instar 1.3.479 → 1.3.481

package/dist/monitoring/BlockerLedger.d.ts

@@ -0,0 +1,294 @@
+/**
+ * BlockerLedger — the resolution-workflow + memory layer that COMPLETES
+ * Principle 1 ("almost every blocker is a false blocker — work it through").
+ *
+ * The detection half already exists (deferral-detector hook, B16_UNVERIFIED_WALL,
+ * B17_FALSE_BLOCKER). This ledger is the MISSING half: it turns a detected blocker
+ * into a *gated pipeline* with structural evidence-of-work at every terminal, built
+ * so the memory can NEVER become a deferral-laundromat.
+ *
+ * Pipeline (no state may be skipped — `advance` refuses an illegal transition):
+ *   candidate → authority-checked → access-requested → dry-run → live-run → terminal
+ *
+ * Terminal states each require verified evidence-of-work:
+ *   - `resolved`     — a real codified playbook (confined path, references the
+ *                      blocker id, links a SUCCESSFUL live-run). Existence alone
+ *                      never satisfies it.
+ *   - `true-blocker` — the dangerous terminal, so the most gated. Requires a
+ *                      closed-taxonomy reason + a recorded FAILED self-fetch/dry-run
+ *                      attempt (no kind exempt) + an `access-requested` to the user
+ *                      AFTER the failed attempt + passing the Tier-1 B17 authority.
+ *                      Stored as a DECAYING HYPOTHESIS ("last verified <date>"),
+ *                      re-tested on a cadence; re-settle needs NEW evidence.
+ *
+ * Signal vs Authority (docs/signal-vs-authority.md): the ledger RECORDS and
+ * STRUCTURES; it never blocks an outbound message. The one judgment it carries —
+ * the `true-blocker` settle — routes through the injected Tier-1 authority
+ * (`settleAuthority`, default-wired to the B17 gate at the server), exactly as the
+ * constitution requires. Brittle field-presence checks gate the *form* of evidence;
+ * the *settle judgment* is the intelligent gate's.
+ *
+ * Concurrency: all mutations go through a single-writer CAS path (atomic temp-file
+ * + rename), reusing the CommitmentTracker.mutate() pattern. File-JSON does not
+ * exempt the ledger from the concurrency safety the rest of instar enforces.
+ *
+ * Spec: docs/specs/AUTONOMY-PRINCIPLES-ENFORCEMENT-SPEC.md (Piece 1).
+ */
+/** The gated pipeline states. Order matters — `advance` walks them linearly. */
+export declare const BLOCKER_PIPELINE: readonly BlockerNonTerminalState[];
+export type BlockerNonTerminalState = 'candidate' | 'authority-checked' | 'access-requested' | 'dry-run' | 'live-run';
+export type BlockerTerminalState = 'resolved' | 'true-blocker';
+export type BlockerState = BlockerNonTerminalState | BlockerTerminalState;
+/**
+ * The ONLY legitimate true-blocker kinds (closed taxonomy — NOT free prose).
+ * A reason that doesn't match is refused and the entry stays where it is.
+ */
+export declare const TRUE_BLOCKER_KINDS: readonly ["operator-only-secret", "operator-only-account", "legal-billing-authorization", "operator-judgment"];
+export type TrueBlockerKind = (typeof TRUE_BLOCKER_KINDS)[number];
+export interface BlockerTransition {
+    from: BlockerState;
+    to: BlockerState;
+    at: string;
+    /** Authenticated origin that performed the transition (session/operator id). */
+    origin: string;
+    note?: string;
+}
+export interface AuthorityCheckEvidence {
+    /** Does the agent itself have the authority/access to clear this? */
+    agentHasAuthority: boolean;
+    /** Does the user hold the authority the agent lacks? */
+    userHasAuthority: boolean;
+    note: string;
+}
+export interface AccessRequestEvidence {
+    /** A reference to the ACTUAL outbound message asking the user (e.g. a relay id). */
+    messageRef: string;
+    at: string;
+}
+export interface AttemptEvidence {
+    /** A failed self-fetch (vault/gh/vercel/decrypt-miss) OR a failed dry-run. */
+    type: 'self-fetch' | 'dry-run';
+    at: string;
+    /** What was tried and how it failed (untrusted free text — surfaced via envelope). */
+    detail: string;
+    succeeded: false;
+}
+export interface LiveRunEvidence {
+    at: string;
+    outcome: string;
+    succeeded: boolean;
+}
+export interface ResolvedTerminal {
+    kind: 'resolved';
+    /** Confined, on-disk playbook path that references the blocker id + links live-run. */
+    playbookPath: string;
+    at: string;
+}
+export interface TrueBlockerTerminal {
+    kind: 'true-blocker';
+    reasonKind: TrueBlockerKind;
+    /** Per-step rebuttal of why each pipeline stage failed (untrusted free text). */
+    rebuttal: string;
+    /** The MANDATORY recorded failed work-attempt (self-fetch for secret/account kinds). */
+    failedAttempt: AttemptEvidence;
+    /** Reference to the access-request made to the user, AFTER the failed attempt. */
+    accessRequestRef: string;
+    /** Hash of the B17 gate decision that AUTHORIZED this settle. */
+    gateDecisionHash: string;
+    at: string;
+    /** D6: a settled true-blocker is a DECAYING hypothesis — reopened on this date. */
+    recheckAfter: string;
+    /** Consecutive re-settles with no new evidence — escalates to the user after N. */
+    noEvidenceResettleCount: number;
+}
+export type BlockerTerminal = ResolvedTerminal | TrueBlockerTerminal;
+export interface BlockerEntry {
+    id: string;
+    /** CAS version — bumped on every mutation. */
+    version: number;
+    state: BlockerState;
+    /** The false-blocker framing that opened the entry (untrusted — surfaced via envelope). */
+    detectedText: string;
+    /** Authenticated origin that opened the entry. */
+    origin: string;
+    createdAt: string;
+    updatedAt: string;
+    history: BlockerTransition[];
+    authorityCheck?: AuthorityCheckEvidence;
+    accessRequest?: AccessRequestEvidence;
+    dryRun?: AttemptEvidence;
+    liveRun?: LiveRunEvidence;
+    terminal?: BlockerTerminal;
+    /** When this true-blocker was last reopened by the D6 re-walk job (if ever). */
+    lastReopenedAt?: string;
+    /**
+     * Consecutive no-new-evidence re-settle ATTEMPTS since the last successful
+     * (new-evidence) settle or reopen. Each refused no-evidence re-settle bumps this
+     * (and is refused); at >= maxNoEvidenceResettles the anomaly escalates to the user.
+     * A wall re-stamped without ever being re-tested is itself a signal.
+     */
+    noEvidenceResettleAttempts?: number;
+}
+/**
+ * The injected Tier-1 authority for the `true-blocker` settle judgment.
+ * Default-wired to the B17 gate at the server; tests inject a fake.
+ * Returns allow/deny + a reason + a stable hash of the decision (for the audit line).
+ */
+export type SettleAuthority = (input: {
+    entry: BlockerEntry;
+    proposed: TrueBlockerTerminal;
+}) => Promise<{
+    allow: boolean;
+    reason: string;
+    decisionHash: string;
+}>;
+export interface BlockerLedgerOptions {
+    /** Agent home / stateDir; the store lives at `<stateDir>/state/blocker-ledger.json`. */
+    stateDir: string;
+    /** The Tier-1 settle authority (B17). Optional — when absent, a true-blocker settle is refused. */
+    settleAuthority?: SettleAuthority;
+    /** Move terminal entries older than this many days to the archive (default 30). */
+    archiveAfterDays?: number;
+    /** Default days until a settled true-blocker is reopened for a re-walk (default 30). */
+    recheckAfterDays?: number;
+    /** Consecutive no-new-evidence re-settles before escalating (default 2). */
+    maxNoEvidenceResettles?: number;
+    /** Max free-text length on any field, in chars (default 4000). */
+    maxFreeTextChars?: number;
+    /**
+     * Confined directory roots a `resolved` playbook MUST live under (absolute or
+     * stateDir-relative). Defaults to the agent's skills + playbook dirs.
+     */
+    confinedPlaybookRoots?: string[];
+    /** Injectable clock for deterministic tests. */
+    now?: () => Date;
+}
+export declare class BlockerLedgerError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+/**
+ * Wrap untrusted ledger free-text in a delimited, quoted envelope before it is
+ * ever surfaced to an LLM (the D6 re-walk re-feeds it into context). NEVER
+ * concatenate ledger text as instructions — it is DATA. Mirrors the
+ * `<auto-learned-preference>` signal-envelope pattern.
+ */
+export declare function toLlmSafeEnvelope(text: string): string;
+/** HTML-escape for the dashboard render path. */
+export declare function escapeHtmlForDashboard(text: string): string;
+export declare class BlockerLedger {
+    private readonly storePath;
+    private readonly archivePath;
+    private readonly auditPath;
+    private readonly settleAuthority?;
+    private readonly archiveAfterDays;
+    private readonly recheckAfterDays;
+    private readonly maxNoEvidenceResettles;
+    private readonly maxFreeText;
+    private readonly confinedRoots;
+    private readonly now;
+    private readonly stateDir;
+    private store;
+    /** Serialize all mutations through one in-process queue (single-writer). */
+    private mutateChain;
+    constructor(opts: BlockerLedgerOptions);
+    private loadStore;
+    private saveStore;
+    private iso;
+    /**
+     * Single-writer mutation funnel. Every mutation serializes through one
+     * in-process chain (no two interleave a read-modify-write) — this IS the
+     * single-writer guarantee. Each mutation reloads from disk first so a
+     * cross-process write (e.g. a manual edit) is picked up rather than clobbered,
+     * then applies + persists atomically (temp-file + rename).
+     *
+     * A rejected mutation does not poison the chain: the next mutation runs
+     * regardless of the prior outcome.
+     */
+    private mutate;
+    private applyOnce;
+    private audit;
+    private boundText;
+    private find;
+    /**
+     * Open a `candidate` entry. Used directly by the deferral-detector auto-open
+     * trigger (Structure > Willpower — the agent doesn't choose to log it).
+     */
+    open(input: {
+        detectedText: string;
+        origin: string;
+    }): Promise<BlockerEntry>;
+    list(opts?: {
+        limit?: number;
+        offset?: number;
+        includeArchived?: boolean;
+    }): {
+        entries: BlockerEntry[];
+        total: number;
+    };
+    get(id: string): BlockerEntry | undefined;
+    /**
+     * Advance through the linear non-terminal pipeline. REFUSES a transition that
+     * skips a state — the work-the-blocker states ARE the feature; bypassing them
+     * to a terminal is the exact avoidance Principle 1 exists to kill.
+     */
+    advance(id: string, input: {
+        origin: string;
+        authorityCheck?: AuthorityCheckEvidence;
+        accessRequest?: AccessRequestEvidence;
+        dryRun?: Omit<AttemptEvidence, 'type' | 'succeeded'> & {
+            succeeded?: boolean;
+        };
+        liveRun?: LiveRunEvidence;
+        note?: string;
+    }): Promise<BlockerEntry>;
+    /**
+     * Settle to a terminal state with full evidence validation.
+     *  - `resolved`: requires a confined, id-referencing playbook AND a successful live-run.
+     *  - `true-blocker`: closed-taxonomy reason + failed-attempt rebuttal + post-attempt
+     *    access-request + a PASS from the injected Tier-1 authority (B17).
+     */
+    settle(id: string, input: {
+        origin: string;
+        kind: 'resolved';
+        playbookPath: string;
+    } | {
+        origin: string;
+        kind: 'true-blocker';
+        reasonKind: TrueBlockerKind;
+        rebuttal: string;
+        /** The mandatory FAILED work-attempt. `at` defaults to now; it MUST precede the access-request. */
+        failedAttempt: {
+            type: 'self-fetch' | 'dry-run';
+            detail: string;
+            at?: string;
+        };
+        /** The access-request to the user — recorded AFTER the failed attempt. */
+        accessRequest: {
+            messageRef: string;
+            at?: string;
+        };
+    }): Promise<BlockerEntry>;
+    private settleTrueBlocker;
+    /**
+     * D6 re-walk: reopen a settled true-blocker to `candidate` when its recheck date
+     * is due. The wall becomes a hypothesis again — re-settling requires NEW evidence.
+     */
+    reopenForRecheck(id: string): Promise<BlockerEntry>;
+    /** Settled true-blockers whose recheck date is due (for the D6 job). */
+    dueForRecheck(now?: Date): BlockerEntry[];
+    /**
+     * Move terminal entries older than the archive threshold to the archive file,
+     * keeping the hot file bounded. Returns the number archived.
+     */
+    archiveOld(now?: Date): Promise<number>;
+    private assertNotTerminal;
+    /** Parse a caller-supplied ISO timestamp; return undefined if absent/invalid. */
+    private normalizeIso;
+    private computeRecheckAfter;
+    /** Date.now/Math.random are unavailable in some contexts; derive jitter from the clock. */
+    private deterministicJitter;
+    private loadArchive;
+    private saveArchive;
+}
+//# sourceMappingURL=BlockerLedger.d.ts.map

package/dist/monitoring/BlockerLedger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BlockerLedger.d.ts","sourceRoot":"","sources":["../../src/monitoring/BlockerLedger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAKH,gFAAgF;AAChF,eAAO,MAAM,gBAAgB,EAAE,SAAS,uBAAuB,EAMrD,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAC/B,WAAW,GACX,mBAAmB,GACnB,kBAAkB,GAClB,SAAS,GACT,UAAU,CAAC;AAEf,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,cAAc,CAAC;AAE/D,MAAM,MAAM,YAAY,GAAG,uBAAuB,GAAG,oBAAoB,CAAC;AAE1E;;;GAGG;AACH,eAAO,MAAM,kBAAkB,gHAKrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAQlE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,YAAY,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,qEAAqE;IACrE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,wDAAwD;IACxD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,oFAAoF;IACpF,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,IAAI,EAAE,YAAY,GAAG,SAAS,CAAC;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,KAAK,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,uFAAuF;IACvF,YAAY,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,cAAc,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,aAAa,EAAE,eAAe,CAAC;IAC/B,kFAAkF;IAClF,gBAAgB,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,gBAAgB,EAAE,MAAM,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,mFAAmF;IACnF,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,mBAAmB,CAAC;AAErE,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,YAAY,CAAC;IACpB,2FAA2F;IAC3F,YAAY,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AASD;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IACpC,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,mBAAmB,CAAC;CAC/B,KAAK,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAExE,MAAM,WAAW,oBAAoB;IACnC,wFAAwF;IACxF,QAAQ,EAAE,MAAM,CAAC;IACjB,mGAAmG;IACnG,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mFAAmF;IACnF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wFAAwF;IACxF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAOD,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBADrB,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,MAAM;CAKxB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOtD;AAED,iDAAiD;AACjD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO3D;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAkB;IACnD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAS;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAW;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC,OAAO,CAAC,KAAK,CAAe;IAC5B,4EAA4E;IAC5E,OAAO,CAAC,WAAW,CAAuC;gBAE9C,IAAI,EAAE,oBAAoB;IAqBtC,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,GAAG;IAIX;;;;;;;;;OASG;YACW,MAAM;IAYpB,OAAO,CAAC,SAAS;IAUjB,OAAO,CAAC,KAAK;IAcb,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,IAAI;IAUZ;;;OAGG;IACG,IAAI,CAAC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAuBlF,IAAI,CAAC,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG;QAC/E,OAAO,EAAE,YAAY,EAAE,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC;KACf;IAWD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAOzC;;;;OAIG;IACG,OAAO,CACX,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,CAAC,EAAE,sBAAsB,CAAC;QACxC,aAAa,CAAC,EAAE,qBAAqB,CAAC;QACtC,MAAM,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,CAAC,GAAG;YAAE,SAAS,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAC/E,OAAO,CAAC,EAAE,eAAe,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GACA,OAAO,CAAC,YAAY,CAAC;IA+FxB;;;;;OAKG;IACG,MAAM,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EACD;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAC1D;QACE,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,cAAc,CAAC;QACrB,UAAU,EAAE,eAAe,CAAC;QAC5B,QAAQ,EAAE,MAAM,CAAC;QACjB,mGAAmG;QACnG,aAAa,EAAE;YAAE,IAAI,EAAE,YAAY,GAAG,SAAS,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/E,0EAA0E;QAC1E,aAAa,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACpD,GACJ,OAAO,CAAC,YAAY,CAAC;YA2DV,iBAAiB;IAqK/B;;;OAGG;IACG,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAuBzD,wEAAwE;IACxE,aAAa,CAAC,GAAG,GAAE,IAAiB,GAAG,YAAY,EAAE;IAUrD;;;OAGG;IACG,UAAU,CAAC,GAAG,GAAE,IAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBzD,OAAO,CAAC,iBAAiB;IASzB,iFAAiF;IACjF,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,mBAAmB;IAQ3B,2FAA2F;IAC3F,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,WAAW;CAOpB"}