@buyong/pi-codex-auto-review 0.0.0-stage → 0.2.2

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1.  Definitions.
+
+    "License" shall mean the terms and conditions for use, reproduction,
+    and distribution as defined by Sections 1 through 9 of this document.
+
+    "Licensor" shall mean the copyright owner or entity authorized by
+    the copyright owner that is granting the License.
+
+    "Legal Entity" shall mean the union of the acting entity and all
+    other entities that control, are controlled by, or are under common
+    control with that entity. For the purposes of this definition,
+    "control" means (i) the power, direct or indirect, to cause the
+    direction or management of such entity, whether by contract or
+    otherwise, or (ii) ownership of fifty percent (50%) or more of the
+    outstanding shares, or (iii) beneficial ownership of such entity.
+
+    "You" (or "Your") shall mean an individual or Legal Entity
+    exercising permissions granted by this License.
+
+    "Source" form shall mean the preferred form for making modifications,
+    including but not limited to software source code, documentation
+    source, and configuration files.
+
+    "Object" form shall mean any form resulting from mechanical
+    transformation or translation of a Source form, including but
+    not limited to compiled object code, generated documentation,
+    and conversions to other media types.
+
+    "Work" shall mean the work of authorship, whether in Source or
+    Object form, made available under the License, as indicated by a
+    copyright notice that is included in or attached to the work
+    (an example is provided in the Appendix below).
+
+    "Derivative Works" shall mean any work, whether in Source or Object
+    form, that is based on (or derived from) the Work and for which the
+    editorial revisions, annotations, elaborations, or other modifications
+    represent, as a whole, an original work of authorship. For the purposes
+    of this License, Derivative Works shall not include works that remain
+    separable from, or merely link (or bind by name) to the interfaces of,
+    the Work and Derivative Works thereof.
+
+    "Contribution" shall mean any work of authorship, including
+    the original version of the Work and any modifications or additions
+    to that Work or Derivative Works thereof, that is intentionally
+    submitted to Licensor for inclusion in the Work by the copyright owner
+    or by an individual or Legal Entity authorized to submit on behalf of
+    the copyright owner. For the purposes of this definition, "submitted"
+    means any form of electronic, verbal, or written communication sent
+    to the Licensor or its representatives, including but not limited to
+    communication on electronic mailing lists, source code control systems,
+    and issue tracking systems that are managed by, or on behalf of, the
+    Licensor for the purpose of discussing and improving the Work, but
+    excluding communication that is conspicuously marked or otherwise
+    designated in writing by the copyright owner as "Not a Contribution."
+
+    "Contributor" shall mean Licensor and any individual or Legal Entity
+    on behalf of whom a Contribution has been received by Licensor and
+    subsequently incorporated within the Work.
+
+2.  Grant of Copyright License. Subject to the terms and conditions of
+    this License, each Contributor hereby grants to You a perpetual,
+    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+    copyright license to reproduce, prepare Derivative Works of,
+    publicly display, publicly perform, sublicense, and distribute the
+    Work and such Derivative Works in Source or Object form.
+
+3.  Grant of Patent License. Subject to the terms and conditions of
+    this License, each Contributor hereby grants to You a perpetual,
+    worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+    (except as stated in this section) patent license to make, have made,
+    use, offer to sell, sell, import, and otherwise transfer the Work,
+    where such license applies only to those patent claims licensable
+    by such Contributor that are necessarily infringed by their
+    Contribution(s) alone or by combination of their Contribution(s)
+    with the Work to which such Contribution(s) was submitted. If You
+    institute patent litigation against any entity (including a
+    cross-claim or counterclaim in a lawsuit) alleging that the Work
+    or a Contribution incorporated within the Work constitutes direct
+    or contributory patent infringement, then any patent licenses
+    granted to You under this License for that Work shall terminate
+    as of the date such litigation is filed.
+
+4.  Redistribution. You may reproduce and distribute copies of the
+    Work or Derivative Works thereof in any medium, with or without
+    modifications, and in Source or Object form, provided that You
+    meet the following conditions:
+
+    (a) You must give any other recipients of the Work or
+    Derivative Works a copy of this License; and
+
+    (b) You must cause any modified files to carry prominent notices
+    stating that You changed the files; and
+
+    (c) You must retain, in the Source form of any Derivative Works
+    that You distribute, all copyright, patent, trademark, and
+    attribution notices from the Source form of the Work,
+    excluding those notices that do not pertain to any part of
+    the Derivative Works; and
+
+    (d) If the Work includes a "NOTICE" text file as part of its
+    distribution, then any Derivative Works that You distribute must
+    include a readable copy of the attribution notices contained
+    within such NOTICE file, excluding those notices that do not
+    pertain to any part of the Derivative Works, in at least one
+    of the following places: within a NOTICE text file distributed
+    as part of the Derivative Works; within the Source form or
+    documentation, if provided along with the Derivative Works; or,
+    within a display generated by the Derivative Works, if and
+    wherever such third-party notices normally appear. The contents
+    of the NOTICE file are for informational purposes only and
+    do not modify the License. You may add Your own attribution
+    notices within Derivative Works that You distribute, alongside
+    or as an addendum to the NOTICE text from the Work, provided
+    that such additional attribution notices cannot be construed
+    as modifying the License.
+
+    You may add Your own copyright statement to Your modifications and
+    may provide additional or different license terms and conditions
+    for use, reproduction, or distribution of Your modifications, or
+    for any such Derivative Works as a whole, provided Your use,
+    reproduction, and distribution of the Work otherwise complies with
+    the conditions stated in this License.
+
+5.  Submission of Contributions. Unless You explicitly state otherwise,
+    any Contribution intentionally submitted for inclusion in the Work
+    by You to the Licensor shall be under the terms and conditions of
+    this License, without any additional terms or conditions.
+    Notwithstanding the above, nothing herein shall supersede or modify
+    the terms of any separate license agreement you may have executed
+    with Licensor regarding such Contributions.
+
+6.  Trademarks. This License does not grant permission to use the trade
+    names, trademarks, service marks, or product names of the Licensor,
+    except as required for reasonable and customary use in describing the
+    origin of the Work and reproducing the content of the NOTICE file.
+
+7.  Disclaimer of Warranty. Unless required by applicable law or
+    agreed to in writing, Licensor provides the Work (and each
+    Contributor provides its Contributions) on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+    implied, including, without limitation, any warranties or conditions
+    of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+    PARTICULAR PURPOSE. You are solely responsible for determining the
+    appropriateness of using or redistributing the Work and assume any
+    risks associated with Your exercise of permissions under this License.
+
+8.  Limitation of Liability. In no event and under no legal theory,
+    whether in tort (including negligence), contract, or otherwise,
+    unless required by applicable law (such as deliberate and grossly
+    negligent acts) or agreed to in writing, shall any Contributor be
+    liable to You for damages, including any direct, indirect, special,
+    incidental, or consequential damages of any character arising as a
+    result of this License or out of the use or inability to use the
+    Work (including but not limited to damages for loss of goodwill,
+    work stoppage, computer failure or malfunction, or any and all
+    other commercial damages or losses), even if such Contributor
+    has been advised of the possibility of such damages.
+
+9.  Accepting Warranty or Additional Liability. While redistributing
+    the Work or Derivative Works thereof, You may choose to offer,
+    and charge a fee for, acceptance of support, warranty, indemnity,
+    or other liability obligations and/or rights consistent with this
+    License. However, in accepting such obligations, You may act only
+    on Your own behalf and on Your sole responsibility, not on behalf
+    of any other Contributor, and only if You agree to indemnify,
+    defend, and hold each Contributor harmless for any liability
+    incurred by, or claims asserted against, such Contributor by reason
+    of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+Copyright 2025 OpenAI
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/NOTICE

@@ -0,0 +1,12 @@
+pi-codex-auto-review includes a TypeScript port of the execution policy
+contracts and the guardian policy from OpenAI Codex, revision
+a956835d020762cb2b570053af06f643a11c0ecc. The rule interpreter and evaluator
+run as JavaScript; the upstream Rust library and binaries are not bundled.
+The upstream attribution notice is reproduced below.
+
+OpenAI Codex
+Copyright 2025 OpenAI
+
+This project includes code derived from [Ratatui](https://github.com/ratatui/ratatui), licensed under the MIT license.
+Copyright (c) 2016-2022 Florian Dehau
+Copyright (c) 2023-2025 The Ratatui Developers

package/README.ko.md

@@ -0,0 +1,85 @@
+# pi-codex-auto-review
+
+[English](README.md) | **한국어**
+
+Codex의 ‘Approve for me’에서 영감을 받은 Pi 자동 실행 승인 검토 확장입니다. 승인 요청을 규칙과 보조 모델로 검토하거나 사용자가 직접 승인하도록 설정합니다. 승인된 도구는 Pi의 원래 실행기로 실행합니다. OS 샌드박스나 파일·네트워크 격리를 구성하지 않습니다. Codex 공개 소스 [`rust-v0.160.0`](https://github.com/openai/codex/tree/a956835d020762cb2b570053af06f643a11c0ecc)의 공개 승인 정책을 참고했습니다.
+
+## 설치
+
+`0.2.0`은 네이티브 규칙 실행 파일을 TypeScript 엔진으로 교체해 JavaScript로 배포하고, `vendor`의 재포장 Pi SDK를 제거합니다. 이 확장에는 Rust 컴파일러나 플랫폼별 규칙 바이너리가 필요하지 않습니다. Node.js와 Pi 호스트는 계속 필요하며, Pi 자체의 네이티브 모듈은 별개입니다.
+
+```sh
+pi install npm:@buyong/pi-codex-auto-review@0.2.2
+pi list
+```
+
+확장 로딩 실패를 Pi가 무시할 수 있으므로 보호 시작이 필수인 실행은 [사용법](docs/usage.ko.md)의 CLI·SDK 진입점을 사용합니다.
+
+## 동작 흐름
+
+1. **정책 판단** — 절대 차단 경로와 `commandRules`를 먼저 평가합니다. 차단 경로는 모델 검토나 저장 승인으로 해제하지 않습니다.
+2. **자동 검토** — 남은 작업은 검토 모델이 위험 등급과 결과를 판정합니다.
+3. **승인** — 남은 범위는 사용자가 확정합니다.
+4. **Pi 실행** — 승인된 작업을 원래 SDK 도구로 실행하며 취소 신호와 호출자 옵션을 전달합니다.
+
+## 승인 설정
+
+- `/approve`: **Approve for me**(보조 모델 검토) 또는 **Ask for approval**(사용자 승인)을 선택합니다.
+- `/approve-model`: Pi의 현재 `/scoped-models` 범위에서 등록된 모델을 검색해 보조 검토 모델을 선택합니다. **Use current Pi model**로 현재 주 모델을 사용하도록 되돌릴 수 있습니다.
+
+선택은 `<agentDir>/guard/settings.json`에 저장되고 다음 실행에도 적용됩니다. 주 대화 모델은 바뀌지 않습니다. 취소하면 기존 설정을 유지합니다.
+
+## 요구 사항
+
+| 항목 | 요구 |
+| --- | --- |
+| Node.js | 22.19 이상 |
+| Pi | 0.99.1 또는 1.0.0 |
+| 현재 소스 빌드 | TypeScript 사용. Rust 컴파일러와 플랫폼별 규칙 실행 파일 불필요 |
+| 규칙 실행 | 비동기 평가는 Node.js 작업 스레드, 동기 API는 Node.js 자식 프로세스 |
+
+## 보호 경계
+
+- 모드는 `workspace-write`(작업 공간과 기본 임시 경로 쓰기 허용)와 `read-only`입니다.
+- 제어·인증 경로와 프로젝트의 `.pi` 설정·확장 코드, 신뢰한 확장의 코드 디렉터리는 모델 쓰기를 절대 차단합니다.
+- 일반 범위를 넘는 파일 접근, 검토 규칙, 해석하지 못하는 명령은 실행 전에 검토합니다. 읽기와 기존 범위 안의 일반 작업은 정책에 따라 실행합니다.
+- 승인은 한 번, 세션, 규칙 저장 중 선택하며, 저장 승인은 정확한 도구·입력·정책에 묶입니다.
+- 자동 검토는 기본적으로 현재 모델로 수행하고, 반복 거부되면 실제 작업을 중단합니다. 검토 오류는 승인으로 바뀌지 않습니다.
+- MCP 도구 승인과 프로젝트 지침 탐색도 같은 신뢰·검토 경계 안에 둡니다.
+
+각 결합 조건과 설정은 [사용법](docs/usage.ko.md) 문서에 있습니다.
+
+## 한계와 비보장
+
+- 승인된 셸과 인터프리터는 호스트 권한으로 실행합니다. 검토에 표시한 파일·도메인 범위는 OS가 강제하는 접근 제한이 아닙니다.
+- 재귀 디렉터리 탐색·하드링크 전수 검사·네트워크 프록시를 구성하지 않습니다. 간접 파일 접근과 실행 중 목적지 변경을 격리하지 않습니다.
+- Pi, 신뢰한 확장 코드와 외부 MCP 서버의 내부 실행은 신뢰 경계에 포함됩니다.
+- 이미 MCP 서버에 전달한 요청의 취소 효과는 외부 공급자의 구현에 달려 있습니다.
+- 공개 정책·흐름의 호환성 검증은 독점 Codex 모델과 모든 판단이 같다는 뜻이 아닙니다.
+- 별도로 설치한 Pi 호스트의 의존성을 자동으로 교체하지 않습니다. 이 저장소의 조치 근거는 [의존성 보안](docs/security/dependencies.ko.md) 문서에 있습니다.
+
+## 검증
+
+```sh
+npm run verify:guard
+```
+
+`verify:guard`는 빌드와 현재 운영체제의 전체 로컬 검증을 실행합니다. 다른 운영체제와 실모델의 결과는 별도 실행 근거로 기록하며 로컬 통과로 대신하지 않습니다.
+
+- `npm run test:*` 단일 검증은 실제 자격 증명이나 유료 모델을 사용하지 않습니다. 환경 제한·의존성 부재는 통과로 처리하지 않습니다.
+- `npm run verify:platform`은 현재 운영체제의 전체 검증을 실행합니다.
+- GitHub Actions의 `자동 검토 운영체제 검증`은 실제 Linux x64 검사와 Docker 이미지·결과 반출을 수행합니다. workflow에는 Ollama 키를 전달하지 않습니다.
+- Windows의 `verify:windows`는 규칙 엔진·승인 정책·파일 실행과 취소를 검증합니다. 전체 셸 실행 지원을 검증하는 명령은 아닙니다.
+- Docker 컨테이너 검증 활용은 [사용법의 Docker 절](docs/usage.ko.md#docker에서-ollama-cloud-검증)에 있습니다.
+- 각 실행은 `.reports/pi-guard/runs/<실행 ID>/<플랫폼>/`에 저장되고, 보호·허용·차단 사례는 [보호 경계 검증표](docs/testing/auto-review-protection.ko.md)에 있습니다.
+
+## 문서
+
+- [사용법](docs/usage.ko.md) · [English](docs/usage.md) — 설치, 소스 빌드, CLI·SDK, 정책, Docker 검증
+- [배포 안내](docs/publishing.ko.md) · [English](docs/publishing.md) — `pnpm release`, npm Trusted Publishing, GitHub Actions
+- [의존성 보안](docs/security/dependencies.ko.md) · [English](docs/security/dependencies.md) — 감사 항목, 수정 근거와 적용 범위
+- [보호 경계 검증](docs/testing/auto-review-protection.ko.md) · [English](docs/testing/auto-review-protection.md) — 허용·차단 사례, 실패, 취소와 미검증 범위
+
+## 라이선스
+
+[Apache-2.0](LICENSE). Codex 규칙 계약의 TypeScript 이식과 포함된 정책의 출처 표시는 [NOTICE](NOTICE)에 유지합니다.

package/README.md

@@ -1,3 +1,85 @@
-# Temporary Holding Version
+# pi-codex-auto-review
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**English** | [한국어](README.ko.md)
+
+A Pi extension for automatic execution approval review, inspired by Codex's “Approve for me”. Review approval requests with rules and a secondary model, or ask the user to approve them. Approved tools run through Pi's original executor. The extension does not configure an OS sandbox or file and network isolation. It draws on the public approval policies in Codex [`rust-v0.160.0`](https://github.com/openai/codex/tree/a956835d020762cb2b570053af06f643a11c0ecc).
+
+## Installation
+
+Version `0.2.0` replaces the native rule executables with a TypeScript engine distributed as JavaScript and removes the repackaged Pi SDK under `vendor`. The extension requires no Rust compiler or platform-specific rule binary. Node.js and the Pi host are still required; Pi's own native modules are separate.
+
+```sh
+pi install npm:@buyong/pi-codex-auto-review@0.2.2
+pi list
+```
+
+Pi can ignore extension loading failures. If approval protection must be ready before execution starts, use the CLI or SDK entry points in the [usage guide](docs/usage.md).
+
+## How it works
+
+1. **Policy evaluation** — Evaluate protected paths and `commandRules` first. Model review and saved approvals cannot override protected paths.
+2. **Automatic review** — The review model assesses the risk and outcome of remaining operations.
+3. **Approval** — The user confirms operations that still require approval.
+4. **Pi execution** — Run approved operations through the original SDK tools, preserving cancellation signals and caller options.
+
+## Approval settings
+
+- `/approve`: Choose **Approve for me** (secondary model review) or **Ask for approval** (user approval).
+- `/approve-model`: Search registered models and choose a secondary review model within Pi's current `/scoped-models` scope. Choose **Use current Pi model** to return to the main model.
+
+Selections are saved to `<agentDir>/guard/settings.json` and persist across runs. The main conversation model stays unchanged. Cancelling preserves the existing settings.
+
+## Requirements
+
+| Component | Requirement |
+| --- | --- |
+| Node.js | 22.19 or later |
+| Pi | 0.99.1 or 1.0.0 |
+| Current source build | TypeScript; no Rust compiler or platform-specific rule executable |
+| Rule runtime | Node.js worker for asynchronous evaluation; Node.js child process for the synchronous API |
+
+## Protection boundaries
+
+- Modes are `workspace-write` (writes to the workspace and default temporary paths) and `read-only`.
+- Model writes to control and authentication paths, project `.pi` settings and extension code, and trusted extension code directories are always blocked.
+- File access outside the normal scope, review rules, and commands that cannot be interpreted are reviewed before execution. Reads and ordinary operations within scope follow the policy.
+- Approvals can apply once, for the session, or as a saved rule. Saved approvals are bound to the exact tool, input, and policy.
+- Automatic review uses the current model by default and stops the actual task after repeated denials. Review errors never become approvals.
+- MCP tool approvals and project instruction discovery follow the same trust and review boundaries.
+
+See the [usage guide](docs/usage.md) for configuration and the exact conditions that bind approvals.
+
+## Limitations
+
+- Approved shells and interpreters run with host permissions. The file and domain scope shown during review is not an OS-enforced access restriction.
+- The extension does not configure recursive directory scans, exhaustive hard-link checks, or network proxies. It does not isolate indirect file access or destination changes during execution.
+- Pi, trusted extension code, and execution inside external MCP servers are part of the trust boundary.
+- Cancellation of requests already sent to an MCP server depends on the external provider's implementation.
+- Compatibility checks for public policies and flows do not establish identical decisions to the proprietary Codex model.
+- The extension does not automatically replace dependencies in a separately installed Pi host. See [dependency security](docs/security/dependencies.md) for this repository's remediation evidence.
+
+## Verification
+
+```sh
+npm run verify:guard
+```
+
+`verify:guard` builds the project and runs all local checks for the current operating system. Results for other operating systems and live models require separate execution evidence.
+
+- Individual `npm run test:*` checks do not use real credentials or paid models. Environment restrictions and missing dependencies are not treated as passes.
+- `npm run verify:platform` runs the full checks for the current operating system.
+- The GitHub Actions workflow `자동 검토 운영체제 검증` runs on Linux x64 and exports the Docker image and results. It receives no Ollama key.
+- Windows `verify:windows` checks the rule engine, approval policy, file execution, and cancellation. It does not verify full shell execution support.
+- See the [Docker section](docs/usage.md#ollama-cloud-verification-in-docker) for container verification.
+- Each run is stored under `.reports/pi-guard/runs/<run ID>/<platform>/`. See the [protection verification matrix](docs/testing/auto-review-protection.md) for allowed, blocked, and failure cases.
+
+## Documentation
+
+- [Usage](docs/usage.md) · [한국어](docs/usage.ko.md) — Installation, source builds, CLI, SDK, policies, and Docker verification.
+- [Publishing](docs/publishing.md) · [한국어](docs/publishing.ko.md) — `pnpm release`, npm Trusted Publishing, and GitHub Actions.
+- [Dependency security](docs/security/dependencies.md) · [한국어](docs/security/dependencies.ko.md) — Audit findings, fixes, and their scope.
+- [Protection verification](docs/testing/auto-review-protection.md) · [한국어](docs/testing/auto-review-protection.ko.md) — Allowed and blocked cases, failures, cancellation, and unverified boundaries.
+
+## License
+
+[Apache-2.0](LICENSE). Attribution for the TypeScript port of Codex rule contracts and the included policies is preserved in [NOTICE](NOTICE).

package/dist/approval-commands.d.ts

@@ -0,0 +1,4 @@
+import { type ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import type { ApprovalSettingsStore } from "./approval-settings.js";
+import type { GuardController } from "./tools/controller.js";
+export declare function registerApprovalCommands(pi: ExtensionAPI, guard: GuardController, store: ApprovalSettingsStore): void;

package/dist/approval-commands.js

@@ -0,0 +1,230 @@
+import { getSelectListTheme, } from "@earendil-works/pi-coding-agent";
+import { Container, fuzzyFilter, Input, Key, matchesKey, SelectList, Spacer, Text, } from "@earendil-works/pi-tui";
+import { redact } from "./audit.js";
+import { canonicalJson, GuardError } from "./contracts.js";
+import { validateSettings } from "./policy/index.js";
+const CURRENT_MODEL = "current";
+const modeNames = {
+    auto_review: "Approve for me",
+    user: "Ask for approval",
+};
+// Match the public Codex permission picker: https://learn.chatgpt.com/docs/security-administration
+const approvalModes = [
+    {
+        value: "auto_review",
+        label: modeNames.auto_review,
+        description: "Only ask for actions detected as potentially unsafe",
+    },
+    {
+        value: "user",
+        label: modeNames.user,
+        description: "Always ask to edit external files and use the internet",
+    },
+];
+class ApprovalModePicker extends Container {
+    list;
+    constructor(current, finish) {
+        super();
+        this.addChild(new Text(`Approval mode — Current: ${modeNames[current]}`, 0, 0));
+        this.addChild(new Spacer(1));
+        this.list = new SelectList(approvalModes, approvalModes.length, getSelectListTheme(), { maxPrimaryColumnWidth: 22 });
+        this.list.setSelectedIndex(approvalModes.findIndex((item) => item.value === current));
+        this.list.onSelect = (item) => finish(item.value);
+        this.list.onCancel = () => finish(undefined);
+        this.addChild(this.list);
+        this.addChild(new Spacer(1));
+        const description = new Text(this.list.getSelectedItem()?.description ?? "", 0, 0);
+        this.list.onSelectionChange = (item) => description.setText(item.description ?? "");
+        this.addChild(description);
+        this.addChild(new Spacer(1));
+        this.addChild(new Text("↑↓ Select · Enter Apply · Esc Cancel", 0, 0));
+    }
+    handleInput(data) {
+        this.list.handleInput(data);
+    }
+}
+function availableReviewModels(context) {
+    const available = context.modelRegistry.getAvailable();
+    const scoped = context.scopedModels ?? [];
+    if (!scoped.length)
+        return available;
+    const key = (model) => canonicalJson({ provider: model.provider, id: model.id });
+    const byIdentity = new Map(available.map((model) => [key(model), model]));
+    const seen = new Set();
+    return scoped.flatMap(({ model }) => {
+        const identity = key(model), registered = byIdentity.get(identity);
+        if (!registered || seen.has(identity))
+            return [];
+        seen.add(identity);
+        return [registered];
+    });
+}
+class ApprovalModelPicker extends Container {
+    items;
+    finish;
+    input = new Input();
+    list;
+    results = new Container();
+    filtered;
+    get focused() {
+        return this.input.focused;
+    }
+    set focused(value) {
+        this.input.focused = value;
+    }
+    constructor(items, selected, finish, search) {
+        super();
+        this.items = items;
+        this.finish = finish;
+        this.addChild(new Text("Approval review model", 0, 0));
+        this.addChild(new Spacer(1));
+        this.addChild(this.input);
+        this.addChild(new Spacer(1));
+        this.addChild(this.results);
+        this.addChild(new Text("Search · ↑↓ Select · Enter Apply · Esc Cancel", 0, 0));
+        this.filtered = items;
+        this.input.setValue(search);
+        this.filter(search);
+        const index = this.filtered.findIndex((item) => item.value === selected);
+        if (index >= 0)
+            this.list.setSelectedIndex(index);
+    }
+    filter(query) {
+        this.filtered = query
+            ? fuzzyFilter(this.items, query, (item) => `${item.label} ${item.description ?? ""}`)
+            : this.items;
+        this.list = new SelectList(this.filtered, 12, getSelectListTheme());
+        this.list.onSelect = (item) => this.finish(item.value);
+        this.list.onCancel = () => this.finish(undefined);
+        this.results.clear();
+        this.results.addChild(this.filtered.length
+            ? this.list
+            : new Text("No matching models.", 0, 0));
+    }
+    handleInput(data) {
+        if (matchesKey(data, Key.escape))
+            this.finish(undefined);
+        else if (matchesKey(data, Key.enter) ||
+            matchesKey(data, Key.up) ||
+            matchesKey(data, Key.down))
+            this.list.handleInput(data);
+        else {
+            const before = this.input.getValue();
+            this.input.handleInput(data);
+            if (this.input.getValue() !== before)
+                this.filter(this.input.getValue());
+        }
+    }
+}
+async function chooseReviewModel(context, current, search) {
+    const models = availableReviewModels(context);
+    const items = [
+        {
+            value: CURRENT_MODEL,
+            label: "Use current Pi model",
+            description: "Follow the model selected for the main task.",
+        },
+        ...models.map((model) => ({
+            value: canonicalJson({ provider: model.provider, id: model.id }),
+            label: model.name || model.id,
+            description: `${model.provider}/${model.id}`,
+        })),
+    ];
+    const selected = current ? canonicalJson(current) : CURRENT_MODEL;
+    const result = context.mode === "rpc"
+        ? await context.ui
+            .select("Approval review model", items.map((item) => `${item.label} — ${item.description}`))
+            .then((value) => value === undefined
+            ? undefined
+            : items[items.findIndex((item) => `${item.label} — ${item.description}` ===
+                value)]?.value)
+        : await context.ui.custom((_tui, _theme, _keys, done) => new ApprovalModelPicker(items, selected, done, search));
+    if (result === undefined)
+        return undefined;
+    return result === CURRENT_MODEL
+        ? null
+        : JSON.parse(result);
+}
+async function retryDeniedAction(pi, guard, context) {
+    const denials = [...guard.approvals.lifecycle.recentDenials].reverse();
+    if (!denials.length) {
+        context.ui.notify("No recent denied actions to review again.", "info");
+        return;
+    }
+    const choices = denials.map((item) => `${item.action.tool} | ${redact(canonicalJson(item.action.args))} | ${item.assessment.rationale} | ${item.id}`);
+    const selected = await context.ui.select("Choose a denied action to review again once", choices);
+    const index = choices.indexOf(selected ?? "");
+    const denial = denials[index];
+    if (!denial)
+        return;
+    const retry = await guard.authorizeRetry(denial.id, context);
+    if (retry.denial.action.source === "user-bash") {
+        await guard.retryUserBash(retry.denial.action, context);
+        context.ui.notify("The selected command was reviewed again and executed.", "info");
+        return;
+    }
+    const instruction = retry.denial.action.source === "nested"
+        ? "Invoke only this exact tool through codemode to preserve the original nested source."
+        : "Retry only this exact tool action.";
+    pi.sendUserMessage(`${instruction}\nTool: ${retry.denial.action.tool}\nArguments: ${canonicalJson(retry.args)}\nThe user selected denial ${retry.denial.id} for one retry. The controller holds a one-use exact-action marker; automatic review and policy still apply. Do not repeat unrelated earlier side effects.`, { expandPromptTemplates: false });
+}
+export function registerApprovalCommands(pi, guard, store) {
+    const requireUI = (context) => {
+        if (!context.hasUI)
+            throw new GuardError("APPROVAL_UI_UNAVAILABLE", "Approval settings require an interactive Pi session");
+    };
+    const apply = async (patch, context) => {
+        await guard.updateSettings((current) => validateSettings({ ...current, ...patch }), context.cwd, (settings) => store.save(settings));
+        context.ui.setStatus("auto-review", undefined);
+    };
+    pi.registerCommand("approve", {
+        description: "Choose an approval mode, or use /approve retry to review a denied action again once.",
+        handler: async (args, context) => {
+            requireUI(context);
+            await context.waitForIdle();
+            if (args.trim() === "retry") {
+                await retryDeniedAction(pi, guard, context);
+                return;
+            }
+            if (args.trim())
+                throw new GuardError("INVALID_APPROVAL_COMMAND", "Use /approve to choose a mode or /approve retry to review a denied action again.");
+            const current = guard.options.settings;
+            const choices = approvalModes.map((item) => `${item.label} — ${item.description}`);
+            const choice = context.mode === "rpc"
+                ? await context.ui
+                    .select(`Approval mode — Current: ${modeNames[current.approvalsReviewer]}`, choices)
+                    .then((selected) => approvalModes[choices.indexOf(selected ?? "")]
+                    ?.value)
+                : await context.ui.custom((_tui, _theme, _keys, done) => new ApprovalModePicker(current.approvalsReviewer, done));
+            if (choice === undefined)
+                return;
+            const reviewer = choice === "auto_review"
+                ? "auto_review"
+                : choice === "user"
+                    ? "user"
+                    : undefined;
+            if (!reviewer)
+                return;
+            await apply({ approvalsReviewer: reviewer }, context);
+            context.ui.notify(`Approval mode: ${modeNames[reviewer]}`, "info");
+        },
+    });
+    pi.registerCommand("approve-model", {
+        description: "Choose an approval review model from /scoped-models.",
+        handler: async (args, context) => {
+            requireUI(context);
+            await context.waitForIdle();
+            const current = guard.options.settings;
+            const model = await chooseReviewModel(context, current.reviewModel, args.trim());
+            if (model === undefined)
+                return;
+            if (model &&
+                !availableReviewModels(context).some((candidate) => candidate.provider === model.provider &&
+                    candidate.id === model.id))
+                throw new GuardError("MODEL_UNAVAILABLE", "Selected review model is no longer available in the current model scope");
+            await apply({ reviewModel: model }, context);
+            context.ui.notify(`Approval review model: ${model ? `${model.provider}/${model.id}` : "Use current Pi model"}`, "info");
+        },
+    });
+}
+//# sourceMappingURL=approval-commands.js.map

package/dist/approval-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-commands.js","sourceRoot":"","sources":["../src/approval-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,kBAAkB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACH,SAAS,EAET,WAAW,EACX,KAAK,EACL,GAAG,EACH,UAAU,EAEV,UAAU,EACV,MAAM,EACN,IAAI,GACP,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAsB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAIzE,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,MAAM,SAAS,GAAG;IACd,WAAW,EAAE,gBAAgB;IAC7B,IAAI,EAAE,kBAAkB;CAClB,CAAC;AACX,mGAAmG;AACnG,MAAM,aAAa,GAAiB;IAChC;QACI,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,SAAS,CAAC,WAAW;QAC5B,WAAW,EAAE,qDAAqD;KACrE;IACD;QACI,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,SAAS,CAAC,IAAI;QACrB,WAAW,EAAE,wDAAwD;KACxE;CACJ,CAAC;AAEF,MAAM,kBAAmB,SAAQ,SAAS;IACrB,IAAI,CAAa;IAClC,YACI,OAA2C,EAC3C,MAA2C;QAE3C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,CACT,IAAI,IAAI,CAAC,4BAA4B,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CACnE,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CACtB,aAAa,EACb,aAAa,CAAC,MAAM,EACpB,kBAAkB,EAAE,EACpB,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAChC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,gBAAgB,CACtB,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC,CAC5D,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,IAAI,EAAE,EAC9C,CAAC,EACD,CAAC,CACJ,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,IAAI,EAAE,EAAE,CACnC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,sCAAsC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,WAAW,CAAC,IAAY;QACpB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;CACJ;AAED,SAAS,qBAAqB,CAAC,OAAgC;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,KAAuC,EAAE,EAAE,CACpD,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,EACvB,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,OAAO,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,mBAAoB,SAAQ,SAAS;IAYlB;IAEA;IAbJ,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAc;IACT,OAAO,GAAG,IAAI,SAAS,EAAE,CAAC;IACnC,QAAQ,CAAe;IAC/B,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;IAC9B,CAAC;IACD,IAAI,OAAO,CAAC,KAAc;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,YACqB,KAAmB,EACpC,QAAgB,EACC,MAA2C,EAC5D,MAAc;QAEd,KAAK,EAAE,CAAC;QALS,UAAK,GAAL,KAAK,CAAc;QAEnB,WAAM,GAAN,MAAM,CAAqC;QAI5D,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,CACT,IAAI,IAAI,CAAC,+CAA+C,EAAE,CAAC,EAAE,CAAC,CAAC,CAClE,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CACjC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CACpC,CAAC;QACF,IAAI,KAAK,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IACO,MAAM,CAAC,KAAa;QACxB,IAAI,CAAC,QAAQ,GAAG,KAAK;YACjB,CAAC,CAAC,WAAW,CACP,IAAI,CAAC,KAAK,EACV,KAAK,EACL,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CACtD;YACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,QAAQ,CACjB,IAAI,CAAC,QAAQ,CAAC,MAAM;YAChB,CAAC,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC,EAAE,CAAC,CAAC,CAC9C,CAAC;IACN,CAAC;IACD,WAAW,CAAC,IAAY;QACpB,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aACpD,IACD,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC;YAC3B,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;YAE1B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;aAC3B,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,MAAM;gBAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3C,CAAC;IACL,CAAC;CACJ;AAED,KAAK,UAAU,iBAAiB,CAC5B,OAAgC,EAChC,OAAoB,EACpB,MAAc;IAEd,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAiB;QACxB;YACI,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,8CAA8C;SAC9D;QACD,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtB,KAAK,EAAE,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAChE,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE;YAC7B,WAAW,EAAE,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE;SAC/C,CAAC,CAAC;KACN,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAClE,MAAM,MAAM,GACR,OAAO,CAAC,IAAI,KAAK,KAAK;QAClB,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE;aACX,MAAM,CACH,uBAAuB,EACvB,KAAK,CAAC,GAAG,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,WAAW,EAAE,CAClD,CACJ;aACA,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACZ,KAAK,KAAK,SAAS;YACf,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,CACD,KAAK,CAAC,SAAS,CACX,CAAC,IAAI,EAAE,EAAE,CACL,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,WAAW,EAAE;gBACrC,KAAK,CACZ,CACJ,EAAE,KAAK,CACjB;QACP,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CACnB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAC1B,IAAI,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAC7D,CAAC;IACZ,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,MAAM,KAAK,aAAa;QAC3B,CAAC,CAAC,IAAI;QACN,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAiB,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC5B,EAAgB,EAChB,KAAsB,EACtB,OAAgC;IAEhC,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC;IACvE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,2CAA2C,EAAE,MAAM,CAAC,CAAC;QACvE,OAAO;IACX,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CACvB,CAAC,IAAI,EAAE,EAAE,CACL,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,MAAM,IAAI,CAAC,EAAE,EAAE,CACrH,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CACpC,6CAA6C,EAC7C,OAAO,CACV,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC7C,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,CAAC,EAAE,CAAC,MAAM,CACb,uDAAuD,EACvD,MAAM,CACT,CAAC;QACF,OAAO;IACX,CAAC;IACD,MAAM,WAAW,GACb,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;QACnC,CAAC,CAAC,sFAAsF;QACxF,CAAC,CAAC,oCAAoC,CAAC;IAC/C,EAAE,CAAC,eAAe,CACd,GAAG,WAAW,WAAW,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,gBAAgB,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,8BAA8B,KAAK,CAAC,MAAM,CAAC,EAAE,4JAA4J,EACnS,EAAE,qBAAqB,EAAE,KAAK,EAAE,CACnC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,wBAAwB,CACpC,EAAgB,EAChB,KAAsB,EACtB,KAA4B;IAE5B,MAAM,SAAS,GAAG,CAAC,OAAgC,EAAE,EAAE;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK;YACd,MAAM,IAAI,UAAU,CAChB,yBAAyB,EACzB,qDAAqD,CACxD,CAAC;IACV,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,EACf,KAEC,EACD,OAAgC,EAClC,EAAE;QACA,MAAM,KAAK,CAAC,cAAc,CACtB,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,EACvD,OAAO,CAAC,GAAG,EACX,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CACrC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE;QAC1B,WAAW,EACP,sFAAsF;QAC1F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YAC7B,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;gBAC1B,MAAM,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC5C,OAAO;YACX,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,EAAE;gBACX,MAAM,IAAI,UAAU,CAChB,0BAA0B,EAC1B,kFAAkF,CACrF,CAAC;YACN,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAC7B,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,WAAW,EAAE,CAClD,CAAC;YACF,MAAM,MAAM,GACR,OAAO,CAAC,IAAI,KAAK,KAAK;gBAClB,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE;qBACX,MAAM,CACH,4BAA4B,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAClE,OAAO,CACV;qBACA,IAAI,CACD,CAAC,QAAQ,EAAE,EAAE,CACT,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;oBAC1C,EAAE,KAAK,CAClB;gBACP,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CACnB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAC1B,IAAI,kBAAkB,CAClB,OAAO,CAAC,iBAAiB,EACzB,IAAI,CACP,CACR,CAAC;YACZ,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO;YACjC,MAAM,QAAQ,GACV,MAAM,KAAK,aAAa;gBACpB,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,MAAM,KAAK,MAAM;oBACjB,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,SAAS,CAAC;YACtB,IAAI,CAAC,QAAQ;gBAAE,OAAO;YACtB,MAAM,KAAK,CAAC,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;KACJ,CAAC,CAAC;IACH,EAAE,CAAC,eAAe,CAAC,eAAe,EAAE;QAChC,WAAW,EAAE,sDAAsD;QACnE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YAC7B,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CACjC,OAAO,EACP,OAAO,CAAC,WAAW,EACnB,IAAI,CAAC,IAAI,EAAE,CACd,CAAC;YACF,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAChC,IACI,KAAK;gBACL,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,IAAI,CAChC,CAAC,SAAS,EAAE,EAAE,CACV,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBACrC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAChC;gBAED,MAAM,IAAI,UAAU,CAChB,mBAAmB,EACnB,yEAAyE,CAC5E,CAAC;YACN,MAAM,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,EAAE,CAAC,MAAM,CACb,0BAA0B,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB,EAAE,EAC5F,MAAM,CACT,CAAC;QACN,CAAC;KACJ,CAAC,CAAC;AACP,CAAC"}