zelari-code 1.45.0 → 1.47.1

package/dist/cli/tools/inspectCommand.js

@@ -0,0 +1,346 @@
+/**
+ * inspectCommand — allowlisted, no-shell command inspector (WS3, v0.10.0).
+ *
+ * Available in plan/readOnly sessions exactly where `bash` is NOT: it gives
+ * plan-mode "execution-verified" observations (git state, `tsc --noEmit`)
+ * without unlocking mutations. The API is a discriminated union on
+ * `operation` — the model picks from a menu, it never writes a command
+ * string, so tokenizer/quote-parsing/metacharacter injection do not exist by
+ * construction. Every argv is built here and executed with
+ * `spawn(cmd, argv, { shell: false })`.
+ *
+ * Loud results: every payload carries `inspectionClass`
+ * ('git-inspection' | 'project-code-execution' | 'env-info') so the model
+ * knows when it is executing project code (typecheck) vs reading git state.
+ * `typecheck` additionally applies the S3.5 artifact-safety guard (see
+ * inspectTypecheckSafety.ts): tsbuildinfo redirected to the OS temp dir and
+ * a pre/post workspace fingerprint — any delta is reported as `degraded`
+ * with cleanup, never silently ignored.
+ *
+ * Kill-switch: ZELARI_INSPECT_COMMAND=0 (checked at registration time).
+ */
+import { spawn } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { existsSync, promises as fs } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { z } from 'zod';
+import { typedOk, typedErr } from '@zelari/core/harness/tools/toolTypes';
+import { classifyTypecheckRefusal, cleanupArtifacts, diffFingerprints, fingerprintWorkspace, } from './inspectTypecheckSafety.js';
+/** Combined output cap (stdout+stderr) — 8 KB, matches the plan. */
+const MAX_OUTPUT_CHARS = 8 * 1024;
+/** Internal process timeout; the tool-level timeoutMs is 90 s. */
+const SPAWN_TIMEOUT_MS = 85_000;
+/** typecheck gets a longer leash: real projects take tens of seconds. */
+const TYPECHECK_TIMEOUT_MS = 85_000;
+export const inspectInputSchema = z.discriminatedUnion('operation', [
+    z.object({ operation: z.literal('git_status'), short: z.boolean().optional() }),
+    z.object({
+        operation: z.literal('git_log'),
+        limit: z.number().int().min(1).max(200).optional(),
+        oneline: z.boolean().optional(),
+    }),
+    z.object({
+        operation: z.literal('git_diff'),
+        staged: z.boolean().optional(),
+        path: z.string().optional(),
+    }),
+    z.object({ operation: z.literal('git_show'), ref: z.string().min(1) }),
+    z.object({ operation: z.literal('git_branch_current') }),
+    z.object({ operation: z.literal('git_ls_files') }),
+    z.object({ operation: z.literal('typecheck'), project: z.string().optional() }),
+    z.object({ operation: z.literal('node_version') }),
+    z.object({ operation: z.literal('npm_ls') }),
+    z.object({ operation: z.literal('npm_outdated') }),
+    z.object({ operation: z.literal('npm_view'), package: z.string().min(1) }),
+]);
+/**
+ * Resolve a hoisted monorepo binary (`typescript/bin/tsc`, `npm/bin/npm-cli.js`).
+ * Walks from `start` toward the filesystem root so `npm test --workspace=@zelari/core`
+ * (cwd = packages/core) still finds the root-hoisted toolchain.
+ */
+export function resolveNodeModuleBin(start, rel) {
+    let dir = path.resolve(start);
+    for (;;) {
+        const candidate = path.join(dir, 'node_modules', rel);
+        if (existsSync(candidate))
+            return candidate;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return undefined;
+        dir = parent;
+    }
+}
+/** Free-string args that must never be interpretable as flags. */
+function rejectFlagLike(kind, value) {
+    if (value.startsWith('-')) {
+        return `${kind} must not start with "-" (got ${JSON.stringify(value)}) — pass a value, not a flag`;
+    }
+    return null;
+}
+/**
+ * Pure argv builder — one case per operation. No user string ever reaches a
+ * shell; forced safety flags (`--no-ext-diff --no-textconv` on diff/show)
+ * cannot be disabled by input.
+ */
+export function buildInspectCommand(op, ctx) {
+    switch (op.operation) {
+        case 'git_status':
+            return {
+                ok: true,
+                command: 'git',
+                argv: ['status', ...(op.short ? ['--short'] : [])],
+                inspectionClass: 'git-inspection',
+            };
+        case 'git_log':
+            return {
+                ok: true,
+                command: 'git',
+                argv: [
+                    'log',
+                    ...(op.oneline ? ['--oneline'] : []),
+                    ...(op.limit !== undefined ? ['-n', String(op.limit)] : []),
+                ],
+                inspectionClass: 'git-inspection',
+            };
+        case 'git_diff': {
+            if (op.path !== undefined) {
+                const err = rejectFlagLike('path', op.path);
+                if (err)
+                    return { ok: false, reason: err };
+            }
+            return {
+                ok: true,
+                command: 'git',
+                argv: [
+                    'diff',
+                    '--no-ext-diff',
+                    '--no-textconv',
+                    ...(op.staged ? ['--staged'] : []),
+                    ...(op.path !== undefined ? ['--', op.path] : []),
+                ],
+                inspectionClass: 'git-inspection',
+            };
+        }
+        case 'git_show': {
+            const err = rejectFlagLike('ref', op.ref);
+            if (err)
+                return { ok: false, reason: err };
+            return {
+                ok: true,
+                command: 'git',
+                argv: ['show', '--no-ext-diff', '--no-textconv', op.ref],
+                inspectionClass: 'git-inspection',
+            };
+        }
+        case 'git_branch_current':
+            return { ok: true, command: 'git', argv: ['branch', '--show-current'], inspectionClass: 'git-inspection' };
+        case 'git_ls_files':
+            return { ok: true, command: 'git', argv: ['ls-files'], inspectionClass: 'git-inspection' };
+        case 'node_version':
+            return { ok: true, command: process.execPath, argv: ['--version'], inspectionClass: 'env-info' };
+        case 'npm_ls':
+        case 'npm_outdated':
+        case 'npm_view': {
+            const npmCli = ctx.npmCliPath ??
+                resolveNodeModuleBin(ctx.root, path.join('npm', 'bin', 'npm-cli.js')) ??
+                path.join(ctx.root, 'node_modules', 'npm', 'bin', 'npm-cli.js');
+            if (op.operation === 'npm_view') {
+                const err = rejectFlagLike('package', op.package);
+                if (err)
+                    return { ok: false, reason: err };
+            }
+            const sub = op.operation === 'npm_ls'
+                ? ['ls', '--depth=0']
+                : op.operation === 'npm_outdated'
+                    ? ['outdated']
+                    : ['view', op.package];
+            return { ok: true, command: process.execPath, argv: [npmCli, ...sub], inspectionClass: 'env-info' };
+        }
+        case 'typecheck': {
+            const project = path.resolve(ctx.cwd, op.project ?? 'tsconfig.json');
+            const hash = createHash('sha256').update(project).digest('hex').slice(0, 16);
+            const tsBuildInfoFile = path.join(os.tmpdir(), 'zelari-inspect', `${hash}.tsbuildinfo`);
+            return {
+                ok: true,
+                command: process.execPath,
+                argv: [
+                    ctx.tscPath ??
+                        resolveNodeModuleBin(ctx.root, path.join('typescript', 'bin', 'tsc')) ??
+                        resolveNodeModuleBin(ctx.cwd, path.join('typescript', 'bin', 'tsc')) ??
+                        path.join(ctx.root, 'node_modules', 'typescript', 'bin', 'tsc'),
+                    '--noEmit',
+                    // S3.5 primary mechanism: redirect, never disable — composite forces
+                    // incremental (TS#30661), so --incremental false would break on the
+                    // very fixture it must support. The CLI override wins over any
+                    // tsBuildInfoFile written into the tsconfig.
+                    '--incremental',
+                    '--tsBuildInfoFile',
+                    tsBuildInfoFile,
+                    '-p',
+                    project,
+                ],
+                inspectionClass: 'project-code-execution',
+                tsBuildInfoFile,
+            };
+        }
+    }
+}
+/** Spawn WITHOUT a shell; kill on timeout/abort; never reject. */
+export function runSpawn(command, argv, opts) {
+    return new Promise((resolve) => {
+        let child;
+        try {
+            child = spawn(command, argv, { cwd: opts.cwd, shell: false });
+        }
+        catch (err) {
+            resolve({ code: null, stdout: '', stderr: String(err), timedOut: false, spawnError: String(err) });
+            return;
+        }
+        let stdout = '';
+        let stderr = '';
+        let timedOut = false;
+        let settled = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill();
+        }, opts.timeoutMs);
+        const onAbort = () => {
+            timedOut = true;
+            child.kill();
+        };
+        opts.signal?.addEventListener('abort', onAbort, { once: true });
+        child.stdout?.on('data', (d) => (stdout += d.toString()));
+        child.stderr?.on('data', (d) => (stderr += d.toString()));
+        child.on('error', (err) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve({ code: null, stdout, stderr, timedOut, spawnError: err.message });
+        });
+        child.on('close', (code) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            opts.signal?.removeEventListener('abort', onAbort);
+            resolve({ code, stdout, stderr, timedOut });
+        });
+    });
+}
+function capOutput(stdout, stderr) {
+    const combined = stderr ? `${stdout}\n[stderr]\n${stderr}` : stdout;
+    if (combined.length <= MAX_OUTPUT_CHARS)
+        return { output: combined, truncated: false };
+    return {
+        output: `${combined.slice(0, MAX_OUTPUT_CHARS)}\n… (truncated, ${combined.length} chars total)`,
+        truncated: true,
+    };
+}
+/** typecheck with the S3.5 pre/post artifact guard. */
+async function typecheckGuarded(built, root, signal) {
+    const pre = await fingerprintWorkspace(root);
+    const r = await runSpawn(built.command, built.argv, { cwd: root, timeoutMs: TYPECHECK_TIMEOUT_MS, signal });
+    if (r.spawnError) {
+        return typedErr(`SPAWN_ERROR: typecheck could not launch: ${r.spawnError}`);
+    }
+    const { output, truncated } = capOutput(r.stdout, r.stderr);
+    const refusal = r.code !== 0 ? classifyTypecheckRefusal(`${r.stdout}\n${r.stderr}`) : null;
+    if (refusal) {
+        return typedOk({
+            status: 'unsupported_project_shape',
+            operation: 'typecheck',
+            inspectionClass: built.inspectionClass,
+            reason: refusal,
+            exitCode: r.code,
+            output,
+            truncated,
+        });
+    }
+    const post = await fingerprintWorkspace(root);
+    const delta = diffFingerprints(pre, post);
+    if (delta.newTsbuildinfo.length > 0 || delta.gitStatusChanged) {
+        const cleanup = await cleanupArtifacts(root, delta.newTsbuildinfo);
+        return typedOk({
+            status: 'degraded',
+            operation: 'typecheck',
+            inspectionClass: built.inspectionClass,
+            exitCode: r.code,
+            output,
+            truncated,
+            artifactsWritten: delta.newTsbuildinfo,
+            gitStatusChanged: delta.gitStatusChanged,
+            cleanedUp: cleanup.cleaned,
+            cleanupFailed: cleanup.failed,
+            note: 'UNEXPECTED WORKSPACE ARTIFACTS: the typecheck wrote build artifacts into the workspace ' +
+                'despite the tsbuildinfo redirect. This result is NOT a clean observation — treat the ' +
+                'typecheck verdict as unreliable until the artifact leak is understood. ' +
+                `${cleanup.cleaned.length} artifact(s) removed, ${cleanup.failed.length} could not be removed.`,
+        });
+    }
+    return typedOk({
+        status: 'ok',
+        operation: 'typecheck',
+        inspectionClass: built.inspectionClass,
+        exitCode: r.code,
+        output,
+        truncated,
+        note: r.code === 0
+            ? 'compiler completed with no diagnostics; tsbuildinfo was redirected to the OS temp dir — the workspace is untouched (verified by pre/post fingerprint)'
+            : `compiler exited ${r.code} — diagnostics above are real type errors (a successful, scoped observation: the run itself worked and wrote nothing to the workspace)`,
+    });
+}
+/**
+ * Create the `inspect_command` tool bound to a workspace root. Registration is
+ * the registry's job (readOnly/plan/explore only — full/verify keep `bash`).
+ */
+export function createInspectCommandTool(rootOrDeps) {
+    const deps = typeof rootOrDeps === 'string' ? { root: rootOrDeps } : rootOrDeps;
+    const tool = {
+        name: 'inspect_command',
+        description: 'Allowlisted read-only command inspector for plan/read-only sessions (no shell, no mutations). ' +
+            'Pick an operation instead of writing a command: git_status, git_log, git_diff, git_show, ' +
+            'git_branch_current, git_ls_files, typecheck, node_version, npm_ls, npm_outdated, npm_view. ' +
+            'typecheck runs the project TypeScript compiler with --noEmit and a temp-dir tsbuildinfo ' +
+            'redirect, verified by a pre/post workspace fingerprint (inspectionClass: ' +
+            "'project-code-execution' — you are executing the project's own toolchain, not reading git).",
+        permissions: ['read'],
+        timeoutMs: 90_000,
+        inputSchema: inspectInputSchema,
+        execute: async (input, ctx) => {
+            const op = input;
+            const cwd = ctx?.cwd ?? deps.root;
+            const built = buildInspectCommand(op, { root: deps.root, cwd, tscPath: deps.tscPath, npmCliPath: deps.npmCliPath });
+            if (!built.ok)
+                return typedErr(`INVALID_ARGUMENT: ${built.reason}`);
+            if (op.operation === 'typecheck') {
+                const tsc = built.argv[0];
+                try {
+                    await fs.access(tsc);
+                }
+                catch {
+                    return typedErr(`TYPESCRIPT_UNAVAILABLE: no TypeScript compiler at ${tsc} — inspect_command typecheck ` +
+                        'uses the project toolchain (walk-up to node_modules/typescript/bin/tsc) and refuses to ' +
+                        'guess. Install dependencies or fall back to read_file/grep_content.');
+                }
+                return typecheckGuarded(built, deps.root, ctx?.signal);
+            }
+            const r = await runSpawn(built.command, built.argv, { cwd, timeoutMs: SPAWN_TIMEOUT_MS, signal: ctx?.signal });
+            if (r.spawnError)
+                return typedErr(`SPAWN_ERROR: ${op.operation} could not launch: ${r.spawnError}`);
+            const { output, truncated } = capOutput(r.stdout, r.stderr);
+            return typedOk({
+                status: r.timedOut ? 'timeout' : 'ok',
+                operation: op.operation,
+                inspectionClass: built.inspectionClass,
+                exitCode: r.code,
+                output,
+                truncated,
+                ...(r.timedOut ? { note: `command timed out after ${SPAWN_TIMEOUT_MS} ms` } : {}),
+            });
+        },
+    };
+    return tool;
+}
+//# sourceMappingURL=inspectCommand.js.map

package/dist/cli/tools/inspectCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspectCommand.js","sourceRoot":"","sources":["../../../src/cli/tools/inspectCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAuB,MAAM,sCAAsC,CAAC;AAC9F,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC,oEAAoE;AACpE,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,CAAC;AAClC,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,yEAAyE;AACzE,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAIpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE;IAClE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC/E,CAAC,CAAC,MAAM,CAAC;QACP,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAClD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAChC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;IACxD,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;IAClD,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC/E,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;IAClD,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5C,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;IAClD,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;CAC3E,CAAC,CAAC;AA0BH;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,GAAW;IAC7D,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACrC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,GAAG,IAAI,iCAAiC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,8BAA8B,CAAC;IACrG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAoB,EAAE,GAAa;IACrE,QAAQ,EAAE,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,YAAY;YACf,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClD,eAAe,EAAE,gBAAgB;aAClC,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE;oBACJ,KAAK;oBACL,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5D;gBACD,eAAe,EAAE,gBAAgB;aAClC,CAAC;QACJ,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,GAAG;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC7C,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE;oBACJ,MAAM;oBACN,eAAe;oBACf,eAAe;oBACf,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClD;gBACD,eAAe,EAAE,gBAAgB;aAClC,CAAC;QACJ,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC3C,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,EAAE,CAAC,GAAG,CAAC;gBACxD,eAAe,EAAE,gBAAgB;aAClC,CAAC;QACJ,CAAC;QACD,KAAK,oBAAoB;YACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC;QAC7G,KAAK,cAAc;YACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC;QAC7F,KAAK,cAAc;YACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;QACnG,KAAK,QAAQ,CAAC;QACd,KAAK,cAAc,CAAC;QACpB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,MAAM,GACV,GAAG,CAAC,UAAU;gBACd,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;gBACrE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAClE,IAAI,EAAE,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;gBAClD,IAAI,GAAG;oBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC7C,CAAC;YACD,MAAM,GAAG,GACP,EAAE,CAAC,SAAS,KAAK,QAAQ;gBACvB,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC;gBACrB,CAAC,CAAC,EAAE,CAAC,SAAS,KAAK,cAAc;oBAC/B,CAAC,CAAC,CAAC,UAAU,CAAC;oBACd,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;QACtG,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7E,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,EAAE,GAAG,IAAI,cAAc,CAAC,CAAC;YACxF,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,OAAO,CAAC,QAAQ;gBACzB,IAAI,EAAE;oBACJ,GAAG,CAAC,OAAO;wBACT,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;wBACrE,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;wBACpE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC;oBACjE,UAAU;oBACV,qEAAqE;oBACrE,oEAAoE;oBACpE,+DAA+D;oBAC/D,6CAA6C;oBAC7C,eAAe;oBACf,mBAAmB;oBACnB,eAAe;oBACf,IAAI;oBACJ,OAAO;iBACR;gBACD,eAAe,EAAE,wBAAwB;gBACzC,eAAe;aAChB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAUD,kEAAkE;AAClE,MAAM,UAAU,QAAQ,CACtB,OAAe,EACf,IAAc,EACd,IAA8D;IAE9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAClE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAClE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC/B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,MAAc;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,eAAe,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACpE,IAAI,QAAQ,CAAC,MAAM,IAAI,gBAAgB;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvF,OAAO;QACL,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,mBAAmB,QAAQ,CAAC,MAAM,eAAe;QAC/F,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,KAAK,UAAU,gBAAgB,CAAC,KAA0C,EAAE,IAAY,EAAE,MAAoB;IAC5G,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC,4CAA4C,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;YACb,MAAM,EAAE,2BAA2B;YACnC,SAAS,EAAE,WAAW;YACtB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,CAAC,CAAC,IAAI;YAChB,MAAM;YACN,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACnE,OAAO,OAAO,CAAC;YACb,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,WAAW;YACtB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,QAAQ,EAAE,CAAC,CAAC,IAAI;YAChB,MAAM;YACN,SAAS;YACT,gBAAgB,EAAE,KAAK,CAAC,cAAc;YACtC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,SAAS,EAAE,OAAO,CAAC,OAAO;YAC1B,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,IAAI,EACF,yFAAyF;gBACzF,uFAAuF;gBACvF,yEAAyE;gBACzE,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,yBAAyB,OAAO,CAAC,MAAM,CAAC,MAAM,wBAAwB;SAClG,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;QACb,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,WAAW;QACtB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ,EAAE,CAAC,CAAC,IAAI;QAChB,MAAM;QACN,SAAS;QACT,IAAI,EACF,CAAC,CAAC,IAAI,KAAK,CAAC;YACV,CAAC,CAAC,uJAAuJ;YACzJ,CAAC,CAAC,mBAAmB,CAAC,CAAC,IAAI,wIAAwI;KACxK,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAA4E;IACnH,MAAM,IAAI,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IAChF,MAAM,IAAI,GAAmB;QAC3B,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,gGAAgG;YAChG,2FAA2F;YAC3F,6FAA6F;YAC7F,0FAA0F;YAC1F,2EAA2E;YAC3E,6FAA6F;QAC/F,WAAW,EAAE,CAAC,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,MAAM,EAAE,GAAG,KAAyB,CAAC;YACrC,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC;YAClC,MAAM,KAAK,GAAG,mBAAmB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACpH,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,OAAO,QAAQ,CAAC,qBAAqB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,IAAI,EAAE,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,QAAQ,CACb,qDAAqD,GAAG,+BAA+B;wBACrF,yFAAyF;wBACzF,qEAAqE,CACxE,CAAC;gBACJ,CAAC;gBACD,OAAO,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/G,IAAI,CAAC,CAAC,UAAU;gBAAE,OAAO,QAAQ,CAAC,gBAAgB,EAAE,CAAC,SAAS,sBAAsB,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;YACpG,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5D,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;gBACrC,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,QAAQ,EAAE,CAAC,CAAC,IAAI;gBAChB,MAAM;gBACN,SAAS;gBACT,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,2BAA2B,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClF,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}