mcp-macos 2.0.0

package/dist/utils/binaryValidator.d.ts

@@ -0,0 +1,52 @@
+/**
+ * utils/binaryValidator.ts
+ * Secure binary path validation and integrity checking
+ */
+/**
+ * Security configuration for binary validation
+ */
+interface BinarySecurityConfig {
+    expectedHash?: string;
+    maxFileSize: number;
+    allowedPaths: string[];
+    requireAbsolutePath: boolean;
+}
+/**
+ * Binary validation error
+ */
+export declare class BinaryValidationError extends Error {
+    code: string;
+    constructor(message: string, code: string);
+}
+/**
+ * Validates binary path for security
+ */
+export declare function validateBinaryPath(binaryPath: string, config?: Partial<BinarySecurityConfig>): void;
+/**
+ * Calculates SHA256 hash of binary file
+ */
+export declare function calculateBinaryHash(binaryPath: string): string;
+/**
+ * Validates binary integrity using hash
+ */
+export declare function validateBinaryIntegrity(binaryPath: string, expectedHash: string): boolean;
+/**
+ * Comprehensive binary security validation
+ */
+export declare function validateBinarySecurity(binaryPath: string, config?: Partial<BinarySecurityConfig>): {
+    isValid: boolean;
+    hash?: string;
+    errors: string[];
+};
+/**
+ * Secure binary path finder with validation
+ */
+export declare function findSecureBinaryPath(possiblePaths: string[], config?: Partial<BinarySecurityConfig>): {
+    path: string | null;
+    validationResult?: ReturnType<typeof validateBinarySecurity>;
+};
+/**
+ * Environment-specific binary validation
+ */
+export declare function getEnvironmentBinaryConfig(): Partial<BinarySecurityConfig>;
+export {};

package/dist/utils/binaryValidator.js

@@ -0,0 +1,152 @@
+/**
+ * utils/binaryValidator.ts
+ * Secure binary path validation and integrity checking
+ */
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * Default security configuration
+ */
+const DEFAULT_CONFIG = {
+    maxFileSize: 50 * 1024 * 1024, // 50MB max
+    allowedPaths: ['/dist/swift/bin/', '/src/swift/bin/', '/swift/bin/'],
+    requireAbsolutePath: true,
+};
+/**
+ * Binary validation error
+ */
+export class BinaryValidationError extends Error {
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'BinaryValidationError';
+    }
+}
+/**
+ * Validates binary path for security
+ */
+export function validateBinaryPath(binaryPath, config = {}) {
+    const fullConfig = { ...DEFAULT_CONFIG, ...config };
+    if (fullConfig.requireAbsolutePath && !path.isAbsolute(binaryPath)) {
+        throw new BinaryValidationError('Binary path must be absolute', 'INVALID_PATH');
+    }
+    const normalizedPath = path.normalize(binaryPath);
+    if (normalizedPath.includes('..')) {
+        throw new BinaryValidationError('Path traversal detected in binary path', 'PATH_TRAVERSAL');
+    }
+    if (!fullConfig.allowedPaths.some((p) => normalizedPath.includes(p))) {
+        throw new BinaryValidationError('Binary path not in allowed directories', 'FORBIDDEN_PATH');
+    }
+    if (!fs.existsSync(normalizedPath)) {
+        throw new BinaryValidationError(`Binary file not found: ${normalizedPath}`, 'FILE_NOT_FOUND');
+    }
+    const stats = fs.statSync(normalizedPath);
+    if (!stats.isFile()) {
+        throw new BinaryValidationError('Binary path does not point to a file', 'NOT_A_FILE');
+    }
+    if (stats.size > fullConfig.maxFileSize) {
+        throw new BinaryValidationError(`Binary file too large: ${stats.size} bytes`, 'FILE_TOO_LARGE');
+    }
+    try {
+        fs.accessSync(normalizedPath, fs.constants.X_OK);
+    }
+    catch (_error) {
+        throw new BinaryValidationError('Binary file is not executable', 'NOT_EXECUTABLE');
+    }
+}
+/**
+ * Calculates SHA256 hash of binary file
+ */
+export function calculateBinaryHash(binaryPath) {
+    try {
+        const fileBuffer = fs.readFileSync(binaryPath);
+        return crypto.createHash('sha256').update(fileBuffer).digest('hex');
+    }
+    catch (error) {
+        throw new BinaryValidationError(`Failed to calculate binary hash: ${error.message}`, 'HASH_CALCULATION_FAILED');
+    }
+}
+/**
+ * Validates binary integrity using hash
+ */
+export function validateBinaryIntegrity(binaryPath, expectedHash) {
+    try {
+        const actualHash = calculateBinaryHash(binaryPath);
+        const isValid = actualHash === expectedHash;
+        return isValid;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Comprehensive binary security validation
+ */
+export function validateBinarySecurity(binaryPath, config = {}) {
+    const errors = [];
+    let hash;
+    try {
+        // Path validation
+        validateBinaryPath(binaryPath, config);
+        // Calculate hash
+        hash = calculateBinaryHash(binaryPath);
+        // Integrity check if expected hash provided
+        if (config.expectedHash) {
+            const integrityValid = validateBinaryIntegrity(binaryPath, config.expectedHash);
+            if (!integrityValid) {
+                errors.push('Binary integrity check failed - hash mismatch');
+            }
+        }
+    }
+    catch (error) {
+        if (error instanceof BinaryValidationError) {
+            errors.push(`${error.code}: ${error.message}`);
+        }
+        else {
+            errors.push(`Unexpected validation error: ${error.message}`);
+        }
+    }
+    return {
+        isValid: errors.length === 0,
+        hash,
+        errors,
+    };
+}
+/**
+ * Secure binary path finder with validation
+ */
+export function findSecureBinaryPath(possiblePaths, config = {}) {
+    for (const binaryPath of possiblePaths) {
+        const validationResult = validateBinarySecurity(binaryPath, config);
+        if (validationResult.isValid) {
+            return { path: binaryPath, validationResult };
+        }
+    }
+    return { path: null };
+}
+/**
+ * Environment-specific binary validation
+ */
+export function getEnvironmentBinaryConfig() {
+    if (process.env.NODE_ENV === 'test') {
+        // Relaxed validation for testing
+        return {
+            requireAbsolutePath: false,
+            maxFileSize: 100 * 1024 * 1024, // 100MB for test
+        };
+    }
+    if (process.env.NODE_ENV === 'development') {
+        // Development mode - log more details
+        return {
+            maxFileSize: 100 * 1024 * 1024, // 100MB for dev
+        };
+    }
+    // Production mode - strict validation
+    return {
+        expectedHash: process.env.SWIFT_BINARY_HASH,
+        maxFileSize: 50 * 1024 * 1024, // 50MB
+        requireAbsolutePath: true,
+    };
+}
+//# sourceMappingURL=binaryValidator.js.map

package/dist/utils/binaryValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binaryValidator.js","sourceRoot":"","sources":["../../src/utils/binaryValidator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B;;GAEG;AACH,MAAM,cAAc,GAAyB;IAC3C,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,WAAW;IAC1C,YAAY,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,CAAC;IACpE,mBAAmB,EAAE,IAAI;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YACE,OAAe,EACR,IAAY;QAEnB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFR,SAAI,GAAJ,IAAI,CAAQ;QAGnB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,SAAwC,EAAE;IAE1C,MAAM,UAAU,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAEpD,IAAI,UAAU,CAAC,mBAAmB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,qBAAqB,CAC7B,8BAA8B,EAC9B,cAAc,CACf,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,qBAAqB,CAC7B,wCAAwC,EACxC,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,qBAAqB,CAC7B,wCAAwC,EACxC,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,qBAAqB,CAC7B,0BAA0B,cAAc,EAAE,EAC1C,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,qBAAqB,CAC7B,sCAAsC,EACtC,YAAY,CACb,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,qBAAqB,CAC7B,0BAA0B,KAAK,CAAC,IAAI,QAAQ,EAC5C,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,MAAM,IAAI,qBAAqB,CAC7B,+BAA+B,EAC/B,gBAAgB,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,qBAAqB,CAC7B,oCAAqC,KAAe,CAAC,OAAO,EAAE,EAC9D,yBAAyB,CAC1B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAkB,EAClB,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,UAAU,KAAK,YAAY,CAAC;QAE5C,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,SAAwC,EAAE;IAM1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAwB,CAAC;IAE7B,IAAI,CAAC;QACH,kBAAkB;QAClB,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAEvC,iBAAiB;QACjB,IAAI,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAEvC,4CAA4C;QAC5C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,cAAc,GAAG,uBAAuB,CAC5C,UAAU,EACV,MAAM,CAAC,YAAY,CACpB,CAAC;YACF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,gCAAiC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC5B,IAAI;QACJ,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,aAAuB,EACvB,SAAwC,EAAE;IAK1C,KAAK,MAAM,UAAU,IAAI,aAAa,EAAE,CAAC;QACvC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAEpE,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B;IACxC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACpC,iCAAiC;QACjC,OAAO;YACL,mBAAmB,EAAE,KAAK;YAC1B,WAAW,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,iBAAiB;SAClD,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC3C,sCAAsC;QACtC,OAAO;YACL,WAAW,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,gBAAgB;SACjD,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC3C,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;QACtC,mBAAmB,EAAE,IAAI;KAC1B,CAAC;AACJ,CAAC"}

package/dist/utils/calendarRepository.d.ts

@@ -0,0 +1,25 @@
+/**
+ * calendarRepository.ts
+ * Repository pattern implementation for calendar event data access operations using EventKitCLI.
+ */
+import type { Calendar, CalendarEvent } from '../types/index.js';
+import type { CreateEventData, EventJSON, UpdateEventData } from '../types/repository.js';
+declare class CalendarRepository {
+    private readEvents;
+    private formatDate;
+    private defaultStartDate;
+    private defaultEndDate;
+    findEventById(id: string): Promise<CalendarEvent>;
+    findEvents(filters?: {
+        startDate?: string;
+        endDate?: string;
+        calendarName?: string;
+        search?: string;
+    }): Promise<CalendarEvent[]>;
+    findAllCalendars(): Promise<Calendar[]>;
+    createEvent(data: CreateEventData): Promise<EventJSON>;
+    updateEvent(data: UpdateEventData): Promise<EventJSON>;
+    deleteEvent(id: string): Promise<void>;
+}
+export declare const calendarRepository: CalendarRepository;
+export {};

package/dist/utils/calendarRepository.js

@@ -0,0 +1,100 @@
+/**
+ * calendarRepository.ts
+ * Repository pattern implementation for calendar event data access operations using EventKitCLI.
+ */
+import { executeCli } from './cliExecutor.js';
+import { addOptionalArg, addOptionalBooleanArg, addOptionalNumberArg, nullToUndefined, } from './helpers.js';
+class CalendarRepository {
+    async readEvents(startDate, endDate, calendarName, search) {
+        const args = ['--action', 'read-events'];
+        addOptionalArg(args, '--startDate', startDate);
+        addOptionalArg(args, '--endDate', endDate);
+        addOptionalArg(args, '--filterCalendar', calendarName);
+        addOptionalArg(args, '--search', search);
+        return executeCli(args);
+    }
+    formatDate(d) {
+        return `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, '0')}-${String(d.getDate()).padStart(2, '0')} 00:00:00`;
+    }
+    defaultStartDate() {
+        const now = new Date();
+        return this.formatDate(new Date(now.getFullYear() - 2, now.getMonth(), now.getDate()));
+    }
+    defaultEndDate() {
+        const now = new Date();
+        return this.formatDate(new Date(now.getFullYear() + 2, now.getMonth(), now.getDate()));
+    }
+    async findEventById(id) {
+        // EventKit requires bounded date range — distantPast/distantFuture returns 0 events
+        const { events } = await this.readEvents(this.defaultStartDate(), this.defaultEndDate());
+        const event = events.find((e) => e.id === id);
+        if (!event) {
+            throw new Error(`Event with ID '${id}' not found.`);
+        }
+        return nullToUndefined(event, [
+            'notes',
+            'location',
+            'url',
+            'attendees',
+        ]);
+    }
+    async findEvents(filters = {}) {
+        // EventKit requires bounded date range — distantPast/distantFuture returns 0 events
+        const startDate = filters.startDate ?? this.defaultStartDate();
+        const endDate = filters.endDate ?? this.defaultEndDate();
+        const { events } = await this.readEvents(startDate, endDate, filters.calendarName, filters.search);
+        return events.map((e) => nullToUndefined(e, ['notes', 'location', 'url', 'attendees']));
+    }
+    async findAllCalendars() {
+        return executeCli(['--action', 'read-calendars']);
+    }
+    async createEvent(data) {
+        const args = [
+            '--action',
+            'create-event',
+            '--title',
+            data.title,
+            '--startDate',
+            data.startDate,
+            '--endDate',
+            data.endDate,
+        ];
+        addOptionalArg(args, '--targetCalendar', data.calendar);
+        addOptionalArg(args, '--note', data.notes);
+        addOptionalArg(args, '--location', data.location);
+        addOptionalArg(args, '--url', data.url);
+        addOptionalBooleanArg(args, '--isAllDay', data.isAllDay);
+        // Recurrence parameters
+        if (data.recurrence) {
+            addOptionalArg(args, '--recurrence', data.recurrence.frequency);
+            addOptionalNumberArg(args, '--recurrenceInterval', data.recurrence.interval);
+            addOptionalArg(args, '--recurrenceEnd', data.recurrence.endDate);
+            addOptionalNumberArg(args, '--recurrenceCount', data.recurrence.occurrenceCount);
+        }
+        return executeCli(args);
+    }
+    async updateEvent(data) {
+        const args = ['--action', 'update-event', '--id', data.id];
+        addOptionalArg(args, '--title', data.title);
+        addOptionalArg(args, '--targetCalendar', data.calendar);
+        addOptionalArg(args, '--startDate', data.startDate);
+        addOptionalArg(args, '--endDate', data.endDate);
+        addOptionalArg(args, '--note', data.notes);
+        addOptionalArg(args, '--location', data.location);
+        addOptionalArg(args, '--url', data.url);
+        addOptionalBooleanArg(args, '--isAllDay', data.isAllDay);
+        // Recurrence parameters
+        if (data.recurrence) {
+            addOptionalArg(args, '--recurrence', data.recurrence.frequency);
+            addOptionalNumberArg(args, '--recurrenceInterval', data.recurrence.interval);
+            addOptionalArg(args, '--recurrenceEnd', data.recurrence.endDate);
+            addOptionalNumberArg(args, '--recurrenceCount', data.recurrence.occurrenceCount);
+        }
+        return executeCli(args);
+    }
+    async deleteEvent(id) {
+        await executeCli(['--action', 'delete-event', '--id', id]);
+    }
+}
+export const calendarRepository = new CalendarRepository();
+//# sourceMappingURL=calendarRepository.js.map

package/dist/utils/calendarRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendarRepository.js","sourceRoot":"","sources":["../../src/utils/calendarRepository.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB,MAAM,kBAAkB;IACd,KAAK,CAAC,UAAU,CACtB,SAAkB,EAClB,OAAgB,EAChB,YAAqB,EACrB,MAAe;QAEf,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACzC,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QAC/C,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC3C,cAAc,CAAC,IAAI,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC;QACvD,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAEzC,OAAO,UAAU,CAAmB,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEO,UAAU,CAAC,CAAO;QACxB,OAAO,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC;IAC5H,CAAC;IAEO,gBAAgB;QACtB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,UAAU,CACpB,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAC/D,CAAC;IACJ,CAAC;IAEO,cAAc;QACpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,UAAU,CACpB,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAC/D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU;QAC5B,oFAAoF;QACpF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CACtC,IAAI,CAAC,gBAAgB,EAAE,EACvB,IAAI,CAAC,cAAc,EAAE,CACtB,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,EAAE;YAC5B,OAAO;YACP,UAAU;YACV,KAAK;YACL,WAAW;SACZ,CAAkB,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,UAAU,CACd,UAKI,EAAE;QAEN,oFAAoF;QACpF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACzD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CACtC,SAAS,EACT,OAAO,EACP,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,MAAM,CACf,CAAC;QACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtB,eAAe,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAC3C,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,OAAO,UAAU,CAAiB,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAqB;QACrC,MAAM,IAAI,GAAG;YACX,UAAU;YACV,cAAc;YACd,SAAS;YACT,IAAI,CAAC,KAAK;YACV,aAAa;YACb,IAAI,CAAC,SAAS;YACd,WAAW;YACX,IAAI,CAAC,OAAO;SACb,CAAC;QACF,cAAc,CAAC,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,qBAAqB,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,wBAAwB;QACxB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAChE,oBAAoB,CAClB,IAAI,EACJ,sBAAsB,EACtB,IAAI,CAAC,UAAU,CAAC,QAAQ,CACzB,CAAC;YACF,cAAc,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjE,oBAAoB,CAClB,IAAI,EACJ,mBAAmB,EACnB,IAAI,CAAC,UAAU,CAAC,eAAe,CAChC,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAY,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAqB;QACrC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,cAAc,CAAC,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,qBAAqB,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,wBAAwB;QACxB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAChE,oBAAoB,CAClB,IAAI,EACJ,sBAAsB,EACtB,IAAI,CAAC,UAAU,CAAC,QAAQ,CACzB,CAAC;YACF,cAAc,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjE,oBAAoB,CAClB,IAAI,EACJ,mBAAmB,EACnB,IAAI,CAAC,UAAU,CAAC,eAAe,CAChC,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAY,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,MAAM,UAAU,CAAU,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;CACF;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC"}

package/dist/utils/cliExecutor.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @fileoverview Swift CLI execution and JSON response parsing
+ * @module utils/cliExecutor
+ * @description Executes the EventKitCLI binary for native macOS EventKit operations
+ */
+import { type PermissionDomain } from './permissionPrompt.js';
+/**
+ * Custom error class for permission-related failures
+ */
+export declare class CliPermissionError extends Error {
+    readonly domain: PermissionDomain;
+    constructor(message: string, domain: PermissionDomain);
+}
+/**
+ * Executes the EventKitCLI binary for native macOS EventKit operations
+ * @template T - Expected return type from the Swift CLI
+ * @param {string[]} args - Array of arguments to pass to the CLI
+ * @returns {Promise<T>} Parsed JSON result from the CLI
+ * @throws {Error} If binary not found, validation fails, or CLI execution fails
+ * @description
+ * - Locates binary using secure path validation
+ * - Parses JSON response from Swift CLI
+ * - Proactively triggers permission prompts via AppleScript on first access
+ * - Automatically retries with AppleScript fallback on permission errors
+ * @example
+ * const result = await executeCli<Reminder[]>(['--action', 'read', '--showCompleted', 'true']);
+ */
+export declare function executeCli<T>(args: string[]): Promise<T>;

package/dist/utils/cliExecutor.js

@@ -0,0 +1,196 @@
+/**
+ * @fileoverview Swift CLI execution and JSON response parsing
+ * @module utils/cliExecutor
+ * @description Executes the EventKitCLI binary for native macOS EventKit operations
+ */
+import { execFile } from 'node:child_process';
+import path from 'node:path';
+import { findSecureBinaryPath, getEnvironmentBinaryConfig, } from './binaryValidator.js';
+import { FILE_SYSTEM } from './constants.js';
+import { createCliPermissionHint } from './errorHandling.js';
+import { hasBeenPrompted, triggerPermissionPrompt, } from './permissionPrompt.js';
+import { findProjectRoot } from './projectUtils.js';
+const execFilePromise = (cliPath, args) => new Promise((resolve, reject) => {
+    execFile(cliPath, args, (error, stdout, stderr) => {
+        if (error) {
+            const execError = error;
+            execError.stdout = stdout;
+            execError.stderr = stderr;
+            reject(execError);
+            return;
+        }
+        resolve({ stdout, stderr });
+    });
+});
+/**
+ * Permission error patterns from the Swift CLI
+ */
+const PERMISSION_ERROR_PATTERNS = {
+    reminders: [
+        /reminder permission denied/i,
+        /reminders access denied/i,
+        /not authorized.*reminders/i,
+    ],
+    calendars: [
+        /calendar permission denied/i,
+        /calendar access denied/i,
+        /not authorized.*calendar/i,
+    ],
+};
+/**
+ * Calendar-specific action names used in Swift CLI
+ */
+const CALENDAR_ACTIONS = new Set([
+    'read-events',
+    'read-calendars',
+    'create-event',
+    'update-event',
+    'delete-event',
+]);
+/**
+ * Detects which permission domain an action requires
+ * @param args - CLI arguments array
+ * @returns The permission domain ('reminders' or 'calendars')
+ */
+function detectActionDomain(args) {
+    const actionIndex = args.indexOf('--action');
+    if (actionIndex !== -1 && actionIndex + 1 < args.length) {
+        const action = args[actionIndex + 1];
+        return CALENDAR_ACTIONS.has(action) ? 'calendars' : 'reminders';
+    }
+    return 'reminders'; // Default to reminders if action not found
+}
+/**
+ * Detects if an error message indicates a permission issue
+ * @param message - Error message to check
+ * @returns The permission domain if detected, null otherwise
+ */
+function detectPermissionError(message) {
+    for (const [domain, patterns] of Object.entries(PERMISSION_ERROR_PATTERNS)) {
+        if (patterns.some((pattern) => pattern.test(message))) {
+            return domain;
+        }
+    }
+    return null;
+}
+/**
+ * Custom error class for permission-related failures
+ */
+export class CliPermissionError extends Error {
+    constructor(message, domain) {
+        super(message);
+        this.domain = domain;
+        this.name = 'CliPermissionError';
+    }
+}
+/**
+ * Calendar action strings used in Swift CLI (different from MCP tool action names)
+ */
+const bufferToString = (data) => {
+    if (typeof data === 'string')
+        return data;
+    if (Buffer.isBuffer(data))
+        return data.toString('utf8');
+    return data == null ? null : String(data);
+};
+/**
+ * Parses JSON output from CLI
+ */
+const parseCliOutput = (output) => {
+    let parsed;
+    try {
+        parsed = JSON.parse(output);
+    }
+    catch (_error) {
+        throw new Error('EventKitCLI execution failed: Invalid CLI output');
+    }
+    if (parsed.status === 'success') {
+        return parsed.result;
+    }
+    // Check for permission errors and throw specialized error with actionable hint
+    const permissionDomain = detectPermissionError(parsed.message);
+    if (permissionDomain) {
+        const hint = createCliPermissionHint(permissionDomain);
+        throw new CliPermissionError(`${parsed.message} ${hint}`, permissionDomain);
+    }
+    throw new Error(parsed.message);
+};
+const runCli = async (cliPath, args) => {
+    try {
+        const { stdout } = await execFilePromise(cliPath, args);
+        const normalized = bufferToString(stdout);
+        if (!normalized) {
+            throw new Error('EventKitCLI execution failed: Empty CLI output');
+        }
+        return parseCliOutput(normalized);
+    }
+    catch (error) {
+        // Preserve CliPermissionError for retry logic
+        if (error instanceof CliPermissionError) {
+            throw error;
+        }
+        const execError = error;
+        const normalized = bufferToString(execError?.stdout);
+        if (normalized) {
+            return parseCliOutput(normalized);
+        }
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        throw new Error(`EventKitCLI execution failed: ${errorMessage}`);
+    }
+};
+/**
+ * Executes the EventKitCLI binary for native macOS EventKit operations
+ * @template T - Expected return type from the Swift CLI
+ * @param {string[]} args - Array of arguments to pass to the CLI
+ * @returns {Promise<T>} Parsed JSON result from the CLI
+ * @throws {Error} If binary not found, validation fails, or CLI execution fails
+ * @description
+ * - Locates binary using secure path validation
+ * - Parses JSON response from Swift CLI
+ * - Proactively triggers permission prompts via AppleScript on first access
+ * - Automatically retries with AppleScript fallback on permission errors
+ * @example
+ * const result = await executeCli<Reminder[]>(['--action', 'read', '--showCompleted', 'true']);
+ */
+export async function executeCli(args) {
+    const projectRoot = findProjectRoot();
+    const binaryName = FILE_SYSTEM.SWIFT_BINARY_NAME;
+    const possiblePaths = [path.join(projectRoot, 'bin', binaryName)];
+    const config = {
+        ...getEnvironmentBinaryConfig(),
+        allowedPaths: [
+            '/bin/',
+            '/dist/swift/bin/',
+            '/src/swift/bin/',
+            '/swift/bin/',
+        ],
+    };
+    const { path: cliPath } = findSecureBinaryPath(possiblePaths, config);
+    if (!cliPath) {
+        throw new Error(`EventKitCLI binary not found or validation failed. Searched: ${possiblePaths.join(', ')}`);
+    }
+    // Detect which permission domain this action requires
+    const domain = detectActionDomain(args);
+    // Proactively trigger AppleScript permission prompt on first access
+    // This ensures the permission dialog appears even in non-interactive contexts
+    // where the Swift binary's native EventKit permission request may be suppressed
+    if (!hasBeenPrompted(domain)) {
+        await triggerPermissionPrompt(domain);
+    }
+    let hasRetried = false;
+    while (true) {
+        try {
+            return await runCli(cliPath, args);
+        }
+        catch (error) {
+            // On permission error, trigger AppleScript prompt and retry once
+            if (!hasRetried && error instanceof CliPermissionError) {
+                hasRetried = true;
+                await triggerPermissionPrompt(error.domain);
+                continue;
+            }
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=cliExecutor.js.map

package/dist/utils/cliExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliExecutor.js","sourceRoot":"","sources":["../../src/utils/cliExecutor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EACL,eAAe,EAEf,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,eAAe,GAAG,CACtB,OAAe,EACf,IAAc,EAC+B,EAAE,CAC/C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QAChD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,SAAS,GAAG,KAGjB,CAAC;YACF,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC;YAC1B,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC;YAC1B,MAAM,CAAC,SAAS,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAcL;;GAEG;AACH,MAAM,yBAAyB,GAAuC;IACpE,SAAS,EAAE;QACT,6BAA6B;QAC7B,0BAA0B;QAC1B,4BAA4B;KAC7B;IACD,SAAS,EAAE;QACT,6BAA6B;QAC7B,yBAAyB;QACzB,2BAA2B;KAC5B;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,aAAa;IACb,gBAAgB;IAChB,cAAc;IACd,cAAc;IACd,cAAc;CACf,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAAc;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,WAAW,KAAK,CAAC,CAAC,IAAI,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QACrC,OAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IAClE,CAAC;IACD,OAAO,WAAW,CAAC,CAAC,2CAA2C;AACjE,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,OAAe;IAC5C,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC3E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO,MAA0B,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YACE,OAAe,EACC,MAAwB;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAkB;QAGxC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;GAEG;AAEH,MAAM,cAAc,GAAG,CAAC,IAA6B,EAAiB,EAAE;IACtE,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,cAAc,GAAG,CAAI,MAAc,EAAK,EAAE;IAC9C,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAmB,CAAC;IAChD,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,+EAA+E;IAC/E,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;QACvD,MAAM,IAAI,kBAAkB,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,KAAK,EAAK,OAAe,EAAE,IAAc,EAAc,EAAE;IACtE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,8CAA8C;QAC9C,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACxC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,KAEjB,CAAC;QACF,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,IAAc;IAChD,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,WAAW,CAAC,iBAAiB,CAAC;IACjD,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG;QACb,GAAG,0BAA0B,EAAE;QAC/B,YAAY,EAAE;YACZ,OAAO;YACP,kBAAkB;YAClB,iBAAiB;YACjB,aAAa;SACd;KACF,CAAC;IAEF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAEtE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,gEAAgE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAExC,oEAAoE;IACpE,8EAA8E;IAC9E,gFAAgF;IAChF,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAI,OAAO,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iEAAiE;YACjE,IAAI,CAAC,UAAU,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACvD,UAAU,GAAG,IAAI,CAAC;gBAClB,MAAM,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC5C,SAAS;YACX,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC"}