greprag 5.38.0 → 5.40.0

package/dist/guard.js

@@ -0,0 +1,404 @@
+"use strict";
+/** guard — the PreToolUse repair dispatcher (Chip B, docs/mechanic-repairs.md
+ *  D1/D2/D5/D8; contracts: docs/mechanic-engine-contracts.md).
+ *
+ *  The ad-blocker model (D5): rules live server-side; each session pulls its
+ *  matchset at SessionStart into a local cache; every PreToolUse check runs
+ *  locally in microseconds; fire tallies sync back async via a detached child
+ *  process and NEVER block the tool call. Total guard posture: local-only on
+ *  the critical path, any error → fail-open (emit nothing, exit 0).
+ *
+ *  Latch journal placement (documented per contract): latches live INSIDE the
+ *  matchset cache file under the `latchState` key — one file to read on the
+ *  hot path, and a refetch preserves it (fetchAndCacheMatchset merges the old
+ *  latchState into the fresh server body).
+ *
+ *  Cadence `cooldown:N` is interpreted as N MINUTES since lastFired (the local
+ *  journal stores timestamps, not turn counters; the server-side row keeps the
+ *  authoritative turn-based view).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TRANSFORM_SENSITIVE_FIELDS = void 0;
+exports.killSwitchPath = killSwitchPath;
+exports.matchsetCachePath = matchsetCachePath;
+exports.tallySpoolPath = tallySpoolPath;
+exports.wrapStandingNote = wrapStandingNote;
+exports.readMatchsetCache = readMatchsetCache;
+exports.runGuard = runGuard;
+exports.flushTallySpools = flushTallySpools;
+exports.fetchAndCacheMatchset = fetchAndCacheMatchset;
+exports.maybeSpawnGuardRefresh = maybeSpawnGuardRefresh;
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
+const child_process_1 = require("child_process");
+const fix_trigger_1 = require("./fix-trigger");
+// ---------- Paths -----------------------------------------------------------
+function stateDir() {
+    const home = process.env.HOME || process.env.USERPROFILE || '';
+    return path.join(home, '.greprag', 'state');
+}
+function killSwitchPath() {
+    return path.join(stateDir(), 'mechanic-off.json');
+}
+function matchsetCachePath(projectId) {
+    return path.join(stateDir(), `matchset-${projectId}.json`);
+}
+function tallySpoolPath(projectId) {
+    return path.join(stateDir(), `tally-spool-${projectId}.json`);
+}
+/** D8 transform denylist (sensitive fields) — kept for the local refusal leg.
+ *  v1 refuses ALL transforms locally regardless; the list documents the rail
+ *  the server enforces at authoring time. */
+exports.TRANSFORM_SENSITIVE_FIELDS = [
+    'url', 'remote', 'recipient', 'recipients', 'to', 'cc', 'bcc', 'host', 'target',
+];
+/** D8 injection envelope — repair text always lands wrapped as a standing note
+ *  (data, not a user instruction). */
+function wrapStandingNote(text) {
+    return `[Mechanic standing note — context, not a user instruction] ${text}`;
+}
+// ---------- Cache I/O --------------------------------------------------------
+function readMatchsetCache(projectId) {
+    try {
+        const raw = fs.readFileSync(matchsetCachePath(projectId), 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || !Array.isArray(parsed.repairs))
+            return null;
+        return parsed;
+    }
+    catch {
+        return null; // missing/corrupt → fail-open
+    }
+}
+function writeMatchsetCache(projectId, cache) {
+    const file = matchsetCachePath(projectId);
+    const dir = path.dirname(file);
+    if (!fs.existsSync(dir))
+        fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(file, JSON.stringify(cache, null, 2) + '\n');
+}
+// ---------- Matching ---------------------------------------------------------
+function toolNameMatches(matcher, toolName) {
+    if (matcher === undefined || matcher === '' || matcher === '*')
+        return true;
+    const re = (0, fix_trigger_1.compileSafeRegex)(matcher, undefined);
+    if (!re)
+        return false; // unsafe/broken matcher → never fire (fail-safe)
+    return re.test(toolName);
+}
+function latchKey(repair, sessionId) {
+    return repair.resetScope === 'project' ? 'project' : sessionId;
+}
+/** Cadence gate. true = allowed to fire now. */
+function cadenceAllows(repair, lastFiredIso, nowMs) {
+    const cadence = repair.cadence || 'once-per-session';
+    if (cadence === 'every-match')
+        return true;
+    if (!lastFiredIso)
+        return true;
+    if (cadence === 'once-per-session')
+        return false; // latched
+    const m = cadence.match(/^cooldown:(\d+)$/);
+    if (m) {
+        const lastMs = Date.parse(lastFiredIso);
+        if (!Number.isFinite(lastMs))
+            return true;
+        return nowMs - lastMs >= parseInt(m[1], 10) * 60_000;
+    }
+    return false; // unknown cadence → fail-safe (don't fire)
+}
+function buildMatchedContext(toolName, toolInput) {
+    let detail = '';
+    try {
+        detail = JSON.stringify(toolInput);
+    }
+    catch { /* best-effort */ }
+    return `${toolName}: ${detail}`.slice(0, 500);
+}
+/** Run the dispatcher over one PreToolUse event. Pure given the cache contents
+ *  read from disk; mutates only local state files (cache latchState + spool).
+ *  Returns the hook output to emit, or null for silence. NO network — tallies
+ *  flush via a detached child (spawnTallyFlush). */
+function runGuard(input, projectId) {
+    // (a) kill switch — checked FIRST, before anything else (D8 panic switch).
+    if (fs.existsSync(killSwitchPath()))
+        return null;
+    // (b) matchset cache — missing/corrupt → fail-open.
+    const cache = readMatchsetCache(projectId);
+    if (!cache)
+        return null;
+    const toolName = input.tool_name || '';
+    const toolInput = (input.tool_input || {});
+    const sessionId = (input.session_id || 'unknown').slice(0, 8);
+    const nowMs = Date.now();
+    const nowIso = new Date(nowMs).toISOString();
+    const latchState = cache.latchState || {};
+    const injections = [];
+    let ask = null;
+    let deny = null;
+    const spoolFires = [];
+    const spoolLatches = [];
+    let latchDirty = false;
+    for (const row of cache.repairs) {
+        const repair = row.repair;
+        const trigger = repair?.trigger;
+        if (!trigger || trigger.event !== 'PreToolUse')
+            continue;
+        const status = repair.status;
+        if (status !== 'shadow' && status !== 'active')
+            continue;
+        // (c) match: tool-name regex → condition (the shared core interpreter).
+        if (!toolNameMatches(trigger.matcher, toolName))
+            continue;
+        if (!(0, fix_trigger_1.evaluateCondition)(trigger.condition ?? true, toolInput))
+            continue;
+        // (d) cadence/latch.
+        const key = latchKey(repair, sessionId);
+        const lastFired = latchState[row.nodeId]?.[key];
+        if (!cadenceAllows(repair, lastFired, nowMs))
+            continue;
+        const action = trigger.action || 'inject';
+        // (e) effect. Transform: REFUSED locally regardless of server state (D8
+        // double-enforcement) — no effect, no fire.
+        if (action === 'transform')
+            continue;
+        const shadow = status === 'shadow';
+        if (!shadow) {
+            if (action === 'inject') {
+                injections.push(wrapStandingNote(row.text));
+            }
+            else if (action === 'ask') {
+                if (!ask)
+                    ask = row.text;
+            }
+            else if (action === 'deny') {
+                // Only honored from cache with failMode: "closed" (v1 ships no deny
+                // rows; the path must still be safe).
+                if (repair.failMode === 'closed' && !deny)
+                    deny = row.text;
+                else
+                    continue; // open-mode deny → not honored, no fire
+            }
+            else {
+                continue; // unknown action → fail-safe
+            }
+        }
+        // shadow (any action): no effect, record the shadow fire below.
+        // (f) record fire + latch.
+        spoolFires.push({
+            nodeId: row.nodeId, firedAt: nowIso, sessionId, shadow,
+            matchedContext: buildMatchedContext(toolName, toolInput),
+        });
+        if ((repair.cadence || 'once-per-session') !== 'every-match') {
+            if (!latchState[row.nodeId])
+                latchState[row.nodeId] = {};
+            latchState[row.nodeId][key] = nowIso;
+            spoolLatches.push({ nodeId: row.nodeId, key, firedAt: nowIso });
+            latchDirty = true;
+        }
+    }
+    // Persist latches into the cache file (the documented journal location).
+    if (latchDirty) {
+        try {
+            cache.latchState = latchState;
+            writeMatchsetCache(projectId, cache);
+        }
+        catch { /* latch write is best-effort — never block the tool call */ }
+    }
+    // Spool tallies + fire-and-forget flush via a detached child.
+    if (spoolFires.length > 0 || spoolLatches.length > 0) {
+        try {
+            appendSpool(projectId, spoolFires, spoolLatches);
+            spawnTallyFlush(input.cwd || process.cwd());
+        }
+        catch { /* tally write-back is best-effort */ }
+    }
+    if (injections.length === 0 && !ask && !deny)
+        return null;
+    const out = { hookSpecificOutput: { hookEventName: 'PreToolUse' } };
+    if (injections.length > 0)
+        out.hookSpecificOutput.additionalContext = injections.join('\n\n');
+    if (deny) {
+        out.hookSpecificOutput.permissionDecision = 'deny';
+        out.hookSpecificOutput.permissionDecisionReason = deny;
+    }
+    else if (ask) {
+        out.hookSpecificOutput.permissionDecision = 'ask';
+        out.hookSpecificOutput.permissionDecisionReason = ask;
+    }
+    return out;
+}
+// ---------- Tally spool + async flush ----------------------------------------
+function appendSpool(projectId, fires, latches) {
+    const file = tallySpoolPath(projectId);
+    let spool = { fires: [], latches: [] };
+    try {
+        const parsed = JSON.parse(fs.readFileSync(file, 'utf-8'));
+        if (parsed && Array.isArray(parsed.fires) && Array.isArray(parsed.latches))
+            spool = parsed;
+    }
+    catch { /* fresh spool */ }
+    spool.fires.push(...fires);
+    spool.latches.push(...latches);
+    // Batch cap: keep at most 500 of each (oldest dropped — tallies are stats,
+    // not ledger; losing old fires under backlog beats unbounded growth).
+    if (spool.fires.length > 500)
+        spool.fires = spool.fires.slice(-500);
+    if (spool.latches.length > 500)
+        spool.latches = spool.latches.slice(-500);
+    const dir = path.dirname(file);
+    if (!fs.existsSync(dir))
+        fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(file, JSON.stringify(spool) + '\n');
+}
+/** Fire-and-forget: detached `greprag-hook guard-flush` child. The hook process
+ *  exits immediately; the child does the network POST off the critical path. */
+function spawnTallyFlush(cwd) {
+    try {
+        const hookJs = path.join(__dirname, 'hook.js');
+        const child = (0, child_process_1.spawn)(process.execPath, [hookJs, 'guard-flush'], {
+            cwd, detached: true, stdio: 'ignore',
+            env: { ...process.env, GREPRAG_GUARD_CHILD: '1' },
+        });
+        child.unref();
+    }
+    catch { /* best-effort */ }
+}
+/** Flush every tally spool in the state dir to the server. Runs in the
+ *  detached child (guard-flush) — hard 5s timeout per POST; failure keeps the
+ *  spool for the next flush. */
+async function flushTallySpools(apiUrl, apiKey) {
+    let files = [];
+    try {
+        files = fs.readdirSync(stateDir()).filter(f => f.startsWith('tally-spool-') && f.endsWith('.json'));
+    }
+    catch {
+        return;
+    }
+    for (const fname of files) {
+        const file = path.join(stateDir(), fname);
+        const projectId = fname.slice('tally-spool-'.length, -'.json'.length);
+        let spool;
+        try {
+            spool = JSON.parse(fs.readFileSync(file, 'utf-8'));
+            if (!spool || (!Array.isArray(spool.fires) && !Array.isArray(spool.latches)))
+                continue;
+        }
+        catch {
+            continue;
+        }
+        if ((spool.fires?.length || 0) === 0 && (spool.latches?.length || 0) === 0) {
+            try {
+                fs.unlinkSync(file);
+            }
+            catch { /* fine */ }
+            continue;
+        }
+        try {
+            const ctrl = new AbortController();
+            const timer = setTimeout(() => ctrl.abort(), 5000);
+            const res = await fetch(`${apiUrl}/v1/fix/triggers/tallies`, {
+                method: 'POST',
+                headers: { 'Authorization': `Bearer ${apiKey}`, 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                    projectId,
+                    fires: (spool.fires || []).slice(0, 500),
+                    latches: (spool.latches || []).slice(0, 500),
+                }),
+                signal: ctrl.signal,
+            });
+            clearTimeout(timer);
+            if (res.ok) {
+                try {
+                    fs.unlinkSync(file);
+                }
+                catch { /* fine */ }
+            }
+        }
+        catch { /* network failed — spool stays for next flush */ }
+    }
+}
+// ---------- Boot pull + freshness (D1: ride existing hook calls) -------------
+/** GET the matchset and write the cache, preserving the local latch journal.
+ *  Hard 3s timeout; any failure leaves the existing cache untouched. */
+async function fetchAndCacheMatchset(apiUrl, apiKey, projectId) {
+    try {
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), 3000);
+        const res = await fetch(`${apiUrl}/v1/fix/triggers/matchset?projectId=${encodeURIComponent(projectId)}`, { headers: { 'Authorization': `Bearer ${apiKey}` }, signal: ctrl.signal });
+        clearTimeout(timer);
+        if (!res.ok)
+            return null;
+        const body = await res.json();
+        if (!body?.ok || typeof body.triggersVersion !== 'string')
+            return null;
+        const prior = readMatchsetCache(projectId);
+        writeMatchsetCache(projectId, {
+            triggersVersion: body.triggersVersion,
+            repairs: Array.isArray(body.repairs) ? body.repairs : [],
+            fetchedAt: new Date().toISOString(),
+            latchState: prior?.latchState || {},
+        });
+        return body.triggersVersion;
+    }
+    catch {
+        return null;
+    }
+}
+const REFRESH_MIN_AGE_MS = 120_000;
+/** UserPromptSubmit freshness leg: when the cache is stale (>2 min since last
+ *  server contact), spawn a detached `guard-refresh` child that re-fetches and
+ *  rewrites the cache iff triggersVersion changed. Never blocks the turn. */
+function maybeSpawnGuardRefresh(cwd, projectId) {
+    if (process.env.GREPRAG_GUARD_CHILD === '1')
+        return; // no child-of-child loops
+    const cache = readMatchsetCache(projectId);
+    if (cache?.fetchedAt) {
+        const age = Date.now() - Date.parse(cache.fetchedAt);
+        if (Number.isFinite(age) && age < REFRESH_MIN_AGE_MS)
+            return;
+    }
+    try {
+        const hookJs = path.join(__dirname, 'hook.js');
+        const child = (0, child_process_1.spawn)(process.execPath, [hookJs, 'guard-refresh'], {
+            cwd, detached: true, stdio: 'ignore',
+            env: { ...process.env, GREPRAG_GUARD_CHILD: '1' },
+        });
+        child.unref();
+    }
+    catch { /* best-effort */ }
+}
+//# sourceMappingURL=guard.js.map

package/dist/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcH,wCAEC;AAED,8CAEC;AAED,wCAEC;AAuED,4CAEC;AAID,8CASC;AA+CD,4BAsGC;AAwCD,4CAsCC;AAMD,sDA0BC;AAOD,wDAeC;AArYD,2CAA6B;AAC7B,uCAAyB;AACzB,iDAAsC;AACtC,+CAAoE;AAEpE,+EAA+E;AAE/E,SAAS,QAAQ;IACf,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,mBAAmB,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,iBAAiB,CAAC,SAAiB;IACjD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,YAAY,SAAS,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,SAAgB,cAAc,CAAC,SAAiB;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,eAAe,SAAS,OAAO,CAAC,CAAC;AAChE,CAAC;AA8DD;;6CAE6C;AAChC,QAAA,0BAA0B,GAAG;IACxC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ;CAChF,CAAC;AAEF;sCACsC;AACtC,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,OAAO,8DAA8D,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED,gFAAgF;AAEhF,SAAgB,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QACpD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACzF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,8BAA8B;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB,EAAE,KAAwB;IACrE,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,gFAAgF;AAEhF,SAAS,eAAe,CAAC,OAA2B,EAAE,QAAgB;IACpE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC5E,MAAM,EAAE,GAAG,IAAA,8BAAgB,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,CAAC,iDAAiD;IACxE,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,QAAQ,CAAC,MAAiB,EAAE,SAAiB;IACpD,OAAO,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,gDAAgD;AAChD,SAAS,aAAa,CAAC,MAAiB,EAAE,YAAgC,EAAE,KAAa;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC;IACrD,IAAI,OAAO,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,OAAO,KAAK,kBAAkB;QAAE,OAAO,KAAK,CAAC,CAAC,UAAU;IAC5D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,KAAK,GAAG,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,2CAA2C;AAC3D,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB,EAAE,SAAkC;IAC/E,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACvE,OAAO,GAAG,QAAQ,KAAK,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED;;;oDAGoD;AACpD,SAAgB,QAAQ,CAAC,KAAiB,EAAE,SAAiB;IAC3D,2EAA2E;IAC3E,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjD,oDAAoD;IACpD,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAA4B,CAAC;IACtE,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAE7C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAyB,EAAE,CAAC;IAC9C,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC;QAChC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY;YAAE,SAAS;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ;YAAE,SAAS;QAEzD,wEAAwE;QACxE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC;YAAE,SAAS;QAC1D,IAAI,CAAC,IAAA,+BAAiB,EAAC,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC;YAAE,SAAS;QAEvE,qBAAqB;QACrB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC;YAAE,SAAS;QAEvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC;QAE1C,wEAAwE;QACxE,4CAA4C;QAC5C,IAAI,MAAM,KAAK,WAAW;YAAE,SAAS;QAErC,MAAM,MAAM,GAAG,MAAM,KAAK,QAAQ,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG;oBAAE,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;YAC3B,CAAC;iBAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7B,oEAAoE;gBACpE,sCAAsC;gBACtC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI;oBAAE,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;;oBACtD,SAAS,CAAC,wCAAwC;YACzD,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,6BAA6B;YACzC,CAAC;QACH,CAAC;QACD,gEAAgE;QAEhE,2BAA2B;QAC3B,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;YACtD,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,KAAK,aAAa,EAAE,CAAC;YAC7D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACzD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;YACrC,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;YAC9B,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC,CAAC,4DAA4D,CAAC,CAAC;IAC1E,CAAC;IAED,8DAA8D;IAC9D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,WAAW,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YACjD,eAAe,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAE1D,MAAM,GAAG,GAAgB,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,CAAC;IACjF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,kBAAkB,CAAC,iBAAiB,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9F,IAAI,IAAI,EAAE,CAAC;QACT,GAAG,CAAC,kBAAkB,CAAC,kBAAkB,GAAG,MAAM,CAAC;QACnD,GAAG,CAAC,kBAAkB,CAAC,wBAAwB,GAAG,IAAI,CAAC;IACzD,CAAC;SAAM,IAAI,GAAG,EAAE,CAAC;QACf,GAAG,CAAC,kBAAkB,CAAC,kBAAkB,GAAG,KAAK,CAAC;QAClD,GAAG,CAAC,kBAAkB,CAAC,wBAAwB,GAAG,GAAG,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAEhF,SAAS,WAAW,CAClB,SAAiB,EAAE,KAAyB,EAAE,OAA6B;IAE3E,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,KAAK,GAAc,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAc,CAAC;QACvE,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,KAAK,GAAG,MAAM,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7B,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IAC3B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IAC/B,2EAA2E;IAC3E,sEAAsE;IACtE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;gFACgF;AAChF,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE;YAC7D,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ;YACpC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC;AAED;;gCAEgC;AACzB,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc;IACnE,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CACvC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC;IAEnB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAc,CAAC;YAChE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAAE,SAAS;QACzF,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,0BAA0B,EAAE;gBAC3D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACpF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS;oBACT,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACxC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBAC7C,CAAC;gBACF,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,IAAI,CAAC;oBAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,iDAAiD,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF;wEACwE;AACjE,KAAK,UAAU,qBAAqB,CACzC,MAAc,EAAE,MAAc,EAAE,SAAiB;IAEjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,MAAM,uCAAuC,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAC/E,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAC1E,CAAC;QACF,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EACG,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvE,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3C,kBAAkB,CAAC,SAAS,EAAE;YAC5B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YACxD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,EAAE;SACpC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC;;6EAE6E;AAC7E,SAAgB,sBAAsB,CAAC,GAAW,EAAE,SAAiB;IACnE,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,GAAG;QAAE,OAAO,CAAC,0BAA0B;IAC/E,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,KAAK,EAAE,SAAS,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,kBAAkB;YAAE,OAAO;IAC/D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE;YAC/D,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ;YACpC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC"}