@anthropic-field/core 0.1.0

package/dist/src/safety/context-builder.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { SafetyCheckInput, ConversationTurn } from './protocol.js';
+import type { Config } from '../config/config.js';
+/**
+ * Builds context objects for safety checkers, ensuring sensitive data is filtered.
+ */
+export declare class ContextBuilder {
+    private readonly config;
+    private readonly conversationHistory;
+    constructor(config: Config, conversationHistory?: ConversationTurn[]);
+    /**
+     * Builds the full context object with all available data.
+     */
+    buildFullContext(): SafetyCheckInput['context'];
+    /**
+     * Builds a minimal context with only the specified keys.
+     */
+    buildMinimalContext(requiredKeys: Array<keyof SafetyCheckInput['context']>): SafetyCheckInput['context'];
+}

package/dist/src/safety/context-builder.js

@@ -0,0 +1,47 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Builds context objects for safety checkers, ensuring sensitive data is filtered.
+ */
+export class ContextBuilder {
+    config;
+    conversationHistory;
+    constructor(config, conversationHistory = []) {
+        this.config = config;
+        this.conversationHistory = conversationHistory;
+    }
+    /**
+     * Builds the full context object with all available data.
+     */
+    buildFullContext() {
+        return {
+            environment: {
+                cwd: process.cwd(),
+                workspaces: this.config
+                    .getWorkspaceContext()
+                    .getDirectories(),
+            },
+            history: {
+                turns: this.conversationHistory,
+            },
+        };
+    }
+    /**
+     * Builds a minimal context with only the specified keys.
+     */
+    buildMinimalContext(requiredKeys) {
+        const fullContext = this.buildFullContext();
+        const minimalContext = {};
+        for (const key of requiredKeys) {
+            if (key in fullContext) {
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                minimalContext[key] = fullContext[key];
+            }
+        }
+        return minimalContext;
+    }
+}
+//# sourceMappingURL=context-builder.js.map

package/dist/src/safety/context-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-builder.js","sourceRoot":"","sources":["../../../src/safety/context-builder.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;GAEG;AACH,MAAM,OAAO,cAAc;IAEN;IACA;IAFnB,YACmB,MAAc,EACd,sBAA0C,EAAE;QAD5C,WAAM,GAAN,MAAM,CAAQ;QACd,wBAAmB,GAAnB,mBAAmB,CAAyB;IAC5D,CAAC;IAEJ;;OAEG;IACH,gBAAgB;QACd,OAAO;YACL,WAAW,EAAE;gBACX,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,UAAU,EAAE,IAAI,CAAC,MAAM;qBACpB,mBAAmB,EAAE;qBACrB,cAAc,EAAc;aAChC;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI,CAAC,mBAAmB;aAChC;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,YAAsD;QAEtD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,cAAc,GAAyC,EAAE,CAAC;QAEhE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;gBACvB,8DAA8D;gBAC7D,cAAsB,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,OAAO,cAA6C,CAAC;IACvD,CAAC;CACF"}

package/dist/src/safety/protocol.d.ts

@@ -0,0 +1,88 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { FunctionCall } from '@google/genai';
+/**
+ * Represents a single turn in the conversation between the user and the model.
+ * This provides semantic context for why a tool call might be happening.
+ */
+export interface ConversationTurn {
+    user: {
+        text: string;
+    };
+    model: {
+        text?: string;
+        toolCalls?: FunctionCall[];
+    };
+}
+/**
+ * The data structure passed from the CLI to a safety checker process via stdin.
+ */
+export interface SafetyCheckInput {
+    /**
+     * The semantic version of the protocol (e.g., "1.0.0"). This allows
+     * for introducing breaking changes in the future while maintaining
+     * support for older checkers.
+     */
+    protocolVersion: '1.0.0';
+    /**
+     * The specific tool call that is being validated.
+     */
+    toolCall: FunctionCall;
+    /**
+     * A container for all contextual information from the CLI's internal state.
+     * By grouping data into categories, we can easily add new context in the
+     * future without creating a flat, unmanageable object.
+     */
+    context: {
+        /**
+         * Information about the user's file system and execution environment.
+         */
+        environment: {
+            cwd: string;
+            workspaces: string[];
+        };
+        /**
+         * The recent history of the conversation. This can be used by checkers
+         * that need to understand the intent behind a tool call.
+         */
+        history?: {
+            turns: ConversationTurn[];
+        };
+    };
+    /**
+     * Configuration for the safety checker.
+     * This allows checkers to be parameterized (e.g. allowed paths).
+     */
+    config?: unknown;
+}
+/**
+ * The possible decisions a safety checker can make.
+ */
+export declare enum SafetyCheckDecision {
+    ALLOW = "allow",
+    DENY = "deny",
+    ASK_USER = "ask_user"
+}
+/**
+ * The data structure returned by a safety checker process via stdout.
+ */
+export type SafetyCheckResult = {
+    /**
+     * The decision made by the safety checker.
+     */
+    decision: SafetyCheckDecision.ALLOW;
+    /**
+     * If not allowed, a message explaining why the tool call was blocked.
+     * This will be shown to the user.
+     */
+    reason?: string;
+} | {
+    decision: SafetyCheckDecision.DENY;
+    reason: string;
+} | {
+    decision: SafetyCheckDecision.ASK_USER;
+    reason: string;
+};

package/dist/src/safety/protocol.js

@@ -0,0 +1,15 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * The possible decisions a safety checker can make.
+ */
+export var SafetyCheckDecision;
+(function (SafetyCheckDecision) {
+    SafetyCheckDecision["ALLOW"] = "allow";
+    SafetyCheckDecision["DENY"] = "deny";
+    SafetyCheckDecision["ASK_USER"] = "ask_user";
+})(SafetyCheckDecision || (SafetyCheckDecision = {}));
+//# sourceMappingURL=protocol.js.map

package/dist/src/safety/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/safety/protocol.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgEH;;GAEG;AACH,MAAM,CAAN,IAAY,mBAIX;AAJD,WAAY,mBAAmB;IAC7B,sCAAe,CAAA;IACf,oCAAa,CAAA;IACb,4CAAqB,CAAA;AACvB,CAAC,EAJW,mBAAmB,KAAnB,mBAAmB,QAI9B"}

package/dist/src/safety/registry.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type InProcessChecker } from './built-in.js';
+/**
+ * Registry for managing safety checker resolution.
+ */
+export declare class CheckerRegistry {
+    private readonly checkersPath;
+    private static readonly BUILT_IN_EXTERNAL_CHECKERS;
+    private static readonly BUILT_IN_IN_PROCESS_CHECKERS;
+    private static readonly VALID_NAME_PATTERN;
+    constructor(checkersPath: string);
+    /**
+     * Resolves an external checker name to an absolute executable path.
+     */
+    resolveExternal(name: string): string;
+    /**
+     * Resolves an in-process checker name to a checker instance.
+     */
+    resolveInProcess(name: string): InProcessChecker;
+    private static isValidCheckerName;
+    static getBuiltInCheckers(): string[];
+}

package/dist/src/safety/registry.js

@@ -0,0 +1,65 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+import { AllowedPathChecker } from './built-in.js';
+import { InProcessCheckerType } from '../policy/types.js';
+/**
+ * Registry for managing safety checker resolution.
+ */
+export class CheckerRegistry {
+    checkersPath;
+    static BUILT_IN_EXTERNAL_CHECKERS = new Map([
+    // No external built-ins for now
+    ]);
+    static BUILT_IN_IN_PROCESS_CHECKERS = new Map([[InProcessCheckerType.ALLOWED_PATH, new AllowedPathChecker()]]);
+    // Regex to validate checker names (alphanumeric and hyphens only)
+    static VALID_NAME_PATTERN = /^[a-z0-9-]+$/;
+    constructor(checkersPath) {
+        this.checkersPath = checkersPath;
+    }
+    /**
+     * Resolves an external checker name to an absolute executable path.
+     */
+    resolveExternal(name) {
+        if (!CheckerRegistry.isValidCheckerName(name)) {
+            throw new Error(`Invalid checker name "${name}". Checker names must contain only lowercase letters, numbers, and hyphens.`);
+        }
+        const builtInPath = CheckerRegistry.BUILT_IN_EXTERNAL_CHECKERS.get(name);
+        if (builtInPath) {
+            const fullPath = path.join(this.checkersPath, builtInPath);
+            if (!fs.existsSync(fullPath)) {
+                throw new Error(`Built-in checker "${name}" not found at ${fullPath}`);
+            }
+            return fullPath;
+        }
+        // TODO: Phase 5 - Add support for custom external checkers
+        throw new Error(`Unknown external checker "${name}".`);
+    }
+    /**
+     * Resolves an in-process checker name to a checker instance.
+     */
+    resolveInProcess(name) {
+        if (!CheckerRegistry.isValidCheckerName(name)) {
+            throw new Error(`Invalid checker name "${name}".`);
+        }
+        const checker = CheckerRegistry.BUILT_IN_IN_PROCESS_CHECKERS.get(name);
+        if (checker) {
+            return checker;
+        }
+        throw new Error(`Unknown in-process checker "${name}". Available: ${Array.from(CheckerRegistry.BUILT_IN_IN_PROCESS_CHECKERS.keys()).join(', ')}`);
+    }
+    static isValidCheckerName(name) {
+        return this.VALID_NAME_PATTERN.test(name) && !name.includes('..');
+    }
+    static getBuiltInCheckers() {
+        return [
+            ...Array.from(this.BUILT_IN_EXTERNAL_CHECKERS.keys()),
+            ...Array.from(this.BUILT_IN_IN_PROCESS_CHECKERS.keys()),
+        ];
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/src/safety/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/safety/registry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAyB,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D;;GAEG;AACH,MAAM,OAAO,eAAe;IAaG;IAZrB,MAAM,CAAU,0BAA0B,GAAG,IAAI,GAAG,CAAiB;IAC3E,gCAAgC;KACjC,CAAC,CAAC;IAEK,MAAM,CAAU,4BAA4B,GAAG,IAAI,GAAG,CAG5D,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;IAEnE,kEAAkE;IAC1D,MAAM,CAAU,kBAAkB,GAAG,cAAc,CAAC;IAE5D,YAA6B,YAAoB;QAApB,iBAAY,GAAZ,YAAY,CAAQ;IAAG,CAAC;IAErD;;OAEG;IACH,eAAe,CAAC,IAAY;QAC1B,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,6EAA6E,CAC3G,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,eAAe,CAAC,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,kBAAkB,QAAQ,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,2DAA2D;QAC3D,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,IAAI,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,IAAY;QAC3B,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,IAAI,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,eAAe,CAAC,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,iBAAiB,KAAK,CAAC,IAAI,CAC5D,eAAe,CAAC,4BAA4B,CAAC,IAAI,EAAE,CACpD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAAC,IAAY;QAC5C,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,CAAC,kBAAkB;QACvB,OAAO;YACL,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;YACrD,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC"}

package/dist/src/scheduler/confirmation.d.ts

@@ -0,0 +1,49 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { MessageBus } from '../confirmation-bus/message-bus.js';
+import { type SerializableConfirmationDetails } from '../confirmation-bus/types.js';
+import { ToolConfirmationOutcome, type ToolConfirmationPayload } from '../tools/tools.js';
+import type { ValidatingToolCall } from './types.js';
+import type { Config } from '../config/config.js';
+import type { SchedulerStateManager } from './state-manager.js';
+import type { ToolModificationHandler } from './tool-modifier.js';
+import type { EditorType } from '../utils/editor.js';
+export interface ConfirmationResult {
+    outcome: ToolConfirmationOutcome;
+    payload?: ToolConfirmationPayload;
+}
+/**
+ * Result of the full confirmation flow, including any user modifications.
+ */
+export interface ResolutionResult {
+    outcome: ToolConfirmationOutcome;
+    lastDetails?: SerializableConfirmationDetails;
+}
+/**
+ * Waits for a confirmation response with the matching correlationId.
+ *
+ * NOTE: It is the caller's responsibility to manage the lifecycle of this wait
+ * via the provided AbortSignal. To prevent memory leaks and "zombie" listeners
+ * in the event of a lost connection (e.g. IDE crash), it is strongly recommended
+ * to use a signal with a timeout (e.g. AbortSignal.timeout(ms)).
+ *
+ * @param messageBus The MessageBus to listen on.
+ * @param correlationId The correlationId to match.
+ * @param signal An AbortSignal to cancel the wait and cleanup listeners.
+ */
+export declare function awaitConfirmation(messageBus: MessageBus, correlationId: string, signal: AbortSignal): Promise<ConfirmationResult>;
+/**
+ * Manages the interactive confirmation loop, handling user modifications
+ * via inline diffs or external editors (Vim).
+ */
+export declare function resolveConfirmation(toolCall: ValidatingToolCall, signal: AbortSignal, deps: {
+    config: Config;
+    messageBus: MessageBus;
+    state: SchedulerStateManager;
+    modifier: ToolModificationHandler;
+    getPreferredEditor: () => EditorType | undefined;
+    schedulerId: string;
+}): Promise<ResolutionResult>;

package/dist/src/scheduler/confirmation.js

@@ -0,0 +1,183 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { on } from 'node:events';
+import { randomUUID } from 'node:crypto';
+import { MessageBusType, } from '../confirmation-bus/types.js';
+import { ToolConfirmationOutcome, } from '../tools/tools.js';
+import { debugLogger } from '../utils/debugLogger.js';
+/**
+ * Waits for a confirmation response with the matching correlationId.
+ *
+ * NOTE: It is the caller's responsibility to manage the lifecycle of this wait
+ * via the provided AbortSignal. To prevent memory leaks and "zombie" listeners
+ * in the event of a lost connection (e.g. IDE crash), it is strongly recommended
+ * to use a signal with a timeout (e.g. AbortSignal.timeout(ms)).
+ *
+ * @param messageBus The MessageBus to listen on.
+ * @param correlationId The correlationId to match.
+ * @param signal An AbortSignal to cancel the wait and cleanup listeners.
+ */
+export async function awaitConfirmation(messageBus, correlationId, signal) {
+    if (signal.aborted) {
+        throw new Error('Operation cancelled');
+    }
+    try {
+        for await (const [msg] of on(messageBus, MessageBusType.TOOL_CONFIRMATION_RESPONSE, { signal })) {
+            const response = msg;
+            if (response.correlationId === correlationId) {
+                return {
+                    outcome: response.outcome ??
+                        // TODO: Remove legacy confirmed boolean fallback once migration complete
+                        (response.confirmed
+                            ? ToolConfirmationOutcome.ProceedOnce
+                            : ToolConfirmationOutcome.Cancel),
+                    payload: response.payload,
+                };
+            }
+        }
+    }
+    catch (error) {
+        if (signal.aborted || error.name === 'AbortError') {
+            throw new Error('Operation cancelled');
+        }
+        throw error;
+    }
+    // This point should only be reached if the iterator closes without resolving,
+    // which generally means the signal was aborted.
+    throw new Error('Operation cancelled');
+}
+/**
+ * Manages the interactive confirmation loop, handling user modifications
+ * via inline diffs or external editors (Vim).
+ */
+export async function resolveConfirmation(toolCall, signal, deps) {
+    const { state } = deps;
+    const callId = toolCall.request.callId;
+    let outcome = ToolConfirmationOutcome.ModifyWithEditor;
+    let lastDetails;
+    // Loop exists to allow the user to modify the parameters and see the new
+    // diff.
+    while (outcome === ToolConfirmationOutcome.ModifyWithEditor) {
+        if (signal.aborted)
+            throw new Error('Operation cancelled');
+        const currentCall = state.getToolCall(callId);
+        if (!currentCall || !('invocation' in currentCall)) {
+            throw new Error(`Tool call ${callId} lost during confirmation loop`);
+        }
+        const currentInvocation = currentCall.invocation;
+        const details = await currentInvocation.shouldConfirmExecute(signal);
+        if (!details) {
+            outcome = ToolConfirmationOutcome.ProceedOnce;
+            break;
+        }
+        await notifyHooks(deps, details);
+        const correlationId = randomUUID();
+        const serializableDetails = details;
+        lastDetails = serializableDetails;
+        const ideConfirmation = 'ideConfirmation' in details ? details.ideConfirmation : undefined;
+        state.updateStatus(callId, 'awaiting_approval', {
+            confirmationDetails: serializableDetails,
+            correlationId,
+        });
+        const response = await waitForConfirmation(deps.messageBus, correlationId, signal, ideConfirmation);
+        outcome = response.outcome;
+        if ('onConfirm' in details && typeof details.onConfirm === 'function') {
+            await details.onConfirm(outcome, response.payload);
+        }
+        if (outcome === ToolConfirmationOutcome.ModifyWithEditor) {
+            await handleExternalModification(deps, toolCall, signal);
+        }
+        else if (response.payload && 'newContent' in response.payload) {
+            await handleInlineModification(deps, toolCall, response.payload, signal);
+            outcome = ToolConfirmationOutcome.ProceedOnce;
+        }
+    }
+    return { outcome, lastDetails };
+}
+/**
+ * Fires hook notifications.
+ */
+async function notifyHooks(deps, details) {
+    if (deps.config.getHookSystem()) {
+        await deps.config.getHookSystem()?.fireToolNotificationEvent({
+            ...details,
+            // Pass no-op onConfirm to satisfy type definition; side-effects via
+            // callbacks are disallowed.
+            onConfirm: async () => { },
+        });
+    }
+}
+/**
+ * Handles modification via an external editor (e.g. Vim).
+ */
+async function handleExternalModification(deps, toolCall, signal) {
+    const { state, modifier, getPreferredEditor } = deps;
+    const editor = getPreferredEditor();
+    if (!editor)
+        return;
+    const result = await modifier.handleModifyWithEditor(state.firstActiveCall, editor, signal);
+    if (result) {
+        const newInvocation = toolCall.tool.build(result.updatedParams);
+        state.updateArgs(toolCall.request.callId, result.updatedParams, newInvocation);
+    }
+}
+/**
+ * Handles modification via inline payload (e.g. from IDE or TUI).
+ */
+async function handleInlineModification(deps, toolCall, payload, signal) {
+    const { state, modifier } = deps;
+    const result = await modifier.applyInlineModify(state.firstActiveCall, payload, signal);
+    if (result) {
+        const newInvocation = toolCall.tool.build(result.updatedParams);
+        state.updateArgs(toolCall.request.callId, result.updatedParams, newInvocation);
+    }
+}
+/**
+ * Waits for user confirmation, allowing either the MessageBus (TUI) or IDE to
+ * resolve it.
+ */
+async function waitForConfirmation(messageBus, correlationId, signal, ideConfirmation) {
+    // Create a controller to abort the bus listener if the IDE wins (or vice versa)
+    const raceController = new AbortController();
+    const raceSignal = raceController.signal;
+    // Propagate the parent signal's abort to our race controller
+    const onParentAbort = () => raceController.abort();
+    if (signal.aborted) {
+        raceController.abort();
+    }
+    else {
+        signal.addEventListener('abort', onParentAbort);
+    }
+    try {
+        const busPromise = awaitConfirmation(messageBus, correlationId, raceSignal);
+        if (!ideConfirmation) {
+            return await busPromise;
+        }
+        // Wrap IDE promise to match ConfirmationResult signature
+        const idePromise = ideConfirmation
+            .then((resolution) => ({
+            outcome: resolution.status === 'accepted'
+                ? ToolConfirmationOutcome.ProceedOnce
+                : ToolConfirmationOutcome.Cancel,
+            payload: resolution.content
+                ? { newContent: resolution.content }
+                : undefined,
+        }))
+            .catch((error) => {
+            debugLogger.warn('Error waiting for confirmation via IDE', error);
+            // Return a never-resolving promise so the race continues with the bus
+            return new Promise(() => { });
+        });
+        return await Promise.race([busPromise, idePromise]);
+    }
+    finally {
+        // Cleanup: remove parent listener and abort the race signal to ensure
+        // the losing listener (e.g. bus iterator) is closed.
+        signal.removeEventListener('abort', onParentAbort);
+        raceController.abort();
+    }
+}
+//# sourceMappingURL=confirmation.js.map

package/dist/src/scheduler/confirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation.js","sourceRoot":"","sources":["../../../src/scheduler/confirmation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,cAAc,GAGf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,uBAAuB,GAGxB,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAetD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAsB,EACtB,aAAqB,EACrB,MAAmB;IAEnB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAC1B,UAAU,EACV,cAAc,CAAC,0BAA0B,EACzC,EAAE,MAAM,EAAE,CACX,EAAE,CAAC;YACF,MAAM,QAAQ,GAAG,GAA+B,CAAC;YACjD,IAAI,QAAQ,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;gBAC7C,OAAO;oBACL,OAAO,EACL,QAAQ,CAAC,OAAO;wBAChB,yEAAyE;wBACzE,CAAC,QAAQ,CAAC,SAAS;4BACjB,CAAC,CAAC,uBAAuB,CAAC,WAAW;4BACrC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC;oBACrC,OAAO,EAAE,QAAQ,CAAC,OAAO;iBAC1B,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO,IAAK,KAAe,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,gDAAgD;IAChD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAA4B,EAC5B,MAAmB,EACnB,IAOC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;IACvC,IAAI,OAAO,GAAG,uBAAuB,CAAC,gBAAgB,CAAC;IACvD,IAAI,WAAwD,CAAC;IAE7D,yEAAyE;IACzE,QAAQ;IACR,OAAO,OAAO,KAAK,uBAAuB,CAAC,gBAAgB,EAAE,CAAC;QAC5D,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAE3D,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,YAAY,IAAI,WAAW,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,gCAAgC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,iBAAiB,GAAG,WAAW,CAAC,UAAU,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,uBAAuB,CAAC,WAAW,CAAC;YAC9C,MAAM;QACR,CAAC;QAED,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAEjC,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;QACnC,MAAM,mBAAmB,GAAG,OAA0C,CAAC;QACvE,WAAW,GAAG,mBAAmB,CAAC;QAElC,MAAM,eAAe,GACnB,iBAAiB,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QAErE,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,mBAAmB,EAAE;YAC9C,mBAAmB,EAAE,mBAAmB;YACxC,aAAa;SACd,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,IAAI,CAAC,UAAU,EACf,aAAa,EACb,MAAM,EACN,eAAe,CAChB,CAAC;QACF,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QAE3B,IAAI,WAAW,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACtE,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,KAAK,uBAAuB,CAAC,gBAAgB,EAAE,CAAC;YACzD,MAAM,0BAA0B,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,YAAY,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAChE,MAAM,wBAAwB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACzE,OAAO,GAAG,uBAAuB,CAAC,WAAW,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CACxB,IAAgD,EAChD,OAAoC;IAEpC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,yBAAyB,CAAC;YAC3D,GAAG,OAAO;YACV,oEAAoE;YACpE,4BAA4B;YAC5B,SAAS,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACK,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,0BAA0B,CACvC,IAIC,EACD,QAA4B,EAC5B,MAAmB;IAEnB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IACrD,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAClD,KAAK,CAAC,eAAkC,EACxC,MAAM,EACN,MAAM,CACP,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAChE,KAAK,CAAC,UAAU,CACd,QAAQ,CAAC,OAAO,CAAC,MAAM,EACvB,MAAM,CAAC,aAAa,EACpB,aAAa,CACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,wBAAwB,CACrC,IAAyE,EACzE,QAA4B,EAC5B,OAAgC,EAChC,MAAmB;IAEnB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAC7C,KAAK,CAAC,eAAkC,EACxC,OAAO,EACP,MAAM,CACP,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAChE,KAAK,CAAC,UAAU,CACd,QAAQ,CAAC,OAAO,CAAC,MAAM,EACvB,MAAM,CAAC,aAAa,EACpB,aAAa,CACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAChC,UAAsB,EACtB,aAAqB,EACrB,MAAmB,EACnB,eAA2C;IAE3C,gFAAgF;IAChF,MAAM,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC;IAEzC,6DAA6D;IAC7D,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IACnD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,cAAc,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;QAE5E,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,MAAM,UAAU,CAAC;QAC1B,CAAC;QAED,yDAAyD;QACzD,MAAM,UAAU,GAAG,eAAe;aAC/B,IAAI,CACH,CAAC,UAAU,EAAE,EAAE,CACb,CAAC;YACC,OAAO,EACL,UAAU,CAAC,MAAM,KAAK,UAAU;gBAC9B,CAAC,CAAC,uBAAuB,CAAC,WAAW;gBACrC,CAAC,CAAC,uBAAuB,CAAC,MAAM;YACpC,OAAO,EAAE,UAAU,CAAC,OAAO;gBACzB,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE;gBACpC,CAAC,CAAC,SAAS;SACd,CAAuB,CAC3B;aACA,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,WAAW,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;YAClE,sEAAsE;YACtE,OAAO,IAAI,OAAO,CAAqB,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEL,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,sEAAsE;QACtE,qDAAqD;QACrD,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACnD,cAAc,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/src/scheduler/policy.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type CheckResult } from '../policy/types.js';
+import type { Config } from '../config/config.js';
+import type { MessageBus } from '../confirmation-bus/message-bus.js';
+import { type SerializableConfirmationDetails } from '../confirmation-bus/types.js';
+import { ToolConfirmationOutcome, type AnyDeclarativeTool } from '../tools/tools.js';
+import type { ValidatingToolCall } from './types.js';
+/**
+ * Queries the system PolicyEngine to determine tool allowance.
+ * @returns The PolicyDecision.
+ * @throws Error if policy requires ASK_USER but the CLI is non-interactive.
+ */
+export declare function checkPolicy(toolCall: ValidatingToolCall, config: Config): Promise<CheckResult>;
+/**
+ * Evaluates the outcome of a user confirmation and dispatches
+ * policy config updates.
+ */
+export declare function updatePolicy(tool: AnyDeclarativeTool, outcome: ToolConfirmationOutcome, confirmationDetails: SerializableConfirmationDetails | undefined, deps: {
+    config: Config;
+    messageBus: MessageBus;
+}): Promise<void>;

package/dist/src/scheduler/policy.js

@@ -0,0 +1,108 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { ApprovalMode, PolicyDecision, } from '../policy/types.js';
+import { MessageBusType, } from '../confirmation-bus/types.js';
+import { ToolConfirmationOutcome, } from '../tools/tools.js';
+import { DiscoveredMCPTool } from '../tools/mcp-tool.js';
+import { EDIT_TOOL_NAMES } from '../tools/tool-names.js';
+/**
+ * Queries the system PolicyEngine to determine tool allowance.
+ * @returns The PolicyDecision.
+ * @throws Error if policy requires ASK_USER but the CLI is non-interactive.
+ */
+export async function checkPolicy(toolCall, config) {
+    const serverName = toolCall.tool instanceof DiscoveredMCPTool
+        ? toolCall.tool.serverName
+        : undefined;
+    const result = await config
+        .getPolicyEngine()
+        .check({ name: toolCall.request.name, args: toolCall.request.args }, serverName);
+    const { decision } = result;
+    /*
+     * Return the full check result including the rule that matched.
+     * This is necessary to access metadata like custom deny messages.
+     */
+    if (decision === PolicyDecision.ASK_USER) {
+        if (!config.isInteractive()) {
+            throw new Error(`Tool execution for "${toolCall.tool.displayName || toolCall.tool.name}" requires user confirmation, which is not supported in non-interactive mode.`);
+        }
+    }
+    return { decision, rule: result.rule };
+}
+/**
+ * Evaluates the outcome of a user confirmation and dispatches
+ * policy config updates.
+ */
+export async function updatePolicy(tool, outcome, confirmationDetails, deps) {
+    // Mode Transitions (AUTO_EDIT)
+    if (isAutoEditTransition(tool, outcome)) {
+        deps.config.setApprovalMode(ApprovalMode.AUTO_EDIT);
+        return;
+    }
+    // Specialized Tools (MCP)
+    if (confirmationDetails?.type === 'mcp') {
+        await handleMcpPolicyUpdate(tool, outcome, confirmationDetails, deps.messageBus);
+        return;
+    }
+    // Generic Fallback (Shell, Info, etc.)
+    await handleStandardPolicyUpdate(tool, outcome, confirmationDetails, deps.messageBus);
+}
+/**
+ * Returns true if the user's 'Always Allow' selection for a specific tool
+ * should trigger a session-wide transition to AUTO_EDIT mode.
+ */
+function isAutoEditTransition(tool, outcome) {
+    // TODO: This is a temporary fix to enable AUTO_EDIT mode for specific
+    // tools. We should refactor this so that callbacks can be removed from
+    // tools.
+    return (outcome === ToolConfirmationOutcome.ProceedAlways &&
+        EDIT_TOOL_NAMES.has(tool.name));
+}
+/**
+ * Handles policy updates for standard tools (Shell, Info, etc.), including
+ * session-level and persistent approvals.
+ */
+async function handleStandardPolicyUpdate(tool, outcome, confirmationDetails, messageBus) {
+    if (outcome === ToolConfirmationOutcome.ProceedAlways ||
+        outcome === ToolConfirmationOutcome.ProceedAlwaysAndSave) {
+        const options = {};
+        if (confirmationDetails?.type === 'exec') {
+            options.commandPrefix = confirmationDetails.rootCommands;
+        }
+        await messageBus.publish({
+            type: MessageBusType.UPDATE_POLICY,
+            toolName: tool.name,
+            persist: outcome === ToolConfirmationOutcome.ProceedAlwaysAndSave,
+            ...options,
+        });
+    }
+}
+/**
+ * Handles policy updates specifically for MCP tools, including session-level
+ * and persistent approvals.
+ */
+async function handleMcpPolicyUpdate(tool, outcome, confirmationDetails, messageBus) {
+    const isMcpAlways = outcome === ToolConfirmationOutcome.ProceedAlways ||
+        outcome === ToolConfirmationOutcome.ProceedAlwaysTool ||
+        outcome === ToolConfirmationOutcome.ProceedAlwaysServer ||
+        outcome === ToolConfirmationOutcome.ProceedAlwaysAndSave;
+    if (!isMcpAlways) {
+        return;
+    }
+    let toolName = tool.name;
+    const persist = outcome === ToolConfirmationOutcome.ProceedAlwaysAndSave;
+    // If "Always allow all tools from this server", use the wildcard pattern
+    if (outcome === ToolConfirmationOutcome.ProceedAlwaysServer) {
+        toolName = `${confirmationDetails.serverName}__*`;
+    }
+    await messageBus.publish({
+        type: MessageBusType.UPDATE_POLICY,
+        toolName,
+        mcpName: confirmationDetails.serverName,
+        persist,
+    });
+}
+//# sourceMappingURL=policy.js.map

package/dist/src/scheduler/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/scheduler/policy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,YAAY,EACZ,cAAc,GAEf,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,cAAc,GAEf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,uBAAuB,GAGxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAGzD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAA4B,EAC5B,MAAc;IAEd,MAAM,UAAU,GACd,QAAQ,CAAC,IAAI,YAAY,iBAAiB;QACxC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU;QAC1B,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,MAAM,GAAG,MAAM,MAAM;SACxB,eAAe,EAAE;SACjB,KAAK,CACJ,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAC5D,UAAU,CACX,CAAC;IAEJ,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAE5B;;;OAGG;IACH,IAAI,QAAQ,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,uBACE,QAAQ,CAAC,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC,IAC7C,+EAA+E,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAwB,EACxB,OAAgC,EAChC,mBAAgE,EAChE,IAAgD;IAEhD,+BAA+B;IAC/B,IAAI,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IAED,0BAA0B;IAC1B,IAAI,mBAAmB,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;QACxC,MAAM,qBAAqB,CACzB,IAAI,EACJ,OAAO,EACP,mBAAmB,EACnB,IAAI,CAAC,UAAU,CAChB,CAAC;QACF,OAAO;IACT,CAAC;IAED,uCAAuC;IACvC,MAAM,0BAA0B,CAC9B,IAAI,EACJ,OAAO,EACP,mBAAmB,EACnB,IAAI,CAAC,UAAU,CAChB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAC3B,IAAwB,EACxB,OAAgC;IAEhC,sEAAsE;IACtE,uEAAuE;IACvE,SAAS;IACT,OAAO,CACL,OAAO,KAAK,uBAAuB,CAAC,aAAa;QACjD,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,0BAA0B,CACvC,IAAwB,EACxB,OAAgC,EAChC,mBAAgE,EAChE,UAAsB;IAEtB,IACE,OAAO,KAAK,uBAAuB,CAAC,aAAa;QACjD,OAAO,KAAK,uBAAuB,CAAC,oBAAoB,EACxD,CAAC;QACD,MAAM,OAAO,GAAwB,EAAE,CAAC;QAExC,IAAI,mBAAmB,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACzC,OAAO,CAAC,aAAa,GAAG,mBAAmB,CAAC,YAAY,CAAC;QAC3D,CAAC;QAED,MAAM,UAAU,CAAC,OAAO,CAAC;YACvB,IAAI,EAAE,cAAc,CAAC,aAAa;YAClC,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,OAAO,EAAE,OAAO,KAAK,uBAAuB,CAAC,oBAAoB;YACjE,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAClC,IAAwB,EACxB,OAAgC,EAChC,mBAGC,EACD,UAAsB;IAEtB,MAAM,WAAW,GACf,OAAO,KAAK,uBAAuB,CAAC,aAAa;QACjD,OAAO,KAAK,uBAAuB,CAAC,iBAAiB;QACrD,OAAO,KAAK,uBAAuB,CAAC,mBAAmB;QACvD,OAAO,KAAK,uBAAuB,CAAC,oBAAoB,CAAC;IAE3D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,OAAO,KAAK,uBAAuB,CAAC,oBAAoB,CAAC;IAEzE,yEAAyE;IACzE,IAAI,OAAO,KAAK,uBAAuB,CAAC,mBAAmB,EAAE,CAAC;QAC5D,QAAQ,GAAG,GAAG,mBAAmB,CAAC,UAAU,KAAK,CAAC;IACpD,CAAC;IAED,MAAM,UAAU,CAAC,OAAO,CAAC;QACvB,IAAI,EAAE,cAAc,CAAC,aAAa;QAClC,QAAQ;QACR,OAAO,EAAE,mBAAmB,CAAC,UAAU;QACvC,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}