narai-primitives 2.0.0-rc.1

package/dist/toolkit/audit/writer.js

@@ -0,0 +1,73 @@
+/**
+ * JSONL audit writer. Instance-per-connector (no module-global state).
+ *
+ * Non-failing: any disk I/O error is swallowed. Audit MUST NEVER crash the
+ * caller — a missing audit trail is better than a missing feature.
+ *
+ * Secret redaction: `scrubSecrets(str)` masks common `password='...'` /
+ * `token='...'` / `api_key='...'` literals before writing. Called on
+ * caller-supplied strings that might contain credentials.
+ */
+import * as crypto from "node:crypto";
+import * as fs from "node:fs";
+import * as path from "node:path";
+/** Redact common credential-bearing `key='value'` literals in a string. */
+const SENSITIVE_SQUOTE_RE = /\b(password|passwd|pwd|token|api[_-]?key|secret|access[_-]?key|auth)\s*=\s*'[^']*'/gi;
+const SENSITIVE_DQUOTE_RE = /\b(password|passwd|pwd|token|api[_-]?key|secret|access[_-]?key|auth)\s*=\s*"[^"]*"/gi;
+export function scrubSecrets(text) {
+    return text
+        .replace(SENSITIVE_SQUOTE_RE, (_m, key) => `${key}='[REDACTED]'`)
+        .replace(SENSITIVE_DQUOTE_RE, (_m, key) => `${key}="[REDACTED]"`);
+}
+function isoTimestamp() {
+    const iso = new Date().toISOString();
+    return iso.endsWith("Z") ? iso : iso + "Z";
+}
+class DiskAuditWriter {
+    enabled;
+    sessionId;
+    _path;
+    constructor(opts) {
+        this.enabled = opts.enabled;
+        this.sessionId = opts.sessionId ?? crypto.randomBytes(6).toString("hex");
+        this._path = opts.enabled && opts.path ? opts.path : null;
+    }
+    logEvent(event) {
+        if (!this.enabled || this._path === null)
+            return;
+        const record = {
+            ...event,
+            timestamp: isoTimestamp(),
+            session_id: this.sessionId,
+        };
+        try {
+            // Ensure parent dir exists — caller may pass a path whose dir doesn't
+            // yet exist (common for first use).
+            fs.mkdirSync(path.dirname(this._path), { recursive: true });
+            fs.appendFileSync(this._path, JSON.stringify(record) + "\n", "utf-8");
+        }
+        catch {
+            // Best-effort; never raise into the caller.
+        }
+    }
+}
+/** A no-op writer used when audit is disabled. */
+class NullAuditWriter {
+    enabled = false;
+    sessionId;
+    constructor(sessionId) {
+        this.sessionId = sessionId ?? crypto.randomBytes(6).toString("hex");
+    }
+    logEvent() {
+        /* no-op */
+    }
+}
+export function createAuditWriter(opts) {
+    if (!opts.enabled)
+        return new NullAuditWriter(opts.sessionId);
+    if (opts.path === undefined || opts.path.length === 0) {
+        throw new Error("audit: 'path' is required when 'enabled' is true");
+    }
+    return new DiskAuditWriter(opts);
+}
+//# sourceMappingURL=writer.js.map

package/dist/toolkit/audit/writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../../src/toolkit/audit/writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAWlC,2EAA2E;AAC3E,MAAM,mBAAmB,GACvB,sFAAsF,CAAC;AACzF,MAAM,mBAAmB,GACvB,sFAAsF,CAAC;AAEzF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI;SACR,OAAO,CAAC,mBAAmB,EAAE,CAAC,EAAE,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,GAAG,eAAe,CAAC;SACxE,OAAO,CAAC,mBAAmB,EAAE,CAAC,EAAE,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;AAC7C,CAAC;AAUD,MAAM,eAAe;IACV,OAAO,CAAU;IACjB,SAAS,CAAS;IACV,KAAK,CAAgB;IAEtC,YAAY,IAAwB;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAED,QAAQ,CACN,KAA6E;QAE7E,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO;QACjD,MAAM,MAAM,GAA4B;YACtC,GAAG,KAAK;YACR,SAAS,EAAE,YAAY,EAAE;YACzB,UAAU,EAAE,IAAI,CAAC,SAAS;SAC3B,CAAC;QACF,IAAI,CAAC;YACH,sEAAsE;YACtE,oCAAoC;YACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;IACH,CAAC;CACF;AAED,kDAAkD;AAClD,MAAM,eAAe;IACV,OAAO,GAAG,KAAK,CAAC;IAChB,SAAS,CAAS;IAE3B,YAAY,SAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAED,QAAQ;QACN,WAAW;IACb,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAwB;IACxD,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC"}

package/dist/toolkit/cli/usage-report.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=usage-report.d.ts.map

package/dist/toolkit/cli/usage-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-report.d.ts","sourceRoot":"","sources":["../../../src/toolkit/cli/usage-report.ts"],"names":[],"mappings":""}

package/dist/toolkit/cli/usage-report.js

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+import { aggregateCrossSession, renderCrossSessionMarkdown, } from "../usage/aggregate-cross-session.js";
+import { join } from "node:path";
+function parseArgs(argv) {
+    const out = {
+        since: "30d",
+        format: "md",
+        dir: join(process.cwd(), ".claude", "connectors"),
+    };
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        const next = argv[i + 1];
+        if (a === "--connector" && next) {
+            out.connector = next;
+            i++;
+        }
+        else if (a === "--since" && next) {
+            out.since = next;
+            i++;
+        }
+        else if (a === "--format" && next) {
+            if (next !== "json" && next !== "md") {
+                throw new Error(`--format must be 'json' or 'md', got '${next}'`);
+            }
+            out.format = next;
+            i++;
+        }
+        else if (a === "--dir" && next) {
+            out.dir = next;
+            i++;
+        }
+        else if (a === "--help" || a === "-h") {
+            process.stdout.write(HELP);
+            process.exit(0);
+        }
+        else {
+            throw new Error(`Unknown arg: ${a}`);
+        }
+    }
+    return out;
+}
+const HELP = `Usage: usage-report [options]
+
+Options:
+  --connector <name>    Filter to one connector (default: all)
+  --since 7d|30d|all    Time window (default: 30d)
+  --format json|md      Output format (default: md)
+  --dir <path>          Root dir (default: .claude/connectors)
+  -h, --help            Show help
+`;
+async function main() {
+    let parsed;
+    try {
+        parsed = parseArgs(process.argv.slice(2));
+    }
+    catch (err) {
+        process.stderr.write(`error: ${err.message}\n\n${HELP}`);
+        process.exit(2);
+    }
+    const report = await aggregateCrossSession({
+        dir: parsed.dir,
+        since: parsed.since,
+        ...(parsed.connector ? { connector: parsed.connector } : {}),
+    });
+    if (parsed.format === "json") {
+        process.stdout.write(JSON.stringify(report, null, 2) + "\n");
+    }
+    else {
+        process.stdout.write(renderCrossSessionMarkdown(report));
+    }
+}
+main().catch((err) => {
+    process.stderr.write(`error: ${err instanceof Error ? err.message : String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=usage-report.js.map

package/dist/toolkit/cli/usage-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-report.js","sourceRoot":"","sources":["../../../src/toolkit/cli/usage-report.ts"],"names":[],"mappings":";AACA,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,GAAG,GAAW;QAClB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC;KAClD,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,aAAa,IAAI,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;aAC1D,IAAI,CAAC,KAAK,SAAS,IAAI,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;aACvD,IAAI,CAAC,KAAK,UAAU,IAAI,IAAI,EAAE,CAAC;YAClC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,GAAG,CAAC,CAAC;YACpE,CAAC;YACD,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;YAClB,CAAC,EAAE,CAAC;QACN,CAAC;aACI,IAAI,CAAC,KAAK,OAAO,IAAI,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;aACnD,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;aACI,CAAC;YACJ,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;CAQZ,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAW,GAAa,CAAC,OAAO,OAAO,IAAI,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;QACzC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/toolkit/connector.d.ts

@@ -0,0 +1,142 @@
+/**
+ * `createConnector` — the common framework factory.
+ *
+ * Each connector's package declares a config (name, credentials loader,
+ * optional SDK loader, action registry, hooks). The factory returns
+ * `{main, fetch, validActions, name}`:
+ *
+ *   - `main(argv)` parses `--action`/`--params`/`--curate`/`--help`,
+ *     dispatches to `fetch`, emits the envelope on stdout, returns an
+ *     exit code.
+ *   - `fetch(action, params)` is the library surface — validates Zod,
+ *     classifies, runs the policy gate, loads sdk/credentials lazily
+ *     on success, runs the handler, wraps exceptions in error envelopes.
+ *
+ * Every step emits audit events and writes hardship entries where
+ * appropriate.
+ */
+import type { ZodSchema } from "zod";
+import { z } from "zod";
+import { type HardshipRecorder } from "./hardship/record.js";
+import { type Classification, type Decision, type Envelope, type ErrorEnvelope, type ExtendedEnvelope, type PolicyRules } from "./policy/types.js";
+export interface Context<TSdk> {
+    sdk: TSdk;
+    credentials: Credentials;
+    policy: Decision;
+    recordHardship: HardshipRecorder;
+    logger: {
+        debug(msg: string): void;
+        warn(msg: string): void;
+    };
+}
+export interface ActionSpec<TParams = any, TSdk = unknown> {
+    params: ZodSchema<TParams>;
+    classify: Classification | ((p: TParams) => Classification);
+    handler: (p: TParams, ctx: Context<TSdk>) => Promise<unknown>;
+    description?: string;
+}
+/**
+ * Helper for writing a single action spec with full param-type inference.
+ * TypeScript can't thread `z.infer<S>` through the `actions` record on its
+ * own, so wrapping each spec in `defineAction` gives the handler's `p` the
+ * exact schema-inferred type without manual annotations.
+ *
+ * Usage:
+ *   actions: {
+ *     list_functions: defineAction({
+ *       params: z.object({ region: z.string() }),
+ *       classify: { kind: "read" },
+ *       handler: async (p, ctx) => ctx.sdk.lambda.list(p),
+ *     }),
+ *   },
+ */
+export declare function defineAction<S extends ZodSchema, TSdk = unknown>(spec: {
+    params: S;
+    classify: Classification | ((p: z.infer<S>) => Classification);
+    handler: (p: z.infer<S>, ctx: Context<TSdk>) => Promise<unknown>;
+    description?: string;
+}): ActionSpec<z.infer<S>, TSdk>;
+export type Credentials = Record<string, unknown>;
+export interface DecisionContext {
+    action: string;
+    params: unknown;
+    classification: Classification;
+}
+/**
+ * Escape hatch for handlers that need to emit a non-success envelope the
+ * base framework doesn't model directly. Throw this from a handler with
+ * the exact envelope shape you want returned — the framework will add the
+ * `action` field and emit it verbatim.
+ *
+ * Typical use: `db-agent-connector` throws this for `denied` / `escalate` /
+ * `present_only` results coming back from its internal policy gate, since
+ * those are shaped with additional fields (`reason`, `formatted_sql`,
+ * `execution_time_ms`) that ErrorEnvelope can't carry.
+ *
+ * Prefer the `classify` hook + `extendDecision` for policy-gate-driven
+ * envelopes whenever possible — this escape hatch is for cases where the
+ * status decision can only be made after running the handler.
+ */
+export declare class EnvelopeOverride extends Error {
+    readonly envelope: Omit<ExtendedEnvelope, "action"> & Partial<Pick<ExtendedEnvelope, "action">>;
+    constructor(envelope: Omit<ExtendedEnvelope, "action"> & Partial<Pick<ExtendedEnvelope, "action">>);
+}
+export interface ConnectorConfig<TSdk = unknown> {
+    name: string;
+    version?: string;
+    credentials: () => Promise<Credentials>;
+    sdk?: () => Promise<TSdk>;
+    /** Action registry, keyed by action name. */
+    actions: Record<string, ActionSpec<any, TSdk>>;
+    /** Override per-action classification (e.g. db-agent classifies based on SQL). */
+    classify?: (action: string, params: unknown) => Classification | Promise<Classification>;
+    /** Extend the Decision before it becomes an envelope (e.g. attach formatted_sql). */
+    extendDecision?: (decision: Decision, ctx: DecisionContext) => Decision | ExtendedEnvelope;
+    /** Map a caught exception to a custom error envelope. Return `undefined` to fall through. */
+    mapError?: (err: unknown, action: string) => Partial<ErrorEnvelope> | undefined;
+    policyConfigPath?: string;
+    /** Aspects that cannot be downgraded to `"success"` in operator config. */
+    policyFloorAspects?: readonly string[];
+    /** Default rules when no config is found. Defaults to `DEFAULT_POLICY`. */
+    defaultPolicy?: PolicyRules;
+    /**
+     * Skip the toolkit's YAML discovery entirely. Use this when the connector
+     * owns a different config format (e.g. `db-agent-connector`'s
+     * `.db-agent/config.yaml` has legacy labels + `servers:` that the toolkit's
+     * validator rejects). The handler is responsible for gating calls itself.
+     */
+    disablePolicyDiscovery?: boolean;
+    audit?: {
+        enabled: boolean;
+        path?: string;
+    };
+    hardship?: {
+        enabled?: boolean;
+        recorder?: HardshipRecorder;
+    };
+    /** Derive a per-request tenant scope key from the resolved SDK. Used to tag hardship entries. */
+    scope?: (ctx: {
+        sdk: TSdk;
+        action: string;
+        params: unknown;
+    }) => string | null;
+    /** Path overrides for test isolation — forwarded to readFirstMatchingPattern. */
+    runtime?: {
+        cwd?: string;
+        home?: string;
+    };
+}
+export interface Connector {
+    main(argv: readonly string[]): Promise<number>;
+    fetch(action: string, params: unknown): Promise<Envelope>;
+    readonly validActions: ReadonlySet<string>;
+    readonly name: string;
+    recordResolution(input: {
+        pattern_id: string;
+        advice: string;
+        action?: string;
+        scope?: string | null;
+    }): void;
+}
+export declare function createConnector<TSdk = unknown>(cfg: ConnectorConfig<TSdk>): Connector;
+//# sourceMappingURL=connector.d.ts.map

package/dist/toolkit/connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../src/toolkit/connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,KAAK,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAKrF,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,QAAQ,EAEb,KAAK,QAAQ,EAEb,KAAK,aAAa,EAElB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAEjB,MAAM,mBAAmB,CAAC;AAM3B,MAAM,WAAW,OAAO,CAAC,IAAI;IAC3B,GAAG,EAAE,IAAI,CAAC;IACV,WAAW,EAAE,WAAW,CAAC;IACzB,MAAM,EAAE,QAAQ,CAAC;IACjB,cAAc,EAAE,gBAAgB,CAAC;IACjC,MAAM,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC/D;AAED,MAAM,WAAW,UAAU,CAAC,OAAO,GAAG,GAAG,EAAE,IAAI,GAAG,OAAO;IACvD,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3B,QAAQ,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,cAAc,CAAC,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,SAAS,EAAE,IAAI,GAAG,OAAO,EAC9D,IAAI,EAAE;IACJ,MAAM,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;IAC/D,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACA,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAE9B;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,cAAc,CAAC;CAChC;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACpF,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;CAKnG;AAED,MAAM,WAAW,eAAe,CAAC,IAAI,GAAG,OAAO;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;IACxC,GAAG,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAG/C,kFAAkF;IAClF,QAAQ,CAAC,EAAE,CACT,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,KACZ,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9C,qFAAqF;IACrF,cAAc,CAAC,EAAE,CACf,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,eAAe,KACjB,QAAQ,GAAG,gBAAgB,CAAC;IACjC,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IAGhF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,2EAA2E;IAC3E,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;KAC7B,CAAC;IACF,iGAAiG;IACjG,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,MAAM,GAAG,IAAI,CAAC;IAC/E,iFAAiF;IACjF,OAAO,CAAC,EAAE;QACR,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1D,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,KAAK,EAAE;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,GAAG,IAAI,CAAC;CACV;AAqED,wBAAgB,eAAe,CAAC,IAAI,GAAG,OAAO,EAC5C,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,GACzB,SAAS,CA8WX"}