@burdenoff/microfe-botmanor 2026.1027.3 → 2026.1029.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. package/dist/botlit/components/RetentionStatusPanel.js +95 -0
  2. package/dist/botlit/components/RetentionStatusPanel.js.map +1 -0
  3. package/dist/botlit/hooks/index.js +1 -0
  4. package/dist/botlit/hooks/useRetention.js +31 -0
  5. package/dist/botlit/hooks/useRetention.js.map +1 -0
  6. package/dist/botlit/pages/PoliciesPage.js +100 -98
  7. package/dist/botlit/pages/PoliciesPage.js.map +1 -1
  8. package/dist/botlit/pages/PolicyDetailPage.js +333 -301
  9. package/dist/botlit/pages/PolicyDetailPage.js.map +1 -1
  10. package/dist/botlit/utils/policyConfig.js +67 -42
  11. package/dist/botlit/utils/policyConfig.js.map +1 -1
  12. package/dist/generated/global-types.js.map +1 -1
  13. package/dist/generated/wspace-operations.js +90 -54
  14. package/dist/generated/wspace-operations.js.map +1 -1
  15. package/dist/generated/wspace-types.js.map +1 -1
  16. package/package.json +4 -4
package/dist/botlit/pages/PolicyDetailPage.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"PolicyDetailPage.js","names":[],"sources":["../../../src/botlit/pages/PolicyDetailPage.tsx"],"sourcesContent":["/**\n * Policy Detail Page\n * @module botlit/pages\n */\n\nimport type { FC } from 'react';\nimport { useState } from 'react';\nimport { useParams } from 'react-router';\nimport { toast } from 'sonner';\nimport { useBotlit } from '../providers/BotlitProvider';\nimport { isNative, nativeImpact, nativeNotify } from '../../utils/nativeBridge';\nimport {\n ArrowLeft,\n Shield,\n Settings,\n Save,\n AlertTriangle,\n Wrench,\n Database,\n FileText,\n DollarSign,\n Clock,\n Trash2,\n Edit,\n Power,\n} from 'lucide-react';\nimport { PageLayout } from '../components/PageLayout';\nimport { PagePurpose } from '@burdenoff/fe-libs/ui';\nimport { EmptyState } from '../components/EmptyState';\nimport { Card, CardHeader, CardTitle, CardContent, CardDescription } from '../components/Card';\nimport { Button } from '../components/Button';\nimport { Input, Textarea, FormField } from '../components/Input';\nimport { StatusBadge, Badge } from '../components/Badge';\nimport { usePolicy, useCreatePolicy, useUpdatePolicy, useDeletePolicy } from '../hooks';\nimport { formatRelativeTime } from '../utils/formatters';\nimport { toUnion } from '../utils/unions';\nimport type { PolicyType, Visibility } from '../types';\nimport {\n A2A_TRUST_LEVELS,\n CREATABLE_POLICY_TYPES,\n EMPTY_POLICY_FORM,\n TOOL_RISK_LEVELS,\n buildPolicyConfig,\n isCreatablePolicyType,\n unenforcedConfigKeys,\n type CreatablePolicyType,\n type PolicyFormState,\n} from '../utils/policyConfig';\nimport { BOTMANOR_PERMISSIONS, BotmanorPermissionGate } from '../permissions';\n\n/**\n * Policy types the UI can render; the column itself is a free-form String.\n * DATA and RETENTION have no runtime evaluator: existing rows still render,\n * but the editor only creates CREATABLE_POLICY_TYPES (BOFF-9683).\n */\nconst POLICY_TYPES: PolicyType[] = [\n 'CONTENT',\n 'TOOL',\n 'DATA',\n 'RESPONSE',\n 'BUDGET',\n 'RATE_LIMIT',\n 'RETENTION',\n];\n\nconst VISIBILITIES: Visibility[] = ['PRIVATE', 'WORKSPACE', 'PUBLIC'];\n\nconst SELECT_CLASS =\n 'flex h-10 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm';\n\ninterface PolicyDetailPageProps {\n isNew?: boolean;\n}\n\nconst PolicyTypeIcon: FC<{ type: PolicyType }> = ({ type }) => {\n const icons: Record<PolicyType, React.ReactElement> = {\n CONTENT: <AlertTriangle size={18} />,\n TOOL: <Wrench size={18} />,\n DATA: <Database size={18} />,\n RESPONSE: <FileText size={18} />,\n BUDGET: <DollarSign size={18} />,\n RATE_LIMIT: <Clock size={18} />,\n RETENTION: <Trash2 size={18} />,\n };\n return icons[type] || <Shield size={18} />;\n};\n\nconst PolicyTypeLabel: Record<PolicyType, string> = {\n CONTENT: 'Content Policy',\n TOOL: 'Tool Policy',\n DATA: 'Data Policy',\n RESPONSE: 'Response & Model Policy',\n BUDGET: 'Budget Policy',\n RATE_LIMIT: 'Rate Limit Policy',\n RETENTION: 'Retention Policy',\n};\n\nexport const PolicyDetailPage: FC<PolicyDetailPageProps> = ({ isNew }) => {\n const { policyId } = useParams();\n const { navigateTo } = useBotlit();\n const { data: policy, loading, refetch: refetchPolicy } = usePolicy(isNew ? undefined : policyId);\n const { create: createPolicy, loading: createLoading } = useCreatePolicy();\n const { update: updatePolicy, loading: updateLoading } = useUpdatePolicy();\n const { remove: deletePolicy, loading: deleteLoading } = useDeletePolicy();\n\n const [isEditing, setIsEditing] = useState(false);\n const [showDeleteConfirm, setShowDeleteConfirm] = useState(false);\n\n const [formData, setFormData] = useState({\n name: '',\n description: '',\n type: 'CONTENT' as CreatablePolicyType,\n visibility: 'PRIVATE' as Visibility,\n });\n\n // Edit-form fields: name, description and visibility of an existing policy.\n const [editData, setEditData] = useState({\n name: '',\n description: '',\n visibility: 'PRIVATE' as Visibility,\n });\n\n // Type-specific config. Every field maps to a key the runtime enforces.\n const [policyForm, setPolicyForm] = useState<PolicyFormState>(EMPTY_POLICY_FORM);\n const [configError, setConfigError] = useState<string | null>(null);\n\n const updateForm = <K extends keyof PolicyFormState>(\n section: K,\n patch: Partial<PolicyFormState[K]>\n ) => {\n setConfigError(null);\n setPolicyForm((current) => ({ ...current, [section]: { ...current[section], ...patch } }));\n };\n\n // New policies start as drafts unless the author chooses to enforce them now.\n const [activateOnCreate, setActivateOnCreate] = useState(false);\n\n const handleCreate = async () => {\n if (!formData.name) return;\n\n const built = buildPolicyConfig(formData.type, policyForm);\n if (!built.ok) {\n setConfigError(built.error);\n toast.error(built.error);\n return;\n }\n\n try {\n await createPolicy({\n name: formData.name,\n description: formData.description,\n type: formData.type,\n visibility: formData.visibility,\n status: activateOnCreate ? 'ACTIVE' : 'DRAFT',\n config: built.config as Record<string, unknown>,\n });\n } catch (err) {\n toast.error(err instanceof Error ? err.message : 'Failed to create policy');\n return;\n }\n toast.success(`Policy \"${formData.name}\" created`);\n navigateTo('policies');\n };\n\n const handleUpdate = async () => {\n if (!policyId || !editData.name) return;\n try {\n await updatePolicy({\n policyId,\n input: {\n name: editData.name,\n description: editData.description,\n visibility: editData.visibility,\n },\n });\n } catch (err) {\n toast.error(err instanceof Error ? err.message : 'Failed to update policy');\n return;\n }\n // The policy query is network-only local state, so re-read it to show the change.\n await refetchPolicy();\n toast.success('Policy updated');\n setIsEditing(false);\n };\n\n const handleDelete = async () => {\n if (!policyId) return;\n try {\n await deletePolicy(policyId);\n if (isNative()) void nativeNotify('success');\n navigateTo('policies');\n } catch (err) {\n if (isNative()) void nativeNotify('error');\n throw err;\n }\n };\n\n const isActive = policy?.status === 'ACTIVE';\n\n const handleToggleActive = async () => {\n if (!policyId) return;\n const nextStatus = isActive ? 'DRAFT' : 'ACTIVE';\n try {\n await updatePolicy({ policyId, input: { status: nextStatus } });\n } catch (err) {\n toast.error(err instanceof Error ? err.message : 'Failed to update policy');\n return;\n }\n await refetchPolicy();\n toast.success(\n nextStatus === 'ACTIVE' ? 'Policy is now enforced' : 'Policy is no longer enforced'\n );\n };\n\n const startEditing = () => {\n if (!policy) return;\n setEditData({\n name: policy.name,\n description: policy.description || '',\n visibility: toUnion(policy.visibility, VISIBILITIES, 'PRIVATE'),\n });\n setIsEditing(true);\n };\n\n if (isNew) {\n return (\n <PageLayout\n title=\"Create Policy\"\n description=\"Define guardrails and constraints for your AI agents\"\n actions={\n <div className=\"flex gap-2\">\n <Button variant=\"outline\" onClick={() => navigateTo('policies')}>\n Cancel\n </Button>\n <Button\n leftIcon={<Save size={16} />}\n onClick={handleCreate}\n isLoading={createLoading}\n disabled={!formData.name}\n >\n Create\n </Button>\n </div>\n }\n >\n <div className=\"max-w-2xl space-y-6\">\n <Card>\n <CardHeader>\n <CardTitle>Basic Information</CardTitle>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <FormField label=\"Policy Name\" required>\n <Input\n placeholder=\"e.g., Production Content Policy\"\n value={formData.name}\n onChange={(e) => setFormData({ ...formData, name: e.target.value })}\n />\n </FormField>\n\n <FormField label=\"Description\">\n <Textarea\n placeholder=\"What does this policy enforce?\"\n value={formData.description}\n onChange={(e) => setFormData({ ...formData, description: e.target.value })}\n rows={3}\n />\n </FormField>\n\n <div className=\"grid grid-cols-2 gap-4\">\n <FormField label=\"Policy Type\" required>\n <select\n className={SELECT_CLASS}\n value={formData.type}\n onChange={(e) => {\n const next = e.target.value as PolicyType;\n if (!isCreatablePolicyType(next)) return;\n setConfigError(null);\n setFormData({ ...formData, type: next });\n }}\n >\n {CREATABLE_POLICY_TYPES.map((type) => (\n <option key={type} value={type}>\n {PolicyTypeLabel[type]}\n </option>\n ))}\n </select>\n </FormField>\n\n <FormField label=\"Visibility\">\n <select\n className=\"flex h-10 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm\"\n value={formData.visibility}\n onChange={(e) =>\n setFormData({ ...formData, visibility: e.target.value as Visibility })\n }\n >\n <option value=\"PRIVATE\">Private</option>\n <option value=\"WORKSPACE\">Workspace</option>\n <option value=\"PUBLIC\">Public</option>\n </select>\n </FormField>\n </div>\n </CardContent>\n </Card>\n\n {/* Policy-specific configuration: every field below is enforced at runtime. */}\n {formData.type === 'CONTENT' && (\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <AlertTriangle size={18} />\n Content Policy Configuration\n </CardTitle>\n <CardDescription>\n Checked against every message sent to an agent and every response it gives. A\n blocked message is refused; a blocked response is replaced with a refusal.\n </CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <div className=\"flex items-start gap-2\">\n <input\n type=\"checkbox\"\n id=\"pii\"\n checked={policyForm.content.piiDetection}\n onChange={(e) => updateForm('content', { piiDetection: e.target.checked })}\n className=\"mt-1 h-4 w-4\"\n />\n <label htmlFor=\"pii\" className=\"text-sm\">\n <span className=\"font-medium\">PII Detection</span>\n <span className=\"block text-text-secondary\">\n Blocks text containing an email address, a US SSN or a card-number shaped\n digit run.\n </span>\n </label>\n </div>\n\n <FormField\n label=\"Blocked Keywords\"\n description=\"Comma-separated. Case-insensitive; any occurrence blocks the text.\"\n >\n <Input\n placeholder=\"e.g., internal-only, project-x\"\n value={policyForm.content.blockedKeywords}\n onChange={(e) => updateForm('content', { blockedKeywords: e.target.value })}\n />\n </FormField>\n\n <FormField\n label=\"Blocked Patterns\"\n description=\"One regular expression per line, matched case-insensitively.\"\n >\n <Textarea\n placeholder=\"e.g., \\bACME-\\d{6}\\b\"\n value={policyForm.content.blockedPatterns}\n onChange={(e) => updateForm('content', { blockedPatterns: e.target.value })}\n rows={3}\n />\n </FormField>\n </CardContent>\n </Card>\n )}\n\n {formData.type === 'TOOL' && (\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <Wrench size={18} />\n Tool Policy Configuration\n </CardTitle>\n <CardDescription>\n Applies to MCP tool calls made by agents and through Call Tool, and to agent\n delegation. Leave a field empty to not restrict it.\n </CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <FormField\n label=\"Allowed Tools\"\n description=\"Comma-separated MCP tool names. End an entry with * to allow a prefix. Empty allows every tool.\"\n >\n <Input\n placeholder=\"e.g., search, read_*\"\n value={policyForm.tool.allowedTools}\n onChange={(e) => updateForm('tool', { allowedTools: e.target.value })}\n />\n </FormField>\n\n <FormField\n label=\"Denied Tools\"\n description=\"Comma-separated MCP tool names that may never run. A deny always wins.\"\n >\n <Input\n placeholder=\"e.g., delete_*, execute_code\"\n value={policyForm.tool.deniedTools}\n onChange={(e) => updateForm('tool', { deniedTools: e.target.value })}\n />\n </FormField>\n\n <div className=\"grid grid-cols-1 sm:grid-cols-2 gap-4\">\n <FormField label=\"Max Tool Risk Level\">\n <select\n className={SELECT_CLASS}\n value={policyForm.tool.maxToolRiskLevel}\n onChange={(e) =>\n updateForm('tool', {\n maxToolRiskLevel: e.target\n .value as PolicyFormState['tool']['maxToolRiskLevel'],\n })\n }\n >\n <option value=\"\">Any risk level</option>\n {TOOL_RISK_LEVELS.map((level) => (\n <option key={level} value={level}>\n Up to {level.toLowerCase()}\n </option>\n ))}\n </select>\n </FormField>\n <FormField\n label=\"Minimum A2A Trust Level\"\n description=\"For delegation to external registry agents.\"\n >\n <select\n className={SELECT_CLASS}\n value={policyForm.tool.a2aMinTrustLevel}\n onChange={(e) =>\n updateForm('tool', {\n a2aMinTrustLevel: e.target\n .value as PolicyFormState['tool']['a2aMinTrustLevel'],\n })\n }\n >\n <option value=\"\">Default (verified publisher)</option>\n {A2A_TRUST_LEVELS.map((level) => (\n <option key={level} value={level}>\n {level === 'VERIFIED_PUBLISHER'\n ? 'Verified publisher'\n : level.charAt(0) + level.slice(1).toLowerCase()}\n </option>\n ))}\n </select>\n </FormField>\n </div>\n\n <div className=\"grid grid-cols-1 sm:grid-cols-2 gap-4\">\n <FormField\n label=\"Max Tool Calls Per Execution\"\n description=\"Tool calls allowed in one agent turn.\"\n >\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.tool.maxCallsPerExecution}\n onChange={(e) => updateForm('tool', { maxCallsPerExecution: e.target.value })}\n />\n </FormField>\n <FormField\n label=\"Tool Call Timeout (seconds)\"\n description=\"Can only shorten the platform's own timeout.\"\n >\n <Input\n type=\"number\"\n min={1}\n placeholder=\"Platform default\"\n value={policyForm.tool.timeoutSeconds}\n onChange={(e) => updateForm('tool', { timeoutSeconds: e.target.value })}\n />\n </FormField>\n </div>\n </CardContent>\n </Card>\n )}\n\n {formData.type === 'BUDGET' && (\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <DollarSign size={18} />\n Budget Policy Configuration\n </CardTitle>\n <CardDescription>\n Token budgets apply per agent. Leave a field empty to not restrict it.\n </CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <div className=\"grid grid-cols-1 sm:grid-cols-2 gap-4\">\n <FormField\n label=\"Max Tokens Per Day\"\n description=\"An agent that has used this many tokens today (UTC) is refused.\"\n >\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.budget.maxTokensPerDay}\n onChange={(e) => updateForm('budget', { maxTokensPerDay: e.target.value })}\n />\n </FormField>\n <FormField\n label=\"Max Output Tokens Per Model Call\"\n description=\"Lowers the agent's own max-tokens setting when it is higher.\"\n >\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.budget.maxTokensPerExecution}\n onChange={(e) =>\n updateForm('budget', { maxTokensPerExecution: e.target.value })\n }\n />\n </FormField>\n </div>\n </CardContent>\n </Card>\n )}\n\n {formData.type === 'RATE_LIMIT' && (\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <Clock size={18} />\n Rate Limit Configuration\n </CardTitle>\n <CardDescription>\n Every limit is counted per agent. Leave a field empty to not restrict it.\n </CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <div className=\"grid grid-cols-1 sm:grid-cols-3 gap-4\">\n <FormField label=\"Requests / Minute\">\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.rateLimit.requestsPerMinute}\n onChange={(e) =>\n updateForm('rateLimit', { requestsPerMinute: e.target.value })\n }\n />\n </FormField>\n <FormField label=\"Requests / Hour\">\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.rateLimit.requestsPerHour}\n onChange={(e) => updateForm('rateLimit', { requestsPerHour: e.target.value })}\n />\n </FormField>\n <FormField label=\"Tokens / Minute\">\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.rateLimit.tokensPerMinute}\n onChange={(e) => updateForm('rateLimit', { tokensPerMinute: e.target.value })}\n />\n </FormField>\n </div>\n </CardContent>\n </Card>\n )}\n\n {formData.type === 'RESPONSE' && (\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <FileText size={18} />\n Model Usage Allowlist\n </CardTitle>\n <CardDescription>\n Agents in this workspace may only answer with models that match every active model\n policy. Leave both fields empty to allow all models.\n </CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <FormField\n label=\"Allowed Models\"\n description=\"Comma-separated model IDs. End an entry with * to allow a prefix.\"\n >\n <Input\n placeholder=\"e.g., gpt-4o-mini, anthropic.claude-*\"\n value={policyForm.response.allowedModels}\n onChange={(e) => updateForm('response', { allowedModels: e.target.value })}\n />\n </FormField>\n\n <FormField\n label=\"Allowed Providers\"\n description=\"Comma-separated provider types, e.g. OPENAI, ANTHROPIC, AWS_BEDROCK.\"\n >\n <Input\n placeholder=\"e.g., AWS_BEDROCK, ANTHROPIC\"\n value={policyForm.response.allowedProviders}\n onChange={(e) => updateForm('response', { allowedProviders: e.target.value })}\n />\n </FormField>\n </CardContent>\n </Card>\n )}\n\n {configError && (\n <p className=\"text-sm text-status-error-text\" role=\"alert\">\n {configError}\n </p>\n )}\n\n <Card>\n <CardContent className=\"pt-6\">\n <div className=\"flex items-start gap-2\">\n <input\n type=\"checkbox\"\n id=\"activate-on-create\"\n checked={activateOnCreate}\n onChange={(e) => setActivateOnCreate(e.target.checked)}\n className=\"mt-1 h-4 w-4\"\n />\n <label htmlFor=\"activate-on-create\" className=\"text-sm\">\n <span className=\"font-medium\">Enforce immediately</span>\n <span className=\"block text-text-secondary\">\n Only active policies are enforced. Leave unchecked to save this policy as a\n draft and activate it later.\n </span>\n </label>\n </div>\n </CardContent>\n </Card>\n </div>\n </PageLayout>\n );\n }\n\n if (loading) {\n return (\n <PageLayout title=\"Loading...\">\n <div className=\"h-96 bg-bg-sunken motion-safe:animate-vc-shimmer rounded-lg\" />\n </PageLayout>\n );\n }\n\n if (!policy) {\n return (\n <PageLayout title=\"Policy Not Found\">\n <EmptyState\n illustration=\"empty-generic\"\n title=\"Policy Not Found\"\n description=\"This policy doesn't exist.\"\n action={<Button onClick={() => navigateTo('policies')}>Back to Policies</Button>}\n />\n </PageLayout>\n );\n }\n\n const policyType = toUnion(policy.type, POLICY_TYPES, 'CONTENT');\n const unenforced = unenforcedConfigKeys(policyType, policy.config);\n\n return (\n <PageLayout\n title={\n <div className=\"flex items-center gap-3\">\n <Button variant=\"ghost\" size=\"icon\" onClick={() => navigateTo('policies')}>\n <ArrowLeft size={20} />\n </Button>\n <div className=\"p-2 rounded-lg bg-action-primary-bg/10\">\n <PolicyTypeIcon type={policyType} />\n </div>\n <div>\n <div className=\"flex items-center gap-2\">\n <span>{policy.name}</span>\n <StatusBadge status={policy.status} />\n </div>\n <p className=\"text-sm font-normal text-text-secondary\">{policy.description}</p>\n </div>\n </div>\n }\n actions={\n <div className=\"flex gap-2\">\n {isEditing ? (\n <>\n <Button variant=\"outline\" onClick={() => setIsEditing(false)}>\n Cancel\n </Button>\n <Button\n leftIcon={<Save size={16} />}\n onClick={handleUpdate}\n isLoading={updateLoading}\n disabled={!editData.name}\n >\n Save Changes\n </Button>\n </>\n ) : (\n <>\n <BotmanorPermissionGate permission={BOTMANOR_PERMISSIONS.POLICY_UPDATE}>\n <Button\n variant={isActive ? 'outline' : 'default'}\n leftIcon={<Power size={16} />}\n onClick={() => void handleToggleActive()}\n isLoading={updateLoading}\n >\n {isActive ? 'Deactivate' : 'Activate'}\n </Button>\n </BotmanorPermissionGate>\n <BotmanorPermissionGate permission={BOTMANOR_PERMISSIONS.POLICY_UPDATE}>\n <Button variant=\"outline\" leftIcon={<Edit size={16} />} onClick={startEditing}>\n Edit\n </Button>\n </BotmanorPermissionGate>\n {showDeleteConfirm ? (\n <div className=\"flex gap-2\">\n <Button variant=\"outline\" size=\"sm\" onClick={() => setShowDeleteConfirm(false)}>\n Cancel\n </Button>\n <Button\n variant=\"destructive\"\n size=\"sm\"\n onClick={() => {\n nativeImpact('medium');\n void handleDelete();\n }}\n isLoading={deleteLoading}\n >\n Confirm Delete\n </Button>\n </div>\n ) : (\n <BotmanorPermissionGate permission={BOTMANOR_PERMISSIONS.POLICY_DELETE}>\n <Button\n variant=\"destructive\"\n leftIcon={<Trash2 size={16} />}\n onClick={() => setShowDeleteConfirm(true)}\n >\n Delete\n </Button>\n </BotmanorPermissionGate>\n )}\n </>\n )}\n </div>\n }\n >\n <div className=\"space-y-6\">\n <PagePurpose icon={<Shield size={18} />}>\n This is a single guardrail and its rules. Review and tune exactly what it enforces — what\n content to block, which tools are allowed, the spend or rate limits it applies — then\n attach it to the agents and bots that should obey it. Policies are how you keep agents\n safe, compliant and within budget.\n </PagePurpose>\n\n {/* Edit Form */}\n {isEditing && (\n <Card>\n <CardHeader>\n <CardTitle>Edit Policy</CardTitle>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <FormField label=\"Policy Name\" required>\n <Input\n value={editData.name}\n onChange={(e) => setEditData({ ...editData, name: e.target.value })}\n />\n </FormField>\n <FormField label=\"Description\">\n <Textarea\n value={editData.description}\n onChange={(e) => setEditData({ ...editData, description: e.target.value })}\n rows={3}\n />\n </FormField>\n <FormField label=\"Visibility\">\n <select\n className={SELECT_CLASS}\n value={editData.visibility}\n onChange={(e) =>\n setEditData({ ...editData, visibility: e.target.value as Visibility })\n }\n >\n <option value=\"PRIVATE\">Private</option>\n <option value=\"WORKSPACE\">Workspace</option>\n <option value=\"PUBLIC\">Public</option>\n </select>\n </FormField>\n <p className=\"text-sm text-text-secondary\">\n Note: Policy type and configuration cannot be changed after creation.\n </p>\n </CardContent>\n </Card>\n )}\n\n {/* Overview */}\n <div className=\"grid grid-cols-2 md:grid-cols-4 gap-4\">\n <Card treatment=\"glass\" glow>\n <CardContent className=\"pt-6 text-center\">\n <div className=\"p-3 rounded-full bg-action-primary-bg/10 w-fit mx-auto mb-2\">\n <PolicyTypeIcon type={policyType} />\n </div>\n <p className=\"text-lg font-bold\">{PolicyTypeLabel[policyType]}</p>\n <p className=\"text-sm text-text-secondary\">Policy Type</p>\n </CardContent>\n </Card>\n <Card>\n <CardContent className=\"pt-6 text-center\">\n <p className=\"text-3xl font-bold text-text-primary capitalize\">\n {policy.visibility.toLowerCase()}\n </p>\n <p className=\"text-sm text-text-secondary\">Visibility</p>\n </CardContent>\n </Card>\n <Card>\n <CardContent className=\"pt-6 text-center\">\n <p className=\"text-3xl font-bold text-text-primary\">{policy.revision}</p>\n <p className=\"text-sm text-text-secondary\">Revision</p>\n </CardContent>\n </Card>\n <Card>\n <CardContent className=\"pt-6 text-center\">\n <p className=\"text-lg font-bold text-text-primary\">\n {formatRelativeTime(policy.updatedAt)}\n </p>\n <p className=\"text-sm text-text-secondary\">Last Updated</p>\n </CardContent>\n </Card>\n </div>\n\n {/* Configuration */}\n <Card>\n <CardHeader>\n <CardTitle>Configuration</CardTitle>\n <CardDescription>Current policy configuration</CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n {unenforced === null ? (\n <div\n className=\"flex items-start gap-2 p-3 bg-status-warning-bg-subtle rounded-lg text-sm\"\n data-testid=\"policy-not-enforced\"\n >\n <AlertTriangle size={16} className=\"mt-0.5 shrink-0 text-status-warning-text\" />\n <p>\n {PolicyTypeLabel[policyType]} settings are not enforced at runtime. This policy is\n kept for reference only and does not restrict any agent.\n </p>\n </div>\n ) : unenforced.length > 0 ? (\n <div\n className=\"flex items-start gap-2 p-3 bg-status-warning-bg-subtle rounded-lg text-sm\"\n data-testid=\"policy-ignored-keys\"\n >\n <AlertTriangle size={16} className=\"mt-0.5 shrink-0 text-status-warning-text\" />\n <p>\n These settings are not enforced at runtime and have no effect:{' '}\n <span className=\"font-mono\">{unenforced.join(', ')}</span>. Create a new policy to\n use the enforced settings.\n </p>\n </div>\n ) : null}\n <div className=\"p-4 bg-bg-sunken rounded-lg font-mono text-sm overflow-auto\">\n <pre>{JSON.stringify(policy.config, null, 2)}</pre>\n </div>\n </CardContent>\n </Card>\n\n {/* Metadata */}\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <Settings size={18} />\n Metadata\n </CardTitle>\n </CardHeader>\n <CardContent>\n <div className=\"grid grid-cols-2 md:grid-cols-4 gap-6 text-sm\">\n <div>\n <p className=\"text-text-secondary\">Created</p>\n <p className=\"font-medium\">{formatRelativeTime(policy.createdAt)}</p>\n </div>\n <div>\n <p className=\"text-text-secondary\">Updated</p>\n <p className=\"font-medium\">{formatRelativeTime(policy.updatedAt)}</p>\n </div>\n <div>\n <p className=\"text-text-secondary\">Tags</p>\n <div className=\"flex gap-1\">\n {policy.tags.length > 0 ? (\n policy.tags.map((tag: string) => (\n <Badge key={tag} variant=\"secondary\" className=\"text-xs\">\n {tag}\n </Badge>\n ))\n ) : (\n <span className=\"text-text-secondary\">None</span>\n )}\n </div>\n </div>\n </div>\n </CardContent>\n </Card>\n </div>\n </PageLayout>\n );\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAuDA,IAAM,KAA6B;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACD,EAEK,KAA6B;CAAC;CAAW;CAAa;CAAS,EAE/D,IACJ,4FAMI,KAA4C,EAAE,eACI;CACpD,SAAS,kBAAC,GAAD,EAAe,MAAM,IAAM,CAAA;CACpC,MAAM,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;CAC1B,MAAM,kBAAC,GAAD,EAAU,MAAM,IAAM,CAAA;CAC5B,UAAU,kBAAC,GAAD,EAAU,MAAM,IAAM,CAAA;CAChC,QAAQ,kBAAC,GAAD,EAAY,MAAM,IAAM,CAAA;CAChC,YAAY,kBAAC,GAAD,EAAO,MAAM,IAAM,CAAA;CAC/B,WAAW,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;CAChC,EACY,MAAS,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA,EAGtC,IAA8C;CAClD,SAAS;CACT,MAAM;CACN,MAAM;CACN,UAAU;CACV,QAAQ;CACR,YAAY;CACZ,WAAW;CACZ,EAEY,KAA+C,EAAE,eAAY;CACxE,IAAM,EAAE,gBAAa,IAAW,EAC1B,EAAE,kBAAe,GAAW,EAC5B,EAAE,MAAM,GAAQ,aAAS,SAAS,MAAkB,GAAU,IAAQ,KAAA,IAAY,EAAS,EAC3F,EAAE,QAAQ,IAAc,SAAS,OAAkB,IAAiB,EACpE,EAAE,QAAQ,GAAc,SAAS,MAAkB,IAAiB,EACpE,EAAE,QAAQ,IAAc,SAAS,OAAkB,IAAiB,EAEpE,CAAC,GAAW,KAAgB,EAAS,GAAM,EAC3C,CAAC,IAAmB,KAAwB,EAAS,GAAM,EAE3D,CAAC,GAAU,KAAe,EAAS;EACvC,MAAM;EACN,aAAa;EACb,MAAM;EACN,YAAY;EACb,CAAC,EAGI,CAAC,GAAU,KAAe,EAAS;EACvC,MAAM;EACN,aAAa;EACb,YAAY;EACb,CAAC,EAGI,CAAC,GAAY,MAAiB,EAA0B,GAAkB,EAC1E,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAE7D,KACJ,GACA,MACG;AAEH,EADA,EAAe,KAAK,EACpB,IAAe,OAAa;GAAE,GAAG;IAAU,IAAU;IAAE,GAAG,EAAQ;IAAU,GAAG;IAAO;GAAE,EAAE;IAItF,CAAC,GAAkB,MAAuB,EAAS,GAAM,EAEzD,KAAe,YAAY;AAC/B,MAAI,CAAC,EAAS,KAAM;EAEpB,IAAM,IAAQ,GAAkB,EAAS,MAAM,EAAW;AAC1D,MAAI,CAAC,EAAM,IAAI;AAEb,GADA,EAAe,EAAM,MAAM,EAC3B,EAAM,MAAM,EAAM,MAAM;AACxB;;AAGF,MAAI;AACF,SAAM,GAAa;IACjB,MAAM,EAAS;IACf,aAAa,EAAS;IACtB,MAAM,EAAS;IACf,YAAY,EAAS;IACrB,QAAQ,IAAmB,WAAW;IACtC,QAAQ,EAAM;IACf,CAAC;WACK,GAAK;AACZ,KAAM,MAAM,aAAe,QAAQ,EAAI,UAAU,0BAA0B;AAC3E;;AAGF,EADA,EAAM,QAAQ,WAAW,EAAS,KAAK,WAAW,EAClD,EAAW,WAAW;IAGlB,KAAe,YAAY;AAC3B,SAAC,KAAY,CAAC,EAAS,OAC3B;OAAI;AACF,UAAM,EAAa;KACjB;KACA,OAAO;MACL,MAAM,EAAS;MACf,aAAa,EAAS;MACtB,YAAY,EAAS;MACtB;KACF,CAAC;YACK,GAAK;AACZ,MAAM,MAAM,aAAe,QAAQ,EAAI,UAAU,0BAA0B;AAC3E;;AAKF,GAFA,MAAM,GAAe,EACrB,EAAM,QAAQ,iBAAiB,EAC/B,EAAa,GAAM;;IAGf,KAAe,YAAY;AAC1B,QACL,KAAI;AAGF,GAFA,MAAM,GAAa,EAAS,EACxB,GAAU,IAAO,EAAa,UAAU,EAC5C,EAAW,WAAW;WACf,GAAK;AAEZ,SADI,GAAU,IAAO,EAAa,QAAQ,EACpC;;IAIJ,IAAW,GAAQ,WAAW,UAE9B,KAAqB,YAAY;AACrC,MAAI,CAAC,EAAU;EACf,IAAM,IAAa,IAAW,UAAU;AACxC,MAAI;AACF,SAAM,EAAa;IAAE;IAAU,OAAO,EAAE,QAAQ,GAAY;IAAE,CAAC;WACxD,GAAK;AACZ,KAAM,MAAM,aAAe,QAAQ,EAAI,UAAU,0BAA0B;AAC3E;;AAGF,EADA,MAAM,GAAe,EACrB,EAAM,QACJ,MAAe,WAAW,2BAA2B,+BACtD;IAGG,WAAqB;AACpB,QACL,EAAY;GACV,MAAM,EAAO;GACb,aAAa,EAAO,eAAe;GACnC,YAAY,EAAQ,EAAO,YAAY,IAAc,UAAU;GAChE,CAAC,EACF,EAAa,GAAK;;AAGpB,KAAI,EACF,QACE,kBAAC,GAAD;EACE,OAAM;EACN,aAAY;EACZ,SACE,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,GAAD;IAAQ,SAAQ;IAAU,eAAe,EAAW,WAAW;cAAE;IAExD,CAAA,EACT,kBAAC,GAAD;IACE,UAAU,kBAAC,GAAD,EAAM,MAAM,IAAM,CAAA;IAC5B,SAAS;IACT,WAAW;IACX,UAAU,CAAC,EAAS;cACrB;IAEQ,CAAA,CACL;;YAGR,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD,EAAA,UAAW,qBAA6B,CAAA,EAC7B,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB;MACE,kBAAC,GAAD;OAAW,OAAM;OAAc,UAAA;iBAC7B,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAS;QAChB,WAAW,MAAM,EAAY;SAAE,GAAG;SAAU,MAAM,EAAE,OAAO;SAAO,CAAC;QACnE,CAAA;OACQ,CAAA;MAEZ,kBAAC,GAAD;OAAW,OAAM;iBACf,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAS;QAChB,WAAW,MAAM,EAAY;SAAE,GAAG;SAAU,aAAa,EAAE,OAAO;SAAO,CAAC;QAC1E,MAAM;QACN,CAAA;OACQ,CAAA;MAEZ,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,GAAD;QAAW,OAAM;QAAc,UAAA;kBAC7B,kBAAC,UAAD;SACE,WAAW;SACX,OAAO,EAAS;SAChB,WAAW,MAAM;UACf,IAAM,IAAO,EAAE,OAAO;AACjB,aAAsB,EAAK,KAChC,EAAe,KAAK,EACpB,EAAY;WAAE,GAAG;WAAU,MAAM;WAAM,CAAC;;mBAGzC,GAAuB,KAAK,MAC3B,kBAAC,UAAD;UAAmB,OAAO;oBACvB,EAAgB;UACV,EAFI,EAEJ,CACT;SACK,CAAA;QACC,CAAA,EAEZ,kBAAC,GAAD;QAAW,OAAM;kBACf,kBAAC,UAAD;SACE,WAAU;SACV,OAAO,EAAS;SAChB,WAAW,MACT,EAAY;UAAE,GAAG;UAAU,YAAY,EAAE,OAAO;UAAqB,CAAC;mBAJ1E;UAOE,kBAAC,UAAD;WAAQ,OAAM;qBAAU;WAAgB,CAAA;UACxC,kBAAC,UAAD;WAAQ,OAAM;qBAAY;WAAkB,CAAA;UAC5C,kBAAC,UAAD;WAAQ,OAAM;qBAAS;WAAe,CAAA;UAC/B;;QACC,CAAA,CACR;;MACM;OACT,EAAA,CAAA;IAGN,EAAS,SAAS,aACjB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,GAAD,EAAe,MAAM,IAAM,CAAA,EAAA,+BAEjB;QACZ,kBAAC,GAAD,EAAA,UAAiB,4JAGC,CAAA,CACP,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB;MACE,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,SAAD;QACE,MAAK;QACL,IAAG;QACH,SAAS,EAAW,QAAQ;QAC5B,WAAW,MAAM,EAAW,WAAW,EAAE,cAAc,EAAE,OAAO,SAAS,CAAC;QAC1E,WAAU;QACV,CAAA,EACF,kBAAC,SAAD;QAAO,SAAQ;QAAM,WAAU;kBAA/B,CACE,kBAAC,QAAD;SAAM,WAAU;mBAAc;SAAoB,CAAA,EAClD,kBAAC,QAAD;SAAM,WAAU;mBAA4B;SAGrC,CAAA,CACD;UACJ;;MAEN,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAW,QAAQ;QAC1B,WAAW,MAAM,EAAW,WAAW,EAAE,iBAAiB,EAAE,OAAO,OAAO,CAAC;QAC3E,CAAA;OACQ,CAAA;MAEZ,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAW,QAAQ;QAC1B,WAAW,MAAM,EAAW,WAAW,EAAE,iBAAiB,EAAE,OAAO,OAAO,CAAC;QAC3E,MAAM;QACN,CAAA;OACQ,CAAA;MACA;OACT,EAAA,CAAA;IAGR,EAAS,SAAS,UACjB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA,EAAA,4BAEV;QACZ,kBAAC,GAAD,EAAA,UAAiB,oIAGC,CAAA,CACP,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB;MACE,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAW,KAAK;QACvB,WAAW,MAAM,EAAW,QAAQ,EAAE,cAAc,EAAE,OAAO,OAAO,CAAC;QACrE,CAAA;OACQ,CAAA;MAEZ,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAW,KAAK;QACvB,WAAW,MAAM,EAAW,QAAQ,EAAE,aAAa,EAAE,OAAO,OAAO,CAAC;QACpE,CAAA;OACQ,CAAA;MAEZ,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,GAAD;QAAW,OAAM;kBACf,kBAAC,UAAD;SACE,WAAW;SACX,OAAO,EAAW,KAAK;SACvB,WAAW,MACT,EAAW,QAAQ,EACjB,kBAAkB,EAAE,OACjB,OACJ,CAAC;mBAPN,CAUE,kBAAC,UAAD;UAAQ,OAAM;oBAAG;UAAuB,CAAA,EACvC,GAAiB,KAAK,MACrB,kBAAC,UAAD;UAAoB,OAAO;oBAA3B,CAAkC,UACzB,EAAM,aAAa,CACnB;YAFI,EAEJ,CACT,CACK;;QACC,CAAA,EACZ,kBAAC,GAAD;QACE,OAAM;QACN,aAAY;kBAEZ,kBAAC,UAAD;SACE,WAAW;SACX,OAAO,EAAW,KAAK;SACvB,WAAW,MACT,EAAW,QAAQ,EACjB,kBAAkB,EAAE,OACjB,OACJ,CAAC;mBAPN,CAUE,kBAAC,UAAD;UAAQ,OAAM;oBAAG;UAAqC,CAAA,EACrD,GAAiB,KAAK,MACrB,kBAAC,UAAD;UAAoB,OAAO;oBACxB,MAAU,uBACP,uBACA,EAAM,OAAO,EAAE,GAAG,EAAM,MAAM,EAAE,CAAC,aAAa;UAC3C,EAJI,EAIJ,CACT,CACK;;QACC,CAAA,CACR;;MAEN,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,GAAD;QACE,OAAM;QACN,aAAY;kBAEZ,kBAAC,GAAD;SACE,MAAK;SACL,KAAK;SACL,aAAY;SACZ,OAAO,EAAW,KAAK;SACvB,WAAW,MAAM,EAAW,QAAQ,EAAE,sBAAsB,EAAE,OAAO,OAAO,CAAC;SAC7E,CAAA;QACQ,CAAA,EACZ,kBAAC,GAAD;QACE,OAAM;QACN,aAAY;kBAEZ,kBAAC,GAAD;SACE,MAAK;SACL,KAAK;SACL,aAAY;SACZ,OAAO,EAAW,KAAK;SACvB,WAAW,MAAM,EAAW,QAAQ,EAAE,gBAAgB,EAAE,OAAO,OAAO,CAAC;SACvE,CAAA;QACQ,CAAA,CACR;;MACM;OACT,EAAA,CAAA;IAGR,EAAS,SAAS,YACjB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,GAAD,EAAY,MAAM,IAAM,CAAA,EAAA,8BAEd;QACZ,kBAAC,GAAD,EAAA,UAAiB,0EAEC,CAAA,CACP,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eACrB,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,MAAK;QACL,KAAK;QACL,aAAY;QACZ,OAAO,EAAW,OAAO;QACzB,WAAW,MAAM,EAAW,UAAU,EAAE,iBAAiB,EAAE,OAAO,OAAO,CAAC;QAC1E,CAAA;OACQ,CAAA,EACZ,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,MAAK;QACL,KAAK;QACL,aAAY;QACZ,OAAO,EAAW,OAAO;QACzB,WAAW,MACT,EAAW,UAAU,EAAE,uBAAuB,EAAE,OAAO,OAAO,CAAC;QAEjE,CAAA;OACQ,CAAA,CACR;;KACM,CAAA,CACT,EAAA,CAAA;IAGR,EAAS,SAAS,gBACjB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,GAAD,EAAO,MAAM,IAAM,CAAA,EAAA,2BAET;QACZ,kBAAC,GAAD,EAAA,UAAiB,6EAEC,CAAA,CACP,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eACrB,kBAAC,OAAD;MAAK,WAAU;gBAAf;OACE,kBAAC,GAAD;QAAW,OAAM;kBACf,kBAAC,GAAD;SACE,MAAK;SACL,KAAK;SACL,aAAY;SACZ,OAAO,EAAW,UAAU;SAC5B,WAAW,MACT,EAAW,aAAa,EAAE,mBAAmB,EAAE,OAAO,OAAO,CAAC;SAEhE,CAAA;QACQ,CAAA;OACZ,kBAAC,GAAD;QAAW,OAAM;kBACf,kBAAC,GAAD;SACE,MAAK;SACL,KAAK;SACL,aAAY;SACZ,OAAO,EAAW,UAAU;SAC5B,WAAW,MAAM,EAAW,aAAa,EAAE,iBAAiB,EAAE,OAAO,OAAO,CAAC;SAC7E,CAAA;QACQ,CAAA;OACZ,kBAAC,GAAD;QAAW,OAAM;kBACf,kBAAC,GAAD;SACE,MAAK;SACL,KAAK;SACL,aAAY;SACZ,OAAO,EAAW,UAAU;SAC5B,WAAW,MAAM,EAAW,aAAa,EAAE,iBAAiB,EAAE,OAAO,OAAO,CAAC;SAC7E,CAAA;QACQ,CAAA;OACR;;KACM,CAAA,CACT,EAAA,CAAA;IAGR,EAAS,SAAS,cACjB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,GAAD,EAAU,MAAM,IAAM,CAAA,EAAA,wBAEZ;QACZ,kBAAC,GAAD,EAAA,UAAiB,2IAGC,CAAA,CACP,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB,CACE,kBAAC,GAAD;MACE,OAAM;MACN,aAAY;gBAEZ,kBAAC,GAAD;OACE,aAAY;OACZ,OAAO,EAAW,SAAS;OAC3B,WAAW,MAAM,EAAW,YAAY,EAAE,eAAe,EAAE,OAAO,OAAO,CAAC;OAC1E,CAAA;MACQ,CAAA,EAEZ,kBAAC,GAAD;MACE,OAAM;MACN,aAAY;gBAEZ,kBAAC,GAAD;OACE,aAAY;OACZ,OAAO,EAAW,SAAS;OAC3B,WAAW,MAAM,EAAW,YAAY,EAAE,kBAAkB,EAAE,OAAO,OAAO,CAAC;OAC7E,CAAA;MACQ,CAAA,CACA;OACT,EAAA,CAAA;IAGR,KACC,kBAAC,KAAD;KAAG,WAAU;KAAiC,MAAK;eAChD;KACC,CAAA;IAGN,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;KAAa,WAAU;eACrB,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OACE,MAAK;OACL,IAAG;OACH,SAAS;OACT,WAAW,MAAM,GAAoB,EAAE,OAAO,QAAQ;OACtD,WAAU;OACV,CAAA,EACF,kBAAC,SAAD;OAAO,SAAQ;OAAqB,WAAU;iBAA9C,CACE,kBAAC,QAAD;QAAM,WAAU;kBAAc;QAA0B,CAAA,EACxD,kBAAC,QAAD;QAAM,WAAU;kBAA4B;QAGrC,CAAA,CACD;SACJ;;KACM,CAAA,EACT,CAAA;IACH;;EACK,CAAA;AAIjB,KAAI,GACF,QACE,kBAAC,GAAD;EAAY,OAAM;YAChB,kBAAC,OAAD,EAAK,WAAU,+DAAgE,CAAA;EACpE,CAAA;AAIjB,KAAI,CAAC,EACH,QACE,kBAAC,GAAD;EAAY,OAAM;YAChB,kBAAC,IAAD;GACE,cAAa;GACb,OAAM;GACN,aAAY;GACZ,QAAQ,kBAAC,GAAD;IAAQ,eAAe,EAAW,WAAW;cAAE;IAAyB,CAAA;GAChF,CAAA;EACS,CAAA;CAIjB,IAAM,IAAa,EAAQ,EAAO,MAAM,IAAc,UAAU,EAC1D,IAAa,GAAqB,GAAY,EAAO,OAAO;AAElE,QACE,kBAAC,GAAD;EACE,OACE,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,GAAD;KAAQ,SAAQ;KAAQ,MAAK;KAAO,eAAe,EAAW,WAAW;eACvE,kBAAC,IAAD,EAAW,MAAM,IAAM,CAAA;KAChB,CAAA;IACT,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,GAAD,EAAgB,MAAM,GAAc,CAAA;KAChC,CAAA;IACN,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,QAAD,EAAA,UAAO,EAAO,MAAY,CAAA,EAC1B,kBAAC,IAAD,EAAa,QAAQ,EAAO,QAAU,CAAA,CAClC;QACN,kBAAC,KAAD;KAAG,WAAU;eAA2C,EAAO;KAAgB,CAAA,CAC3E,EAAA,CAAA;IACF;;EAER,SACE,kBAAC,OAAD;GAAK,WAAU;aACZ,IACC,kBAAA,IAAA,EAAA,UAAA,CACE,kBAAC,GAAD;IAAQ,SAAQ;IAAU,eAAe,EAAa,GAAM;cAAE;IAErD,CAAA,EACT,kBAAC,GAAD;IACE,UAAU,kBAAC,GAAD,EAAM,MAAM,IAAM,CAAA;IAC5B,SAAS;IACT,WAAW;IACX,UAAU,CAAC,EAAS;cACrB;IAEQ,CAAA,CACR,EAAA,CAAA,GAEH,kBAAA,IAAA,EAAA,UAAA;IACE,kBAAC,GAAD;KAAwB,YAAY,EAAqB;eACvD,kBAAC,GAAD;MACE,SAAS,IAAW,YAAY;MAChC,UAAU,kBAAC,IAAD,EAAO,MAAM,IAAM,CAAA;MAC7B,eAAe,KAAK,IAAoB;MACxC,WAAW;gBAEV,IAAW,eAAe;MACpB,CAAA;KACc,CAAA;IACzB,kBAAC,GAAD;KAAwB,YAAY,EAAqB;eACvD,kBAAC,GAAD;MAAQ,SAAQ;MAAU,UAAU,kBAAC,IAAD,EAAM,MAAM,IAAM,CAAA;MAAE,SAAS;gBAAc;MAEtE,CAAA;KACc,CAAA;IACxB,KACC,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,GAAD;MAAQ,SAAQ;MAAU,MAAK;MAAK,eAAe,EAAqB,GAAM;gBAAE;MAEvE,CAAA,EACT,kBAAC,GAAD;MACE,SAAQ;MACR,MAAK;MACL,eAAe;AAER,OADL,GAAa,SAAS,EACjB,IAAc;;MAErB,WAAW;gBACZ;MAEQ,CAAA,CACL;SAEN,kBAAC,GAAD;KAAwB,YAAY,EAAqB;eACvD,kBAAC,GAAD;MACE,SAAQ;MACR,UAAU,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;MAC9B,eAAe,EAAqB,GAAK;gBAC1C;MAEQ,CAAA;KACc,CAAA;IAE1B,EAAA,CAAA;GAED,CAAA;YAGR,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,IAAD;KAAa,MAAM,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;eAAE;KAK3B,CAAA;IAGb,KACC,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD,EAAA,UAAW,eAAuB,CAAA,EACvB,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB;MACE,kBAAC,GAAD;OAAW,OAAM;OAAc,UAAA;iBAC7B,kBAAC,GAAD;QACE,OAAO,EAAS;QAChB,WAAW,MAAM,EAAY;SAAE,GAAG;SAAU,MAAM,EAAE,OAAO;SAAO,CAAC;QACnE,CAAA;OACQ,CAAA;MACZ,kBAAC,GAAD;OAAW,OAAM;iBACf,kBAAC,GAAD;QACE,OAAO,EAAS;QAChB,WAAW,MAAM,EAAY;SAAE,GAAG;SAAU,aAAa,EAAE,OAAO;SAAO,CAAC;QAC1E,MAAM;QACN,CAAA;OACQ,CAAA;MACZ,kBAAC,GAAD;OAAW,OAAM;iBACf,kBAAC,UAAD;QACE,WAAW;QACX,OAAO,EAAS;QAChB,WAAW,MACT,EAAY;SAAE,GAAG;SAAU,YAAY,EAAE,OAAO;SAAqB,CAAC;kBAJ1E;SAOE,kBAAC,UAAD;UAAQ,OAAM;oBAAU;UAAgB,CAAA;SACxC,kBAAC,UAAD;UAAQ,OAAM;oBAAY;UAAkB,CAAA;SAC5C,kBAAC,UAAD;UAAQ,OAAM;oBAAS;UAAe,CAAA;SAC/B;;OACC,CAAA;MACZ,kBAAC,KAAD;OAAG,WAAU;iBAA8B;OAEvC,CAAA;MACQ;OACT,EAAA,CAAA;IAIT,kBAAC,OAAD;KAAK,WAAU;eAAf;MACE,kBAAC,GAAD;OAAM,WAAU;OAAQ,MAAA;iBACtB,kBAAC,GAAD;QAAa,WAAU;kBAAvB;SACE,kBAAC,OAAD;UAAK,WAAU;oBACb,kBAAC,GAAD,EAAgB,MAAM,GAAc,CAAA;UAChC,CAAA;SACN,kBAAC,KAAD;UAAG,WAAU;oBAAqB,EAAgB;UAAgB,CAAA;SAClE,kBAAC,KAAD;UAAG,WAAU;oBAA8B;UAAe,CAAA;SAC9C;;OACT,CAAA;MACP,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;OAAa,WAAU;iBAAvB,CACE,kBAAC,KAAD;QAAG,WAAU;kBACV,EAAO,WAAW,aAAa;QAC9B,CAAA,EACJ,kBAAC,KAAD;QAAG,WAAU;kBAA8B;QAAc,CAAA,CAC7C;UACT,CAAA;MACP,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;OAAa,WAAU;iBAAvB,CACE,kBAAC,KAAD;QAAG,WAAU;kBAAwC,EAAO;QAAa,CAAA,EACzE,kBAAC,KAAD;QAAG,WAAU;kBAA8B;QAAY,CAAA,CAC3C;UACT,CAAA;MACP,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;OAAa,WAAU;iBAAvB,CACE,kBAAC,KAAD;QAAG,WAAU;kBACV,EAAmB,EAAO,UAAU;QACnC,CAAA,EACJ,kBAAC,KAAD;QAAG,WAAU;kBAA8B;QAAgB,CAAA,CAC/C;UACT,CAAA;MACH;;IAGN,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAW,iBAAyB,CAAA,EACpC,kBAAC,GAAD,EAAA,UAAiB,gCAA8C,CAAA,CACpD,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB,CACG,MAAe,OACd,kBAAC,OAAD;MACE,WAAU;MACV,eAAY;gBAFd,CAIE,kBAAC,GAAD;OAAe,MAAM;OAAI,WAAU;OAA6C,CAAA,EAChF,kBAAC,KAAD,EAAA,UAAA,CACG,EAAgB,IAAY,iHAE3B,EAAA,CAAA,CACA;UACJ,EAAW,SAAS,IACtB,kBAAC,OAAD;MACE,WAAU;MACV,eAAY;gBAFd,CAIE,kBAAC,GAAD;OAAe,MAAM;OAAI,WAAU;OAA6C,CAAA,EAChF,kBAAC,KAAD,EAAA,UAAA;OAAG;OAC8D;OAC/D,kBAAC,QAAD;QAAM,WAAU;kBAAa,EAAW,KAAK,KAAK;QAAQ,CAAA;;OAExD,EAAA,CAAA,CACA;UACJ,MACJ,kBAAC,OAAD;MAAK,WAAU;gBACb,kBAAC,OAAD,EAAA,UAAM,KAAK,UAAU,EAAO,QAAQ,MAAM,EAAE,EAAO,CAAA;MAC/C,CAAA,CACM;OACT,EAAA,CAAA;IAGP,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,IAAD,EAAU,MAAM,IAAM,CAAA,EAAA,WAEZ;QACD,CAAA,EACb,kBAAC,GAAD,EAAA,UACE,kBAAC,OAAD;KAAK,WAAU;eAAf;MACE,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,KAAD;OAAG,WAAU;iBAAsB;OAAW,CAAA,EAC9C,kBAAC,KAAD;OAAG,WAAU;iBAAe,EAAmB,EAAO,UAAU;OAAK,CAAA,CACjE,EAAA,CAAA;MACN,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,KAAD;OAAG,WAAU;iBAAsB;OAAW,CAAA,EAC9C,kBAAC,KAAD;OAAG,WAAU;iBAAe,EAAmB,EAAO,UAAU;OAAK,CAAA,CACjE,EAAA,CAAA;MACN,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,KAAD;OAAG,WAAU;iBAAsB;OAAQ,CAAA,EAC3C,kBAAC,OAAD;OAAK,WAAU;iBACZ,EAAO,KAAK,SAAS,IACpB,EAAO,KAAK,KAAK,MACf,kBAAC,IAAD;QAAiB,SAAQ;QAAY,WAAU;kBAC5C;QACK,EAFI,EAEJ,CACR,GAEF,kBAAC,QAAD;QAAM,WAAU;kBAAsB;QAAW,CAAA;OAE/C,CAAA,CACF,EAAA,CAAA;MACF;QACM,CAAA,CACT,EAAA,CAAA;IACH;;EACK,CAAA"}
1
+ {"version":3,"file":"PolicyDetailPage.js","names":[],"sources":["../../../src/botlit/pages/PolicyDetailPage.tsx"],"sourcesContent":["/**\n * Policy Detail Page\n * @module botlit/pages\n */\n\nimport type { FC } from 'react';\nimport { useState } from 'react';\nimport { useParams } from 'react-router';\nimport { toast } from 'sonner';\nimport { useBotlit } from '../providers/BotlitProvider';\nimport { isNative, nativeImpact, nativeNotify } from '../../utils/nativeBridge';\nimport {\n ArrowLeft,\n Shield,\n Settings,\n Save,\n AlertTriangle,\n Wrench,\n Database,\n FileText,\n DollarSign,\n Clock,\n Trash2,\n Edit,\n Power,\n} from 'lucide-react';\nimport { PageLayout } from '../components/PageLayout';\nimport { PagePurpose } from '@burdenoff/fe-libs/ui';\nimport { EmptyState } from '../components/EmptyState';\nimport { Card, CardHeader, CardTitle, CardContent, CardDescription } from '../components/Card';\nimport { Button } from '../components/Button';\nimport { Input, Textarea, FormField } from '../components/Input';\nimport { StatusBadge, Badge } from '../components/Badge';\nimport { usePolicy, useCreatePolicy, useUpdatePolicy, useDeletePolicy } from '../hooks';\nimport { formatRelativeTime } from '../utils/formatters';\nimport { toUnion } from '../utils/unions';\nimport type { PolicyType, Visibility } from '../types';\nimport {\n A2A_TRUST_LEVELS,\n CREATABLE_POLICY_TYPES,\n EMPTY_POLICY_FORM,\n MAX_RETENTION_DAYS,\n TOOL_RISK_LEVELS,\n buildPolicyConfig,\n isCreatablePolicyType,\n unenforcedConfigKeys,\n type CreatablePolicyType,\n type PolicyFormState,\n} from '../utils/policyConfig';\nimport { BOTMANOR_PERMISSIONS, BotmanorPermissionGate } from '../permissions';\n\n/**\n * Policy types the UI can render; the column itself is a free-form String.\n * DATA has no runtime evaluator: existing rows still render, but the editor\n * only creates CREATABLE_POLICY_TYPES (BOFF-9683). RETENTION is enforced by\n * the scheduled retention job (BOFF-9661).\n */\nconst POLICY_TYPES: PolicyType[] = [\n 'CONTENT',\n 'TOOL',\n 'DATA',\n 'RESPONSE',\n 'BUDGET',\n 'RATE_LIMIT',\n 'RETENTION',\n];\n\nconst VISIBILITIES: Visibility[] = ['PRIVATE', 'WORKSPACE', 'PUBLIC'];\n\nconst SELECT_CLASS =\n 'flex h-10 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm';\n\ninterface PolicyDetailPageProps {\n isNew?: boolean;\n}\n\nconst PolicyTypeIcon: FC<{ type: PolicyType }> = ({ type }) => {\n const icons: Record<PolicyType, React.ReactElement> = {\n CONTENT: <AlertTriangle size={18} />,\n TOOL: <Wrench size={18} />,\n DATA: <Database size={18} />,\n RESPONSE: <FileText size={18} />,\n BUDGET: <DollarSign size={18} />,\n RATE_LIMIT: <Clock size={18} />,\n RETENTION: <Trash2 size={18} />,\n };\n return icons[type] || <Shield size={18} />;\n};\n\nconst PolicyTypeLabel: Record<PolicyType, string> = {\n CONTENT: 'Content Policy',\n TOOL: 'Tool Policy',\n DATA: 'Data Policy',\n RESPONSE: 'Response & Model Policy',\n BUDGET: 'Budget Policy',\n RATE_LIMIT: 'Rate Limit Policy',\n RETENTION: 'Retention Policy',\n};\n\nexport const PolicyDetailPage: FC<PolicyDetailPageProps> = ({ isNew }) => {\n const { policyId } = useParams();\n const { navigateTo } = useBotlit();\n const { data: policy, loading, refetch: refetchPolicy } = usePolicy(isNew ? undefined : policyId);\n const { create: createPolicy, loading: createLoading } = useCreatePolicy();\n const { update: updatePolicy, loading: updateLoading } = useUpdatePolicy();\n const { remove: deletePolicy, loading: deleteLoading } = useDeletePolicy();\n\n const [isEditing, setIsEditing] = useState(false);\n const [showDeleteConfirm, setShowDeleteConfirm] = useState(false);\n\n const [formData, setFormData] = useState({\n name: '',\n description: '',\n type: 'CONTENT' as CreatablePolicyType,\n visibility: 'PRIVATE' as Visibility,\n });\n\n // Edit-form fields: name, description and visibility of an existing policy.\n const [editData, setEditData] = useState({\n name: '',\n description: '',\n visibility: 'PRIVATE' as Visibility,\n });\n\n // Type-specific config. Every field maps to a key the runtime enforces.\n const [policyForm, setPolicyForm] = useState<PolicyFormState>(EMPTY_POLICY_FORM);\n const [configError, setConfigError] = useState<string | null>(null);\n\n const updateForm = <K extends keyof PolicyFormState>(\n section: K,\n patch: Partial<PolicyFormState[K]>\n ) => {\n setConfigError(null);\n setPolicyForm((current) => ({ ...current, [section]: { ...current[section], ...patch } }));\n };\n\n // New policies start as drafts unless the author chooses to enforce them now.\n const [activateOnCreate, setActivateOnCreate] = useState(false);\n\n const handleCreate = async () => {\n if (!formData.name) return;\n\n const built = buildPolicyConfig(formData.type, policyForm);\n if (!built.ok) {\n setConfigError(built.error);\n toast.error(built.error);\n return;\n }\n\n try {\n await createPolicy({\n name: formData.name,\n description: formData.description,\n type: formData.type,\n visibility: formData.visibility,\n status: activateOnCreate ? 'ACTIVE' : 'DRAFT',\n config: built.config as Record<string, unknown>,\n });\n } catch (err) {\n toast.error(err instanceof Error ? err.message : 'Failed to create policy');\n return;\n }\n toast.success(`Policy \"${formData.name}\" created`);\n navigateTo('policies');\n };\n\n const handleUpdate = async () => {\n if (!policyId || !editData.name) return;\n try {\n await updatePolicy({\n policyId,\n input: {\n name: editData.name,\n description: editData.description,\n visibility: editData.visibility,\n },\n });\n } catch (err) {\n toast.error(err instanceof Error ? err.message : 'Failed to update policy');\n return;\n }\n // The policy query is network-only local state, so re-read it to show the change.\n await refetchPolicy();\n toast.success('Policy updated');\n setIsEditing(false);\n };\n\n const handleDelete = async () => {\n if (!policyId) return;\n try {\n await deletePolicy(policyId);\n if (isNative()) void nativeNotify('success');\n navigateTo('policies');\n } catch (err) {\n if (isNative()) void nativeNotify('error');\n throw err;\n }\n };\n\n const isActive = policy?.status === 'ACTIVE';\n\n const handleToggleActive = async () => {\n if (!policyId) return;\n const nextStatus = isActive ? 'DRAFT' : 'ACTIVE';\n try {\n await updatePolicy({ policyId, input: { status: nextStatus } });\n } catch (err) {\n toast.error(err instanceof Error ? err.message : 'Failed to update policy');\n return;\n }\n await refetchPolicy();\n toast.success(\n nextStatus === 'ACTIVE' ? 'Policy is now enforced' : 'Policy is no longer enforced'\n );\n };\n\n const startEditing = () => {\n if (!policy) return;\n setEditData({\n name: policy.name,\n description: policy.description || '',\n visibility: toUnion(policy.visibility, VISIBILITIES, 'PRIVATE'),\n });\n setIsEditing(true);\n };\n\n if (isNew) {\n return (\n <PageLayout\n title=\"Create Policy\"\n description=\"Define guardrails and constraints for your AI agents\"\n actions={\n <div className=\"flex gap-2\">\n <Button variant=\"outline\" onClick={() => navigateTo('policies')}>\n Cancel\n </Button>\n <Button\n leftIcon={<Save size={16} />}\n onClick={handleCreate}\n isLoading={createLoading}\n disabled={!formData.name}\n >\n Create\n </Button>\n </div>\n }\n >\n <div className=\"max-w-2xl space-y-6\">\n <Card>\n <CardHeader>\n <CardTitle>Basic Information</CardTitle>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <FormField label=\"Policy Name\" required>\n <Input\n placeholder=\"e.g., Production Content Policy\"\n value={formData.name}\n onChange={(e) => setFormData({ ...formData, name: e.target.value })}\n />\n </FormField>\n\n <FormField label=\"Description\">\n <Textarea\n placeholder=\"What does this policy enforce?\"\n value={formData.description}\n onChange={(e) => setFormData({ ...formData, description: e.target.value })}\n rows={3}\n />\n </FormField>\n\n <div className=\"grid grid-cols-2 gap-4\">\n <FormField label=\"Policy Type\" required>\n <select\n className={SELECT_CLASS}\n value={formData.type}\n onChange={(e) => {\n const next = e.target.value as PolicyType;\n if (!isCreatablePolicyType(next)) return;\n setConfigError(null);\n setFormData({ ...formData, type: next });\n }}\n >\n {CREATABLE_POLICY_TYPES.map((type) => (\n <option key={type} value={type}>\n {PolicyTypeLabel[type]}\n </option>\n ))}\n </select>\n </FormField>\n\n <FormField label=\"Visibility\">\n <select\n className=\"flex h-10 w-full rounded-md border border-border-default bg-bg-surface px-3 py-2 text-sm\"\n value={formData.visibility}\n onChange={(e) =>\n setFormData({ ...formData, visibility: e.target.value as Visibility })\n }\n >\n <option value=\"PRIVATE\">Private</option>\n <option value=\"WORKSPACE\">Workspace</option>\n <option value=\"PUBLIC\">Public</option>\n </select>\n </FormField>\n </div>\n </CardContent>\n </Card>\n\n {/* Policy-specific configuration: every field below is enforced at runtime. */}\n {formData.type === 'CONTENT' && (\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <AlertTriangle size={18} />\n Content Policy Configuration\n </CardTitle>\n <CardDescription>\n Checked against every message sent to an agent and every response it gives. A\n blocked message is refused; a blocked response is replaced with a refusal.\n </CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <div className=\"flex items-start gap-2\">\n <input\n type=\"checkbox\"\n id=\"pii\"\n checked={policyForm.content.piiDetection}\n onChange={(e) => updateForm('content', { piiDetection: e.target.checked })}\n className=\"mt-1 h-4 w-4\"\n />\n <label htmlFor=\"pii\" className=\"text-sm\">\n <span className=\"font-medium\">PII Detection</span>\n <span className=\"block text-text-secondary\">\n Blocks text containing an email address, a US SSN or a card-number shaped\n digit run.\n </span>\n </label>\n </div>\n\n <FormField\n label=\"Blocked Keywords\"\n description=\"Comma-separated. Case-insensitive; any occurrence blocks the text.\"\n >\n <Input\n placeholder=\"e.g., internal-only, project-x\"\n value={policyForm.content.blockedKeywords}\n onChange={(e) => updateForm('content', { blockedKeywords: e.target.value })}\n />\n </FormField>\n\n <FormField\n label=\"Blocked Patterns\"\n description=\"One regular expression per line, matched case-insensitively.\"\n >\n <Textarea\n placeholder=\"e.g., \\bACME-\\d{6}\\b\"\n value={policyForm.content.blockedPatterns}\n onChange={(e) => updateForm('content', { blockedPatterns: e.target.value })}\n rows={3}\n />\n </FormField>\n </CardContent>\n </Card>\n )}\n\n {formData.type === 'TOOL' && (\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <Wrench size={18} />\n Tool Policy Configuration\n </CardTitle>\n <CardDescription>\n Applies to MCP tool calls made by agents and through Call Tool, and to agent\n delegation. Leave a field empty to not restrict it.\n </CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <FormField\n label=\"Allowed Tools\"\n description=\"Comma-separated MCP tool names. End an entry with * to allow a prefix. Empty allows every tool.\"\n >\n <Input\n placeholder=\"e.g., search, read_*\"\n value={policyForm.tool.allowedTools}\n onChange={(e) => updateForm('tool', { allowedTools: e.target.value })}\n />\n </FormField>\n\n <FormField\n label=\"Denied Tools\"\n description=\"Comma-separated MCP tool names that may never run. A deny always wins.\"\n >\n <Input\n placeholder=\"e.g., delete_*, execute_code\"\n value={policyForm.tool.deniedTools}\n onChange={(e) => updateForm('tool', { deniedTools: e.target.value })}\n />\n </FormField>\n\n <div className=\"grid grid-cols-1 sm:grid-cols-2 gap-4\">\n <FormField label=\"Max Tool Risk Level\">\n <select\n className={SELECT_CLASS}\n value={policyForm.tool.maxToolRiskLevel}\n onChange={(e) =>\n updateForm('tool', {\n maxToolRiskLevel: e.target\n .value as PolicyFormState['tool']['maxToolRiskLevel'],\n })\n }\n >\n <option value=\"\">Any risk level</option>\n {TOOL_RISK_LEVELS.map((level) => (\n <option key={level} value={level}>\n Up to {level.toLowerCase()}\n </option>\n ))}\n </select>\n </FormField>\n <FormField\n label=\"Minimum A2A Trust Level\"\n description=\"For delegation to external registry agents.\"\n >\n <select\n className={SELECT_CLASS}\n value={policyForm.tool.a2aMinTrustLevel}\n onChange={(e) =>\n updateForm('tool', {\n a2aMinTrustLevel: e.target\n .value as PolicyFormState['tool']['a2aMinTrustLevel'],\n })\n }\n >\n <option value=\"\">Default (verified publisher)</option>\n {A2A_TRUST_LEVELS.map((level) => (\n <option key={level} value={level}>\n {level === 'VERIFIED_PUBLISHER'\n ? 'Verified publisher'\n : level.charAt(0) + level.slice(1).toLowerCase()}\n </option>\n ))}\n </select>\n </FormField>\n </div>\n\n <div className=\"grid grid-cols-1 sm:grid-cols-2 gap-4\">\n <FormField\n label=\"Max Tool Calls Per Execution\"\n description=\"Tool calls allowed in one agent turn.\"\n >\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.tool.maxCallsPerExecution}\n onChange={(e) => updateForm('tool', { maxCallsPerExecution: e.target.value })}\n />\n </FormField>\n <FormField\n label=\"Tool Call Timeout (seconds)\"\n description=\"Can only shorten the platform's own timeout.\"\n >\n <Input\n type=\"number\"\n min={1}\n placeholder=\"Platform default\"\n value={policyForm.tool.timeoutSeconds}\n onChange={(e) => updateForm('tool', { timeoutSeconds: e.target.value })}\n />\n </FormField>\n </div>\n </CardContent>\n </Card>\n )}\n\n {formData.type === 'BUDGET' && (\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <DollarSign size={18} />\n Budget Policy Configuration\n </CardTitle>\n <CardDescription>\n Token budgets apply per agent. Leave a field empty to not restrict it.\n </CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <div className=\"grid grid-cols-1 sm:grid-cols-2 gap-4\">\n <FormField\n label=\"Max Tokens Per Day\"\n description=\"An agent that has used this many tokens today (UTC) is refused.\"\n >\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.budget.maxTokensPerDay}\n onChange={(e) => updateForm('budget', { maxTokensPerDay: e.target.value })}\n />\n </FormField>\n <FormField\n label=\"Max Output Tokens Per Model Call\"\n description=\"Lowers the agent's own max-tokens setting when it is higher.\"\n >\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.budget.maxTokensPerExecution}\n onChange={(e) =>\n updateForm('budget', { maxTokensPerExecution: e.target.value })\n }\n />\n </FormField>\n </div>\n </CardContent>\n </Card>\n )}\n\n {formData.type === 'RATE_LIMIT' && (\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <Clock size={18} />\n Rate Limit Configuration\n </CardTitle>\n <CardDescription>\n Every limit is counted per agent. Leave a field empty to not restrict it.\n </CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <div className=\"grid grid-cols-1 sm:grid-cols-3 gap-4\">\n <FormField label=\"Requests / Minute\">\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.rateLimit.requestsPerMinute}\n onChange={(e) =>\n updateForm('rateLimit', { requestsPerMinute: e.target.value })\n }\n />\n </FormField>\n <FormField label=\"Requests / Hour\">\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.rateLimit.requestsPerHour}\n onChange={(e) => updateForm('rateLimit', { requestsPerHour: e.target.value })}\n />\n </FormField>\n <FormField label=\"Tokens / Minute\">\n <Input\n type=\"number\"\n min={1}\n placeholder=\"No limit\"\n value={policyForm.rateLimit.tokensPerMinute}\n onChange={(e) => updateForm('rateLimit', { tokensPerMinute: e.target.value })}\n />\n </FormField>\n </div>\n </CardContent>\n </Card>\n )}\n\n {formData.type === 'RESPONSE' && (\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <FileText size={18} />\n Model Usage Allowlist\n </CardTitle>\n <CardDescription>\n Agents in this workspace may only answer with models that match every active model\n policy. Leave both fields empty to allow all models.\n </CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <FormField\n label=\"Allowed Models\"\n description=\"Comma-separated model IDs. End an entry with * to allow a prefix.\"\n >\n <Input\n placeholder=\"e.g., gpt-4o-mini, anthropic.claude-*\"\n value={policyForm.response.allowedModels}\n onChange={(e) => updateForm('response', { allowedModels: e.target.value })}\n />\n </FormField>\n\n <FormField\n label=\"Allowed Providers\"\n description=\"Comma-separated provider types, e.g. OPENAI, ANTHROPIC, AWS_BEDROCK.\"\n >\n <Input\n placeholder=\"e.g., AWS_BEDROCK, ANTHROPIC\"\n value={policyForm.response.allowedProviders}\n onChange={(e) => updateForm('response', { allowedProviders: e.target.value })}\n />\n </FormField>\n </CardContent>\n </Card>\n )}\n\n {formData.type === 'RETENTION' && (\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <Trash2 size={18} />\n Retention Policy Configuration\n </CardTitle>\n <CardDescription>\n A scheduled job erases content older than these periods every hour. With several\n active retention policies the shortest period applies. Leave a field empty to keep\n that content for the life of the workspace.\n </CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <div className=\"grid grid-cols-1 sm:grid-cols-2 gap-4\">\n <FormField\n label=\"Execution Data Retention (days)\"\n description=\"Inputs, outputs and errors of finished runs and agent-to-agent messages are erased this many days after the run ended; 0 keeps none. Run metrics stay.\"\n >\n <Input\n type=\"number\"\n min={0}\n max={MAX_RETENTION_DAYS}\n placeholder=\"Keep\"\n value={policyForm.retention.executionDataRetentionDays}\n onChange={(e) =>\n updateForm('retention', { executionDataRetentionDays: e.target.value })\n }\n />\n </FormField>\n <FormField\n label=\"Conversation Retention (days)\"\n description=\"Assistant conversations older than this are retired and erased.\"\n >\n <Input\n type=\"number\"\n min={1}\n max={MAX_RETENTION_DAYS}\n placeholder=\"Keep\"\n value={policyForm.retention.conversationRetentionDays}\n onChange={(e) =>\n updateForm('retention', { conversationRetentionDays: e.target.value })\n }\n />\n </FormField>\n </div>\n </CardContent>\n </Card>\n )}\n\n {configError && (\n <p className=\"text-sm text-status-error-text\" role=\"alert\">\n {configError}\n </p>\n )}\n\n <Card>\n <CardContent className=\"pt-6\">\n <div className=\"flex items-start gap-2\">\n <input\n type=\"checkbox\"\n id=\"activate-on-create\"\n checked={activateOnCreate}\n onChange={(e) => setActivateOnCreate(e.target.checked)}\n className=\"mt-1 h-4 w-4\"\n />\n <label htmlFor=\"activate-on-create\" className=\"text-sm\">\n <span className=\"font-medium\">Enforce immediately</span>\n <span className=\"block text-text-secondary\">\n Only active policies are enforced. Leave unchecked to save this policy as a\n draft and activate it later.\n </span>\n </label>\n </div>\n </CardContent>\n </Card>\n </div>\n </PageLayout>\n );\n }\n\n if (loading) {\n return (\n <PageLayout title=\"Loading...\">\n <div className=\"h-96 bg-bg-sunken motion-safe:animate-vc-shimmer rounded-lg\" />\n </PageLayout>\n );\n }\n\n if (!policy) {\n return (\n <PageLayout title=\"Policy Not Found\">\n <EmptyState\n illustration=\"empty-generic\"\n title=\"Policy Not Found\"\n description=\"This policy doesn't exist.\"\n action={<Button onClick={() => navigateTo('policies')}>Back to Policies</Button>}\n />\n </PageLayout>\n );\n }\n\n const policyType = toUnion(policy.type, POLICY_TYPES, 'CONTENT');\n const unenforced = unenforcedConfigKeys(policyType, policy.config);\n\n return (\n <PageLayout\n title={\n <div className=\"flex items-center gap-3\">\n <Button variant=\"ghost\" size=\"icon\" onClick={() => navigateTo('policies')}>\n <ArrowLeft size={20} />\n </Button>\n <div className=\"p-2 rounded-lg bg-action-primary-bg/10\">\n <PolicyTypeIcon type={policyType} />\n </div>\n <div>\n <div className=\"flex items-center gap-2\">\n <span>{policy.name}</span>\n <StatusBadge status={policy.status} />\n </div>\n <p className=\"text-sm font-normal text-text-secondary\">{policy.description}</p>\n </div>\n </div>\n }\n actions={\n <div className=\"flex gap-2\">\n {isEditing ? (\n <>\n <Button variant=\"outline\" onClick={() => setIsEditing(false)}>\n Cancel\n </Button>\n <Button\n leftIcon={<Save size={16} />}\n onClick={handleUpdate}\n isLoading={updateLoading}\n disabled={!editData.name}\n >\n Save Changes\n </Button>\n </>\n ) : (\n <>\n <BotmanorPermissionGate permission={BOTMANOR_PERMISSIONS.POLICY_UPDATE}>\n <Button\n variant={isActive ? 'outline' : 'default'}\n leftIcon={<Power size={16} />}\n onClick={() => void handleToggleActive()}\n isLoading={updateLoading}\n >\n {isActive ? 'Deactivate' : 'Activate'}\n </Button>\n </BotmanorPermissionGate>\n <BotmanorPermissionGate permission={BOTMANOR_PERMISSIONS.POLICY_UPDATE}>\n <Button variant=\"outline\" leftIcon={<Edit size={16} />} onClick={startEditing}>\n Edit\n </Button>\n </BotmanorPermissionGate>\n {showDeleteConfirm ? (\n <div className=\"flex gap-2\">\n <Button variant=\"outline\" size=\"sm\" onClick={() => setShowDeleteConfirm(false)}>\n Cancel\n </Button>\n <Button\n variant=\"destructive\"\n size=\"sm\"\n onClick={() => {\n nativeImpact('medium');\n void handleDelete();\n }}\n isLoading={deleteLoading}\n >\n Confirm Delete\n </Button>\n </div>\n ) : (\n <BotmanorPermissionGate permission={BOTMANOR_PERMISSIONS.POLICY_DELETE}>\n <Button\n variant=\"destructive\"\n leftIcon={<Trash2 size={16} />}\n onClick={() => setShowDeleteConfirm(true)}\n >\n Delete\n </Button>\n </BotmanorPermissionGate>\n )}\n </>\n )}\n </div>\n }\n >\n <div className=\"space-y-6\">\n <PagePurpose icon={<Shield size={18} />}>\n This is a single guardrail and its rules. Review and tune exactly what it enforces — what\n content to block, which tools are allowed, the spend or rate limits it applies — then\n attach it to the agents and bots that should obey it. Policies are how you keep agents\n safe, compliant and within budget.\n </PagePurpose>\n\n {/* Edit Form */}\n {isEditing && (\n <Card>\n <CardHeader>\n <CardTitle>Edit Policy</CardTitle>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n <FormField label=\"Policy Name\" required>\n <Input\n value={editData.name}\n onChange={(e) => setEditData({ ...editData, name: e.target.value })}\n />\n </FormField>\n <FormField label=\"Description\">\n <Textarea\n value={editData.description}\n onChange={(e) => setEditData({ ...editData, description: e.target.value })}\n rows={3}\n />\n </FormField>\n <FormField label=\"Visibility\">\n <select\n className={SELECT_CLASS}\n value={editData.visibility}\n onChange={(e) =>\n setEditData({ ...editData, visibility: e.target.value as Visibility })\n }\n >\n <option value=\"PRIVATE\">Private</option>\n <option value=\"WORKSPACE\">Workspace</option>\n <option value=\"PUBLIC\">Public</option>\n </select>\n </FormField>\n <p className=\"text-sm text-text-secondary\">\n Note: Policy type and configuration cannot be changed after creation.\n </p>\n </CardContent>\n </Card>\n )}\n\n {/* Overview */}\n <div className=\"grid grid-cols-2 md:grid-cols-4 gap-4\">\n <Card treatment=\"glass\" glow>\n <CardContent className=\"pt-6 text-center\">\n <div className=\"p-3 rounded-full bg-action-primary-bg/10 w-fit mx-auto mb-2\">\n <PolicyTypeIcon type={policyType} />\n </div>\n <p className=\"text-lg font-bold\">{PolicyTypeLabel[policyType]}</p>\n <p className=\"text-sm text-text-secondary\">Policy Type</p>\n </CardContent>\n </Card>\n <Card>\n <CardContent className=\"pt-6 text-center\">\n <p className=\"text-3xl font-bold text-text-primary capitalize\">\n {policy.visibility.toLowerCase()}\n </p>\n <p className=\"text-sm text-text-secondary\">Visibility</p>\n </CardContent>\n </Card>\n <Card>\n <CardContent className=\"pt-6 text-center\">\n <p className=\"text-3xl font-bold text-text-primary\">{policy.revision}</p>\n <p className=\"text-sm text-text-secondary\">Revision</p>\n </CardContent>\n </Card>\n <Card>\n <CardContent className=\"pt-6 text-center\">\n <p className=\"text-lg font-bold text-text-primary\">\n {formatRelativeTime(policy.updatedAt)}\n </p>\n <p className=\"text-sm text-text-secondary\">Last Updated</p>\n </CardContent>\n </Card>\n </div>\n\n {/* Configuration */}\n <Card>\n <CardHeader>\n <CardTitle>Configuration</CardTitle>\n <CardDescription>Current policy configuration</CardDescription>\n </CardHeader>\n <CardContent className=\"space-y-4\">\n {unenforced === null ? (\n <div\n className=\"flex items-start gap-2 p-3 bg-status-warning-bg-subtle rounded-lg text-sm\"\n data-testid=\"policy-not-enforced\"\n >\n <AlertTriangle size={16} className=\"mt-0.5 shrink-0 text-status-warning-text\" />\n <p>\n {PolicyTypeLabel[policyType]} settings are not enforced at runtime. This policy is\n kept for reference only and does not restrict any agent.\n </p>\n </div>\n ) : unenforced.length > 0 ? (\n <div\n className=\"flex items-start gap-2 p-3 bg-status-warning-bg-subtle rounded-lg text-sm\"\n data-testid=\"policy-ignored-keys\"\n >\n <AlertTriangle size={16} className=\"mt-0.5 shrink-0 text-status-warning-text\" />\n <p>\n These settings are not enforced at runtime and have no effect:{' '}\n <span className=\"font-mono\">{unenforced.join(', ')}</span>. Create a new policy to\n use the enforced settings.\n </p>\n </div>\n ) : null}\n <div className=\"p-4 bg-bg-sunken rounded-lg font-mono text-sm overflow-auto\">\n <pre>{JSON.stringify(policy.config, null, 2)}</pre>\n </div>\n </CardContent>\n </Card>\n\n {/* Metadata */}\n <Card>\n <CardHeader>\n <CardTitle className=\"flex items-center gap-2\">\n <Settings size={18} />\n Metadata\n </CardTitle>\n </CardHeader>\n <CardContent>\n <div className=\"grid grid-cols-2 md:grid-cols-4 gap-6 text-sm\">\n <div>\n <p className=\"text-text-secondary\">Created</p>\n <p className=\"font-medium\">{formatRelativeTime(policy.createdAt)}</p>\n </div>\n <div>\n <p className=\"text-text-secondary\">Updated</p>\n <p className=\"font-medium\">{formatRelativeTime(policy.updatedAt)}</p>\n </div>\n <div>\n <p className=\"text-text-secondary\">Tags</p>\n <div className=\"flex gap-1\">\n {policy.tags.length > 0 ? (\n policy.tags.map((tag: string) => (\n <Badge key={tag} variant=\"secondary\" className=\"text-xs\">\n {tag}\n </Badge>\n ))\n ) : (\n <span className=\"text-text-secondary\">None</span>\n )}\n </div>\n </div>\n </div>\n </CardContent>\n </Card>\n </div>\n </PageLayout>\n );\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAyDA,IAAM,KAA6B;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACD,EAEK,KAA6B;CAAC;CAAW;CAAa;CAAS,EAE/D,IACJ,4FAMI,KAA4C,EAAE,eACI;CACpD,SAAS,kBAAC,GAAD,EAAe,MAAM,IAAM,CAAA;CACpC,MAAM,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;CAC1B,MAAM,kBAAC,GAAD,EAAU,MAAM,IAAM,CAAA;CAC5B,UAAU,kBAAC,GAAD,EAAU,MAAM,IAAM,CAAA;CAChC,QAAQ,kBAAC,GAAD,EAAY,MAAM,IAAM,CAAA;CAChC,YAAY,kBAAC,GAAD,EAAO,MAAM,IAAM,CAAA;CAC/B,WAAW,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;CAChC,EACY,MAAS,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA,EAGtC,IAA8C;CAClD,SAAS;CACT,MAAM;CACN,MAAM;CACN,UAAU;CACV,QAAQ;CACR,YAAY;CACZ,WAAW;CACZ,EAEY,KAA+C,EAAE,eAAY;CACxE,IAAM,EAAE,gBAAa,IAAW,EAC1B,EAAE,kBAAe,GAAW,EAC5B,EAAE,MAAM,GAAQ,aAAS,SAAS,MAAkB,GAAU,IAAQ,KAAA,IAAY,EAAS,EAC3F,EAAE,QAAQ,IAAc,SAAS,OAAkB,IAAiB,EACpE,EAAE,QAAQ,GAAc,SAAS,MAAkB,IAAiB,EACpE,EAAE,QAAQ,IAAc,SAAS,OAAkB,IAAiB,EAEpE,CAAC,GAAW,KAAgB,EAAS,GAAM,EAC3C,CAAC,IAAmB,KAAwB,EAAS,GAAM,EAE3D,CAAC,GAAU,KAAe,EAAS;EACvC,MAAM;EACN,aAAa;EACb,MAAM;EACN,YAAY;EACb,CAAC,EAGI,CAAC,GAAU,KAAe,EAAS;EACvC,MAAM;EACN,aAAa;EACb,YAAY;EACb,CAAC,EAGI,CAAC,GAAY,MAAiB,EAA0B,GAAkB,EAC1E,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAE7D,KACJ,GACA,MACG;AAEH,EADA,EAAe,KAAK,EACpB,IAAe,OAAa;GAAE,GAAG;IAAU,IAAU;IAAE,GAAG,EAAQ;IAAU,GAAG;IAAO;GAAE,EAAE;IAItF,CAAC,IAAkB,MAAuB,EAAS,GAAM,EAEzD,KAAe,YAAY;AAC/B,MAAI,CAAC,EAAS,KAAM;EAEpB,IAAM,IAAQ,GAAkB,EAAS,MAAM,EAAW;AAC1D,MAAI,CAAC,EAAM,IAAI;AAEb,GADA,EAAe,EAAM,MAAM,EAC3B,EAAM,MAAM,EAAM,MAAM;AACxB;;AAGF,MAAI;AACF,SAAM,GAAa;IACjB,MAAM,EAAS;IACf,aAAa,EAAS;IACtB,MAAM,EAAS;IACf,YAAY,EAAS;IACrB,QAAQ,KAAmB,WAAW;IACtC,QAAQ,EAAM;IACf,CAAC;WACK,GAAK;AACZ,KAAM,MAAM,aAAe,QAAQ,EAAI,UAAU,0BAA0B;AAC3E;;AAGF,EADA,EAAM,QAAQ,WAAW,EAAS,KAAK,WAAW,EAClD,EAAW,WAAW;IAGlB,KAAe,YAAY;AAC3B,SAAC,KAAY,CAAC,EAAS,OAC3B;OAAI;AACF,UAAM,EAAa;KACjB;KACA,OAAO;MACL,MAAM,EAAS;MACf,aAAa,EAAS;MACtB,YAAY,EAAS;MACtB;KACF,CAAC;YACK,GAAK;AACZ,MAAM,MAAM,aAAe,QAAQ,EAAI,UAAU,0BAA0B;AAC3E;;AAKF,GAFA,MAAM,GAAe,EACrB,EAAM,QAAQ,iBAAiB,EAC/B,EAAa,GAAM;;IAGf,KAAe,YAAY;AAC1B,QACL,KAAI;AAGF,GAFA,MAAM,GAAa,EAAS,EACxB,GAAU,IAAO,EAAa,UAAU,EAC5C,EAAW,WAAW;WACf,GAAK;AAEZ,SADI,GAAU,IAAO,EAAa,QAAQ,EACpC;;IAIJ,IAAW,GAAQ,WAAW,UAE9B,KAAqB,YAAY;AACrC,MAAI,CAAC,EAAU;EACf,IAAM,IAAa,IAAW,UAAU;AACxC,MAAI;AACF,SAAM,EAAa;IAAE;IAAU,OAAO,EAAE,QAAQ,GAAY;IAAE,CAAC;WACxD,GAAK;AACZ,KAAM,MAAM,aAAe,QAAQ,EAAI,UAAU,0BAA0B;AAC3E;;AAGF,EADA,MAAM,GAAe,EACrB,EAAM,QACJ,MAAe,WAAW,2BAA2B,+BACtD;IAGG,WAAqB;AACpB,QACL,EAAY;GACV,MAAM,EAAO;GACb,aAAa,EAAO,eAAe;GACnC,YAAY,EAAQ,EAAO,YAAY,IAAc,UAAU;GAChE,CAAC,EACF,EAAa,GAAK;;AAGpB,KAAI,EACF,QACE,kBAAC,GAAD;EACE,OAAM;EACN,aAAY;EACZ,SACE,kBAAC,OAAD;GAAK,WAAU;aAAf,CACE,kBAAC,GAAD;IAAQ,SAAQ;IAAU,eAAe,EAAW,WAAW;cAAE;IAExD,CAAA,EACT,kBAAC,GAAD;IACE,UAAU,kBAAC,GAAD,EAAM,MAAM,IAAM,CAAA;IAC5B,SAAS;IACT,WAAW;IACX,UAAU,CAAC,EAAS;cACrB;IAEQ,CAAA,CACL;;YAGR,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD,EAAA,UAAW,qBAA6B,CAAA,EAC7B,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB;MACE,kBAAC,GAAD;OAAW,OAAM;OAAc,UAAA;iBAC7B,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAS;QAChB,WAAW,MAAM,EAAY;SAAE,GAAG;SAAU,MAAM,EAAE,OAAO;SAAO,CAAC;QACnE,CAAA;OACQ,CAAA;MAEZ,kBAAC,GAAD;OAAW,OAAM;iBACf,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAS;QAChB,WAAW,MAAM,EAAY;SAAE,GAAG;SAAU,aAAa,EAAE,OAAO;SAAO,CAAC;QAC1E,MAAM;QACN,CAAA;OACQ,CAAA;MAEZ,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,GAAD;QAAW,OAAM;QAAc,UAAA;kBAC7B,kBAAC,UAAD;SACE,WAAW;SACX,OAAO,EAAS;SAChB,WAAW,MAAM;UACf,IAAM,IAAO,EAAE,OAAO;AACjB,aAAsB,EAAK,KAChC,EAAe,KAAK,EACpB,EAAY;WAAE,GAAG;WAAU,MAAM;WAAM,CAAC;;mBAGzC,GAAuB,KAAK,MAC3B,kBAAC,UAAD;UAAmB,OAAO;oBACvB,EAAgB;UACV,EAFI,EAEJ,CACT;SACK,CAAA;QACC,CAAA,EAEZ,kBAAC,GAAD;QAAW,OAAM;kBACf,kBAAC,UAAD;SACE,WAAU;SACV,OAAO,EAAS;SAChB,WAAW,MACT,EAAY;UAAE,GAAG;UAAU,YAAY,EAAE,OAAO;UAAqB,CAAC;mBAJ1E;UAOE,kBAAC,UAAD;WAAQ,OAAM;qBAAU;WAAgB,CAAA;UACxC,kBAAC,UAAD;WAAQ,OAAM;qBAAY;WAAkB,CAAA;UAC5C,kBAAC,UAAD;WAAQ,OAAM;qBAAS;WAAe,CAAA;UAC/B;;QACC,CAAA,CACR;;MACM;OACT,EAAA,CAAA;IAGN,EAAS,SAAS,aACjB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,GAAD,EAAe,MAAM,IAAM,CAAA,EAAA,+BAEjB;QACZ,kBAAC,GAAD,EAAA,UAAiB,4JAGC,CAAA,CACP,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB;MACE,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,SAAD;QACE,MAAK;QACL,IAAG;QACH,SAAS,EAAW,QAAQ;QAC5B,WAAW,MAAM,EAAW,WAAW,EAAE,cAAc,EAAE,OAAO,SAAS,CAAC;QAC1E,WAAU;QACV,CAAA,EACF,kBAAC,SAAD;QAAO,SAAQ;QAAM,WAAU;kBAA/B,CACE,kBAAC,QAAD;SAAM,WAAU;mBAAc;SAAoB,CAAA,EAClD,kBAAC,QAAD;SAAM,WAAU;mBAA4B;SAGrC,CAAA,CACD;UACJ;;MAEN,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAW,QAAQ;QAC1B,WAAW,MAAM,EAAW,WAAW,EAAE,iBAAiB,EAAE,OAAO,OAAO,CAAC;QAC3E,CAAA;OACQ,CAAA;MAEZ,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAW,QAAQ;QAC1B,WAAW,MAAM,EAAW,WAAW,EAAE,iBAAiB,EAAE,OAAO,OAAO,CAAC;QAC3E,MAAM;QACN,CAAA;OACQ,CAAA;MACA;OACT,EAAA,CAAA;IAGR,EAAS,SAAS,UACjB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA,EAAA,4BAEV;QACZ,kBAAC,GAAD,EAAA,UAAiB,oIAGC,CAAA,CACP,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB;MACE,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAW,KAAK;QACvB,WAAW,MAAM,EAAW,QAAQ,EAAE,cAAc,EAAE,OAAO,OAAO,CAAC;QACrE,CAAA;OACQ,CAAA;MAEZ,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO,EAAW,KAAK;QACvB,WAAW,MAAM,EAAW,QAAQ,EAAE,aAAa,EAAE,OAAO,OAAO,CAAC;QACpE,CAAA;OACQ,CAAA;MAEZ,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,GAAD;QAAW,OAAM;kBACf,kBAAC,UAAD;SACE,WAAW;SACX,OAAO,EAAW,KAAK;SACvB,WAAW,MACT,EAAW,QAAQ,EACjB,kBAAkB,EAAE,OACjB,OACJ,CAAC;mBAPN,CAUE,kBAAC,UAAD;UAAQ,OAAM;oBAAG;UAAuB,CAAA,EACvC,GAAiB,KAAK,MACrB,kBAAC,UAAD;UAAoB,OAAO;oBAA3B,CAAkC,UACzB,EAAM,aAAa,CACnB;YAFI,EAEJ,CACT,CACK;;QACC,CAAA,EACZ,kBAAC,GAAD;QACE,OAAM;QACN,aAAY;kBAEZ,kBAAC,UAAD;SACE,WAAW;SACX,OAAO,EAAW,KAAK;SACvB,WAAW,MACT,EAAW,QAAQ,EACjB,kBAAkB,EAAE,OACjB,OACJ,CAAC;mBAPN,CAUE,kBAAC,UAAD;UAAQ,OAAM;oBAAG;UAAqC,CAAA,EACrD,GAAiB,KAAK,MACrB,kBAAC,UAAD;UAAoB,OAAO;oBACxB,MAAU,uBACP,uBACA,EAAM,OAAO,EAAE,GAAG,EAAM,MAAM,EAAE,CAAC,aAAa;UAC3C,EAJI,EAIJ,CACT,CACK;;QACC,CAAA,CACR;;MAEN,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,GAAD;QACE,OAAM;QACN,aAAY;kBAEZ,kBAAC,GAAD;SACE,MAAK;SACL,KAAK;SACL,aAAY;SACZ,OAAO,EAAW,KAAK;SACvB,WAAW,MAAM,EAAW,QAAQ,EAAE,sBAAsB,EAAE,OAAO,OAAO,CAAC;SAC7E,CAAA;QACQ,CAAA,EACZ,kBAAC,GAAD;QACE,OAAM;QACN,aAAY;kBAEZ,kBAAC,GAAD;SACE,MAAK;SACL,KAAK;SACL,aAAY;SACZ,OAAO,EAAW,KAAK;SACvB,WAAW,MAAM,EAAW,QAAQ,EAAE,gBAAgB,EAAE,OAAO,OAAO,CAAC;SACvE,CAAA;QACQ,CAAA,CACR;;MACM;OACT,EAAA,CAAA;IAGR,EAAS,SAAS,YACjB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,GAAD,EAAY,MAAM,IAAM,CAAA,EAAA,8BAEd;QACZ,kBAAC,GAAD,EAAA,UAAiB,0EAEC,CAAA,CACP,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eACrB,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,MAAK;QACL,KAAK;QACL,aAAY;QACZ,OAAO,EAAW,OAAO;QACzB,WAAW,MAAM,EAAW,UAAU,EAAE,iBAAiB,EAAE,OAAO,OAAO,CAAC;QAC1E,CAAA;OACQ,CAAA,EACZ,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,MAAK;QACL,KAAK;QACL,aAAY;QACZ,OAAO,EAAW,OAAO;QACzB,WAAW,MACT,EAAW,UAAU,EAAE,uBAAuB,EAAE,OAAO,OAAO,CAAC;QAEjE,CAAA;OACQ,CAAA,CACR;;KACM,CAAA,CACT,EAAA,CAAA;IAGR,EAAS,SAAS,gBACjB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,GAAD,EAAO,MAAM,IAAM,CAAA,EAAA,2BAET;QACZ,kBAAC,GAAD,EAAA,UAAiB,6EAEC,CAAA,CACP,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eACrB,kBAAC,OAAD;MAAK,WAAU;gBAAf;OACE,kBAAC,GAAD;QAAW,OAAM;kBACf,kBAAC,GAAD;SACE,MAAK;SACL,KAAK;SACL,aAAY;SACZ,OAAO,EAAW,UAAU;SAC5B,WAAW,MACT,EAAW,aAAa,EAAE,mBAAmB,EAAE,OAAO,OAAO,CAAC;SAEhE,CAAA;QACQ,CAAA;OACZ,kBAAC,GAAD;QAAW,OAAM;kBACf,kBAAC,GAAD;SACE,MAAK;SACL,KAAK;SACL,aAAY;SACZ,OAAO,EAAW,UAAU;SAC5B,WAAW,MAAM,EAAW,aAAa,EAAE,iBAAiB,EAAE,OAAO,OAAO,CAAC;SAC7E,CAAA;QACQ,CAAA;OACZ,kBAAC,GAAD;QAAW,OAAM;kBACf,kBAAC,GAAD;SACE,MAAK;SACL,KAAK;SACL,aAAY;SACZ,OAAO,EAAW,UAAU;SAC5B,WAAW,MAAM,EAAW,aAAa,EAAE,iBAAiB,EAAE,OAAO,OAAO,CAAC;SAC7E,CAAA;QACQ,CAAA;OACR;;KACM,CAAA,CACT,EAAA,CAAA;IAGR,EAAS,SAAS,cACjB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,GAAD,EAAU,MAAM,IAAM,CAAA,EAAA,wBAEZ;QACZ,kBAAC,GAAD,EAAA,UAAiB,2IAGC,CAAA,CACP,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB,CACE,kBAAC,GAAD;MACE,OAAM;MACN,aAAY;gBAEZ,kBAAC,GAAD;OACE,aAAY;OACZ,OAAO,EAAW,SAAS;OAC3B,WAAW,MAAM,EAAW,YAAY,EAAE,eAAe,EAAE,OAAO,OAAO,CAAC;OAC1E,CAAA;MACQ,CAAA,EAEZ,kBAAC,GAAD;MACE,OAAM;MACN,aAAY;gBAEZ,kBAAC,GAAD;OACE,aAAY;OACZ,OAAO,EAAW,SAAS;OAC3B,WAAW,MAAM,EAAW,YAAY,EAAE,kBAAkB,EAAE,OAAO,OAAO,CAAC;OAC7E,CAAA;MACQ,CAAA,CACA;OACT,EAAA,CAAA;IAGR,EAAS,SAAS,eACjB,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA,EAAA,iCAEV;QACZ,kBAAC,GAAD,EAAA,UAAiB,mNAIC,CAAA,CACP,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eACrB,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,MAAK;QACL,KAAK;QACL,KAAA;QACA,aAAY;QACZ,OAAO,EAAW,UAAU;QAC5B,WAAW,MACT,EAAW,aAAa,EAAE,4BAA4B,EAAE,OAAO,OAAO,CAAC;QAEzE,CAAA;OACQ,CAAA,EACZ,kBAAC,GAAD;OACE,OAAM;OACN,aAAY;iBAEZ,kBAAC,GAAD;QACE,MAAK;QACL,KAAK;QACL,KAAA;QACA,aAAY;QACZ,OAAO,EAAW,UAAU;QAC5B,WAAW,MACT,EAAW,aAAa,EAAE,2BAA2B,EAAE,OAAO,OAAO,CAAC;QAExE,CAAA;OACQ,CAAA,CACR;;KACM,CAAA,CACT,EAAA,CAAA;IAGR,KACC,kBAAC,KAAD;KAAG,WAAU;KAAiC,MAAK;eAChD;KACC,CAAA;IAGN,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;KAAa,WAAU;eACrB,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OACE,MAAK;OACL,IAAG;OACH,SAAS;OACT,WAAW,MAAM,GAAoB,EAAE,OAAO,QAAQ;OACtD,WAAU;OACV,CAAA,EACF,kBAAC,SAAD;OAAO,SAAQ;OAAqB,WAAU;iBAA9C,CACE,kBAAC,QAAD;QAAM,WAAU;kBAAc;QAA0B,CAAA,EACxD,kBAAC,QAAD;QAAM,WAAU;kBAA4B;QAGrC,CAAA,CACD;SACJ;;KACM,CAAA,EACT,CAAA;IACH;;EACK,CAAA;AAIjB,KAAI,GACF,QACE,kBAAC,GAAD;EAAY,OAAM;YAChB,kBAAC,OAAD,EAAK,WAAU,+DAAgE,CAAA;EACpE,CAAA;AAIjB,KAAI,CAAC,EACH,QACE,kBAAC,GAAD;EAAY,OAAM;YAChB,kBAAC,IAAD;GACE,cAAa;GACb,OAAM;GACN,aAAY;GACZ,QAAQ,kBAAC,GAAD;IAAQ,eAAe,EAAW,WAAW;cAAE;IAAyB,CAAA;GAChF,CAAA;EACS,CAAA;CAIjB,IAAM,IAAa,EAAQ,EAAO,MAAM,IAAc,UAAU,EAC1D,IAAa,GAAqB,GAAY,EAAO,OAAO;AAElE,QACE,kBAAC,GAAD;EACE,OACE,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,GAAD;KAAQ,SAAQ;KAAQ,MAAK;KAAO,eAAe,EAAW,WAAW;eACvE,kBAAC,IAAD,EAAW,MAAM,IAAM,CAAA;KAChB,CAAA;IACT,kBAAC,OAAD;KAAK,WAAU;eACb,kBAAC,GAAD,EAAgB,MAAM,GAAc,CAAA;KAChC,CAAA;IACN,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,QAAD,EAAA,UAAO,EAAO,MAAY,CAAA,EAC1B,kBAAC,IAAD,EAAa,QAAQ,EAAO,QAAU,CAAA,CAClC;QACN,kBAAC,KAAD;KAAG,WAAU;eAA2C,EAAO;KAAgB,CAAA,CAC3E,EAAA,CAAA;IACF;;EAER,SACE,kBAAC,OAAD;GAAK,WAAU;aACZ,IACC,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,GAAD;IAAQ,SAAQ;IAAU,eAAe,EAAa,GAAM;cAAE;IAErD,CAAA,EACT,kBAAC,GAAD;IACE,UAAU,kBAAC,GAAD,EAAM,MAAM,IAAM,CAAA;IAC5B,SAAS;IACT,WAAW;IACX,UAAU,CAAC,EAAS;cACrB;IAEQ,CAAA,CACR,EAAA,CAAA,GAEH,kBAAA,GAAA,EAAA,UAAA;IACE,kBAAC,GAAD;KAAwB,YAAY,EAAqB;eACvD,kBAAC,GAAD;MACE,SAAS,IAAW,YAAY;MAChC,UAAU,kBAAC,IAAD,EAAO,MAAM,IAAM,CAAA;MAC7B,eAAe,KAAK,IAAoB;MACxC,WAAW;gBAEV,IAAW,eAAe;MACpB,CAAA;KACc,CAAA;IACzB,kBAAC,GAAD;KAAwB,YAAY,EAAqB;eACvD,kBAAC,GAAD;MAAQ,SAAQ;MAAU,UAAU,kBAAC,IAAD,EAAM,MAAM,IAAM,CAAA;MAAE,SAAS;gBAAc;MAEtE,CAAA;KACc,CAAA;IACxB,KACC,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,GAAD;MAAQ,SAAQ;MAAU,MAAK;MAAK,eAAe,EAAqB,GAAM;gBAAE;MAEvE,CAAA,EACT,kBAAC,GAAD;MACE,SAAQ;MACR,MAAK;MACL,eAAe;AAER,OADL,GAAa,SAAS,EACjB,IAAc;;MAErB,WAAW;gBACZ;MAEQ,CAAA,CACL;SAEN,kBAAC,GAAD;KAAwB,YAAY,EAAqB;eACvD,kBAAC,GAAD;MACE,SAAQ;MACR,UAAU,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;MAC9B,eAAe,EAAqB,GAAK;gBAC1C;MAEQ,CAAA;KACc,CAAA;IAE1B,EAAA,CAAA;GAED,CAAA;YAGR,kBAAC,OAAD;GAAK,WAAU;aAAf;IACE,kBAAC,IAAD;KAAa,MAAM,kBAAC,GAAD,EAAQ,MAAM,IAAM,CAAA;eAAE;KAK3B,CAAA;IAGb,KACC,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD,EAAA,UAAW,eAAuB,CAAA,EACvB,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB;MACE,kBAAC,GAAD;OAAW,OAAM;OAAc,UAAA;iBAC7B,kBAAC,GAAD;QACE,OAAO,EAAS;QAChB,WAAW,MAAM,EAAY;SAAE,GAAG;SAAU,MAAM,EAAE,OAAO;SAAO,CAAC;QACnE,CAAA;OACQ,CAAA;MACZ,kBAAC,GAAD;OAAW,OAAM;iBACf,kBAAC,GAAD;QACE,OAAO,EAAS;QAChB,WAAW,MAAM,EAAY;SAAE,GAAG;SAAU,aAAa,EAAE,OAAO;SAAO,CAAC;QAC1E,MAAM;QACN,CAAA;OACQ,CAAA;MACZ,kBAAC,GAAD;OAAW,OAAM;iBACf,kBAAC,UAAD;QACE,WAAW;QACX,OAAO,EAAS;QAChB,WAAW,MACT,EAAY;SAAE,GAAG;SAAU,YAAY,EAAE,OAAO;SAAqB,CAAC;kBAJ1E;SAOE,kBAAC,UAAD;UAAQ,OAAM;oBAAU;UAAgB,CAAA;SACxC,kBAAC,UAAD;UAAQ,OAAM;oBAAY;UAAkB,CAAA;SAC5C,kBAAC,UAAD;UAAQ,OAAM;oBAAS;UAAe,CAAA;SAC/B;;OACC,CAAA;MACZ,kBAAC,KAAD;OAAG,WAAU;iBAA8B;OAEvC,CAAA;MACQ;OACT,EAAA,CAAA;IAIT,kBAAC,OAAD;KAAK,WAAU;eAAf;MACE,kBAAC,GAAD;OAAM,WAAU;OAAQ,MAAA;iBACtB,kBAAC,GAAD;QAAa,WAAU;kBAAvB;SACE,kBAAC,OAAD;UAAK,WAAU;oBACb,kBAAC,GAAD,EAAgB,MAAM,GAAc,CAAA;UAChC,CAAA;SACN,kBAAC,KAAD;UAAG,WAAU;oBAAqB,EAAgB;UAAgB,CAAA;SAClE,kBAAC,KAAD;UAAG,WAAU;oBAA8B;UAAe,CAAA;SAC9C;;OACT,CAAA;MACP,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;OAAa,WAAU;iBAAvB,CACE,kBAAC,KAAD;QAAG,WAAU;kBACV,EAAO,WAAW,aAAa;QAC9B,CAAA,EACJ,kBAAC,KAAD;QAAG,WAAU;kBAA8B;QAAc,CAAA,CAC7C;UACT,CAAA;MACP,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;OAAa,WAAU;iBAAvB,CACE,kBAAC,KAAD;QAAG,WAAU;kBAAwC,EAAO;QAAa,CAAA,EACzE,kBAAC,KAAD;QAAG,WAAU;kBAA8B;QAAY,CAAA,CAC3C;UACT,CAAA;MACP,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;OAAa,WAAU;iBAAvB,CACE,kBAAC,KAAD;QAAG,WAAU;kBACV,EAAmB,EAAO,UAAU;QACnC,CAAA,EACJ,kBAAC,KAAD;QAAG,WAAU;kBAA8B;QAAgB,CAAA,CAC/C;UACT,CAAA;MACH;;IAGN,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UAAW,iBAAyB,CAAA,EACpC,kBAAC,GAAD,EAAA,UAAiB,gCAA8C,CAAA,CACpD,EAAA,CAAA,EACb,kBAAC,GAAD;KAAa,WAAU;eAAvB,CACG,MAAe,OACd,kBAAC,OAAD;MACE,WAAU;MACV,eAAY;gBAFd,CAIE,kBAAC,GAAD;OAAe,MAAM;OAAI,WAAU;OAA6C,CAAA,EAChF,kBAAC,KAAD,EAAA,UAAA,CACG,EAAgB,IAAY,iHAE3B,EAAA,CAAA,CACA;UACJ,EAAW,SAAS,IACtB,kBAAC,OAAD;MACE,WAAU;MACV,eAAY;gBAFd,CAIE,kBAAC,GAAD;OAAe,MAAM;OAAI,WAAU;OAA6C,CAAA,EAChF,kBAAC,KAAD,EAAA,UAAA;OAAG;OAC8D;OAC/D,kBAAC,QAAD;QAAM,WAAU;kBAAa,EAAW,KAAK,KAAK;QAAQ,CAAA;;OAExD,EAAA,CAAA,CACA;UACJ,MACJ,kBAAC,OAAD;MAAK,WAAU;gBACb,kBAAC,OAAD,EAAA,UAAM,KAAK,UAAU,EAAO,QAAQ,MAAM,EAAE,EAAO,CAAA;MAC/C,CAAA,CACM;OACT,EAAA,CAAA;IAGP,kBAAC,GAAD,EAAA,UAAA,CACE,kBAAC,GAAD,EAAA,UACE,kBAAC,GAAD;KAAW,WAAU;eAArB,CACE,kBAAC,IAAD,EAAU,MAAM,IAAM,CAAA,EAAA,WAEZ;QACD,CAAA,EACb,kBAAC,GAAD,EAAA,UACE,kBAAC,OAAD;KAAK,WAAU;eAAf;MACE,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,KAAD;OAAG,WAAU;iBAAsB;OAAW,CAAA,EAC9C,kBAAC,KAAD;OAAG,WAAU;iBAAe,EAAmB,EAAO,UAAU;OAAK,CAAA,CACjE,EAAA,CAAA;MACN,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,KAAD;OAAG,WAAU;iBAAsB;OAAW,CAAA,EAC9C,kBAAC,KAAD;OAAG,WAAU;iBAAe,EAAmB,EAAO,UAAU;OAAK,CAAA,CACjE,EAAA,CAAA;MACN,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,KAAD;OAAG,WAAU;iBAAsB;OAAQ,CAAA,EAC3C,kBAAC,OAAD;OAAK,WAAU;iBACZ,EAAO,KAAK,SAAS,IACpB,EAAO,KAAK,KAAK,MACf,kBAAC,IAAD;QAAiB,SAAQ;QAAY,WAAU;kBAC5C;QACK,EAFI,EAEJ,CACR,GAEF,kBAAC,QAAD;QAAM,WAAU;kBAAsB;QAAW,CAAA;OAE/C,CAAA,CACF,EAAA,CAAA;MACF;QACM,CAAA,CACT,EAAA,CAAA;IACH;;EACK,CAAA"}
package/dist/botlit/utils/policyConfig.js CHANGED
@@ -4,7 +4,8 @@ var e = [
4
4
  "TOOL",
5
5
  "RESPONSE",
6
6
  "BUDGET",
7
- "RATE_LIMIT"
7
+ "RATE_LIMIT",
8
+ "RETENTION"
8
9
  ];
9
10
  function t(t) {
10
11
  return e.includes(t);
@@ -43,44 +44,55 @@ var n = [
43
44
  response: {
44
45
  allowedModels: "",
45
46
  allowedProviders: ""
47
+ },
48
+ retention: {
49
+ executionDataRetentionDays: "90",
50
+ conversationRetentionDays: ""
46
51
  }
47
- };
48
- function a(e) {
52
+ }, a = 3650;
53
+ function o(e) {
49
54
  return e.split(",").map((e) => e.trim()).filter(Boolean);
50
55
  }
51
- function o(e) {
56
+ function s(e) {
52
57
  return e.split("\n").map((e) => e.trim()).filter(Boolean);
53
58
  }
54
- var s = class extends Error {};
55
- function c(e, t) {
59
+ var c = class extends Error {};
60
+ function l(e, t) {
56
61
  let n = e.trim();
57
62
  if (!n) return;
58
63
  let r = Number(n);
59
- if (!Number.isInteger(r) || r < 1) throw new s(`${t} must be a whole number of at least 1, or left empty.`);
64
+ if (!Number.isInteger(r) || r < 1) throw new c(`${t} must be a whole number of at least 1, or left empty.`);
60
65
  return r;
61
66
  }
62
- function l(e) {
67
+ function u(e, t, n) {
68
+ let r = e.trim();
69
+ if (!r) return;
70
+ let i = Number(r);
71
+ if (!Number.isInteger(i) || i < n || i > 3650) throw new c(`${t} must be a whole number of days from ${n} to ${a}, or left empty.`);
72
+ return i;
73
+ }
74
+ function d(e) {
63
75
  for (let t of e) try {
64
76
  new RegExp(t, "i");
65
77
  } catch {
66
- throw new s(`"${t}" is not a valid regular expression.`);
78
+ throw new c(`"${t}" is not a valid regular expression.`);
67
79
  }
68
80
  }
69
- function u(e) {
81
+ function f(e) {
70
82
  return Object.fromEntries(Object.entries(e).filter(([, e]) => e !== void 0 && e !== ""));
71
83
  }
72
- function d(e) {
73
- let t = a(e.blockedKeywords), n = o(e.blockedPatterns);
74
- return l(n), {
84
+ function p(e) {
85
+ let t = o(e.blockedKeywords), n = s(e.blockedPatterns);
86
+ return d(n), {
75
87
  piiDetection: e.piiDetection,
76
88
  ...t.length > 0 ? { blockedKeywords: t } : {},
77
89
  ...n.length > 0 ? { blockedPatterns: n } : {}
78
90
  };
79
91
  }
80
- function f(e) {
81
- let t = a(e.allowedTools), n = a(e.deniedTools), r = u({
82
- maxCallsPerExecution: c(e.maxCallsPerExecution, "Max tool calls per execution"),
83
- timeoutSeconds: c(e.timeoutSeconds, "Tool call timeout")
92
+ function m(e) {
93
+ let t = o(e.allowedTools), n = o(e.deniedTools), r = f({
94
+ maxCallsPerExecution: l(e.maxCallsPerExecution, "Max tool calls per execution"),
95
+ timeoutSeconds: l(e.timeoutSeconds, "Tool call timeout")
84
96
  });
85
97
  return {
86
98
  ...t.length > 0 ? { allowedTools: t } : {},
@@ -90,60 +102,72 @@ function f(e) {
90
102
  ...Object.keys(r).length > 0 ? { limits: r } : {}
91
103
  };
92
104
  }
93
- function p(e) {
94
- return u({
95
- maxTokensPerDay: c(e.maxTokensPerDay, "Max tokens per day"),
96
- maxTokensPerExecution: c(e.maxTokensPerExecution, "Max output tokens per model call")
105
+ function h(e) {
106
+ return f({
107
+ maxTokensPerDay: l(e.maxTokensPerDay, "Max tokens per day"),
108
+ maxTokensPerExecution: l(e.maxTokensPerExecution, "Max output tokens per model call")
97
109
  });
98
110
  }
99
- function m(e) {
100
- let t = u({
101
- requestsPerMinute: c(e.requestsPerMinute, "Requests per minute"),
102
- requestsPerHour: c(e.requestsPerHour, "Requests per hour"),
103
- tokensPerMinute: c(e.tokensPerMinute, "Tokens per minute")
111
+ function g(e) {
112
+ let t = f({
113
+ requestsPerMinute: l(e.requestsPerMinute, "Requests per minute"),
114
+ requestsPerHour: l(e.requestsPerHour, "Requests per hour"),
115
+ tokensPerMinute: l(e.tokensPerMinute, "Tokens per minute")
104
116
  });
105
117
  return Object.keys(t).length > 0 ? { limits: t } : {};
106
118
  }
107
- function h(e) {
108
- let t = a(e.allowedModels), n = a(e.allowedProviders).map((e) => e.toUpperCase());
119
+ function _(e) {
120
+ let t = o(e.allowedModels), n = o(e.allowedProviders).map((e) => e.toUpperCase());
109
121
  return {
110
122
  ...t.length > 0 ? { allowedModels: t } : {},
111
123
  ...n.length > 0 ? { allowedProviders: n } : {}
112
124
  };
113
125
  }
114
- function g(e, t) {
126
+ function v(e) {
127
+ let t = f({
128
+ executionDataRetentionDays: u(e.executionDataRetentionDays, "Execution data retention", 0),
129
+ conversationRetentionDays: u(e.conversationRetentionDays, "Conversation retention", 1)
130
+ });
131
+ if (Object.keys(t).length === 0) throw new c("Set at least one retention period.");
132
+ return t;
133
+ }
134
+ function y(e, t) {
115
135
  try {
116
136
  switch (e) {
117
137
  case "CONTENT": return {
118
138
  ok: !0,
119
- config: d(t.content)
139
+ config: p(t.content)
120
140
  };
121
141
  case "TOOL": return {
122
142
  ok: !0,
123
- config: f(t.tool)
143
+ config: m(t.tool)
124
144
  };
125
145
  case "BUDGET": return {
126
146
  ok: !0,
127
- config: p(t.budget)
147
+ config: h(t.budget)
128
148
  };
129
149
  case "RATE_LIMIT": return {
130
150
  ok: !0,
131
- config: m(t.rateLimit)
151
+ config: g(t.rateLimit)
132
152
  };
133
153
  case "RESPONSE": return {
134
154
  ok: !0,
135
- config: h(t.response)
155
+ config: _(t.response)
156
+ };
157
+ case "RETENTION": return {
158
+ ok: !0,
159
+ config: v(t.retention)
136
160
  };
137
161
  }
138
162
  } catch (e) {
139
- if (e instanceof s) return {
163
+ if (e instanceof c) return {
140
164
  ok: !1,
141
165
  error: e.message
142
166
  };
143
167
  throw e;
144
168
  }
145
169
  }
146
- var _ = {
170
+ var b = {
147
171
  CONTENT: [
148
172
  "piiDetection",
149
173
  "blockedKeywords",
@@ -159,8 +183,9 @@ var _ = {
159
183
  ],
160
184
  RESPONSE: ["allowedModels", "allowedProviders"],
161
185
  BUDGET: ["maxTokensPerDay", "maxTokensPerExecution"],
162
- RATE_LIMIT: ["maxRequestsPerMinute", "limits"]
163
- }, v = {
186
+ RATE_LIMIT: ["maxRequestsPerMinute", "limits"],
187
+ RETENTION: ["executionDataRetentionDays", "conversationRetentionDays"]
188
+ }, x = {
164
189
  TOOL: ["maxCallsPerExecution", "timeoutSeconds"],
165
190
  RATE_LIMIT: [
166
191
  "requestsPerMinute",
@@ -168,8 +193,8 @@ var _ = {
168
193
  "tokensPerMinute"
169
194
  ]
170
195
  };
171
- function y(e, t) {
172
- let n = _[e];
196
+ function S(e, t) {
197
+ let n = b[e];
173
198
  if (!n) return null;
174
199
  if (!t || typeof t != "object" || Array.isArray(t)) return [];
175
200
  let r = [];
@@ -178,12 +203,12 @@ function y(e, t) {
178
203
  r.push(i);
179
204
  continue;
180
205
  }
181
- let t = v[e];
206
+ let t = x[e];
182
207
  if (i === "limits" && t && a && typeof a == "object" && !Array.isArray(a)) for (let e of Object.keys(a)) t.includes(e) || r.push(`limits.${e}`);
183
208
  }
184
209
  return r;
185
210
  }
186
211
  //#endregion
187
- export { r as A2A_TRUST_LEVELS, e as CREATABLE_POLICY_TYPES, i as EMPTY_POLICY_FORM, n as TOOL_RISK_LEVELS, g as buildPolicyConfig, t as isCreatablePolicyType, y as unenforcedConfigKeys };
212
+ export { r as A2A_TRUST_LEVELS, e as CREATABLE_POLICY_TYPES, i as EMPTY_POLICY_FORM, a as MAX_RETENTION_DAYS, n as TOOL_RISK_LEVELS, y as buildPolicyConfig, t as isCreatablePolicyType, S as unenforcedConfigKeys };
188
213
 
189
214
  //# sourceMappingURL=policyConfig.js.map
package/dist/botlit/utils/policyConfig.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"policyConfig.js","names":[],"sources":["../../../src/botlit/utils/policyConfig.ts"],"sourcesContent":["/**\n * Policy editor form state <-> the config shape the BotManor runtime enforces.\n *\n * Every key this module writes is read by the backend `PolicyEvaluatorService`\n * (or the tool runtime that applies a resolved TOOL policy). Settings the\n * runtime does not enforce are deliberately absent, so the editor never offers\n * a control that looks binding and is silently ignored (BOFF-9683).\n * @module botlit/utils\n */\n\nimport type { PolicyConfig, PolicyType } from '../types';\n\n/** Policy types the editor can create, i.e. the types with a runtime evaluator. */\nexport const CREATABLE_POLICY_TYPES = [\n 'CONTENT',\n 'TOOL',\n 'RESPONSE',\n 'BUDGET',\n 'RATE_LIMIT',\n] as const;\nexport type CreatablePolicyType = (typeof CREATABLE_POLICY_TYPES)[number];\n\nexport function isCreatablePolicyType(type: PolicyType): type is CreatablePolicyType {\n return (CREATABLE_POLICY_TYPES as readonly string[]).includes(type);\n}\n\nexport const TOOL_RISK_LEVELS = ['LOW', 'MEDIUM', 'HIGH'] as const;\nexport const A2A_TRUST_LEVELS = ['UNVERIFIED', 'VERIFIED_PUBLISHER', 'INTERNAL'] as const;\n\n/**\n * Raw editor state. Numeric fields are strings so a field can be left empty,\n * which means \"not configured\" rather than a default limit.\n */\nexport interface PolicyFormState {\n content: { piiDetection: boolean; blockedKeywords: string; blockedPatterns: string };\n tool: {\n allowedTools: string;\n deniedTools: string;\n maxToolRiskLevel: '' | (typeof TOOL_RISK_LEVELS)[number];\n a2aMinTrustLevel: '' | (typeof A2A_TRUST_LEVELS)[number];\n maxCallsPerExecution: string;\n timeoutSeconds: string;\n };\n budget: { maxTokensPerDay: string; maxTokensPerExecution: string };\n rateLimit: { requestsPerMinute: string; requestsPerHour: string; tokensPerMinute: string };\n response: { allowedModels: string; allowedProviders: string };\n}\n\nexport const EMPTY_POLICY_FORM: PolicyFormState = {\n content: { piiDetection: true, blockedKeywords: '', blockedPatterns: '' },\n tool: {\n allowedTools: '',\n deniedTools: '',\n maxToolRiskLevel: '',\n a2aMinTrustLevel: '',\n maxCallsPerExecution: '',\n timeoutSeconds: '',\n },\n budget: { maxTokensPerDay: '', maxTokensPerExecution: '' },\n rateLimit: { requestsPerMinute: '60', requestsPerHour: '1000', tokensPerMinute: '' },\n response: { allowedModels: '', allowedProviders: '' },\n};\n\nexport type PolicyConfigResult = { ok: true; config: PolicyConfig } | { ok: false; error: string };\n\n/** Split a comma-separated form value into trimmed, non-empty entries. */\nexport function splitList(value: string): string[] {\n return value\n .split(',')\n .map((entry) => entry.trim())\n .filter(Boolean);\n}\n\n/** Split a one-entry-per-line form value into trimmed, non-empty entries. */\nexport function splitLines(value: string): string[] {\n return value\n .split('\\n')\n .map((entry) => entry.trim())\n .filter(Boolean);\n}\n\nclass PolicyFormError extends Error {}\n\n/** Parse an optional positive whole number; empty means \"not configured\". */\nfunction optionalPositiveInt(value: string, label: string): number | undefined {\n const trimmed = value.trim();\n if (!trimmed) return undefined;\n const parsed = Number(trimmed);\n if (!Number.isInteger(parsed) || parsed < 1) {\n throw new PolicyFormError(`${label} must be a whole number of at least 1, or left empty.`);\n }\n return parsed;\n}\n\nfunction assertValidPatterns(patterns: string[]): void {\n for (const pattern of patterns) {\n try {\n // Compiled only to validate admin input; the runtime compiles the same source.\n new RegExp(pattern, 'i');\n } catch {\n throw new PolicyFormError(`\"${pattern}\" is not a valid regular expression.`);\n }\n }\n}\n\nfunction withDefined<T extends Record<string, unknown>>(entries: T): Partial<T> {\n return Object.fromEntries(\n Object.entries(entries).filter(([, value]) => value !== undefined && value !== '')\n ) as Partial<T>;\n}\n\nfunction buildContentConfig(state: PolicyFormState['content']): PolicyConfig {\n const blockedKeywords = splitList(state.blockedKeywords);\n const blockedPatterns = splitLines(state.blockedPatterns);\n assertValidPatterns(blockedPatterns);\n return {\n piiDetection: state.piiDetection,\n ...(blockedKeywords.length > 0 ? { blockedKeywords } : {}),\n ...(blockedPatterns.length > 0 ? { blockedPatterns } : {}),\n };\n}\n\nfunction buildToolConfig(state: PolicyFormState['tool']): PolicyConfig {\n const allowedTools = splitList(state.allowedTools);\n const deniedTools = splitList(state.deniedTools);\n const limits = withDefined({\n maxCallsPerExecution: optionalPositiveInt(\n state.maxCallsPerExecution,\n 'Max tool calls per execution'\n ),\n timeoutSeconds: optionalPositiveInt(state.timeoutSeconds, 'Tool call timeout'),\n });\n return {\n ...(allowedTools.length > 0 ? { allowedTools } : {}),\n ...(deniedTools.length > 0 ? { deniedTools } : {}),\n ...(state.maxToolRiskLevel ? { maxToolRiskLevel: state.maxToolRiskLevel } : {}),\n ...(state.a2aMinTrustLevel ? { a2aMinTrustLevel: state.a2aMinTrustLevel } : {}),\n ...(Object.keys(limits).length > 0 ? { limits } : {}),\n };\n}\n\nfunction buildBudgetConfig(state: PolicyFormState['budget']): PolicyConfig {\n return withDefined({\n maxTokensPerDay: optionalPositiveInt(state.maxTokensPerDay, 'Max tokens per day'),\n maxTokensPerExecution: optionalPositiveInt(\n state.maxTokensPerExecution,\n 'Max output tokens per model call'\n ),\n });\n}\n\nfunction buildRateLimitConfig(state: PolicyFormState['rateLimit']): PolicyConfig {\n const limits = withDefined({\n requestsPerMinute: optionalPositiveInt(state.requestsPerMinute, 'Requests per minute'),\n requestsPerHour: optionalPositiveInt(state.requestsPerHour, 'Requests per hour'),\n tokensPerMinute: optionalPositiveInt(state.tokensPerMinute, 'Tokens per minute'),\n });\n return Object.keys(limits).length > 0 ? { limits } : {};\n}\n\nfunction buildResponseConfig(state: PolicyFormState['response']): PolicyConfig {\n const allowedModels = splitList(state.allowedModels);\n const allowedProviders = splitList(state.allowedProviders).map((provider) =>\n provider.toUpperCase()\n );\n return {\n ...(allowedModels.length > 0 ? { allowedModels } : {}),\n ...(allowedProviders.length > 0 ? { allowedProviders } : {}),\n };\n}\n\n/**\n * Build the config for a new policy from the editor state, or explain what is\n * wrong with the input. Only enforced keys are ever written.\n */\nexport function buildPolicyConfig(\n type: CreatablePolicyType,\n state: PolicyFormState\n): PolicyConfigResult {\n try {\n switch (type) {\n case 'CONTENT':\n return { ok: true, config: buildContentConfig(state.content) };\n case 'TOOL':\n return { ok: true, config: buildToolConfig(state.tool) };\n case 'BUDGET':\n return { ok: true, config: buildBudgetConfig(state.budget) };\n case 'RATE_LIMIT':\n return { ok: true, config: buildRateLimitConfig(state.rateLimit) };\n case 'RESPONSE':\n return { ok: true, config: buildResponseConfig(state.response) };\n }\n } catch (error) {\n if (error instanceof PolicyFormError) return { ok: false, error: error.message };\n throw error;\n }\n}\n\n/** Config keys the runtime enforces, per policy type (top level). */\nconst ENFORCED_KEYS: Partial<Record<PolicyType, readonly string[]>> = {\n CONTENT: ['piiDetection', 'blockedKeywords', 'blockedPatterns', 'customPatterns'],\n TOOL: ['allowedTools', 'deniedTools', 'maxToolRiskLevel', 'a2aMinTrustLevel', 'limits'],\n RESPONSE: ['allowedModels', 'allowedProviders'],\n BUDGET: ['maxTokensPerDay', 'maxTokensPerExecution'],\n RATE_LIMIT: ['maxRequestsPerMinute', 'limits'],\n};\n\n/** Enforced keys inside `limits`, for the types that nest limits. */\nconst ENFORCED_LIMIT_KEYS: Partial<Record<PolicyType, readonly string[]>> = {\n TOOL: ['maxCallsPerExecution', 'timeoutSeconds'],\n RATE_LIMIT: ['requestsPerMinute', 'requestsPerHour', 'tokensPerMinute'],\n};\n\n/**\n * Config keys on a stored policy that the runtime does not enforce, e.g.\n * settings written by an earlier version of this editor. `null` when the\n * policy type has no runtime evaluator at all.\n */\nexport function unenforcedConfigKeys(type: PolicyType, config: unknown): string[] | null {\n const enforced = ENFORCED_KEYS[type];\n if (!enforced) return null;\n if (!config || typeof config !== 'object' || Array.isArray(config)) return [];\n\n const ignored: string[] = [];\n for (const [key, value] of Object.entries(config as Record<string, unknown>)) {\n if (!enforced.includes(key)) {\n ignored.push(key);\n continue;\n }\n const limitKeys = ENFORCED_LIMIT_KEYS[type];\n if (\n key === 'limits' &&\n limitKeys &&\n value &&\n typeof value === 'object' &&\n !Array.isArray(value)\n ) {\n for (const limitKey of Object.keys(value as Record<string, unknown>)) {\n if (!limitKeys.includes(limitKey)) ignored.push(`limits.${limitKey}`);\n }\n }\n }\n return ignored;\n}\n"],"mappings":";AAaA,IAAa,IAAyB;CACpC;CACA;CACA;CACA;CACA;CACD;AAGD,SAAgB,EAAsB,GAA+C;AACnF,QAAQ,EAA6C,SAAS,EAAK;;AAGrE,IAAa,IAAmB;CAAC;CAAO;CAAU;CAAO,EAC5C,IAAmB;CAAC;CAAc;CAAsB;CAAW,EAqBnE,IAAqC;CAChD,SAAS;EAAE,cAAc;EAAM,iBAAiB;EAAI,iBAAiB;EAAI;CACzE,MAAM;EACJ,cAAc;EACd,aAAa;EACb,kBAAkB;EAClB,kBAAkB;EAClB,sBAAsB;EACtB,gBAAgB;EACjB;CACD,QAAQ;EAAE,iBAAiB;EAAI,uBAAuB;EAAI;CAC1D,WAAW;EAAE,mBAAmB;EAAM,iBAAiB;EAAQ,iBAAiB;EAAI;CACpF,UAAU;EAAE,eAAe;EAAI,kBAAkB;EAAI;CACtD;AAKD,SAAgB,EAAU,GAAyB;AACjD,QAAO,EACJ,MAAM,IAAI,CACV,KAAK,MAAU,EAAM,MAAM,CAAC,CAC5B,OAAO,QAAQ;;AAIpB,SAAgB,EAAW,GAAyB;AAClD,QAAO,EACJ,MAAM,KAAK,CACX,KAAK,MAAU,EAAM,MAAM,CAAC,CAC5B,OAAO,QAAQ;;AAGpB,IAAM,IAAN,cAA8B,MAAM;AAGpC,SAAS,EAAoB,GAAe,GAAmC;CAC7E,IAAM,IAAU,EAAM,MAAM;AAC5B,KAAI,CAAC,EAAS;CACd,IAAM,IAAS,OAAO,EAAQ;AAC9B,KAAI,CAAC,OAAO,UAAU,EAAO,IAAI,IAAS,EACxC,OAAM,IAAI,EAAgB,GAAG,EAAM,uDAAuD;AAE5F,QAAO;;AAGT,SAAS,EAAoB,GAA0B;AACrD,MAAK,IAAM,KAAW,EACpB,KAAI;AAEF,MAAI,OAAO,GAAS,IAAI;SAClB;AACN,QAAM,IAAI,EAAgB,IAAI,EAAQ,sCAAsC;;;AAKlF,SAAS,EAA+C,GAAwB;AAC9E,QAAO,OAAO,YACZ,OAAO,QAAQ,EAAQ,CAAC,QAAQ,GAAG,OAAW,MAAU,KAAA,KAAa,MAAU,GAAG,CACnF;;AAGH,SAAS,EAAmB,GAAiD;CAC3E,IAAM,IAAkB,EAAU,EAAM,gBAAgB,EAClD,IAAkB,EAAW,EAAM,gBAAgB;AAEzD,QADA,EAAoB,EAAgB,EAC7B;EACL,cAAc,EAAM;EACpB,GAAI,EAAgB,SAAS,IAAI,EAAE,oBAAiB,GAAG,EAAE;EACzD,GAAI,EAAgB,SAAS,IAAI,EAAE,oBAAiB,GAAG,EAAE;EAC1D;;AAGH,SAAS,EAAgB,GAA8C;CACrE,IAAM,IAAe,EAAU,EAAM,aAAa,EAC5C,IAAc,EAAU,EAAM,YAAY,EAC1C,IAAS,EAAY;EACzB,sBAAsB,EACpB,EAAM,sBACN,+BACD;EACD,gBAAgB,EAAoB,EAAM,gBAAgB,oBAAoB;EAC/E,CAAC;AACF,QAAO;EACL,GAAI,EAAa,SAAS,IAAI,EAAE,iBAAc,GAAG,EAAE;EACnD,GAAI,EAAY,SAAS,IAAI,EAAE,gBAAa,GAAG,EAAE;EACjD,GAAI,EAAM,mBAAmB,EAAE,kBAAkB,EAAM,kBAAkB,GAAG,EAAE;EAC9E,GAAI,EAAM,mBAAmB,EAAE,kBAAkB,EAAM,kBAAkB,GAAG,EAAE;EAC9E,GAAI,OAAO,KAAK,EAAO,CAAC,SAAS,IAAI,EAAE,WAAQ,GAAG,EAAE;EACrD;;AAGH,SAAS,EAAkB,GAAgD;AACzE,QAAO,EAAY;EACjB,iBAAiB,EAAoB,EAAM,iBAAiB,qBAAqB;EACjF,uBAAuB,EACrB,EAAM,uBACN,mCACD;EACF,CAAC;;AAGJ,SAAS,EAAqB,GAAmD;CAC/E,IAAM,IAAS,EAAY;EACzB,mBAAmB,EAAoB,EAAM,mBAAmB,sBAAsB;EACtF,iBAAiB,EAAoB,EAAM,iBAAiB,oBAAoB;EAChF,iBAAiB,EAAoB,EAAM,iBAAiB,oBAAoB;EACjF,CAAC;AACF,QAAO,OAAO,KAAK,EAAO,CAAC,SAAS,IAAI,EAAE,WAAQ,GAAG,EAAE;;AAGzD,SAAS,EAAoB,GAAkD;CAC7E,IAAM,IAAgB,EAAU,EAAM,cAAc,EAC9C,IAAmB,EAAU,EAAM,iBAAiB,CAAC,KAAK,MAC9D,EAAS,aAAa,CACvB;AACD,QAAO;EACL,GAAI,EAAc,SAAS,IAAI,EAAE,kBAAe,GAAG,EAAE;EACrD,GAAI,EAAiB,SAAS,IAAI,EAAE,qBAAkB,GAAG,EAAE;EAC5D;;AAOH,SAAgB,EACd,GACA,GACoB;AACpB,KAAI;AACF,UAAQ,GAAR;GACE,KAAK,UACH,QAAO;IAAE,IAAI;IAAM,QAAQ,EAAmB,EAAM,QAAQ;IAAE;GAChE,KAAK,OACH,QAAO;IAAE,IAAI;IAAM,QAAQ,EAAgB,EAAM,KAAK;IAAE;GAC1D,KAAK,SACH,QAAO;IAAE,IAAI;IAAM,QAAQ,EAAkB,EAAM,OAAO;IAAE;GAC9D,KAAK,aACH,QAAO;IAAE,IAAI;IAAM,QAAQ,EAAqB,EAAM,UAAU;IAAE;GACpE,KAAK,WACH,QAAO;IAAE,IAAI;IAAM,QAAQ,EAAoB,EAAM,SAAS;IAAE;;UAE7D,GAAO;AACd,MAAI,aAAiB,EAAiB,QAAO;GAAE,IAAI;GAAO,OAAO,EAAM;GAAS;AAChF,QAAM;;;AAKV,IAAM,IAAgE;CACpE,SAAS;EAAC;EAAgB;EAAmB;EAAmB;EAAiB;CACjF,MAAM;EAAC;EAAgB;EAAe;EAAoB;EAAoB;EAAS;CACvF,UAAU,CAAC,iBAAiB,mBAAmB;CAC/C,QAAQ,CAAC,mBAAmB,wBAAwB;CACpD,YAAY,CAAC,wBAAwB,SAAS;CAC/C,EAGK,IAAsE;CAC1E,MAAM,CAAC,wBAAwB,iBAAiB;CAChD,YAAY;EAAC;EAAqB;EAAmB;EAAkB;CACxE;AAOD,SAAgB,EAAqB,GAAkB,GAAkC;CACvF,IAAM,IAAW,EAAc;AAC/B,KAAI,CAAC,EAAU,QAAO;AACtB,KAAI,CAAC,KAAU,OAAO,KAAW,YAAY,MAAM,QAAQ,EAAO,CAAE,QAAO,EAAE;CAE7E,IAAM,IAAoB,EAAE;AAC5B,MAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,EAAkC,EAAE;AAC5E,MAAI,CAAC,EAAS,SAAS,EAAI,EAAE;AAC3B,KAAQ,KAAK,EAAI;AACjB;;EAEF,IAAM,IAAY,EAAoB;AACtC,MACE,MAAQ,YACR,KACA,KACA,OAAO,KAAU,YACjB,CAAC,MAAM,QAAQ,EAAM,OAEhB,IAAM,KAAY,OAAO,KAAK,EAAiC,CAClE,CAAK,EAAU,SAAS,EAAS,IAAE,EAAQ,KAAK,UAAU,IAAW;;AAI3E,QAAO"}
1
+ {"version":3,"file":"policyConfig.js","names":[],"sources":["../../../src/botlit/utils/policyConfig.ts"],"sourcesContent":["/**\n * Policy editor form state <-> the config shape the BotManor runtime enforces.\n *\n * Every key this module writes is read by the backend `PolicyEvaluatorService`\n * (or the tool runtime that applies a resolved TOOL policy). Settings the\n * runtime does not enforce are deliberately absent, so the editor never offers\n * a control that looks binding and is silently ignored (BOFF-9683).\n * @module botlit/utils\n */\n\nimport type { PolicyConfig, PolicyType } from '../types';\n\n/** Policy types the editor can create, i.e. the types with a runtime evaluator. */\nexport const CREATABLE_POLICY_TYPES = [\n 'CONTENT',\n 'TOOL',\n 'RESPONSE',\n 'BUDGET',\n 'RATE_LIMIT',\n 'RETENTION',\n] as const;\nexport type CreatablePolicyType = (typeof CREATABLE_POLICY_TYPES)[number];\n\nexport function isCreatablePolicyType(type: PolicyType): type is CreatablePolicyType {\n return (CREATABLE_POLICY_TYPES as readonly string[]).includes(type);\n}\n\nexport const TOOL_RISK_LEVELS = ['LOW', 'MEDIUM', 'HIGH'] as const;\nexport const A2A_TRUST_LEVELS = ['UNVERIFIED', 'VERIFIED_PUBLISHER', 'INTERNAL'] as const;\n\n/**\n * Raw editor state. Numeric fields are strings so a field can be left empty,\n * which means \"not configured\" rather than a default limit.\n */\nexport interface PolicyFormState {\n content: { piiDetection: boolean; blockedKeywords: string; blockedPatterns: string };\n tool: {\n allowedTools: string;\n deniedTools: string;\n maxToolRiskLevel: '' | (typeof TOOL_RISK_LEVELS)[number];\n a2aMinTrustLevel: '' | (typeof A2A_TRUST_LEVELS)[number];\n maxCallsPerExecution: string;\n timeoutSeconds: string;\n };\n budget: { maxTokensPerDay: string; maxTokensPerExecution: string };\n rateLimit: { requestsPerMinute: string; requestsPerHour: string; tokensPerMinute: string };\n response: { allowedModels: string; allowedProviders: string };\n retention: { executionDataRetentionDays: string; conversationRetentionDays: string };\n}\n\nexport const EMPTY_POLICY_FORM: PolicyFormState = {\n content: { piiDetection: true, blockedKeywords: '', blockedPatterns: '' },\n tool: {\n allowedTools: '',\n deniedTools: '',\n maxToolRiskLevel: '',\n a2aMinTrustLevel: '',\n maxCallsPerExecution: '',\n timeoutSeconds: '',\n },\n budget: { maxTokensPerDay: '', maxTokensPerExecution: '' },\n rateLimit: { requestsPerMinute: '60', requestsPerHour: '1000', tokensPerMinute: '' },\n response: { allowedModels: '', allowedProviders: '' },\n retention: { executionDataRetentionDays: '90', conversationRetentionDays: '' },\n};\n\n/** Longest retention period the runtime accepts (10 years). */\nexport const MAX_RETENTION_DAYS = 3650;\n\nexport type PolicyConfigResult = { ok: true; config: PolicyConfig } | { ok: false; error: string };\n\n/** Split a comma-separated form value into trimmed, non-empty entries. */\nexport function splitList(value: string): string[] {\n return value\n .split(',')\n .map((entry) => entry.trim())\n .filter(Boolean);\n}\n\n/** Split a one-entry-per-line form value into trimmed, non-empty entries. */\nexport function splitLines(value: string): string[] {\n return value\n .split('\\n')\n .map((entry) => entry.trim())\n .filter(Boolean);\n}\n\nclass PolicyFormError extends Error {}\n\n/** Parse an optional positive whole number; empty means \"not configured\". */\nfunction optionalPositiveInt(value: string, label: string): number | undefined {\n const trimmed = value.trim();\n if (!trimmed) return undefined;\n const parsed = Number(trimmed);\n if (!Number.isInteger(parsed) || parsed < 1) {\n throw new PolicyFormError(`${label} must be a whole number of at least 1, or left empty.`);\n }\n return parsed;\n}\n\n/** Parse an optional whole number of days in `[min, MAX_RETENTION_DAYS]`; empty means \"not set\". */\nfunction optionalDays(value: string, label: string, min: number): number | undefined {\n const trimmed = value.trim();\n if (!trimmed) return undefined;\n const parsed = Number(trimmed);\n if (!Number.isInteger(parsed) || parsed < min || parsed > MAX_RETENTION_DAYS) {\n throw new PolicyFormError(\n `${label} must be a whole number of days from ${min} to ${MAX_RETENTION_DAYS}, or left empty.`\n );\n }\n return parsed;\n}\n\nfunction assertValidPatterns(patterns: string[]): void {\n for (const pattern of patterns) {\n try {\n // Compiled only to validate admin input; the runtime compiles the same source.\n new RegExp(pattern, 'i');\n } catch {\n throw new PolicyFormError(`\"${pattern}\" is not a valid regular expression.`);\n }\n }\n}\n\nfunction withDefined<T extends Record<string, unknown>>(entries: T): Partial<T> {\n return Object.fromEntries(\n Object.entries(entries).filter(([, value]) => value !== undefined && value !== '')\n ) as Partial<T>;\n}\n\nfunction buildContentConfig(state: PolicyFormState['content']): PolicyConfig {\n const blockedKeywords = splitList(state.blockedKeywords);\n const blockedPatterns = splitLines(state.blockedPatterns);\n assertValidPatterns(blockedPatterns);\n return {\n piiDetection: state.piiDetection,\n ...(blockedKeywords.length > 0 ? { blockedKeywords } : {}),\n ...(blockedPatterns.length > 0 ? { blockedPatterns } : {}),\n };\n}\n\nfunction buildToolConfig(state: PolicyFormState['tool']): PolicyConfig {\n const allowedTools = splitList(state.allowedTools);\n const deniedTools = splitList(state.deniedTools);\n const limits = withDefined({\n maxCallsPerExecution: optionalPositiveInt(\n state.maxCallsPerExecution,\n 'Max tool calls per execution'\n ),\n timeoutSeconds: optionalPositiveInt(state.timeoutSeconds, 'Tool call timeout'),\n });\n return {\n ...(allowedTools.length > 0 ? { allowedTools } : {}),\n ...(deniedTools.length > 0 ? { deniedTools } : {}),\n ...(state.maxToolRiskLevel ? { maxToolRiskLevel: state.maxToolRiskLevel } : {}),\n ...(state.a2aMinTrustLevel ? { a2aMinTrustLevel: state.a2aMinTrustLevel } : {}),\n ...(Object.keys(limits).length > 0 ? { limits } : {}),\n };\n}\n\nfunction buildBudgetConfig(state: PolicyFormState['budget']): PolicyConfig {\n return withDefined({\n maxTokensPerDay: optionalPositiveInt(state.maxTokensPerDay, 'Max tokens per day'),\n maxTokensPerExecution: optionalPositiveInt(\n state.maxTokensPerExecution,\n 'Max output tokens per model call'\n ),\n });\n}\n\nfunction buildRateLimitConfig(state: PolicyFormState['rateLimit']): PolicyConfig {\n const limits = withDefined({\n requestsPerMinute: optionalPositiveInt(state.requestsPerMinute, 'Requests per minute'),\n requestsPerHour: optionalPositiveInt(state.requestsPerHour, 'Requests per hour'),\n tokensPerMinute: optionalPositiveInt(state.tokensPerMinute, 'Tokens per minute'),\n });\n return Object.keys(limits).length > 0 ? { limits } : {};\n}\n\nfunction buildResponseConfig(state: PolicyFormState['response']): PolicyConfig {\n const allowedModels = splitList(state.allowedModels);\n const allowedProviders = splitList(state.allowedProviders).map((provider) =>\n provider.toUpperCase()\n );\n return {\n ...(allowedModels.length > 0 ? { allowedModels } : {}),\n ...(allowedProviders.length > 0 ? { allowedProviders } : {}),\n };\n}\n\nfunction buildRetentionConfig(state: PolicyFormState['retention']): PolicyConfig {\n const config = withDefined({\n executionDataRetentionDays: optionalDays(\n state.executionDataRetentionDays,\n 'Execution data retention',\n 0\n ),\n conversationRetentionDays: optionalDays(\n state.conversationRetentionDays,\n 'Conversation retention',\n 1\n ),\n });\n if (Object.keys(config).length === 0) {\n throw new PolicyFormError('Set at least one retention period.');\n }\n return config;\n}\n\n/**\n * Build the config for a new policy from the editor state, or explain what is\n * wrong with the input. Only enforced keys are ever written.\n */\nexport function buildPolicyConfig(\n type: CreatablePolicyType,\n state: PolicyFormState\n): PolicyConfigResult {\n try {\n switch (type) {\n case 'CONTENT':\n return { ok: true, config: buildContentConfig(state.content) };\n case 'TOOL':\n return { ok: true, config: buildToolConfig(state.tool) };\n case 'BUDGET':\n return { ok: true, config: buildBudgetConfig(state.budget) };\n case 'RATE_LIMIT':\n return { ok: true, config: buildRateLimitConfig(state.rateLimit) };\n case 'RESPONSE':\n return { ok: true, config: buildResponseConfig(state.response) };\n case 'RETENTION':\n return { ok: true, config: buildRetentionConfig(state.retention) };\n }\n } catch (error) {\n if (error instanceof PolicyFormError) return { ok: false, error: error.message };\n throw error;\n }\n}\n\n/** Config keys the runtime enforces, per policy type (top level). */\nconst ENFORCED_KEYS: Partial<Record<PolicyType, readonly string[]>> = {\n CONTENT: ['piiDetection', 'blockedKeywords', 'blockedPatterns', 'customPatterns'],\n TOOL: ['allowedTools', 'deniedTools', 'maxToolRiskLevel', 'a2aMinTrustLevel', 'limits'],\n RESPONSE: ['allowedModels', 'allowedProviders'],\n BUDGET: ['maxTokensPerDay', 'maxTokensPerExecution'],\n RATE_LIMIT: ['maxRequestsPerMinute', 'limits'],\n RETENTION: ['executionDataRetentionDays', 'conversationRetentionDays'],\n};\n\n/** Enforced keys inside `limits`, for the types that nest limits. */\nconst ENFORCED_LIMIT_KEYS: Partial<Record<PolicyType, readonly string[]>> = {\n TOOL: ['maxCallsPerExecution', 'timeoutSeconds'],\n RATE_LIMIT: ['requestsPerMinute', 'requestsPerHour', 'tokensPerMinute'],\n};\n\n/**\n * Config keys on a stored policy that the runtime does not enforce, e.g.\n * settings written by an earlier version of this editor. `null` when the\n * policy type has no runtime evaluator at all.\n */\nexport function unenforcedConfigKeys(type: PolicyType, config: unknown): string[] | null {\n const enforced = ENFORCED_KEYS[type];\n if (!enforced) return null;\n if (!config || typeof config !== 'object' || Array.isArray(config)) return [];\n\n const ignored: string[] = [];\n for (const [key, value] of Object.entries(config as Record<string, unknown>)) {\n if (!enforced.includes(key)) {\n ignored.push(key);\n continue;\n }\n const limitKeys = ENFORCED_LIMIT_KEYS[type];\n if (\n key === 'limits' &&\n limitKeys &&\n value &&\n typeof value === 'object' &&\n !Array.isArray(value)\n ) {\n for (const limitKey of Object.keys(value as Record<string, unknown>)) {\n if (!limitKeys.includes(limitKey)) ignored.push(`limits.${limitKey}`);\n }\n }\n }\n return ignored;\n}\n"],"mappings":";AAaA,IAAa,IAAyB;CACpC;CACA;CACA;CACA;CACA;CACA;CACD;AAGD,SAAgB,EAAsB,GAA+C;AACnF,QAAQ,EAA6C,SAAS,EAAK;;AAGrE,IAAa,IAAmB;CAAC;CAAO;CAAU;CAAO,EAC5C,IAAmB;CAAC;CAAc;CAAsB;CAAW,EAsBnE,IAAqC;CAChD,SAAS;EAAE,cAAc;EAAM,iBAAiB;EAAI,iBAAiB;EAAI;CACzE,MAAM;EACJ,cAAc;EACd,aAAa;EACb,kBAAkB;EAClB,kBAAkB;EAClB,sBAAsB;EACtB,gBAAgB;EACjB;CACD,QAAQ;EAAE,iBAAiB;EAAI,uBAAuB;EAAI;CAC1D,WAAW;EAAE,mBAAmB;EAAM,iBAAiB;EAAQ,iBAAiB;EAAI;CACpF,UAAU;EAAE,eAAe;EAAI,kBAAkB;EAAI;CACrD,WAAW;EAAE,4BAA4B;EAAM,2BAA2B;EAAI;CAC/E,EAGY,IAAqB;AAKlC,SAAgB,EAAU,GAAyB;AACjD,QAAO,EACJ,MAAM,IAAI,CACV,KAAK,MAAU,EAAM,MAAM,CAAC,CAC5B,OAAO,QAAQ;;AAIpB,SAAgB,EAAW,GAAyB;AAClD,QAAO,EACJ,MAAM,KAAK,CACX,KAAK,MAAU,EAAM,MAAM,CAAC,CAC5B,OAAO,QAAQ;;AAGpB,IAAM,IAAN,cAA8B,MAAM;AAGpC,SAAS,EAAoB,GAAe,GAAmC;CAC7E,IAAM,IAAU,EAAM,MAAM;AAC5B,KAAI,CAAC,EAAS;CACd,IAAM,IAAS,OAAO,EAAQ;AAC9B,KAAI,CAAC,OAAO,UAAU,EAAO,IAAI,IAAS,EACxC,OAAM,IAAI,EAAgB,GAAG,EAAM,uDAAuD;AAE5F,QAAO;;AAIT,SAAS,EAAa,GAAe,GAAe,GAAiC;CACnF,IAAM,IAAU,EAAM,MAAM;AAC5B,KAAI,CAAC,EAAS;CACd,IAAM,IAAS,OAAO,EAAQ;AAC9B,KAAI,CAAC,OAAO,UAAU,EAAO,IAAI,IAAS,KAAO,IAAA,KAC/C,OAAM,IAAI,EACR,GAAG,EAAM,uCAAuC,EAAI,MAAM,EAAmB,kBAC9E;AAEH,QAAO;;AAGT,SAAS,EAAoB,GAA0B;AACrD,MAAK,IAAM,KAAW,EACpB,KAAI;AAEF,MAAI,OAAO,GAAS,IAAI;SAClB;AACN,QAAM,IAAI,EAAgB,IAAI,EAAQ,sCAAsC;;;AAKlF,SAAS,EAA+C,GAAwB;AAC9E,QAAO,OAAO,YACZ,OAAO,QAAQ,EAAQ,CAAC,QAAQ,GAAG,OAAW,MAAU,KAAA,KAAa,MAAU,GAAG,CACnF;;AAGH,SAAS,EAAmB,GAAiD;CAC3E,IAAM,IAAkB,EAAU,EAAM,gBAAgB,EAClD,IAAkB,EAAW,EAAM,gBAAgB;AAEzD,QADA,EAAoB,EAAgB,EAC7B;EACL,cAAc,EAAM;EACpB,GAAI,EAAgB,SAAS,IAAI,EAAE,oBAAiB,GAAG,EAAE;EACzD,GAAI,EAAgB,SAAS,IAAI,EAAE,oBAAiB,GAAG,EAAE;EAC1D;;AAGH,SAAS,EAAgB,GAA8C;CACrE,IAAM,IAAe,EAAU,EAAM,aAAa,EAC5C,IAAc,EAAU,EAAM,YAAY,EAC1C,IAAS,EAAY;EACzB,sBAAsB,EACpB,EAAM,sBACN,+BACD;EACD,gBAAgB,EAAoB,EAAM,gBAAgB,oBAAoB;EAC/E,CAAC;AACF,QAAO;EACL,GAAI,EAAa,SAAS,IAAI,EAAE,iBAAc,GAAG,EAAE;EACnD,GAAI,EAAY,SAAS,IAAI,EAAE,gBAAa,GAAG,EAAE;EACjD,GAAI,EAAM,mBAAmB,EAAE,kBAAkB,EAAM,kBAAkB,GAAG,EAAE;EAC9E,GAAI,EAAM,mBAAmB,EAAE,kBAAkB,EAAM,kBAAkB,GAAG,EAAE;EAC9E,GAAI,OAAO,KAAK,EAAO,CAAC,SAAS,IAAI,EAAE,WAAQ,GAAG,EAAE;EACrD;;AAGH,SAAS,EAAkB,GAAgD;AACzE,QAAO,EAAY;EACjB,iBAAiB,EAAoB,EAAM,iBAAiB,qBAAqB;EACjF,uBAAuB,EACrB,EAAM,uBACN,mCACD;EACF,CAAC;;AAGJ,SAAS,EAAqB,GAAmD;CAC/E,IAAM,IAAS,EAAY;EACzB,mBAAmB,EAAoB,EAAM,mBAAmB,sBAAsB;EACtF,iBAAiB,EAAoB,EAAM,iBAAiB,oBAAoB;EAChF,iBAAiB,EAAoB,EAAM,iBAAiB,oBAAoB;EACjF,CAAC;AACF,QAAO,OAAO,KAAK,EAAO,CAAC,SAAS,IAAI,EAAE,WAAQ,GAAG,EAAE;;AAGzD,SAAS,EAAoB,GAAkD;CAC7E,IAAM,IAAgB,EAAU,EAAM,cAAc,EAC9C,IAAmB,EAAU,EAAM,iBAAiB,CAAC,KAAK,MAC9D,EAAS,aAAa,CACvB;AACD,QAAO;EACL,GAAI,EAAc,SAAS,IAAI,EAAE,kBAAe,GAAG,EAAE;EACrD,GAAI,EAAiB,SAAS,IAAI,EAAE,qBAAkB,GAAG,EAAE;EAC5D;;AAGH,SAAS,EAAqB,GAAmD;CAC/E,IAAM,IAAS,EAAY;EACzB,4BAA4B,EAC1B,EAAM,4BACN,4BACA,EACD;EACD,2BAA2B,EACzB,EAAM,2BACN,0BACA,EACD;EACF,CAAC;AACF,KAAI,OAAO,KAAK,EAAO,CAAC,WAAW,EACjC,OAAM,IAAI,EAAgB,qCAAqC;AAEjE,QAAO;;AAOT,SAAgB,EACd,GACA,GACoB;AACpB,KAAI;AACF,UAAQ,GAAR;GACE,KAAK,UACH,QAAO;IAAE,IAAI;IAAM,QAAQ,EAAmB,EAAM,QAAQ;IAAE;GAChE,KAAK,OACH,QAAO;IAAE,IAAI;IAAM,QAAQ,EAAgB,EAAM,KAAK;IAAE;GAC1D,KAAK,SACH,QAAO;IAAE,IAAI;IAAM,QAAQ,EAAkB,EAAM,OAAO;IAAE;GAC9D,KAAK,aACH,QAAO;IAAE,IAAI;IAAM,QAAQ,EAAqB,EAAM,UAAU;IAAE;GACpE,KAAK,WACH,QAAO;IAAE,IAAI;IAAM,QAAQ,EAAoB,EAAM,SAAS;IAAE;GAClE,KAAK,YACH,QAAO;IAAE,IAAI;IAAM,QAAQ,EAAqB,EAAM,UAAU;IAAE;;UAE/D,GAAO;AACd,MAAI,aAAiB,EAAiB,QAAO;GAAE,IAAI;GAAO,OAAO,EAAM;GAAS;AAChF,QAAM;;;AAKV,IAAM,IAAgE;CACpE,SAAS;EAAC;EAAgB;EAAmB;EAAmB;EAAiB;CACjF,MAAM;EAAC;EAAgB;EAAe;EAAoB;EAAoB;EAAS;CACvF,UAAU,CAAC,iBAAiB,mBAAmB;CAC/C,QAAQ,CAAC,mBAAmB,wBAAwB;CACpD,YAAY,CAAC,wBAAwB,SAAS;CAC9C,WAAW,CAAC,8BAA8B,4BAA4B;CACvE,EAGK,IAAsE;CAC1E,MAAM,CAAC,wBAAwB,iBAAiB;CAChD,YAAY;EAAC;EAAqB;EAAmB;EAAkB;CACxE;AAOD,SAAgB,EAAqB,GAAkB,GAAkC;CACvF,IAAM,IAAW,EAAc;AAC/B,KAAI,CAAC,EAAU,QAAO;AACtB,KAAI,CAAC,KAAU,OAAO,KAAW,YAAY,MAAM,QAAQ,EAAO,CAAE,QAAO,EAAE;CAE7E,IAAM,IAAoB,EAAE;AAC5B,MAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,EAAkC,EAAE;AAC5E,MAAI,CAAC,EAAS,SAAS,EAAI,EAAE;AAC3B,KAAQ,KAAK,EAAI;AACjB;;EAEF,IAAM,IAAY,EAAoB;AACtC,MACE,MAAQ,YACR,KACA,KACA,OAAO,KAAU,YACjB,CAAC,MAAM,QAAQ,EAAM,OAEhB,IAAM,KAAY,OAAO,KAAK,EAAiC,CAClE,CAAK,EAAU,SAAS,EAAS,IAAE,EAAQ,KAAK,UAAU,IAAW;;AAI3E,QAAO"}