@amaster.ai/pi-security 0.1.1-beta.0 → 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -1,8 +1,10 @@
1
1
  # Pi Security
2
2
 
3
- `@amaster.ai/pi-security` provides a resource-aware security policy engine and a Pi extension entry point.
3
+ ![pi-security preview](https://raw.githubusercontent.com/TGYD-helige/pi/master/packages/pi-security/preview.png)
4
4
 
5
- The core engine classifies tool calls into resources such as files, shell commands, network access, memory writes, MCP calls, and subagent spawns. It then applies profile rules to decide whether a call is allowed, denied, sandbox-only, allowed with constraints, or requires human approval.
5
+ `@amaster.ai/pi-security` provides a sandbox-aware security policy engine and a Pi extension entry point.
6
+
7
+ The core engine classifies tool calls into resources (files, shell commands, network access), assesses risk, and applies profile rules to decide whether a call is allowed, denied, or requires human approval. Profiles are built from two orthogonal axes — **sandbox** (what tools are exposed) and **approval** (when to ask the user) — inspired by Codex.
6
8
 
7
9
  ## Pi extension
8
10
 
@@ -12,22 +14,9 @@ Install the extension entry point `@amaster.ai/pi-security/extension` and load t
12
14
  {
13
15
  "pi-security": {
14
16
  "enabled": true,
15
- "profile": "auto-review",
17
+ "profile": "default",
16
18
  "approvals": {
17
19
  "allowSessionGrants": true
18
- },
19
- "security": {
20
- "profiles": {
21
- "auto-review": {
22
- "rules": [
23
- {
24
- "id": "ask-file-writes",
25
- "tools": ["write_file", "edit_file"],
26
- "decision": { "kind": "ask", "reason": "File modifications require approval." }
27
- }
28
- ]
29
- }
30
- }
31
20
  }
32
21
  }
33
22
  }
@@ -35,6 +24,91 @@ Install the extension entry point `@amaster.ai/pi-security/extension` and load t
35
24
 
36
25
  The extension listens to Pi `tool_call` and `user_bash` events. It does not register an LLM-callable tool that can bypass policy. Human approvals are requested through Pi UI primitives when UI is available; non-interactive contexts fail closed when a rule requires approval.
37
26
 
27
+ ## Built-in profiles
28
+
29
+ Profiles are derived from a `sandbox` × `approval` matrix. Pick one as a starting point and override either axis in your own profiles.
30
+
31
+ | Profile | Sandbox | Approval | Use case |
32
+ |----------------|--------------------|--------------|---------------------------------------------------------|
33
+ | `read-only` | `read-only` | `never` | Read-only inspection, no modifications |
34
+ | `default` | `workspace-write` | `on-request` | Workspace edits with approval for writes (recommended) |
35
+ | `auto` | `workspace-write` | `on-failure` | Autonomous edits, only ask when risk is high |
36
+ | `full-access` | `full-access` | `never` | Trusted automation, no gating (use with care) |
37
+
38
+ ### Sandbox modes
39
+
40
+ | Mode | Allowed tools | Denied tools |
41
+ |--------------------|------------------------------------------------|-----------------------|
42
+ | `read-only` | `read`, `ls`, `find`, `grep` | `write`, `edit`, `bash` |
43
+ | `workspace-write` | `read`, `ls`, `find`, `grep`, `write`, `edit`, `bash` | — |
44
+ | `full-access` | `*` (all tools) | — |
45
+
46
+ Tool names align with the pi-coding-agent built-in tools: `bash`, `read`, `write`, `edit`, `ls`, `find`, `grep`.
47
+
48
+ ### Approval modes
49
+
50
+ | Mode | Behavior |
51
+ |---------------|---------------------------------------------------------------------------|
52
+ | `never` | No approval prompts (deny rules still apply, e.g. for secrets). |
53
+ | `on-failure` | Ask only on high/critical risk operations. |
54
+ | `on-request` | Ask on workspace writes/deletes (in addition to high-risk ops). |
55
+ | `untrusted` | Ask on workspace writes plus high-risk ops; default decision is also ask. |
56
+
57
+ Baseline secret protection (denying `.ssh/`, `.env`, `*.pem`, `*.key`, etc.) is always enabled, regardless of profile.
58
+
59
+ ## Custom profiles
60
+
61
+ Profiles can be defined in three places. Higher-priority sources override lower-priority ones with the same name:
62
+
63
+ 1. **Project**: `<cwd>/.pi/policy/<name>.json` (highest priority)
64
+ 2. **Agent**: `<agentDir>/policy/<name>.json`
65
+ 3. **User**: `~/.pi/agent/policy/<name>.json`
66
+ 4. **Settings**: under `pi-security.security.profiles` in `pi.json`
67
+
68
+ Each JSON file defines a single profile; the filename (without `.json`) is the profile name.
69
+
70
+ ### JSON config examples
71
+
72
+ Ready-to-copy samples live under [`examples/`](./examples) and are exercised by the test suite:
73
+
74
+ - [`examples/reviewer.json`](./examples/reviewer.json) — a project-level file policy. Drop into `<project>/.pi/policy/reviewer.json`. Starts from `read-only`, opens to `workspace-write`, asks on `bash`, denies external network.
75
+ - [`examples/auto-review.settings.json`](./examples/auto-review.settings.json) — a `pi.json` snippet that defines a custom `auto-review` profile inline. Extends `default` and asks before package-manager installs (`npm/pnpm/yarn/pip install|add`) via `argsRegex`.
76
+
77
+ ### Profile schema
78
+
79
+ ```ts
80
+ type SecurityProfileConfig = {
81
+ extends?: string; // built-in profile name or another custom profile
82
+ sandbox?: 'read-only' | 'workspace-write' | 'full-access';
83
+ approval?: 'never' | 'on-failure' | 'on-request' | 'untrusted';
84
+ rules?: SecurityRule[]; // appended after parent rules
85
+ defaultDecision?: SecurityDecision; // overrides parent default for unmatched tools
86
+ };
87
+ ```
88
+
89
+ ### Rule schema
90
+
91
+ Rules are evaluated in priority order (descending); the first match wins.
92
+
93
+ ```ts
94
+ type SecurityRule = {
95
+ id: string;
96
+ priority?: number; // default 300 for user rules
97
+ tools?: string[]; // tool name patterns ('*', 'mcp_*', 'bash')
98
+ sources?: ToolSource[]; // 'builtin' | 'mcp' | 'runtime'
99
+ triggers?: Array<'user' | 'agent' | 'scheduler'>;
100
+ senderTrusts?: Array<'owner' | 'trusted' | 'untrusted'>;
101
+ args?: Record<string, string>; // exact/glob match against args
102
+ argsRegex?: Record<string, string>; // regex match against args
103
+ resources?: ('file' | 'shell' | 'network')[];
104
+ operations?: ('read' | 'write' | 'execute' | 'delete' | 'connect' | 'search')[];
105
+ scopes?: ('workspace' | 'home' | 'system' | 'external' | 'unknown')[];
106
+ sensitivity?: ('normal' | 'source' | 'config' | 'secret' | 'credential')[];
107
+ risk?: ('low' | 'medium' | 'high' | 'critical')[];
108
+ decision: { kind: 'allow' } | { kind: 'deny'; reason: string } | { kind: 'ask'; reason: string; prompt?: string };
109
+ };
110
+ ```
111
+
38
112
  ## Commands
39
113
 
40
114
  - `/pi-security-status` shows the active profile, audit count, and in-session grants.
@@ -43,6 +117,6 @@ The extension listens to Pi `tool_call` and `user_bash` events. It does not regi
43
117
 
44
118
  ## Trust model
45
119
 
46
- This module is an execution gate, not a filesystem sandbox by itself. Deny and approval decisions are enforceable because they run before Pi tool execution. Constraint decisions must be paired with a runtime that actually enforces the returned constraints.
120
+ This module is an execution gate, not a filesystem sandbox by itself. Deny and approval decisions are enforceable because they run before Pi tool execution; sandbox enforcement still depends on the runtime that executes the tool.
47
121
 
48
- Sensitive paths such as SSH keys, `.env`, credentials, tokens, private keys, and secret files are denied by baseline policy. Audit entries include tool names, resource summaries, risk level, and decision metadata, but they should not include plaintext secrets.
122
+ Sensitive paths such as SSH keys, `.env`, credentials, tokens, private keys, and `secrets/` directories are denied by baseline policy across all profiles. Audit entries include tool names, resource summaries, risk level, and decision metadata, but they should not include plaintext secrets.
@@ -1 +1 @@
1
- {"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EAIpB,MAAM,YAAY,CAAC;AAOpB,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE;QACV,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,iCAAiC,CAAC;IAC1C,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,MAAM,EAAE,sBAAsB,EAAE,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,mBAAmB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CA+ClE;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,aAAa,EACpB,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAc1C;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,aAAa,EACpB,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CA8B1C;AAED,wBAAgB,uBAAuB,CACrC,MAAM,CAAC,EAAE,yBAAyB,GACjC,iCAAiC,CAenC"}
1
+ {"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EAIpB,MAAM,YAAY,CAAC;AAQpB,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE;QACV,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,iCAAiC,CAAC;IAC1C,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,MAAM,EAAE,sBAAsB,EAAE,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,mBAAmB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CA+ClE;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,aAAa,EACpB,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAc1C;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,aAAa,EACpB,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CA8B1C;AAED,wBAAgB,uBAAuB,CACrC,MAAM,CAAC,EAAE,yBAAyB,GACjC,iCAAiC,CAenC"}
package/dist/extension.js CHANGED
@@ -1,5 +1,7 @@
1
- import { getAgentDir, SettingsManager } from '@earendil-works/pi-coding-agent';
1
+ import { loadPiSettings } from '@amaster.ai/pi-shared/settings';
2
+ import { getAgentDir } from '@earendil-works/pi-coding-agent';
2
3
  import { SecurityGate, securityEvaluationDetails, } from './index.js';
4
+ import { loadFilePolicies } from './policy-loader.js';
3
5
  const SETTINGS_KEY = 'pi-security';
4
6
  const EXTENSION_STATUS_KEY = 'pi-security';
5
7
  const DEFAULT_PROFILE = 'auto-review';
@@ -64,7 +66,7 @@ export async function authorizeUserBash(event, ctx, state) {
64
66
  }
65
67
  const toolCall = {
66
68
  id: 'user-bash',
67
- name: 'run_shell',
69
+ name: 'bash',
68
70
  source: 'builtin',
69
71
  args: {
70
72
  command: event.command,
@@ -108,6 +110,7 @@ function createGate(ctx, state) {
108
110
  return new SecurityGate({
109
111
  profile: state.config.profile,
110
112
  ...(state.config.security ? { config: state.config.security } : {}),
113
+ filePolicies: loadFilePolicies(ctx.cwd, getAgentDir()),
111
114
  approvalHandler: async ({ toolCall, decision }) => resolveApproval(ctx, state, toolCall, decision),
112
115
  auditSink: (event) => {
113
116
  state.auditLog.push(event);
@@ -142,26 +145,16 @@ async function resolveApproval(ctx, state, toolCall, decision) {
142
145
  }
143
146
  function loadSettings(cwd) {
144
147
  try {
145
- const settings = SettingsManager.create(cwd, getAgentDir());
146
- const global = settings.getGlobalSettings();
147
- const project = settings.getProjectSettings();
148
- return mergePlainObjects(global[SETTINGS_KEY], project[SETTINGS_KEY]);
148
+ const config = loadPiSettings(SETTINGS_KEY, {
149
+ cwd,
150
+ agentDir: getAgentDir(),
151
+ });
152
+ return Object.keys(config).length > 0 ? config : undefined;
149
153
  }
150
154
  catch {
151
155
  return undefined;
152
156
  }
153
157
  }
154
- function mergePlainObjects(first, second) {
155
- const a = isPlainObject(first) ? first : undefined;
156
- const b = isPlainObject(second) ? second : undefined;
157
- if (!a && !b) {
158
- return undefined;
159
- }
160
- return {
161
- ...(a ?? {}),
162
- ...(b ?? {}),
163
- };
164
- }
165
158
  function isPlainObject(value) {
166
159
  return Boolean(value && typeof value === 'object' && !Array.isArray(value));
167
160
  }
@@ -183,30 +176,11 @@ function requestFromContext(ctx) {
183
176
  function toolCallFromPiEvent(event) {
184
177
  return {
185
178
  id: event.toolCallId,
186
- name: normalizeToolName(event.toolName),
179
+ name: event.toolName,
187
180
  source: toolSourceForPiTool(event.toolName),
188
181
  args: normalizeToolArgs(event.toolName, event.input),
189
182
  };
190
183
  }
191
- function normalizeToolName(toolName) {
192
- switch (toolName) {
193
- case 'bash':
194
- return 'run_shell';
195
- case 'write':
196
- return 'write_file';
197
- case 'edit':
198
- return 'edit_file';
199
- case 'read':
200
- return 'read_file';
201
- case 'ls':
202
- return 'list_files';
203
- case 'grep':
204
- case 'find':
205
- return 'search_files';
206
- default:
207
- return toolName;
208
- }
209
- }
210
184
  function toolSourceForPiTool(toolName) {
211
185
  if (toolName.startsWith('mcp_') || toolName.startsWith('mcp__')) {
212
186
  return 'mcp';
@@ -1 +1 @@
1
- {"version":3,"file":"extension.js","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAIL,YAAY,EACZ,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AAEpB,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAC3C,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AA+BhC,MAAM,CAAC,OAAO,UAAU,mBAAmB,CAAC,EAAgB;IAC1D,MAAM,KAAK,GAA6B;QACtC,MAAM,EAAE,uBAAuB,EAAE;QACjC,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC3C,KAAK,CAAC,MAAM,GAAG,uBAAuB,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,EAAE,CAAC,SAAS,CACd,oBAAoB,EACpB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC9C,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;QAClD,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAE/E,EAAE,CAAC,eAAe,CAAC,oBAAoB,EAAE;QACvC,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;KACF,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,CAAC,mBAAmB,EAAE;QACtC,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;KACF,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,CAAC,mBAAmB,EAAE;QACtC,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;YAClB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAoB,EACpB,GAAqB,EACrB,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC;QACxD,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC;QAChC,QAAQ;QACR,YAAY,EAAE,GAAG,CAAC,GAAG;KACtB,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAoB,EACpB,GAAqB,EACrB,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAoB;QAChC,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE;YACJ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC7C;KACF,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC;QACxD,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC;QAChC,QAAQ;QACR,YAAY,EAAE,GAAG,CAAC,GAAG;KACtB,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE;gBACN,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;gBAClC,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK;aACjB;SACF,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAkC;IAElC,MAAM,oBAAoB,GAAG,MAAM,EAAE,UAAU,CAAC;IAChD,MAAM,UAAU,GACd,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC;QACtC,oBAAoB,KAAK,SAAS;QAClC,oBAAoB,GAAG,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC;QACvC,CAAC,CAAC,mBAAmB,CAAC;IAC1B,OAAO;QACL,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,KAAK;QAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,eAAe;QACnD,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,UAAU;QACV,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,kBAAkB,KAAK,KAAK;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAqB,EAAE,KAA+B;IACxE,OAAO,IAAI,YAAY,CAAC;QACtB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC7B,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,eAAe,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAChD,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACjD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACpD,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAqB,EACrB,KAA+B,EAC/B,QAAyB,EACzB,QAAoD;IAEpD,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CACnC,QAAQ,CAAC,MAAM,IAAI,oBAAoB,EACvC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACpC,CAAC;QACF,OAAO,QAAQ;YACb,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE;YACnE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAChC,GAAG,QAAQ,CAAC,MAAM,IAAI,oBAAoB,KAAK,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EACpF,CAAC,YAAY,EAAE,gCAAgC,EAAE,MAAM,CAAC,CACzD,CAAC;IACF,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,KAAK,gCAAgC,EAAE,CAAC;QAChD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,wCAAwC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,iBAAiB,EAA6B,CAAC;QACvE,MAAM,OAAO,GAAG,QAAQ,CAAC,kBAAkB,EAA6B,CAAC;QACzE,OAAO,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAEvD,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,MAAe;IACxD,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACZ,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;KACb,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAqB;IAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,OAAO;QACL,SAAS;QACT,cAAc,EAAE,SAAS;QACzB,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,KAAK;QACtB,KAAK,EAAE;YACL,QAAQ,EAAE,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,IAAI;YACrD,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,SAAS;SACrF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAoB;IAC/C,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,UAAU;QACpB,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvC,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3C,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,YAAY,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,IAAI;YACP,OAAO,YAAY,CAAC;QACtB,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,KAA8B;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAqB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CACtB,KAA+B,EAC/B,QAAyB,EACzB,QAAoD;IAEpD,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CACtB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAChF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAoD;IACtE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CACtB,QAAyB,EACzB,QAAoD;IAEpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AACtE,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAyB;IAClD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3F,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA+B;IAC3D,OAAO;QACL,gBAAgB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE;QAC/D,YAAY,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE;QAClC,kBAAkB,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE;QACzC,mBAAmB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;KACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAA+B,EAAE,KAAa;IACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ;SAClB,KAAK,CAAC,CAAC,KAAK,CAAC;SACb,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC;IAC5F,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,IAAwB;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,GAAW;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;IACvD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC"}
1
+ {"version":3,"file":"extension.js","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAShE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAIL,YAAY,EACZ,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAC3C,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AA+BhC,MAAM,CAAC,OAAO,UAAU,mBAAmB,CAAC,EAAgB;IAC1D,MAAM,KAAK,GAA6B;QACtC,MAAM,EAAE,uBAAuB,EAAE;QACjC,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC3C,KAAK,CAAC,MAAM,GAAG,uBAAuB,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,EAAE,CAAC,SAAS,CACd,oBAAoB,EACpB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC9C,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;QAClD,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAE/E,EAAE,CAAC,eAAe,CAAC,oBAAoB,EAAE;QACvC,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;KACF,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,CAAC,mBAAmB,EAAE;QACtC,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;KACF,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,CAAC,mBAAmB,EAAE;QACtC,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;YAClB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAoB,EACpB,GAAqB,EACrB,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC;QACxD,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC;QAChC,QAAQ;QACR,YAAY,EAAE,GAAG,CAAC,GAAG;KACtB,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAoB,EACpB,GAAqB,EACrB,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAoB;QAChC,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE;YACJ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC7C;KACF,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC;QACxD,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC;QAChC,QAAQ;QACR,YAAY,EAAE,GAAG,CAAC,GAAG;KACtB,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE;gBACN,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;gBAClC,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK;aACjB;SACF,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAkC;IAElC,MAAM,oBAAoB,GAAG,MAAM,EAAE,UAAU,CAAC;IAChD,MAAM,UAAU,GACd,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC;QACtC,oBAAoB,KAAK,SAAS;QAClC,oBAAoB,GAAG,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC;QACvC,CAAC,CAAC,mBAAmB,CAAC;IAC1B,OAAO;QACL,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,KAAK;QAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,eAAe;QACnD,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,UAAU;QACV,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,kBAAkB,KAAK,KAAK;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAqB,EAAE,KAA+B;IACxE,OAAO,IAAI,YAAY,CAAC;QACtB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC7B,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC;QACtD,eAAe,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAChD,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACjD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACpD,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAqB,EACrB,KAA+B,EAC/B,QAAyB,EACzB,QAAoD;IAEpD,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CACnC,QAAQ,CAAC,MAAM,IAAI,oBAAoB,EACvC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACpC,CAAC;QACF,OAAO,QAAQ;YACb,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE;YACnE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAChC,GAAG,QAAQ,CAAC,MAAM,IAAI,oBAAoB,KAAK,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EACpF,CAAC,YAAY,EAAE,gCAAgC,EAAE,MAAM,CAAC,CACzD,CAAC;IACF,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,KAAK,gCAAgC,EAAE,CAAC;QAChD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,wCAAwC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAqC,YAAY,EAAE;YAC9E,GAAG;YACH,QAAQ,EAAE,WAAW,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,MAAoC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAqB;IAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,OAAO;QACL,SAAS;QACT,cAAc,EAAE,SAAS;QACzB,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,KAAK;QACtB,KAAK,EAAE;YACL,QAAQ,EAAE,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,IAAI;YACrD,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,SAAS;SACrF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAoB;IAC/C,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,UAAU;QACpB,IAAI,EAAE,KAAK,CAAC,QAAQ;QACpB,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3C,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,KAA8B;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAqB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CACtB,KAA+B,EAC/B,QAAyB,EACzB,QAAoD;IAEpD,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CACtB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAChF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAoD;IACtE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CACtB,QAAyB,EACzB,QAAoD;IAEpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AACtE,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAyB;IAClD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3F,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA+B;IAC3D,OAAO;QACL,gBAAgB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE;QAC/D,YAAY,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE;QAClC,kBAAkB,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE;QACzC,mBAAmB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;KACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAA+B,EAAE,KAAa;IACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ;SAClB,KAAK,CAAC,CAAC,KAAK,CAAC;SACb,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC;IAC5F,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,IAAwB;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,GAAW;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;IACvD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC"}
package/dist/index.d.ts CHANGED
@@ -1,4 +1,4 @@
1
- import type { JsonObject, RuntimeRequestContext, ToolCallRequest, ToolSource } from '@amaster.ai/pi-types';
1
+ import type { JsonObject, RuntimeRequestContext, ToolCallRequest, ToolSource } from '@amaster.ai/pi-shared';
2
2
  export type SecurityDecision = {
3
3
  kind: 'allow';
4
4
  reason?: string;
@@ -9,45 +9,15 @@ export type SecurityDecision = {
9
9
  kind: 'ask';
10
10
  reason: string;
11
11
  prompt?: string;
12
- } | {
13
- kind: 'sandbox_only';
14
- reason: string;
15
- sandboxProfile: string;
16
- } | {
17
- kind: 'allow_with_constraints';
18
- reason?: string;
19
- constraints: RuntimeConstraints;
20
- };
21
- export type RuntimeConstraints = {
22
- filesystem?: {
23
- read?: 'workspace' | 'all' | 'deny';
24
- write?: 'workspace' | 'all' | 'deny';
25
- allowPaths?: string[];
26
- denyPaths?: string[];
27
- };
28
- network?: {
29
- mode: 'deny' | 'allowlist' | 'unrestricted';
30
- allowedDomains?: string[];
31
- };
32
- shell?: {
33
- timeoutMs?: number;
34
- requireSandbox?: boolean;
35
- denyPatterns?: string[];
36
- };
37
- output?: {
38
- redactFields?: string[];
39
- maxBytes?: number;
40
- };
41
12
  };
42
13
  export type CapabilityPolicy = {
43
14
  allow?: string[];
44
15
  deny?: string[];
45
16
  };
46
- export type ConfiguredCapabilityPolicy = CapabilityPolicy & {
47
- mode?: 'merge' | 'replace';
48
- };
49
- export type SecurityResourceKind = 'file' | 'shell' | 'network' | 'memory' | 'mcp' | 'subagent';
50
- export type SecurityOperation = 'read' | 'write' | 'execute' | 'delete' | 'connect' | 'spawn' | 'search';
17
+ export type SandboxMode = 'read-only' | 'workspace-write' | 'full-access';
18
+ export type ApprovalMode = 'never' | 'on-failure' | 'on-request' | 'untrusted';
19
+ export type SecurityResourceKind = 'file' | 'shell' | 'network';
20
+ export type SecurityOperation = 'read' | 'write' | 'execute' | 'delete' | 'connect' | 'search';
51
21
  export type SecurityScope = 'workspace' | 'home' | 'system' | 'external' | 'unknown';
52
22
  export type SecuritySensitivity = 'normal' | 'source' | 'config' | 'secret' | 'credential';
53
23
  export type RiskLevel = 'low' | 'medium' | 'high' | 'critical';
@@ -64,16 +34,11 @@ export type RiskAssessment = {
64
34
  };
65
35
  export type SecurityRule = {
66
36
  id: string;
67
- enabled?: boolean;
68
37
  priority?: number;
69
38
  tools?: string[];
70
- tool?: string;
71
39
  sources?: ToolSource[];
72
- source?: ToolSource;
73
40
  triggers?: Array<RuntimeRequestContext['trigger']>;
74
- trigger?: RuntimeRequestContext['trigger'];
75
41
  senderTrusts?: Array<RuntimeRequestContext['senderTrust']>;
76
- senderTrust?: RuntimeRequestContext['senderTrust'];
77
42
  args?: Record<string, string>;
78
43
  argsRegex?: Record<string, string>;
79
44
  resources?: SecurityResourceKind[];
@@ -89,7 +54,8 @@ export type SecurityPolicyEngineOptions = {
89
54
  };
90
55
  export type SecurityProfileConfig = {
91
56
  extends?: string;
92
- capabilities?: ConfiguredCapabilityPolicy;
57
+ sandbox?: SandboxMode;
58
+ approval?: ApprovalMode;
93
59
  rules?: SecurityRule[];
94
60
  defaultDecision?: SecurityDecision;
95
61
  };
@@ -138,6 +104,7 @@ export type SecurityGateAuthorizeInput = {
138
104
  export type SecurityGateOptions = {
139
105
  profile: string;
140
106
  config?: SecurityConfig;
107
+ filePolicies?: Record<string, SecurityProfileConfig>;
141
108
  engine?: SecurityPolicyEngine;
142
109
  approvalHandler?: SecurityApprovalHandler;
143
110
  auditSink?: SecurityAuditSink;
@@ -174,9 +141,9 @@ export declare function assertSecurityAllowed(input: {
174
141
  workspaceDir?: string;
175
142
  }): Promise<SecurityEvaluationResult>;
176
143
  export declare function assertSecurityDecisionAllowed(decision: SecurityDecision): void;
177
- export declare function resolveCapabilityPolicy(profile: string, config?: SecurityConfig): CapabilityPolicy;
144
+ export declare function resolveCapabilityPolicy(profile: string, config?: SecurityConfig, filePolicies?: Record<string, SecurityProfileConfig>): CapabilityPolicy;
178
145
  export declare function isCapabilityExposed(toolName: string, policy: CapabilityPolicy): boolean;
179
- export declare function createSecurityPolicyEngineForProfile(profile: string, config?: SecurityConfig): SecurityPolicyEngine;
146
+ export declare function createSecurityPolicyEngineForProfile(profile: string, config?: SecurityConfig, filePolicies?: Record<string, SecurityProfileConfig>): SecurityPolicyEngine;
180
147
  export declare function classifySecurityResources(input: {
181
148
  request: RuntimeRequestContext;
182
149
  toolCall: ToolCallRequest;
@@ -187,4 +154,5 @@ export declare function assessRisk(input: {
187
154
  resources: SecurityResource[];
188
155
  }): RiskAssessment;
189
156
  export declare function securityEvaluationDetails(evaluation: SecurityEvaluationResult): JsonObject;
157
+ export { default } from './extension.js';
190
158
  //# sourceMappingURL=index.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,UAAU,EACV,qBAAqB,EACrB,eAAe,EACf,UAAU,EACX,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,wBAAwB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEzF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;QACpC,KAAK,CAAC,EAAE,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;QACrC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,cAAc,CAAC;QAC5C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;IACF,KAAK,CAAC,EAAE;QACN,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,gBAAgB,GAAG;IAC1D,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,UAAU,CAAC;AAChG,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,OAAO,GACP,SAAS,GACT,QAAQ,GACR,SAAS,GACT,OAAO,GACP,QAAQ,CAAC;AACb,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AACrF,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,CAAC;AAC3F,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,aAAa,CAAC;IACrB,WAAW,EAAE,mBAAmB,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC3C,YAAY,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3D,WAAW,CAAC,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACjC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IACnB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,IAAI,EAAE,cAAc,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,IAAI,EAAE,cAAc,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,GAAG;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IACrD,UAAU,EAAE,wBAAwB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACpG,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpF,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AA2IF,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,OAAO,GAAE,2BAAgC;IAKrD,MAAM,CAAC,KAAK,EAAE;QACZ,OAAO,EAAE,qBAAqB,CAAC;QAC/B,QAAQ,EAAE,eAAe,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,gBAAgB;IAIpB,QAAQ,CAAC,KAAK,EAAE;QACd,OAAO,EAAE,qBAAqB,CAAC;QAC/B,QAAQ,EAAE,eAAe,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,wBAAwB;CAyB7B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsC;IACtE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;gBAE9C,OAAO,EAAE,mBAAmB;IAOlC,SAAS,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,wBAAwB,CAAC;YAQvE,eAAe;YAsBf,KAAK;CAiBpB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAE7E;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,OAAO,EAAE,qBAAqB,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAQpC;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAW9E;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,cAAmB,GAC1B,gBAAgB,CAElB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CASvF;AAED,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,cAAmB,GAC1B,oBAAoB,CAgBtB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,gBAAgB,EAAE,CA4ErB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAChC,QAAQ,EAAE,eAAe,CAAC;IAC1B,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B,GAAG,cAAc,CAsDjB;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,wBAAwB,GAAG,UAAU,CAc1F"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,UAAU,EACV,qBAAqB,EACrB,eAAe,EACf,UAAU,EACX,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,iBAAiB,GAAG,aAAa,CAAC;AAC1E,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,YAAY,GAAG,YAAY,GAAG,WAAW,CAAC;AAE/E,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAChE,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC/F,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AACrF,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,CAAC;AAC3F,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,aAAa,CAAC;IACrB,WAAW,EAAE,mBAAmB,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,YAAY,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACjC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IACnB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,IAAI,EAAE,cAAc,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,IAAI,EAAE,cAAc,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,GAAG;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IACrD,UAAU,EAAE,wBAAwB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACpG,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpF,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAwFF,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,OAAO,GAAE,2BAAgC;IAKrD,MAAM,CAAC,KAAK,EAAE;QACZ,OAAO,EAAE,qBAAqB,CAAC;QAC/B,QAAQ,EAAE,eAAe,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,gBAAgB;IAIpB,QAAQ,CAAC,KAAK,EAAE;QACd,OAAO,EAAE,qBAAqB,CAAC;QAC/B,QAAQ,EAAE,eAAe,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,wBAAwB;CAyB7B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsC;IACtE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;gBAE9C,OAAO,EAAE,mBAAmB;IAQlC,SAAS,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,wBAAwB,CAAC;YAQvE,eAAe;YAmBf,KAAK;CAiBpB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAE7E;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,OAAO,EAAE,qBAAqB,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAQpC;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAS9E;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,cAAmB,EAC3B,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAM,GACvD,gBAAgB,CAElB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CASvF;AAED,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,cAAmB,EAC3B,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAM,GACvD,oBAAoB,CAwBtB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,gBAAgB,EAAE,CAmDrB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAChC,QAAQ,EAAE,eAAe,CAAC;IAC1B,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B,GAAG,cAAc,CA6CjB;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,wBAAwB,GAAG,UAAU,CAc1F;AAiQD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC"}
package/dist/index.js CHANGED
@@ -4,131 +4,75 @@ const DEFAULT_DECISION = {
4
4
  kind: 'ask',
5
5
  reason: 'No security rule matched this tool call.',
6
6
  };
7
- const OPEN_SANDBOX_CAPABILITIES = [
8
- 'read_file',
9
- 'list_files',
10
- 'search_files',
11
- 'write_file',
12
- 'edit_file',
13
- 'run_shell',
14
- 'run_code',
15
- 'memory_search',
16
- 'memory_write',
17
- 'sessions_spawn',
18
- 'mcp:*',
19
- 'mcp_*',
20
- 'mcp__*',
21
- ];
22
- const DEFAULT_CAPABILITY_POLICY = {
23
- allow: ['memory_search'],
24
- deny: ['run_shell', 'run_code', 'write_file'],
25
- };
26
- const BUILTIN_CAPABILITY_POLICIES = {
27
- chat: DEFAULT_CAPABILITY_POLICY,
28
- assistant: {
29
- allow: ['memory_search', 'memory_write', 'mcp:*', 'mcp_*', 'mcp__*', 'scheduler:create'],
30
- deny: ['run_shell', 'run_code'],
31
- },
32
- 'workspace-read': {
33
- allow: ['read_file', 'list_files', 'search_files', 'memory_search'],
34
- deny: ['write_file', 'edit_file'],
7
+ const SANDBOX_CAPABILITIES = {
8
+ 'read-only': {
9
+ allow: ['read', 'ls', 'find', 'grep'],
10
+ deny: ['write', 'edit', 'bash'],
35
11
  },
36
12
  'workspace-write': {
37
- allow: ['read_file', 'list_files', 'search_files', 'write_file', 'edit_file', 'memory_search'],
38
- deny: ['run_shell', 'run_code'],
39
- },
40
- 'sandbox-exec': { allow: OPEN_SANDBOX_CAPABILITIES },
41
- copilot: { allow: OPEN_SANDBOX_CAPABILITIES },
42
- 'auto-review': { allow: OPEN_SANDBOX_CAPABILITIES },
43
- default: {
44
- allow: ['read_file', 'list_files', 'search_files', 'write_file', 'edit_file', 'memory_search'],
45
- deny: ['run_shell', 'run_code'],
46
- },
47
- subagent: {
48
- allow: OPEN_SANDBOX_CAPABILITIES.filter((capability) => capability !== 'memory_write' && capability !== 'sessions_spawn'),
49
- deny: ['memory_write', 'sessions_spawn'],
50
- },
51
- scheduled: {
52
- allow: ['memory_search', 'read_file', 'list_files', 'search_files', 'mcp:*', 'mcp_*', 'mcp__*'],
53
- deny: ['scheduler:create', 'run_shell', 'run_code', 'write_file', 'edit_file'],
13
+ allow: ['read', 'ls', 'find', 'grep', 'write', 'edit', 'bash'],
14
+ deny: [],
54
15
  },
55
- admin: { allow: ['*'] },
56
16
  'full-access': { allow: ['*'] },
57
17
  };
58
- const BASELINE_SECURITY_RULES = [denySecretsRule()];
59
- const BUILTIN_SECURITY_RULES = {
60
- default: [
61
- ...BASELINE_SECURITY_RULES,
62
- {
63
- id: 'ask-workspace-write',
64
- priority: 260,
65
- resources: ['file'],
66
- operations: ['write', 'delete'],
67
- scopes: ['workspace'],
68
- decision: {
69
- kind: 'ask',
70
- reason: 'Workspace file modifications require approval.',
71
- prompt: 'Approve this file modification?',
72
- },
73
- },
74
- ],
75
- 'auto-review': [
76
- ...BASELINE_SECURITY_RULES,
77
- {
78
- id: 'ask-critical-risk',
79
- priority: 500,
80
- risk: ['critical'],
81
- decision: { kind: 'ask', reason: 'Critical risk operation requires approval.' },
82
- },
83
- {
84
- id: 'ask-high-risk',
85
- priority: 420,
86
- risk: ['high'],
87
- decision: { kind: 'ask', reason: 'High risk operation requires approval.' },
88
- },
89
- {
90
- id: 'ask-workspace-write',
91
- priority: 260,
92
- resources: ['file'],
93
- operations: ['write', 'delete'],
94
- scopes: ['workspace'],
95
- decision: {
96
- kind: 'ask',
97
- reason: 'Workspace file modifications require approval.',
98
- prompt: 'Approve this file modification?',
99
- },
100
- },
101
- ],
102
- scheduled: [
103
- ...BASELINE_SECURITY_RULES,
104
- {
105
- id: 'deny-non-read-scheduled',
106
- priority: 420,
107
- operations: ['write', 'execute', 'delete', 'spawn'],
108
- decision: {
109
- kind: 'deny',
110
- reason: 'Scheduled runs cannot perform mutating or executable actions by default.',
111
- },
112
- },
113
- ],
114
- subagent: [
115
- ...BASELINE_SECURITY_RULES,
116
- {
117
- id: 'deny-recursive-subagent-spawn',
118
- priority: 500,
119
- tools: ['sessions_spawn'],
120
- decision: { kind: 'deny', reason: 'Subagents cannot spawn child sessions by default.' },
121
- },
122
- {
123
- id: 'deny-subagent-memory-write',
124
- priority: 420,
125
- tools: ['memory_write'],
126
- decision: { kind: 'deny', reason: 'Subagents cannot write durable memory by default.' },
127
- },
128
- ],
129
- admin: [],
130
- 'full-access': [],
18
+ const BUILTIN_PROFILES = {
19
+ 'read-only': { sandbox: 'read-only', approval: 'never' },
20
+ default: { sandbox: 'workspace-write', approval: 'on-request' },
21
+ auto: { sandbox: 'workspace-write', approval: 'on-failure' },
22
+ 'full-access': { sandbox: 'full-access', approval: 'never' },
23
+ };
24
+ const DEFAULT_BUILTIN_PROFILE = BUILTIN_PROFILES.default;
25
+ const DENY_SECRETS_RULE = {
26
+ id: 'deny-secrets',
27
+ priority: 600,
28
+ sensitivity: ['secret', 'credential'],
29
+ decision: { kind: 'deny', reason: 'Secret or credential resources are protected.' },
30
+ };
31
+ const BASELINE_SECURITY_RULES = [DENY_SECRETS_RULE];
32
+ const ASK_WORKSPACE_WRITE_RULE = {
33
+ id: 'ask-workspace-write',
34
+ priority: 260,
35
+ resources: ['file'],
36
+ operations: ['write', 'delete'],
37
+ scopes: ['workspace'],
38
+ decision: {
39
+ kind: 'ask',
40
+ reason: 'Workspace file modifications require approval.',
41
+ prompt: 'Approve this file modification?',
42
+ },
131
43
  };
44
+ const ASK_HIGH_RISK_RULES = [
45
+ {
46
+ id: 'ask-critical-risk',
47
+ priority: 500,
48
+ risk: ['critical'],
49
+ decision: { kind: 'ask', reason: 'Critical risk operation requires approval.' },
50
+ },
51
+ {
52
+ id: 'ask-high-risk',
53
+ priority: 420,
54
+ risk: ['high'],
55
+ decision: { kind: 'ask', reason: 'High risk operation requires approval.' },
56
+ },
57
+ ];
58
+ function builtinRulesForApproval(approval) {
59
+ switch (approval) {
60
+ case 'never':
61
+ return [...BASELINE_SECURITY_RULES];
62
+ case 'on-failure':
63
+ return [...BASELINE_SECURITY_RULES, ...ASK_HIGH_RISK_RULES];
64
+ case 'on-request':
65
+ return [...BASELINE_SECURITY_RULES, ASK_WORKSPACE_WRITE_RULE];
66
+ case 'untrusted':
67
+ return [...BASELINE_SECURITY_RULES, ...ASK_HIGH_RISK_RULES, ASK_WORKSPACE_WRITE_RULE];
68
+ }
69
+ }
70
+ function defaultDecisionForApproval(approval) {
71
+ if (approval === 'untrusted') {
72
+ return { kind: 'ask', reason: 'Untrusted profile requires approval for unknown tool calls.' };
73
+ }
74
+ return { kind: 'allow' };
75
+ }
132
76
  export class SecurityPolicyEngine {
133
77
  entries;
134
78
  defaultDecision;
@@ -171,7 +115,8 @@ export class SecurityGate {
171
115
  auditSink;
172
116
  constructor(options) {
173
117
  this.engine =
174
- options.engine ?? createSecurityPolicyEngineForProfile(options.profile, options.config);
118
+ options.engine ??
119
+ createSecurityPolicyEngineForProfile(options.profile, options.config, options.filePolicies);
175
120
  this.approvalHandler = options.approvalHandler;
176
121
  this.auditSink = options.auditSink;
177
122
  }
@@ -195,9 +140,6 @@ export class SecurityGate {
195
140
  decision: evaluation.decision,
196
141
  evaluation,
197
142
  });
198
- if (resolved.kind === 'ask') {
199
- return resolved;
200
- }
201
143
  return resolved;
202
144
  }
203
145
  async audit(input, evaluation) {
@@ -230,8 +172,6 @@ export async function assertSecurityAllowed(input) {
230
172
  export function assertSecurityDecisionAllowed(decision) {
231
173
  switch (decision.kind) {
232
174
  case 'allow':
233
- case 'allow_with_constraints':
234
- case 'sandbox_only':
235
175
  return;
236
176
  case 'ask':
237
177
  throw new Error(`Tool call requires approval: ${decision.reason}`);
@@ -239,8 +179,8 @@ export function assertSecurityDecisionAllowed(decision) {
239
179
  throw new Error(`Tool call denied by security policy: ${decision.reason}`);
240
180
  }
241
181
  }
242
- export function resolveCapabilityPolicy(profile, config = {}) {
243
- return resolveSecurityProfile(profile, config).capabilities;
182
+ export function resolveCapabilityPolicy(profile, config = {}, filePolicies = {}) {
183
+ return resolveSecurityProfile(profile, config, [], filePolicies).capabilities;
244
184
  }
245
185
  export function isCapabilityExposed(toolName, policy) {
246
186
  const normalized = normalizePatternValue(toolName);
@@ -252,40 +192,46 @@ export function isCapabilityExposed(toolName, policy) {
252
192
  }
253
193
  return policy.allow.some((entry) => matchesPattern(normalized, entry));
254
194
  }
255
- export function createSecurityPolicyEngineForProfile(profile, config = {}) {
256
- const resolvedProfile = resolveSecurityProfile(profile, config);
257
- const capabilityRules = resolvedProfile.capabilities.allow?.map((toolName) => ({
195
+ export function createSecurityPolicyEngineForProfile(profile, config = {}, filePolicies = {}) {
196
+ const resolvedProfile = resolveSecurityProfile(profile, config, [], filePolicies);
197
+ const denyCapabilityRules = resolvedProfile.capabilities.deny?.map((toolName) => ({
198
+ id: `deny-capability-${profile}-${toolName}`,
199
+ priority: 110,
200
+ tools: [toolName],
201
+ decision: {
202
+ kind: 'deny',
203
+ reason: `Tool '${toolName}' is denied by sandbox '${resolvedProfile.sandbox}'.`,
204
+ },
205
+ })) ?? [];
206
+ const allowCapabilityRules = resolvedProfile.capabilities.allow?.map((toolName) => ({
258
207
  id: `allow-capability-${profile}-${toolName}`,
259
208
  priority: 100,
260
- tool: toolName,
209
+ tools: [toolName],
261
210
  decision: { kind: 'allow' },
262
211
  })) ?? [];
263
212
  return new SecurityPolicyEngine({
264
- rules: resolvedProfile.rules.concat(capabilityRules),
265
- defaultDecision: resolvedProfile.defaultDecision ?? {
266
- kind: 'deny',
267
- reason: `Tool is not exposed by security profile: ${profile}`,
268
- },
213
+ rules: resolvedProfile.rules.concat(denyCapabilityRules).concat(allowCapabilityRules),
214
+ defaultDecision: resolvedProfile.defaultDecision ?? defaultDecisionForApproval(resolvedProfile.approval),
269
215
  });
270
216
  }
271
217
  export function classifySecurityResources(input) {
272
218
  const { toolCall } = input;
273
- if (toolCall.name === 'read_file') {
219
+ if (toolCall.name === 'read') {
274
220
  return [fileResource('read', stringArg(toolCall.args, 'path'), input.workspaceDir)];
275
221
  }
276
- if (toolCall.name === 'list_files') {
222
+ if (toolCall.name === 'ls') {
277
223
  return [fileResource('read', stringArg(toolCall.args, 'path'), input.workspaceDir)];
278
224
  }
279
- if (toolCall.name === 'search_files') {
225
+ if (toolCall.name === 'find' || toolCall.name === 'grep') {
280
226
  return [
281
227
  fileResource('search', stringArg(toolCall.args, 'path') ?? stringArg(toolCall.args, 'cwd'), input.workspaceDir),
282
228
  ];
283
229
  }
284
- if (toolCall.name === 'write_file' || toolCall.name === 'edit_file') {
230
+ if (toolCall.name === 'write' || toolCall.name === 'edit') {
285
231
  return [fileResource('write', stringArg(toolCall.args, 'path'), input.workspaceDir)];
286
232
  }
287
- if (toolCall.name === 'run_shell' || toolCall.name === 'run_code') {
288
- const command = stringArg(toolCall.args, 'command') ?? stringArg(toolCall.args, 'code') ?? toolCall.name;
233
+ if (toolCall.name === 'bash') {
234
+ const command = stringArg(toolCall.args, 'command') ?? toolCall.name;
289
235
  const resources = [
290
236
  {
291
237
  kind: 'shell',
@@ -306,28 +252,6 @@ export function classifySecurityResources(input) {
306
252
  }
307
253
  return resources;
308
254
  }
309
- if (toolCall.name === 'memory_search') {
310
- return [{ kind: 'memory', operation: 'search', scope: 'unknown', sensitivity: 'normal' }];
311
- }
312
- if (toolCall.name === 'memory_write') {
313
- return [{ kind: 'memory', operation: 'write', scope: 'unknown', sensitivity: 'normal' }];
314
- }
315
- if (toolCall.name === 'sessions_spawn') {
316
- return [{ kind: 'subagent', operation: 'spawn', scope: 'unknown', sensitivity: 'normal' }];
317
- }
318
- if (toolCall.source === 'mcp' ||
319
- toolCall.name.startsWith('mcp_') ||
320
- toolCall.name.startsWith('mcp__')) {
321
- return [
322
- {
323
- kind: 'mcp',
324
- operation: 'connect',
325
- target: toolCall.name,
326
- scope: 'external',
327
- sensitivity: 'normal',
328
- },
329
- ];
330
- }
331
255
  return [
332
256
  {
333
257
  kind: 'shell',
@@ -373,15 +297,6 @@ export function assessRisk(input) {
373
297
  if (resource.kind === 'network') {
374
298
  raise('high', 'External network access');
375
299
  }
376
- if (resource.kind === 'memory' && resource.operation === 'write') {
377
- raise('medium', 'Durable memory write');
378
- }
379
- if (resource.kind === 'subagent') {
380
- raise('medium', 'Subagent spawn');
381
- }
382
- if (resource.kind === 'mcp') {
383
- raise('medium', 'External MCP tool call');
384
- }
385
300
  }
386
301
  return {
387
302
  level,
@@ -403,95 +318,60 @@ export function securityEvaluationDetails(evaluation) {
403
318
  })),
404
319
  };
405
320
  }
406
- function resolveSecurityProfile(profile, config, seen = []) {
321
+ function resolvedFromBuiltin(name) {
322
+ const builtin = BUILTIN_PROFILES[name] ?? DEFAULT_BUILTIN_PROFILE;
323
+ return {
324
+ sandbox: builtin.sandbox,
325
+ approval: builtin.approval,
326
+ capabilities: SANDBOX_CAPABILITIES[builtin.sandbox],
327
+ rules: builtinRulesForApproval(builtin.approval),
328
+ };
329
+ }
330
+ function resolveSecurityProfile(profile, config, seen = [], filePolicies = {}) {
407
331
  const normalizedProfile = profile.trim();
408
332
  if (seen.includes(normalizedProfile)) {
409
- return { capabilities: DEFAULT_CAPABILITY_POLICY, rules: [] };
333
+ return resolvedFromBuiltin('default');
410
334
  }
411
- const configured = config.profiles?.[normalizedProfile];
335
+ const configured = filePolicies[normalizedProfile] ?? config.profiles?.[normalizedProfile];
412
336
  const parent = configured?.extends
413
- ? resolveSecurityProfile(configured.extends, config, seen.concat(normalizedProfile))
414
- : {
415
- capabilities: BUILTIN_CAPABILITY_POLICIES[normalizedProfile] ?? DEFAULT_CAPABILITY_POLICY,
416
- rules: BUILTIN_SECURITY_RULES[normalizedProfile] ?? BASELINE_SECURITY_RULES,
417
- };
337
+ ? resolveSecurityProfile(configured.extends, config, seen.concat(normalizedProfile), filePolicies)
338
+ : resolvedFromBuiltin(normalizedProfile);
418
339
  if (!configured) {
419
340
  return parent;
420
341
  }
342
+ const sandbox = configured.sandbox ?? parent.sandbox;
343
+ const approval = configured.approval ?? parent.approval;
344
+ const sandboxChanged = configured.sandbox !== undefined && configured.sandbox !== parent.sandbox;
345
+ const approvalChanged = configured.approval !== undefined && configured.approval !== parent.approval;
346
+ const inheritedDefault = configured.defaultDecision ?? parent.defaultDecision;
421
347
  return {
422
- capabilities: mergeCapabilityPolicy(parent.capabilities, configured.capabilities),
423
- rules: parent.rules.concat(normalizeConfiguredRules(configured.rules)),
424
- ...((configured.defaultDecision ?? parent.defaultDecision)
425
- ? { defaultDecision: configured.defaultDecision ?? parent.defaultDecision }
426
- : {}),
427
- };
428
- }
429
- function denySecretsRule() {
430
- return {
431
- id: 'deny-secrets',
432
- priority: 600,
433
- sensitivity: ['secret', 'credential'],
434
- decision: { kind: 'deny', reason: 'Secret or credential resources are protected.' },
435
- };
436
- }
437
- function mergeCapabilityPolicy(base, override) {
438
- if (!override) {
439
- return copyCapabilityPolicy(base);
440
- }
441
- if (override.mode === 'replace') {
442
- return {
443
- ...(override.allow ? { allow: uniqueStrings(override.allow) } : {}),
444
- ...(override.deny ? { deny: uniqueStrings(override.deny) } : {}),
445
- };
446
- }
447
- return {
448
- allow: uniqueStrings([...(base.allow ?? []), ...(override.allow ?? [])]),
449
- deny: uniqueStrings([...(base.deny ?? []), ...(override.deny ?? [])]),
450
- };
451
- }
452
- function copyCapabilityPolicy(policy) {
453
- return {
454
- ...(policy.allow ? { allow: [...policy.allow] } : {}),
455
- ...(policy.deny ? { deny: [...policy.deny] } : {}),
348
+ sandbox,
349
+ approval,
350
+ capabilities: sandboxChanged ? SANDBOX_CAPABILITIES[sandbox] : parent.capabilities,
351
+ rules: (approvalChanged ? builtinRulesForApproval(approval) : parent.rules).concat(normalizeConfiguredRules(configured.rules)),
352
+ ...(inheritedDefault ? { defaultDecision: inheritedDefault } : {}),
456
353
  };
457
354
  }
458
355
  function normalizeConfiguredRules(rules) {
459
- return (rules ?? [])
460
- .filter((rule) => rule.enabled !== false)
461
- .map((rule) => ({
356
+ return (rules ?? []).map((rule) => ({
462
357
  ...rule,
463
358
  priority: rule.priority ?? 300,
464
359
  }));
465
360
  }
466
361
  function matchesSecurityRule(rule, context) {
467
- if (rule.enabled === false) {
468
- return false;
469
- }
470
362
  if (rule.tools?.length &&
471
363
  !rule.tools.some((tool) => matchesPattern(context.toolCall.name, tool))) {
472
364
  return false;
473
365
  }
474
- if (rule.tool && !matchesPattern(context.toolCall.name, rule.tool)) {
475
- return false;
476
- }
477
366
  if (rule.sources?.length && !rule.sources.includes(context.toolCall.source)) {
478
367
  return false;
479
368
  }
480
- if (rule.source && rule.source !== context.toolCall.source) {
481
- return false;
482
- }
483
369
  if (rule.triggers?.length && !rule.triggers.includes(context.request.trigger)) {
484
370
  return false;
485
371
  }
486
- if (rule.trigger && rule.trigger !== context.request.trigger) {
487
- return false;
488
- }
489
372
  if (rule.senderTrusts?.length && !rule.senderTrusts.includes(context.request.senderTrust)) {
490
373
  return false;
491
374
  }
492
- if (rule.senderTrust && rule.senderTrust !== context.request.senderTrust) {
493
- return false;
494
- }
495
375
  if (rule.args && !matchesArgs(rule.args, context.toolCall.args)) {
496
376
  return false;
497
377
  }
@@ -628,12 +508,10 @@ function stringArg(args, key) {
628
508
  function riskRank(level) {
629
509
  return { low: 1, medium: 2, high: 3, critical: 4 }[level];
630
510
  }
631
- function uniqueStrings(values) {
632
- return [...new Set(values)];
633
- }
634
511
  function summarizeTarget(value) {
635
512
  return value.length > 200
636
513
  ? `${value.slice(0, 200)}...[${value.length - 200} chars truncated]`
637
514
  : value;
638
515
  }
516
+ export { default } from './extension.js';
639
517
  //# sourceMappingURL=index.js.map
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAiK7B,MAAM,gBAAgB,GAAqB;IACzC,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,0CAA0C;CACnD,CAAC;AAEF,MAAM,yBAAyB,GAAG;IAChC,WAAW;IACX,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,WAAW;IACX,WAAW;IACX,UAAU;IACV,eAAe;IACf,cAAc;IACd,gBAAgB;IAChB,OAAO;IACP,OAAO;IACP,QAAQ;CACT,CAAC;AAEF,MAAM,yBAAyB,GAAqB;IAClD,KAAK,EAAE,CAAC,eAAe,CAAC;IACxB,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC;CAC9C,CAAC;AAEF,MAAM,2BAA2B,GAAqC;IACpE,IAAI,EAAE,yBAAyB;IAC/B,SAAS,EAAE;QACT,KAAK,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC;QACxF,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;KAChC;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,CAAC;QACnE,IAAI,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;KAClC;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,CAAC;QAC9F,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;KAChC;IACD,cAAc,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE;IACpD,OAAO,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE;IAC7C,aAAa,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE;IACnD,OAAO,EAAE;QACP,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,CAAC;QAC9F,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;KAChC;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,yBAAyB,CAAC,MAAM,CACrC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,cAAc,IAAI,UAAU,KAAK,gBAAgB,CACjF;QACD,IAAI,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC;KACzC;IACD,SAAS,EAAE;QACT,KAAK,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC/F,IAAI,EAAE,CAAC,kBAAkB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC;KAC/E;IACD,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE;IACvB,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE;CAChC,CAAC;AAEF,MAAM,uBAAuB,GAAmB,CAAC,eAAe,EAAE,CAAC,CAAC;AAEpE,MAAM,sBAAsB,GAAmC;IAC7D,OAAO,EAAE;QACP,GAAG,uBAAuB;QAC1B;YACE,EAAE,EAAE,qBAAqB;YACzB,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;YAC/B,MAAM,EAAE,CAAC,WAAW,CAAC;YACrB,QAAQ,EAAE;gBACR,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,gDAAgD;gBACxD,MAAM,EAAE,iCAAiC;aAC1C;SACF;KACF;IACD,aAAa,EAAE;QACb,GAAG,uBAAuB;QAC1B;YACE,EAAE,EAAE,mBAAmB;YACvB,QAAQ,EAAE,GAAG;YACb,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE;SAChF;QACD;YACE,EAAE,EAAE,eAAe;YACnB,QAAQ,EAAE,GAAG;YACb,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE;SAC5E;QACD;YACE,EAAE,EAAE,qBAAqB;YACzB,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;YAC/B,MAAM,EAAE,CAAC,WAAW,CAAC;YACrB,QAAQ,EAAE;gBACR,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,gDAAgD;gBACxD,MAAM,EAAE,iCAAiC;aAC1C;SACF;KACF;IACD,SAAS,EAAE;QACT,GAAG,uBAAuB;QAC1B;YACE,EAAE,EAAE,yBAAyB;YAC7B,QAAQ,EAAE,GAAG;YACb,UAAU,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC;YACnD,QAAQ,EAAE;gBACR,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,0EAA0E;aACnF;SACF;KACF;IACD,QAAQ,EAAE;QACR,GAAG,uBAAuB;QAC1B;YACE,EAAE,EAAE,+BAA+B;YACnC,QAAQ,EAAE,GAAG;YACb,KAAK,EAAE,CAAC,gBAAgB,CAAC;YACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mDAAmD,EAAE;SACxF;QACD;YACE,EAAE,EAAE,4BAA4B;YAChC,QAAQ,EAAE,GAAG;YACb,KAAK,EAAE,CAAC,cAAc,CAAC;YACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mDAAmD,EAAE;SACxF;KACF;IACD,KAAK,EAAE,EAAE;IACT,aAAa,EAAE,EAAE;CAClB,CAAC;AAEF,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAiB;IACxB,eAAe,CAAmB;IAEnD,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,gBAAgB,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,KAIN;QACC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED,QAAQ,CAAC,KAIR;QACC,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,GAA8B,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzE,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACxC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC9B,OAAO;oBACL,YAAY,EAAE,UAAU,EAAE;oBAC1B,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC5E,SAAS;oBACT,IAAI;oBACJ,cAAc;iBACf,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;YACL,YAAY,EAAE,UAAU,EAAE;YAC1B,QAAQ,EAAE,uBAAuB,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAClF,SAAS;YACT,IAAI;YACJ,cAAc;SACf,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,YAAY;IACN,MAAM,CAAuB;IAC7B,eAAe,CAAsC;IACrD,SAAS,CAAgC;IAE1D,YAAY,OAA4B;QACtC,IAAI,CAAC,MAAM;YACT,OAAO,CAAC,MAAM,IAAI,oCAAoC,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAiC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACpC,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,KAAiC,EACjC,UAAoC;QAEpC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACvC,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC;YAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,KAAiC,EACjC,UAAoC;QAEpC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,CAAC;YACnB,GAAG,UAAU;YACb,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAClC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;YAC5C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC7B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAK3C;IACC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;QACpD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,6BAA6B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAA0B;IACtE,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,OAAO,CAAC;QACb,KAAK,wBAAwB,CAAC;QAC9B,KAAK,cAAc;YACjB,OAAO;QACT,KAAK,KAAK;YACR,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,KAAK,MAAM;YACT,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,SAAyB,EAAE;IAE3B,OAAO,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,YAAY,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAwB;IAC5E,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,OAAe,EACf,SAAyB,EAAE;IAE3B,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,eAAe,GACnB,eAAe,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrD,EAAE,EAAE,oBAAoB,OAAO,IAAI,QAAQ,EAAE;QAC7C,QAAQ,EAAE,GAAG;QACb,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;KAC5B,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,OAAO,IAAI,oBAAoB,CAAC;QAC9B,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC;QACpD,eAAe,EAAE,eAAe,CAAC,eAAe,IAAI;YAClD,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,4CAA4C,OAAO,EAAE;SAC9D;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAIzC;IACC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO;YACL,YAAY,CACV,QAAQ,EACR,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EACnE,KAAK,CAAC,YAAY,CACnB;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpE,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAClE,MAAM,OAAO,GACX,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC;QAC3F,MAAM,SAAS,GAAuB;YACpC;gBACE,IAAI,EAAE,OAAO;gBACb,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC;gBACrE,WAAW,EAAE,QAAQ;aACtB;SACF,CAAC;QACF,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,QAAQ;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACtC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACvC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,IACE,QAAQ,CAAC,MAAM,KAAK,KAAK;QACzB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EACjC,CAAC;QACD,OAAO;YACL;gBACE,IAAI,EAAE,KAAK;gBACX,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,QAAQ,CAAC,IAAI;gBACrB,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,QAAQ;aACtB;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL;YACE,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,QAAQ,CAAC,IAAI;YACrB,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,QAAQ;SACtB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAG1B;IACC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAc,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,IAAe,EAAE,MAAc,EAAE,EAAE;QAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ,IAAI,QAAQ,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YAC/E,KAAK,CAAC,UAAU,EAAE,aAAa,QAAQ,CAAC,WAAW,WAAW,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAC/D,KAAK,CACH,QAAQ,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAClD,iBAAiB,QAAQ,CAAC,KAAK,QAAQ,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;YACtC,IAAI,sEAAsE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzF,KAAK,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,4DAA4D,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/E,KAAK,CAAC,MAAM,EAAE,iDAAiD,CAAC,CAAC;YACnE,CAAC;YACD,IACE,0EAA0E,CAAC,IAAI,CAAC,OAAO,CAAC,EACxF,CAAC;gBACD,KAAK,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnE,KAAK,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACjE,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACjC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC5B,KAAK,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;KACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAoC;IAC5E,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI;QAClC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK;QAC3B,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO;QACpC,YAAY,EAAE,UAAU,CAAC,cAAc;QACvC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAe,EACf,MAAsB,EACtB,OAAiB,EAAE;IAEnB,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,iBAAiB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,UAAU,EAAE,OAAO;QAChC,CAAC,CAAC,sBAAsB,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACpF,CAAC,CAAC;YACE,YAAY,EAAE,2BAA2B,CAAC,iBAAiB,CAAC,IAAI,yBAAyB;YACzF,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,IAAI,uBAAuB;SAC5E,CAAC;IACN,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO;QACL,YAAY,EAAE,qBAAqB,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC;QACjF,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,wBAAwB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtE,GAAG,CAAC,CAAC,UAAU,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC;YACxD,CAAC,CAAC,EAAE,eAAe,EAAE,UAAU,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,EAAE;YAC3E,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;QACL,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,GAAG;QACb,WAAW,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;QACrC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,+CAA+C,EAAE;KACpF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAsB,EACtB,QAAgD;IAEhD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAwB;IACpD,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAiC;IACjE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,GAAG,IAAI;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG;KAC/B,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB,EAAE,OAAkC;IACjF,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,IAAI,CAAC,KAAK,EAAE,MAAM;QAClB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,mBAAmB,CAAC,IAAI,CAAC;QACzB,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAC9E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB;IAC7C,OAAO,OAAO,CACZ,IAAI,CAAC,SAAS,EAAE,MAAM;QACpB,IAAI,CAAC,UAAU,EAAE,MAAM;QACvB,IAAI,CAAC,MAAM,EAAE,MAAM;QACnB,IAAI,CAAC,WAAW,EAAE,MAAM,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAkB,EAAE,QAA0B;IAC7E,IAAI,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAA0B,EAC1B,WAAoB;IAEpB,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,yEAAyE,QAAQ,CAAC,MAAM,EAAE;SACnG,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CACnB,SAA4B,EAC5B,KAAyB,EACzB,YAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS;QACT,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC;QACrC,WAAW,EAAE,uBAAuB,CAAC,KAAK,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB,EAAE,YAAgC;IAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,YAAY,IAAI,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,IAAI,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAyB;IACxD,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IACE,qGAAqG,CAAC,IAAI,CACxG,KAAK,CACN,EACD,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,wEAAwE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IACE,uHAAuH,CAAC,IAAI,CAC1H,KAAK,CACN,EACD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,uEAAuE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,QAAgC,EAAE,IAAgB;IACrE,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgC,EAAE,IAAgB;IAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,OAAe;IACpD,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,iBAAiB,KAAK,GAAG,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,eAAe,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,eAAe,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,eAAe,KAAK,iBAAiB,CAAC;AAC/C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgB;IAChC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,MAAgB;IACrC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG;QACvB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,mBAAmB;QACpE,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AA8H7B,MAAM,gBAAgB,GAAqB;IACzC,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,0CAA0C;CACnD,CAAC;AAEF,MAAM,oBAAoB,GAA0C;IAClE,WAAW,EAAE;QACX,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;QACrC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC;QAC9D,IAAI,EAAE,EAAE;KACT;IACD,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE;CAChC,CAAC;AAEF,MAAM,gBAAgB,GAAqE;IACzF,WAAW,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE;IACxD,OAAO,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC/D,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC5D,aAAa,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE;CAC7D,CAAC;AAEF,MAAM,uBAAuB,GAAG,gBAAgB,CAAC,OAGhD,CAAC;AAEF,MAAM,iBAAiB,GAAiB;IACtC,EAAE,EAAE,cAAc;IAClB,QAAQ,EAAE,GAAG;IACb,WAAW,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;IACrC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,+CAA+C,EAAE;CACpF,CAAC;AAEF,MAAM,uBAAuB,GAAmB,CAAC,iBAAiB,CAAC,CAAC;AAEpE,MAAM,wBAAwB,GAAiB;IAC7C,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC/B,MAAM,EAAE,CAAC,WAAW,CAAC;IACrB,QAAQ,EAAE;QACR,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,gDAAgD;QACxD,MAAM,EAAE,iCAAiC;KAC1C;CACF,CAAC;AAEF,MAAM,mBAAmB,GAAmB;IAC1C;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,GAAG;QACb,IAAI,EAAE,CAAC,UAAU,CAAC;QAClB,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE;KAChF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,GAAG;QACb,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE;KAC5E;CACF,CAAC;AAEF,SAAS,uBAAuB,CAAC,QAAsB;IACrD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,CAAC,GAAG,uBAAuB,CAAC,CAAC;QACtC,KAAK,YAAY;YACf,OAAO,CAAC,GAAG,uBAAuB,EAAE,GAAG,mBAAmB,CAAC,CAAC;QAC9D,KAAK,YAAY;YACf,OAAO,CAAC,GAAG,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;QAChE,KAAK,WAAW;YACd,OAAO,CAAC,GAAG,uBAAuB,EAAE,GAAG,mBAAmB,EAAE,wBAAwB,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAsB;IACxD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAiB;IACxB,eAAe,CAAmB;IAEnD,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,gBAAgB,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,KAIN;QACC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED,QAAQ,CAAC,KAIR;QACC,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,GAA8B,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzE,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACxC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC9B,OAAO;oBACL,YAAY,EAAE,UAAU,EAAE;oBAC1B,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC5E,SAAS;oBACT,IAAI;oBACJ,cAAc;iBACf,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;YACL,YAAY,EAAE,UAAU,EAAE;YAC1B,QAAQ,EAAE,uBAAuB,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAClF,SAAS;YACT,IAAI;YACJ,cAAc;SACf,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,YAAY;IACN,MAAM,CAAuB;IAC7B,eAAe,CAAsC;IACrD,SAAS,CAAgC;IAE1D,YAAY,OAA4B;QACtC,IAAI,CAAC,MAAM;YACT,OAAO,CAAC,MAAM;gBACd,oCAAoC,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9F,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAiC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACpC,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,KAAiC,EACjC,UAAoC;QAEpC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACvC,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC;YAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,UAAU;SACX,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,KAAiC,EACjC,UAAoC;QAEpC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,CAAC;YACnB,GAAG,UAAU;YACb,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAClC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;YAC5C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC7B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAK3C;IACC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;QACpD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,6BAA6B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAA0B;IACtE,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,OAAO;YACV,OAAO;QACT,KAAK,KAAK;YACR,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,KAAK,MAAM;YACT,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,SAAyB,EAAE,EAC3B,eAAsD,EAAE;IAExD,OAAO,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,YAAY,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAwB;IAC5E,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,OAAe,EACf,SAAyB,EAAE,EAC3B,eAAsD,EAAE;IAExD,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IAClF,MAAM,mBAAmB,GACvB,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,EAAE,EAAE,mBAAmB,OAAO,IAAI,QAAQ,EAAE;QAC5C,QAAQ,EAAE,GAAG;QACb,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,SAAS,QAAQ,2BAA2B,eAAe,CAAC,OAAO,IAAI;SAChF;KACF,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,MAAM,oBAAoB,GACxB,eAAe,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrD,EAAE,EAAE,oBAAoB,OAAO,IAAI,QAAQ,EAAE;QAC7C,QAAQ,EAAE,GAAG;QACb,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;KAC5B,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,OAAO,IAAI,oBAAoB,CAAC;QAC9B,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC;QACrF,eAAe,EACb,eAAe,CAAC,eAAe,IAAI,0BAA0B,CAAC,eAAe,CAAC,QAAQ,CAAC;KAC1F,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAIzC;IACC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzD,OAAO;YACL,YAAY,CACV,QAAQ,EACR,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EACnE,KAAK,CAAC,YAAY,CACnB;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1D,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC;QACrE,MAAM,SAAS,GAAuB;YACpC;gBACE,IAAI,EAAE,OAAO;gBACb,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC;gBACrE,WAAW,EAAE,QAAQ;aACtB;SACF,CAAC;QACF,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,QAAQ;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL;YACE,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,QAAQ,CAAC,IAAI;YACrB,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,QAAQ;SACtB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAG1B;IACC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAc,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,IAAe,EAAE,MAAc,EAAE,EAAE;QAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ,IAAI,QAAQ,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YAC/E,KAAK,CAAC,UAAU,EAAE,aAAa,QAAQ,CAAC,WAAW,WAAW,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAC/D,KAAK,CACH,QAAQ,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAClD,iBAAiB,QAAQ,CAAC,KAAK,QAAQ,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;YACtC,IAAI,sEAAsE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzF,KAAK,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,4DAA4D,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/E,KAAK,CAAC,MAAM,EAAE,iDAAiD,CAAC,CAAC;YACnE,CAAC;YACD,IACE,0EAA0E,CAAC,IAAI,CAAC,OAAO,CAAC,EACxF,CAAC;gBACD,KAAK,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnE,KAAK,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;KACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAoC;IAC5E,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI;QAClC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK;QAC3B,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO;QACpC,YAAY,EAAE,UAAU,CAAC,cAAc;QACvC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAUD,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC;IAClE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;QACnD,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAe,EACf,MAAsB,EACtB,OAAiB,EAAE,EACnB,eAAsD,EAAE;IAExD,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,iBAAiB,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAoB,UAAU,EAAE,OAAO;QACjD,CAAC,CAAC,sBAAsB,CACpB,UAAU,CAAC,OAAO,EAClB,MAAM,EACN,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAC9B,YAAY,CACb;QACH,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;IACxD,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC;IACjG,MAAM,eAAe,GACnB,UAAU,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;IAC/E,MAAM,gBAAgB,GAAG,UAAU,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC;IAC9E,OAAO;QACL,OAAO;QACP,QAAQ;QACR,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY;QAClF,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAChF,wBAAwB,CAAC,UAAU,CAAC,KAAK,CAAC,CAC3C;QACD,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAiC;IACjE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClC,GAAG,IAAI;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG;KAC/B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB,EAAE,OAAkC;IACjF,IACE,IAAI,CAAC,KAAK,EAAE,MAAM;QAClB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,mBAAmB,CAAC,IAAI,CAAC;QACzB,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAC9E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB;IAC7C,OAAO,OAAO,CACZ,IAAI,CAAC,SAAS,EAAE,MAAM;QACpB,IAAI,CAAC,UAAU,EAAE,MAAM;QACvB,IAAI,CAAC,MAAM,EAAE,MAAM;QACnB,IAAI,CAAC,WAAW,EAAE,MAAM,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAkB,EAAE,QAA0B;IAC7E,IAAI,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAA0B,EAC1B,WAAoB;IAEpB,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,yEAAyE,QAAQ,CAAC,MAAM,EAAE;SACnG,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CACnB,SAA4B,EAC5B,KAAyB,EACzB,YAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS;QACT,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC;QACrC,WAAW,EAAE,uBAAuB,CAAC,KAAK,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB,EAAE,YAAgC;IAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,YAAY,IAAI,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,IAAI,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAyB;IACxD,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IACE,qGAAqG,CAAC,IAAI,CACxG,KAAK,CACN,EACD,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,wEAAwE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IACE,uHAAuH,CAAC,IAAI,CAC1H,KAAK,CACN,EACD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,uEAAuE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,QAAgC,EAAE,IAAgB;IACrE,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgC,EAAE,IAAgB;IAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,OAAe;IACpD,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,iBAAiB,KAAK,GAAG,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,eAAe,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,eAAe,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,eAAe,KAAK,iBAAiB,CAAC;AAC/C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgB;IAChC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG;QACvB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,mBAAmB;QACpE,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC"}
@@ -0,0 +1,4 @@
1
+ import type { SecurityProfileConfig } from './index.js';
2
+ export declare function loadPolicyDir(dirPath: string): Record<string, SecurityProfileConfig>;
3
+ export declare function loadFilePolicies(cwd: string, agentDir?: string): Record<string, SecurityProfileConfig>;
4
+ //# sourceMappingURL=policy-loader.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"policy-loader.d.ts","sourceRoot":"","sources":["../src/policy-loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAsBpF;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAKvC"}
@@ -0,0 +1,36 @@
1
+ import { readdirSync, readFileSync } from 'node:fs';
2
+ import { basename, join } from 'node:path';
3
+ import { loadPiPolicyProfiles } from '@amaster.ai/pi-shared/settings';
4
+ export function loadPolicyDir(dirPath) {
5
+ const result = {};
6
+ let entries;
7
+ try {
8
+ entries = readdirSync(dirPath);
9
+ }
10
+ catch {
11
+ return result;
12
+ }
13
+ for (const entry of entries) {
14
+ if (!entry.endsWith('.json'))
15
+ continue;
16
+ const profileName = basename(entry, '.json');
17
+ try {
18
+ const raw = readFileSync(join(dirPath, entry), 'utf-8');
19
+ const parsed = JSON.parse(raw);
20
+ if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
21
+ result[profileName] = parsed;
22
+ }
23
+ }
24
+ catch {
25
+ // skip malformed files
26
+ }
27
+ }
28
+ return result;
29
+ }
30
+ export function loadFilePolicies(cwd, agentDir) {
31
+ return loadPiPolicyProfiles({
32
+ cwd,
33
+ ...(agentDir !== undefined ? { agentDir } : {}),
34
+ });
35
+ }
36
+ //# sourceMappingURL=policy-loader.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"policy-loader.js","sourceRoot":"","sources":["../src/policy-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAGtE,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACvC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,MAAM,CAAC,WAAW,CAAC,GAAG,MAA+B,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,QAAiB;IAEjB,OAAO,oBAAoB,CAAwB;QACjD,GAAG;QACH,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC;AACL,CAAC"}
@@ -0,0 +1,24 @@
1
+ {
2
+ "pi-security": {
3
+ "enabled": true,
4
+ "profile": "auto-review",
5
+ "security": {
6
+ "profiles": {
7
+ "auto-review": {
8
+ "extends": "default",
9
+ "rules": [
10
+ {
11
+ "id": "ask-package-install",
12
+ "priority": 450,
13
+ "tools": ["bash"],
14
+ "argsRegex": {
15
+ "command": "(npm|pnpm|yarn|pip)\\s+(install|add)"
16
+ },
17
+ "decision": { "kind": "ask", "reason": "Approve package install?" }
18
+ }
19
+ ]
20
+ }
21
+ }
22
+ }
23
+ }
24
+ }
@@ -0,0 +1,19 @@
1
+ {
2
+ "extends": "read-only",
3
+ "sandbox": "workspace-write",
4
+ "approval": "on-request",
5
+ "rules": [
6
+ {
7
+ "id": "ask-bash",
8
+ "priority": 400,
9
+ "tools": ["bash"],
10
+ "decision": { "kind": "ask", "reason": "Shell needs approval" }
11
+ },
12
+ {
13
+ "id": "deny-network",
14
+ "priority": 500,
15
+ "resources": ["network"],
16
+ "decision": { "kind": "deny", "reason": "External network is blocked" }
17
+ }
18
+ ]
19
+ }
package/package.json CHANGED
@@ -1,7 +1,16 @@
1
1
  {
2
2
  "name": "@amaster.ai/pi-security",
3
- "version": "0.1.1-beta.0",
4
- "description": "Security policy engine and Pi extension for resource-aware tool authorization.",
3
+ "version": "0.1.1",
4
+ "description": "Pi extension for resource-aware security policy engine and tool authorization",
5
+ "keywords": [
6
+ "pi-package",
7
+ "pi",
8
+ "extension",
9
+ "security",
10
+ "policy",
11
+ "authorization",
12
+ "access-control"
13
+ ],
5
14
  "license": "Apache-2.0",
6
15
  "type": "module",
7
16
  "sideEffects": false,
@@ -22,8 +31,16 @@
22
31
  },
23
32
  "files": [
24
33
  "dist",
34
+ "examples",
35
+ "preview.png",
25
36
  "README.md"
26
37
  ],
38
+ "pi": {
39
+ "image": "https://raw.githubusercontent.com/TGYD-helige/pi/master/packages/pi-security/preview.png",
40
+ "extensions": [
41
+ "./dist/index.js"
42
+ ]
43
+ },
27
44
  "publishConfig": {
28
45
  "access": "public"
29
46
  },
@@ -33,7 +50,7 @@
33
50
  "directory": "packages/pi-security"
34
51
  },
35
52
  "dependencies": {
36
- "@amaster.ai/pi-types": "0.1.1-beta.0"
53
+ "@amaster.ai/pi-shared": "0.1.1"
37
54
  },
38
55
  "peerDependencies": {
39
56
  "@earendil-works/pi-coding-agent": ">=0.74.0"
package/preview.png ADDED
Binary file