvePolicyFacts(workspace, inputPath = ".", options = {}) {
528
+ const resolved = this.resolve(workspace, inputPath, options);
529
+ const realTarget = maybeRealpath(resolved.absPath);
530
+ const targetAbsPath = realTarget ?? resolved.absPath;
531
+ const targetExists = Boolean(realTarget);
532
+ const canonicalRelPath = displayPath(targetAbsPath, workspace.root);
533
+ const existingParentCandidate = targetExists
534
+ ? canonicalRelPath === "."
535
+ ? targetAbsPath
536
+ : path.dirname(targetAbsPath)
537
+ : closestExistingParent(path.dirname(resolved.absPath));
538
+ const existingParent = maybeRealpath(existingParentCandidate);
539
+ if (!existingParent || !isSubpath(existingParent, workspace.root)) {
540
+ throw new CodexGPTError(`Path parent is outside the workspace: ${inputPath}`);
541
+ }
542
+ const parentStat = fs.statSync(existingParent, { bigint: true });
543
+ const existingParentIdentity = parentObjectIdentity(existingParent, parentStat);
544
+ const normalizedRelPath = normalizeRelPath(canonicalRelPath).normalize("NFC");
545
+ const comparisonKey = this.platform === "win32"
546
+ ? normalizedRelPath.toLocaleLowerCase("en-US")
547
+ : normalizedRelPath;
548
+ const unresolvedSuffix = targetExists
549
+ ? []
550
+ : normalizeRelPath(path.relative(existingParent, resolved.absPath))
551
+ .split("/")
552
+ .filter((segment) => segment && segment !== ".");
553
+ for (const segment of unresolvedSuffix) {
554
+ assertSafePathInput(segment, this.platform);
555
+ if (segment === "..") {
556
+ throw new CodexGPTError(`Path escapes workspace root: ${inputPath}`);
557
+ }
558
+ }
559
+ return {
560
+ absPath: targetAbsPath,
561
+ relPath: normalizedRelPath,
562
+ comparisonKey,
563
+ targetExists,
564
+ existingParent,
565
+ existingParentIdentity,
566
+ unresolvedSuffix
567
+ };
568
+ }
569
+ async assertTextFile(absPath, maxBytes) {
570
+ const stat = await fsp.stat(absPath);
571
+ const confirmed = this.confirmedFileBindings.get(absPath);
572
+ if (confirmed && (String(stat.dev) !== confirmed.dev ||
573
+ String(stat.ino) !== confirmed.ino ||
574
+ stat.nlink !== confirmed.nlink ||
575
+ stat.nlink !== 1)) {
576
+ throw new CodexGPTError("Confirmed-root file identity or link count changed before access.");
577
+ }
578
+ if (!stat.isFile()) {
579
+ throw new CodexGPTError(`Not a file: ${absPath}`);
580
+ }
581
+ if (stat.size > maxBytes) {
582
+ throw new CodexGPTError(`File is too large (${stat.size} bytes). Limit: ${maxBytes} bytes.`);
583
+ }
584
+ if (stat.size === 0)
585
+ return;
586
+ const handle = await fsp.open(absPath, "r");
587
+ try {
588
+ const sample = Buffer.alloc(Math.min(64 * 1024, stat.size));
589
+ let offset = 0;
590
+ while (offset < stat.size) {
591
+ const { bytesRead } = await handle.read(sample, 0, sample.length, offset);
592
+ if (bytesRead === 0)
593
+ break;
594
+ if (sample.subarray(0, bytesRead).includes(0)) {
595
+ throw new CodexGPTError("Refusing to read binary file.");
596
+ }
597
+ offset += bytesRead;
598
+ }
599
+ }
600
+ finally {
601
+ await handle.close();
602
+ }
603
+ }
604
+ }
605
+ export function userHome() {
606
+ return os.homedir();
607
+ }
608
+ //# sourceMappingURL=guard.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,WAAW,IAAI,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,GAAG,MAAM,kBAAkB,CAAC;AACnC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAuBjE,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,MAAc;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAClC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,mBAA2B,EAC3B,IAAqE;IAErE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,GAAG,EAAE;QACtC,CAAC,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE;QAC7B,CAAC,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5B,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC;SAClC,MAAM,CAAC,GAAG,mBAAmB,KAAK,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,KAAK,UAAU,EAAE,EAAE,MAAM,CAAC;SACjF,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,yBAAyB,GAAG,0CAA0C,CAAC;AAC7E,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;AAErD,MAAM,UAAU,iCAAiC,CAC/C,OAAe,EACf,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC;SACvC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACrF,OAAO,QAAQ,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,WAA4B,OAAO,CAAC,QAAQ;IACjG,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO;IAEjC,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,aAAa,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,aAAa,CAAC,iDAAiD,SAAS,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACtF,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,qDAAqD,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,aAAa,CAAC,0DAA0D,SAAS,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,aAAa,CAAC,gDAAgD,SAAS,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,IAAY;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC;IAChD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,8BAA8B,CAAC,IAAY,EAAE,QAAyB;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjF,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,UAAU,GAAG,8BAA8B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtE,OAAO,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,aAAa,CAAC,YAAoB;IACzC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM;QAC9B,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAmDD,MAAM,OAAO,gBAAgB;IAiBR;IAhBF,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC7C,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,UAAU,GAAG,IAAI,GAAG,EAA8B,CAAC;IACnD,kBAAkB,CAAe;IACjC,eAAe,CAAS;IACxB,cAAc,CAAsB;IACpC,GAAG,CAAe;IAClB,WAAW,CAA2B;IACtC,kBAAkB,CAAkC;IACpD,KAAK,CAAS;IACd,aAAa,CAAS;IACtB,cAAc,CAA6C;IAC3D,aAAa,CAA4C;IACzD,mBAAmB,GAAG,IAAI,GAAG,EAA6D,CAAC;IAE5G,YACmB,MAAsB,EACvC,UAAmC,EAAE;QADpB,WAAM,GAAN,MAAM,CAAgB;QAGvC,MAAM,iBAAiB,GAAG,SAAS,UAAU,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,CAAC;QAClF,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,SAAS,UAAU,EAAE,EAAE,CAAC;QAClF,IAAI,CAAC,cAAc,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,IAAI,IAAI,CAAC;QAC/D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,eAAe,CAAC;QAC1D,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CACnB,MAAM,EACN,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,gBAAgB,IAAI,EAAE,GAAG,MAAM,CAAC,CAC5F,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC7C,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrD,CAAC;IAED,aAAa,CAAC,SAAkB;QAC9B,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAC7F,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,aAAa,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,aAAa,CAAC,sCAAsC,QAAQ,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;QACjG,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CACrB,4CAA4C,QAAQ,qBAAqB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpI,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,QAAQ,IAAI,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,QAAQ;gBAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAClC,MAAM,SAAS,GAAc;YAC3B,EAAE;YACF,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;SACtC,CAAC;QACF,MAAM,MAAM,GAAoB;YAC9B,SAAS;YACT,GAAG;YACH,WAAW,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK;YAC7B,kBAAkB,EAAE,IAAI,CAAC,yBAAyB,EAAE;YACpD,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;SACtC,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpC,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;IAC1B,CAAC;IAED,YAAY,CAAC,EAAU;QACrB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,aAAa,CAAC,sDAAsD,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;gBACxD,IAAI,SAAS;oBAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,0EAA0E;YAC5E,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;gBAClD,IAAI,IAAI;oBAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,0EAA0E;YAC5E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,IAAI,MAAM;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;YACjE,MAAM,IAAI,aAAa,CAAC,yBAAyB,EAAE,8BAA8B,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,gBAAgB,CAAC,EAAW;QAC1B,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACtG,CAAC;IAED,cAAc,CAAC,EAAU;QACvB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,aAAa,CAAC,sDAAsD,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;gBACvD,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC3D,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0EAA0E;YAC5E,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;gBACtD,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC3D,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0EAA0E;YAC5E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,IAAI,MAAM;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;YACjE,MAAM,IAAI,aAAa,CAAC,yBAAyB,EAAE,8BAA8B,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9C,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;aAC5D,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,SAAS,GAAgB,EAAE,CAAC;QAChC,IAAI,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC;QACjH,IAAI,KAAK,GAAgB,EAAE,CAAC;QAC5B,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC;QAC5G,OAAO,CAAC,GAAG,UAAU,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,SAAS,CAAC,SAAoC,kBAAkB;QAC9D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;gBACpE,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAClD,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC;QACX,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;gBACnE,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC;IACb,CAAC;IAED,uBAAuB,CAAC,oBAA4B;QAClD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAChD,IAAI,MAAM,CAAC,cAAc,KAAK,oBAAoB;gBAAE,SAAS;YAC7D,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,yBAAyB,EAAE,SAAS,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,kBAAkB,CAChB,QAAmE;QAEnE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED,sBAAsB,CAAC,EAAU;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC1D,MAAM,EAAE,wCAAwC;YAChD,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC;YAChE,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI;YAC1C,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,IAAI;YAChC,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,IAAI;YAClC,aAAa,EAAE,SAAS,CAAC,aAAa,IAAI,IAAI;YAC9C,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,IAAI,IAAI;YACtD,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,IAAI,IAAI,CAAC,yBAAyB,EAAE;YAClF,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,IAAI,CAAC,eAAe;YAChE,cAAc,EAAE,MAAM,EAAE,cAAc,IAAI,IAAI,CAAC,cAAc,EAAE;SAChE,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9B,CAAC;IAED,wBAAwB,CAAC,EAAU;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC1D,MAAM,EAAE,0CAA0C;YAClD,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC;YAChE,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI;YAC1C,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,IAAI;YAChC,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,IAAI;YAClC,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,IAAI,CAAC,eAAe;YAChE,cAAc,EAAE,MAAM,EAAE,cAAc,IAAI,IAAI,CAAC,cAAc,EAAE;SAChE,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9B,CAAC;IAEO,sBAAsB,CAC5B,EAAU,EACV,MAAiC,EACjC,SAAiB;QAEjB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACnD,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,MAAM;YACtC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,EAAE,EAAE,CAAC;QAC7B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC9C,IAAI,OAAO,IAAI,OAAQ,OAA6B,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACzE,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAuB;QACnC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IACjC,CAAC;IAEO,yBAAyB;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,aAAa,CAAC,6CAA6C,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,2BAA2B,CAAC,MAAuB;QACzD,OAAO,MAAM,CAAC,kBAAkB,KAAK,IAAI,CAAC,yBAAyB,EAAE;YACnE,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe;YAC/C,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;IACpD,CAAC;IAEO,eAAe;QACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBACnD,MAAM,IAAI,aAAa,CAAC,mDAAmD,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,EAAE,CAAC;QACnE,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,iCAAiC,CAAC,CAAC;IAC7D,CAAC;IAEO,YAAY;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAChD,IAAI,MAAM,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC;gBAC9B,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IAEO,YAAY,CAClB,MAAuB,EACvB,MAAiC,EACjC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;QAE9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YACnE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE;YACvC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE;YAChC,SAAS;YACT,MAAM;SACP,CAAC,CAAC;QACH,MAAM,KAAK,GAA6B;YACtC,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE;YACvB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM;SACP,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAChD,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACnD,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,MAAM;YACtC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IAKD;IACA;IALF,cAAc,CAAsB;IACpC,qBAAqB,GAAG,IAAI,GAAG,EAAuD,CAAC;IAExG,YACmB,MAA4C,EAC5C,WAA4B,OAAO,CAAC,QAAQ;QAD5C,WAAM,GAAN,MAAM,CAAsC;QAC5C,aAAQ,GAAR,QAAQ,CAAoC;QAE7D,IAAI,CAAC,cAAc,GAAG,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,qBAAqB,CAAC,OAAe;QACnC,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5C,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACxF,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CACvG,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,OAAe;QAC9B,IAAI,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,aAAa,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,OAAO,CAAC,SAAoB,EAAE,SAAS,GAAG,GAAG,EAAE,UAAkC,EAAE;QACjF,IAAI,SAAS,CAAC,WAAW,KAAK,gBAAgB,IAAI,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACxG,MAAM,IAAI,aAAa,CAAC,wCAAwC,CAAC,CAAC;QACpE,CAAC;QACD,mBAAmB,CAAC,SAAS,IAAI,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7F,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAEnD,IAAI,SAAS,CAAC,WAAW,KAAK,gBAAgB,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;YAChG,MAAM,IAAI,aAAa,CAAC,+CAA+C,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,UAAU,IAAI,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxD,OAAO,GAAG,UAAU,CAAC;gBACrB,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC5D,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1D,MAAM,IAAI,aAAa,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;gBACvE,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBACnE,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,aAAa,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE/B,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,aAAa,CAAC,2DAA2D,SAAS,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC/B,IAAI,SAAS,CAAC,WAAW,KAAK,gBAAgB,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;oBACrD,MAAM,IAAI,aAAa,CAAC,wDAAwD,CAAC,CAAC;gBACpF,CAAC;gBACD,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,IAAI,UAAU,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;oBACnD,MAAM,IAAI,aAAa,CAAC,gEAAgE,CAAC,CAAC;gBAC5F,CAAC;gBACD,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;oBACxB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,EAAE;wBACzC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE;wBAC9B,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE;wBAC9B,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;qBAChC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;oBAC3C,MAAM,IAAI,aAAa,CAAC,wCAAwC,SAAS,EAAE,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,aAAa;oBAAE,MAAM,KAAK,CAAC;YAClD,CAAC;YACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,UAAU,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,aAAa,CAAC,+DAA+D,SAAS,EAAE,CAAC,CAAC;YACtG,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC9D,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;gBACrC,IAAI,SAAS,CAAC,WAAW,KAAK,gBAAgB,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;oBACnG,MAAM,IAAI,aAAa,CAAC,uDAAuD,CAAC,CAAC;gBACnF,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;IAED,kBAAkB,CAChB,SAAoB,EACpB,SAAS,GAAG,GAAG,EACf,UAAkC,EAAE;QAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,UAAU,IAAI,QAAQ,CAAC,OAAO,CAAC;QACrD,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,gBAAgB,GAAG,WAAW,CAAC,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,uBAAuB,GAAG,YAAY;YAC1C,CAAC,CAAC,gBAAgB,KAAK,GAAG;gBACxB,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;YAC/B,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,MAAM,cAAc,GAAG,aAAa,CAAC,uBAAuB,CAAC,CAAC;QAC9D,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,aAAa,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,sBAAsB,GAAG,oBAAoB,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAChF,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,KAAK,OAAO;YAC7C,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,OAAO,CAAC;YAC9C,CAAC,CAAC,iBAAiB,CAAC;QACtB,MAAM,gBAAgB,GAAG,YAAY;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;iBAC9D,KAAK,CAAC,GAAG,CAAC;iBACV,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC;QAEvD,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,aAAa,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,iBAAiB;YAC1B,aAAa;YACb,YAAY;YACZ,cAAc;YACd,sBAAsB;YACtB,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,QAAgB;QACpD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,SAAS,IAAI,CACf,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,GAAG;YAClC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,GAAG;YAClC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;YAC9B,IAAI,CAAC,KAAK,KAAK,CAAC,CACjB,EAAE,CAAC;YACF,MAAM,IAAI,aAAa,CAAC,mEAAmE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,aAAa,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,aAAa,CAAC,sBAAsB,IAAI,CAAC,IAAI,mBAAmB,QAAQ,SAAS,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAC5B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5D,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC1B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC1E,IAAI,SAAS,KAAK,CAAC;oBAAE,MAAM;gBAC3B,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9C,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,IAAI,SAAS,CAAC;YACtB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,QAAQ;IACtB,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;AACtB,CAAC"}
@@ -0,0 +1,14 @@
1
+ export function summarizeGuidanceDiagnostics(diagnostics) {
2
+ const first = diagnostics[0] ?? null;
3
+ return {
4
+ status: diagnostics.some((item) => item.status === "unavailable")
5
+ ? "unavailable"
6
+ : diagnostics.length
7
+ ? "warning"
8
+ : "ok",
9
+ count: diagnostics.reduce((total, item) => total + item.count, 0),
10
+ first,
11
+ action: first?.action ?? "No guidance action is required."
12
+ };
13
+ }
14
+ //# sourceMappingURL=diagnostics.js.map