@decionis/mcp 0.1.0

package/dist/chunk-UN67W5FH.js

@@ -0,0 +1,479 @@
+#!/usr/bin/env node
+import {
+  LocalDecionisGateway,
+  PolicyFileRepository,
+  normalizeVerdict
+} from "./chunk-QSCP7MRQ.js";
+
+// src/agent/AgentContracts.ts
+var AgentHookInputError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "AgentHookInputError";
+  }
+};
+var AgentGateConfigurationError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "AgentGateConfigurationError";
+  }
+};
+
+// src/agent/AgentHookValues.ts
+var AgentHookValues = class _AgentHookValues {
+  static asRecord(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) return {};
+    return value;
+  }
+  static requireRecord(value) {
+    const record = _AgentHookValues.asRecord(value);
+    if (Object.keys(record).length === 0) {
+      throw new AgentHookInputError("The hook input must be a non-empty JSON object.");
+    }
+    return record;
+  }
+  static optionalString(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : null;
+  }
+  static requireString(value, field) {
+    const parsed = _AgentHookValues.optionalString(value);
+    if (!parsed) throw new AgentHookInputError(`The hook input is missing \`${field}\`.`);
+    return parsed;
+  }
+  static parseToolInput(value) {
+    if (typeof value !== "string") return _AgentHookValues.asRecord(value);
+    try {
+      return _AgentHookValues.asRecord(JSON.parse(value));
+    } catch {
+      throw new AgentHookInputError("The hook input contains invalid JSON tool arguments.");
+    }
+  }
+};
+
+// src/agent/AgentDecisionMapper.ts
+var AgentDecisionMapper = class _AgentDecisionMapper {
+  static fromProtocol(body, source, fallbackPolicyVersion = null) {
+    const outcome = AgentHookValues.optionalString(body.outcome);
+    const verdict = _AgentDecisionMapper.toVerdict(outcome);
+    const policyEvaluation = AgentHookValues.asRecord(body.policy_evaluation);
+    const selectedRule = AgentHookValues.optionalString(policyEvaluation.selected_rule_name);
+    const rationale = AgentHookValues.optionalString(policyEvaluation.selected_rule_rationale);
+    const resolution = AgentHookValues.optionalString(policyEvaluation.resolution);
+    const policyVersion = AgentHookValues.optionalString(body.policy_version) ?? AgentHookValues.optionalString(policyEvaluation.bundle_version) ?? fallbackPolicyVersion;
+    const reasonCodes = Array.isArray(body.reason_codes) ? body.reason_codes.filter((value) => typeof value === "string") : [];
+    return {
+      verdict,
+      reason: _AgentDecisionMapper.reason(verdict, {
+        selectedRule,
+        rationale,
+        resolution,
+        reasonCodes
+      }),
+      source,
+      outcome,
+      policyVersion,
+      matchedRule: selectedRule,
+      reasonCodes
+    };
+  }
+  static error(message, source) {
+    return {
+      verdict: "error",
+      reason: message,
+      source,
+      outcome: null,
+      policyVersion: null,
+      matchedRule: null,
+      reasonCodes: ["AGENT_GATE_ERROR"]
+    };
+  }
+  static toVerdict(outcome) {
+    const normalized = normalizeVerdict(outcome);
+    if (normalized === "allow" || normalized === "block" || normalized === "review" || normalized === "escalate") {
+      return normalized;
+    }
+    return "error";
+  }
+  static reason(verdict, context) {
+    if (context.rationale) return context.rationale;
+    if (context.selectedRule) {
+      return `Policy rule "${context.selectedRule}" returned ${verdict}.`;
+    }
+    if (context.reasonCodes.length > 0) {
+      return `Policy returned ${verdict}: ${context.reasonCodes.join(", ")}.`;
+    }
+    if (context.resolution) return `Policy returned ${verdict} (${context.resolution}).`;
+    return `Policy returned ${verdict}.`;
+  }
+};
+
+// src/agent/AgentPolicyPayload.ts
+var AgentPolicyPayload = class {
+  static build(toolCall) {
+    return {
+      action: `agent_tool:${toolCall.toolName}`,
+      agent_generated: true,
+      agent_provider: toolCall.host,
+      agent_session_id: toolCall.sessionId,
+      tool_name: toolCall.toolName,
+      tool_input: toolCall.toolInput,
+      working_directory: toolCall.cwd,
+      ...toolCall.toolUseId ? { tool_use_id: toolCall.toolUseId } : {},
+      ...toolCall.model ? { model: toolCall.model } : {},
+      ...toolCall.permissionMode ? { permission_mode: toolCall.permissionMode } : {}
+    };
+  }
+};
+
+// src/agent/LocalAgentGate.ts
+var LocalAgentGate = class {
+  source = "local";
+  gateway;
+  policyFiles;
+  workflowKey;
+  constructor(options = {}) {
+    this.gateway = options.gateway ?? new LocalDecionisGateway();
+    this.policyFiles = options.policyFiles ?? new PolicyFileRepository();
+    this.workflowKey = options.workflowKey ?? "agent_execution_gate";
+  }
+  async evaluate(toolCall) {
+    const policyFile = await this.policyFiles.read(void 0, toolCall.cwd);
+    if (!policyFile.ok) throw new Error(policyFile.message);
+    const published = await this.gateway.publishPolicy(policyFile.content, {
+      workflowKey: this.workflowKey
+    });
+    if (!published.ok) {
+      throw new Error(
+        `The Decionis policy could not be enforced (${published.reason}): ${published.errors.join(
+          "; "
+        )}`
+      );
+    }
+    const evaluated = await this.gateway.evaluate({
+      payload: AgentPolicyPayload.build(toolCall),
+      workflowKey: this.workflowKey,
+      mode: "enforce"
+    });
+    if (evaluated.status !== 200) {
+      throw new Error(`The local Decionis evaluator returned HTTP ${evaluated.status}.`);
+    }
+    return AgentDecisionMapper.fromProtocol(evaluated.body, "local", published.version);
+  }
+  close() {
+    return this.gateway.close();
+  }
+};
+
+// src/agent/RemoteAgentGate.ts
+import { createHash } from "crypto";
+var RemoteAgentGate = class {
+  constructor(options) {
+    this.options = options;
+    this.endpoint = options.endpoint.trim();
+    this.fetchImpl = options.fetchImpl ?? fetch;
+    this.timeoutMs = options.timeoutMs ?? 4e3;
+    this.workflowKey = options.workflowKey ?? "agent_execution_gate";
+  }
+  source = "remote";
+  endpoint;
+  fetchImpl;
+  timeoutMs;
+  workflowKey;
+  async evaluate(toolCall) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), this.timeoutMs);
+    try {
+      const idempotencyKey = this.idempotencyKey(toolCall);
+      const response = await this.fetchImpl(this.endpoint, {
+        method: "POST",
+        headers: {
+          authorization: `Bearer ${this.options.apiKey}`,
+          "content-type": "application/json",
+          "idempotency-key": idempotencyKey
+        },
+        body: JSON.stringify({
+          org_id: this.options.orgId,
+          decision_type: `agent_tool:${toolCall.toolName}`.slice(0, 120),
+          channel: toolCall.host,
+          mode: "ENFORCEMENT",
+          workflow_key: this.workflowKey,
+          idempotency_key: idempotencyKey,
+          context: AgentPolicyPayload.build(toolCall)
+        }),
+        signal: controller.signal
+      });
+      const body = AgentHookValues.asRecord(await response.json().catch(() => null));
+      if (!response.ok) {
+        const message = AgentHookValues.optionalString(body.message) ?? AgentHookValues.optionalString(body.error) ?? "unknown error";
+        throw new Error(
+          `The remote Decionis evaluator returned HTTP ${response.status}: ${message}`
+        );
+      }
+      if (!AgentHookValues.optionalString(body.outcome)) {
+        throw new Error("The remote Decionis evaluator returned no outcome.");
+      }
+      return AgentDecisionMapper.fromProtocol(body, "remote");
+    } finally {
+      clearTimeout(timeout);
+    }
+  }
+  idempotencyKey(toolCall) {
+    const source = JSON.stringify({
+      host: toolCall.host,
+      sessionId: toolCall.sessionId,
+      toolUseId: toolCall.toolUseId,
+      toolName: toolCall.toolName,
+      toolInput: toolCall.toolInput
+    });
+    return `agent-hook-${createHash("sha256").update(source).digest("hex")}`;
+  }
+};
+
+// src/agent/AgentGateFactory.ts
+var AgentGateFactory = class {
+  static create(env = process.env) {
+    const mode = (AgentHookValues.optionalString(env.DECIONIS_AGENT_GATE_MODE) ?? "auto").toLowerCase();
+    const endpoint = AgentHookValues.optionalString(env.DECIONIS_AGENT_GATE_URL);
+    const apiKey = AgentHookValues.optionalString(env.DECIONIS_API_KEY);
+    const orgId = AgentHookValues.optionalString(env.DECIONIS_ORG_ID);
+    const hasRemoteConfiguration = Boolean(endpoint || apiKey || orgId);
+    if (mode !== "auto" && mode !== "local" && mode !== "remote") {
+      throw new AgentGateConfigurationError(
+        "DECIONIS_AGENT_GATE_MODE must be `auto`, `local`, or `remote`."
+      );
+    }
+    if (mode === "local" || mode === "auto" && !hasRemoteConfiguration) {
+      return new LocalAgentGate();
+    }
+    if (!endpoint || !apiKey || !orgId) {
+      throw new AgentGateConfigurationError(
+        "Remote agent gating requires DECIONIS_AGENT_GATE_URL, DECIONIS_API_KEY, and DECIONIS_ORG_ID."
+      );
+    }
+    const configuredTimeout = Number.parseInt(env.DECIONIS_AGENT_GATE_TIMEOUT_MS ?? "", 10);
+    return new RemoteAgentGate({
+      endpoint,
+      apiKey,
+      orgId,
+      timeoutMs: Number.isFinite(configuredTimeout) && configuredTimeout > 0 ? configuredTimeout : 4e3
+    });
+  }
+};
+
+// src/agent/AgentHookRunner.ts
+var AgentHookRunner = class {
+  constructor(adapter, evaluator) {
+    this.adapter = adapter;
+    this.evaluator = evaluator;
+  }
+  async run(input) {
+    try {
+      const toolCall = this.adapter.parse(input);
+      const decision = await this.evaluator.evaluate(toolCall);
+      return this.adapter.format(decision, input);
+    } catch (error) {
+      return this.adapter.format(
+        AgentDecisionMapper.error(
+          error instanceof Error ? error.message : String(error),
+          this.evaluator.source
+        ),
+        input
+      );
+    }
+  }
+  close() {
+    return this.evaluator.close?.() ?? Promise.resolve();
+  }
+  static shouldBlock(decision) {
+    return decision.verdict !== "allow";
+  }
+};
+
+// src/agent/providers/SnakeCaseHookAdapter.ts
+var SnakeCaseHookAdapter = class {
+  parse(input) {
+    const event = AgentHookValues.requireRecord(input);
+    return {
+      host: this.host,
+      sessionId: AgentHookValues.requireString(event.session_id, "session_id"),
+      toolUseId: AgentHookValues.optionalString(event.tool_use_id),
+      toolName: AgentHookValues.requireString(event.tool_name, "tool_name"),
+      toolInput: AgentHookValues.parseToolInput(event.tool_input),
+      cwd: AgentHookValues.requireString(event.cwd, "cwd"),
+      model: AgentHookValues.optionalString(event.model),
+      permissionMode: AgentHookValues.optionalString(event.permission_mode)
+    };
+  }
+  format(decision, _input) {
+    if (!AgentHookRunner.shouldBlock(decision)) return {};
+    return {
+      hookSpecificOutput: {
+        hookEventName: "PreToolUse",
+        permissionDecision: "deny",
+        permissionDecisionReason: this.reason(decision)
+      }
+    };
+  }
+  reason(decision) {
+    const label = decision.verdict === "error" ? "gate error" : decision.verdict;
+    return `Decionis ${label}: ${decision.reason}`;
+  }
+};
+
+// src/agent/providers/ClaudeHookAdapter.ts
+var ClaudeHookAdapter = class extends SnakeCaseHookAdapter {
+  host = "claude";
+};
+
+// src/agent/providers/CodexHookAdapter.ts
+var CodexHookAdapter = class extends SnakeCaseHookAdapter {
+  host = "codex";
+};
+
+// src/agent/providers/CopilotHookAdapter.ts
+var CopilotHookAdapter = class {
+  host = "copilot";
+  parse(input) {
+    const event = AgentHookValues.requireRecord(input);
+    const usesCompatibleShape = AgentHookValues.optionalString(event.tool_name) !== null;
+    const toolInput = usesCompatibleShape ? event.tool_input : event.toolArgs;
+    return {
+      host: this.host,
+      sessionId: AgentHookValues.optionalString(usesCompatibleShape ? event.session_id : event.sessionId) ?? "unknown-session",
+      toolUseId: AgentHookValues.optionalString(
+        usesCompatibleShape ? event.tool_use_id : event.toolUseId
+      ),
+      toolName: AgentHookValues.requireString(
+        usesCompatibleShape ? event.tool_name : event.toolName,
+        usesCompatibleShape ? "tool_name" : "toolName"
+      ),
+      toolInput: AgentHookValues.parseToolInput(toolInput),
+      cwd: AgentHookValues.optionalString(event.cwd) ?? process.cwd(),
+      model: AgentHookValues.optionalString(event.model),
+      permissionMode: AgentHookValues.optionalString(
+        usesCompatibleShape ? event.permission_mode : event.permissionMode
+      )
+    };
+  }
+  format(decision, input) {
+    if (!AgentHookRunner.shouldBlock(decision)) return {};
+    const label = decision.verdict === "error" ? "gate error" : decision.verdict;
+    const reason = `Decionis ${label}: ${decision.reason}`;
+    const event = AgentHookValues.asRecord(input);
+    if (AgentHookValues.optionalString(event.tool_name) || AgentHookValues.optionalString(event.hook_event_name) === "PreToolUse") {
+      return {
+        hookSpecificOutput: {
+          hookEventName: "PreToolUse",
+          permissionDecision: "deny",
+          permissionDecisionReason: reason
+        }
+      };
+    }
+    return {
+      permissionDecision: "deny",
+      permissionDecisionReason: reason
+    };
+  }
+};
+
+// src/agent/AgentHostRegistry.ts
+var AgentHostRegistry = class {
+  static resolve(host) {
+    const normalized = host.trim().toLowerCase();
+    switch (normalized) {
+      case "codex":
+        return new CodexHookAdapter();
+      case "copilot":
+        return new CopilotHookAdapter();
+      case "claude":
+        return new ClaudeHookAdapter();
+      default:
+        throw new AgentGateConfigurationError(
+          "Choose an agent host with `decionis-agent-hook codex|copilot|claude`."
+        );
+    }
+  }
+};
+
+// src/agent/AgentHookCommand.ts
+var AgentHookCommand = class _AgentHookCommand {
+  static async run(args, options = {}) {
+    const input = options.input ?? process.stdin;
+    const output = options.output ?? process.stdout;
+    const errorOutput = options.errorOutput ?? process.stderr;
+    const host = _AgentHookCommand.hostArgument(args);
+    let adapter;
+    try {
+      adapter = AgentHostRegistry.resolve(host);
+    } catch (error) {
+      errorOutput.write(`${error instanceof Error ? error.message : String(error)}
+`);
+      return 2;
+    }
+    const raw = await _AgentHookCommand.readInput(input);
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      parsed = null;
+    }
+    let evaluator;
+    try {
+      evaluator = AgentGateFactory.create(options.env);
+    } catch (error) {
+      const denial = adapter.format(
+        {
+          verdict: "error",
+          reason: error instanceof Error ? error.message : String(error),
+          source: "local",
+          outcome: null,
+          policyVersion: null,
+          matchedRule: null,
+          reasonCodes: ["AGENT_GATE_CONFIGURATION_ERROR"]
+        },
+        parsed
+      );
+      output.write(`${JSON.stringify(denial)}
+`);
+      return 0;
+    }
+    const runner = new AgentHookRunner(adapter, evaluator);
+    try {
+      const result = await runner.run(parsed);
+      output.write(`${JSON.stringify(result)}
+`);
+      return 0;
+    } finally {
+      await runner.close();
+    }
+  }
+  static hostArgument(args) {
+    const providerIndex = args.indexOf("--provider");
+    if (providerIndex >= 0) return args[providerIndex + 1] ?? "";
+    return args.find((value) => !value.startsWith("-")) ?? "";
+  }
+  static async readInput(input) {
+    const chunks = [];
+    for await (const chunk of input) {
+      chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));
+    }
+    return Buffer.concat(chunks).toString("utf8").trim();
+  }
+};
+
+export {
+  AgentHookInputError,
+  AgentGateConfigurationError,
+  AgentDecisionMapper,
+  AgentPolicyPayload,
+  LocalAgentGate,
+  RemoteAgentGate,
+  AgentGateFactory,
+  AgentHookRunner,
+  ClaudeHookAdapter,
+  CodexHookAdapter,
+  CopilotHookAdapter,
+  AgentHostRegistry,
+  AgentHookCommand
+};
+//# sourceMappingURL=chunk-UN67W5FH.js.map

package/dist/chunk-UN67W5FH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agent/AgentContracts.ts","../src/agent/AgentHookValues.ts","../src/agent/AgentDecisionMapper.ts","../src/agent/AgentPolicyPayload.ts","../src/agent/LocalAgentGate.ts","../src/agent/RemoteAgentGate.ts","../src/agent/AgentGateFactory.ts","../src/agent/AgentHookRunner.ts","../src/agent/providers/SnakeCaseHookAdapter.ts","../src/agent/providers/ClaudeHookAdapter.ts","../src/agent/providers/CodexHookAdapter.ts","../src/agent/providers/CopilotHookAdapter.ts","../src/agent/AgentHostRegistry.ts","../src/agent/AgentHookCommand.ts"],"sourcesContent":["export type AgentHost = \"codex\" | \"copilot\" | \"claude\";\n\nexport type AgentGateVerdict = \"allow\" | \"block\" | \"review\" | \"escalate\" | \"error\";\n\nexport type AgentGateSource = \"local\" | \"remote\";\n\nexport interface AgentToolCall {\n  host: AgentHost;\n  sessionId: string;\n  toolUseId: string | null;\n  toolName: string;\n  toolInput: Record<string, unknown>;\n  cwd: string;\n  model: string | null;\n  permissionMode: string | null;\n}\n\nexport interface AgentGateDecision {\n  verdict: AgentGateVerdict;\n  reason: string;\n  source: AgentGateSource;\n  outcome: string | null;\n  policyVersion: string | null;\n  matchedRule: string | null;\n  reasonCodes: string[];\n}\n\nexport interface AgentGateEvaluator {\n  readonly source: AgentGateSource;\n  evaluate(toolCall: AgentToolCall): Promise<AgentGateDecision>;\n  close?(): Promise<void>;\n}\n\nexport interface AgentHostAdapter {\n  readonly host: AgentHost;\n  parse(input: unknown): AgentToolCall;\n  format(decision: AgentGateDecision, input?: unknown): Record<string, unknown>;\n}\n\nexport class AgentHookInputError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"AgentHookInputError\";\n  }\n}\n\nexport class AgentGateConfigurationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"AgentGateConfigurationError\";\n  }\n}\n","import { AgentHookInputError } from \"./AgentContracts.js\";\n\nexport class AgentHookValues {\n  static asRecord(value: unknown): Record<string, unknown> {\n    if (typeof value !== \"object\" || value === null || Array.isArray(value)) return {};\n    return value as Record<string, unknown>;\n  }\n\n  static requireRecord(value: unknown): Record<string, unknown> {\n    const record = AgentHookValues.asRecord(value);\n    if (Object.keys(record).length === 0) {\n      throw new AgentHookInputError(\"The hook input must be a non-empty JSON object.\");\n    }\n    return record;\n  }\n\n  static optionalString(value: unknown): string | null {\n    return typeof value === \"string\" && value.trim() ? value.trim() : null;\n  }\n\n  static requireString(value: unknown, field: string): string {\n    const parsed = AgentHookValues.optionalString(value);\n    if (!parsed) throw new AgentHookInputError(`The hook input is missing \\`${field}\\`.`);\n    return parsed;\n  }\n\n  static parseToolInput(value: unknown): Record<string, unknown> {\n    if (typeof value !== \"string\") return AgentHookValues.asRecord(value);\n    try {\n      return AgentHookValues.asRecord(JSON.parse(value));\n    } catch {\n      throw new AgentHookInputError(\"The hook input contains invalid JSON tool arguments.\");\n    }\n  }\n}\n","import { normalizeVerdict } from \"../Gateway.js\";\nimport { AgentHookValues } from \"./AgentHookValues.js\";\nimport type { AgentGateDecision, AgentGateSource, AgentGateVerdict } from \"./AgentContracts.js\";\n\nexport class AgentDecisionMapper {\n  static fromProtocol(\n    body: Record<string, unknown>,\n    source: AgentGateSource,\n    fallbackPolicyVersion: string | null = null,\n  ): AgentGateDecision {\n    const outcome = AgentHookValues.optionalString(body.outcome);\n    const verdict = AgentDecisionMapper.toVerdict(outcome);\n    const policyEvaluation = AgentHookValues.asRecord(body.policy_evaluation);\n    const selectedRule = AgentHookValues.optionalString(policyEvaluation.selected_rule_name);\n    const rationale = AgentHookValues.optionalString(policyEvaluation.selected_rule_rationale);\n    const resolution = AgentHookValues.optionalString(policyEvaluation.resolution);\n    const policyVersion =\n      AgentHookValues.optionalString(body.policy_version) ??\n      AgentHookValues.optionalString(policyEvaluation.bundle_version) ??\n      fallbackPolicyVersion;\n    const reasonCodes = Array.isArray(body.reason_codes)\n      ? body.reason_codes.filter((value): value is string => typeof value === \"string\")\n      : [];\n\n    return {\n      verdict,\n      reason: AgentDecisionMapper.reason(verdict, {\n        selectedRule,\n        rationale,\n        resolution,\n        reasonCodes,\n      }),\n      source,\n      outcome,\n      policyVersion,\n      matchedRule: selectedRule,\n      reasonCodes,\n    };\n  }\n\n  static error(message: string, source: AgentGateSource): AgentGateDecision {\n    return {\n      verdict: \"error\",\n      reason: message,\n      source,\n      outcome: null,\n      policyVersion: null,\n      matchedRule: null,\n      reasonCodes: [\"AGENT_GATE_ERROR\"],\n    };\n  }\n\n  private static toVerdict(outcome: string | null): AgentGateVerdict {\n    const normalized = normalizeVerdict(outcome);\n    if (\n      normalized === \"allow\" ||\n      normalized === \"block\" ||\n      normalized === \"review\" ||\n      normalized === \"escalate\"\n    ) {\n      return normalized;\n    }\n    return \"error\";\n  }\n\n  private static reason(\n    verdict: AgentGateVerdict,\n    context: {\n      selectedRule: string | null;\n      rationale: string | null;\n      resolution: string | null;\n      reasonCodes: string[];\n    },\n  ): string {\n    if (context.rationale) return context.rationale;\n    if (context.selectedRule) {\n      return `Policy rule \"${context.selectedRule}\" returned ${verdict}.`;\n    }\n    if (context.reasonCodes.length > 0) {\n      return `Policy returned ${verdict}: ${context.reasonCodes.join(\", \")}.`;\n    }\n    if (context.resolution) return `Policy returned ${verdict} (${context.resolution}).`;\n    return `Policy returned ${verdict}.`;\n  }\n}\n","import type { AgentToolCall } from \"./AgentContracts.js\";\n\nexport class AgentPolicyPayload {\n  static build(toolCall: AgentToolCall): Record<string, unknown> {\n    return {\n      action: `agent_tool:${toolCall.toolName}`,\n      agent_generated: true,\n      agent_provider: toolCall.host,\n      agent_session_id: toolCall.sessionId,\n      tool_name: toolCall.toolName,\n      tool_input: toolCall.toolInput,\n      working_directory: toolCall.cwd,\n      ...(toolCall.toolUseId ? { tool_use_id: toolCall.toolUseId } : {}),\n      ...(toolCall.model ? { model: toolCall.model } : {}),\n      ...(toolCall.permissionMode ? { permission_mode: toolCall.permissionMode } : {}),\n    };\n  }\n}\n","import { LocalDecionisGateway } from \"../Gateway.js\";\nimport type { AgentGateDecision, AgentGateEvaluator, AgentToolCall } from \"./AgentContracts.js\";\nimport { AgentDecisionMapper } from \"./AgentDecisionMapper.js\";\nimport { AgentPolicyPayload } from \"./AgentPolicyPayload.js\";\nimport { PolicyFileRepository } from \"./PolicyFileRepository.js\";\n\nexport interface LocalAgentGateOptions {\n  gateway?: LocalDecionisGateway;\n  policyFiles?: PolicyFileRepository;\n  workflowKey?: string;\n}\n\nexport class LocalAgentGate implements AgentGateEvaluator {\n  readonly source = \"local\" as const;\n  private readonly gateway: LocalDecionisGateway;\n  private readonly policyFiles: PolicyFileRepository;\n  private readonly workflowKey: string;\n\n  constructor(options: LocalAgentGateOptions = {}) {\n    this.gateway = options.gateway ?? new LocalDecionisGateway();\n    this.policyFiles = options.policyFiles ?? new PolicyFileRepository();\n    this.workflowKey = options.workflowKey ?? \"agent_execution_gate\";\n  }\n\n  async evaluate(toolCall: AgentToolCall): Promise<AgentGateDecision> {\n    const policyFile = await this.policyFiles.read(undefined, toolCall.cwd);\n    if (!policyFile.ok) throw new Error(policyFile.message);\n\n    const published = await this.gateway.publishPolicy(policyFile.content, {\n      workflowKey: this.workflowKey,\n    });\n    if (!published.ok) {\n      throw new Error(\n        `The Decionis policy could not be enforced (${published.reason}): ${published.errors.join(\n          \"; \",\n        )}`,\n      );\n    }\n\n    const evaluated = await this.gateway.evaluate({\n      payload: AgentPolicyPayload.build(toolCall),\n      workflowKey: this.workflowKey,\n      mode: \"enforce\",\n    });\n    if (evaluated.status !== 200) {\n      throw new Error(`The local Decionis evaluator returned HTTP ${evaluated.status}.`);\n    }\n    return AgentDecisionMapper.fromProtocol(evaluated.body, \"local\", published.version);\n  }\n\n  close(): Promise<void> {\n    return this.gateway.close();\n  }\n}\n","import { createHash } from \"node:crypto\";\n\nimport type { AgentGateDecision, AgentGateEvaluator, AgentToolCall } from \"./AgentContracts.js\";\nimport { AgentDecisionMapper } from \"./AgentDecisionMapper.js\";\nimport { AgentHookValues } from \"./AgentHookValues.js\";\nimport { AgentPolicyPayload } from \"./AgentPolicyPayload.js\";\n\ntype FetchLike = typeof fetch;\n\nexport interface RemoteAgentGateOptions {\n  endpoint: string;\n  apiKey: string;\n  orgId: string;\n  fetchImpl?: FetchLike;\n  timeoutMs?: number;\n  workflowKey?: string;\n}\n\nexport class RemoteAgentGate implements AgentGateEvaluator {\n  readonly source = \"remote\" as const;\n  private readonly endpoint: string;\n  private readonly fetchImpl: FetchLike;\n  private readonly timeoutMs: number;\n  private readonly workflowKey: string;\n\n  constructor(private readonly options: RemoteAgentGateOptions) {\n    this.endpoint = options.endpoint.trim();\n    this.fetchImpl = options.fetchImpl ?? fetch;\n    this.timeoutMs = options.timeoutMs ?? 4000;\n    this.workflowKey = options.workflowKey ?? \"agent_execution_gate\";\n  }\n\n  async evaluate(toolCall: AgentToolCall): Promise<AgentGateDecision> {\n    const controller = new AbortController();\n    const timeout = setTimeout(() => controller.abort(), this.timeoutMs);\n    try {\n      const idempotencyKey = this.idempotencyKey(toolCall);\n      const response = await this.fetchImpl(this.endpoint, {\n        method: \"POST\",\n        headers: {\n          authorization: `Bearer ${this.options.apiKey}`,\n          \"content-type\": \"application/json\",\n          \"idempotency-key\": idempotencyKey,\n        },\n        body: JSON.stringify({\n          org_id: this.options.orgId,\n          decision_type: `agent_tool:${toolCall.toolName}`.slice(0, 120),\n          channel: toolCall.host,\n          mode: \"ENFORCEMENT\",\n          workflow_key: this.workflowKey,\n          idempotency_key: idempotencyKey,\n          context: AgentPolicyPayload.build(toolCall),\n        }),\n        signal: controller.signal,\n      });\n      const body = AgentHookValues.asRecord(await response.json().catch(() => null));\n      if (!response.ok) {\n        const message =\n          AgentHookValues.optionalString(body.message) ??\n          AgentHookValues.optionalString(body.error) ??\n          \"unknown error\";\n        throw new Error(\n          `The remote Decionis evaluator returned HTTP ${response.status}: ${message}`,\n        );\n      }\n      if (!AgentHookValues.optionalString(body.outcome)) {\n        throw new Error(\"The remote Decionis evaluator returned no outcome.\");\n      }\n      return AgentDecisionMapper.fromProtocol(body, \"remote\");\n    } finally {\n      clearTimeout(timeout);\n    }\n  }\n\n  private idempotencyKey(toolCall: AgentToolCall): string {\n    const source = JSON.stringify({\n      host: toolCall.host,\n      sessionId: toolCall.sessionId,\n      toolUseId: toolCall.toolUseId,\n      toolName: toolCall.toolName,\n      toolInput: toolCall.toolInput,\n    });\n    return `agent-hook-${createHash(\"sha256\").update(source).digest(\"hex\")}`;\n  }\n}\n","import { AgentGateConfigurationError, type AgentGateEvaluator } from \"./AgentContracts.js\";\nimport { AgentHookValues } from \"./AgentHookValues.js\";\nimport { LocalAgentGate } from \"./LocalAgentGate.js\";\nimport { RemoteAgentGate } from \"./RemoteAgentGate.js\";\n\nexport class AgentGateFactory {\n  static create(env: NodeJS.ProcessEnv = process.env): AgentGateEvaluator {\n    const mode = (\n      AgentHookValues.optionalString(env.DECIONIS_AGENT_GATE_MODE) ?? \"auto\"\n    ).toLowerCase();\n    const endpoint = AgentHookValues.optionalString(env.DECIONIS_AGENT_GATE_URL);\n    const apiKey = AgentHookValues.optionalString(env.DECIONIS_API_KEY);\n    const orgId = AgentHookValues.optionalString(env.DECIONIS_ORG_ID);\n    const hasRemoteConfiguration = Boolean(endpoint || apiKey || orgId);\n\n    if (mode !== \"auto\" && mode !== \"local\" && mode !== \"remote\") {\n      throw new AgentGateConfigurationError(\n        \"DECIONIS_AGENT_GATE_MODE must be `auto`, `local`, or `remote`.\",\n      );\n    }\n    if (mode === \"local\" || (mode === \"auto\" && !hasRemoteConfiguration)) {\n      return new LocalAgentGate();\n    }\n    if (!endpoint || !apiKey || !orgId) {\n      throw new AgentGateConfigurationError(\n        \"Remote agent gating requires DECIONIS_AGENT_GATE_URL, DECIONIS_API_KEY, and DECIONIS_ORG_ID.\",\n      );\n    }\n\n    const configuredTimeout = Number.parseInt(env.DECIONIS_AGENT_GATE_TIMEOUT_MS ?? \"\", 10);\n    return new RemoteAgentGate({\n      endpoint,\n      apiKey,\n      orgId,\n      timeoutMs:\n        Number.isFinite(configuredTimeout) && configuredTimeout > 0 ? configuredTimeout : 4000,\n    });\n  }\n}\n","import type { AgentGateDecision, AgentGateEvaluator, AgentHostAdapter } from \"./AgentContracts.js\";\nimport { AgentDecisionMapper } from \"./AgentDecisionMapper.js\";\n\nexport class AgentHookRunner {\n  constructor(\n    private readonly adapter: AgentHostAdapter,\n    private readonly evaluator: AgentGateEvaluator,\n  ) {}\n\n  async run(input: unknown): Promise<Record<string, unknown>> {\n    try {\n      const toolCall = this.adapter.parse(input);\n      const decision = await this.evaluator.evaluate(toolCall);\n      return this.adapter.format(decision, input);\n    } catch (error) {\n      return this.adapter.format(\n        AgentDecisionMapper.error(\n          error instanceof Error ? error.message : String(error),\n          this.evaluator.source,\n        ),\n        input,\n      );\n    }\n  }\n\n  close(): Promise<void> {\n    return this.evaluator.close?.() ?? Promise.resolve();\n  }\n\n  static shouldBlock(decision: AgentGateDecision): boolean {\n    return decision.verdict !== \"allow\";\n  }\n}\n","import type {\n  AgentGateDecision,\n  AgentHost,\n  AgentHostAdapter,\n  AgentToolCall,\n} from \"../AgentContracts.js\";\nimport { AgentHookRunner } from \"../AgentHookRunner.js\";\nimport { AgentHookValues } from \"../AgentHookValues.js\";\n\nexport abstract class SnakeCaseHookAdapter implements AgentHostAdapter {\n  abstract readonly host: AgentHost;\n\n  parse(input: unknown): AgentToolCall {\n    const event = AgentHookValues.requireRecord(input);\n    return {\n      host: this.host,\n      sessionId: AgentHookValues.requireString(event.session_id, \"session_id\"),\n      toolUseId: AgentHookValues.optionalString(event.tool_use_id),\n      toolName: AgentHookValues.requireString(event.tool_name, \"tool_name\"),\n      toolInput: AgentHookValues.parseToolInput(event.tool_input),\n      cwd: AgentHookValues.requireString(event.cwd, \"cwd\"),\n      model: AgentHookValues.optionalString(event.model),\n      permissionMode: AgentHookValues.optionalString(event.permission_mode),\n    };\n  }\n\n  format(decision: AgentGateDecision, _input?: unknown): Record<string, unknown> {\n    if (!AgentHookRunner.shouldBlock(decision)) return {};\n    return {\n      hookSpecificOutput: {\n        hookEventName: \"PreToolUse\",\n        permissionDecision: \"deny\",\n        permissionDecisionReason: this.reason(decision),\n      },\n    };\n  }\n\n  protected reason(decision: AgentGateDecision): string {\n    const label = decision.verdict === \"error\" ? \"gate error\" : decision.verdict;\n    return `Decionis ${label}: ${decision.reason}`;\n  }\n}\n","import { SnakeCaseHookAdapter } from \"./SnakeCaseHookAdapter.js\";\n\nexport class ClaudeHookAdapter extends SnakeCaseHookAdapter {\n  readonly host = \"claude\" as const;\n}\n","import { SnakeCaseHookAdapter } from \"./SnakeCaseHookAdapter.js\";\n\nexport class CodexHookAdapter extends SnakeCaseHookAdapter {\n  readonly host = \"codex\" as const;\n}\n","import type { AgentGateDecision, AgentHostAdapter, AgentToolCall } from \"../AgentContracts.js\";\nimport { AgentHookRunner } from \"../AgentHookRunner.js\";\nimport { AgentHookValues } from \"../AgentHookValues.js\";\n\nexport class CopilotHookAdapter implements AgentHostAdapter {\n  readonly host = \"copilot\" as const;\n\n  parse(input: unknown): AgentToolCall {\n    const event = AgentHookValues.requireRecord(input);\n    const usesCompatibleShape = AgentHookValues.optionalString(event.tool_name) !== null;\n    const toolInput = usesCompatibleShape ? event.tool_input : event.toolArgs;\n    return {\n      host: this.host,\n      sessionId:\n        AgentHookValues.optionalString(usesCompatibleShape ? event.session_id : event.sessionId) ??\n        \"unknown-session\",\n      toolUseId: AgentHookValues.optionalString(\n        usesCompatibleShape ? event.tool_use_id : event.toolUseId,\n      ),\n      toolName: AgentHookValues.requireString(\n        usesCompatibleShape ? event.tool_name : event.toolName,\n        usesCompatibleShape ? \"tool_name\" : \"toolName\",\n      ),\n      toolInput: AgentHookValues.parseToolInput(toolInput),\n      cwd: AgentHookValues.optionalString(event.cwd) ?? process.cwd(),\n      model: AgentHookValues.optionalString(event.model),\n      permissionMode: AgentHookValues.optionalString(\n        usesCompatibleShape ? event.permission_mode : event.permissionMode,\n      ),\n    };\n  }\n\n  format(decision: AgentGateDecision, input?: unknown): Record<string, unknown> {\n    if (!AgentHookRunner.shouldBlock(decision)) return {};\n    const label = decision.verdict === \"error\" ? \"gate error\" : decision.verdict;\n    const reason = `Decionis ${label}: ${decision.reason}`;\n    const event = AgentHookValues.asRecord(input);\n    if (\n      AgentHookValues.optionalString(event.tool_name) ||\n      AgentHookValues.optionalString(event.hook_event_name) === \"PreToolUse\"\n    ) {\n      return {\n        hookSpecificOutput: {\n          hookEventName: \"PreToolUse\",\n          permissionDecision: \"deny\",\n          permissionDecisionReason: reason,\n        },\n      };\n    }\n    return {\n      permissionDecision: \"deny\",\n      permissionDecisionReason: reason,\n    };\n  }\n}\n","import {\n  AgentGateConfigurationError,\n  type AgentHost,\n  type AgentHostAdapter,\n} from \"./AgentContracts.js\";\nimport { ClaudeHookAdapter } from \"./providers/ClaudeHookAdapter.js\";\nimport { CodexHookAdapter } from \"./providers/CodexHookAdapter.js\";\nimport { CopilotHookAdapter } from \"./providers/CopilotHookAdapter.js\";\n\nexport class AgentHostRegistry {\n  static resolve(host: string): AgentHostAdapter {\n    const normalized = host.trim().toLowerCase() as AgentHost;\n    switch (normalized) {\n      case \"codex\":\n        return new CodexHookAdapter();\n      case \"copilot\":\n        return new CopilotHookAdapter();\n      case \"claude\":\n        return new ClaudeHookAdapter();\n      default:\n        throw new AgentGateConfigurationError(\n          \"Choose an agent host with `decionis-agent-hook codex|copilot|claude`.\",\n        );\n    }\n  }\n}\n","import type { Readable, Writable } from \"node:stream\";\n\nimport type { AgentGateEvaluator, AgentHostAdapter } from \"./AgentContracts.js\";\nimport { AgentGateFactory } from \"./AgentGateFactory.js\";\nimport { AgentHookRunner } from \"./AgentHookRunner.js\";\nimport { AgentHostRegistry } from \"./AgentHostRegistry.js\";\n\nexport interface AgentHookCommandOptions {\n  input?: Readable;\n  output?: Writable;\n  errorOutput?: Writable;\n  env?: NodeJS.ProcessEnv;\n}\n\nexport class AgentHookCommand {\n  static async run(args: string[], options: AgentHookCommandOptions = {}): Promise<number> {\n    const input = options.input ?? process.stdin;\n    const output = options.output ?? process.stdout;\n    const errorOutput = options.errorOutput ?? process.stderr;\n    const host = AgentHookCommand.hostArgument(args);\n\n    let adapter: AgentHostAdapter;\n    try {\n      adapter = AgentHostRegistry.resolve(host);\n    } catch (error) {\n      errorOutput.write(`${error instanceof Error ? error.message : String(error)}\\n`);\n      return 2;\n    }\n\n    const raw = await AgentHookCommand.readInput(input);\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(raw);\n    } catch {\n      parsed = null;\n    }\n\n    let evaluator: AgentGateEvaluator;\n    try {\n      evaluator = AgentGateFactory.create(options.env);\n    } catch (error) {\n      const denial = adapter.format(\n        {\n          verdict: \"error\",\n          reason: error instanceof Error ? error.message : String(error),\n          source: \"local\",\n          outcome: null,\n          policyVersion: null,\n          matchedRule: null,\n          reasonCodes: [\"AGENT_GATE_CONFIGURATION_ERROR\"],\n        },\n        parsed,\n      );\n      output.write(`${JSON.stringify(denial)}\\n`);\n      return 0;\n    }\n\n    const runner = new AgentHookRunner(adapter, evaluator);\n    try {\n      const result = await runner.run(parsed);\n      output.write(`${JSON.stringify(result)}\\n`);\n      return 0;\n    } finally {\n      await runner.close();\n    }\n  }\n\n  private static hostArgument(args: string[]): string {\n    const providerIndex = args.indexOf(\"--provider\");\n    if (providerIndex >= 0) return args[providerIndex + 1] ?? \"\";\n    return args.find((value) => !value.startsWith(\"-\")) ?? \"\";\n  }\n\n  private static async readInput(input: Readable): Promise<string> {\n    const chunks: Buffer[] = [];\n    for await (const chunk of input) {\n      chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));\n    }\n    return Buffer.concat(chunks).toString(\"utf8\").trim();\n  }\n}\n"],"mappings":";;;;;;;;AAuCO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,8BAAN,cAA0C,MAAM;AAAA,EACrD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;ACjDO,IAAM,kBAAN,MAAM,iBAAgB;AAAA,EAC3B,OAAO,SAAS,OAAyC;AACvD,QAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACjF,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,cAAc,OAAyC;AAC5D,UAAM,SAAS,iBAAgB,SAAS,KAAK;AAC7C,QAAI,OAAO,KAAK,MAAM,EAAE,WAAW,GAAG;AACpC,YAAM,IAAI,oBAAoB,iDAAiD;AAAA,IACjF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,eAAe,OAA+B;AACnD,WAAO,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,MAAM,KAAK,IAAI;AAAA,EACpE;AAAA,EAEA,OAAO,cAAc,OAAgB,OAAuB;AAC1D,UAAM,SAAS,iBAAgB,eAAe,KAAK;AACnD,QAAI,CAAC,OAAQ,OAAM,IAAI,oBAAoB,+BAA+B,KAAK,KAAK;AACpF,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,eAAe,OAAyC;AAC7D,QAAI,OAAO,UAAU,SAAU,QAAO,iBAAgB,SAAS,KAAK;AACpE,QAAI;AACF,aAAO,iBAAgB,SAAS,KAAK,MAAM,KAAK,CAAC;AAAA,IACnD,QAAQ;AACN,YAAM,IAAI,oBAAoB,sDAAsD;AAAA,IACtF;AAAA,EACF;AACF;;;AC9BO,IAAM,sBAAN,MAAM,qBAAoB;AAAA,EAC/B,OAAO,aACL,MACA,QACA,wBAAuC,MACpB;AACnB,UAAM,UAAU,gBAAgB,eAAe,KAAK,OAAO;AAC3D,UAAM,UAAU,qBAAoB,UAAU,OAAO;AACrD,UAAM,mBAAmB,gBAAgB,SAAS,KAAK,iBAAiB;AACxE,UAAM,eAAe,gBAAgB,eAAe,iBAAiB,kBAAkB;AACvF,UAAM,YAAY,gBAAgB,eAAe,iBAAiB,uBAAuB;AACzF,UAAM,aAAa,gBAAgB,eAAe,iBAAiB,UAAU;AAC7E,UAAM,gBACJ,gBAAgB,eAAe,KAAK,cAAc,KAClD,gBAAgB,eAAe,iBAAiB,cAAc,KAC9D;AACF,UAAM,cAAc,MAAM,QAAQ,KAAK,YAAY,IAC/C,KAAK,aAAa,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,IAC9E,CAAC;AAEL,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,qBAAoB,OAAO,SAAS;AAAA,QAC1C;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,MACD;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAO,MAAM,SAAiB,QAA4C;AACxE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ;AAAA,MACR;AAAA,MACA,SAAS;AAAA,MACT,eAAe;AAAA,MACf,aAAa;AAAA,MACb,aAAa,CAAC,kBAAkB;AAAA,IAClC;AAAA,EACF;AAAA,EAEA,OAAe,UAAU,SAA0C;AACjE,UAAM,aAAa,iBAAiB,OAAO;AAC3C,QACE,eAAe,WACf,eAAe,WACf,eAAe,YACf,eAAe,YACf;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAe,OACb,SACA,SAMQ;AACR,QAAI,QAAQ,UAAW,QAAO,QAAQ;AACtC,QAAI,QAAQ,cAAc;AACxB,aAAO,gBAAgB,QAAQ,YAAY,cAAc,OAAO;AAAA,IAClE;AACA,QAAI,QAAQ,YAAY,SAAS,GAAG;AAClC,aAAO,mBAAmB,OAAO,KAAK,QAAQ,YAAY,KAAK,IAAI,CAAC;AAAA,IACtE;AACA,QAAI,QAAQ,WAAY,QAAO,mBAAmB,OAAO,KAAK,QAAQ,UAAU;AAChF,WAAO,mBAAmB,OAAO;AAAA,EACnC;AACF;;;AClFO,IAAM,qBAAN,MAAyB;AAAA,EAC9B,OAAO,MAAM,UAAkD;AAC7D,WAAO;AAAA,MACL,QAAQ,cAAc,SAAS,QAAQ;AAAA,MACvC,iBAAiB;AAAA,MACjB,gBAAgB,SAAS;AAAA,MACzB,kBAAkB,SAAS;AAAA,MAC3B,WAAW,SAAS;AAAA,MACpB,YAAY,SAAS;AAAA,MACrB,mBAAmB,SAAS;AAAA,MAC5B,GAAI,SAAS,YAAY,EAAE,aAAa,SAAS,UAAU,IAAI,CAAC;AAAA,MAChE,GAAI,SAAS,QAAQ,EAAE,OAAO,SAAS,MAAM,IAAI,CAAC;AAAA,MAClD,GAAI,SAAS,iBAAiB,EAAE,iBAAiB,SAAS,eAAe,IAAI,CAAC;AAAA,IAChF;AAAA,EACF;AACF;;;ACLO,IAAM,iBAAN,MAAmD;AAAA,EAC/C,SAAS;AAAA,EACD;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAAiC,CAAC,GAAG;AAC/C,SAAK,UAAU,QAAQ,WAAW,IAAI,qBAAqB;AAC3D,SAAK,cAAc,QAAQ,eAAe,IAAI,qBAAqB;AACnE,SAAK,cAAc,QAAQ,eAAe;AAAA,EAC5C;AAAA,EAEA,MAAM,SAAS,UAAqD;AAClE,UAAM,aAAa,MAAM,KAAK,YAAY,KAAK,QAAW,SAAS,GAAG;AACtE,QAAI,CAAC,WAAW,GAAI,OAAM,IAAI,MAAM,WAAW,OAAO;AAEtD,UAAM,YAAY,MAAM,KAAK,QAAQ,cAAc,WAAW,SAAS;AAAA,MACrE,aAAa,KAAK;AAAA,IACpB,CAAC;AACD,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI;AAAA,QACR,8CAA8C,UAAU,MAAM,MAAM,UAAU,OAAO;AAAA,UACnF;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,KAAK,QAAQ,SAAS;AAAA,MAC5C,SAAS,mBAAmB,MAAM,QAAQ;AAAA,MAC1C,aAAa,KAAK;AAAA,MAClB,MAAM;AAAA,IACR,CAAC;AACD,QAAI,UAAU,WAAW,KAAK;AAC5B,YAAM,IAAI,MAAM,8CAA8C,UAAU,MAAM,GAAG;AAAA,IACnF;AACA,WAAO,oBAAoB,aAAa,UAAU,MAAM,SAAS,UAAU,OAAO;AAAA,EACpF;AAAA,EAEA,QAAuB;AACrB,WAAO,KAAK,QAAQ,MAAM;AAAA,EAC5B;AACF;;;ACrDA,SAAS,kBAAkB;AAkBpB,IAAM,kBAAN,MAAoD;AAAA,EAOzD,YAA6B,SAAiC;AAAjC;AAC3B,SAAK,WAAW,QAAQ,SAAS,KAAK;AACtC,SAAK,YAAY,QAAQ,aAAa;AACtC,SAAK,YAAY,QAAQ,aAAa;AACtC,SAAK,cAAc,QAAQ,eAAe;AAAA,EAC5C;AAAA,EAXS,SAAS;AAAA,EACD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EASjB,MAAM,SAAS,UAAqD;AAClE,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,UAAU,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,SAAS;AACnE,QAAI;AACF,YAAM,iBAAiB,KAAK,eAAe,QAAQ;AACnD,YAAM,WAAW,MAAM,KAAK,UAAU,KAAK,UAAU;AAAA,QACnD,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,KAAK,QAAQ,MAAM;AAAA,UAC5C,gBAAgB;AAAA,UAChB,mBAAmB;AAAA,QACrB;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,QAAQ,KAAK,QAAQ;AAAA,UACrB,eAAe,cAAc,SAAS,QAAQ,GAAG,MAAM,GAAG,GAAG;AAAA,UAC7D,SAAS,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,cAAc,KAAK;AAAA,UACnB,iBAAiB;AAAA,UACjB,SAAS,mBAAmB,MAAM,QAAQ;AAAA,QAC5C,CAAC;AAAA,QACD,QAAQ,WAAW;AAAA,MACrB,CAAC;AACD,YAAM,OAAO,gBAAgB,SAAS,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,IAAI,CAAC;AAC7E,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,UACJ,gBAAgB,eAAe,KAAK,OAAO,KAC3C,gBAAgB,eAAe,KAAK,KAAK,KACzC;AACF,cAAM,IAAI;AAAA,UACR,+CAA+C,SAAS,MAAM,KAAK,OAAO;AAAA,QAC5E;AAAA,MACF;AACA,UAAI,CAAC,gBAAgB,eAAe,KAAK,OAAO,GAAG;AACjD,cAAM,IAAI,MAAM,oDAAoD;AAAA,MACtE;AACA,aAAO,oBAAoB,aAAa,MAAM,QAAQ;AAAA,IACxD,UAAE;AACA,mBAAa,OAAO;AAAA,IACtB;AAAA,EACF;AAAA,EAEQ,eAAe,UAAiC;AACtD,UAAM,SAAS,KAAK,UAAU;AAAA,MAC5B,MAAM,SAAS;AAAA,MACf,WAAW,SAAS;AAAA,MACpB,WAAW,SAAS;AAAA,MACpB,UAAU,SAAS;AAAA,MACnB,WAAW,SAAS;AAAA,IACtB,CAAC;AACD,WAAO,cAAc,WAAW,QAAQ,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK,CAAC;AAAA,EACxE;AACF;;;AC/EO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,OAAO,OAAO,MAAyB,QAAQ,KAAyB;AACtE,UAAM,QACJ,gBAAgB,eAAe,IAAI,wBAAwB,KAAK,QAChE,YAAY;AACd,UAAM,WAAW,gBAAgB,eAAe,IAAI,uBAAuB;AAC3E,UAAM,SAAS,gBAAgB,eAAe,IAAI,gBAAgB;AAClE,UAAM,QAAQ,gBAAgB,eAAe,IAAI,eAAe;AAChE,UAAM,yBAAyB,QAAQ,YAAY,UAAU,KAAK;AAElE,QAAI,SAAS,UAAU,SAAS,WAAW,SAAS,UAAU;AAC5D,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,QAAI,SAAS,WAAY,SAAS,UAAU,CAAC,wBAAyB;AACpE,aAAO,IAAI,eAAe;AAAA,IAC5B;AACA,QAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO;AAClC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,oBAAoB,OAAO,SAAS,IAAI,kCAAkC,IAAI,EAAE;AACtF,WAAO,IAAI,gBAAgB;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA,WACE,OAAO,SAAS,iBAAiB,KAAK,oBAAoB,IAAI,oBAAoB;AAAA,IACtF,CAAC;AAAA,EACH;AACF;;;ACnCO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YACmB,SACA,WACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAEH,MAAM,IAAI,OAAkD;AAC1D,QAAI;AACF,YAAM,WAAW,KAAK,QAAQ,MAAM,KAAK;AACzC,YAAM,WAAW,MAAM,KAAK,UAAU,SAAS,QAAQ;AACvD,aAAO,KAAK,QAAQ,OAAO,UAAU,KAAK;AAAA,IAC5C,SAAS,OAAO;AACd,aAAO,KAAK,QAAQ;AAAA,QAClB,oBAAoB;AAAA,UAClB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,UACrD,KAAK,UAAU;AAAA,QACjB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,QAAuB;AACrB,WAAO,KAAK,UAAU,QAAQ,KAAK,QAAQ,QAAQ;AAAA,EACrD;AAAA,EAEA,OAAO,YAAY,UAAsC;AACvD,WAAO,SAAS,YAAY;AAAA,EAC9B;AACF;;;ACvBO,IAAe,uBAAf,MAAgE;AAAA,EAGrE,MAAM,OAA+B;AACnC,UAAM,QAAQ,gBAAgB,cAAc,KAAK;AACjD,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,WAAW,gBAAgB,cAAc,MAAM,YAAY,YAAY;AAAA,MACvE,WAAW,gBAAgB,eAAe,MAAM,WAAW;AAAA,MAC3D,UAAU,gBAAgB,cAAc,MAAM,WAAW,WAAW;AAAA,MACpE,WAAW,gBAAgB,eAAe,MAAM,UAAU;AAAA,MAC1D,KAAK,gBAAgB,cAAc,MAAM,KAAK,KAAK;AAAA,MACnD,OAAO,gBAAgB,eAAe,MAAM,KAAK;AAAA,MACjD,gBAAgB,gBAAgB,eAAe,MAAM,eAAe;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,OAAO,UAA6B,QAA2C;AAC7E,QAAI,CAAC,gBAAgB,YAAY,QAAQ,EAAG,QAAO,CAAC;AACpD,WAAO;AAAA,MACL,oBAAoB;AAAA,QAClB,eAAe;AAAA,QACf,oBAAoB;AAAA,QACpB,0BAA0B,KAAK,OAAO,QAAQ;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA,EAEU,OAAO,UAAqC;AACpD,UAAM,QAAQ,SAAS,YAAY,UAAU,eAAe,SAAS;AACrE,WAAO,YAAY,KAAK,KAAK,SAAS,MAAM;AAAA,EAC9C;AACF;;;ACvCO,IAAM,oBAAN,cAAgC,qBAAqB;AAAA,EACjD,OAAO;AAClB;;;ACFO,IAAM,mBAAN,cAA+B,qBAAqB;AAAA,EAChD,OAAO;AAClB;;;ACAO,IAAM,qBAAN,MAAqD;AAAA,EACjD,OAAO;AAAA,EAEhB,MAAM,OAA+B;AACnC,UAAM,QAAQ,gBAAgB,cAAc,KAAK;AACjD,UAAM,sBAAsB,gBAAgB,eAAe,MAAM,SAAS,MAAM;AAChF,UAAM,YAAY,sBAAsB,MAAM,aAAa,MAAM;AACjE,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,WACE,gBAAgB,eAAe,sBAAsB,MAAM,aAAa,MAAM,SAAS,KACvF;AAAA,MACF,WAAW,gBAAgB;AAAA,QACzB,sBAAsB,MAAM,cAAc,MAAM;AAAA,MAClD;AAAA,MACA,UAAU,gBAAgB;AAAA,QACxB,sBAAsB,MAAM,YAAY,MAAM;AAAA,QAC9C,sBAAsB,cAAc;AAAA,MACtC;AAAA,MACA,WAAW,gBAAgB,eAAe,SAAS;AAAA,MACnD,KAAK,gBAAgB,eAAe,MAAM,GAAG,KAAK,QAAQ,IAAI;AAAA,MAC9D,OAAO,gBAAgB,eAAe,MAAM,KAAK;AAAA,MACjD,gBAAgB,gBAAgB;AAAA,QAC9B,sBAAsB,MAAM,kBAAkB,MAAM;AAAA,MACtD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAO,UAA6B,OAA0C;AAC5E,QAAI,CAAC,gBAAgB,YAAY,QAAQ,EAAG,QAAO,CAAC;AACpD,UAAM,QAAQ,SAAS,YAAY,UAAU,eAAe,SAAS;AACrE,UAAM,SAAS,YAAY,KAAK,KAAK,SAAS,MAAM;AACpD,UAAM,QAAQ,gBAAgB,SAAS,KAAK;AAC5C,QACE,gBAAgB,eAAe,MAAM,SAAS,KAC9C,gBAAgB,eAAe,MAAM,eAAe,MAAM,cAC1D;AACA,aAAO;AAAA,QACL,oBAAoB;AAAA,UAClB,eAAe;AAAA,UACf,oBAAoB;AAAA,UACpB,0BAA0B;AAAA,QAC5B;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL,oBAAoB;AAAA,MACpB,0BAA0B;AAAA,IAC5B;AAAA,EACF;AACF;;;AC7CO,IAAM,oBAAN,MAAwB;AAAA,EAC7B,OAAO,QAAQ,MAAgC;AAC7C,UAAM,aAAa,KAAK,KAAK,EAAE,YAAY;AAC3C,YAAQ,YAAY;AAAA,MAClB,KAAK;AACH,eAAO,IAAI,iBAAiB;AAAA,MAC9B,KAAK;AACH,eAAO,IAAI,mBAAmB;AAAA,MAChC,KAAK;AACH,eAAO,IAAI,kBAAkB;AAAA,MAC/B;AACE,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;;;ACXO,IAAM,mBAAN,MAAM,kBAAiB;AAAA,EAC5B,aAAa,IAAI,MAAgB,UAAmC,CAAC,GAAoB;AACvF,UAAM,QAAQ,QAAQ,SAAS,QAAQ;AACvC,UAAM,SAAS,QAAQ,UAAU,QAAQ;AACzC,UAAM,cAAc,QAAQ,eAAe,QAAQ;AACnD,UAAM,OAAO,kBAAiB,aAAa,IAAI;AAE/C,QAAI;AACJ,QAAI;AACF,gBAAU,kBAAkB,QAAQ,IAAI;AAAA,IAC1C,SAAS,OAAO;AACd,kBAAY,MAAM,GAAG,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,CAAI;AAC/E,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,MAAM,kBAAiB,UAAU,KAAK;AAClD,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,GAAG;AAAA,IACzB,QAAQ;AACN,eAAS;AAAA,IACX;AAEA,QAAI;AACJ,QAAI;AACF,kBAAY,iBAAiB,OAAO,QAAQ,GAAG;AAAA,IACjD,SAAS,OAAO;AACd,YAAM,SAAS,QAAQ;AAAA,QACrB;AAAA,UACE,SAAS;AAAA,UACT,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,UAC7D,QAAQ;AAAA,UACR,SAAS;AAAA,UACT,eAAe;AAAA,UACf,aAAa;AAAA,UACb,aAAa,CAAC,gCAAgC;AAAA,QAChD;AAAA,QACA;AAAA,MACF;AACA,aAAO,MAAM,GAAG,KAAK,UAAU,MAAM,CAAC;AAAA,CAAI;AAC1C,aAAO;AAAA,IACT;AAEA,UAAM,SAAS,IAAI,gBAAgB,SAAS,SAAS;AACrD,QAAI;AACF,YAAM,SAAS,MAAM,OAAO,IAAI,MAAM;AACtC,aAAO,MAAM,GAAG,KAAK,UAAU,MAAM,CAAC;AAAA,CAAI;AAC1C,aAAO;AAAA,IACT,UAAE;AACA,YAAM,OAAO,MAAM;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,OAAe,aAAa,MAAwB;AAClD,UAAM,gBAAgB,KAAK,QAAQ,YAAY;AAC/C,QAAI,iBAAiB,EAAG,QAAO,KAAK,gBAAgB,CAAC,KAAK;AAC1D,WAAO,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM,WAAW,GAAG,CAAC,KAAK;AAAA,EACzD;AAAA,EAEA,aAAqB,UAAU,OAAkC;AAC/D,UAAM,SAAmB,CAAC;AAC1B,qBAAiB,SAAS,OAAO;AAC/B,aAAO,KAAK,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,OAAO,KAAK,CAAC,CAAC;AAAA,IACzE;AACA,WAAO,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM,EAAE,KAAK;AAAA,EACrD;AACF;","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+
+export {  }