@aria-cli/tools 1.0.0

package/dist-cjs/network-runtime/runtime-bootstrap-contract.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RuntimeBootstrapRecordSchema = exports.RuntimeBootstrapIdentitySchema = exports.RuntimeBootstrapTlsSchema = exports.RuntimeBootstrapControlEndpointSchema = exports.RuntimeBootstrapPhaseSchema = exports.RuntimeBootstrapRevisionSchema = void 0;
+const zod_1 = require("zod");
+const address_types_js_1 = require("./address-types.js");
+const protocol_schemas_js_1 = require("./protocol-schemas.js");
+const NonEmptyTrimmedStringSchema = zod_1.z.string().trim().min(1);
+const NonBlankVerbatimStringSchema = zod_1.z
+    .string()
+    .min(1)
+    .refine((value) => value.trim().length > 0);
+exports.RuntimeBootstrapRevisionSchema = zod_1.z.number().int().nonnegative();
+exports.RuntimeBootstrapPhaseSchema = zod_1.z.enum([
+    "starting",
+    "tls_bound",
+    "control_ready",
+    "network_ready",
+    "mesh_ready",
+    "degraded",
+    "stopped",
+]);
+exports.RuntimeBootstrapControlEndpointSchema = zod_1.z
+    .object({
+    host: NonEmptyTrimmedStringSchema,
+    port: zod_1.z.number().int().min(1).max(65535),
+})
+    .strict();
+exports.RuntimeBootstrapTlsSchema = zod_1.z
+    .object({
+    caFingerprint: address_types_js_1.TlsCaFingerprintSchema,
+    caCertPem: NonBlankVerbatimStringSchema,
+    principalIdentity: address_types_js_1.PrincipalFingerprintSchema,
+    loopbackIdentity: address_types_js_1.LoopbackTlsIdentitySchema,
+})
+    .strict();
+exports.RuntimeBootstrapIdentitySchema = zod_1.z
+    .object({
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    transportPublicKey: address_types_js_1.PeerTransportIdSchema,
+    transportEndpoint: address_types_js_1.TransportEndpointAdvertisementSchema,
+    displayNameSnapshot: NonEmptyTrimmedStringSchema.optional(),
+})
+    .strict();
+exports.RuntimeBootstrapRecordSchema = zod_1.z
+    .object({
+    nodeId: address_types_js_1.NodeIdSchema,
+    runtimeId: address_types_js_1.RuntimeIdSchema,
+    arionName: NonEmptyTrimmedStringSchema.optional(),
+    ownerGeneration: address_types_js_1.OwnerGenerationSchema,
+    bootstrapRevision: exports.RuntimeBootstrapRevisionSchema,
+    phase: exports.RuntimeBootstrapPhaseSchema,
+    protocolVersion: protocol_schemas_js_1.NetworkRuntimeProtocolVersionSchema,
+    controlEndpoint: exports.RuntimeBootstrapControlEndpointSchema,
+    displayNameSnapshot: NonEmptyTrimmedStringSchema.optional(),
+    signingPublicKey: address_types_js_1.SigningPublicKeySchema,
+    transportPublicKey: address_types_js_1.PeerTransportIdSchema,
+    transportEndpoint: address_types_js_1.TransportEndpointAdvertisementSchema,
+    tls: exports.RuntimeBootstrapTlsSchema,
+    publishedAt: NonEmptyTrimmedStringSchema,
+    degradedReason: NonEmptyTrimmedStringSchema.optional(),
+    failedPhase: exports.RuntimeBootstrapPhaseSchema.optional(),
+})
+    .strict();
+//# sourceMappingURL=runtime-bootstrap-contract.js.map

package/dist-cjs/network-runtime/runtime-bootstrap-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-bootstrap-contract.js","sourceRoot":"","sources":["../../src/network-runtime/runtime-bootstrap-contract.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,yDAU4B;AAC5B,+DAA4E;AAE5E,MAAM,2BAA2B,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC7D,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAEjC,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAGhE,QAAA,2BAA2B,GAAG,OAAC,CAAC,IAAI,CAAC;IAChD,UAAU;IACV,WAAW;IACX,eAAe;IACf,eAAe;IACf,YAAY;IACZ,UAAU;IACV,SAAS;CACV,CAAC,CAAC;AAGU,QAAA,qCAAqC,GAAG,OAAC;KACnD,MAAM,CAAC;IACN,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAGC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,aAAa,EAAE,yCAAsB;IACrC,SAAS,EAAE,4BAA4B;IACvC,iBAAiB,EAAE,6CAA0B;IAC7C,gBAAgB,EAAE,4CAAyB;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAGC,QAAA,8BAA8B,GAAG,OAAC;KAC5C,MAAM,CAAC;IACN,gBAAgB,EAAE,yCAAsB;IACxC,kBAAkB,EAAE,wCAAqB;IACzC,iBAAiB,EAAE,uDAAoC;IACvD,mBAAmB,EAAE,2BAA2B,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAGC,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,MAAM,EAAE,+BAAY;IACpB,SAAS,EAAE,kCAAe;IAC1B,SAAS,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IACjD,eAAe,EAAE,wCAAqB;IACtC,iBAAiB,EAAE,sCAA8B;IACjD,KAAK,EAAE,mCAA2B;IAClC,eAAe,EAAE,yDAAmC;IACpD,eAAe,EAAE,6CAAqC;IACtD,mBAAmB,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IAC3D,gBAAgB,EAAE,yCAAsB;IACxC,kBAAkB,EAAE,wCAAqB;IACzC,iBAAiB,EAAE,uDAAoC;IACvD,GAAG,EAAE,iCAAyB;IAC9B,WAAW,EAAE,2BAA2B;IACxC,cAAc,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IACtD,WAAW,EAAE,mCAA2B,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist-cjs/outlook/desktop-session.d.ts

@@ -0,0 +1,68 @@
+export interface OutlookMessageView {
+    id: string;
+    subject: string;
+    from: {
+        name: string;
+        email: string;
+    };
+    toRecipients: {
+        name: string;
+        email: string;
+    }[];
+    receivedDateTime: string;
+    isRead: boolean;
+    hasAttachments: boolean;
+    bodyPreview: string;
+    conversationId: string;
+}
+export interface OutlookMessageDetail extends OutlookMessageView {
+    body: {
+        contentType: string;
+        content: string;
+    };
+    ccRecipients: {
+        name: string;
+        email: string;
+    }[];
+    importance: string;
+}
+export interface OutlookListMessagesResult {
+    accountEmail: string;
+    folder: string;
+    messages: OutlookMessageView[];
+    totalCount: number;
+}
+export interface OutlookSendResult {
+    accountEmail: string;
+    status: "sent";
+}
+export interface OutlookDesktopClient {
+    getAccountEmail(): string;
+    listMessages(input: {
+        folder?: string;
+        limit?: number;
+        filter?: string;
+        search?: string;
+    }): Promise<OutlookListMessagesResult>;
+    getMessage(input: {
+        messageId: string;
+    }): Promise<OutlookMessageDetail>;
+    sendMessage(input: {
+        to: string[];
+        cc?: string[];
+        subject: string;
+        body: string;
+        bodyType?: "text" | "html";
+    }): Promise<OutlookSendResult>;
+    replyMessage(input: {
+        messageId: string;
+        body: string;
+        bodyType?: "text" | "html";
+        replyAll?: boolean;
+    }): Promise<OutlookSendResult>;
+    close(): Promise<void>;
+}
+export declare function createOutlookDesktopClient(opts?: {
+    accountHint?: string;
+    bootstrapTimeoutMs?: number;
+}): Promise<OutlookDesktopClient>;

package/dist-cjs/outlook/desktop-session.js

@@ -0,0 +1,319 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOutlookDesktopClient = createOutlookDesktopClient;
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_fs_1 = require("node:fs");
+const OUTLOOK_SESSION_DIR = node_path_1.default.join(node_os_1.default.homedir(), ".aria", "outlook-session");
+const OUTLOOK_TOKEN_CACHE = node_path_1.default.join(node_os_1.default.homedir(), ".aria", "cache", "outlook-token.json");
+const OUTLOOK_WEB_URL = "https://outlook.office.com/mail/";
+// Outlook web uses outlook.office.com-scoped tokens, not graph.microsoft.com.
+// The Outlook REST v2 API at outlook.office.com/api/v2.0 accepts these tokens.
+const OUTLOOK_REST_API_BASE = "https://outlook.office.com/api/v2.0";
+const DEFAULT_BOOTSTRAP_TIMEOUT_MS = 60_000;
+async function loadCachedToken() {
+    try {
+        const raw = await node_fs_1.promises.readFile(OUTLOOK_TOKEN_CACHE, "utf-8");
+        const cached = JSON.parse(raw);
+        // Token valid if >5 min remaining
+        if (cached.bearerToken && cached.expiresAt > Date.now() + 5 * 60_000) {
+            return cached;
+        }
+    }
+    catch {
+        // no cache or invalid
+    }
+    return null;
+}
+async function saveCachedToken(token, email) {
+    // Decode JWT to get expiry
+    let exp = Date.now() + 60 * 60_000; // default 1h
+    try {
+        const part = token.split(".")[1];
+        if (!part)
+            throw new Error("no payload");
+        const payload = JSON.parse(Buffer.from(part, "base64").toString());
+        if (payload.exp)
+            exp = payload.exp * 1000;
+    }
+    catch {
+        /* best-effort */
+    }
+    const cached = { bearerToken: token, accountEmail: email, expiresAt: exp };
+    await node_fs_1.promises.mkdir(node_path_1.default.dirname(OUTLOOK_TOKEN_CACHE), { recursive: true });
+    await node_fs_1.promises.writeFile(OUTLOOK_TOKEN_CACHE, JSON.stringify(cached, null, 2));
+}
+// Outlook REST v2 returns PascalCase keys (Subject, From, EmailAddress)
+// while Graph API uses camelCase (subject, from, emailAddress).
+// Helper to read a field with either casing.
+function field(obj, camelKey) {
+    if (camelKey in obj)
+        return obj[camelKey];
+    const pascalKey = camelKey.charAt(0).toUpperCase() + camelKey.slice(1);
+    return obj[pascalKey];
+}
+function fieldStr(obj, camelKey) {
+    const v = field(obj, camelKey);
+    return typeof v === "string" ? v : "";
+}
+function parseRecipient(recipient) {
+    const emailAddress = field(recipient, "emailAddress") ?? null;
+    if (!emailAddress || typeof emailAddress !== "object")
+        return null;
+    return {
+        name: fieldStr(emailAddress, "name"),
+        email: fieldStr(emailAddress, "address"),
+    };
+}
+function parseRecipients(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    return raw
+        .filter((r) => !!r && typeof r === "object")
+        .map(parseRecipient)
+        .filter((r) => r !== null);
+}
+function toMessageView(msg) {
+    const fromRaw = field(msg, "from");
+    const from = fromRaw && typeof fromRaw === "object"
+        ? parseRecipient(fromRaw)
+        : null;
+    return {
+        id: fieldStr(msg, "id") || fieldStr(msg, "Id"),
+        subject: fieldStr(msg, "subject"),
+        from: from ?? { name: "", email: "" },
+        toRecipients: parseRecipients(field(msg, "toRecipients")),
+        receivedDateTime: fieldStr(msg, "receivedDateTime"),
+        isRead: field(msg, "isRead") === true,
+        hasAttachments: field(msg, "hasAttachments") === true,
+        bodyPreview: fieldStr(msg, "bodyPreview"),
+        conversationId: fieldStr(msg, "conversationId"),
+    };
+}
+function toMessageDetail(msg) {
+    const view = toMessageView(msg);
+    const bodyRaw = field(msg, "body");
+    const body = bodyRaw && typeof bodyRaw === "object" ? bodyRaw : {};
+    return {
+        ...view,
+        body: {
+            contentType: fieldStr(body, "contentType") || "text",
+            content: fieldStr(body, "content"),
+        },
+        ccRecipients: parseRecipients(field(msg, "ccRecipients")),
+        importance: fieldStr(msg, "importance") || "normal",
+    };
+}
+async function waitForMailBearerToken(page, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            page.off("request", handleRequest);
+            reject(new Error("Timed out waiting for a Mail-scoped bearer token. " +
+                "Ensure you are logged in to outlook.office.com."));
+        }, timeoutMs);
+        const seen = new Set();
+        const handleRequest = (request) => {
+            const authHeader = request.headers()["authorization"];
+            if (!authHeader || !authHeader.startsWith("Bearer "))
+                return;
+            const bearerToken = authHeader.slice(7);
+            const dedup = bearerToken.substring(0, 30);
+            if (seen.has(dedup))
+                return;
+            seen.add(dedup);
+            // Decode JWT payload to extract email and scopes
+            let accountEmail = "";
+            let scp = "";
+            try {
+                const payloadB64 = bearerToken.split(".")[1];
+                if (payloadB64) {
+                    const payload = JSON.parse(Buffer.from(payloadB64, "base64url").toString("utf8"));
+                    scp = typeof payload.scp === "string" ? payload.scp : "";
+                    accountEmail =
+                        typeof payload.upn === "string"
+                            ? payload.upn
+                            : typeof payload.preferred_username === "string"
+                                ? payload.preferred_username
+                                : typeof payload.unique_name === "string"
+                                    ? payload.unique_name
+                                    : "";
+                }
+            }
+            catch {
+                // JWT decode is best-effort
+            }
+            // Only accept tokens with Mail.Read scope (from outlook.cloud.microsoft)
+            if (!scp.includes("Mail.Read"))
+                return;
+            clearTimeout(timer);
+            page.off("request", handleRequest);
+            resolve({ bearerToken, accountEmail });
+        };
+        page.on("request", handleRequest);
+    });
+}
+// Stateless client using a cached bearer token (no Playwright needed)
+function createStatelessClient(bearerToken, accountEmail) {
+    const invokeApi = async (method, endpoint, body) => {
+        const url = `${OUTLOOK_REST_API_BASE}${endpoint}`;
+        const headers = {
+            Authorization: `Bearer ${bearerToken}`,
+            "Content-Type": "application/json",
+        };
+        const resp = await fetch(url, {
+            method,
+            headers,
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        if (resp.status === 204)
+            return { status: 204 };
+        const text = await resp.text();
+        let json;
+        try {
+            json = JSON.parse(text);
+        }
+        catch {
+            throw new Error(`Outlook API ${method} ${endpoint} returned non-JSON (HTTP ${resp.status}).`);
+        }
+        if (resp.status >= 400) {
+            const error = json.error && typeof json.error === "object" ? json.error : {};
+            const code = typeof error.code === "string" ? error.code : `http_${resp.status}`;
+            const message = typeof error.message === "string" ? error.message : "Unknown error";
+            throw new Error(`Outlook API ${method} ${endpoint} failed: ${code} — ${message}`);
+        }
+        return json;
+    };
+    return buildClientMethods(invokeApi, accountEmail, async () => {
+        /* no-op close */
+    });
+}
+async function createOutlookDesktopClient(opts) {
+    const timeoutMs = opts?.bootstrapTimeoutMs ?? DEFAULT_BOOTSTRAP_TIMEOUT_MS;
+    // Strategy 1: Use cached token if still valid (no Playwright needed)
+    const cached = await loadCachedToken();
+    if (cached) {
+        return createStatelessClient(cached.bearerToken, cached.accountEmail);
+    }
+    // Strategy 2: Launch Playwright headful to get a fresh token via SSO
+    // Must be headful — Microsoft SSO blocks headless Chromium
+    await node_fs_1.promises.mkdir(OUTLOOK_SESSION_DIR, { recursive: true });
+    const playwright = await Promise.resolve().then(() => __importStar(require("playwright")));
+    const context = await playwright.chromium.launchPersistentContext(OUTLOOK_SESSION_DIR, {
+        headless: false,
+        args: ["--start-maximized"],
+        viewport: null,
+    });
+    const page = context.pages()[0] ?? (await context.newPage());
+    const bootstrapPromise = waitForMailBearerToken(page, timeoutMs);
+    await page.goto(OUTLOOK_WEB_URL, {
+        waitUntil: "domcontentloaded",
+        timeout: timeoutMs,
+    });
+    const { bearerToken, accountEmail } = await bootstrapPromise;
+    // Cache the token for subsequent calls (avoids launching Playwright)
+    await saveCachedToken(bearerToken, accountEmail);
+    // Close browser immediately — we have the token, use stateless client
+    await page.close().catch(() => undefined);
+    await context.close().catch(() => undefined);
+    return createStatelessClient(bearerToken, accountEmail);
+}
+function buildClientMethods(invokeApi, accountEmail, closeFn) {
+    return {
+        getAccountEmail: () => accountEmail,
+        listMessages: async ({ folder = "inbox", limit = 20, filter, search }) => {
+            const params = new URLSearchParams();
+            params.set("$top", String(Math.max(1, Math.min(limit, 50))));
+            params.set("$select", "Id,Subject,From,ToRecipients,ReceivedDateTime,IsRead,HasAttachments,BodyPreview,ConversationId");
+            params.set("$orderby", "ReceivedDateTime desc");
+            if (filter)
+                params.set("$filter", filter);
+            if (search)
+                params.set("$search", `"${search}"`);
+            const endpoint = `/me/mailFolders/${encodeURIComponent(folder)}/messages?${params.toString()}`;
+            const json = await invokeApi("GET", endpoint);
+            const rawMessages = Array.isArray(json.value) ? json.value : [];
+            const messages = rawMessages
+                .filter((m) => !!m && typeof m === "object")
+                .map(toMessageView);
+            return {
+                accountEmail,
+                folder,
+                messages,
+                totalCount: typeof json["@odata.count"] === "number" ? json["@odata.count"] : messages.length,
+            };
+        },
+        getMessage: async ({ messageId }) => {
+            const json = await invokeApi("GET", `/me/messages/${encodeURIComponent(messageId)}`);
+            return toMessageDetail(json);
+        },
+        sendMessage: async ({ to, cc, subject, body, bodyType = "text" }) => {
+            const toRecipients = to.map((email) => ({
+                EmailAddress: { Address: email },
+            }));
+            const ccRecipients = (cc ?? []).map((email) => ({
+                EmailAddress: { Address: email },
+            }));
+            await invokeApi("POST", "/me/sendMail", {
+                Message: {
+                    Subject: subject,
+                    Body: { ContentType: bodyType === "html" ? "HTML" : "Text", Content: body },
+                    ToRecipients: toRecipients,
+                    ...(ccRecipients.length > 0 ? { CcRecipients: ccRecipients } : {}),
+                },
+            });
+            return { accountEmail, status: "sent" };
+        },
+        replyMessage: async ({ messageId, body, bodyType = "text", replyAll = false }) => {
+            const replyMethod = replyAll ? "ReplyAll" : "Reply";
+            await invokeApi("POST", `/me/messages/${encodeURIComponent(messageId)}/${replyMethod}`, {
+                Comment: body,
+                ...(bodyType === "html"
+                    ? {
+                        Message: {
+                            Body: { ContentType: "HTML", Content: body },
+                        },
+                    }
+                    : {}),
+            });
+            return { accountEmail, status: "sent" };
+        },
+        close: closeFn,
+    };
+}
+//# sourceMappingURL=desktop-session.js.map

package/dist-cjs/outlook/desktop-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktop-session.js","sourceRoot":"","sources":["../../src/outlook/desktop-session.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyRA,gEAwCC;AAjUD,sDAAyB;AACzB,0DAA6B;AAC7B,qCAAyC;AAEzC,MAAM,mBAAmB,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAChF,MAAM,mBAAmB,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAC5F,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAC3D,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,qCAAqC,CAAC;AACpE,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAQ5C,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QAC9C,kCAAkC;QAClC,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC;YACrE,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,KAAa;IACzD,2BAA2B;IAC3B,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,aAAa;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,GAAG;YAAE,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,MAAM,MAAM,GAAgB,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACxF,MAAM,kBAAE,CAAC,KAAK,CAAC,mBAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,kBAAE,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAyDD,wEAAwE;AACxE,gEAAgE;AAChE,6CAA6C;AAC7C,SAAS,KAAK,CAAC,GAA4B,EAAE,QAAgB;IAC3D,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,GAA4B,EAAE,QAAgB;IAC9D,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CACrB,SAAkC;IAElC,MAAM,YAAY,GAAI,KAAK,CAAC,SAAS,EAAE,cAAc,CAA6B,IAAI,IAAI,CAAC;IAC3F,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnE,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QACpC,KAAK,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,GAAG;SACP,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;SACzE,GAAG,CAAC,cAAc,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAwC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,GAA4B;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GACR,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACpC,CAAC,CAAC,cAAc,CAAC,OAAkC,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC;IACX,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;QAC9C,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;QACjC,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACzD,gBAAgB,EAAE,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;QACnD,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,IAAI;QACrC,cAAc,EAAE,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,KAAK,IAAI;QACrD,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;QACzC,cAAc,EAAE,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAA4B;IACnD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAmC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE;YACJ,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,MAAM;YACpD,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;SACnC;QACD,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACzD,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,QAAQ;KACpD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,IASC,EACD,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACnC,MAAM,CACJ,IAAI,KAAK,CACP,oDAAoD;gBAClD,iDAAiD,CACpD,CACF,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,MAAM,aAAa,GAAG,CAAC,OAA6D,EAAE,EAAE;YACtF,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;YACtD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO;YAE7D,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAExC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO;YAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAEhB,iDAAiD;YACjD,IAAI,YAAY,GAAG,EAAE,CAAC;YACtB,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3B,CAAC;oBAC7B,GAAG,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzD,YAAY;wBACV,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;4BAC7B,CAAC,CAAC,OAAO,CAAC,GAAG;4BACb,CAAC,CAAC,OAAO,OAAO,CAAC,kBAAkB,KAAK,QAAQ;gCAC9C,CAAC,CAAC,OAAO,CAAC,kBAAkB;gCAC5B,CAAC,CAAC,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;oCACvC,CAAC,CAAC,OAAO,CAAC,WAAW;oCACrB,CAAC,CAAC,EAAE,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;YAED,yEAAyE;YACzE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO;YAEvC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACnC,OAAO,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC;QAEF,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,SAAS,qBAAqB,CAAC,WAAmB,EAAE,YAAoB;IACtE,MAAM,SAAS,GAAG,KAAK,EACrB,MAAsB,EACtB,QAAgB,EAChB,IAA8B,EACI,EAAE;QACpC,MAAM,GAAG,GAAG,GAAG,qBAAqB,GAAG,QAAQ,EAAE,CAAC;QAClD,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC5B,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,IAAI,QAAQ,4BAA4B,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACjF,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,IAAI,QAAQ,YAAY,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,IAAI,EAAE;QAC5D,iBAAiB;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAAC,IAGhD;IACC,MAAM,SAAS,GAAG,IAAI,EAAE,kBAAkB,IAAI,4BAA4B,CAAC;IAE3E,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;IACvC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACxE,CAAC;IAED,qEAAqE;IACrE,2DAA2D;IAC3D,MAAM,kBAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,wDAAa,YAAY,GAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,uBAAuB,CAAC,mBAAmB,EAAE;QACrF,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,CAAC,mBAAmB,CAAC;QAC3B,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAE7D,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;QAC/B,SAAS,EAAE,kBAAkB;QAC7B,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IAEH,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC;IAE7D,qEAAqE;IACrE,MAAM,eAAe,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAEjD,sEAAsE;IACtE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE7C,OAAO,qBAAqB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAC1D,CAAC;AAQD,SAAS,kBAAkB,CACzB,SAAqB,EACrB,YAAoB,EACpB,OAA4B;IAE5B,OAAO;QACL,eAAe,EAAE,GAAG,EAAE,CAAC,YAAY;QAEnC,YAAY,EAAE,KAAK,EAAE,EAAE,MAAM,GAAG,OAAO,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;YACvE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CACR,SAAS,EACT,gGAAgG,CACjG,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;YAChD,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,MAAM,GAAG,CAAC,CAAC;YAEjD,MAAM,QAAQ,GAAG,mBAAmB,kBAAkB,CAAC,MAAM,CAAC,aAAa,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC/F,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAE9C,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,WAAW;iBACzB,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;iBACzE,GAAG,CAAC,aAAa,CAAC,CAAC;YAEtB,OAAO;gBACL,YAAY;gBACZ,MAAM;gBACN,QAAQ;gBACR,UAAU,EACR,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM;aACpF,CAAC;QACJ,CAAC;QAED,UAAU,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACrF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,EAAE,EAAE,EAAE;YAClE,MAAM,YAAY,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACtC,YAAY,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;aACjC,CAAC,CAAC,CAAC;YACJ,MAAM,YAAY,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC9C,YAAY,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;aACjC,CAAC,CAAC,CAAC;YAEJ,MAAM,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE;gBACtC,OAAO,EAAE;oBACP,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;oBAC3E,YAAY,EAAE,YAAY;oBAC1B,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnE;aACF,CAAC,CAAC;YAEH,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC;QACnD,CAAC;QAED,YAAY,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,EAAE,QAAQ,GAAG,KAAK,EAAE,EAAE,EAAE;YAC/E,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD,MAAM,SAAS,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,IAAI,WAAW,EAAE,EAAE;gBACtF,OAAO,EAAE,IAAI;gBACb,GAAG,CAAC,QAAQ,KAAK,MAAM;oBACrB,CAAC,CAAC;wBACE,OAAO,EAAE;4BACP,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;yBAC7C;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YAEH,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC;QACnD,CAAC;QAED,KAAK,EAAE,OAAO;KACf,CAAC;AACJ,CAAC"}

package/dist-cjs/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/dist-cjs/policy.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Tool Policy Engine
+ *
+ * Evaluates whether a tool is allowed based on allow/deny lists with group expansion.
+ * Supports layered policy merging (intersection semantics) for arion + RunOptions policies.
+ */
+export interface ToolPolicy {
+    /** Tool names or group names to allow. Empty array or undefined = allow all */
+    allow?: string[];
+    /** Tool names or group names to deny. Applied after allow. Deny wins. */
+    deny?: string[];
+    /**
+     * Internal marker used by policy merging:
+     * when true, treat allow (even empty) as an explicit restriction.
+     * This preserves deny-all semantics for empty intersections.
+     */
+    restrictAllow?: boolean;
+}
+/** Built-in tool groups */
+export declare const TOOL_GROUPS: Record<string, string[]>;
+/**
+ * Expand group references in a policy list.
+ * "group:memory" → ["remember", "recall", "forget", "reflect"]
+ * Individual tool names pass through unchanged.
+ * Unknown group names are ignored (treated as empty).
+ */
+export declare function expandGroups(names: string[]): Set<string>;
+/**
+ * Evaluate whether a tool is allowed by a policy.
+ * Rules:
+ * 1. If allow is empty/undefined and restrictAllow is false/undefined
+ *    → all tools allowed (then check deny)
+ * 2. If allow is non-empty OR restrictAllow=true
+ *    → only listed tools/groups allowed (empty allow + restrictAllow=true denies all)
+ * 3. Deny always wins over allow
+ */
+export declare function isToolAllowed(toolName: string, policy: ToolPolicy): boolean;
+/**
+ * Merge two policies (intersection). Used for layered evaluation:
+ * arion policy ∩ RunOptions policy = effective policy.
+ * A tool must be allowed by BOTH layers.
+ */
+export declare function mergePolicies(a: ToolPolicy, b: ToolPolicy): ToolPolicy;