mindweave 3.0.1 → 3.2.0

package/dist/tools/commandParse.js

@@ -0,0 +1,238 @@
+/**
+ * commandParse.ts — read a shell command into the commands it contains (pure).
+ *
+ * The command guard used to be regular expressions over the raw text, which cannot tell
+ * `cat .env` from `echo ".env"`, misses the second command in `a; b`, and has no idea
+ * what a command names as its arguments. This reads the text the way a shell would, far
+ * enough to answer three questions: which commands run, what words each was given, and
+ * whether it writes a file.
+ *
+ * It is NOT a shell. It does not expand variables, run substitutions or follow
+ * redirections into anything clever; whatever it cannot read with certainty it says so
+ * (`unreadable`), and every caller treats that as "ask", never as "allow". That one rule
+ * is what lets this stay small: a construct it does not model is not a hole, it is a
+ * question for the person.
+ *
+ * Three dialects, because Windows runs PowerShell or cmd and everything else runs a
+ * POSIX shell: they differ in what is an escape (backslash in POSIX, backtick in
+ * PowerShell, a caret in cmd) and a backslash in a Windows path is not an escape at all.
+ */
+const NULL_TARGETS = new Set(["/dev/null", "$null", "nul", "NUL", "Nul"]);
+/** Split `command` into simple commands. Never throws. */
+export function parseCommand(command, dialect = process.platform === "win32" ? "powershell" : "posix") {
+    const commands = [];
+    let unreadable = null;
+    const fail = (why) => {
+        unreadable ??= why;
+    };
+    let words = [];
+    let writes = [];
+    let reads = [];
+    let expands = false;
+    let cur = "";
+    let inWord = false;
+    /** A redirect operator waiting for its target word. */
+    let pending = null;
+    const endWord = () => {
+        if (!inWord)
+            return;
+        inWord = false;
+        const word = cur;
+        cur = "";
+        if (pending) {
+            if (pending === ">" && !NULL_TARGETS.has(word))
+                writes.push(word);
+            if (pending === "<")
+                reads.push(word);
+            pending = null;
+        }
+        else
+            words.push(word);
+    };
+    const endCommand = () => {
+        endWord();
+        pending = null;
+        if (words.length > 0 || writes.length > 0 || reads.length > 0)
+            commands.push({ words, writes, reads, expands });
+        words = [];
+        writes = [];
+        reads = [];
+        expands = false;
+    };
+    const n = command.length;
+    for (let i = 0; i < n; i++) {
+        const c = command[i];
+        const next = command[i + 1];
+        // ── quotes ──
+        if (c === "'") {
+            inWord = true;
+            let end = command.indexOf("'", i + 1);
+            // In PowerShell a doubled quote inside single quotes is one literal quote: 'it''s'.
+            while (dialect === "powershell" && end >= 0 && command[end + 1] === "'") {
+                cur += command.slice(i + 1, end) + "'";
+                i = end + 1;
+                end = command.indexOf("'", i + 1);
+            }
+            if (end < 0) {
+                fail("an unclosed quote");
+                cur += command.slice(i + 1);
+                break;
+            }
+            cur += command.slice(i + 1, end);
+            i = end;
+            continue;
+        }
+        if (c === '"') {
+            inWord = true;
+            let j = i + 1;
+            for (; j < n && command[j] !== '"'; j++) {
+                const d = command[j];
+                if (d === "$") {
+                    expands = true;
+                    if (command[j + 1] === "(")
+                        fail("a command substitution inside quotes");
+                }
+                if (d === "`" && dialect !== "cmd")
+                    fail("a backtick inside quotes");
+                // An escaped character inside double quotes.
+                if ((dialect === "posix" && d === "\\" && j + 1 < n) || (dialect === "powershell" && d === "`" && j + 1 < n)) {
+                    cur += command[j + 1];
+                    j++;
+                    continue;
+                }
+                cur += d;
+            }
+            if (j >= n)
+                fail("an unclosed quote");
+            i = j;
+            continue;
+        }
+        // ── escapes ──
+        if (dialect === "posix" && c === "\\") {
+            if (next === "\n") {
+                i++;
+                continue; // a line continuation
+            }
+            inWord = true;
+            if (next !== undefined)
+                cur += next;
+            i++;
+            continue;
+        }
+        if (dialect === "powershell" && c === "`") {
+            fail("a backtick");
+            inWord = true;
+            continue;
+        }
+        if (dialect === "cmd" && c === "^") {
+            fail("a caret escape");
+            inWord = true;
+            continue;
+        }
+        // ── separators ──
+        if (c === "\n" || c === "\r" || c === ";") {
+            endCommand();
+            continue;
+        }
+        if (c === "&") {
+            if (next === "&")
+                i++;
+            else if (next === ">")
+                fail("a combined redirect");
+            else if (words.length === 0 && !inWord)
+                fail("the call operator");
+            endCommand();
+            continue;
+        }
+        if (c === "|") {
+            if (next === "|" || next === "&")
+                i++;
+            endCommand();
+            continue;
+        }
+        // ── redirects ──
+        if (c === ">" || c === "<") {
+            // A file-descriptor duplicate (2>&1, >&2) writes to no file.
+            if (c === ">" && next === "&") {
+                i++;
+                while (command[i + 1] !== undefined && /[0-9-]/.test(command[i + 1]))
+                    i++;
+                // The number before it was read as a word; it is not an argument.
+                if (inWord && /^[0-9]$/.test(cur)) {
+                    cur = "";
+                    inWord = false;
+                }
+                continue;
+            }
+            if (c === "<" && (next === "<" || next === "(")) {
+                fail(next === "<" ? "a here-document" : "a process substitution");
+                endCommand();
+                continue;
+            }
+            // `2>` and `1>`: the digit is the stream, not a word.
+            if (inWord && /^[0-9]$/.test(cur)) {
+                cur = "";
+                inWord = false;
+            }
+            else
+                endWord();
+            if (c === ">" && next === ">")
+                i++;
+            if (c === ">" && next === "(")
+                fail("a process substitution");
+            pending = c;
+            continue;
+        }
+        // ── whitespace ──
+        if (c === " " || c === "\t") {
+            endWord();
+            continue;
+        }
+        // ── things this reader does not model ──
+        if (c === "$") {
+            if (next === "(")
+                fail("a command substitution");
+            expands = true;
+        }
+        if (c === "`" && dialect === "posix")
+            fail("a command substitution");
+        if (c === "{" || c === "}") {
+            // A script block, a brace expansion or a group. `{}` alone is find's placeholder.
+            if (!(c === "{" && next === "}") && !(c === "}" && command[i - 1] === "{"))
+                fail("a block or brace expansion");
+        }
+        if (c === "(" || c === ")")
+            fail("a group or expression");
+        if (c === "@" && (next === "'" || next === '"') && !inWord)
+            fail("a here-string");
+        if (c === "%" && dialect !== "cmd" && !inWord && next === "{")
+            fail("a script block");
+        inWord = true;
+        cur += c;
+    }
+    endCommand();
+    // What a command may start with that changes what runs.
+    for (const cmd of commands) {
+        const first = cmd.words[0];
+        if (first === undefined)
+            continue;
+        if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(first))
+            fail("an environment variable set before the command");
+        if (first.startsWith("$"))
+            fail("a variable used as the command");
+        if (/^(eval|exec|source|\.|iex|invoke-expression|invoke-command|icm|start-process|saps|start|call)$/i.test(first)) {
+            fail(`${first}, which runs other text as code`);
+        }
+        if (cmd.words.some((w) => /^-e(nc(odedcommand)?)?$/i.test(w) || /^-command$/i.test(w) || /^-c$/.test(w) && /^(bash|sh|zsh|dash)$/.test(first))) {
+            fail("a program told to run a string as code");
+        }
+    }
+    return { commands, unreadable };
+}
+/** The program or cmdlet a command runs, lower-cased, without a directory or a .exe. */
+export function verbOf(cmd) {
+    const first = cmd.words[0] ?? "";
+    const base = first.split(/[\\/]/).pop() ?? first;
+    return base.replace(/\.(exe|cmd|bat|com|ps1)$/i, "").toLowerCase();
+}
+//# sourceMappingURL=commandParse.js.map

package/dist/tools/commandParse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandParse.js","sourceRoot":"","sources":["../../src/tools/commandParse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAsBH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAE1E,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,UAAmB,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO;IACpH,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;QAC3B,UAAU,KAAK,GAAG,CAAC;IACrB,CAAC,CAAC;IAEF,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,uDAAuD;IACvD,IAAI,OAAO,GAAqB,IAAI,CAAC;IAErC,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,GAAG,KAAK,CAAC;QACf,MAAM,IAAI,GAAG,GAAG,CAAC;QACjB,GAAG,GAAG,EAAE,CAAC;QACT,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClE,IAAI,OAAO,KAAK,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;;YAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,OAAO,EAAE,CAAC;QACV,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAChH,KAAK,GAAG,EAAE,CAAC;QACX,MAAM,GAAG,EAAE,CAAC;QACZ,KAAK,GAAG,EAAE,CAAC;QACX,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE5B,eAAe;QACf,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,oFAAoF;YACpF,OAAO,OAAO,KAAK,YAAY,IAAI,GAAG,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxE,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;gBACvC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;gBACZ,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACZ,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBAC1B,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC5B,MAAM;YACR,CAAC;YACD,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YACjC,CAAC,GAAG,GAAG,CAAC;YACR,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;gBACtB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;oBACd,OAAO,GAAG,IAAI,CAAC;oBACf,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;wBAAE,IAAI,CAAC,sCAAsC,CAAC,CAAC;gBAC3E,CAAC;gBACD,IAAI,CAAC,KAAK,GAAG,IAAI,OAAO,KAAK,KAAK;oBAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBACrE,6CAA6C;gBAC7C,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,YAAY,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC7G,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACtB,CAAC,EAAE,CAAC;oBACJ,SAAS;gBACX,CAAC;gBACD,GAAG,IAAI,CAAC,CAAC;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACtC,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QAED,gBAAgB;QAChB,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACtC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,CAAC,EAAE,CAAC;gBACJ,SAAS,CAAC,sBAAsB;YAClC,CAAC;YACD,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,IAAI,KAAK,SAAS;gBAAE,GAAG,IAAI,IAAI,CAAC;YACpC,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,YAAY,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1C,IAAI,CAAC,YAAY,CAAC,CAAC;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACnC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACvB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1C,UAAU,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;iBACjB,IAAI,IAAI,KAAK,GAAG;gBAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;iBAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAClE,UAAU,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;YACtC,UAAU,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3B,6DAA6D;YAC7D,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,CAAC,EAAE,CAAC;gBACJ,OAAO,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;oBAAE,CAAC,EAAE,CAAC;gBAC3E,kEAAkE;gBAClE,IAAI,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,GAAG,GAAG,EAAE,CAAC;oBACT,MAAM,GAAG,KAAK,CAAC;gBACjB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;gBAClE,UAAU,EAAE,CAAC;gBACb,SAAS;YACX,CAAC;YACD,sDAAsD;YACtD,IAAI,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,GAAG,GAAG,EAAE,CAAC;gBACT,MAAM,GAAG,KAAK,CAAC;YACjB,CAAC;;gBAAM,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;gBAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC9D,OAAO,GAAG,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,KAAK,GAAG;gBAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACjD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,OAAO,KAAK,OAAO;YAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3B,kFAAkF;YAClF,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;gBAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACjH,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK,GAAG,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,GAAG;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEtF,MAAM,GAAG,IAAI,CAAC;QACd,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,UAAU,EAAE,CAAC;IAEb,wDAAwD;IACxD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACnG,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClE,IAAI,iGAAiG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClH,IAAI,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/I,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,MAAM,CAAC,GAAkB;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC;IACjD,OAAO,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC"}

package/dist/tools/commandPolicy.js

@@ -0,0 +1,283 @@
+/**
+ * commandPolicy.ts — decisions about a shell command, made from the commands it contains.
+ *
+ * Built on commandParse.ts. Three things, each of which regular expressions over the raw
+ * text could not do:
+ *
+ *   1. Which commands are plainly harmless, so Sentinel mode does not ask about them.
+ *      Every run_command was a question, which teaches people to answer "yes" without
+ *      reading. A command is waved through only when EVERY part of it is a known
+ *      read-only command with arguments that cannot write or run anything, nothing in it
+ *      is expanded or unreadable, and it writes no file. Anything else keeps its question.
+ *   2. The user's own rules by command prefix: allow, prompt or forbid, with a reason the
+ *      model is shown ("use X instead").
+ *   3. Which protected file a command NAMES, whatever it does with it. The old check only
+ *      knew the verbs `cat` and `type`, so `cp .env notes.txt` followed by reading the copy,
+ *      or `curl -F f=@key.pem`, got a secret out. Naming a protected path as something to
+ *      read, copy out or send is refused; naming it as a destination, or as the target of
+ *      a listing or a deletion, is not.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { isAbsolute, join, resolve } from "node:path";
+import { parseCommand, verbOf } from "./commandParse.js";
+import { expandHomeWords, guardedPathReason, protectedPathReason } from "./guard.js";
+/** Parse command-rules.md (pure). Lines starting with # and malformed lines are ignored. */
+export function parseCommandRules(text) {
+    const rules = [];
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const [head, ...why] = line.split("::");
+        const parts = head.trim().split(/\s+/);
+        const decision = parts.shift()?.toLowerCase();
+        const alias = decision === "forbidden" ? "forbid" : decision === "ask" ? "prompt" : decision;
+        if (alias !== "allow" && alias !== "prompt" && alias !== "forbid")
+            continue;
+        if (parts.length === 0)
+            continue;
+        const justification = why.join("::").trim();
+        rules.push({ decision: alias, words: parts, ...(justification ? { justification } : {}) });
+    }
+    return rules;
+}
+const same = (a, b) => a.toLowerCase() === b.toLowerCase();
+/** Does `rule` apply to `cmd`? The program must match, and then the next words in order. */
+export function ruleMatches(rule, cmd) {
+    if (rule.words.length === 0 || cmd.words.length < rule.words.length)
+        return false;
+    if (!same(verbOf({ ...cmd, words: [rule.words[0]] }), verbOf(cmd)))
+        return false;
+    return rule.words.slice(1).every((w, i) => same(w, cmd.words[i + 1] ?? ""));
+}
+export function ruleVerdict(parsed, rules) {
+    let forbid;
+    let prompt;
+    let allAllowed = parsed.commands.length > 0;
+    for (const cmd of parsed.commands) {
+        const hits = rules.filter((r) => ruleMatches(r, cmd));
+        forbid ??= hits.find((r) => r.decision === "forbid");
+        prompt ??= hits.find((r) => r.decision === "prompt");
+        // A prompt or forbid rule on the same command beats an allow.
+        if (!hits.some((r) => r.decision === "allow") || hits.some((r) => r.decision !== "allow"))
+            allAllowed = false;
+    }
+    return { ...(forbid ? { forbid } : {}), ...(prompt ? { prompt } : {}), allAllowed };
+}
+const anyArgs = () => true;
+/** True when no argument is one of `bad` (also as `--flag=value`). */
+const without = (...bad) => (args) => !args.some((a) => bad.some((b) => a.toLowerCase() === b || a.toLowerCase().startsWith(`${b}=`)));
+/** At most `n` words that are not options: `uniq in out` would write `out`. */
+const positionalsAtMost = (n) => (args) => args.filter((a) => !a.startsWith("-")).length <= n;
+const READ_ONLY = {
+    // listing and printing
+    ls: anyArgs, dir: anyArgs, pwd: anyArgs, echo: anyArgs, printf: anyArgs, cat: anyArgs, type: anyArgs,
+    head: anyArgs, tail: anyArgs, wc: anyArgs, nl: anyArgs, cut: anyArgs, tr: anyArgs, stat: anyArgs, file: anyArgs,
+    du: anyArgs, df: anyArgs, tree: anyArgs, which: anyArgs, where: anyArgs, whoami: anyArgs, hostname: anyArgs,
+    uname: anyArgs, id: anyArgs, ps: anyArgs, basename: anyArgs, dirname: anyArgs, realpath: anyArgs, readlink: anyArgs,
+    cmp: anyArgs, diff: anyArgs, jq: anyArgs,
+    uniq: positionalsAtMost(1),
+    sort: without("-o", "--output"),
+    date: without("-s", "--set"),
+    grep: anyArgs, egrep: anyArgs, fgrep: anyArgs,
+    rg: without("--pre", "--hostname-bin"),
+    find: without("-exec", "-execdir", "-ok", "-okdir", "-delete", "-fprint", "-fprint0", "-fprintf", "-fls"),
+    // PowerShell
+    "get-childitem": noEnvDrive, gci: noEnvDrive,
+    "get-content": anyArgs, gc: anyArgs,
+    "get-location": anyArgs, gl: anyArgs,
+    "get-item": noEnvDrive, gi: noEnvDrive, "get-itemproperty": noEnvDrive, gp: noEnvDrive,
+    "test-path": anyArgs, "resolve-path": anyArgs, rvpa: anyArgs,
+    "select-string": anyArgs, sls: anyArgs,
+    "measure-object": anyArgs, measure: anyArgs, "select-object": anyArgs, select: anyArgs,
+    "sort-object": anyArgs, "group-object": anyArgs, group: anyArgs,
+    "format-list": anyArgs, fl: anyArgs, "format-table": anyArgs, ft: anyArgs, "out-string": anyArgs,
+    "get-process": anyArgs, gps: anyArgs, "get-service": anyArgs, "get-command": anyArgs, gcm: anyArgs,
+    "get-date": anyArgs, "get-help": anyArgs, "get-filehash": anyArgs,
+    "write-output": anyArgs, "write-host": anyArgs, write: anyArgs,
+    "split-path": anyArgs, "join-path": anyArgs, "compare-object": anyArgs,
+    "convertto-json": anyArgs, "convertfrom-json": anyArgs, "where-object": anyArgs,
+};
+/** `Get-ChildItem Env:` lists the environment. */
+function noEnvDrive(args) {
+    return !args.some((a) => /^(env|variable|function|alias):?/i.test(a.replace(/^-(path|literalpath)[:=]?/i, "")));
+}
+/** git subcommands that only read, with the options each must not be given. */
+const GIT_READ_ONLY = {
+    status: anyArgs, log: anyArgs, diff: anyArgs, show: anyArgs, "ls-files": anyArgs, "ls-tree": anyArgs,
+    "rev-parse": anyArgs, "rev-list": anyArgs, describe: anyArgs, blame: anyArgs, shortlog: anyArgs,
+    "cat-file": anyArgs, grep: anyArgs, "name-rev": anyArgs, "merge-base": anyArgs, "diff-tree": anyArgs,
+    "show-ref": anyArgs, "check-ignore": anyArgs, "count-objects": anyArgs, whatchanged: anyArgs,
+    reflog: (args) => !args.some((a) => /^(expire|delete)$/.test(a)),
+    remote: (args) => args.length === 0 || args.every((a) => a === "-v" || a === "--verbose") || /^(show|get-url)$/.test(args[0] ?? ""),
+    branch: (args) => args.every((a) => /^(-a|-r|-v|-vv|--all|--remotes|--list|--show-current|--verbose|--merged|--no-merged|--contains)$/.test(a)),
+    tag: (args) => args.every((a) => /^(-l|--list|-n\d*|--sort=.*)$/.test(a)),
+    stash: (args) => /^(list|show)$/.test(args[0] ?? ""),
+    worktree: (args) => args[0] === "list",
+};
+/** Options that make an otherwise read-only git command write or run a program. */
+const GIT_BAD_OPTIONS = ["--output", "--ext-diff", "--textconv", "--exec", "--upload-pack", "--receive-pack", "--open-files-in-pager"];
+function gitReadOnly(cmd, gitConfigSafe) {
+    if (!gitConfigSafe)
+        return false;
+    const [, sub, ...args] = cmd.words;
+    if (sub === "--version" || sub === "version")
+        return args.length === 0;
+    const check = sub ? GIT_READ_ONLY[sub] : undefined;
+    return !!check && without(...GIT_BAD_OPTIONS)(args) && check(args);
+}
+/** Is this one command a known read-only command, given what it is passed? */
+export function isReadOnly(cmd, gitConfigSafe) {
+    if (cmd.writes.length > 0 || cmd.expands || cmd.words.length === 0)
+        return false;
+    const verb = verbOf(cmd);
+    if (verb === "git")
+        return gitReadOnly(cmd, gitConfigSafe);
+    const check = READ_ONLY[verb];
+    return !!check && check(cmd.words.slice(1));
+}
+/**
+ * Whether git in `cwd` would run a program from the repository's own config just to answer a
+ * read-only question (fsmonitor, a pager, an external diff or textconv, a filter). A repo that
+ * arrived with such a config makes even `git status` a way to run code, so its git commands keep
+ * their question. True when it cannot be told: a worktree file, an unreadable config.
+ */
+export function gitConfigRunsPrograms(cwd) {
+    const dotGit = join(cwd, ".git");
+    if (!existsSync(dotGit))
+        return false; // not a repository: git reads only the user's own config
+    try {
+        const text = readFileSync(join(dotGit, "config"), "utf8");
+        return /^\s*(fsmonitor|pager|sshcommand|editor|askpass|external|textconv|command|clean|smudge|process|program|hookspath|path)\s*=|^\s*\[(include|includeIf)\b/im.test(text);
+    }
+    catch {
+        return true;
+    }
+}
+/**
+ * Sentinel's question can be skipped: every part of the command is read-only or allowed by
+ * a user rule, and nothing in it is unreadable. Never true for a command this reader cannot
+ * fully read.
+ */
+export function needsNoQuestion(parsed, rules, cwd) {
+    if (parsed.unreadable || parsed.commands.length === 0)
+        return false;
+    const verdict = ruleVerdict(parsed, rules);
+    if (verdict.forbid || verdict.prompt)
+        return false;
+    const gitSafe = !gitConfigRunsPrograms(cwd);
+    return parsed.commands.every((cmd) => isReadOnly(cmd, gitSafe) || (cmd.writes.length === 0 && rules.some((r) => r.decision === "allow" && ruleMatches(r, cmd))));
+}
+/**
+ * Programs that run whatever they are handed next: an interpreter, a shell, a launcher, a downloader. A rule on
+ * one of these ("allow node") would approve every command that begins with it, so no prefix is ever suggested.
+ */
+const TOO_BROAD = new Set([
+    "node", "nodejs", "deno", "bun", "python", "python3", "py", "ruby", "perl", "php", "lua", "java", "dotnet",
+    "bash", "sh", "zsh", "fish", "dash", "pwsh", "powershell", "cmd", "npx", "pnpx", "bunx", "uvx", "pipx", "sudo", "doas",
+    "env", "xargs", "nohup", "time", "timeout", "start", "ssh", "scp", "sftp", "curl", "wget", "iwr", "irm", "nc", "ncat",
+    "rm", "rmdir", "rd", "del", "erase", "remove-item", "ri", "mv", "move", "cp", "copy", "dd", "format", "chmod", "chown",
+    "kill", "taskkill", "pkill", "make", "gmake", "find", "awk", "sed",
+]);
+/** Tools whose first word is a program and whose second is the action: the prefix takes both. */
+const TWO_WORD = new Set([
+    "git", "npm", "pnpm", "yarn", "cargo", "go", "docker", "podman", "kubectl", "gh", "pip", "pip3", "uv", "poetry",
+    "composer", "gradle", "mvn", "terraform", "helm", "rustup", "brew", "apt", "apt-get", "winget", "choco", "flutter", "swift",
+]);
+/**
+ * The prefix a "don't ask again" answer would save for this command, or null when none is safe to offer.
+ *
+ * Only a single, fully readable command that writes no file qualifies. `npm test` becomes `npm test`; a bare
+ * `cargo build --release` becomes `cargo build`. A shell, interpreter or launcher, and a command that is itself
+ * one of the risky ones, get nothing: the person can still answer yes for this one command.
+ */
+export function suggestAllowPrefix(parsed) {
+    if (parsed.unreadable || parsed.commands.length !== 1)
+        return null;
+    const cmd = parsed.commands[0];
+    if (cmd.writes.length > 0 || cmd.expands)
+        return null;
+    const verb = verbOf(cmd);
+    if (!verb || TOO_BROAD.has(verb))
+        return null;
+    const second = cmd.words[1];
+    if (TWO_WORD.has(verb)) {
+        if (!second || second.startsWith("-") || /[\\/$%*?]/.test(second))
+            return null;
+        // `npm run build` is a script name, and `npm run` alone would allow every script in the file.
+        if (second.toLowerCase() === "run" || second.toLowerCase() === "exec" || second.toLowerCase() === "x") {
+            const third = cmd.words[2];
+            return third && !third.startsWith("-") && !/[\\/$%*?]/.test(third) ? `${verb} ${second} ${third}` : null;
+        }
+        return `${verb} ${second}`;
+    }
+    return verb;
+}
+// ── protected paths named in a command ──────────────────────────────────────
+/** Verbs that do not read what they are pointed at: a listing, a deletion, a directory change. */
+const NEVER_READS = new Set([
+    "ls", "dir", "get-childitem", "gci", "test-path", "mkdir", "md", "new-item", "ni", "touch", "rm", "del", "erase",
+    "remove-item", "ri", "rmdir", "rd", "echo", "write-output", "write-host", "write", "pwd", "cd", "chdir",
+    "set-location", "sl", "pushd", "popd", "stat", "file", "basename", "dirname",
+]);
+/** Verbs that copy or move: their LAST path is where it goes, which may be a protected file. */
+const COPIES = new Set(["cp", "copy", "copy-item", "cpi", "mv", "move", "move-item", "mi", "ren", "rename", "rename-item", "rni"]);
+/** The candidate paths inside one word: itself, the value of `--flag=value`, and `@file`. */
+function pathCandidates(word) {
+    const out = new Set([word]);
+    const eq = word.indexOf("=");
+    if (eq > 0)
+        out.add(word.slice(eq + 1).replace(/^@/, ""));
+    if (word.startsWith("@"))
+        out.add(word.slice(1));
+    const at = word.lastIndexOf("@");
+    if (at > 0 && word[at + 1] !== undefined)
+        out.add(word.slice(at + 1));
+    return [...out].filter((c) => c.length > 0 && !/^[a-z][a-z0-9+.-]*:\/\//i.test(c));
+}
+/**
+ * The protected file this command names as something to read, copy out or send, as a reason
+ * ("`.env` is an environment/secrets file"), or null. Judges what the paths lead to (links
+ * and stream spellings resolved), not just the text.
+ */
+export async function protectedArgsReason(parsed, cwd) {
+    for (const cmd of parsed.commands) {
+        const verb = verbOf(cmd);
+        if (NEVER_READS.has(verb))
+            continue;
+        let args = cmd.words.slice(1).filter((w) => !(w.startsWith("-") && !w.includes("=")));
+        if (COPIES.has(verb) && args.length >= 2)
+            args = args.slice(0, -1);
+        const inputs = [...args, ...cmd.words.slice(1).filter((w) => w.startsWith("-") && w.includes("=")), ...cmd.reads];
+        for (const word of inputs) {
+            for (const candidate of pathCandidates(word)) {
+                const text = protectedPathReason(candidate.replace(/\\/g, "/"));
+                if (text)
+                    return `\`${candidate}\` is ${text}`;
+                const abs = resolveWord(candidate, cwd);
+                if (!abs || !(/[\\/]/.test(candidate) || /^[.~]/.test(candidate) || existsSync(abs)))
+                    continue;
+                const real = await guardedPathReason(abs);
+                if (real)
+                    return `\`${candidate}\` is ${real}`;
+            }
+        }
+    }
+    return null;
+}
+function resolveWord(word, cwd) {
+    const expanded = expandHomeWords(word.startsWith("~") ? word.replace(/^~/, homedir()) : word);
+    if (/[$%*?<>|"]/.test(expanded))
+        return null;
+    return isAbsolute(expanded) ? resolve(expanded) : resolve(cwd, expanded);
+}
+// ── the entry points the tools use ───────────────────────────────────────────
+/** Which shell dialect a run_command call uses. */
+export function dialectFor(args) {
+    if (process.platform !== "win32")
+        return "posix";
+    return args.shell === "cmd" ? "cmd" : "powershell";
+}
+export { parseCommand };
+//# sourceMappingURL=commandPolicy.js.map

package/dist/tools/commandPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandPolicy.js","sourceRoot":"","sources":["../../src/tools/commandPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,EAAwD,MAAM,mBAAmB,CAAC;AAC/G,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAerF,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7F,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ;YAAE,SAAS;QAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAE3E,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,IAAiB,EAAE,GAAkB;IAC/D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAClF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAWD,MAAM,UAAU,WAAW,CAAC,MAAqB,EAAE,KAA6B;IAC9E,IAAI,MAA+B,CAAC;IACpC,IAAI,MAA+B,CAAC;IACpC,IAAI,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACrD,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACrD,8DAA8D;QAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;YAAE,UAAU,GAAG,KAAK,CAAC;IAChH,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;AACtF,CAAC;AAKD,MAAM,OAAO,GAAa,GAAG,EAAE,CAAC,IAAI,CAAC;AACrC,sEAAsE;AACtE,MAAM,OAAO,GACX,CAAC,GAAG,GAAa,EAAY,EAAE,CAC/B,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACrG,+EAA+E;AAC/E,MAAM,iBAAiB,GACrB,CAAC,CAAS,EAAY,EAAE,CACxB,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;AAEvD,MAAM,SAAS,GAA6B;IAC1C,uBAAuB;IACvB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO;IACpG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO;IAC/G,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO;IAC3G,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO;IACnH,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO;IACxC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;IAC/B,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;IAC5B,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;IAC7C,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACtC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC;IACzG,aAAa;IACb,eAAe,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU;IAC5C,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO;IACnC,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO;IACpC,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU;IACtF,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO;IAC5D,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO;IACtC,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO;IACtF,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;IAC/D,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO;IAChG,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO;IAClG,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO;IACjE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;IAC9D,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO;IACtE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO;CAChF,CAAC;AAEF,kDAAkD;AAClD,SAAS,UAAU,CAAC,IAAc;IAChC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAClH,CAAC;AAED,+EAA+E;AAC/E,MAAM,aAAa,GAA6B;IAC9C,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO;IACpG,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO;IAC/F,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO;IACpG,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO;IAC5F,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,WAAW,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnI,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kGAAkG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/I,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;CACvC,CAAC;AACF,mFAAmF;AACnF,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;AAEvI,SAAS,WAAW,CAAC,GAAkB,EAAE,aAAsB;IAC7D,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IACnC,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,GAAkB,EAAE,aAAsB;IACnE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,yDAAyD;IAChG,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO,yJAAyJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9K,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAqB,EAAE,KAA6B,EAAE,GAAW;IAC/F,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,OAAO,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAC1B,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CACnI,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ;IAC1G,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACtH,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM;IACrH,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO;IACtH,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;CACnE,CAAC,CAAC;AACH,iGAAiG;AACjG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ;IAC/G,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO;CAC5H,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;IAChC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/E,8FAA8F;QAC9F,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;YACtG,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3G,CAAC;QACD,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAE/E,kGAAkG;AAClG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO;IAChH,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO;IACvG,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS;CAC7E,CAAC,CAAC;AACH,gGAAgG;AAChG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;AAEnI,6FAA6F;AAC7F,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,EAAE,GAAG,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAqB,EAAE,GAAW;IAC1E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,IAAI,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAClH,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;gBAChE,IAAI,IAAI;oBAAE,OAAO,KAAK,SAAS,SAAS,IAAI,EAAE,CAAC;gBAC/C,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBACxC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;oBAAE,SAAS;gBAC/F,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAC1C,IAAI,IAAI;oBAAE,OAAO,KAAK,SAAS,SAAS,IAAI,EAAE,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,GAAW;IAC5C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9F,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED,gFAAgF;AAEhF,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,IAA6B;IACtD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACjD,OAAO,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;AACrD,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}