npm - @amaster.ai/pi-security - Versions diffs - 0.1.2-beta.11 → 0.1.2-beta.13 - Mend

@amaster.ai/pi-security 0.1.2-beta.11 → 0.1.2-beta.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (10) hide show

package/README.md +82 -48
package/dist/extension.js +2 -21
package/dist/extension.js.map +1 -1
package/dist/index.d.ts +6 -40
package/dist/index.d.ts.map +1 -1
package/dist/index.js +104 -228
package/dist/index.js.map +1 -1
package/examples/auto-review.settings.json +24 -0
package/examples/reviewer.json +19 -0
package/package.json +3 -2

package/README.md CHANGED Viewed

@@ -1,8 +1,8 @@
 # Pi Security
-`@amaster.ai/pi-security` provides a resource-aware security policy engine and a Pi extension entry point.
+`@amaster.ai/pi-security` provides a sandbox-aware security policy engine and a Pi extension entry point.
-The core engine classifies tool calls into resources such as files, shell commands, network access, memory writes, MCP calls, and subagent spawns. It then applies profile rules to decide whether a call is allowed, denied, sandbox-only, allowed with constraints, or requires human approval.
+The core engine classifies tool calls into resources (files, shell commands, network access), assesses risk, and applies profile rules to decide whether a call is allowed, denied, or requires human approval. Profiles are built from two orthogonal axes — **sandbox** (what tools are exposed) and **approval** (when to ask the user) — inspired by Codex.
 ## Pi extension
@@ -12,22 +12,9 @@ Install the extension entry point `@amaster.ai/pi-security/extension` and load t
 {
   "pi-security": {
     "enabled": true,
-    "profile": "auto-review",
+    "profile": "default",
     "approvals": {
       "allowSessionGrants": true
-    },
-    "security": {
-      "profiles": {
-        "auto-review": {
-          "rules": [
-            {
-              "id": "ask-file-writes",
-              "tools": ["write_file", "edit_file"],
-              "decision": { "kind": "ask", "reason": "File modifications require approval." }
-            }
-          ]
-        }
-      }
     }
   }
 }
@@ -35,42 +22,89 @@ Install the extension entry point `@amaster.ai/pi-security/extension` and load t
 The extension listens to Pi `tool_call` and `user_bash` events. It does not register an LLM-callable tool that can bypass policy. Human approvals are requested through Pi UI primitives when UI is available; non-interactive contexts fail closed when a rule requires approval.
-## Security profiles
+## Built-in profiles
-Built-in profiles and their capability policies:
+Profiles are derived from a `sandbox` × `approval` matrix. Pick one as a starting point and override either axis in your own profiles.
-| Profile | Mode | Description |
-|---------|------|-------------|
-| `auto-review` | Denylist (`allow: ['*']`) | All tools exposed by default; risk-based rules gate dangerous ops |
-| `admin` / `full-access` | Denylist (`allow: ['*']`) | All tools allowed, no security rules |
-| `sandbox-exec` / `copilot` | Allowlist | Core tools + MCP allowed |
-| `workspace-write` | Allowlist | File R/W, no shell |
-| `workspace-read` | Allowlist | Read-only file access |
-| `chat` | Allowlist | Memory search only |
-| `scheduled` | Allowlist | Read + MCP, no mutations |
-| `subagent` | Allowlist | Like sandbox-exec but no memory_write/sessions_spawn |
+| Profile        | Sandbox            | Approval     | Use case                                                |
+|----------------|--------------------|--------------|---------------------------------------------------------|
+| `read-only`    | `read-only`        | `never`      | Read-only inspection, no modifications                  |
+| `default`      | `workspace-write`  | `on-request` | Workspace edits with approval for writes (recommended)  |
+| `auto`         | `workspace-write`  | `on-failure` | Autonomous edits, only ask when risk is high            |
+| `full-access`  | `full-access`      | `never`      | Trusted automation, no gating (use with care)           |
-### Denylist vs Allowlist
+### Sandbox modes
-- **Denylist mode** (`allow: ['*']`): All capabilities exposed; use `deny` array and security rules to block specific tools or risky operations. `auto-review` uses this mode — new tools are automatically available without config changes.
-- **Allowlist mode** (explicit `allow` list): Only listed capabilities are exposed; unlisted tools are denied.
+| Mode               | Allowed tools                                  | Denied tools          |
+|--------------------|------------------------------------------------|-----------------------|
+| `read-only`        | `read`, `ls`, `find`, `grep`                   | `write`, `edit`, `bash` |
+| `workspace-write`  | `read`, `ls`, `find`, `grep`, `write`, `edit`  | `bash`                |
+| `full-access`      | `*` (all tools)                                | —                     |
-Custom profiles can override capability policies via settings:
+Tool names align with the pi-coding-agent built-in tools: `bash`, `read`, `write`, `edit`, `ls`, `find`, `grep`.
-```json
-{
-  "pi-security": {
-    "security": {
-      "profiles": {
-        "auto-review": {
-          "capabilities": {
-            "deny": ["sessions_spawn"]
-          }
-        }
-      }
-    }
-  }
-}
+### Approval modes
+| Mode          | Behavior                                                                  |
+|---------------|---------------------------------------------------------------------------|
+| `never`       | No approval prompts (deny rules still apply, e.g. for secrets).           |
+| `on-failure`  | Ask only on high/critical risk operations.                                |
+| `on-request`  | Ask on workspace writes/deletes (in addition to high-risk ops).           |
+| `untrusted`   | Ask on workspace writes plus high-risk ops; default decision is also ask. |
+Baseline secret protection (denying `.ssh/`, `.env`, `*.pem`, `*.key`, etc.) is always enabled, regardless of profile.
+## Custom profiles
+Profiles can be defined in three places. Higher-priority sources override lower-priority ones with the same name:
+1. **Project**: `<cwd>/.pi/policy/<name>.json` (highest priority)
+2. **Agent**: `<agentDir>/policy/<name>.json`
+3. **User**: `~/.pi/agent/policy/<name>.json`
+4. **Settings**: under `pi-security.security.profiles` in `pi.json`
+Each JSON file defines a single profile; the filename (without `.json`) is the profile name.
+### JSON config examples
+Ready-to-copy samples live under [`examples/`](./examples) and are exercised by the test suite:
+- [`examples/reviewer.json`](./examples/reviewer.json) — a project-level file policy. Drop into `<project>/.pi/policy/reviewer.json`. Starts from `read-only`, opens to `workspace-write`, asks on `bash`, denies external network.
+- [`examples/auto-review.settings.json`](./examples/auto-review.settings.json) — a `pi.json` snippet that defines a custom `auto-review` profile inline. Extends `default` and asks before package-manager installs (`npm/pnpm/yarn/pip install|add`) via `argsRegex`.
+### Profile schema
+```ts
+type SecurityProfileConfig = {
+  extends?: string;                   // built-in profile name or another custom profile
+  sandbox?: 'read-only' | 'workspace-write' | 'full-access';
+  approval?: 'never' | 'on-failure' | 'on-request' | 'untrusted';
+  rules?: SecurityRule[];             // appended after parent rules
+  defaultDecision?: SecurityDecision; // overrides parent default for unmatched tools
+};
+```
+### Rule schema
+Rules are evaluated in priority order (descending); the first match wins.
+```ts
+type SecurityRule = {
+  id: string;
+  priority?: number;                  // default 300 for user rules
+  tools?: string[];                   // tool name patterns ('*', 'mcp_*', 'bash')
+  sources?: ToolSource[];             // 'builtin' | 'mcp' | 'runtime'
+  triggers?: Array<'user' | 'agent' | 'scheduler'>;
+  senderTrusts?: Array<'owner' | 'trusted' | 'untrusted'>;
+  args?: Record<string, string>;      // exact/glob match against args
+  argsRegex?: Record<string, string>; // regex match against args
+  resources?: ('file' | 'shell' | 'network')[];
+  operations?: ('read' | 'write' | 'execute' | 'delete' | 'connect' | 'search')[];
+  scopes?: ('workspace' | 'home' | 'system' | 'external' | 'unknown')[];
+  sensitivity?: ('normal' | 'source' | 'config' | 'secret' | 'credential')[];
+  risk?: ('low' | 'medium' | 'high' | 'critical')[];
+  decision: { kind: 'allow' } | { kind: 'deny'; reason: string } | { kind: 'ask'; reason: string; prompt?: string };
+};
 ```
 ## Commands
@@ -81,6 +115,6 @@ Custom profiles can override capability policies via settings:
 ## Trust model
-This module is an execution gate, not a filesystem sandbox by itself. Deny and approval decisions are enforceable because they run before Pi tool execution. Constraint decisions must be paired with a runtime that actually enforces the returned constraints.
+This module is an execution gate, not a filesystem sandbox by itself. Deny and approval decisions are enforceable because they run before Pi tool execution; sandbox enforcement still depends on the runtime that executes the tool.
-Sensitive paths such as SSH keys, `.env`, credentials, tokens, private keys, and secret files are denied by baseline policy. Audit entries include tool names, resource summaries, risk level, and decision metadata, but they should not include plaintext secrets.
+Sensitive paths such as SSH keys, `.env`, credentials, tokens, private keys, and `secrets/` directories are denied by baseline policy across all profiles. Audit entries include tool names, resource summaries, risk level, and decision metadata, but they should not include plaintext secrets.

package/dist/extension.js CHANGED Viewed

@@ -66,7 +66,7 @@ export async function authorizeUserBash(event, ctx, state) {
     }
     const toolCall = {
         id: 'user-bash',
-        name: 'run_shell',
+        name: 'bash',
         source: 'builtin',
         args: {
             command: event.command,
@@ -176,30 +176,11 @@ function requestFromContext(ctx) {
 function toolCallFromPiEvent(event) {
     return {
         id: event.toolCallId,
-        name: normalizeToolName(event.toolName),
+        name: event.toolName,
         source: toolSourceForPiTool(event.toolName),
         args: normalizeToolArgs(event.toolName, event.input),
     };
 }
-function normalizeToolName(toolName) {
-    switch (toolName) {
-        case 'bash':
-            return 'run_shell';
-        case 'write':
-            return 'write_file';
-        case 'edit':
-            return 'edit_file';
-        case 'read':
-            return 'read_file';
-        case 'ls':
-            return 'list_files';
-        case 'grep':
-        case 'find':
-            return 'search_files';
-        default:
-            return toolName;
-    }
-}
 function toolSourceForPiTool(toolName) {
     if (toolName.startsWith('mcp_') || toolName.startsWith('mcp__')) {
         return 'mcp';

package/dist/extension.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"extension.js","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAShE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAIL,YAAY,EACZ,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAC3C,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AA+BhC,MAAM,CAAC,OAAO,UAAU,mBAAmB,CAAC,EAAgB;IAC1D,MAAM,KAAK,GAA6B;QACtC,MAAM,EAAE,uBAAuB,EAAE;QACjC,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC3C,KAAK,CAAC,MAAM,GAAG,uBAAuB,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,EAAE,CAAC,SAAS,CACd,oBAAoB,EACpB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC9C,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;QAClD,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAE/E,EAAE,CAAC,eAAe,CAAC,oBAAoB,EAAE;QACvC,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;KACF,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,CAAC,mBAAmB,EAAE;QACtC,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;KACF,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,CAAC,mBAAmB,EAAE;QACtC,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;YAClB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAoB,EACpB,GAAqB,EACrB,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC;QACxD,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC;QAChC,QAAQ;QACR,YAAY,EAAE,GAAG,CAAC,GAAG;KACtB,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAoB,EACpB,GAAqB,EACrB,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAoB;QAChC,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE;YACJ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC7C;KACF,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC;QACxD,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC;QAChC,QAAQ;QACR,YAAY,EAAE,GAAG,CAAC,GAAG;KACtB,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE;gBACN,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;gBAClC,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK;aACjB;SACF,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAkC;IAElC,MAAM,oBAAoB,GAAG,MAAM,EAAE,UAAU,CAAC;IAChD,MAAM,UAAU,GACd,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC;QACtC,oBAAoB,KAAK,SAAS;QAClC,oBAAoB,GAAG,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC;QACvC,CAAC,CAAC,mBAAmB,CAAC;IAC1B,OAAO;QACL,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,KAAK;QAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,eAAe;QACnD,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,UAAU;QACV,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,kBAAkB,KAAK,KAAK;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAqB,EAAE,KAA+B;IACxE,OAAO,IAAI,YAAY,CAAC;QACtB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC7B,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC;QACtD,eAAe,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAChD,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACjD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACpD,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAqB,EACrB,KAA+B,EAC/B,QAAyB,EACzB,QAAoD;IAEpD,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CACnC,QAAQ,CAAC,MAAM,IAAI,oBAAoB,EACvC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACpC,CAAC;QACF,OAAO,QAAQ;YACb,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE;YACnE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAChC,GAAG,QAAQ,CAAC,MAAM,IAAI,oBAAoB,KAAK,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EACpF,CAAC,YAAY,EAAE,gCAAgC,EAAE,MAAM,CAAC,CACzD,CAAC;IACF,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,KAAK,gCAAgC,EAAE,CAAC;QAChD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,wCAAwC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAqC,YAAY,EAAE;YAC9E,GAAG;YACH,QAAQ,EAAE,WAAW,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,MAAoC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAqB;IAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,OAAO;QACL,SAAS;QACT,cAAc,EAAE,SAAS;QACzB,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,KAAK;QACtB,KAAK,EAAE;YACL,QAAQ,EAAE,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,IAAI;YACrD,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,SAAS;SACrF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAoB;IAC/C,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,UAAU;QACpB,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvC,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3C,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,YAAY,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,IAAI;YACP,OAAO,YAAY,CAAC;QACtB,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,KAA8B;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAqB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CACtB,KAA+B,EAC/B,QAAyB,EACzB,QAAoD;IAEpD,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CACtB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAChF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAoD;IACtE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CACtB,QAAyB,EACzB,QAAoD;IAEpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AACtE,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAyB;IAClD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3F,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA+B;IAC3D,OAAO;QACL,gBAAgB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE;QAC/D,YAAY,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE;QAClC,kBAAkB,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE;QACzC,mBAAmB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;KACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAA+B,EAAE,KAAa;IACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ;SAClB,KAAK,CAAC,CAAC,KAAK,CAAC;SACb,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC;IAC5F,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,IAAwB;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,GAAW;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;IACvD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC"}
1	+ {"version":3,"file":"extension.js","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAShE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAIL,YAAY,EACZ,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAC3C,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AA+BhC,MAAM,CAAC,OAAO,UAAU,mBAAmB,CAAC,EAAgB;IAC1D,MAAM,KAAK,GAA6B;QACtC,MAAM,EAAE,uBAAuB,EAAE;QACjC,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC3C,KAAK,CAAC,MAAM,GAAG,uBAAuB,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,EAAE,CAAC,SAAS,CACd,oBAAoB,EACpB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC9C,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;QAClD,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAE/E,EAAE,CAAC,eAAe,CAAC,oBAAoB,EAAE;QACvC,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;KACF,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,CAAC,mBAAmB,EAAE;QACtC,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;KACF,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,CAAC,mBAAmB,EAAE;QACtC,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;YAClB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAoB,EACpB,GAAqB,EACrB,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC;QACxD,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC;QAChC,QAAQ;QACR,YAAY,EAAE,GAAG,CAAC,GAAG;KACtB,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAoB,EACpB,GAAqB,EACrB,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAoB;QAChC,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE;YACJ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC7C;KACF,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC;QACxD,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC;QAChC,QAAQ;QACR,YAAY,EAAE,GAAG,CAAC,GAAG;KACtB,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE;gBACN,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;gBAClC,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK;aACjB;SACF,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAkC;IAElC,MAAM,oBAAoB,GAAG,MAAM,EAAE,UAAU,CAAC;IAChD,MAAM,UAAU,GACd,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC;QACtC,oBAAoB,KAAK,SAAS;QAClC,oBAAoB,GAAG,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC;QACvC,CAAC,CAAC,mBAAmB,CAAC;IAC1B,OAAO;QACL,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,KAAK;QAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,eAAe;QACnD,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,UAAU;QACV,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,kBAAkB,KAAK,KAAK;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAqB,EAAE,KAA+B;IACxE,OAAO,IAAI,YAAY,CAAC;QACtB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;QAC7B,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC;QACtD,eAAe,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAChD,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACjD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACpD,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAqB,EACrB,KAA+B,EAC/B,QAAyB,EACzB,QAAoD;IAEpD,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CACnC,QAAQ,CAAC,MAAM,IAAI,oBAAoB,EACvC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACpC,CAAC;QACF,OAAO,QAAQ;YACb,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE;YACnE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAChC,GAAG,QAAQ,CAAC,MAAM,IAAI,oBAAoB,KAAK,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EACpF,CAAC,YAAY,EAAE,gCAAgC,EAAE,MAAM,CAAC,CACzD,CAAC;IACF,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,KAAK,gCAAgC,EAAE,CAAC;QAChD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,wCAAwC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAqC,YAAY,EAAE;YAC9E,GAAG;YACH,QAAQ,EAAE,WAAW,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,MAAoC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAqB;IAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACxB,OAAO;QACL,SAAS;QACT,cAAc,EAAE,SAAS;QACzB,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,KAAK;QACtB,KAAK,EAAE;YACL,QAAQ,EAAE,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,IAAI;YACrD,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,SAAS;SACrF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAoB;IAC/C,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,UAAU;QACpB,IAAI,EAAE,KAAK,CAAC,QAAQ;QACpB,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3C,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,KAA8B;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAqB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CACtB,KAA+B,EAC/B,QAAyB,EACzB,QAAoD;IAEpD,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CACtB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAChF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAoD;IACtE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CACtB,QAAyB,EACzB,QAAoD;IAEpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AACtE,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAyB;IAClD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3F,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA+B;IAC3D,OAAO;QACL,gBAAgB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE;QAC/D,YAAY,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE;QAClC,kBAAkB,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE;QACzC,mBAAmB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;KACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAA+B,EAAE,KAAa;IACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ;SAClB,KAAK,CAAC,CAAC,KAAK,CAAC;SACb,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC;IAC5F,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,IAAwB;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,GAAW;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;IACvD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC"}

package/dist/index.d.ts CHANGED Viewed

@@ -9,45 +9,15 @@ export type SecurityDecision = {
     kind: 'ask';
     reason: string;
     prompt?: string;
-} | {
-    kind: 'sandbox_only';
-    reason: string;
-    sandboxProfile: string;
-} | {
-    kind: 'allow_with_constraints';
-    reason?: string;
-    constraints: RuntimeConstraints;
-};
-export type RuntimeConstraints = {
-    filesystem?: {
-        read?: 'workspace' | 'all' | 'deny';
-        write?: 'workspace' | 'all' | 'deny';
-        allowPaths?: string[];
-        denyPaths?: string[];
-    };
-    network?: {
-        mode: 'deny' | 'allowlist' | 'unrestricted';
-        allowedDomains?: string[];
-    };
-    shell?: {
-        timeoutMs?: number;
-        requireSandbox?: boolean;
-        denyPatterns?: string[];
-    };
-    output?: {
-        redactFields?: string[];
-        maxBytes?: number;
-    };
 };
 export type CapabilityPolicy = {
     allow?: string[];
     deny?: string[];
 };
-export type ConfiguredCapabilityPolicy = CapabilityPolicy & {
-    mode?: 'merge' | 'replace';
-};
-export type SecurityResourceKind = 'file' | 'shell' | 'network' | 'memory' | 'mcp' | 'subagent';
-export type SecurityOperation = 'read' | 'write' | 'execute' | 'delete' | 'connect' | 'spawn' | 'search';
+export type SandboxMode = 'read-only' | 'workspace-write' | 'full-access';
+export type ApprovalMode = 'never' | 'on-failure' | 'on-request' | 'untrusted';
+export type SecurityResourceKind = 'file' | 'shell' | 'network';
+export type SecurityOperation = 'read' | 'write' | 'execute' | 'delete' | 'connect' | 'search';
 export type SecurityScope = 'workspace' | 'home' | 'system' | 'external' | 'unknown';
 export type SecuritySensitivity = 'normal' | 'source' | 'config' | 'secret' | 'credential';
 export type RiskLevel = 'low' | 'medium' | 'high' | 'critical';
@@ -64,16 +34,11 @@ export type RiskAssessment = {
 };
 export type SecurityRule = {
     id: string;
-    enabled?: boolean;
     priority?: number;
     tools?: string[];
-    tool?: string;
     sources?: ToolSource[];
-    source?: ToolSource;
     triggers?: Array<RuntimeRequestContext['trigger']>;
-    trigger?: RuntimeRequestContext['trigger'];
     senderTrusts?: Array<RuntimeRequestContext['senderTrust']>;
-    senderTrust?: RuntimeRequestContext['senderTrust'];
     args?: Record<string, string>;
     argsRegex?: Record<string, string>;
     resources?: SecurityResourceKind[];
@@ -89,7 +54,8 @@ export type SecurityPolicyEngineOptions = {
 };
 export type SecurityProfileConfig = {
     extends?: string;
-    capabilities?: ConfiguredCapabilityPolicy;
+    sandbox?: SandboxMode;
+    approval?: ApprovalMode;
     rules?: SecurityRule[];
     defaultDecision?: SecurityDecision;
 };

package/dist/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,UAAU,EACV,qBAAqB,EACrB,eAAe,EACf,UAAU,EACX,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,~~GAChD~~;~~IAAE~~,~~IAAI~~,~~EAAE~~,~~cAAc~~,~~CAAC~~;~~IAAC~~,~~MAAM~~,~~EAAE,MAAM,~~CAAC~~;IAAC~~,~~cAAc,~~EAAE,MAAM,~~CAAA;CAAE,GAChE;IAAE,IAAI,~~EAAE,~~wBAAwB,~~CAAC;~~IAAC~~,~~MAAM~~,CAAC,EAAE,MAAM,~~CAAC;IAAC,WAAW,~~EAAE,~~kBAAkB,CAAA~~;~~CAAE~~,CAAC;~~AAEzF~~,MAAM,MAAM,~~kBAAkB,GAAG;IAC/B,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,~~WAAW,GAAG,~~KAAK,GAAG,MAAM,CAAC;QACpC,KAAK,CAAC,EAAE,~~WAAW,GAAG,~~KAAK~~,GAAG,~~MAAM~~,CAAC;~~QACrC~~,~~UAAU,CAAC,EAAE,~~MAAM,~~EAAE,CAAC;QACtB,SAAS,CAAC,EAAE,~~MAAM,~~EAAE~~,~~CAAC;KACtB~~,~~CAAC;IACF,~~OAAO,~~CAAC,EAAE;QACR,IAAI,EAAE,MAAM,~~GAAG,~~WAAW~~,GAAG,~~cAAc,CAAC;QAC5C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;IACF,KAAK,CAAC,EAAE;QACN,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,~~YAAY,~~CAAC~~,~~EAAE~~,~~MAAM,EAAE,~~CAAC;~~KACzB~~,~~CAAC;IACF,~~MAAM,~~CAAC,EAAE;QACP,YAAY,CAAC,EAAE,~~MAAM,~~EAAE~~,~~CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,gBAAgB,~~GAAG~~;IAC7B~~,~~KAAK,CAAC,EAAE,~~MAAM,~~EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,0BAA0B,~~GAAG,~~gBAAgB,GAAG;IAC1D,IAAI,CAAC,EAAE,~~OAAO,GAAG,SAAS,CAAC;~~CAC5B~~,~~CAAC;AAEF,~~MAAM,MAAM,~~oBAAoB~~,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,~~KAAK~~,GAAG,~~UAAU,CAAC;AAChG,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,OAAO,GACP,SAAS,GACT,~~QAAQ,~~GACR,SAAS,GACT,OAAO,GACP,QAAQ,~~CAAC;~~AACb~~,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AACrF,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,CAAC;AAC3F,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,aAAa,CAAC;IACrB,WAAW,EAAE,mBAAmB,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,~~OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,~~QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,~~IAAI,CAAC,EAAE,MAAM,CAAC;IACd,~~OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,~~MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,~~QAAQ,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,~~OAAO,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC3C,~~YAAY,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3D,~~WAAW,CAAC,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACnD,~~IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACjC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IACnB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,~~YAAY~~,CAAC,EAAE,~~0BAA0B~~,CAAC;~~IAC1C~~,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,IAAI,EAAE,cAAc,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,IAAI,EAAE,cAAc,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,GAAG;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IACrD,UAAU,EAAE,wBAAwB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACpG,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpF,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;~~AA2IF~~,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,OAAO,GAAE,2BAAgC;IAKrD,MAAM,CAAC,KAAK,EAAE;QACZ,OAAO,EAAE,qBAAqB,CAAC;QAC/B,QAAQ,EAAE,eAAe,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,gBAAgB;IAIpB,QAAQ,CAAC,KAAK,EAAE;QACd,OAAO,EAAE,qBAAqB,CAAC;QAC/B,QAAQ,EAAE,eAAe,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,wBAAwB;CAyB7B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsC;IACtE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;gBAE9C,OAAO,EAAE,mBAAmB;IAQlC,SAAS,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,wBAAwB,CAAC;YAQvE,eAAe;~~YAsBf~~,KAAK;CAiBpB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAE7E;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,OAAO,EAAE,qBAAqB,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAQpC;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,~~CAW9E~~;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,cAAmB,EAC3B,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAM,GACvD,gBAAgB,CAElB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CASvF;AAED,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,cAAmB,EAC3B,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAM,GACvD,oBAAoB,~~CAgBtB~~;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,gBAAgB,EAAE,~~CA4ErB~~;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAChC,QAAQ,EAAE,eAAe,CAAC;IAC1B,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B,GAAG,cAAc,~~CAsDjB~~;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,wBAAwB,GAAG,UAAU,CAc1F;~~AAkSD~~,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,UAAU,EACV,qBAAqB,EACrB,eAAe,EACf,UAAU,EACX,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,iBAAiB,GAAG,aAAa,CAAC;AAC1E,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,YAAY,GAAG,YAAY,GAAG,WAAW,CAAC;AAE/E,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAChE,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC/F,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AACrF,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,CAAC;AAC3F,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,aAAa,CAAC;IACrB,WAAW,EAAE,mBAAmB,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,YAAY,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACjC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IACnB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,IAAI,EAAE,cAAc,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,IAAI,EAAE,cAAc,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,GAAG;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,IAAI,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IACrD,UAAU,EAAE,wBAAwB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACpG,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpF,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,SAAS,CAAC,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAwFF,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,OAAO,GAAE,2BAAgC;IAKrD,MAAM,CAAC,KAAK,EAAE;QACZ,OAAO,EAAE,qBAAqB,CAAC;QAC/B,QAAQ,EAAE,eAAe,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,gBAAgB;IAIpB,QAAQ,CAAC,KAAK,EAAE;QACd,OAAO,EAAE,qBAAqB,CAAC;QAC/B,QAAQ,EAAE,eAAe,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,wBAAwB;CAyB7B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsC;IACtE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;gBAE9C,OAAO,EAAE,mBAAmB;IAQlC,SAAS,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,wBAAwB,CAAC;YAQvE,eAAe;YAmBf,KAAK;CAiBpB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAE7E;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,OAAO,EAAE,qBAAqB,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAQpC;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAS9E;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,cAAmB,EAC3B,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAM,GACvD,gBAAgB,CAElB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CASvF;AAED,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,cAAmB,EAC3B,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAM,GACvD,oBAAoB,CAwBtB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,gBAAgB,EAAE,CAmDrB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAChC,QAAQ,EAAE,eAAe,CAAC;IAC1B,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B,GAAG,cAAc,CA6CjB;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,wBAAwB,GAAG,UAAU,CAc1F;AAiQD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js CHANGED Viewed

@@ -4,131 +4,75 @@ const DEFAULT_DECISION = {
     kind: 'ask',
     reason: 'No security rule matched this tool call.',
 };
-const OPEN_SANDBOX_CAPABILITIES = [
-    'read_file',
-    'list_files',
-    'search_files',
-    'write_file',
-    'edit_file',
-    'run_shell',
-    'run_code',
-    'memory_search',
-    'memory_write',
-    'sessions_spawn',
-    'mcp:*',
-    'mcp_*',
-    'mcp__*',
-];
-const DEFAULT_CAPABILITY_POLICY = {
-    allow: ['memory_search'],
-    deny: ['run_shell', 'run_code', 'write_file'],
-};
-const BUILTIN_CAPABILITY_POLICIES = {
-    chat: DEFAULT_CAPABILITY_POLICY,
-    assistant: {
-        allow: ['memory_search', 'memory_write', 'mcp:*', 'mcp_*', 'mcp__*', 'scheduler:create'],
-        deny: ['run_shell', 'run_code'],
-    },
-    'workspace-read': {
-        allow: ['read_file', 'list_files', 'search_files', 'memory_search'],
-        deny: ['write_file', 'edit_file'],
+const SANDBOX_CAPABILITIES = {
+    'read-only': {
+        allow: ['read', 'ls', 'find', 'grep'],
+        deny: ['write', 'edit', 'bash'],
     },
     'workspace-write': {
-        allow: ['read_file', 'list_files', 'search_files', 'write_file', 'edit_file', 'memory_search'],
-        deny: ['run_shell', 'run_code'],
-    },
-    'sandbox-exec': { allow: ['*'] },
-    copilot: { allow: OPEN_SANDBOX_CAPABILITIES },
-    'auto-review': { allow: ['*'] },
-    default: {
-        allow: ['read_file', 'list_files', 'search_files', 'write_file', 'edit_file', 'memory_search'],
-        deny: ['run_shell', 'run_code'],
-    },
-    subagent: {
-        allow: OPEN_SANDBOX_CAPABILITIES.filter((capability) => capability !== 'memory_write' && capability !== 'sessions_spawn'),
-        deny: ['memory_write', 'sessions_spawn'],
-    },
-    scheduled: {
-        allow: ['memory_search', 'read_file', 'list_files', 'search_files', 'mcp:*', 'mcp_*', 'mcp__*'],
-        deny: ['scheduler:create', 'run_shell', 'run_code', 'write_file', 'edit_file'],
+        allow: ['read', 'ls', 'find', 'grep', 'write', 'edit'],
+        deny: ['bash'],
     },
-    admin: { allow: ['*'] },
     'full-access': { allow: ['*'] },
 };
-const BASELINE_SECURITY_RULES = [denySecretsRule()];
-const BUILTIN_SECURITY_RULES = {
-    default: [
-        ...BASELINE_SECURITY_RULES,
-        {
-            id: 'ask-workspace-write',
-            priority: 260,
-            resources: ['file'],
-            operations: ['write', 'delete'],
-            scopes: ['workspace'],
-            decision: {
-                kind: 'ask',
-                reason: 'Workspace file modifications require approval.',
-                prompt: 'Approve this file modification?',
-            },
-        },
-    ],
-    'auto-review': [
-        ...BASELINE_SECURITY_RULES,
-        {
-            id: 'ask-critical-risk',
-            priority: 500,
-            risk: ['critical'],
-            decision: { kind: 'ask', reason: 'Critical risk operation requires approval.' },
-        },
-        {
-            id: 'ask-high-risk',
-            priority: 420,
-            risk: ['high'],
-            decision: { kind: 'ask', reason: 'High risk operation requires approval.' },
-        },
-        {
-            id: 'ask-workspace-write',
-            priority: 260,
-            resources: ['file'],
-            operations: ['write', 'delete'],
-            scopes: ['workspace'],
-            decision: {
-                kind: 'ask',
-                reason: 'Workspace file modifications require approval.',
-                prompt: 'Approve this file modification?',
-            },
-        },
-    ],
-    scheduled: [
-        ...BASELINE_SECURITY_RULES,
-        {
-            id: 'deny-non-read-scheduled',
-            priority: 420,
-            operations: ['write', 'execute', 'delete', 'spawn'],
-            decision: {
-                kind: 'deny',
-                reason: 'Scheduled runs cannot perform mutating or executable actions by default.',
-            },
-        },
-    ],
-    subagent: [
-        ...BASELINE_SECURITY_RULES,
-        {
-            id: 'deny-recursive-subagent-spawn',
-            priority: 500,
-            tools: ['sessions_spawn'],
-            decision: { kind: 'deny', reason: 'Subagents cannot spawn child sessions by default.' },
-        },
-        {
-            id: 'deny-subagent-memory-write',
-            priority: 420,
-            tools: ['memory_write'],
-            decision: { kind: 'deny', reason: 'Subagents cannot write durable memory by default.' },
-        },
-    ],
-    admin: [],
-    'full-access': [],
+const BUILTIN_PROFILES = {
+    'read-only': { sandbox: 'read-only', approval: 'never' },
+    default: { sandbox: 'workspace-write', approval: 'on-request' },
+    auto: { sandbox: 'workspace-write', approval: 'on-failure' },
+    'full-access': { sandbox: 'full-access', approval: 'never' },
+};
+const DEFAULT_BUILTIN_PROFILE = BUILTIN_PROFILES.default;
+const DENY_SECRETS_RULE = {
+    id: 'deny-secrets',
+    priority: 600,
+    sensitivity: ['secret', 'credential'],
+    decision: { kind: 'deny', reason: 'Secret or credential resources are protected.' },
+};
+const BASELINE_SECURITY_RULES = [DENY_SECRETS_RULE];
+const ASK_WORKSPACE_WRITE_RULE = {
+    id: 'ask-workspace-write',
+    priority: 260,
+    resources: ['file'],
+    operations: ['write', 'delete'],
+    scopes: ['workspace'],
+    decision: {
+        kind: 'ask',
+        reason: 'Workspace file modifications require approval.',
+        prompt: 'Approve this file modification?',
+    },
 };
+const ASK_HIGH_RISK_RULES = [
+    {
+        id: 'ask-critical-risk',
+        priority: 500,
+        risk: ['critical'],
+        decision: { kind: 'ask', reason: 'Critical risk operation requires approval.' },
+    },
+    {
+        id: 'ask-high-risk',
+        priority: 420,
+        risk: ['high'],
+        decision: { kind: 'ask', reason: 'High risk operation requires approval.' },
+    },
+];
+function builtinRulesForApproval(approval) {
+    switch (approval) {
+        case 'never':
+            return [...BASELINE_SECURITY_RULES];
+        case 'on-failure':
+            return [...BASELINE_SECURITY_RULES, ...ASK_HIGH_RISK_RULES];
+        case 'on-request':
+            return [...BASELINE_SECURITY_RULES, ASK_WORKSPACE_WRITE_RULE];
+        case 'untrusted':
+            return [...BASELINE_SECURITY_RULES, ...ASK_HIGH_RISK_RULES, ASK_WORKSPACE_WRITE_RULE];
+    }
+}
+function defaultDecisionForApproval(approval) {
+    if (approval === 'untrusted') {
+        return { kind: 'ask', reason: 'Untrusted profile requires approval for unknown tool calls.' };
+    }
+    return { kind: 'allow' };
+}
 export class SecurityPolicyEngine {
     entries;
     defaultDecision;
@@ -196,9 +140,6 @@ export class SecurityGate {
             decision: evaluation.decision,
             evaluation,
         });
-        if (resolved.kind === 'ask') {
-            return resolved;
-        }
         return resolved;
     }
     async audit(input, evaluation) {
@@ -231,8 +172,6 @@ export async function assertSecurityAllowed(input) {
 export function assertSecurityDecisionAllowed(decision) {
     switch (decision.kind) {
         case 'allow':
-        case 'allow_with_constraints':
-        case 'sandbox_only':
             return;
         case 'ask':
             throw new Error(`Tool call requires approval: ${decision.reason}`);
@@ -255,38 +194,44 @@ export function isCapabilityExposed(toolName, policy) {
 }
 export function createSecurityPolicyEngineForProfile(profile, config = {}, filePolicies = {}) {
     const resolvedProfile = resolveSecurityProfile(profile, config, [], filePolicies);
-    const capabilityRules = resolvedProfile.capabilities.allow?.map((toolName) => ({
+    const denyCapabilityRules = resolvedProfile.capabilities.deny?.map((toolName) => ({
+        id: `deny-capability-${profile}-${toolName}`,
+        priority: 110,
+        tools: [toolName],
+        decision: {
+            kind: 'deny',
+            reason: `Tool '${toolName}' is denied by sandbox '${resolvedProfile.sandbox}'.`,
+        },
+    })) ?? [];
+    const allowCapabilityRules = resolvedProfile.capabilities.allow?.map((toolName) => ({
         id: `allow-capability-${profile}-${toolName}`,
         priority: 100,
-        tool: toolName,
+        tools: [toolName],
         decision: { kind: 'allow' },
     })) ?? [];
     return new SecurityPolicyEngine({
-        rules: resolvedProfile.rules.concat(capabilityRules),
-        defaultDecision: resolvedProfile.defaultDecision ?? {
-            kind: 'deny',
-            reason: `Tool is not exposed by security profile: ${profile}`,
-        },
+        rules: resolvedProfile.rules.concat(denyCapabilityRules).concat(allowCapabilityRules),
+        defaultDecision: resolvedProfile.defaultDecision ?? defaultDecisionForApproval(resolvedProfile.approval),
     });
 }
 export function classifySecurityResources(input) {
     const { toolCall } = input;
-    if (toolCall.name === 'read_file') {
+    if (toolCall.name === 'read') {
         return [fileResource('read', stringArg(toolCall.args, 'path'), input.workspaceDir)];
     }
-    if (toolCall.name === 'list_files') {
+    if (toolCall.name === 'ls') {
         return [fileResource('read', stringArg(toolCall.args, 'path'), input.workspaceDir)];
     }
-    if (toolCall.name === 'search_files') {
+    if (toolCall.name === 'find' || toolCall.name === 'grep') {
         return [
             fileResource('search', stringArg(toolCall.args, 'path') ?? stringArg(toolCall.args, 'cwd'), input.workspaceDir),
         ];
     }
-    if (toolCall.name === 'write_file' || toolCall.name === 'edit_file') {
+    if (toolCall.name === 'write' || toolCall.name === 'edit') {
         return [fileResource('write', stringArg(toolCall.args, 'path'), input.workspaceDir)];
     }
-    if (toolCall.name === 'run_shell' || toolCall.name === 'run_code') {
-        const command = stringArg(toolCall.args, 'command') ?? stringArg(toolCall.args, 'code') ?? toolCall.name;
+    if (toolCall.name === 'bash') {
+        const command = stringArg(toolCall.args, 'command') ?? toolCall.name;
         const resources = [
             {
                 kind: 'shell',
@@ -307,28 +252,6 @@ export function classifySecurityResources(input) {
         }
         return resources;
     }
-    if (toolCall.name === 'memory_search') {
-        return [{ kind: 'memory', operation: 'search', scope: 'unknown', sensitivity: 'normal' }];
-    }
-    if (toolCall.name === 'memory_write') {
-        return [{ kind: 'memory', operation: 'write', scope: 'unknown', sensitivity: 'normal' }];
-    }
-    if (toolCall.name === 'sessions_spawn') {
-        return [{ kind: 'subagent', operation: 'spawn', scope: 'unknown', sensitivity: 'normal' }];
-    }
-    if (toolCall.source === 'mcp' ||
-        toolCall.name.startsWith('mcp_') ||
-        toolCall.name.startsWith('mcp__')) {
-        return [
-            {
-                kind: 'mcp',
-                operation: 'connect',
-                target: toolCall.name,
-                scope: 'external',
-                sensitivity: 'normal',
-            },
-        ];
-    }
     return [
         {
             kind: 'shell',
@@ -374,15 +297,6 @@ export function assessRisk(input) {
         if (resource.kind === 'network') {
             raise('high', 'External network access');
         }
-        if (resource.kind === 'memory' && resource.operation === 'write') {
-            raise('medium', 'Durable memory write');
-        }
-        if (resource.kind === 'subagent') {
-            raise('medium', 'Subagent spawn');
-        }
-        if (resource.kind === 'mcp') {
-            raise('medium', 'External MCP tool call');
-        }
     }
     return {
         level,
@@ -404,95 +318,60 @@ export function securityEvaluationDetails(evaluation) {
         })),
     };
 }
+function resolvedFromBuiltin(name) {
+    const builtin = BUILTIN_PROFILES[name] ?? DEFAULT_BUILTIN_PROFILE;
+    return {
+        sandbox: builtin.sandbox,
+        approval: builtin.approval,
+        capabilities: SANDBOX_CAPABILITIES[builtin.sandbox],
+        rules: builtinRulesForApproval(builtin.approval),
+    };
+}
 function resolveSecurityProfile(profile, config, seen = [], filePolicies = {}) {
     const normalizedProfile = profile.trim();
     if (seen.includes(normalizedProfile)) {
-        return { capabilities: DEFAULT_CAPABILITY_POLICY, rules: [] };
+        return resolvedFromBuiltin('default');
     }
     const configured = filePolicies[normalizedProfile] ?? config.profiles?.[normalizedProfile];
     const parent = configured?.extends
         ? resolveSecurityProfile(configured.extends, config, seen.concat(normalizedProfile), filePolicies)
-        : {
-            capabilities: BUILTIN_CAPABILITY_POLICIES[normalizedProfile] ?? DEFAULT_CAPABILITY_POLICY,
-            rules: BUILTIN_SECURITY_RULES[normalizedProfile] ?? BASELINE_SECURITY_RULES,
-        };
+        : resolvedFromBuiltin(normalizedProfile);
     if (!configured) {
         return parent;
     }
+    const sandbox = configured.sandbox ?? parent.sandbox;
+    const approval = configured.approval ?? parent.approval;
+    const sandboxChanged = configured.sandbox !== undefined && configured.sandbox !== parent.sandbox;
+    const approvalChanged = configured.approval !== undefined && configured.approval !== parent.approval;
+    const inheritedDefault = configured.defaultDecision ?? parent.defaultDecision;
     return {
-        capabilities: mergeCapabilityPolicy(parent.capabilities, configured.capabilities),
-        rules: parent.rules.concat(normalizeConfiguredRules(configured.rules)),
-        ...((configured.defaultDecision ?? parent.defaultDecision)
-            ? { defaultDecision: configured.defaultDecision ?? parent.defaultDecision }
-            : {}),
-    };
-}
-function denySecretsRule() {
-    return {
-        id: 'deny-secrets',
-        priority: 600,
-        sensitivity: ['secret', 'credential'],
-        decision: { kind: 'deny', reason: 'Secret or credential resources are protected.' },
-    };
-}
-function mergeCapabilityPolicy(base, override) {
-    if (!override) {
-        return copyCapabilityPolicy(base);
-    }
-    if (override.mode === 'replace') {
-        return {
-            ...(override.allow ? { allow: uniqueStrings(override.allow) } : {}),
-            ...(override.deny ? { deny: uniqueStrings(override.deny) } : {}),
-        };
-    }
-    return {
-        allow: uniqueStrings([...(base.allow ?? []), ...(override.allow ?? [])]),
-        deny: uniqueStrings([...(base.deny ?? []), ...(override.deny ?? [])]),
-    };
-}
-function copyCapabilityPolicy(policy) {
-    return {
-        ...(policy.allow ? { allow: [...policy.allow] } : {}),
-        ...(policy.deny ? { deny: [...policy.deny] } : {}),
+        sandbox,
+        approval,
+        capabilities: sandboxChanged ? SANDBOX_CAPABILITIES[sandbox] : parent.capabilities,
+        rules: (approvalChanged ? builtinRulesForApproval(approval) : parent.rules).concat(normalizeConfiguredRules(configured.rules)),
+        ...(inheritedDefault ? { defaultDecision: inheritedDefault } : {}),
     };
 }
 function normalizeConfiguredRules(rules) {
-    return (rules ?? [])
-        .filter((rule) => rule.enabled !== false)
-        .map((rule) => ({
+    return (rules ?? []).map((rule) => ({
         ...rule,
         priority: rule.priority ?? 300,
     }));
 }
 function matchesSecurityRule(rule, context) {
-    if (rule.enabled === false) {
-        return false;
-    }
     if (rule.tools?.length &&
         !rule.tools.some((tool) => matchesPattern(context.toolCall.name, tool))) {
         return false;
     }
-    if (rule.tool && !matchesPattern(context.toolCall.name, rule.tool)) {
-        return false;
-    }
     if (rule.sources?.length && !rule.sources.includes(context.toolCall.source)) {
         return false;
     }
-    if (rule.source && rule.source !== context.toolCall.source) {
-        return false;
-    }
     if (rule.triggers?.length && !rule.triggers.includes(context.request.trigger)) {
         return false;
     }
-    if (rule.trigger && rule.trigger !== context.request.trigger) {
-        return false;
-    }
     if (rule.senderTrusts?.length && !rule.senderTrusts.includes(context.request.senderTrust)) {
         return false;
     }
-    if (rule.senderTrust && rule.senderTrust !== context.request.senderTrust) {
-        return false;
-    }
     if (rule.args && !matchesArgs(rule.args, context.toolCall.args)) {
         return false;
     }
@@ -629,9 +508,6 @@ function stringArg(args, key) {
 function riskRank(level) {
     return { low: 1, medium: 2, high: 3, critical: 4 }[level];
 }
-function uniqueStrings(values) {
-    return [...new Set(values)];
-}
 function summarizeTarget(value) {
     return value.length > 200
         ? `${value.slice(0, 200)}...[${value.length - 200} chars truncated]`

package/dist/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAkK7B,MAAM,gBAAgB,GAAqB;IACzC,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,0CAA0C;CACnD,CAAC;AAEF,MAAM,yBAAyB,GAAG;IAChC,WAAW;IACX,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,WAAW;IACX,WAAW;IACX,UAAU;IACV,eAAe;IACf,cAAc;IACd,gBAAgB;IAChB,OAAO;IACP,OAAO;IACP,QAAQ;CACT,CAAC;AAEF,MAAM,yBAAyB,GAAqB;IAClD,KAAK,EAAE,CAAC,eAAe,CAAC;IACxB,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC;CAC9C,CAAC;AAEF,MAAM,2BAA2B,GAAqC;IACpE,IAAI,EAAE,yBAAyB;IAC/B,SAAS,EAAE;QACT,KAAK,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC;QACxF,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;KAChC;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,CAAC;QACnE,IAAI,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;KAClC;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,CAAC;QAC9F,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;KAChC;IACD,cAAc,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE;IAChC,OAAO,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE;IAC7C,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE;IAC/B,OAAO,EAAE;QACP,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,CAAC;QAC9F,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;KAChC;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,yBAAyB,CAAC,MAAM,CACrC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,cAAc,IAAI,UAAU,KAAK,gBAAgB,CACjF;QACD,IAAI,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC;KACzC;IACD,SAAS,EAAE;QACT,KAAK,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC/F,IAAI,EAAE,CAAC,kBAAkB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC;KAC/E;IACD,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE;IACvB,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE;CAChC,CAAC;AAEF,MAAM,uBAAuB,GAAmB,CAAC,eAAe,EAAE,CAAC,CAAC;AAEpE,MAAM,sBAAsB,GAAmC;IAC7D,OAAO,EAAE;QACP,GAAG,uBAAuB;QAC1B;YACE,EAAE,EAAE,qBAAqB;YACzB,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;YAC/B,MAAM,EAAE,CAAC,WAAW,CAAC;YACrB,QAAQ,EAAE;gBACR,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,gDAAgD;gBACxD,MAAM,EAAE,iCAAiC;aAC1C;SACF;KACF;IACD,aAAa,EAAE;QACb,GAAG,uBAAuB;QAC1B;YACE,EAAE,EAAE,mBAAmB;YACvB,QAAQ,EAAE,GAAG;YACb,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE;SAChF;QACD;YACE,EAAE,EAAE,eAAe;YACnB,QAAQ,EAAE,GAAG;YACb,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE;SAC5E;QACD;YACE,EAAE,EAAE,qBAAqB;YACzB,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;YAC/B,MAAM,EAAE,CAAC,WAAW,CAAC;YACrB,QAAQ,EAAE;gBACR,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,gDAAgD;gBACxD,MAAM,EAAE,iCAAiC;aAC1C;SACF;KACF;IACD,SAAS,EAAE;QACT,GAAG,uBAAuB;QAC1B;YACE,EAAE,EAAE,yBAAyB;YAC7B,QAAQ,EAAE,GAAG;YACb,UAAU,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC;YACnD,QAAQ,EAAE;gBACR,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,0EAA0E;aACnF;SACF;KACF;IACD,QAAQ,EAAE;QACR,GAAG,uBAAuB;QAC1B;YACE,EAAE,EAAE,+BAA+B;YACnC,QAAQ,EAAE,GAAG;YACb,KAAK,EAAE,CAAC,gBAAgB,CAAC;YACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mDAAmD,EAAE;SACxF;QACD;YACE,EAAE,EAAE,4BAA4B;YAChC,QAAQ,EAAE,GAAG;YACb,KAAK,EAAE,CAAC,cAAc,CAAC;YACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mDAAmD,EAAE;SACxF;KACF;IACD,KAAK,EAAE,EAAE;IACT,aAAa,EAAE,EAAE;CAClB,CAAC;AAEF,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAiB;IACxB,eAAe,CAAmB;IAEnD,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,gBAAgB,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,KAIN;QACC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED,QAAQ,CAAC,KAIR;QACC,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,GAA8B,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzE,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACxC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC9B,OAAO;oBACL,YAAY,EAAE,UAAU,EAAE;oBAC1B,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC5E,SAAS;oBACT,IAAI;oBACJ,cAAc;iBACf,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;YACL,YAAY,EAAE,UAAU,EAAE;YAC1B,QAAQ,EAAE,uBAAuB,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAClF,SAAS;YACT,IAAI;YACJ,cAAc;SACf,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,YAAY;IACN,MAAM,CAAuB;IAC7B,eAAe,CAAsC;IACrD,SAAS,CAAgC;IAE1D,YAAY,OAA4B;QACtC,IAAI,CAAC,MAAM;YACT,OAAO,CAAC,MAAM;gBACd,oCAAoC,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9F,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAiC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACpC,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,KAAiC,EACjC,UAAoC;QAEpC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACvC,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC;YAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,UAAU;SACX,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,KAAiC,EACjC,UAAoC;QAEpC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,CAAC;YACnB,GAAG,UAAU;YACb,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAClC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;YAC5C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC7B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAK3C;IACC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;QACpD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,6BAA6B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAA0B;IACtE,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,OAAO,CAAC;QACb,KAAK,wBAAwB,CAAC;QAC9B,KAAK,cAAc;YACjB,OAAO;QACT,KAAK,KAAK;YACR,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,KAAK,MAAM;YACT,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,SAAyB,EAAE,EAC3B,eAAsD,EAAE;IAExD,OAAO,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,YAAY,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAwB;IAC5E,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,OAAe,EACf,SAAyB,EAAE,EAC3B,eAAsD,EAAE;IAExD,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IAClF,MAAM,eAAe,GACnB,eAAe,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrD,EAAE,EAAE,oBAAoB,OAAO,IAAI,QAAQ,EAAE;QAC7C,QAAQ,EAAE,GAAG;QACb,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;KAC5B,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,OAAO,IAAI,oBAAoB,CAAC;QAC9B,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC;QACpD,eAAe,EAAE,eAAe,CAAC,eAAe,IAAI;YAClD,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,4CAA4C,OAAO,EAAE;SAC9D;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAIzC;IACC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO;YACL,YAAY,CACV,QAAQ,EACR,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EACnE,KAAK,CAAC,YAAY,CACnB;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpE,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAClE,MAAM,OAAO,GACX,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC;QAC3F,MAAM,SAAS,GAAuB;YACpC;gBACE,IAAI,EAAE,OAAO;gBACb,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC;gBACrE,WAAW,EAAE,QAAQ;aACtB;SACF,CAAC;QACF,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,QAAQ;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACtC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACvC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,IACE,QAAQ,CAAC,MAAM,KAAK,KAAK;QACzB,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EACjC,CAAC;QACD,OAAO;YACL;gBACE,IAAI,EAAE,KAAK;gBACX,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,QAAQ,CAAC,IAAI;gBACrB,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,QAAQ;aACtB;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL;YACE,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,QAAQ,CAAC,IAAI;YACrB,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,QAAQ;SACtB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAG1B;IACC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAc,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,IAAe,EAAE,MAAc,EAAE,EAAE;QAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ,IAAI,QAAQ,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YAC/E,KAAK,CAAC,UAAU,EAAE,aAAa,QAAQ,CAAC,WAAW,WAAW,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAC/D,KAAK,CACH,QAAQ,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAClD,iBAAiB,QAAQ,CAAC,KAAK,QAAQ,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;YACtC,IAAI,sEAAsE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzF,KAAK,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,4DAA4D,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/E,KAAK,CAAC,MAAM,EAAE,iDAAiD,CAAC,CAAC;YACnE,CAAC;YACD,IACE,0EAA0E,CAAC,IAAI,CAAC,OAAO,CAAC,EACxF,CAAC;gBACD,KAAK,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnE,KAAK,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACjE,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACjC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC5B,KAAK,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;KACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAoC;IAC5E,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI;QAClC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK;QAC3B,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO;QACpC,YAAY,EAAE,UAAU,CAAC,cAAc;QACvC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAe,EACf,MAAsB,EACtB,OAAiB,EAAE,EACnB,eAAsD,EAAE;IAExD,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,iBAAiB,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,UAAU,EAAE,OAAO;QAChC,CAAC,CAAC,sBAAsB,CACpB,UAAU,CAAC,OAAO,EAClB,MAAM,EACN,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAC9B,YAAY,CACb;QACH,CAAC,CAAC;YACE,YAAY,EAAE,2BAA2B,CAAC,iBAAiB,CAAC,IAAI,yBAAyB;YACzF,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,IAAI,uBAAuB;SAC5E,CAAC;IACN,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO;QACL,YAAY,EAAE,qBAAqB,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC;QACjF,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,wBAAwB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtE,GAAG,CAAC,CAAC,UAAU,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC;YACxD,CAAC,CAAC,EAAE,eAAe,EAAE,UAAU,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,EAAE;YAC3E,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;QACL,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,GAAG;QACb,WAAW,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;QACrC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,+CAA+C,EAAE;KACpF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAsB,EACtB,QAAgD;IAEhD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAwB;IACpD,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAiC;IACjE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,GAAG,IAAI;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG;KAC/B,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB,EAAE,OAAkC;IACjF,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,IAAI,CAAC,KAAK,EAAE,MAAM;QAClB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,mBAAmB,CAAC,IAAI,CAAC;QACzB,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAC9E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB;IAC7C,OAAO,OAAO,CACZ,IAAI,CAAC,SAAS,EAAE,MAAM;QACpB,IAAI,CAAC,UAAU,EAAE,MAAM;QACvB,IAAI,CAAC,MAAM,EAAE,MAAM;QACnB,IAAI,CAAC,WAAW,EAAE,MAAM,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAkB,EAAE,QAA0B;IAC7E,IAAI,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAA0B,EAC1B,WAAoB;IAEpB,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,yEAAyE,QAAQ,CAAC,MAAM,EAAE;SACnG,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CACnB,SAA4B,EAC5B,KAAyB,EACzB,YAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS;QACT,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC;QACrC,WAAW,EAAE,uBAAuB,CAAC,KAAK,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB,EAAE,YAAgC;IAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,YAAY,IAAI,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,IAAI,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAyB;IACxD,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IACE,qGAAqG,CAAC,IAAI,CACxG,KAAK,CACN,EACD,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,wEAAwE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IACE,uHAAuH,CAAC,IAAI,CAC1H,KAAK,CACN,EACD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,uEAAuE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,QAAgC,EAAE,IAAgB;IACrE,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgC,EAAE,IAAgB;IAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,OAAe;IACpD,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,iBAAiB,KAAK,GAAG,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,eAAe,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,eAAe,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,eAAe,KAAK,iBAAiB,CAAC;AAC/C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgB;IAChC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,MAAgB;IACrC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG;QACvB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,mBAAmB;QACpE,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC"}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AA8H7B,MAAM,gBAAgB,GAAqB;IACzC,IAAI,EAAE,KAAK;IACX,MAAM,EAAE,0CAA0C;CACnD,CAAC;AAEF,MAAM,oBAAoB,GAA0C;IAClE,WAAW,EAAE;QACX,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;QACrC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACtD,IAAI,EAAE,CAAC,MAAM,CAAC;KACf;IACD,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE;CAChC,CAAC;AAEF,MAAM,gBAAgB,GAAqE;IACzF,WAAW,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE;IACxD,OAAO,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC/D,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC5D,aAAa,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE;CAC7D,CAAC;AAEF,MAAM,uBAAuB,GAAG,gBAAgB,CAAC,OAGhD,CAAC;AAEF,MAAM,iBAAiB,GAAiB;IACtC,EAAE,EAAE,cAAc;IAClB,QAAQ,EAAE,GAAG;IACb,WAAW,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;IACrC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,+CAA+C,EAAE;CACpF,CAAC;AAEF,MAAM,uBAAuB,GAAmB,CAAC,iBAAiB,CAAC,CAAC;AAEpE,MAAM,wBAAwB,GAAiB;IAC7C,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC/B,MAAM,EAAE,CAAC,WAAW,CAAC;IACrB,QAAQ,EAAE;QACR,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,gDAAgD;QACxD,MAAM,EAAE,iCAAiC;KAC1C;CACF,CAAC;AAEF,MAAM,mBAAmB,GAAmB;IAC1C;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,GAAG;QACb,IAAI,EAAE,CAAC,UAAU,CAAC;QAClB,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE;KAChF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,GAAG;QACb,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE;KAC5E;CACF,CAAC;AAEF,SAAS,uBAAuB,CAAC,QAAsB;IACrD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,CAAC,GAAG,uBAAuB,CAAC,CAAC;QACtC,KAAK,YAAY;YACf,OAAO,CAAC,GAAG,uBAAuB,EAAE,GAAG,mBAAmB,CAAC,CAAC;QAC9D,KAAK,YAAY;YACf,OAAO,CAAC,GAAG,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;QAChE,KAAK,WAAW;YACd,OAAO,CAAC,GAAG,uBAAuB,EAAE,GAAG,mBAAmB,EAAE,wBAAwB,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAsB;IACxD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAiB;IACxB,eAAe,CAAmB;IAEnD,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,gBAAgB,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,KAIN;QACC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED,QAAQ,CAAC,KAIR;QACC,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,GAA8B,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzE,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;gBACxC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC9B,OAAO;oBACL,YAAY,EAAE,UAAU,EAAE;oBAC1B,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC5E,SAAS;oBACT,IAAI;oBACJ,cAAc;iBACf,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;YACL,YAAY,EAAE,UAAU,EAAE;YAC1B,QAAQ,EAAE,uBAAuB,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAClF,SAAS;YACT,IAAI;YACJ,cAAc;SACf,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,YAAY;IACN,MAAM,CAAuB;IAC7B,eAAe,CAAsC;IACrD,SAAS,CAAgC;IAE1D,YAAY,OAA4B;QACtC,IAAI,CAAC,MAAM;YACT,OAAO,CAAC,MAAM;gBACd,oCAAoC,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9F,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAiC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACpC,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,KAAiC,EACjC,UAAoC;QAEpC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACvC,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC;YAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,UAAU;SACX,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,KAAiC,EACjC,UAAoC;QAEpC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,CAAC;YACnB,GAAG,UAAU;YACb,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAClC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;YAC5C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC7B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAK3C;IACC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;QACpD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,6BAA6B,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAA0B;IACtE,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,OAAO;YACV,OAAO;QACT,KAAK,KAAK;YACR,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,KAAK,MAAM;YACT,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,SAAyB,EAAE,EAC3B,eAAsD,EAAE;IAExD,OAAO,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,YAAY,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAwB;IAC5E,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,OAAe,EACf,SAAyB,EAAE,EAC3B,eAAsD,EAAE;IAExD,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IAClF,MAAM,mBAAmB,GACvB,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,EAAE,EAAE,mBAAmB,OAAO,IAAI,QAAQ,EAAE;QAC5C,QAAQ,EAAE,GAAG;QACb,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,SAAS,QAAQ,2BAA2B,eAAe,CAAC,OAAO,IAAI;SAChF;KACF,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,MAAM,oBAAoB,GACxB,eAAe,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrD,EAAE,EAAE,oBAAoB,OAAO,IAAI,QAAQ,EAAE;QAC7C,QAAQ,EAAE,GAAG;QACb,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;KAC5B,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,OAAO,IAAI,oBAAoB,CAAC;QAC9B,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC;QACrF,eAAe,EACb,eAAe,CAAC,eAAe,IAAI,0BAA0B,CAAC,eAAe,CAAC,QAAQ,CAAC;KAC1F,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAIzC;IACC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzD,OAAO;YACL,YAAY,CACV,QAAQ,EACR,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EACnE,KAAK,CAAC,YAAY,CACnB;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1D,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC;QACrE,MAAM,SAAS,GAAuB;YACpC;gBACE,IAAI,EAAE,OAAO;gBACb,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC;gBACrE,WAAW,EAAE,QAAQ;aACtB;SACF,CAAC;QACF,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,QAAQ;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL;YACE,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,QAAQ,CAAC,IAAI;YACrB,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,QAAQ;SACtB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAG1B;IACC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAc,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,IAAe,EAAE,MAAc,EAAE,EAAE;QAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ,IAAI,QAAQ,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YAC/E,KAAK,CAAC,UAAU,EAAE,aAAa,QAAQ,CAAC,WAAW,WAAW,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAC/D,KAAK,CACH,QAAQ,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAClD,iBAAiB,QAAQ,CAAC,KAAK,QAAQ,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,KAAK,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;YACtC,IAAI,sEAAsE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzF,KAAK,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,4DAA4D,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/E,KAAK,CAAC,MAAM,EAAE,iDAAiD,CAAC,CAAC;YACnE,CAAC;YACD,IACE,0EAA0E,CAAC,IAAI,CAAC,OAAO,CAAC,EACxF,CAAC;gBACD,KAAK,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnE,KAAK,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;KACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAoC;IAC5E,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI;QAClC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK;QAC3B,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO;QACpC,YAAY,EAAE,UAAU,CAAC,cAAc;QACvC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAUD,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC;IAClE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC;QACnD,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAe,EACf,MAAsB,EACtB,OAAiB,EAAE,EACnB,eAAsD,EAAE;IAExD,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrC,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,iBAAiB,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAoB,UAAU,EAAE,OAAO;QACjD,CAAC,CAAC,sBAAsB,CACpB,UAAU,CAAC,OAAO,EAClB,MAAM,EACN,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAC9B,YAAY,CACb;QACH,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;IACxD,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC;IACjG,MAAM,eAAe,GACnB,UAAU,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;IAC/E,MAAM,gBAAgB,GAAG,UAAU,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC;IAC9E,OAAO;QACL,OAAO;QACP,QAAQ;QACR,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY;QAClF,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAChF,wBAAwB,CAAC,UAAU,CAAC,KAAK,CAAC,CAC3C;QACD,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAiC;IACjE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClC,GAAG,IAAI;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG;KAC/B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB,EAAE,OAAkC;IACjF,IACE,IAAI,CAAC,KAAK,EAAE,MAAM;QAClB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,mBAAmB,CAAC,IAAI,CAAC;QACzB,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAC9E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB;IAC7C,OAAO,OAAO,CACZ,IAAI,CAAC,SAAS,EAAE,MAAM;QACpB,IAAI,CAAC,UAAU,EAAE,MAAM;QACvB,IAAI,CAAC,MAAM,EAAE,MAAM;QACnB,IAAI,CAAC,WAAW,EAAE,MAAM,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAkB,EAAE,QAA0B;IAC7E,IAAI,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAA0B,EAC1B,WAAoB;IAEpB,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,yEAAyE,QAAQ,CAAC,MAAM,EAAE;SACnG,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CACnB,SAA4B,EAC5B,KAAyB,EACzB,YAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS;QACT,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC;QACrC,WAAW,EAAE,uBAAuB,CAAC,KAAK,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB,EAAE,YAAgC;IAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,YAAY,IAAI,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,IAAI,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAyB;IACxD,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IACE,qGAAqG,CAAC,IAAI,CACxG,KAAK,CACN,EACD,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,wEAAwE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IACE,uHAAuH,CAAC,IAAI,CAC1H,KAAK,CACN,EACD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,uEAAuE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,QAAgC,EAAE,IAAgB;IACrE,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgC,EAAE,IAAgB;IAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,OAAe;IACpD,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,iBAAiB,KAAK,GAAG,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,eAAe,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,eAAe,CAAC,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,eAAe,KAAK,iBAAiB,CAAC;AAC/C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgB;IAChC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG;QACvB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,mBAAmB;QACpE,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC"}

package/examples/auto-review.settings.json ADDED Viewed

@@ -0,0 +1,24 @@
+{
+  "pi-security": {
+    "enabled": true,
+    "profile": "auto-review",
+    "security": {
+      "profiles": {
+        "auto-review": {
+          "extends": "default",
+          "rules": [
+            {
+              "id": "ask-package-install",
+              "priority": 450,
+              "tools": ["bash"],
+              "argsRegex": {
+                "command": "(npm|pnpm|yarn|pip)\\s+(install|add)"
+              },
+              "decision": { "kind": "ask", "reason": "Approve package install?" }
+            }
+          ]
+        }
+      }
+    }
+  }
+}

package/examples/reviewer.json ADDED Viewed

@@ -0,0 +1,19 @@
+{
+  "extends": "read-only",
+  "sandbox": "workspace-write",
+  "approval": "on-request",
+  "rules": [
+    {
+      "id": "ask-bash",
+      "priority": 400,
+      "tools": ["bash"],
+      "decision": { "kind": "ask", "reason": "Shell needs approval" }
+    },
+    {
+      "id": "deny-network",
+      "priority": 500,
+      "resources": ["network"],
+      "decision": { "kind": "deny", "reason": "External network is blocked" }
+    }
+  ]
+}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/pi-security",
-  "version": "0.1.2-beta.11",
+  "version": "0.1.2-beta.13",
   "description": "Pi extension for resource-aware security policy engine and tool authorization",
   "keywords": [
     "pi-package",
@@ -31,6 +31,7 @@
   },
   "files": [
     "dist",
+    "examples",
     "README.md"
   ],
   "pi": {
@@ -47,7 +48,7 @@
     "directory": "packages/pi-security"
   },
   "dependencies": {
-    "@amaster.ai/pi-shared": "0.1.2-beta.11"
+    "@amaster.ai/pi-shared": "0.1.2-beta.13"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": ">=0.74.0"