lastlight 0.5.1 → 0.6.1

package/dist/sandbox/smol.js

@@ -0,0 +1,485 @@
+import { execFileSync, execFile as execFileCb, spawn } from "child_process";
+import { promisify } from "util";
+import { lookup } from "node:dns/promises";
+import { existsSync, readdirSync } from "fs";
+import { join, resolve } from "path";
+import { randomUUID } from "crypto";
+const execFileAsync = promisify(execFileCb);
+/**
+ * smolvm sandbox manager — runs agent tasks inside local micro-VMs.
+ *
+ * Structural peer of {@link DockerSandbox}: Last Light owns the isolation
+ * boundary, bind-mounts the per-task workspace, runs `agentic-pi run --sandbox
+ * none` *inside* the machine, and parses the JSONL event stream exactly as the
+ * docker path does. Differences from docker:
+ *
+ *  - **Isolation** is a real micro-VM (own kernel) via smolvm's host
+ *    hypervisor (Apple Silicon Hypervisor.framework / Linux KVM), not a
+ *    sibling container. No daemon, no Docker (smolvm drives the hypervisor
+ *    directly).
+ *  - **Egress** is enforced natively per-machine via `--allow-host` (sourced
+ *    from `egress-allowlist.ts`), so this backend needs none of the coredns +
+ *    nginx-egress sidecar stack. `--allow-host` implies `--net`; we always
+ *    enable networking (the agent must reach the LLM provider).
+ *  - **Secrets** (provider keys, GITHUB_TOKEN) are injected via smolvm's
+ *    `--secret-env GUEST=HOST` so values never appear on the argv — the host
+ *    env of the spawned `smolvm` process carries them; smolvm resolves them
+ *    into the guest at start.
+ *  - **Image** is whatever `SMOLVM_IMAGE` names. smolvm's `-I` accepts a
+ *    registry ref OR a local `docker save` archive (`./img.tar`) / unpacked
+ *    rootfs dir — the latter needs NO registry, so it works under the strict
+ *    egress allowlist. The lastlight sandbox image (built locally by docker)
+ *    is consumed offline via `docker save lastlight-sandbox:latest -o img.tar`
+ *    then `SMOLVM_IMAGE=img.tar`. Archives are cached by hash; `start` resolves
+ *    from cache, not the network.
+ *
+ * Driven via the **smolvm CLI** (`execFile`), verified against smolvm 1.2.5.
+ *
+ * Feasibility-spike scope (documented gaps vs docker):
+ *  - We exec `agentic-pi` directly rather than running the sandbox image's
+ *    entrypoint, so the entrypoint's git-credential-helper setup is skipped.
+ *    Read-only profiles (agentic-pi's built-in github tools + minted
+ *    GITHUB_TOKEN) work; repo-write `git push` from the workspace is out of
+ *    scope here.
+ *  - The workload runs VM-grade (root) by default; workspace writes land as
+ *    root on the host bind mount. No shared package-manager cache, no SSRF
+ *    metadata floor in unrestricted mode, no in-network OTEL collector.
+ *  - The image (`SMOLVM_IMAGE`) must be resolvable by smolvm (a registry ref,
+ *    or a local image it can load) — see the spike plan's verification steps.
+ */
+/**
+ * Where the per-task workspace is bind-mounted inside the guest. smolvm treats
+ * `/workspace` specially — a `-v <host>:/workspace` mount "takes priority" and
+ * the host share is used directly (instead of the VM's storage-disk workspace),
+ * which avoids the `virtiofs` carve-out other mount targets get. The probe in
+ * {@link SmolSandbox.resolveHostWorkspace} still confirms the actual host path.
+ */
+export const SMOL_WORKSPACE_DIR = "/workspace";
+/** Binary used to drive smolvm. Overridable for dev/CI (e.g. a vendored build). */
+function smolBin() {
+    return process.env.SMOLVM_BIN || "smolvm";
+}
+/**
+ * OCI image the micro-VM boots. Reuses the lean lastlight sandbox image by
+ * default (agentic-pi + node + git + gh baked in); the image must be
+ * resolvable by smolvm (see the spike plan's verification steps).
+ */
+function smolImage() {
+    return process.env.SMOLVM_IMAGE || "lastlight-sandbox:latest";
+}
+/** Cached probe — only check the smolvm binary once per process. */
+let _smolAvailable = null;
+/** True when the smolvm CLI is invocable on this host. */
+export function smolAvailable() {
+    if (_smolAvailable === null) {
+        try {
+            execFileSync(smolBin(), ["--version"], { stdio: "ignore", timeout: 5000 });
+            _smolAvailable = true;
+            console.log(`[smol] smolvm available (image: ${smolImage()})`);
+        }
+        catch {
+            _smolAvailable = false;
+            console.log("[smol] smolvm CLI not available — smol backend unavailable");
+        }
+    }
+    return _smolAvailable;
+}
+const THINKING = new Set(["off", "minimal", "low", "medium", "high", "xhigh"]);
+const PROFILES = new Set(["read", "issues-write", "review-write", "repo-write"]);
+const WEB_SEARCH_PROVIDERS = new Set(["tavily", "brave", "exa"]);
+const HOST_RE = /^[A-Za-z0-9.-]+$/;
+const ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const PATH_RE = /^[A-Za-z0-9/_.-]+$/;
+export class SmolSandbox {
+    config;
+    machines = new Map();
+    constructor(config) {
+        this.config = config;
+    }
+    /** Create + start a micro-VM with the workspace bind-mounted and egress locked. */
+    async create(opts) {
+        const machineName = `lastlight-smol-${sanitizeName(opts.taskId)}-${randomUUID().slice(0, 8)}`;
+        const worktreePath = resolve(opts.worktreePath);
+        //   smolvm machine create -n <name> -I <image> -v <host>:<guest> \
+        //     --net [--allow-host <h>]...
+        //   smolvm machine start --name <name>
+        const allowFlags = (await this.resolvableAllowHosts()).flatMap((h) => ["--allow-host", h]);
+        const args = [
+            "machine", "create",
+            "-n", machineName,
+            "-I", this.config.imageName || smolImage(),
+            "-v", `${worktreePath}:${SMOL_WORKSPACE_DIR}`,
+            "--net",
+            ...allowFlags,
+        ];
+        try {
+            execCmd(smolBin(), args, { timeout: 60_000 });
+            execCmd(smolBin(), ["machine", "start", "--name", machineName], { timeout: 120_000 });
+        }
+        catch (err) {
+            execSafe(smolBin(), ["machine", "delete", "-f", "--name", machineName]);
+            throw new Error(`Failed to create smol sandbox: ${err.message}`);
+        }
+        console.log(`[smol] Created: ${machineName}`);
+        await this.waitForReady(machineName);
+        const hostWorkspace = await this.resolveHostWorkspace(machineName, worktreePath);
+        const info = { machineName, worktreePath, hostWorkspace };
+        this.machines.set(opts.taskId, info);
+        return info;
+    }
+    /**
+     * Discover the host directory that backs the guest workspace mount. Writes a
+     * sentinel file from inside the guest at {@link SMOL_WORKSPACE_DIR}, then
+     * locates it under the mount source on the host — its parent dir is the
+     * host-side workspace root. Falls back to the source root if not found
+     * (e.g. a future smolvm that shares the source directly and the scan misses).
+     */
+    async resolveHostWorkspace(machineName, worktreePath) {
+        const sentinel = `.smol-probe-${randomUUID().slice(0, 8)}`;
+        try {
+            await execFileAsync(smolBin(), ["machine", "exec", "--name", machineName, "--", "sh", "-c", `: > ${SMOL_WORKSPACE_DIR}/${sentinel}`], { timeout: 10_000 });
+            const hit = findFileUnder(worktreePath, sentinel, 4);
+            await execFileAsync(smolBin(), ["machine", "exec", "--name", machineName, "--", "rm", "-f", `${SMOL_WORKSPACE_DIR}/${sentinel}`], { timeout: 10_000 }).catch(() => { });
+            if (hit) {
+                const dir = hit.slice(0, hit.length - sentinel.length - 1);
+                if (dir !== worktreePath)
+                    console.log(`[smol] Workspace share lands at ${dir} (not the source root)`);
+                return dir;
+            }
+        }
+        catch (err) {
+            console.warn(`[smol] Could not probe workspace mount (${err.message}) — assuming source root`);
+        }
+        return worktreePath;
+    }
+    /** Wait until the machine can run a trivial command (boot completion). */
+    async waitForReady(machineName, timeoutMs = 20000) {
+        const start = Date.now();
+        while (Date.now() - start < timeoutMs) {
+            try {
+                await execFileAsync(smolBin(), ["machine", "exec", "--name", machineName, "--", "true"], { timeout: 5000 });
+                return;
+            }
+            catch {
+                await new Promise((r) => setTimeout(r, 500));
+            }
+        }
+        console.warn(`[smol] Timed out waiting for ${machineName} to be ready — proceeding anyway`);
+    }
+    /**
+     * Run `agentic-pi run --sandbox none …` inside the machine. Mirrors
+     * {@link DockerSandbox.runAgent}: streams stdout line-by-line for the live
+     * shim and writes the prompt to the child's stdin (`-i`). The agentic-pi
+     * argv is passed directly after `--` (no `sh -c`), so no shell quoting.
+     */
+    async runAgent(taskId, prompt, opts) {
+        const info = this.machines.get(taskId);
+        if (!info)
+            throw new Error(`No smol machine for task ${taskId}`);
+        const model = opts?.model || "anthropic/claude-sonnet-4-6";
+        const timeout = this.config.timeoutSeconds || 1800;
+        const piArgs = ["agentic-pi", "run", "--model", model, "--sandbox", "none"];
+        if (opts?.thinking) {
+            if (!THINKING.has(opts.thinking)) {
+                throw new Error(`Refusing to pass thinking "${opts.thinking}" — must be one of ${[...THINKING].join("|")}`);
+            }
+            piArgs.push("--thinking", opts.thinking);
+        }
+        if (opts?.profile) {
+            if (!PROFILES.has(opts.profile)) {
+                throw new Error(`Refusing to pass profile "${opts.profile}" — must be one of ${[...PROFILES].join("|")}`);
+            }
+            piArgs.push("--profile", opts.profile);
+        }
+        if (opts?.webSearch === true) {
+            if (opts.webSearchProvider) {
+                if (!WEB_SEARCH_PROVIDERS.has(opts.webSearchProvider)) {
+                    throw new Error(`Refusing to pass web-search-provider "${opts.webSearchProvider}" — must be one of ${[...WEB_SEARCH_PROVIDERS].join("|")}`);
+                }
+                piArgs.push("--web-search-provider", opts.webSearchProvider);
+            }
+        }
+        else {
+            piArgs.push("--no-web-search");
+        }
+        for (const dir of opts?.skillDirs ?? []) {
+            if (!dir.startsWith(SMOL_WORKSPACE_DIR) || !PATH_RE.test(dir)) {
+                throw new Error(`Refusing to pass skill dir "${dir}" — must live under ${SMOL_WORKSPACE_DIR}`);
+            }
+            piArgs.push("--skill", dir);
+        }
+        if (!PATH_RE.test(model)) {
+            throw new Error(`Refusing to pass model "${model}" — bad charset`);
+        }
+        // Passed as a single argv token each (no shell), so `KEY=VALUE` is literal.
+        for (const [k, v] of Object.entries(opts?.sandboxEnv ?? {})) {
+            if (!ENV_KEY_RE.test(k))
+                throw new Error(`Refusing sandbox-env key "${k}" — bad charset`);
+            if (/[\n\r]/.test(v))
+                throw new Error(`Refusing sandbox-env value for "${k}" — contains newline`);
+            piArgs.push("--sandbox-env", `${k}=${v}`);
+        }
+        const workdir = opts?.agentCwd ?? SMOL_WORKSPACE_DIR;
+        if (!workdir.startsWith(SMOL_WORKSPACE_DIR) || !PATH_RE.test(workdir)) {
+            throw new Error(`Refusing to pass agent cwd "${workdir}" — must live under ${SMOL_WORKSPACE_DIR}`);
+        }
+        const { flags: secretFlags, childEnv } = this.secretEnv();
+        const argv = [
+            "machine", "exec", "--name", info.machineName,
+            "-w", workdir, "-i",
+            ...secretFlags,
+            "--", ...piArgs,
+        ];
+        const STDERR_TAIL_BYTES = 8 * 1024;
+        return await new Promise((resolvePromise, reject) => {
+            const child = spawn(smolBin(), argv, { stdio: ["pipe", "pipe", "pipe"], env: childEnv });
+            child.stdin.write(prompt);
+            child.stdin.end();
+            let stderrTail = "";
+            let buf = "";
+            const timer = setTimeout(() => {
+                child.kill("SIGKILL");
+                reject(new Error(`Smol agent timed out after ${timeout}s`));
+            }, timeout * 1000);
+            child.stdout.setEncoding("utf-8");
+            child.stdout.on("data", (chunk) => {
+                if (!opts?.onLine)
+                    return;
+                buf += chunk;
+                let nl;
+                while ((nl = buf.indexOf("\n")) >= 0) {
+                    const line = buf.slice(0, nl);
+                    buf = buf.slice(nl + 1);
+                    if (line.length > 0) {
+                        try {
+                            opts.onLine(line);
+                        }
+                        catch { /* swallow listener errors */ }
+                    }
+                }
+            });
+            child.stderr.setEncoding("utf-8");
+            child.stderr.on("data", (chunk) => {
+                stderrTail += chunk;
+                if (stderrTail.length > STDERR_TAIL_BYTES)
+                    stderrTail = stderrTail.slice(-STDERR_TAIL_BYTES);
+            });
+            child.on("error", (err) => {
+                clearTimeout(timer);
+                reject(new Error(`Smol agent spawn failed: ${err.message}`));
+            });
+            child.on("close", (code) => {
+                clearTimeout(timer);
+                if (buf.length > 0 && opts?.onLine) {
+                    try {
+                        opts.onLine(buf);
+                    }
+                    catch { /* ignore */ }
+                }
+                if (code === 0)
+                    resolvePromise();
+                else
+                    reject(new Error(`Smol agent failed (exit ${code}): ${stderrTail || "no output"}`));
+            });
+        });
+    }
+    /**
+     * Run a deterministic shell command in the machine and resolve with its exit
+     * code + bounded output. Non-agent sibling of {@link runAgent}; powers
+     * `type: bash` / `type: script` phases. The command is a shell string, so it
+     * runs under `sh -c`.
+     */
+    async runCommand(taskId, command, opts) {
+        const info = this.machines.get(taskId);
+        if (!info)
+            throw new Error(`No smol machine for task ${taskId}`);
+        const timeout = opts?.timeoutSeconds || this.config.timeoutSeconds || 1800;
+        const workdir = opts?.cwd ?? SMOL_WORKSPACE_DIR;
+        if (!workdir.startsWith(SMOL_WORKSPACE_DIR) || !PATH_RE.test(workdir)) {
+            throw new Error(`Refusing to run command in cwd "${workdir}" — must live under ${SMOL_WORKSPACE_DIR}`);
+        }
+        const envFlags = [];
+        for (const [k, v] of Object.entries(opts?.sandboxEnv ?? {})) {
+            if (!ENV_KEY_RE.test(k))
+                throw new Error(`Refusing sandbox-env key "${k}" — bad charset`);
+            if (/[\n\r]/.test(v))
+                throw new Error(`Refusing sandbox-env value for "${k}" — contains newline`);
+            envFlags.push("-e", `${k}=${v}`);
+        }
+        const { flags: secretFlags, childEnv } = this.secretEnv();
+        const argv = [
+            "machine", "exec", "--name", info.machineName,
+            "-w", workdir,
+            ...envFlags, ...secretFlags,
+            "--", "sh", "-c", command,
+        ];
+        const STDOUT_TAIL_BYTES = 256 * 1024;
+        const STDERR_TAIL_BYTES = 32 * 1024;
+        return await new Promise((resolvePromise, reject) => {
+            const child = spawn(smolBin(), argv, { stdio: ["ignore", "pipe", "pipe"], env: childEnv });
+            let stdoutTail = "";
+            let stderrTail = "";
+            let buf = "";
+            let timedOut = false;
+            const timer = setTimeout(() => {
+                timedOut = true;
+                child.kill("SIGKILL");
+            }, timeout * 1000);
+            child.stdout.setEncoding("utf-8");
+            child.stdout.on("data", (chunk) => {
+                stdoutTail += chunk;
+                if (stdoutTail.length > STDOUT_TAIL_BYTES)
+                    stdoutTail = stdoutTail.slice(-STDOUT_TAIL_BYTES);
+                if (!opts?.onLine)
+                    return;
+                buf += chunk;
+                let nl;
+                while ((nl = buf.indexOf("\n")) >= 0) {
+                    const line = buf.slice(0, nl);
+                    buf = buf.slice(nl + 1);
+                    if (line.length > 0) {
+                        try {
+                            opts.onLine(line);
+                        }
+                        catch { /* swallow listener errors */ }
+                    }
+                }
+            });
+            child.stderr.setEncoding("utf-8");
+            child.stderr.on("data", (chunk) => {
+                stderrTail += chunk;
+                if (stderrTail.length > STDERR_TAIL_BYTES)
+                    stderrTail = stderrTail.slice(-STDERR_TAIL_BYTES);
+            });
+            child.on("error", (err) => {
+                clearTimeout(timer);
+                reject(new Error(`Smol command spawn failed: ${err.message}`));
+            });
+            child.on("close", (code) => {
+                clearTimeout(timer);
+                if (buf.length > 0 && opts?.onLine) {
+                    try {
+                        opts.onLine(buf);
+                    }
+                    catch { /* ignore */ }
+                }
+                resolvePromise({
+                    exitCode: timedOut ? 124 : (code ?? 1),
+                    stdout: stdoutTail,
+                    stderr: stderrTail,
+                    timedOut,
+                });
+            });
+        });
+    }
+    /** Stop + delete the machine. */
+    async destroy(taskId) {
+        const info = this.machines.get(taskId);
+        if (!info)
+            return;
+        execSafe(smolBin(), ["machine", "stop", "--name", info.machineName]);
+        execSafe(smolBin(), ["machine", "delete", "-f", "--name", info.machineName]);
+        this.machines.delete(taskId);
+        console.log(`[smol] Destroyed: ${info.machineName}`);
+    }
+    /**
+     * The allowlist hosts that smolvm can actually use, in original order.
+     *
+     * smolvm resolves every `--allow-host` to its IP(s) AT VM START and aborts
+     * `create` if ANY entry fails to resolve. Our `egress-allowlist.ts` follows an
+     * apex+subdomain convention (e.g. `githubusercontent.com`), and some of those
+     * bare apexes have no A record — they'd abort the whole VM. So we pre-resolve
+     * here and drop the unresolvable ones.
+     *
+     * CAVEAT: unlike docker (SNI) / gondolin (hostname), smolvm's filter is
+     * IP-pinned at start — `--allow-host github.com` allows github.com's IPs only,
+     * NOT api.github.com or rotating CDN IPs. A faithful apex+subdomain policy
+     * would need each concrete subdomain enumerated; that's a spike gap.
+     */
+    async resolvableAllowHosts() {
+        if (!this.config.allowHosts)
+            return [];
+        const ok = new Set();
+        const dropped = [];
+        await Promise.all(this.config.allowHosts.map(async (h) => {
+            if (!HOST_RE.test(h))
+                throw new Error(`Refusing to pass allow-host "${h}" — bad charset`);
+            try {
+                await lookup(h);
+                ok.add(h);
+            }
+            catch {
+                dropped.push(h);
+            }
+        }));
+        if (dropped.length) {
+            console.warn(`[smol] Dropping unresolvable allow-host entries (smolvm resolves each at VM start): ${dropped.join(", ")}`);
+        }
+        return this.config.allowHosts.filter((h) => ok.has(h));
+    }
+    /**
+     * Build `--secret-env GUEST=GUEST` flags for every machine-env var plus the
+     * child-process env that carries their values, so secrets (tokens, provider
+     * keys) reach the guest via smolvm's secret channel rather than the argv.
+     */
+    secretEnv() {
+        const flags = [];
+        const childEnv = { ...process.env };
+        for (const [k, v] of Object.entries(this.config.env)) {
+            if (!ENV_KEY_RE.test(k) || /[\n\r]/.test(v))
+                continue;
+            flags.push("--secret-env", `${k}=${k}`);
+            childEnv[k] = v;
+        }
+        return { flags, childEnv };
+    }
+}
+/** Strip a taskId down to the charset smolvm accepts in a machine name. */
+function sanitizeName(taskId) {
+    return taskId.replace(/[^A-Za-z0-9_-]/g, "-").slice(0, 48);
+}
+/**
+ * Depth-limited search for a file named `name` under `root`, returning its
+ * absolute path (or null). Used to locate the mount-probe sentinel; the share
+ * lands at most a couple of levels deep, so a shallow walk suffices and avoids
+ * descending into a large checkout.
+ */
+function findFileUnder(root, name, maxDepth) {
+    if (!existsSync(root))
+        return null;
+    let entries;
+    try {
+        entries = readdirSync(root, { withFileTypes: true });
+    }
+    catch {
+        return null;
+    }
+    for (const e of entries) {
+        if (e.isFile() && e.name === name)
+            return join(root, name);
+    }
+    if (maxDepth <= 0)
+        return null;
+    for (const e of entries) {
+        if (e.isDirectory()) {
+            const hit = findFileUnder(join(root, e.name), name, maxDepth - 1);
+            if (hit)
+                return hit;
+        }
+    }
+    return null;
+}
+function execCmd(cmd, args, opts) {
+    return execFileSync(cmd, args, {
+        encoding: "utf-8",
+        stdio: ["pipe", "pipe", "pipe"],
+        timeout: opts?.timeout,
+    });
+}
+function execSafe(cmd, args) {
+    try {
+        execFileSync(cmd, args, { stdio: "ignore" });
+    }
+    catch { /* ignore */ }
+}
+//# sourceMappingURL=smol.js.map

package/dist/sandbox/smol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smol.js","sourceRoot":"","sources":["../../src/sandbox/smol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,IAAI,UAAU,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,aAAa,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAE/C,mFAAmF;AACnF,SAAS,OAAO;IACd,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,0BAA0B,CAAC;AAChE,CAAC;AAED,oEAAoE;AACpE,IAAI,cAAc,GAAmB,IAAI,CAAC;AAE1C,0DAA0D;AAC1D,MAAM,UAAU,aAAa;IAC3B,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,cAAc,GAAG,IAAI,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,mCAAmC,SAAS,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,GAAG,KAAK,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAmCD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC/E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;AACjF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AACjE,MAAM,OAAO,GAAG,kBAAkB,CAAC;AACnC,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAC9C,MAAM,OAAO,GAAG,oBAAoB,CAAC;AAErC,MAAM,OAAO,WAAW;IACd,MAAM,CAAoB;IAC1B,QAAQ,GAAiC,IAAI,GAAG,EAAE,CAAC;IAE3D,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,MAAM,CAAC,IAA8C;QACzD,MAAM,WAAW,GAAG,kBAAkB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEhD,mEAAmE;QACnE,kCAAkC;QAClC,uCAAuC;QACvC,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG;YACX,SAAS,EAAE,QAAQ;YACnB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE;YAC1C,IAAI,EAAE,GAAG,YAAY,IAAI,kBAAkB,EAAE;YAC7C,OAAO;YACP,GAAG,UAAU;SACd,CAAC;QACF,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,WAAW,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACjF,MAAM,IAAI,GAAoB,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;QAC3E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,oBAAoB,CAAC,WAAmB,EAAE,YAAoB;QAC1E,MAAM,QAAQ,GAAG,eAAe,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,aAAa,CACjB,OAAO,EAAE,EACT,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,kBAAkB,IAAI,QAAQ,EAAE,CAAC,EACrG,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAC;YACF,MAAM,GAAG,GAAG,aAAa,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YACrD,MAAM,aAAa,CACjB,OAAO,EAAE,EACT,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,kBAAkB,IAAI,QAAQ,EAAE,CAAC,EACjG,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAqB,CAAC,CAAC,CAAC;YACrC,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC3D,IAAI,GAAG,KAAK,YAAY;oBAAE,OAAO,CAAC,GAAG,CAAC,mCAAmC,GAAG,wBAAwB,CAAC,CAAC;gBACtG,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,2CAA2C,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,0EAA0E;IAClE,KAAK,CAAC,YAAY,CAAC,WAAmB,EAAE,SAAS,GAAG,KAAK;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5G,OAAO;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,gCAAgC,WAAW,kCAAkC,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CACZ,MAAc,EACd,MAAc,EACd,IAWC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QAEjE,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,6BAA6B,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QAEnD,MAAM,MAAM,GAAa,CAAC,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACtF,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,OAAO,sBAAsB,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5G,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC3B,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBACtD,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,iBAAiB,sBAAsB,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9I,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,uBAAuB,kBAAkB,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,iBAAiB,CAAC,CAAC;QACrE,CAAC;QACD,4EAA4E;QAC5E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,iBAAiB,CAAC,CAAC;YAC1F,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,sBAAsB,CAAC,CAAC;YAClG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,EAAE,QAAQ,IAAI,kBAAkB,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,uBAAuB,kBAAkB,EAAE,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG;YACX,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC7C,IAAI,EAAE,OAAO,EAAE,IAAI;YACnB,GAAG,WAAW;YACd,IAAI,EAAE,GAAG,MAAM;SAChB,CAAC;QAEF,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAC;QACnC,OAAO,MAAM,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;YACxD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzF,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAClB,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,IAAI,GAAG,GAAG,EAAE,CAAC;YAEb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,OAAO,GAAG,CAAC,CAAC,CAAC;YAC9D,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;YAEnB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,IAAI,CAAC,IAAI,EAAE,MAAM;oBAAE,OAAO;gBAC1B,GAAG,IAAI,KAAK,CAAC;gBACb,IAAI,EAAU,CAAC;gBACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;oBACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpB,IAAI,CAAC;4BAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,UAAU,IAAI,KAAK,CAAC;gBACpB,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB;oBAAE,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC/F,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;oBACnC,IAAI,CAAC;wBAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBAClD,CAAC;gBACD,IAAI,IAAI,KAAK,CAAC;oBAAE,cAAc,EAAE,CAAC;;oBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;YAC3F,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CACd,MAAc,EACd,OAAe,EACf,IAMC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QAEjE,MAAM,OAAO,GAAG,IAAI,EAAE,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QAC3E,MAAM,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,kBAAkB,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,uBAAuB,kBAAkB,EAAE,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,iBAAiB,CAAC,CAAC;YAC1F,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,sBAAsB,CAAC,CAAC;YAClG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG;YACX,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC7C,IAAI,EAAE,OAAO;YACb,GAAG,QAAQ,EAAE,GAAG,WAAW;YAC3B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO;SAC1B,CAAC;QAEF,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;QACrC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;QACpC,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;YAClD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3F,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;YAEnB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,UAAU,IAAI,KAAK,CAAC;gBACpB,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB;oBAAE,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;gBAC7F,IAAI,CAAC,IAAI,EAAE,MAAM;oBAAE,OAAO;gBAC1B,GAAG,IAAI,KAAK,CAAC;gBACb,IAAI,EAAU,CAAC;gBACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;oBACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpB,IAAI,CAAC;4BAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,UAAU,IAAI,KAAK,CAAC;gBACpB,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB;oBAAE,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC/F,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;oBACnC,IAAI,CAAC;wBAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBAClD,CAAC;gBACD,cAAc,CAAC;oBACb,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;oBACtC,MAAM,EAAE,UAAU;oBAClB,MAAM,EAAE,UAAU;oBAClB,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACrE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,KAAK,CAAC,oBAAoB;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACvD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,iBAAiB,CAAC,CAAC;YAC1F,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;gBAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAChE,CAAC,CAAC,CAAC,CAAC;QACJ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,uFAAuF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IAED;;;;OAIG;IACK,SAAS;QACf,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,SAAS;YACtD,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC7B,CAAC;CACF;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,QAAgB;IACjE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,OAA8B,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;YAClE,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,IAAc,EAAE,IAA2B;IACvE,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE;QAC7B,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,OAAO;KACvB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAc;IAC3C,IAAI,CAAC;QAAC,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AAC9E,CAAC"}

package/dist/skills-install.d.ts

@@ -0,0 +1,12 @@
+export type SkillScope = "user" | "project";
+export interface SkillsOpts {
+    /** Install scope — `user` (~/.claude) or `project` (<cwd>/.claude). Default `user`. */
+    scope?: SkillScope;
+    /** Skip the `claude` marketplace path and always copy skill dirs directly. */
+    noMarketplace?: boolean;
+}
+export declare function skillsInstall(opts: SkillsOpts): Promise<void>;
+export declare function skillsList(opts: SkillsOpts): Promise<void>;
+export declare function skillsUninstall(opts: SkillsOpts): Promise<void>;
+/** Entry point dispatched from `src/cli.ts` for `lastlight skills …`. */
+export declare function skills(args: string[], opts: SkillsOpts): Promise<void>;