@agentsh/secure-sandbox 0.1.0

package/dist/chunk-NWHVZ3DG.js

@@ -0,0 +1,599 @@
+import {
+  __export
+} from "./chunk-PZ5AY32C.js";
+
+// src/policies/index.ts
+var policies_exports = {};
+__export(policies_exports, {
+  PolicyDefinitionSchema: () => PolicyDefinitionSchema,
+  agentDefault: () => agentDefault,
+  agentSandbox: () => agentSandbox,
+  ciStrict: () => ciStrict,
+  devSafe: () => devSafe,
+  merge: () => merge,
+  mergePrepend: () => mergePrepend,
+  serializePolicy: () => serializePolicy,
+  systemPolicyYaml: () => systemPolicyYaml,
+  validatePolicy: () => validatePolicy
+});
+
+// src/policies/schema.ts
+import { z, ZodError } from "zod";
+
+// src/core/errors.ts
+var AgentSHError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "AgentSHError";
+  }
+};
+var PolicyValidationError = class extends AgentSHError {
+  issues;
+  constructor({ issues }) {
+    const summaries = issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`).join("; ");
+    super(`Policy validation failed: ${summaries}`);
+    this.name = "PolicyValidationError";
+    this.issues = issues;
+  }
+};
+var MissingPeerDependencyError = class extends AgentSHError {
+  packageName;
+  versionRange;
+  constructor({
+    packageName,
+    versionRange
+  }) {
+    super(
+      `${packageName} is required but not installed. Run: npm install ${packageName}@"${versionRange}"`
+    );
+    this.name = "MissingPeerDependencyError";
+    this.packageName = packageName;
+    this.versionRange = versionRange;
+  }
+};
+var IncompatibleProviderVersionError = class extends AgentSHError {
+  installed;
+  required;
+  packageName;
+  constructor({
+    installed,
+    required,
+    packageName
+  }) {
+    super(
+      `${packageName} version ${installed} is not supported. @agentsh/secure-sandbox requires ${packageName} ${required}. Please upgrade: npm install ${packageName}@latest`
+    );
+    this.name = "IncompatibleProviderVersionError";
+    this.installed = installed;
+    this.required = required;
+    this.packageName = packageName;
+  }
+};
+var ProvisioningError = class extends AgentSHError {
+  phase;
+  command;
+  stderr;
+  constructor({
+    phase,
+    command,
+    stderr
+  }) {
+    super(`Provisioning failed at phase: ${phase}`);
+    this.name = "ProvisioningError";
+    this.phase = phase;
+    this.command = command;
+    this.stderr = stderr;
+  }
+};
+var IntegrityError = class extends AgentSHError {
+  expected;
+  actual;
+  constructor({
+    expected,
+    actual,
+    message
+  }) {
+    super(message ?? `Checksum mismatch: expected ${expected}, got ${actual}`);
+    this.name = "IntegrityError";
+    this.expected = expected;
+    this.actual = actual;
+  }
+};
+var RuntimeError = class extends AgentSHError {
+  sessionId;
+  command;
+  stderr;
+  constructor({
+    sessionId,
+    command,
+    stderr
+  }) {
+    super(`agentsh exec failed (session ${sessionId})`);
+    this.name = "RuntimeError";
+    this.sessionId = sessionId;
+    this.command = command;
+    this.stderr = stderr;
+  }
+};
+
+// src/policies/schema.ts
+var stringOrArray = z.union([z.string(), z.array(z.string())]);
+var FileOpSchema = z.enum(["read", "write", "create", "delete"]);
+var FileAllowRule = z.object({ allow: stringOrArray, ops: z.array(FileOpSchema).optional() }).strict();
+var FileDenyRule = z.object({ deny: stringOrArray, ops: z.array(FileOpSchema).optional() }).strict();
+var FileRedirectRule = z.object({
+  redirect: stringOrArray,
+  to: z.string(),
+  ops: z.array(FileOpSchema).optional()
+}).strict();
+var FileAuditRule = z.object({ audit: stringOrArray, ops: z.array(FileOpSchema).optional() }).strict();
+var FileSoftDeleteRule = z.object({ softDelete: stringOrArray }).strict();
+var FileRuleSchema = z.union([
+  FileAllowRule,
+  FileDenyRule,
+  FileRedirectRule,
+  FileAuditRule,
+  FileSoftDeleteRule
+]);
+var NetworkAllowRule = z.object({
+  allow: stringOrArray,
+  ports: z.array(z.number().int().min(1).max(65535)).optional()
+}).strict();
+var NetworkDenyRule = z.object({ deny: stringOrArray }).strict();
+var NetworkRedirectRule = z.object({ redirect: z.string(), to: z.string() }).strict();
+var NetworkRuleSchema = z.union([
+  NetworkAllowRule,
+  NetworkDenyRule,
+  NetworkRedirectRule
+]);
+var CommandRedirectTarget = z.union([
+  z.string(),
+  z.object({ cmd: z.string(), args: z.array(z.string()) }).strict()
+]);
+var CommandAllowRule = z.object({ allow: stringOrArray }).strict();
+var CommandDenyRule = z.object({ deny: stringOrArray }).strict();
+var CommandRedirectRule = z.object({ redirect: stringOrArray, to: CommandRedirectTarget }).strict();
+var CommandRuleSchema = z.union([
+  CommandAllowRule,
+  CommandDenyRule,
+  CommandRedirectRule
+]);
+var EnvRuleSchema = z.object({
+  commands: z.array(z.string()),
+  allow: z.array(z.string()).optional(),
+  deny: z.array(z.string()).optional()
+}).strict();
+var DnsRedirectSchema = z.object({
+  match: z.string(),
+  resolveTo: z.string()
+}).strict();
+var ConnectRedirectSchema = z.object({
+  match: z.string(),
+  redirectTo: z.string()
+}).strict();
+var PolicyDefinitionSchema = z.object({
+  file: z.array(FileRuleSchema).optional(),
+  network: z.array(NetworkRuleSchema).optional(),
+  commands: z.array(CommandRuleSchema).optional(),
+  env: z.array(EnvRuleSchema).optional(),
+  dns: z.array(DnsRedirectSchema).optional(),
+  connect: z.array(ConnectRedirectSchema).optional()
+}).strict();
+function validatePolicy(policy) {
+  try {
+    return PolicyDefinitionSchema.parse(policy);
+  } catch (err) {
+    if (err instanceof ZodError) {
+      throw new PolicyValidationError({ issues: err.issues });
+    }
+    throw err;
+  }
+}
+
+// src/policies/merge.ts
+var CATEGORIES = ["file", "network", "commands", "env", "dns", "connect"];
+function merge(base, ...overrides) {
+  return validatePolicy(mergeInternal(base, overrides, "append"));
+}
+function mergePrepend(base, ...overrides) {
+  return validatePolicy(mergeInternal(base, overrides, "prepend"));
+}
+function mergeInternal(base, overrides, mode) {
+  const result = { ...base };
+  for (const override of overrides) {
+    for (const key of CATEGORIES) {
+      if (override[key] != null) {
+        const baseRules = result[key] ?? [];
+        result[key] = mode === "append" ? [...baseRules, ...override[key]] : [...override[key], ...baseRules];
+      }
+    }
+  }
+  return result;
+}
+
+// src/policies/presets.ts
+function agentDefault(extensions) {
+  const base = {
+    file: [
+      { allow: "/workspace/**", ops: ["read", "write", "create"] },
+      // Git/version-control credentials
+      { deny: ["/workspace/.git/config", "/workspace/.netrc"] },
+      // Secrets and credentials
+      { deny: ["**/.env", "**/.env.*", "**/credentials*", "**/*.pem", "**/*.key"] },
+      { deny: ["~/.ssh/**", "/proc/*/environ"] },
+      // Cloud provider credentials
+      { deny: ["~/.aws/**", "~/.gcp/**", "~/.azure/**", "~/.config/gcloud/**"] },
+      // Shell config injection (persistence)
+      { deny: ["~/.bashrc", "~/.zshrc", "~/.profile", "~/.bash_profile"] },
+      // Credential stores
+      { deny: ["~/.gitconfig", "~/.netrc", "~/.curlrc", "~/.wgetrc"] },
+      // PATH hijacking
+      { deny: "~/.local/bin/**" },
+      // Agent config files — allow reads (project context), deny writes (prompt injection persistence)
+      { deny: ["**/.cursorrules", "**/CLAUDE.md", "**/copilot-instructions.md"], ops: ["write", "create", "delete"] }
+    ],
+    network: [
+      {
+        allow: [
+          "registry.npmjs.org",
+          "registry.yarnpkg.com",
+          "pypi.org",
+          "files.pythonhosted.org",
+          "crates.io",
+          "static.crates.io",
+          "index.crates.io",
+          "proxy.golang.org",
+          "sum.golang.org",
+          "github.com",
+          "raw.githubusercontent.com"
+        ],
+        ports: [443]
+      },
+      { deny: "*" }
+    ],
+    commands: [
+      // Allow safe commands (order matters — first match wins)
+      {
+        allow: [
+          "bash",
+          "sh",
+          "echo",
+          "cat",
+          "head",
+          "tail",
+          "grep",
+          "find",
+          "ls",
+          "wc",
+          "sort",
+          "uniq",
+          "diff",
+          "pwd",
+          "date",
+          "which",
+          "whoami",
+          "id",
+          "uname",
+          "printf",
+          "test",
+          "true",
+          "false",
+          "mkdir",
+          "cp",
+          "mv",
+          "rm",
+          "touch",
+          "chmod",
+          "tr",
+          "cut",
+          "sed",
+          "awk",
+          "tee",
+          "xargs",
+          "basename",
+          "dirname",
+          "realpath",
+          "base64",
+          "md5sum",
+          "sha256sum",
+          "tar",
+          "gzip",
+          "gunzip"
+        ]
+      },
+      // Allow dev tools
+      {
+        allow: [
+          "git",
+          "node",
+          "npm",
+          "npx",
+          "yarn",
+          "pnpm",
+          "bun",
+          "python",
+          "python3",
+          "pip",
+          "pip3",
+          "cargo",
+          "rustc",
+          "go",
+          "make",
+          "cmake"
+        ]
+      },
+      // Deny dangerous commands
+      { deny: ["env", "printenv", "sudo", "su", "doas"] },
+      { deny: ["shutdown", "reboot", "halt", "poweroff"] },
+      { deny: ["nc", "ncat", "netcat", "socat", "telnet"] },
+      { deny: ["git push --force", "git reset --hard"] },
+      {
+        redirect: ["curl", "wget"],
+        to: { cmd: "agentsh-fetch", args: ["--audit"] }
+      }
+    ]
+  };
+  return extensions ? merge(base, extensions) : base;
+}
+function devSafe(extensions) {
+  const base = {
+    file: [
+      { allow: "/workspace/**", ops: ["read", "write", "create"] },
+      { deny: ["**/.env", "**/.env.*", "**/credentials*", "**/*.pem", "**/*.key"] },
+      { deny: ["~/.ssh/**", "/proc/*/environ"] },
+      { deny: ["~/.aws/**", "~/.gcp/**", "~/.azure/**", "~/.config/gcloud/**"] },
+      { deny: ["~/.bashrc", "~/.zshrc", "~/.profile", "~/.bash_profile"] },
+      { deny: ["~/.gitconfig", "~/.netrc", "~/.curlrc", "~/.wgetrc"] }
+    ],
+    network: [
+      {
+        allow: ["registry.npmjs.org", "registry.yarnpkg.com"],
+        ports: [443]
+      }
+    ],
+    commands: [{ deny: ["env", "printenv", "shutdown", "reboot"] }]
+  };
+  return extensions ? merge(base, extensions) : base;
+}
+function ciStrict(extensions) {
+  const base = {
+    file: [
+      { allow: "/workspace/**" },
+      { deny: ["**/.env", "**/.env.*", "**/credentials*", "**/*.pem", "**/*.key"] },
+      { deny: ["~/.aws/**", "~/.gcp/**", "~/.azure/**", "~/.config/gcloud/**"] },
+      { deny: "/**" }
+    ],
+    network: [
+      {
+        allow: [
+          "registry.npmjs.org",
+          "registry.yarnpkg.com",
+          "pypi.org",
+          "files.pythonhosted.org",
+          "crates.io",
+          "static.crates.io",
+          "index.crates.io",
+          "proxy.golang.org",
+          "sum.golang.org"
+        ],
+        ports: [443]
+      },
+      { deny: "*" }
+    ],
+    commands: [
+      { deny: ["env", "printenv", "shutdown", "reboot", "sudo"] }
+    ]
+  };
+  return extensions ? merge(base, extensions) : base;
+}
+function agentSandbox(extensions) {
+  const base = {
+    file: [
+      { allow: "/workspace/**", ops: ["read"] },
+      { deny: "/**" }
+    ],
+    network: [{ deny: "*" }],
+    commands: [
+      { deny: ["env", "printenv", "sudo", "su", "shutdown", "reboot"] }
+    ]
+  };
+  return extensions ? merge(base, extensions) : base;
+}
+
+// src/policies/serialize.ts
+import yaml from "js-yaml";
+function toArray(value) {
+  return Array.isArray(value) ? value : [value];
+}
+var FILE_DECISION_KEYS = [
+  "allow",
+  "deny",
+  "redirect",
+  "audit",
+  "softDelete"
+];
+var SIMPLE_DECISION_KEYS = ["allow", "deny", "redirect"];
+function findDecision(rule, keys) {
+  for (const k of keys) {
+    if (k in rule) {
+      return { key: k, value: rule[k] };
+    }
+  }
+  throw new Error(`No decision key found in rule: ${JSON.stringify(rule)}`);
+}
+function yamlDecision(key) {
+  return key === "softDelete" ? "soft_delete" : key;
+}
+function serializeFileRules(rules) {
+  return rules.map((rule, i) => {
+    const r = rule;
+    const { key, value } = findDecision(r, FILE_DECISION_KEYS);
+    const paths = toArray(value);
+    const out = {
+      name: `file-rule-${i}`,
+      paths
+    };
+    if ("ops" in r && r.ops) {
+      out.operations = r.ops;
+    }
+    out.decision = yamlDecision(key);
+    if (key === "redirect" && "to" in r) {
+      out.redirect_to = r.to;
+    }
+    return out;
+  });
+}
+function serializeNetworkRules(rules) {
+  return rules.map((rule, i) => {
+    const r = rule;
+    const { key, value } = findDecision(r, SIMPLE_DECISION_KEYS);
+    const domains = toArray(value);
+    const out = {
+      name: `network-rule-${i}`,
+      domains,
+      decision: key
+    };
+    if ("ports" in r && r.ports) {
+      out.ports = r.ports;
+    }
+    if (key === "redirect" && "to" in r) {
+      out.redirect_to = r.to;
+    }
+    return out;
+  });
+}
+function serializeCommandRules(rules) {
+  return rules.map((rule, i) => {
+    const r = rule;
+    const { key, value } = findDecision(r, SIMPLE_DECISION_KEYS);
+    const commands = toArray(value);
+    const out = {
+      name: `command-rule-${i}`,
+      commands,
+      decision: key
+    };
+    if (key === "redirect" && "to" in r) {
+      const to = r.to;
+      if (typeof to === "string") {
+        out.redirect_to = to;
+      } else if (typeof to === "object" && to !== null) {
+        const target = to;
+        out.redirect_to = { command: target.cmd, args: target.args };
+      }
+    }
+    return out;
+  });
+}
+function serializeEnvRules(rules) {
+  return rules.map((rule, i) => {
+    const out = {
+      name: `env-rule-${i}`,
+      commands: rule.commands
+    };
+    if (rule.allow) {
+      out.allow = rule.allow;
+    }
+    if (rule.deny) {
+      out.deny = rule.deny;
+    }
+    return out;
+  });
+}
+function serializeDnsRedirects(redirects) {
+  return redirects.map((r) => ({
+    match: r.match,
+    resolve_to: r.resolveTo
+  }));
+}
+function serializeConnectRedirects(redirects) {
+  return redirects.map((r) => ({
+    match: r.match,
+    redirect_to: r.redirectTo
+  }));
+}
+function serializePolicy(policy) {
+  const doc = {
+    version: 1,
+    name: "secure-sandbox-policy"
+  };
+  if (policy.file && policy.file.length > 0) {
+    doc.file_rules = serializeFileRules(policy.file);
+  }
+  if (policy.network && policy.network.length > 0) {
+    doc.network_rules = serializeNetworkRules(policy.network);
+  }
+  if (policy.commands && policy.commands.length > 0) {
+    doc.command_rules = serializeCommandRules(policy.commands);
+  }
+  if (policy.env && policy.env.length > 0) {
+    doc.env_rules = serializeEnvRules(policy.env);
+  }
+  if (policy.dns && policy.dns.length > 0) {
+    doc.dns_redirects = serializeDnsRedirects(policy.dns);
+  }
+  if (policy.connect && policy.connect.length > 0) {
+    doc.connect_redirects = serializeConnectRedirects(policy.connect);
+  }
+  return yaml.dump(doc, { lineWidth: -1 });
+}
+function systemPolicyYaml() {
+  const doc = {
+    version: 1,
+    name: "_system-protection",
+    file_rules: [
+      {
+        name: "_system-protect-config",
+        paths: ["/etc/agentsh/**"],
+        operations: ["write", "create", "delete"],
+        decision: "deny",
+        message: "Policy files are immutable during agent execution"
+      },
+      {
+        name: "_system-protect-binary",
+        paths: ["/usr/local/bin/agentsh*", "/usr/bin/agentsh*"],
+        operations: ["write", "create", "delete"],
+        decision: "deny",
+        message: "agentsh binary is immutable during agent execution"
+      },
+      {
+        name: "_system-protect-shim-files",
+        paths: ["/usr/bin/agentsh-shell-shim", "/bin/bash", "/bin/sh"],
+        operations: ["write", "create", "delete"],
+        decision: "deny",
+        message: "Shell and shim binaries are immutable during agent execution"
+      }
+    ],
+    command_rules: [
+      {
+        name: "_system-protect-process",
+        commands: ["kill", "killall", "pkill"],
+        args_match: ["agentsh"],
+        decision: "deny",
+        message: "Cannot terminate agentsh processes"
+      }
+    ]
+  };
+  return yaml.dump(doc, { lineWidth: -1 });
+}
+
+export {
+  AgentSHError,
+  PolicyValidationError,
+  MissingPeerDependencyError,
+  IncompatibleProviderVersionError,
+  ProvisioningError,
+  IntegrityError,
+  RuntimeError,
+  serializePolicy,
+  systemPolicyYaml,
+  PolicyDefinitionSchema,
+  validatePolicy,
+  merge,
+  mergePrepend,
+  agentDefault,
+  devSafe,
+  ciStrict,
+  agentSandbox,
+  policies_exports
+};
+//# sourceMappingURL=chunk-NWHVZ3DG.js.map

package/dist/chunk-NWHVZ3DG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/policies/index.ts","../src/policies/schema.ts","../src/core/errors.ts","../src/policies/merge.ts","../src/policies/presets.ts","../src/policies/serialize.ts"],"sourcesContent":["export { PolicyDefinitionSchema, validatePolicy } from './schema.js';\nexport type { PolicyDefinition, FileRule, NetworkRule, CommandRule, EnvRule, DnsRedirect, ConnectRedirect } from './schema.js';\nexport { agentDefault, devSafe, ciStrict, agentSandbox } from './presets.js';\nexport { merge, mergePrepend } from './merge.js';\nexport { serializePolicy, systemPolicyYaml } from './serialize.js';\n","import { z, ZodError } from 'zod';\nimport { PolicyValidationError } from '../core/errors.js';\n\n// ─── Shared helpers ─────────────────────────────────────────\n\nconst stringOrArray = z.union([z.string(), z.array(z.string())]);\n\n// ─── File rules ─────────────────────────────────────────────\n\nexport const FileOpSchema = z.enum(['read', 'write', 'create', 'delete']);\n\nconst FileAllowRule = z\n  .object({ allow: stringOrArray, ops: z.array(FileOpSchema).optional() })\n  .strict();\n\nconst FileDenyRule = z\n  .object({ deny: stringOrArray, ops: z.array(FileOpSchema).optional() })\n  .strict();\n\nconst FileRedirectRule = z\n  .object({\n    redirect: stringOrArray,\n    to: z.string(),\n    ops: z.array(FileOpSchema).optional(),\n  })\n  .strict();\n\nconst FileAuditRule = z\n  .object({ audit: stringOrArray, ops: z.array(FileOpSchema).optional() })\n  .strict();\n\nconst FileSoftDeleteRule = z.object({ softDelete: stringOrArray }).strict();\n\nexport const FileRuleSchema = z.union([\n  FileAllowRule,\n  FileDenyRule,\n  FileRedirectRule,\n  FileAuditRule,\n  FileSoftDeleteRule,\n]);\n\n// ─── Network rules ──────────────────────────────────────────\n\nconst NetworkAllowRule = z\n  .object({\n    allow: stringOrArray,\n    ports: z.array(z.number().int().min(1).max(65535)).optional(),\n  })\n  .strict();\n\nconst NetworkDenyRule = z.object({ deny: stringOrArray }).strict();\n\nconst NetworkRedirectRule = z\n  .object({ redirect: z.string(), to: z.string() })\n  .strict();\n\nexport const NetworkRuleSchema = z.union([\n  NetworkAllowRule,\n  NetworkDenyRule,\n  NetworkRedirectRule,\n]);\n\n// ─── Command rules ──────────────────────────────────────────\n\nconst CommandRedirectTarget = z.union([\n  z.string(),\n  z.object({ cmd: z.string(), args: z.array(z.string()) }).strict(),\n]);\n\nconst CommandAllowRule = z.object({ allow: stringOrArray }).strict();\n\nconst CommandDenyRule = z.object({ deny: stringOrArray }).strict();\n\nconst CommandRedirectRule = z\n  .object({ redirect: stringOrArray, to: CommandRedirectTarget })\n  .strict();\n\nexport const CommandRuleSchema = z.union([\n  CommandAllowRule,\n  CommandDenyRule,\n  CommandRedirectRule,\n]);\n\n// ─── Env rules ──────────────────────────────────────────────\n\nexport const EnvRuleSchema = z\n  .object({\n    commands: z.array(z.string()),\n    allow: z.array(z.string()).optional(),\n    deny: z.array(z.string()).optional(),\n  })\n  .strict();\n\n// ─── DNS / Connect redirects ────────────────────────────────\n\nexport const DnsRedirectSchema = z\n  .object({\n    match: z.string(),\n    resolveTo: z.string(),\n  })\n  .strict();\n\nexport const ConnectRedirectSchema = z\n  .object({\n    match: z.string(),\n    redirectTo: z.string(),\n  })\n  .strict();\n\n// ─── PolicyDefinition ───────────────────────────────────────\n\nexport const PolicyDefinitionSchema = z\n  .object({\n    file: z.array(FileRuleSchema).optional(),\n    network: z.array(NetworkRuleSchema).optional(),\n    commands: z.array(CommandRuleSchema).optional(),\n    env: z.array(EnvRuleSchema).optional(),\n    dns: z.array(DnsRedirectSchema).optional(),\n    connect: z.array(ConnectRedirectSchema).optional(),\n  })\n  .strict();\n\n// ─── Inferred types ─────────────────────────────────────────\n\nexport type PolicyDefinition = z.infer<typeof PolicyDefinitionSchema>;\nexport type FileOp = z.infer<typeof FileOpSchema>;\nexport type FileRule = z.infer<typeof FileRuleSchema>;\nexport type NetworkRule = z.infer<typeof NetworkRuleSchema>;\nexport type CommandRule = z.infer<typeof CommandRuleSchema>;\nexport type EnvRule = z.infer<typeof EnvRuleSchema>;\nexport type DnsRedirect = z.infer<typeof DnsRedirectSchema>;\nexport type ConnectRedirect = z.infer<typeof ConnectRedirectSchema>;\n\n// ─── Validation ─────────────────────────────────────────────\n\nexport function validatePolicy(policy: unknown): PolicyDefinition {\n  try {\n    return PolicyDefinitionSchema.parse(policy);\n  } catch (err) {\n    if (err instanceof ZodError) {\n      throw new PolicyValidationError({ issues: err.issues });\n    }\n    throw err;\n  }\n}\n","import type { ZodIssue } from 'zod';\n\nexport class AgentSHError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'AgentSHError';\n  }\n}\n\nexport class PolicyValidationError extends AgentSHError {\n  readonly issues: ZodIssue[];\n\n  constructor({ issues }: { issues: ZodIssue[] }) {\n    const summaries = issues\n      .map((issue) => `${issue.path.join('.')}: ${issue.message}`)\n      .join('; ');\n    super(`Policy validation failed: ${summaries}`);\n    this.name = 'PolicyValidationError';\n    this.issues = issues;\n  }\n}\n\nexport class MissingPeerDependencyError extends AgentSHError {\n  readonly packageName: string;\n  readonly versionRange: string;\n\n  constructor({\n    packageName,\n    versionRange,\n  }: {\n    packageName: string;\n    versionRange: string;\n  }) {\n    super(\n      `${packageName} is required but not installed. Run: npm install ${packageName}@\"${versionRange}\"`,\n    );\n    this.name = 'MissingPeerDependencyError';\n    this.packageName = packageName;\n    this.versionRange = versionRange;\n  }\n}\n\nexport class IncompatibleProviderVersionError extends AgentSHError {\n  readonly installed: string;\n  readonly required: string;\n  readonly packageName: string;\n\n  constructor({\n    installed,\n    required,\n    packageName,\n  }: {\n    installed: string;\n    required: string;\n    packageName: string;\n  }) {\n    super(\n      `${packageName} version ${installed} is not supported. @agentsh/secure-sandbox requires ${packageName} ${required}. Please upgrade: npm install ${packageName}@latest`,\n    );\n    this.name = 'IncompatibleProviderVersionError';\n    this.installed = installed;\n    this.required = required;\n    this.packageName = packageName;\n  }\n}\n\nexport class ProvisioningError extends AgentSHError {\n  readonly phase: string;\n  readonly command: string;\n  readonly stderr: string;\n\n  constructor({\n    phase,\n    command,\n    stderr,\n  }: {\n    phase: string;\n    command: string;\n    stderr: string;\n  }) {\n    super(`Provisioning failed at phase: ${phase}`);\n    this.name = 'ProvisioningError';\n    this.phase = phase;\n    this.command = command;\n    this.stderr = stderr;\n  }\n}\n\nexport class IntegrityError extends AgentSHError {\n  readonly expected: string;\n  readonly actual: string;\n\n  constructor({\n    expected,\n    actual,\n    message,\n  }: {\n    expected: string;\n    actual: string;\n    message?: string;\n  }) {\n    super(message ?? `Checksum mismatch: expected ${expected}, got ${actual}`);\n    this.name = 'IntegrityError';\n    this.expected = expected;\n    this.actual = actual;\n  }\n}\n\nexport class RuntimeError extends AgentSHError {\n  readonly sessionId: string;\n  readonly command: string;\n  readonly stderr: string;\n\n  constructor({\n    sessionId,\n    command,\n    stderr,\n  }: {\n    sessionId: string;\n    command: string;\n    stderr: string;\n  }) {\n    super(`agentsh exec failed (session ${sessionId})`);\n    this.name = 'RuntimeError';\n    this.sessionId = sessionId;\n    this.command = command;\n    this.stderr = stderr;\n  }\n}\n","import type { PolicyDefinition } from './schema.js';\nimport { validatePolicy } from './schema.js';\n\nconst CATEGORIES = ['file', 'network', 'commands', 'env', 'dns', 'connect'] as const;\n\n/**\n * Merge policy overrides AFTER base rules for each category.\n * Since agentsh evaluates first-match-wins, appended rules only apply\n * to paths not already matched by base.\n */\nexport function merge(base: PolicyDefinition, ...overrides: Partial<PolicyDefinition>[]): PolicyDefinition {\n  return validatePolicy(mergeInternal(base, overrides, 'append'));\n}\n\n/**\n * Merge policy overrides BEFORE base rules for each category,\n * making overrides take priority in first-match-wins evaluation.\n */\nexport function mergePrepend(base: PolicyDefinition, ...overrides: Partial<PolicyDefinition>[]): PolicyDefinition {\n  return validatePolicy(mergeInternal(base, overrides, 'prepend'));\n}\n\nfunction mergeInternal(\n  base: PolicyDefinition,\n  overrides: Partial<PolicyDefinition>[],\n  mode: 'append' | 'prepend',\n): PolicyDefinition {\n  const result: any = { ...base };\n  for (const override of overrides) {\n    for (const key of CATEGORIES) {\n      if (override[key] != null) {\n        const baseRules = result[key] ?? [];\n        result[key] = mode === 'append'\n          ? [...baseRules, ...override[key]!]\n          : [...override[key]!, ...baseRules];\n      }\n    }\n  }\n  return result;\n}\n","import type { PolicyDefinition } from './schema.js';\nimport { merge } from './merge.js';\n\n// ─── agentDefault ──────────────────────────────────────────\n\n/**\n * Comprehensive policy for AI coding agents. This is the DEFAULT policy\n * used when no policy is specified. Based on agentsh v0.13's agent-default\n * policy.\n */\nexport function agentDefault(\n  extensions?: Partial<PolicyDefinition>,\n): PolicyDefinition {\n  const base: PolicyDefinition = {\n    file: [\n      { allow: '/workspace/**', ops: ['read', 'write', 'create'] },\n      // Git/version-control credentials\n      { deny: ['/workspace/.git/config', '/workspace/.netrc'] },\n      // Secrets and credentials\n      { deny: ['**/.env', '**/.env.*', '**/credentials*', '**/*.pem', '**/*.key'] },\n      { deny: ['~/.ssh/**', '/proc/*/environ'] },\n      // Cloud provider credentials\n      { deny: ['~/.aws/**', '~/.gcp/**', '~/.azure/**', '~/.config/gcloud/**'] },\n      // Shell config injection (persistence)\n      { deny: ['~/.bashrc', '~/.zshrc', '~/.profile', '~/.bash_profile'] },\n      // Credential stores\n      { deny: ['~/.gitconfig', '~/.netrc', '~/.curlrc', '~/.wgetrc'] },\n      // PATH hijacking\n      { deny: '~/.local/bin/**' },\n      // Agent config files — allow reads (project context), deny writes (prompt injection persistence)\n      { deny: ['**/.cursorrules', '**/CLAUDE.md', '**/copilot-instructions.md'], ops: ['write', 'create', 'delete'] },\n    ],\n    network: [\n      {\n        allow: [\n          'registry.npmjs.org',\n          'registry.yarnpkg.com',\n          'pypi.org',\n          'files.pythonhosted.org',\n          'crates.io',\n          'static.crates.io',\n          'index.crates.io',\n          'proxy.golang.org',\n          'sum.golang.org',\n          'github.com',\n          'raw.githubusercontent.com',\n        ],\n        ports: [443],\n      },\n      { deny: '*' },\n    ],\n    commands: [\n      // Allow safe commands (order matters — first match wins)\n      {\n        allow: [\n          'bash', 'sh', 'echo', 'cat', 'head', 'tail', 'grep', 'find',\n          'ls', 'wc', 'sort', 'uniq', 'diff', 'pwd', 'date', 'which',\n          'whoami', 'id', 'uname', 'printf', 'test', 'true', 'false',\n          'mkdir', 'cp', 'mv', 'rm', 'touch', 'chmod', 'tr', 'cut',\n          'sed', 'awk', 'tee', 'xargs', 'basename', 'dirname', 'realpath',\n          'base64', 'md5sum', 'sha256sum', 'tar', 'gzip', 'gunzip',\n        ],\n      },\n      // Allow dev tools\n      {\n        allow: [\n          'git', 'node', 'npm', 'npx', 'yarn', 'pnpm', 'bun',\n          'python', 'python3', 'pip', 'pip3',\n          'cargo', 'rustc', 'go', 'make', 'cmake',\n        ],\n      },\n      // Deny dangerous commands\n      { deny: ['env', 'printenv', 'sudo', 'su', 'doas'] },\n      { deny: ['shutdown', 'reboot', 'halt', 'poweroff'] },\n      { deny: ['nc', 'ncat', 'netcat', 'socat', 'telnet'] },\n      { deny: ['git push --force', 'git reset --hard'] },\n      {\n        redirect: ['curl', 'wget'],\n        to: { cmd: 'agentsh-fetch', args: ['--audit'] },\n      },\n    ],\n  };\n  return extensions ? merge(base, extensions) : base;\n}\n\n// ─── devSafe ───────────────────────────────────────────────\n\n/**\n * Permissive defaults for local development. Not recommended for production.\n */\nexport function devSafe(\n  extensions?: Partial<PolicyDefinition>,\n): PolicyDefinition {\n  const base: PolicyDefinition = {\n    file: [\n      { allow: '/workspace/**', ops: ['read', 'write', 'create'] },\n      { deny: ['**/.env', '**/.env.*', '**/credentials*', '**/*.pem', '**/*.key'] },\n      { deny: ['~/.ssh/**', '/proc/*/environ'] },\n      { deny: ['~/.aws/**', '~/.gcp/**', '~/.azure/**', '~/.config/gcloud/**'] },\n      { deny: ['~/.bashrc', '~/.zshrc', '~/.profile', '~/.bash_profile'] },\n      { deny: ['~/.gitconfig', '~/.netrc', '~/.curlrc', '~/.wgetrc'] },\n    ],\n    network: [\n      {\n        allow: ['registry.npmjs.org', 'registry.yarnpkg.com'],\n        ports: [443],\n      },\n    ],\n    commands: [{ deny: ['env', 'printenv', 'shutdown', 'reboot'] }],\n  };\n  return extensions ? merge(base, extensions) : base;\n}\n\n// ─── ciStrict ──────────────────────────────────────────────\n\n/**\n * Locked down for CI/CD runners.\n */\nexport function ciStrict(\n  extensions?: Partial<PolicyDefinition>,\n): PolicyDefinition {\n  const base: PolicyDefinition = {\n    file: [\n      { allow: '/workspace/**' },\n      { deny: ['**/.env', '**/.env.*', '**/credentials*', '**/*.pem', '**/*.key'] },\n      { deny: ['~/.aws/**', '~/.gcp/**', '~/.azure/**', '~/.config/gcloud/**'] },\n      { deny: '/**' },\n    ],\n    network: [\n      {\n        allow: [\n          'registry.npmjs.org',\n          'registry.yarnpkg.com',\n          'pypi.org',\n          'files.pythonhosted.org',\n          'crates.io',\n          'static.crates.io',\n          'index.crates.io',\n          'proxy.golang.org',\n          'sum.golang.org',\n        ],\n        ports: [443],\n      },\n      { deny: '*' },\n    ],\n    commands: [\n      { deny: ['env', 'printenv', 'shutdown', 'reboot', 'sudo'] },\n    ],\n  };\n  return extensions ? merge(base, extensions) : base;\n}\n\n// ─── agentSandbox ──────────────────────────────────────────\n\n/**\n * Maximum restriction for untrusted code. Read-only workspace, no network.\n */\nexport function agentSandbox(\n  extensions?: Partial<PolicyDefinition>,\n): PolicyDefinition {\n  const base: PolicyDefinition = {\n    file: [\n      { allow: '/workspace/**', ops: ['read'] },\n      { deny: '/**' },\n    ],\n    network: [{ deny: '*' }],\n    commands: [\n      { deny: ['env', 'printenv', 'sudo', 'su', 'shutdown', 'reboot'] },\n    ],\n  };\n  return extensions ? merge(base, extensions) : base;\n}\n","import yaml from 'js-yaml';\nimport type {\n  PolicyDefinition,\n  FileRule,\n  NetworkRule,\n  CommandRule,\n  EnvRule,\n  DnsRedirect,\n  ConnectRedirect,\n} from './schema.js';\n\n// ─── Helpers ────────────────────────────────────────────────\n\n/** Normalize a string-or-array value to always be an array. */\nfunction toArray(value: string | string[]): string[] {\n  return Array.isArray(value) ? value : [value];\n}\n\n/** Detect the decision key from a rule object. */\ntype DecisionKey = 'allow' | 'deny' | 'redirect' | 'audit' | 'softDelete';\n\nconst FILE_DECISION_KEYS: DecisionKey[] = [\n  'allow',\n  'deny',\n  'redirect',\n  'audit',\n  'softDelete',\n];\n\nconst SIMPLE_DECISION_KEYS: DecisionKey[] = ['allow', 'deny', 'redirect'];\n\nfunction findDecision(\n  rule: Record<string, unknown>,\n  keys: DecisionKey[],\n): { key: DecisionKey; value: unknown } {\n  for (const k of keys) {\n    if (k in rule) {\n      return { key: k, value: rule[k] };\n    }\n  }\n  throw new Error(`No decision key found in rule: ${JSON.stringify(rule)}`);\n}\n\n/** Map softDelete → soft_delete for YAML output. */\nfunction yamlDecision(key: DecisionKey): string {\n  return key === 'softDelete' ? 'soft_delete' : key;\n}\n\n// ─── File rules ─────────────────────────────────────────────\n\nfunction serializeFileRules(rules: FileRule[]): Record<string, unknown>[] {\n  return rules.map((rule, i) => {\n    const r = rule as Record<string, unknown>;\n    const { key, value } = findDecision(r, FILE_DECISION_KEYS);\n    const paths = toArray(value as string | string[]);\n\n    const out: Record<string, unknown> = {\n      name: `file-rule-${i}`,\n      paths,\n    };\n\n    if ('ops' in r && r.ops) {\n      out.operations = r.ops;\n    }\n\n    out.decision = yamlDecision(key);\n\n    if (key === 'redirect' && 'to' in r) {\n      out.redirect_to = r.to;\n    }\n\n    return out;\n  });\n}\n\n// ─── Network rules ──────────────────────────────────────────\n\nfunction serializeNetworkRules(\n  rules: NetworkRule[],\n): Record<string, unknown>[] {\n  return rules.map((rule, i) => {\n    const r = rule as Record<string, unknown>;\n    const { key, value } = findDecision(r, SIMPLE_DECISION_KEYS);\n    const domains = toArray(value as string | string[]);\n\n    const out: Record<string, unknown> = {\n      name: `network-rule-${i}`,\n      domains,\n      decision: key,\n    };\n\n    if ('ports' in r && r.ports) {\n      out.ports = r.ports;\n    }\n\n    if (key === 'redirect' && 'to' in r) {\n      out.redirect_to = r.to;\n    }\n\n    return out;\n  });\n}\n\n// ─── Command rules ──────────────────────────────────────────\n\nfunction serializeCommandRules(\n  rules: CommandRule[],\n): Record<string, unknown>[] {\n  return rules.map((rule, i) => {\n    const r = rule as Record<string, unknown>;\n    const { key, value } = findDecision(r, SIMPLE_DECISION_KEYS);\n    const commands = toArray(value as string | string[]);\n\n    const out: Record<string, unknown> = {\n      name: `command-rule-${i}`,\n      commands,\n      decision: key,\n    };\n\n    if (key === 'redirect' && 'to' in r) {\n      const to = r.to;\n      if (typeof to === 'string') {\n        out.redirect_to = to;\n      } else if (typeof to === 'object' && to !== null) {\n        const target = to as { cmd: string; args: string[] };\n        out.redirect_to = { command: target.cmd, args: target.args };\n      }\n    }\n\n    return out;\n  });\n}\n\n// ─── Env rules ──────────────────────────────────────────────\n\nfunction serializeEnvRules(rules: EnvRule[]): Record<string, unknown>[] {\n  return rules.map((rule, i) => {\n    const out: Record<string, unknown> = {\n      name: `env-rule-${i}`,\n      commands: rule.commands,\n    };\n    if (rule.allow) {\n      out.allow = rule.allow;\n    }\n    if (rule.deny) {\n      out.deny = rule.deny;\n    }\n    return out;\n  });\n}\n\n// ─── DNS redirects ──────────────────────────────────────────\n\nfunction serializeDnsRedirects(\n  redirects: DnsRedirect[],\n): Record<string, unknown>[] {\n  return redirects.map((r) => ({\n    match: r.match,\n    resolve_to: r.resolveTo,\n  }));\n}\n\n// ─── Connect redirects ──────────────────────────────────────\n\nfunction serializeConnectRedirects(\n  redirects: ConnectRedirect[],\n): Record<string, unknown>[] {\n  return redirects.map((r) => ({\n    match: r.match,\n    redirect_to: r.redirectTo,\n  }));\n}\n\n// ─── Public API ─────────────────────────────────────────────\n\n/**\n * Converts a PolicyDefinition to agentsh YAML format.\n *\n * Omits empty categories from output.\n */\nexport function serializePolicy(policy: PolicyDefinition): string {\n  const doc: Record<string, unknown> = {\n    version: 1,\n    name: 'secure-sandbox-policy',\n  };\n\n  if (policy.file && policy.file.length > 0) {\n    doc.file_rules = serializeFileRules(policy.file);\n  }\n\n  if (policy.network && policy.network.length > 0) {\n    doc.network_rules = serializeNetworkRules(policy.network);\n  }\n\n  if (policy.commands && policy.commands.length > 0) {\n    doc.command_rules = serializeCommandRules(policy.commands);\n  }\n\n  if (policy.env && policy.env.length > 0) {\n    doc.env_rules = serializeEnvRules(policy.env);\n  }\n\n  if (policy.dns && policy.dns.length > 0) {\n    doc.dns_redirects = serializeDnsRedirects(policy.dns);\n  }\n\n  if (policy.connect && policy.connect.length > 0) {\n    doc.connect_redirects = serializeConnectRedirects(policy.connect);\n  }\n\n  return yaml.dump(doc, { lineWidth: -1 });\n}\n\n/**\n * Returns the fixed system policy YAML from the spec (Section 9.4).\n *\n * This static set of rules protects agentsh's own configuration, binaries,\n * and processes from tampering by the agent. These rules are written to a\n * separate system policy directory evaluated before user policy.\n */\nexport function systemPolicyYaml(): string {\n  const doc = {\n    version: 1,\n    name: '_system-protection',\n    file_rules: [\n      {\n        name: '_system-protect-config',\n        paths: ['/etc/agentsh/**'],\n        operations: ['write', 'create', 'delete'],\n        decision: 'deny',\n        message: 'Policy files are immutable during agent execution',\n      },\n      {\n        name: '_system-protect-binary',\n        paths: ['/usr/local/bin/agentsh*', '/usr/bin/agentsh*'],\n        operations: ['write', 'create', 'delete'],\n        decision: 'deny',\n        message: 'agentsh binary is immutable during agent execution',\n      },\n      {\n        name: '_system-protect-shim-files',\n        paths: ['/usr/bin/agentsh-shell-shim', '/bin/bash', '/bin/sh'],\n        operations: ['write', 'create', 'delete'],\n        decision: 'deny',\n        message: 'Shell and shim binaries are immutable during agent execution',\n      },\n    ],\n    command_rules: [\n      {\n        name: '_system-protect-process',\n        commands: ['kill', 'killall', 'pkill'],\n        args_match: ['agentsh'],\n        decision: 'deny',\n        message: 'Cannot terminate agentsh processes',\n      },\n    ],\n  };\n\n  return yaml.dump(doc, { lineWidth: -1 });\n}\n"],"mappings":";;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,SAAS,GAAG,gBAAgB;;;ACErB,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,wBAAN,cAAoC,aAAa;AAAA,EAC7C;AAAA,EAET,YAAY,EAAE,OAAO,GAA2B;AAC9C,UAAM,YAAY,OACf,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,CAAC,KAAK,MAAM,OAAO,EAAE,EAC1D,KAAK,IAAI;AACZ,UAAM,6BAA6B,SAAS,EAAE;AAC9C,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AAEO,IAAM,6BAAN,cAAyC,aAAa;AAAA,EAClD;AAAA,EACA;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,EACF,GAGG;AACD;AAAA,MACE,GAAG,WAAW,oDAAoD,WAAW,KAAK,YAAY;AAAA,IAChG;AACA,SAAK,OAAO;AACZ,SAAK,cAAc;AACnB,SAAK,eAAe;AAAA,EACtB;AACF;AAEO,IAAM,mCAAN,cAA+C,aAAa;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD;AAAA,MACE,GAAG,WAAW,YAAY,SAAS,uDAAuD,WAAW,IAAI,QAAQ,iCAAiC,WAAW;AAAA,IAC/J;AACA,SAAK,OAAO;AACZ,SAAK,YAAY;AACjB,SAAK,WAAW;AAChB,SAAK,cAAc;AAAA,EACrB;AACF;AAEO,IAAM,oBAAN,cAAgC,aAAa;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,iCAAiC,KAAK,EAAE;AAC9C,SAAK,OAAO;AACZ,SAAK,QAAQ;AACb,SAAK,UAAU;AACf,SAAK,SAAS;AAAA,EAChB;AACF;AAEO,IAAM,iBAAN,cAA6B,aAAa;AAAA,EACtC;AAAA,EACA;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,WAAW,+BAA+B,QAAQ,SAAS,MAAM,EAAE;AACzE,SAAK,OAAO;AACZ,SAAK,WAAW;AAChB,SAAK,SAAS;AAAA,EAChB;AACF;AAEO,IAAM,eAAN,cAA2B,aAAa;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,gCAAgC,SAAS,GAAG;AAClD,SAAK,OAAO;AACZ,SAAK,YAAY;AACjB,SAAK,UAAU;AACf,SAAK,SAAS;AAAA,EAChB;AACF;;;AD3HA,IAAM,gBAAgB,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAIxD,IAAM,eAAe,EAAE,KAAK,CAAC,QAAQ,SAAS,UAAU,QAAQ,CAAC;AAExE,IAAM,gBAAgB,EACnB,OAAO,EAAE,OAAO,eAAe,KAAK,EAAE,MAAM,YAAY,EAAE,SAAS,EAAE,CAAC,EACtE,OAAO;AAEV,IAAM,eAAe,EAClB,OAAO,EAAE,MAAM,eAAe,KAAK,EAAE,MAAM,YAAY,EAAE,SAAS,EAAE,CAAC,EACrE,OAAO;AAEV,IAAM,mBAAmB,EACtB,OAAO;AAAA,EACN,UAAU;AAAA,EACV,IAAI,EAAE,OAAO;AAAA,EACb,KAAK,EAAE,MAAM,YAAY,EAAE,SAAS;AACtC,CAAC,EACA,OAAO;AAEV,IAAM,gBAAgB,EACnB,OAAO,EAAE,OAAO,eAAe,KAAK,EAAE,MAAM,YAAY,EAAE,SAAS,EAAE,CAAC,EACtE,OAAO;AAEV,IAAM,qBAAqB,EAAE,OAAO,EAAE,YAAY,cAAc,CAAC,EAAE,OAAO;AAEnE,IAAM,iBAAiB,EAAE,MAAM;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAID,IAAM,mBAAmB,EACtB,OAAO;AAAA,EACN,OAAO;AAAA,EACP,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,SAAS;AAC9D,CAAC,EACA,OAAO;AAEV,IAAM,kBAAkB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC,EAAE,OAAO;AAEjE,IAAM,sBAAsB,EACzB,OAAO,EAAE,UAAU,EAAE,OAAO,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,EAC/C,OAAO;AAEH,IAAM,oBAAoB,EAAE,MAAM;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAID,IAAM,wBAAwB,EAAE,MAAM;AAAA,EACpC,EAAE,OAAO;AAAA,EACT,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,OAAO;AAClE,CAAC;AAED,IAAM,mBAAmB,EAAE,OAAO,EAAE,OAAO,cAAc,CAAC,EAAE,OAAO;AAEnE,IAAM,kBAAkB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC,EAAE,OAAO;AAEjE,IAAM,sBAAsB,EACzB,OAAO,EAAE,UAAU,eAAe,IAAI,sBAAsB,CAAC,EAC7D,OAAO;AAEH,IAAM,oBAAoB,EAAE,MAAM;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAIM,IAAM,gBAAgB,EAC1B,OAAO;AAAA,EACN,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAC5B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACpC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AACrC,CAAC,EACA,OAAO;AAIH,IAAM,oBAAoB,EAC9B,OAAO;AAAA,EACN,OAAO,EAAE,OAAO;AAAA,EAChB,WAAW,EAAE,OAAO;AACtB,CAAC,EACA,OAAO;AAEH,IAAM,wBAAwB,EAClC,OAAO;AAAA,EACN,OAAO,EAAE,OAAO;AAAA,EAChB,YAAY,EAAE,OAAO;AACvB,CAAC,EACA,OAAO;AAIH,IAAM,yBAAyB,EACnC,OAAO;AAAA,EACN,MAAM,EAAE,MAAM,cAAc,EAAE,SAAS;AAAA,EACvC,SAAS,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAAA,EAC7C,UAAU,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAAA,EAC9C,KAAK,EAAE,MAAM,aAAa,EAAE,SAAS;AAAA,EACrC,KAAK,EAAE,MAAM,iBAAiB,EAAE,SAAS;AAAA,EACzC,SAAS,EAAE,MAAM,qBAAqB,EAAE,SAAS;AACnD,CAAC,EACA,OAAO;AAeH,SAAS,eAAe,QAAmC;AAChE,MAAI;AACF,WAAO,uBAAuB,MAAM,MAAM;AAAA,EAC5C,SAAS,KAAK;AACZ,QAAI,eAAe,UAAU;AAC3B,YAAM,IAAI,sBAAsB,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IACxD;AACA,UAAM;AAAA,EACR;AACF;;;AE7IA,IAAM,aAAa,CAAC,QAAQ,WAAW,YAAY,OAAO,OAAO,SAAS;AAOnE,SAAS,MAAM,SAA2B,WAA0D;AACzG,SAAO,eAAe,cAAc,MAAM,WAAW,QAAQ,CAAC;AAChE;AAMO,SAAS,aAAa,SAA2B,WAA0D;AAChH,SAAO,eAAe,cAAc,MAAM,WAAW,SAAS,CAAC;AACjE;AAEA,SAAS,cACP,MACA,WACA,MACkB;AAClB,QAAM,SAAc,EAAE,GAAG,KAAK;AAC9B,aAAW,YAAY,WAAW;AAChC,eAAW,OAAO,YAAY;AAC5B,UAAI,SAAS,GAAG,KAAK,MAAM;AACzB,cAAM,YAAY,OAAO,GAAG,KAAK,CAAC;AAClC,eAAO,GAAG,IAAI,SAAS,WACnB,CAAC,GAAG,WAAW,GAAG,SAAS,GAAG,CAAE,IAChC,CAAC,GAAG,SAAS,GAAG,GAAI,GAAG,SAAS;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;;;AC7BO,SAAS,aACd,YACkB;AAClB,QAAM,OAAyB;AAAA,IAC7B,MAAM;AAAA,MACJ,EAAE,OAAO,iBAAiB,KAAK,CAAC,QAAQ,SAAS,QAAQ,EAAE;AAAA;AAAA,MAE3D,EAAE,MAAM,CAAC,0BAA0B,mBAAmB,EAAE;AAAA;AAAA,MAExD,EAAE,MAAM,CAAC,WAAW,aAAa,mBAAmB,YAAY,UAAU,EAAE;AAAA,MAC5E,EAAE,MAAM,CAAC,aAAa,iBAAiB,EAAE;AAAA;AAAA,MAEzC,EAAE,MAAM,CAAC,aAAa,aAAa,eAAe,qBAAqB,EAAE;AAAA;AAAA,MAEzE,EAAE,MAAM,CAAC,aAAa,YAAY,cAAc,iBAAiB,EAAE;AAAA;AAAA,MAEnE,EAAE,MAAM,CAAC,gBAAgB,YAAY,aAAa,WAAW,EAAE;AAAA;AAAA,MAE/D,EAAE,MAAM,kBAAkB;AAAA;AAAA,MAE1B,EAAE,MAAM,CAAC,mBAAmB,gBAAgB,4BAA4B,GAAG,KAAK,CAAC,SAAS,UAAU,QAAQ,EAAE;AAAA,IAChH;AAAA,IACA,SAAS;AAAA,MACP;AAAA,QACE,OAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,QACA,OAAO,CAAC,GAAG;AAAA,MACb;AAAA,MACA,EAAE,MAAM,IAAI;AAAA,IACd;AAAA,IACA,UAAU;AAAA;AAAA,MAER;AAAA,QACE,OAAO;AAAA,UACL;AAAA,UAAQ;AAAA,UAAM;AAAA,UAAQ;AAAA,UAAO;AAAA,UAAQ;AAAA,UAAQ;AAAA,UAAQ;AAAA,UACrD;AAAA,UAAM;AAAA,UAAM;AAAA,UAAQ;AAAA,UAAQ;AAAA,UAAQ;AAAA,UAAO;AAAA,UAAQ;AAAA,UACnD;AAAA,UAAU;AAAA,UAAM;AAAA,UAAS;AAAA,UAAU;AAAA,UAAQ;AAAA,UAAQ;AAAA,UACnD;AAAA,UAAS;AAAA,UAAM;AAAA,UAAM;AAAA,UAAM;AAAA,UAAS;AAAA,UAAS;AAAA,UAAM;AAAA,UACnD;AAAA,UAAO;AAAA,UAAO;AAAA,UAAO;AAAA,UAAS;AAAA,UAAY;AAAA,UAAW;AAAA,UACrD;AAAA,UAAU;AAAA,UAAU;AAAA,UAAa;AAAA,UAAO;AAAA,UAAQ;AAAA,QAClD;AAAA,MACF;AAAA;AAAA,MAEA;AAAA,QACE,OAAO;AAAA,UACL;AAAA,UAAO;AAAA,UAAQ;AAAA,UAAO;AAAA,UAAO;AAAA,UAAQ;AAAA,UAAQ;AAAA,UAC7C;AAAA,UAAU;AAAA,UAAW;AAAA,UAAO;AAAA,UAC5B;AAAA,UAAS;AAAA,UAAS;AAAA,UAAM;AAAA,UAAQ;AAAA,QAClC;AAAA,MACF;AAAA;AAAA,MAEA,EAAE,MAAM,CAAC,OAAO,YAAY,QAAQ,MAAM,MAAM,EAAE;AAAA,MAClD,EAAE,MAAM,CAAC,YAAY,UAAU,QAAQ,UAAU,EAAE;AAAA,MACnD,EAAE,MAAM,CAAC,MAAM,QAAQ,UAAU,SAAS,QAAQ,EAAE;AAAA,MACpD,EAAE,MAAM,CAAC,oBAAoB,kBAAkB,EAAE;AAAA,MACjD;AAAA,QACE,UAAU,CAAC,QAAQ,MAAM;AAAA,QACzB,IAAI,EAAE,KAAK,iBAAiB,MAAM,CAAC,SAAS,EAAE;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AACA,SAAO,aAAa,MAAM,MAAM,UAAU,IAAI;AAChD;AAOO,SAAS,QACd,YACkB;AAClB,QAAM,OAAyB;AAAA,IAC7B,MAAM;AAAA,MACJ,EAAE,OAAO,iBAAiB,KAAK,CAAC,QAAQ,SAAS,QAAQ,EAAE;AAAA,MAC3D,EAAE,MAAM,CAAC,WAAW,aAAa,mBAAmB,YAAY,UAAU,EAAE;AAAA,MAC5E,EAAE,MAAM,CAAC,aAAa,iBAAiB,EAAE;AAAA,MACzC,EAAE,MAAM,CAAC,aAAa,aAAa,eAAe,qBAAqB,EAAE;AAAA,MACzE,EAAE,MAAM,CAAC,aAAa,YAAY,cAAc,iBAAiB,EAAE;AAAA,MACnE,EAAE,MAAM,CAAC,gBAAgB,YAAY,aAAa,WAAW,EAAE;AAAA,IACjE;AAAA,IACA,SAAS;AAAA,MACP;AAAA,QACE,OAAO,CAAC,sBAAsB,sBAAsB;AAAA,QACpD,OAAO,CAAC,GAAG;AAAA,MACb;AAAA,IACF;AAAA,IACA,UAAU,CAAC,EAAE,MAAM,CAAC,OAAO,YAAY,YAAY,QAAQ,EAAE,CAAC;AAAA,EAChE;AACA,SAAO,aAAa,MAAM,MAAM,UAAU,IAAI;AAChD;AAOO,SAAS,SACd,YACkB;AAClB,QAAM,OAAyB;AAAA,IAC7B,MAAM;AAAA,MACJ,EAAE,OAAO,gBAAgB;AAAA,MACzB,EAAE,MAAM,CAAC,WAAW,aAAa,mBAAmB,YAAY,UAAU,EAAE;AAAA,MAC5E,EAAE,MAAM,CAAC,aAAa,aAAa,eAAe,qBAAqB,EAAE;AAAA,MACzE,EAAE,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,SAAS;AAAA,MACP;AAAA,QACE,OAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,QACA,OAAO,CAAC,GAAG;AAAA,MACb;AAAA,MACA,EAAE,MAAM,IAAI;AAAA,IACd;AAAA,IACA,UAAU;AAAA,MACR,EAAE,MAAM,CAAC,OAAO,YAAY,YAAY,UAAU,MAAM,EAAE;AAAA,IAC5D;AAAA,EACF;AACA,SAAO,aAAa,MAAM,MAAM,UAAU,IAAI;AAChD;AAOO,SAAS,aACd,YACkB;AAClB,QAAM,OAAyB;AAAA,IAC7B,MAAM;AAAA,MACJ,EAAE,OAAO,iBAAiB,KAAK,CAAC,MAAM,EAAE;AAAA,MACxC,EAAE,MAAM,MAAM;AAAA,IAChB;AAAA,IACA,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;AAAA,IACvB,UAAU;AAAA,MACR,EAAE,MAAM,CAAC,OAAO,YAAY,QAAQ,MAAM,YAAY,QAAQ,EAAE;AAAA,IAClE;AAAA,EACF;AACA,SAAO,aAAa,MAAM,MAAM,UAAU,IAAI;AAChD;;;AC3KA,OAAO,UAAU;AAcjB,SAAS,QAAQ,OAAoC;AACnD,SAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAC9C;AAKA,IAAM,qBAAoC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,uBAAsC,CAAC,SAAS,QAAQ,UAAU;AAExE,SAAS,aACP,MACA,MACsC;AACtC,aAAW,KAAK,MAAM;AACpB,QAAI,KAAK,MAAM;AACb,aAAO,EAAE,KAAK,GAAG,OAAO,KAAK,CAAC,EAAE;AAAA,IAClC;AAAA,EACF;AACA,QAAM,IAAI,MAAM,kCAAkC,KAAK,UAAU,IAAI,CAAC,EAAE;AAC1E;AAGA,SAAS,aAAa,KAA0B;AAC9C,SAAO,QAAQ,eAAe,gBAAgB;AAChD;AAIA,SAAS,mBAAmB,OAA8C;AACxE,SAAO,MAAM,IAAI,CAAC,MAAM,MAAM;AAC5B,UAAM,IAAI;AACV,UAAM,EAAE,KAAK,MAAM,IAAI,aAAa,GAAG,kBAAkB;AACzD,UAAM,QAAQ,QAAQ,KAA0B;AAEhD,UAAM,MAA+B;AAAA,MACnC,MAAM,aAAa,CAAC;AAAA,MACpB;AAAA,IACF;AAEA,QAAI,SAAS,KAAK,EAAE,KAAK;AACvB,UAAI,aAAa,EAAE;AAAA,IACrB;AAEA,QAAI,WAAW,aAAa,GAAG;AAE/B,QAAI,QAAQ,cAAc,QAAQ,GAAG;AACnC,UAAI,cAAc,EAAE;AAAA,IACtB;AAEA,WAAO;AAAA,EACT,CAAC;AACH;AAIA,SAAS,sBACP,OAC2B;AAC3B,SAAO,MAAM,IAAI,CAAC,MAAM,MAAM;AAC5B,UAAM,IAAI;AACV,UAAM,EAAE,KAAK,MAAM,IAAI,aAAa,GAAG,oBAAoB;AAC3D,UAAM,UAAU,QAAQ,KAA0B;AAElD,UAAM,MAA+B;AAAA,MACnC,MAAM,gBAAgB,CAAC;AAAA,MACvB;AAAA,MACA,UAAU;AAAA,IACZ;AAEA,QAAI,WAAW,KAAK,EAAE,OAAO;AAC3B,UAAI,QAAQ,EAAE;AAAA,IAChB;AAEA,QAAI,QAAQ,cAAc,QAAQ,GAAG;AACnC,UAAI,cAAc,EAAE;AAAA,IACtB;AAEA,WAAO;AAAA,EACT,CAAC;AACH;AAIA,SAAS,sBACP,OAC2B;AAC3B,SAAO,MAAM,IAAI,CAAC,MAAM,MAAM;AAC5B,UAAM,IAAI;AACV,UAAM,EAAE,KAAK,MAAM,IAAI,aAAa,GAAG,oBAAoB;AAC3D,UAAM,WAAW,QAAQ,KAA0B;AAEnD,UAAM,MAA+B;AAAA,MACnC,MAAM,gBAAgB,CAAC;AAAA,MACvB;AAAA,MACA,UAAU;AAAA,IACZ;AAEA,QAAI,QAAQ,cAAc,QAAQ,GAAG;AACnC,YAAM,KAAK,EAAE;AACb,UAAI,OAAO,OAAO,UAAU;AAC1B,YAAI,cAAc;AAAA,MACpB,WAAW,OAAO,OAAO,YAAY,OAAO,MAAM;AAChD,cAAM,SAAS;AACf,YAAI,cAAc,EAAE,SAAS,OAAO,KAAK,MAAM,OAAO,KAAK;AAAA,MAC7D;AAAA,IACF;AAEA,WAAO;AAAA,EACT,CAAC;AACH;AAIA,SAAS,kBAAkB,OAA6C;AACtE,SAAO,MAAM,IAAI,CAAC,MAAM,MAAM;AAC5B,UAAM,MAA+B;AAAA,MACnC,MAAM,YAAY,CAAC;AAAA,MACnB,UAAU,KAAK;AAAA,IACjB;AACA,QAAI,KAAK,OAAO;AACd,UAAI,QAAQ,KAAK;AAAA,IACnB;AACA,QAAI,KAAK,MAAM;AACb,UAAI,OAAO,KAAK;AAAA,IAClB;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAIA,SAAS,sBACP,WAC2B;AAC3B,SAAO,UAAU,IAAI,CAAC,OAAO;AAAA,IAC3B,OAAO,EAAE;AAAA,IACT,YAAY,EAAE;AAAA,EAChB,EAAE;AACJ;AAIA,SAAS,0BACP,WAC2B;AAC3B,SAAO,UAAU,IAAI,CAAC,OAAO;AAAA,IAC3B,OAAO,EAAE;AAAA,IACT,aAAa,EAAE;AAAA,EACjB,EAAE;AACJ;AASO,SAAS,gBAAgB,QAAkC;AAChE,QAAM,MAA+B;AAAA,IACnC,SAAS;AAAA,IACT,MAAM;AAAA,EACR;AAEA,MAAI,OAAO,QAAQ,OAAO,KAAK,SAAS,GAAG;AACzC,QAAI,aAAa,mBAAmB,OAAO,IAAI;AAAA,EACjD;AAEA,MAAI,OAAO,WAAW,OAAO,QAAQ,SAAS,GAAG;AAC/C,QAAI,gBAAgB,sBAAsB,OAAO,OAAO;AAAA,EAC1D;AAEA,MAAI,OAAO,YAAY,OAAO,SAAS,SAAS,GAAG;AACjD,QAAI,gBAAgB,sBAAsB,OAAO,QAAQ;AAAA,EAC3D;AAEA,MAAI,OAAO,OAAO,OAAO,IAAI,SAAS,GAAG;AACvC,QAAI,YAAY,kBAAkB,OAAO,GAAG;AAAA,EAC9C;AAEA,MAAI,OAAO,OAAO,OAAO,IAAI,SAAS,GAAG;AACvC,QAAI,gBAAgB,sBAAsB,OAAO,GAAG;AAAA,EACtD;AAEA,MAAI,OAAO,WAAW,OAAO,QAAQ,SAAS,GAAG;AAC/C,QAAI,oBAAoB,0BAA0B,OAAO,OAAO;AAAA,EAClE;AAEA,SAAO,KAAK,KAAK,KAAK,EAAE,WAAW,GAAG,CAAC;AACzC;AASO,SAAS,mBAA2B;AACzC,QAAM,MAAM;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,YAAY;AAAA,MACV;AAAA,QACE,MAAM;AAAA,QACN,OAAO,CAAC,iBAAiB;AAAA,QACzB,YAAY,CAAC,SAAS,UAAU,QAAQ;AAAA,QACxC,UAAU;AAAA,QACV,SAAS;AAAA,MACX;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,OAAO,CAAC,2BAA2B,mBAAmB;AAAA,QACtD,YAAY,CAAC,SAAS,UAAU,QAAQ;AAAA,QACxC,UAAU;AAAA,QACV,SAAS;AAAA,MACX;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,OAAO,CAAC,+BAA+B,aAAa,SAAS;AAAA,QAC7D,YAAY,CAAC,SAAS,UAAU,QAAQ;AAAA,QACxC,UAAU;AAAA,QACV,SAAS;AAAA,MACX;AAAA,IACF;AAAA,IACA,eAAe;AAAA,MACb;AAAA,QACE,MAAM;AAAA,QACN,UAAU,CAAC,QAAQ,WAAW,OAAO;AAAA,QACrC,YAAY,CAAC,SAAS;AAAA,QACtB,UAAU;AAAA,QACV,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,SAAO,KAAK,KAAK,KAAK,EAAE,WAAW,GAAG,CAAC;AACzC;","names":[]}