sandstream-kit 1.0.0

package/dist/fix.js

@@ -0,0 +1,419 @@
+import { installTools } from "./install.js";
+import { loginServices } from "./login.js";
+import { readkitMeta, readSkillsLock, readCliLock, updateSkillsLock, updateCliLock, } from "./lock.js";
+import { readFile, writeFile, access } from "node:fs/promises";
+import { resolve } from "node:path";
+import { loadConfig } from "./config.js";
+import { withGovernance } from "./governance-middleware.js";
+import { checkTools } from "./check-tools.js";
+import { checkServices } from "./check-services.js";
+import { installHooks } from "./hooks.js";
+import { c } from "./utils/colors.js";
+/**
+ * Attempts to automatically fix issues found by kit check.
+ * Returns results for each fix attempt.
+ */
+export async function autoFix(options) {
+    const results = [];
+    // 1. Fix missing/incorrect tools
+    if (options.toolsConfig && options.tools.some((t) => !t.ok)) {
+        const toolsToFix = options.tools.filter((t) => !t.ok);
+        console.log(`\nFixing ${toolsToFix.length} tool(s)...`);
+        const installResults = await installTools(options.toolsConfig);
+        for (const r of installResults) {
+            if (r.action === "already_ok") {
+                continue; // Skip already ok tools in fix output
+            }
+            results.push({
+                category: "tool",
+                name: r.name,
+                action: r.action === "installed" ? "fixed" : r.action,
+                detail: r.detail,
+            });
+        }
+    }
+    // 2. Fix services that support non-interactive login
+    if (options.servicesConfig && options.services.some((s) => !s.authenticated)) {
+        const servicesToFix = options.services.filter((s) => !s.authenticated);
+        // Services with informational ("#"-prefixed) login commands can't be
+        // logged in to — surface them as manual without trying to exec the doc string.
+        for (const s of servicesToFix) {
+            if (s.informational) {
+                results.push({
+                    category: "service",
+                    name: s.name,
+                    action: "needs_manual",
+                    detail: s.output,
+                });
+            }
+        }
+        const automatable = servicesToFix.filter((s) => !s.informational);
+        if (automatable.length > 0) {
+            console.log(`\nAttempting to fix ${automatable.length} service(s)...`);
+        }
+        const automatableConfig = {};
+        for (const s of automatable) {
+            const cfg = options.servicesConfig[s.name];
+            if (cfg)
+                automatableConfig[s.name] = cfg;
+        }
+        const loginResults = automatable.length === 0 ? [] : await loginServices(automatableConfig);
+        for (const r of loginResults) {
+            if (r.action === "already_authenticated") {
+                continue; // Skip already authenticated
+            }
+            if (r.action === "logged_in") {
+                results.push({
+                    category: "service",
+                    name: r.name,
+                    action: "fixed",
+                    detail: r.detail,
+                });
+            }
+            else if (r.action === "login_unverified" || r.action === "failed") {
+                results.push({
+                    category: "service",
+                    name: r.name,
+                    action: "needs_manual",
+                    detail: `${r.detail} (requires manual login)`,
+                });
+            }
+        }
+    }
+    // 3. Fix missing lock files
+    const kitMeta = await readkitMeta();
+    const skillsLock = await readSkillsLock();
+    const cliLock = await readCliLock();
+    if (!skillsLock && (options.skillsRequired || options.skillsOptional)) {
+        console.log(`\nGenerating skills-lock.json...`);
+        const skills = {};
+        if (options.skillsRequired)
+            Object.assign(skills, options.skillsRequired);
+        if (options.skillsOptional)
+            Object.assign(skills, options.skillsOptional);
+        try {
+            await updateSkillsLock(skills, kitMeta?.name ? `${kitMeta.name}@${kitMeta.version}` : undefined);
+            results.push({
+                category: "lock",
+                name: "skills-lock.json",
+                action: "fixed",
+                detail: "Generated lock file from config",
+            });
+        }
+        catch (err) {
+            results.push({
+                category: "lock",
+                name: "skills-lock.json",
+                action: "failed",
+                detail: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    if (!cliLock && options.toolsConfig) {
+        console.log(`\nGenerating cli-lock.json...`);
+        const tools = {};
+        for (const [name, version] of Object.entries(options.toolsConfig)) {
+            tools[name] = { version, source: "mise" };
+        }
+        try {
+            await updateCliLock(tools);
+            results.push({
+                category: "lock",
+                name: "cli-lock.json",
+                action: "fixed",
+                detail: "Generated lock file from config",
+            });
+        }
+        catch (err) {
+            results.push({
+                category: "lock",
+                name: "cli-lock.json",
+                action: "failed",
+                detail: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    // 4. Note secrets that need manual action
+    const missingSecrets = options.secrets.filter((s) => !s.available);
+    for (const s of missingSecrets) {
+        results.push({
+            category: "secret",
+            name: s.name,
+            action: "needs_manual",
+            detail: `${s.detail} (source: ${s.source})`,
+        });
+    }
+    return results;
+}
+/**
+ * Format fix results for display
+ */
+export function formatFixResults(results) {
+    return {
+        fixed: results.filter((r) => r.action === "fixed"),
+        needsManual: results.filter((r) => r.action === "needs_manual"),
+        failed: results.filter((r) => r.action === "failed"),
+    };
+}
+/**
+ * `kit fix` — auto-remediation pipeline. Six steps: install missing
+ * tools, generate lock files, surface unauthenticated services, generate
+ * .env.template, harden .gitignore, install git hooks. Returns false when
+ * any step requires manual intervention.
+ *
+ * Extracted from cli.ts (codebase-review follow-up).
+ */
+export async function cmdFix() {
+    console.log(`${c.bold}${c.cyan}kit fix${c.reset}`);
+    console.log(`${c.dim}${"─".repeat(50)}${c.reset}\n`);
+    const config = await loadConfig(resolve(process.cwd(), ".kit.toml"));
+    let fixedCount = 0;
+    let manualCount = 0;
+    const manualActions = [];
+    return await withGovernance(config, {
+        operation: "fix",
+        operationType: "write",
+        metadata: {},
+    }, async () => {
+        // 1. Check and fix missing tools
+        if (config.tools && Object.keys(config.tools).length > 0) {
+            console.log(`${c.bold}[1/6] Tools${c.reset}`);
+            const toolResults = await checkTools(config.tools);
+            const missingTools = toolResults.filter((t) => !t.ok);
+            if (missingTools.length > 0) {
+                console.log(`${c.dim}Installing ${missingTools.length} missing tool(s)...${c.reset}\n`);
+                const installResults = await installTools(config.tools);
+                for (const r of installResults) {
+                    if (r.action === "installed") {
+                        const icon = `${c.green}✓${c.reset}`;
+                        console.log(`  ${icon} ${r.name}  ${c.green}installed${c.reset}  ${c.dim}${r.detail}${c.reset}`);
+                        fixedCount++;
+                    }
+                    else if (r.action === "failed") {
+                        const icon = `${c.red}✗${c.reset}`;
+                        console.log(`  ${icon} ${r.name}  ${c.red}failed${c.reset}  ${c.dim}${r.detail}${c.reset}`);
+                        manualActions.push(`Install ${r.name} manually: ${r.detail}`);
+                        manualCount++;
+                    }
+                }
+            }
+            else {
+                console.log(`${c.dim}All tools installed${c.reset}`);
+            }
+            console.log();
+        }
+        // 2. Check and fix missing lock files
+        console.log(`${c.bold}[2/6] Lock Files${c.reset}`);
+        const skillsLock = await readSkillsLock();
+        const cliLock = await readCliLock();
+        if (!skillsLock || !cliLock) {
+            console.log(`${c.dim}Generating missing lock files...${c.reset}\n`);
+            // Generate skills lock
+            if (!skillsLock) {
+                const skills = {};
+                if (config.skills?.required) {
+                    Object.assign(skills, config.skills.required);
+                }
+                if (config.skills?.optional) {
+                    Object.assign(skills, config.skills.optional);
+                }
+                const kitMeta = await readkitMeta();
+                await updateSkillsLock(skills, kitMeta?.name ? `${kitMeta.name}@${kitMeta.version}` : undefined);
+                console.log(`  ${c.green}✓${c.reset} Generated skills-lock.json`);
+                fixedCount++;
+            }
+            // Generate CLI lock
+            if (!cliLock) {
+                const tools = {};
+                if (config.tools) {
+                    for (const [name, version] of Object.entries(config.tools)) {
+                        tools[name] = { version, source: "mise" };
+                    }
+                }
+                await updateCliLock(tools);
+                console.log(`  ${c.green}✓${c.reset} Generated cli-lock.json`);
+                fixedCount++;
+            }
+        }
+        else {
+            console.log(`${c.dim}Lock files exist${c.reset}`);
+        }
+        console.log();
+        // 3. Check services that need manual login
+        console.log(`${c.bold}[3/6] Services${c.reset}`);
+        if (config.services && Object.keys(config.services).length > 0) {
+            const serviceResults = await checkServices(config.services);
+            const unauthenticated = serviceResults.filter((s) => !s.authenticated);
+            if (unauthenticated.length > 0) {
+                console.log(`${c.yellow}${unauthenticated.length} service(s) require manual authentication${c.reset}\n`);
+                for (const s of unauthenticated) {
+                    console.log(`  ${c.yellow}!${c.reset} ${s.name}  ${c.yellow}not authenticated${c.reset}  ${c.dim}${s.output}${c.reset}`);
+                    const loginCmd = config.services[s.name]?.login ?? "";
+                    if (loginCmd.trim().startsWith("#")) {
+                        // Informational ("#"-prefixed) login — no CLI to run, only docs.
+                        manualActions.push(`${s.name}: ${loginCmd.trim().replace(/^#\s*/, "")}`);
+                    }
+                    else {
+                        manualActions.push(`Login to ${s.name}: run 'kit login' or '${loginCmd}'`);
+                    }
+                    manualCount++;
+                }
+            }
+            else {
+                console.log(`${c.dim}All services authenticated${c.reset}`);
+            }
+        }
+        else {
+            console.log(`${c.dim}No services configured${c.reset}`);
+        }
+        console.log();
+        // 4. Generate .env.template if secrets keys configured but template missing
+        console.log(`${c.bold}[4/6] Secrets Template${c.reset}`);
+        const templatePath = config.secrets?.template;
+        if (templatePath && config.secrets?.keys && Object.keys(config.secrets.keys).length > 0) {
+            let templateExists = false;
+            try {
+                await access(templatePath);
+                templateExists = true;
+            }
+            catch {
+                templateExists = false;
+            }
+            if (templateExists) {
+                console.log(`${c.dim}Template ${templatePath} exists${c.reset}`);
+            }
+            else {
+                const keyNames = Object.keys(config.secrets.keys);
+                const body = [
+                    `# .env.template — generated by kit fix`,
+                    `# Fill in real values in .env.local (do NOT commit .env.local).`,
+                    ``,
+                    ...keyNames.map((k) => `${k}=`),
+                    ``,
+                ].join("\n");
+                try {
+                    await writeFile(templatePath, body, { encoding: "utf-8", flag: "wx" });
+                    console.log(`  ${c.green}✓${c.reset} Generated ${templatePath}  ${c.dim}(${keyNames.length} keys)${c.reset}`);
+                    fixedCount++;
+                }
+                catch (err) {
+                    const msg = err instanceof Error ? err.message : String(err);
+                    console.log(`  ${c.red}✗${c.reset} Failed to write ${templatePath}: ${msg}`);
+                    manualActions.push(`Create ${templatePath} manually with ${keyNames.length} keys`);
+                    manualCount++;
+                }
+            }
+        }
+        else {
+            console.log(`${c.dim}No secrets template configured${c.reset}`);
+        }
+        console.log();
+        // 5. Harden .gitignore — ensure .env*, *.pem, id_rsa, .kit/elevation.json
+        //    are ignored. Idempotent: only appends what's missing.
+        console.log(`${c.bold}[5/6] .gitignore${c.reset}`);
+        try {
+            const gitignorePath = resolve(process.cwd(), ".gitignore");
+            let current = "";
+            try {
+                current = await readFile(gitignorePath, "utf-8");
+            }
+            catch {
+                current = "";
+            }
+            const required = [
+                ".env",
+                ".env.local",
+                ".env.local.*",
+                ".env.*.local",
+                ".env.*.backup",
+                "*.prod-backup",
+                ".kit/elevation.json",
+                ".kit-audit.jsonl",
+                ".kit-audit.pending",
+                ".kit-skipped-commits.jsonl",
+            ];
+            const lines = current.split("\n").map((l) => l.trim());
+            const missing = required.filter((r) => !lines.includes(r));
+            if (missing.length === 0) {
+                console.log(`${c.dim}.gitignore already hardened${c.reset}`);
+            }
+            else {
+                const appended = (current.endsWith("\n") || current === "" ? "" : "\n") +
+                    "\n# kit fix — secret-leak prevention\n" +
+                    missing.join("\n") +
+                    "\n";
+                await writeFile(gitignorePath, current + appended, "utf-8");
+                console.log(`  ${c.green}✓${c.reset} Added ${missing.length} pattern(s) to .gitignore`);
+                for (const m of missing) {
+                    console.log(`     ${c.dim}+ ${m}${c.reset}`);
+                }
+                fixedCount++;
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.log(`  ${c.red}✗${c.reset} .gitignore harden failed: ${msg}`);
+            manualActions.push("Harden .gitignore manually (.env*, *.pem, id_rsa)");
+            manualCount++;
+        }
+        console.log();
+        // 6. Install git hooks if configured but not present. Reuses cmdHooks's
+        //    installHooks() — same bypass-detector pair lands too.
+        console.log(`${c.bold}[6/6] Git Hooks${c.reset}`);
+        if (config.hooks && Object.keys(config.hooks).length > 0) {
+            try {
+                const hookResults = await installHooks(config.hooks);
+                const installed = hookResults.filter((r) => r.action === "installed");
+                const updated = hookResults.filter((r) => r.action === "updated");
+                const failed = hookResults.filter((r) => r.action === "failed");
+                if (installed.length > 0) {
+                    console.log(`  ${c.green}✓${c.reset} Installed ${installed.length} hook(s): ${installed.map((r) => r.hookName).join(", ")}`);
+                    fixedCount++;
+                }
+                if (updated.length > 0) {
+                    console.log(`  ${c.dim}↻ Updated ${updated.length} existing hook(s): ${updated.map((r) => r.hookName).join(", ")}${c.reset}`);
+                }
+                if (failed.length > 0) {
+                    for (const f of failed) {
+                        console.log(`  ${c.red}✗${c.reset} ${f.hookName}: ${f.detail}`);
+                        manualActions.push(`Install ${f.hookName} hook manually`);
+                        manualCount++;
+                    }
+                }
+                if (installed.length === 0 && updated.length === 0 && failed.length === 0) {
+                    console.log(`${c.dim}Hooks up to date${c.reset}`);
+                }
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                console.log(`  ${c.red}✗${c.reset} Hooks install failed: ${msg}`);
+                manualActions.push("Run 'kit hooks install' manually");
+                manualCount++;
+            }
+        }
+        else {
+            console.log(`${c.dim}No hooks configured in .kit.toml${c.reset}`);
+        }
+        console.log();
+        // Summary
+        console.log(`${c.bold}${c.cyan}Summary${c.reset}`);
+        console.log(`${c.dim}${"─".repeat(50)}${c.reset}\n`);
+        if (fixedCount > 0) {
+            console.log(`  ${c.green}✓${c.reset} Fixed ${fixedCount} issue(s) automatically`);
+        }
+        if (manualCount > 0) {
+            console.log(`  ${c.yellow}!${c.reset} ${manualCount} issue(s) require manual intervention:\n`);
+            for (const action of manualActions) {
+                console.log(`     ${c.dim}•${c.reset} ${action}`);
+            }
+            console.log();
+            console.log(`${c.dim}Run ${c.reset}${c.bold}kit check${c.reset}${c.dim} to verify status after manual fixes${c.reset}`);
+        }
+        else if (fixedCount === 0) {
+            console.log(`  ${c.green}✓${c.reset} Nothing to fix — all checks passing`);
+        }
+        console.log();
+        return manualCount === 0;
+    });
+}
+//# sourceMappingURL=fix.js.map

package/dist/fix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix.js","sourceRoot":"","sources":["../src/fix.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EACL,WAAW,EACX,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAmBtC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAmB;IAC/C,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,iCAAiC;IACjC,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,MAAM,aAAa,CAAC,CAAC;QAExD,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBAC9B,SAAS,CAAC,sCAAsC;YAClD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;gBACrD,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAEvE,qEAAqE;QACrE,+EAA+E;QAC/E,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,cAAc;oBACtB,MAAM,EAAE,CAAC,CAAC,MAAM;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAClE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,uBAAuB,WAAW,CAAC,MAAM,gBAAgB,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,iBAAiB,GAAkC,EAAE,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,GAAG;gBAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QAC3C,CAAC;QACD,MAAM,YAAY,GAChB,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,iBAAiB,CAAC,CAAC;QACzE,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;gBACzC,SAAS,CAAC,6BAA6B;YACzC,CAAC;YAED,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,CAAC,CAAC,MAAM;iBACjB,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,KAAK,kBAAkB,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,cAAc;oBACtB,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,0BAA0B;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,cAAc,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IAEpC,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,cAAc;YAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,cAAc;YAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAE1E,IAAI,CAAC;YACH,MAAM,gBAAgB,CACpB,MAAM,EACN,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CACjE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,iCAAiC;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,MAAM,KAAK,GAGP,EAAE,CAAC;QACP,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,iCAAiC;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnE,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,MAAM,GAAG;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAoB;IAKnD,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC;QAClD,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC;QAC/D,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;KACrD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAErD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAErE,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,OAAO,MAAM,cAAc,CACzB,MAAM,EACN;QACE,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE;KACb,EACD,KAAK,IAAI,EAAE;QACT,iCAAiC;QACjC,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9C,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAEtD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,cAAc,YAAY,CAAC,MAAM,sBAAsB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;gBACxF,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAExD,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;oBAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;wBACrC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;wBACjG,UAAU,EAAE,CAAC;oBACf,CAAC;yBAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;wBACjC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;wBACnC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;wBAC5F,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;wBAC9D,WAAW,EAAE,CAAC;oBAChB,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,sBAAsB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,cAAc,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QAEpC,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,mCAAmC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YAEpE,uBAAuB;YACvB,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,MAAM,GAA2B,EAAE,CAAC;gBAC1C,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;oBAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAChD,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;oBAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAChD,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;gBACpC,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACjG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,6BAA6B,CAAC,CAAC;gBAClE,UAAU,EAAE,CAAC;YACf,CAAC;YAED,oBAAoB;YACpB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,KAAK,GAAkG,EAAE,CAAC;gBAChH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC3D,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;oBAC5C,CAAC;gBACH,CAAC;gBAED,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,0BAA0B,CAAC,CAAC;gBAC/D,UAAU,EAAE,CAAC;YACf,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,2CAA2C;QAC3C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5D,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAEvE,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,4CAA4C,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;gBACzG,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;oBAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;oBACzH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;oBACtD,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;wBACpC,iEAAiE;wBACjE,aAAa,CAAC,IAAI,CAChB,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CACrD,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,aAAa,CAAC,IAAI,CAChB,YAAY,CAAC,CAAC,IAAI,yBAAyB,QAAQ,GAAG,CACvD,CAAC;oBACJ,CAAC;oBACD,WAAW,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,4EAA4E;QAC5E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC9C,IAAI,YAAY,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxF,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC3B,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,GAAG,KAAK,CAAC;YACzB,CAAC;YACD,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,YAAY,YAAY,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClD,MAAM,IAAI,GAAG;oBACX,wCAAwC;oBACxC,iEAAiE;oBACjE,EAAE;oBACF,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;oBAC/B,EAAE;iBACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACb,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACvE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,cAAc,YAAY,KAAK,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,MAAM,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC9G,UAAU,EAAE,CAAC;gBACf,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,oBAAoB,YAAY,KAAK,GAAG,EAAE,CAAC,CAAC;oBAC7E,aAAa,CAAC,IAAI,CAAC,UAAU,YAAY,kBAAkB,QAAQ,CAAC,MAAM,OAAO,CAAC,CAAC;oBACnF,WAAW,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,iCAAiC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,0EAA0E;QAC1E,2DAA2D;QAC3D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;YAC3D,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,EAAE,CAAC;YACf,CAAC;YACD,MAAM,QAAQ,GAAG;gBACf,MAAM;gBACN,YAAY;gBACZ,cAAc;gBACd,cAAc;gBACd,eAAe;gBACf,eAAe;gBACf,qBAAqB;gBACrB,kBAAkB;gBAClB,oBAAoB;gBACpB,4BAA4B;aAC7B,CAAC;YACF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,8BAA8B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GACZ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBACtD,wCAAwC;oBACxC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;oBAClB,IAAI,CAAC;gBACP,MAAM,SAAS,CAAC,aAAa,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC5D,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,UAAU,OAAO,CAAC,MAAM,2BAA2B,CAC3E,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC/C,CAAC;gBACD,UAAU,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,8BAA8B,GAAG,EAAE,CAAC,CAAC;YACtE,aAAa,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACxE,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,wEAAwE;QACxE,2DAA2D;QAC3D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAChC,CAAC;gBACF,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;gBAClE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;gBAChE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,cAAc,SAAS,CAAC,MAAM,aAAa,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChH,CAAC;oBACF,UAAU,EAAE,CAAC;gBACf,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,GAAG,aAAa,OAAO,CAAC,MAAM,sBAAsB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CACjH,CAAC;gBACJ,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;wBACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;wBAChE,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,gBAAgB,CAAC,CAAC;wBAC1D,WAAW,EAAE,CAAC;oBAChB,CAAC;gBACH,CAAC;gBACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,0BAA0B,GAAG,EAAE,CAAC,CAAC;gBAClE,aAAa,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBACvD,WAAW,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,mCAAmC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,UAAU;QACV,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAErD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,UAAU,UAAU,yBAAyB,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,WAAW,0CAA0C,CAAC,CAAC;YAC/F,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,uCAAuC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1H,CAAC;aAAM,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,sCAAsC,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,WAAW,KAAK,CAAC,CAAC;IAC3B,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/governance-middleware.d.ts

@@ -0,0 +1,22 @@
+import type { kitConfig } from "./config.js";
+import { type OperationType } from "./governance.js";
+export interface OperationContext {
+    operation: string;
+    operationType: OperationType;
+    destructive?: boolean;
+    metadata?: Record<string, unknown>;
+    estimatedTokens?: number;
+}
+export interface GovernanceResult {
+    allowed: boolean;
+    reason?: string;
+    warnings?: string[];
+}
+/**
+ * Execute an operation with full governance checks
+ */
+export declare function withGovernance<T>(config: kitConfig, context: OperationContext, operation: () => Promise<T>): Promise<T>;
+/**
+ * Perform pre-flight checks without executing the operation
+ */
+export declare function checkGovernance(config: kitConfig, context: OperationContext): Promise<GovernanceResult>;

package/dist/governance-middleware.js

@@ -0,0 +1,173 @@
+import { mergeGovernanceConfigAsync, checkOperationAllowed, } from "./governance.js";
+import { checkRevocationStatus, handleRevocation } from "./revocation.js";
+import { checkBudgetLimits, recordUsage } from "./budget.js";
+import { logAuditEvent } from "./audit.js";
+import { requestApproval } from "./approval.js";
+import { checkSecretExpiration, formatSecretExpirationWarnings, hasExpiredSecrets } from "./secret-expiration.js";
+/**
+ * Execute an operation with full governance checks
+ */
+export async function withGovernance(config, context, operation) {
+    const startTime = Date.now();
+    const governanceConfig = await mergeGovernanceConfigAsync(config.governance);
+    // Skip governance if disabled
+    if (!governanceConfig.enabled) {
+        return await operation();
+    }
+    // Audit a denied operation with the shared event shape. DRYs the 5 pre-execute
+    // deny paths below — each fails closed (audit, then throw).
+    const auditDeny = (error, extra) => logAuditEvent(governanceConfig, {
+        operation: context.operation,
+        environment: governanceConfig.environment,
+        success: false,
+        error,
+        metadata: extra ? { ...context.metadata, ...extra } : context.metadata,
+    });
+    // 1. Check revocation status
+    const revoked = await checkRevocationStatus(config.governance);
+    if (revoked) {
+        await handleRevocation(config.governance);
+        await auditDeny("Access revoked");
+        throw new Error("Access revoked");
+    }
+    // 2. Check budget limits
+    const budgetCheck = await checkBudgetLimits(config.governance, context.estimatedTokens || 0);
+    if (!budgetCheck.allowed) {
+        await auditDeny(budgetCheck.reason || "Budget limit exceeded");
+        throw new Error(budgetCheck.reason || "Budget limit exceeded");
+    }
+    // Track whether the operator already approved this op in step 3, so a
+    // destructive op that also needed permission-approval isn't prompted twice.
+    let approvedForOp = false;
+    // 3. Check operation permissions
+    const permissionCheck = checkOperationAllowed(governanceConfig, context.operationType);
+    if (!permissionCheck.allowed) {
+        // Check if approval can override
+        if (permissionCheck.requiresApproval) {
+            const approved = await requestApproval(config.governance, {
+                operation: context.operation,
+                environment: governanceConfig.environment,
+                reason: permissionCheck.reason || "Operation requires approval",
+                metadata: context.metadata,
+            });
+            if (!approved) {
+                await auditDeny("Approval denied");
+                throw new Error("Operation not approved");
+            }
+            approvedForOp = true;
+        }
+        else {
+            await auditDeny(permissionCheck.reason || "Operation not allowed");
+            throw new Error(permissionCheck.reason || "Operation not allowed");
+        }
+    }
+    // 4. Destructive operations require approval — unless step 3 already obtained
+    //    approval for this same operation (avoid prompting the operator twice).
+    if (context.destructive && !approvedForOp) {
+        const approved = await requestApproval(config.governance, {
+            operation: context.operation,
+            environment: governanceConfig.environment,
+            reason: "Destructive operation requires approval",
+            metadata: context.metadata,
+        });
+        if (!approved) {
+            await auditDeny("Destructive operation denied");
+            throw new Error("Destructive operation not approved");
+        }
+    }
+    // 5. Check secret expiration — BLOCKS the operation if any secret is expired
+    if (governanceConfig.secrets.check_expiration && config.secrets?.keys) {
+        const secretKeys = Object.keys(config.secrets.keys);
+        const expirations = await checkSecretExpiration(config.governance, secretKeys, config.secrets);
+        if (hasExpiredSecrets(expirations)) {
+            const warnings = formatSecretExpirationWarnings(expirations);
+            console.warn("\n" + warnings);
+            // Block operation if secrets are expired
+            await auditDeny("Expired secrets detected", {
+                expired_secrets: expirations.filter((e) => e.expired).map((e) => e.key),
+            });
+            throw new Error("Operation blocked: expired secrets detected");
+        }
+    }
+    // Execute the operation
+    let error;
+    let result;
+    try {
+        result = await operation();
+    }
+    catch (err) {
+        error = err instanceof Error ? err.message : String(err);
+        // Log failure
+        await logAuditEvent(governanceConfig, {
+            operation: context.operation,
+            environment: governanceConfig.environment,
+            success: false,
+            duration_ms: Date.now() - startTime,
+            error,
+            metadata: context.metadata,
+        });
+        throw err;
+    }
+    // 6. Record usage and log success
+    await recordUsage(config.governance, context.estimatedTokens || 0);
+    await logAuditEvent(governanceConfig, {
+        operation: context.operation,
+        environment: governanceConfig.environment,
+        success: true,
+        duration_ms: Date.now() - startTime,
+        metadata: context.metadata,
+    });
+    return result;
+}
+/**
+ * Perform pre-flight checks without executing the operation
+ */
+export async function checkGovernance(config, context) {
+    const governanceConfig = await mergeGovernanceConfigAsync(config.governance);
+    const warnings = [];
+    // Skip governance if disabled
+    if (!governanceConfig.enabled) {
+        return { allowed: true };
+    }
+    // 1. Check revocation status
+    const revoked = await checkRevocationStatus(config.governance);
+    if (revoked) {
+        return {
+            allowed: false,
+            reason: "Access has been revoked",
+        };
+    }
+    // 2. Check budget limits
+    const budgetCheck = await checkBudgetLimits(config.governance, context.estimatedTokens || 0);
+    if (!budgetCheck.allowed) {
+        return {
+            allowed: false,
+            reason: budgetCheck.reason,
+        };
+    }
+    // 3. Check operation permissions
+    const permissionCheck = checkOperationAllowed(governanceConfig, context.operationType);
+    if (!permissionCheck.allowed && !permissionCheck.requiresApproval) {
+        return {
+            allowed: false,
+            reason: permissionCheck.reason,
+        };
+    }
+    if (permissionCheck.requiresApproval) {
+        warnings.push("This operation will require approval");
+    }
+    // 4. Check secret expiration
+    if (governanceConfig.secrets.check_expiration && config.secrets?.keys) {
+        const secretKeys = Object.keys(config.secrets.keys);
+        const expirations = await checkSecretExpiration(config.governance, secretKeys, config.secrets);
+        if (hasExpiredSecrets(expirations)) {
+            return {
+                allowed: false,
+                reason: "Expired secrets detected",
+                warnings,
+            };
+        }
+    }
+    return { allowed: true, warnings };
+}
+//# sourceMappingURL=governance-middleware.js.map

package/dist/governance-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-middleware.js","sourceRoot":"","sources":["../src/governance-middleware.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,GAEtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAgBlH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAiB,EACjB,OAAyB,EACzB,SAA2B;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,gBAAgB,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAE7E,8BAA8B;IAC9B,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;IAED,+EAA+E;IAC/E,4DAA4D;IAC5D,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,KAA+B,EAAE,EAAE,CACnE,aAAa,CAAC,gBAAgB,EAAE;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,gBAAgB,CAAC,WAAW;QACzC,OAAO,EAAE,KAAK;QACd,KAAK;QACL,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ;KACvE,CAAC,CAAC;IAEL,6BAA6B;IAC7B,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpC,CAAC;IAED,yBAAyB;IACzB,MAAM,WAAW,GAAG,MAAM,iBAAiB,CACzC,MAAM,CAAC,UAAU,EACjB,OAAO,CAAC,eAAe,IAAI,CAAC,CAC7B,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,IAAI,uBAAuB,CAAC,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,IAAI,uBAAuB,CAAC,CAAC;IACjE,CAAC;IAED,sEAAsE;IACtE,4EAA4E;IAC5E,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,iCAAiC;IACjC,MAAM,eAAe,GAAG,qBAAqB,CAC3C,gBAAgB,EAChB,OAAO,CAAC,aAAa,CACtB,CAAC;IACF,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QAC7B,iCAAiC;QACjC,IAAI,eAAe,CAAC,gBAAgB,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE;gBACxD,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,gBAAgB,CAAC,WAAW;gBACzC,MAAM,EACJ,eAAe,CAAC,MAAM,IAAI,6BAA6B;gBACzD,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,SAAS,CAAC,iBAAiB,CAAC,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,CAAC;YACD,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,CAAC,eAAe,CAAC,MAAM,IAAI,uBAAuB,CAAC,CAAC;YACnE,MAAM,IAAI,KAAK,CACb,eAAe,CAAC,MAAM,IAAI,uBAAuB,CAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE;YACxD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,gBAAgB,CAAC,WAAW;YACzC,MAAM,EAAE,yCAAyC;YACjD,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,SAAS,CAAC,8BAA8B,CAAC,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,IAAI,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACtE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAC7C,MAAM,CAAC,UAAU,EACjB,UAAU,EACV,MAAM,CAAC,OAAO,CACf,CAAC;QAEF,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;YAE9B,yCAAyC;YACzC,MAAM,SAAS,CAAC,0BAA0B,EAAE;gBAC1C,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;aACxE,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,IAAI,KAAyB,CAAC;IAC9B,IAAI,MAAS,CAAC;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEzD,cAAc;QACd,MAAM,aAAa,CAAC,gBAAgB,EAAE;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,gBAAgB,CAAC,WAAW;YACzC,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,KAAK;YACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QAEH,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,kCAAkC;IAClC,MAAM,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC;IAEnE,MAAM,aAAa,CAAC,gBAAgB,EAAE;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,gBAAgB,CAAC,WAAW;QACzC,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAiB,EACjB,OAAyB;IAEzB,MAAM,gBAAgB,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,8BAA8B;IAC9B,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,6BAA6B;IAC7B,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,yBAAyB;SAClC,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,MAAM,WAAW,GAAG,MAAM,iBAAiB,CACzC,MAAM,CAAC,UAAU,EACjB,OAAO,CAAC,eAAe,IAAI,CAAC,CAC7B,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,WAAW,CAAC,MAAM;SAC3B,CAAC;IACJ,CAAC;IAED,iCAAiC;IACjC,MAAM,eAAe,GAAG,qBAAqB,CAC3C,gBAAgB,EAChB,OAAO,CAAC,aAAa,CACtB,CAAC;IACF,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC;QAClE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,eAAe,CAAC,MAAM;SAC/B,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,gBAAgB,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACxD,CAAC;IAED,6BAA6B;IAC7B,IAAI,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACtE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAC7C,MAAM,CAAC,UAAU,EACjB,UAAU,EACV,MAAM,CAAC,OAAO,CACf,CAAC;QAEF,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,0BAA0B;gBAClC,QAAQ;aACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC"}