@dsh-enhanced/assistant-policy 0.1.3

package/lib/sqlite.js

@@ -0,0 +1,276 @@
+import { chmodSync, mkdirSync } from 'node:fs';
+import { dirname, isAbsolute } from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+export const policySchemaVersion = 5;
+export const legacyApprovalIntentHash = 'legacy-v4-unbound';
+export class PolicyDatabaseError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'PolicyDatabaseError';
+    }
+}
+function migrate(database) {
+    const sampled = database.prepare('PRAGMA user_version').get();
+    if (sampled.user_version > policySchemaVersion) {
+        throw new PolicyDatabaseError('schema-too-new', `policy database schema ${sampled.user_version} is newer than supported schema ${policySchemaVersion}`);
+    }
+    if (sampled.user_version === policySchemaVersion)
+        return;
+    let transactionOpen = false;
+    try {
+        database.exec('BEGIN IMMEDIATE');
+        transactionOpen = true;
+        // Every migration decision is based on the version observed after the write
+        // lock. Concurrent openers may have completed several steps while we waited.
+        const locked = database.prepare('PRAGMA user_version').get();
+        if (locked.user_version > policySchemaVersion) {
+            throw new PolicyDatabaseError('schema-too-new', `policy database schema ${locked.user_version} is newer than supported schema ${policySchemaVersion}`);
+        }
+        let version = locked.user_version;
+        if (version === 0) {
+            database.exec(`
+        CREATE TABLE schema_meta (
+          key TEXT PRIMARY KEY,
+          value TEXT NOT NULL
+        ) STRICT;
+
+        CREATE TABLE budget_periods (
+          scope TEXT NOT NULL,
+          metric TEXT NOT NULL,
+          period_start INTEGER NOT NULL,
+          period_ms INTEGER NOT NULL,
+          limit_amount REAL NOT NULL CHECK (limit_amount > 0),
+          reserved_amount REAL NOT NULL DEFAULT 0 CHECK (reserved_amount >= 0),
+          spent_amount REAL NOT NULL DEFAULT 0 CHECK (spent_amount >= 0),
+          version INTEGER NOT NULL DEFAULT 1,
+          PRIMARY KEY (scope, metric, period_start, period_ms)
+        ) STRICT;
+
+        CREATE TABLE budget_reservations (
+          id TEXT PRIMARY KEY,
+          idempotency_key TEXT NOT NULL UNIQUE,
+          scope TEXT NOT NULL,
+          metric TEXT NOT NULL,
+          period_start INTEGER NOT NULL,
+          period_ms INTEGER NOT NULL,
+          amount REAL NOT NULL CHECK (amount > 0),
+          actual_amount REAL,
+          status TEXT NOT NULL CHECK (status IN ('reserved', 'finalized', 'released')),
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          version INTEGER NOT NULL DEFAULT 1,
+          FOREIGN KEY (scope, metric, period_start, period_ms)
+            REFERENCES budget_periods(scope, metric, period_start, period_ms)
+        ) STRICT;
+
+        CREATE TABLE emergency_state (
+          singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+          enabled INTEGER NOT NULL CHECK (enabled IN (0, 1)),
+          reason TEXT NOT NULL,
+          actor TEXT NOT NULL,
+          updated_at INTEGER NOT NULL,
+          version INTEGER NOT NULL
+        ) STRICT;
+
+        CREATE TABLE approval_proposals (
+          id TEXT PRIMARY KEY,
+          idempotency_key TEXT NOT NULL UNIQUE,
+          requester TEXT NOT NULL,
+          principal TEXT NOT NULL,
+          action TEXT NOT NULL,
+          resource_kind TEXT NOT NULL,
+          resource_id TEXT NOT NULL,
+          diff_hash TEXT NOT NULL,
+          diff_text TEXT,
+          summary TEXT NOT NULL,
+          status TEXT NOT NULL CHECK (status IN ('pending', 'approved', 'rejected', 'expired')),
+          created_at INTEGER NOT NULL,
+          expires_at INTEGER NOT NULL,
+          decided_at INTEGER,
+          decided_by TEXT,
+          decision_reason TEXT,
+          version INTEGER NOT NULL DEFAULT 1
+        ) STRICT;
+
+        CREATE TABLE approval_dispatches (
+          proposal_id TEXT PRIMARY KEY,
+          source_id TEXT NOT NULL,
+          binding_id TEXT NOT NULL,
+          workspace TEXT NOT NULL,
+          principal TEXT NOT NULL,
+          state TEXT NOT NULL CHECK (state IN ('pending', 'enqueued')),
+          payload_hash TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          enqueued_at INTEGER,
+          version INTEGER NOT NULL DEFAULT 1,
+          proposal_version INTEGER NOT NULL,
+          FOREIGN KEY (proposal_id) REFERENCES approval_proposals(id) ON DELETE CASCADE
+        ) STRICT;
+
+        CREATE INDEX approval_dispatches_pending_idx
+          ON approval_dispatches(state, created_at, proposal_id);
+
+        CREATE TABLE approval_idempotency_tombstones (
+          idempotency_key TEXT PRIMARY KEY,
+          not_after INTEGER NOT NULL,
+          abandoned_at INTEGER NOT NULL,
+          intent_hash TEXT NOT NULL CHECK (
+            length(intent_hash) = 64 AND intent_hash NOT GLOB '*[^0-9a-f]*'
+          )
+        ) STRICT;
+
+        CREATE TABLE audit_events (
+          sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+          event_id TEXT NOT NULL UNIQUE,
+          occurred_at INTEGER NOT NULL,
+          actor TEXT NOT NULL,
+          action TEXT NOT NULL,
+          resource_kind TEXT NOT NULL,
+          resource_hash TEXT NOT NULL,
+          outcome TEXT NOT NULL,
+          reason_code TEXT NOT NULL,
+          details_json TEXT NOT NULL
+        ) STRICT;
+
+        INSERT INTO schema_meta(key, value) VALUES ('schema-version', '5');
+      `);
+            version = 5;
+        }
+        if (version === 1) {
+            database.exec(`
+        ALTER TABLE approval_proposals ADD COLUMN diff_text TEXT;
+        CREATE TABLE approval_dispatches (
+          proposal_id TEXT PRIMARY KEY,
+          source_id TEXT NOT NULL,
+          binding_id TEXT NOT NULL,
+          workspace TEXT NOT NULL,
+          principal TEXT NOT NULL,
+          state TEXT NOT NULL CHECK (state IN ('pending', 'enqueued')),
+          payload_hash TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          enqueued_at INTEGER,
+          version INTEGER NOT NULL DEFAULT 1,
+          proposal_version INTEGER NOT NULL,
+          FOREIGN KEY (proposal_id) REFERENCES approval_proposals(id) ON DELETE CASCADE
+        ) STRICT;
+        CREATE INDEX approval_dispatches_pending_idx
+          ON approval_dispatches(state, created_at, proposal_id);
+      `);
+            version = 3;
+        }
+        if (version === 2) {
+            database.exec(`
+        ALTER TABLE approval_dispatches
+          ADD COLUMN proposal_version INTEGER NOT NULL DEFAULT 1;
+        UPDATE approval_proposals
+        SET diff_text = NULL
+        WHERE status <> 'pending'
+           OR NOT EXISTS (
+             SELECT 1 FROM approval_dispatches
+             WHERE approval_dispatches.proposal_id = approval_proposals.id
+               AND approval_dispatches.state = 'pending'
+           );
+      `);
+            version = 3;
+        }
+        if (version === 3) {
+            database.exec(`
+        CREATE TABLE approval_idempotency_tombstones (
+          idempotency_key TEXT PRIMARY KEY,
+          not_after INTEGER NOT NULL,
+          abandoned_at INTEGER NOT NULL
+        ) STRICT;
+      `);
+            version = 4;
+        }
+        if (version === 4) {
+            // Rebuild instead of ADD COLUMN ... DEFAULT so future inserts cannot
+            // accidentally create an unverifiable legacy sentinel.
+            database.exec(`
+        ALTER TABLE approval_idempotency_tombstones
+          RENAME TO approval_idempotency_tombstones_v4;
+        CREATE TABLE approval_idempotency_tombstones (
+          idempotency_key TEXT PRIMARY KEY,
+          not_after INTEGER NOT NULL,
+          abandoned_at INTEGER NOT NULL,
+          intent_hash TEXT NOT NULL CHECK (
+            intent_hash = '${legacyApprovalIntentHash}'
+            OR (length(intent_hash) = 64 AND intent_hash NOT GLOB '*[^0-9a-f]*')
+          )
+        ) STRICT;
+        INSERT INTO approval_idempotency_tombstones(
+          idempotency_key, not_after, abandoned_at, intent_hash
+        )
+        SELECT idempotency_key, not_after, abandoned_at, '${legacyApprovalIntentHash}'
+        FROM approval_idempotency_tombstones_v4;
+        DROP TABLE approval_idempotency_tombstones_v4;
+      `);
+            version = 5;
+        }
+        if (version !== policySchemaVersion) {
+            throw new Error(`unsupported policy database schema ${version}`);
+        }
+        database.prepare(`UPDATE schema_meta SET value = ? WHERE key = 'schema-version'`)
+            .run(String(policySchemaVersion));
+        database.exec(`PRAGMA user_version = ${policySchemaVersion}; COMMIT`);
+        transactionOpen = false;
+    }
+    catch (error) {
+        if (transactionOpen) {
+            try {
+                database.exec('ROLLBACK');
+            }
+            catch {
+                // SQLite may already have rolled back a failed schema transaction.
+            }
+        }
+        throw error;
+    }
+}
+const walRetryWait = new Int32Array(new SharedArrayBuffer(Int32Array.BYTES_PER_ELEMENT));
+function enableWal(database) {
+    const deadline = Date.now() + 5_000;
+    while (true) {
+        try {
+            const row = database.prepare('PRAGMA journal_mode = WAL').get();
+            if (row.journal_mode.toLowerCase() !== 'wal') {
+                throw new Error(`policy database refused WAL mode: ${row.journal_mode}`);
+            }
+            return;
+        }
+        catch (error) {
+            const retryable = error instanceof Error && /database is (?:busy|locked)/i.test(error.message);
+            if (!retryable || Date.now() >= deadline)
+                throw error;
+            Atomics.wait(walRetryWait, 0, 0, 10);
+        }
+    }
+}
+export function openPolicyDatabase(path) {
+    if (path !== ':memory:' && !isAbsolute(path)) {
+        throw new PolicyDatabaseError('invalid-path', 'policy database path must be absolute');
+    }
+    if (path !== ':memory:') {
+        const parent = dirname(path);
+        mkdirSync(parent, { recursive: true, mode: 0o700 });
+    }
+    const database = new DatabaseSync(path);
+    try {
+        database.exec('PRAGMA foreign_keys = ON');
+        database.exec('PRAGMA busy_timeout = 5000');
+        database.exec('PRAGMA synchronous = FULL');
+        migrate(database);
+        if (path !== ':memory:')
+            enableWal(database);
+        if (path !== ':memory:')
+            chmodSync(path, 0o600);
+        return database;
+    }
+    catch (error) {
+        database.close();
+        throw error;
+    }
+}
+//# sourceMappingURL=sqlite.js.map

package/lib/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../src/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAA;AAEpC,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAA;AAE3D,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAEjC;IADX,YACW,IAAuC,EAChD,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHL,SAAI,GAAJ,IAAI,CAAmC;QAIhD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AAED,SAAS,OAAO,CAAC,QAAsB;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAA8B,CAAA;IACzF,IAAI,OAAO,CAAC,YAAY,GAAG,mBAAmB,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,0BAA0B,OAAO,CAAC,YAAY,mCAAmC,mBAAmB,EAAE,CACvG,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,mBAAmB;QAAE,OAAM;IAExD,IAAI,eAAe,GAAG,KAAK,CAAA;IAC3B,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAChC,eAAe,GAAG,IAAI,CAAA;QACtB,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAA8B,CAAA;QACxF,IAAI,MAAM,CAAC,YAAY,GAAG,mBAAmB,EAAE,CAAC;YAC9C,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,0BAA0B,MAAM,CAAC,YAAY,mCAAmC,mBAAmB,EAAE,CACtG,CAAA;QACH,CAAC;QACD,IAAI,OAAO,GAAG,MAAM,CAAC,YAAY,CAAA;QAEjC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyGb,CAAC,CAAA;YACF,OAAO,GAAG,CAAC,CAAA;QACb,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;OAkBb,CAAC,CAAA;YACF,OAAO,GAAG,CAAC,CAAA;QACb,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;OAWb,CAAC,CAAA;YACF,OAAO,GAAG,CAAC,CAAA;QACb,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;;;;;;OAMb,CAAC,CAAA;YACF,OAAO,GAAG,CAAC,CAAA;QACb,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,qEAAqE;YACrE,uDAAuD;YACvD,QAAQ,CAAC,IAAI,CAAC;;;;;;;;6BAQS,wBAAwB;;;;;;;4DAOO,wBAAwB;;;OAG7E,CAAC,CAAA;YACF,OAAO,GAAG,CAAC,CAAA;QACb,CAAC;QAED,IAAI,OAAO,KAAK,mBAAmB,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAA;QAClE,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,+DAA+D,CAAC;aAC9E,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAA;QACnC,QAAQ,CAAC,IAAI,CAAC,yBAAyB,mBAAmB,UAAU,CAAC,CAAA;QACrE,eAAe,GAAG,KAAK,CAAA;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAA;AAExF,SAAS,SAAS,CAAC,QAAsB;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAA;IACnC,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAA8B,CAAA;YAC3F,IAAI,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAA;YAC1E,CAAC;YACD,OAAM;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK,IAAI,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC9F,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,KAAK,CAAA;YACrD,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,mBAAmB,CAAC,cAAc,EAAE,uCAAuC,CAAC,CAAA;IACxF,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5B,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;QACzC,QAAQ,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;QAC3C,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;QAC1C,OAAO,CAAC,QAAQ,CAAC,CAAA;QACjB,IAAI,IAAI,KAAK,UAAU;YAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;QAC5C,IAAI,IAAI,KAAK,UAAU;YAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC/C,OAAO,QAAQ,CAAA;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,KAAK,EAAE,CAAA;QAChB,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/tool-risk.d.ts

@@ -0,0 +1,10 @@
+export type ToolRiskClassification = 'allow' | 'ask-review' | 'ask-human' | 'defer-native-approval';
+export declare const AUTO_REVIEW_APPROVAL_REASON = "assistant-policy: ask-review (unclassified or potentially low-risk tool action)";
+export declare const HUMAN_APPROVAL_REASON = "assistant-policy: ask-human (locally detected sensitive tool action)";
+export interface ToolRiskInput {
+    readonly name: string;
+    readonly arguments: unknown;
+    readonly workspace: string;
+}
+export declare function classifyToolRisk(input: Readonly<ToolRiskInput>): ToolRiskClassification;
+//# sourceMappingURL=tool-risk.d.ts.map

package/lib/tool-risk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-risk.d.ts","sourceRoot":"","sources":["../src/tool-risk.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,sBAAsB,GAC9B,OAAO,GACP,YAAY,GACZ,WAAW,GACX,uBAAuB,CAAA;AAE3B,eAAO,MAAM,2BAA2B,oFAC2C,CAAA;AACnF,eAAO,MAAM,qBAAqB,yEACsC,CAAA;AAExE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AA2RD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,sBAAsB,CA2BvF"}

package/lib/tool-risk.js

@@ -0,0 +1,321 @@
+import { basename, isAbsolute, relative, resolve, sep } from 'node:path';
+export const AUTO_REVIEW_APPROVAL_REASON = 'assistant-policy: ask-review (unclassified or potentially low-risk tool action)';
+export const HUMAN_APPROVAL_REASON = 'assistant-policy: ask-human (locally detected sensitive tool action)';
+const WRITE_TOOLS = new Set(['write', 'edit']);
+const NETWORK_TOOLS = new Set(['web_fetch', 'web_search']);
+const NATIVE_ESCALATION_TOOLS = new Set(['bash', 'pwsh', 'write', 'edit']);
+const NATIVE_ESCALATION_TARGETS = new Set(['workspace-write', 'danger-full-access']);
+const BASH_ARGUMENT_KEYS = new Set([
+    'command',
+    'description',
+    'justification',
+    'run_in_background',
+    'sandbox_permissions',
+    'timeoutMs',
+    'workdir',
+]);
+// These are argv shapes, not shell-string prefixes. Extending this list should
+// be a deliberate policy change because an unrecognised form falls back to ask.
+const SAFE_EXACT_COMMANDS = [
+    ['pwd'],
+    ['git', 'status', '--short'],
+    ['git', 'branch', '--show-current'],
+    ['git', 'rev-parse', '--show-toplevel'],
+    ['git', 'diff', '--no-ext-diff', '--stat'],
+];
+const SAFE_LS_OPTIONS = new Set(['-1', '-a', '-al', '-l', '-la']);
+const MKFS_COMMANDS = new Set([
+    'mkfs',
+    'mkfs.btrfs',
+    'mkfs.ext2',
+    'mkfs.ext3',
+    'mkfs.ext4',
+    'mkfs.xfs',
+]);
+const NETWORK_COMMANDS = new Set([
+    'curl',
+    'ftp',
+    'nc',
+    'ncat',
+    'rsync',
+    'scp',
+    'sftp',
+    'ssh',
+    'telnet',
+    'wget',
+]);
+const GIT_NETWORK_SUBCOMMANDS = new Set(['clone', 'fetch', 'ls-remote', 'pull', 'push']);
+const PRIVILEGE_COMMANDS = new Set(['doas', 'pkexec', 'su', 'sudo']);
+const BACKGROUND_COMMANDS = new Set(['disown', 'nohup', 'setsid']);
+const SHELL_WRAPPER_COMMANDS = new Set(['command', 'eval', 'exec', 'ionice', 'nice', 'time', 'timeout', 'xargs']);
+const SHELL_INTERPRETERS = new Set(['bash', 'dash', 'fish', 'sh', 'zsh']);
+const CREDENTIAL_COMMANDS = new Set(['env', 'keychain', 'op', 'pass', 'printenv', 'security']);
+const DESTRUCTIVE_COMMANDS = new Set(['dd', 'rm', 'shred']);
+const PACKAGE_MANAGER_COMMANDS = new Set(['bun', 'npm', 'pnpm', 'yarn']);
+const PACKAGE_NETWORK_SUBCOMMANDS = new Set(['add', 'install', 'update', 'upgrade']);
+const PACKAGE_EXEC_COMMANDS = new Set(['bunx', 'npx']);
+const PYTHON_PACKAGE_COMMANDS = new Set(['pip', 'pip3']);
+const CREDENTIAL_MARKER = /(?:^|[^a-z0-9])(?:api[-_]?key|authorization|cookie|credential|password|private[-_]?key|secret|token)(?:[^a-z0-9]|$)/iu;
+const CREDENTIAL_PATH = /(?:^|[/\\])(?:\.aws[/\\](?:config|credentials)|\.codex[/\\]auth\.json|\.docker[/\\]config\.json|\.env(?:\.[^/\\\s]+)?|\.gnupg|\.kube[/\\]config|\.netrc|\.npmrc|\.ssh|auth\.json|credentials\.json|id_(?:ed25519|rsa))(?:$|[\s/\\])/iu;
+const EMBEDDED_SECRET = /(?:bearer\s+[a-z0-9._~-]+|(?:^|[^a-z0-9])(?:ghp|github_pat|sk|xox[baprs])[-_][a-z0-9_-]+)/iu;
+const URI_USER_INFO = /\b[a-z][a-z0-9+.-]*:\/\/[^\s/@:]+:[^\s/@]+@/iu;
+const PEM_PRIVATE_KEY = /-----BEGIN (?:EC |OPENSSH |PGP |RSA )?PRIVATE KEY-----/iu;
+const JWT_TOKEN = /\beyJ[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]{5,}\b/u;
+const AWS_ACCESS_KEY = /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/u;
+const READ_ARGUMENT_KEYS = {
+    read: new Set(['file_path', 'limit', 'offset', 'path']),
+    read_image: new Set(['detail', 'file_path', 'path']),
+    glob: new Set(['path', 'pattern']),
+    grep: new Set(['include', 'path', 'pattern']),
+};
+function asRecord(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    return value;
+}
+function nativeEscalation(argumentsRecord) {
+    if (argumentsRecord === undefined)
+        return 'none';
+    if (!Object.hasOwn(argumentsRecord, 'sandbox_permissions')) {
+        return Object.hasOwn(argumentsRecord, 'justification') ? 'invalid' : 'none';
+    }
+    if (typeof argumentsRecord.sandbox_permissions !== 'string'
+        || !NATIVE_ESCALATION_TARGETS.has(argumentsRecord.sandbox_permissions))
+        return 'invalid';
+    return typeof argumentsRecord.justification === 'string' && argumentsRecord.justification.trim() !== ''
+        ? 'valid'
+        : 'invalid';
+}
+function isWorkspacePath(target, workspace) {
+    if (target.trim() === '' || target.includes('\0')
+        || workspace.trim() === '' || !isAbsolute(workspace))
+        return false;
+    const workspacePath = resolve(workspace);
+    const targetPath = resolve(workspacePath, target);
+    const fromWorkspace = relative(workspacePath, targetPath);
+    const firstSegment = fromWorkspace.split(sep, 1)[0];
+    return fromWorkspace === '' || (!isAbsolute(fromWorkspace) && firstSegment !== '..');
+}
+function isCredentialSensitivePath(target, workspace) {
+    return CREDENTIAL_PATH.test(target) || CREDENTIAL_PATH.test(resolve(workspace, target));
+}
+function isWorkspaceReadTarget(target, workspace) {
+    return isWorkspacePath(target, workspace) && !isCredentialSensitivePath(target, workspace);
+}
+function hasOnlyKeys(value, allowed) {
+    return Object.keys(value).every(key => allowed.has(key));
+}
+function onePathArgument(value) {
+    const keys = ['path', 'file_path'].filter(key => Object.hasOwn(value, key));
+    if (keys.length !== 1)
+        return undefined;
+    const path = value[keys[0]];
+    return typeof path === 'string' ? path : undefined;
+}
+function validReadBounds(value) {
+    return ['offset', 'limit'].every(key => !Object.hasOwn(value, key)
+        || (Number.isSafeInteger(value[key]) && value[key] >= 0));
+}
+function classifyReadTool(name, argumentsRecord, workspace) {
+    const allowed = READ_ARGUMENT_KEYS[name];
+    if (argumentsRecord === undefined || allowed === undefined || !hasOnlyKeys(argumentsRecord, allowed)) {
+        return 'ask-human';
+    }
+    if (name === 'read' || name === 'read_image') {
+        const target = onePathArgument(argumentsRecord);
+        if (target === undefined || !isWorkspaceReadTarget(target, workspace))
+            return 'ask-human';
+        if (name === 'read' && !validReadBounds(argumentsRecord))
+            return 'ask-human';
+        if (name === 'read_image' && Object.hasOwn(argumentsRecord, 'detail')
+            && !['auto', 'high', 'low', 'original'].includes(String(argumentsRecord.detail)))
+            return 'ask-human';
+        return 'allow';
+    }
+    if (typeof argumentsRecord.pattern !== 'string' || argumentsRecord.pattern.trim() === '')
+        return 'ask-human';
+    const root = argumentsRecord.path ?? workspace;
+    if (typeof root !== 'string' || !isWorkspaceReadTarget(root, workspace))
+        return 'ask-human';
+    const resolvedRoot = resolve(workspace, root);
+    if (name === 'glob') {
+        return isWorkspaceReadTarget(resolve(resolvedRoot, argumentsRecord.pattern), workspace) ? 'allow' : 'ask-human';
+    }
+    if (Object.hasOwn(argumentsRecord, 'include')) {
+        if (typeof argumentsRecord.include !== 'string' || argumentsRecord.include.trim() === ''
+            || !isWorkspaceReadTarget(resolve(resolvedRoot, argumentsRecord.include), workspace))
+            return 'ask-human';
+    }
+    return 'allow';
+}
+function hasWorkspaceContainedTarget(argumentsRecord, workspace) {
+    if (argumentsRecord === undefined)
+        return false;
+    const targets = [argumentsRecord.path, argumentsRecord.file_path]
+        .filter((value) => typeof value === 'string');
+    return targets.length > 0 && targets.every(target => isWorkspacePath(target, workspace));
+}
+/**
+ * Tokenises only a deliberately small shell-free subset. It is not a shell
+ * parser: quoting, expansion, control operators, globbing, comments and line
+ * breaks all make the command ineligible for automatic approval.
+ */
+function simpleArgv(command) {
+    const normalized = command.trim();
+    if (normalized === '')
+        return undefined;
+    if (!/^[A-Za-z0-9_@%+=:,./\- \t]+$/u.test(normalized))
+        return undefined;
+    return normalized.split(/[ \t]+/u);
+}
+function argvEquals(argv, expected) {
+    return argv.length === expected.length && argv.every((token, index) => token === expected[index]);
+}
+function classifyLs(argv, workdir, workspace) {
+    if (argv[0] !== 'ls')
+        return undefined;
+    let unsupportedOption = false;
+    for (const token of argv.slice(1)) {
+        if (token[0] === '-') {
+            if (!SAFE_LS_OPTIONS.has(token))
+                unsupportedOption = true;
+            continue;
+        }
+        if (!isWorkspaceReadTarget(resolve(workdir, token), workspace))
+            return 'ask-human';
+    }
+    return unsupportedOption ? 'ask-review' : 'allow';
+}
+function commandName(argv) {
+    return basename(argv[0] ?? '');
+}
+function isDeterministicallySensitive(argv, raw) {
+    const command = commandName(argv);
+    if (CREDENTIAL_MARKER.test(raw) || CREDENTIAL_PATH.test(raw) || EMBEDDED_SECRET.test(raw)
+        || URI_USER_INFO.test(raw) || PEM_PRIVATE_KEY.test(raw)
+        || JWT_TOKEN.test(raw) || AWS_ACCESS_KEY.test(raw))
+        return true;
+    if (/^[A-Za-z_][A-Za-z0-9_]*=/u.test(argv[0] ?? ''))
+        return true;
+    if (NETWORK_COMMANDS.has(command) || PRIVILEGE_COMMANDS.has(command)
+        || BACKGROUND_COMMANDS.has(command) || CREDENTIAL_COMMANDS.has(command)
+        || DESTRUCTIVE_COMMANDS.has(command) || MKFS_COMMANDS.has(command)
+        || SHELL_WRAPPER_COMMANDS.has(command))
+        return true;
+    if (SHELL_INTERPRETERS.has(command) && argv.includes('-c'))
+        return true;
+    if ((command === 'busybox' || command === 'toybox')
+        && argv.slice(1).some(token => NETWORK_COMMANDS.has(token)
+            || DESTRUCTIVE_COMMANDS.has(token) || MKFS_COMMANDS.has(token)))
+        return true;
+    if (command === 'git') {
+        if (argv.slice(1).some(token => GIT_NETWORK_SUBCOMMANDS.has(token)))
+            return true;
+        if (argv.includes('clean'))
+            return true;
+        if (argv.includes('reset') && argv.includes('--hard'))
+            return true;
+        const submodule = argv.indexOf('submodule', 1);
+        if (submodule >= 0 && argv.slice(submodule + 1).includes('update'))
+            return true;
+    }
+    const argumentsAfterCommand = argv.slice(1);
+    if (PACKAGE_MANAGER_COMMANDS.has(command)
+        && argumentsAfterCommand.some(token => PACKAGE_NETWORK_SUBCOMMANDS.has(token)))
+        return true;
+    if (PACKAGE_EXEC_COMMANDS.has(command))
+        return true;
+    if (command === 'npm' && argumentsAfterCommand.some(token => token === 'exec' || token === 'x'))
+        return true;
+    if ((command === 'pnpm' || command === 'yarn') && argumentsAfterCommand.includes('dlx'))
+        return true;
+    if (PYTHON_PACKAGE_COMMANDS.has(command) && argumentsAfterCommand.includes('install'))
+        return true;
+    if ((command === 'python' || command === 'python3')
+        && argumentsAfterCommand.some((token, index) => token === '-m'
+            && PYTHON_PACKAGE_COMMANDS.has(argumentsAfterCommand[index + 1] ?? '')
+            && argumentsAfterCommand.slice(index + 2).includes('install')))
+        return true;
+    if (command === 'uv' && argumentsAfterCommand[0] === 'pip'
+        && argumentsAfterCommand.includes('install'))
+        return true;
+    if ((command === 'cargo' || command === 'gem' || command === 'brew')
+        && argumentsAfterCommand.includes('install'))
+        return true;
+    if (command === 'go' && argumentsAfterCommand[0] === 'get')
+        return true;
+    if (command === 'composer'
+        && argumentsAfterCommand.some(token => token === 'install' || token === 'require' || token === 'update'))
+        return true;
+    if (command === 'docker'
+        && argumentsAfterCommand.some(token => token === 'pull' || token === 'push' || token === 'login'))
+        return true;
+    return command === 'gh' || command === 'glab';
+}
+function classifyBash(argumentsRecord, workspace) {
+    if (argumentsRecord === undefined || typeof argumentsRecord.command !== 'string'
+        || !hasOnlyKeys(argumentsRecord, BASH_ARGUMENT_KEYS))
+        return 'ask-human';
+    if (Object.hasOwn(argumentsRecord, 'description')
+        && (typeof argumentsRecord.description !== 'string' || argumentsRecord.description.trim() === '')) {
+        return 'ask-human';
+    }
+    if (Object.hasOwn(argumentsRecord, 'timeoutMs')
+        && (typeof argumentsRecord.timeoutMs !== 'number'
+            || !Number.isFinite(argumentsRecord.timeoutMs) || argumentsRecord.timeoutMs <= 0)) {
+        return 'ask-human';
+    }
+    const workdir = argumentsRecord.workdir ?? workspace;
+    if (typeof workdir !== 'string' || !isWorkspaceReadTarget(workdir, workspace))
+        return 'ask-human';
+    const command = argumentsRecord.command;
+    const argv = simpleArgv(command);
+    // Anything that needs real shell parsing is deliberately ineligible for
+    // automatic review: operators, expansion, quoting, redirection and globbing
+    // may materially change the command that actually runs.
+    if (argv === undefined)
+        return 'ask-human';
+    if (isDeterministicallySensitive(argv, command))
+        return 'ask-human';
+    const lsRisk = classifyLs(argv, resolve(workspace, workdir), workspace);
+    if (lsRisk !== undefined)
+        return lsRisk;
+    if (SAFE_EXACT_COMMANDS.some(expected => argvEquals(argv, expected)))
+        return 'allow';
+    return 'ask-review';
+}
+export function classifyToolRisk(input) {
+    const argumentsRecord = asRecord(input.arguments);
+    if (input.name === 'bash' && argumentsRecord !== undefined
+        && Object.hasOwn(argumentsRecord, 'run_in_background')
+        && argumentsRecord.run_in_background !== false)
+        return 'ask-human';
+    const escalation = nativeEscalation(argumentsRecord);
+    if (escalation === 'valid') {
+        return NATIVE_ESCALATION_TOOLS.has(input.name) ? 'defer-native-approval' : 'ask-human';
+    }
+    if (escalation === 'invalid')
+        return 'ask-human';
+    if (NETWORK_TOOLS.has(input.name))
+        return 'ask-human';
+    // `run_code` executes arbitrary worker code and is not an OS sandbox. Its
+    // source cannot be reduced to the narrow argv grammar below, so auto review
+    // must never grant it without a human decision.
+    if (input.name === 'run_code')
+        return 'ask-human';
+    if (input.name === 'bash')
+        return classifyBash(argumentsRecord, input.workspace);
+    // PowerShell has materially different quoting, invocation and background
+    // semantics. Until it has its own strict parser, never send it to the LLM
+    // reviewer; native sandbox escalation above remains owned by the tool.
+    if (input.name === 'pwsh')
+        return 'ask-human';
+    if (Object.hasOwn(READ_ARGUMENT_KEYS, input.name)) {
+        return classifyReadTool(input.name, argumentsRecord, input.workspace);
+    }
+    if (WRITE_TOOLS.has(input.name)) {
+        return hasWorkspaceContainedTarget(argumentsRecord, input.workspace) ? 'allow' : 'ask-human';
+    }
+    return 'ask-review';
+}
+//# sourceMappingURL=tool-risk.js.map

package/lib/tool-risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-risk.js","sourceRoot":"","sources":["../src/tool-risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAQxE,MAAM,CAAC,MAAM,2BAA2B,GACtC,iFAAiF,CAAA;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAChC,sEAAsE,CAAA;AAQxE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;AAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAA;AAC1D,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;AAC1E,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,CAAA;AACpF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,SAAS;IACT,aAAa;IACb,eAAe;IACf,mBAAmB;IACnB,qBAAqB;IACrB,WAAW;IACX,SAAS;CACV,CAAC,CAAA;AAEF,+EAA+E;AAC/E,gFAAgF;AAChF,MAAM,mBAAmB,GAAmC;IAC1D,CAAC,KAAK,CAAC;IACP,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;IAC5B,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC;IACnC,CAAC,KAAK,EAAE,WAAW,EAAE,iBAAiB,CAAC;IACvC,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC;CAC3C,CAAA;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;AACjE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,MAAM;IACN,YAAY;IACZ,WAAW;IACX,WAAW;IACX,WAAW;IACX,UAAU;CACX,CAAC,CAAA;AACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM;IACN,KAAK;IACL,IAAI;IACJ,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;CACP,CAAC,CAAA;AACF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AACxF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;AACpE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;AAClE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;AACjH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;AACzE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;AAC9F,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;AAC3D,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AACxE,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;AACpF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;AACtD,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;AACxD,MAAM,iBAAiB,GAAG,uHAAuH,CAAA;AACjJ,MAAM,eAAe,GAAG,uOAAuO,CAAA;AAC/P,MAAM,eAAe,GAAG,6FAA6F,CAAA;AACrH,MAAM,aAAa,GAAG,+CAA+C,CAAA;AACrE,MAAM,eAAe,GAAG,0DAA0D,CAAA;AAClF,MAAM,SAAS,GAAG,iEAAiE,CAAA;AACnF,MAAM,cAAc,GAAG,gCAAgC,CAAA;AAEvD,MAAM,kBAAkB,GAAkD;IACxE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvD,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;CAC9C,CAAA;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACzF,OAAO,KAA0C,CAAA;AACnD,CAAC;AAED,SAAS,gBAAgB,CACvB,eAA8D;IAE9D,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,qBAAqB,CAAC,EAAE,CAAC;QAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;IAC7E,CAAC;IACD,IAAI,OAAO,eAAe,CAAC,mBAAmB,KAAK,QAAQ;WACtD,CAAC,yBAAyB,CAAC,GAAG,CAAC,eAAe,CAAC,mBAAmB,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1F,OAAO,OAAO,eAAe,CAAC,aAAa,KAAK,QAAQ,IAAI,eAAe,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE;QACrG,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,SAAiB;IACxD,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC5C,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAA;IACpE,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxC,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IACjD,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC,CAAA;IACzD,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnD,OAAO,aAAa,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,YAAY,KAAK,IAAI,CAAC,CAAA;AACtF,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAc,EAAE,SAAiB;IAClE,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;AACzF,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,SAAiB;IAC9D,OAAO,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AAC5F,CAAC;AAED,SAAS,WAAW,CAClB,KAAwC,EACxC,OAA4B;IAE5B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,SAAS,eAAe,CACtB,KAAwC;IAExC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;IAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAA;IAC5B,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,KAAwC;IAC/D,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;WAC7D,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAK,KAAK,CAAC,GAAG,CAAY,IAAI,CAAC,CAAC,CAAC,CAAA;AACzE,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAY,EACZ,eAA8D,EAC9D,SAAiB;IAEjB,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACxC,IAAI,eAAe,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,OAAO,CAAC,EAAE,CAAC;QACrG,OAAO,WAAW,CAAA;IACpB,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,CAAC,CAAA;QAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC;YAAE,OAAO,WAAW,CAAA;QACzF,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC;YAAE,OAAO,WAAW,CAAA;QAC5E,IAAI,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC;eAChE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,WAAW,CAAA;QACtG,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,IAAI,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,WAAW,CAAA;IAC5G,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,IAAI,SAAS,CAAA;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC;QAAE,OAAO,WAAW,CAAA;IAC3F,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC7C,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,qBAAqB,CAAC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAA;IACjH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9C,IAAI,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;eACnF,CAAC,qBAAqB,CAAC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC;YAAE,OAAO,WAAW,CAAA;IAC5G,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,2BAA2B,CAClC,eAA8D,EAC9D,SAAiB;IAEjB,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC/C,MAAM,OAAO,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC;SAC9D,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAA;IAChE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;AAC1F,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;IACjC,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IACvC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAA;IACvE,OAAO,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,UAAU,CAAC,IAAuB,EAAE,QAA2B;IACtE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,UAAU,CACjB,IAAuB,EACvB,OAAe,EACf,SAAiB;IAEjB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACtC,IAAI,iBAAiB,GAAG,KAAK,CAAA;IAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,iBAAiB,GAAG,IAAI,CAAA;YACzD,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS,CAAC;YAAE,OAAO,WAAW,CAAA;IACpF,CAAC;IACD,OAAO,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAA;AACnD,CAAC;AAED,SAAS,WAAW,CAAC,IAAuB;IAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;AAChC,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAuB,EAAE,GAAW;IACxE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;WACpF,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;WACpD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACjE,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAA;IAChE,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC;WAC/D,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC;WACpE,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;WAC/D,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IACrD,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACvE,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,CAAC;WAC9C,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;eACrD,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAChF,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAChF,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAA;QACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAClE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;QAC9C,IAAI,SAAS,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;IACjF,CAAC;IACD,MAAM,qBAAqB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3C,IAAI,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC;WACpC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7F,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IACnD,IAAI,OAAO,KAAK,KAAK,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5G,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,CAAC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACpG,IAAI,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAClG,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,SAAS,CAAC;WAC9C,qBAAqB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI;eACzD,uBAAuB,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;eACnE,qBAAqB,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/E,IAAI,OAAO,KAAK,IAAI,IAAI,qBAAqB,CAAC,CAAC,CAAC,KAAK,KAAK;WACrD,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3D,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,MAAM,CAAC;WAC/D,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3D,IAAI,OAAO,KAAK,IAAI,IAAI,qBAAqB,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA;IACvE,IAAI,OAAO,KAAK,UAAU;WACrB,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAA;IACvH,IAAI,OAAO,KAAK,QAAQ;WACnB,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IAChH,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,CAAA;AAC/C,CAAC;AAED,SAAS,YAAY,CACnB,eAA8D,EAC9D,SAAiB;IAEjB,IAAI,eAAe,KAAK,SAAS,IAAI,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ;WAC3E,CAAC,WAAW,CAAC,eAAe,EAAE,kBAAkB,CAAC;QAAE,OAAO,WAAW,CAAA;IAC1E,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC;WAC5C,CAAC,OAAO,eAAe,CAAC,WAAW,KAAK,QAAQ,IAAI,eAAe,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACpG,OAAO,WAAW,CAAA;IACpB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,WAAW,CAAC;WAC1C,CAAC,OAAO,eAAe,CAAC,SAAS,KAAK,QAAQ;eAC5C,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,eAAe,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO,WAAW,CAAA;IACpB,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,IAAI,SAAS,CAAA;IACpD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC;QAAE,OAAO,WAAW,CAAA;IACjG,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAA;IACvC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;IAChC,wEAAwE;IACxE,4EAA4E;IAC5E,wDAAwD;IACxD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,WAAW,CAAA;IAC1C,IAAI,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,OAAO,WAAW,CAAA;IACnE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAA;IACvE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IACvC,IAAI,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAAE,OAAO,OAAO,CAAA;IACpF,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA8B;IAC7D,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,eAAe,KAAK,SAAS;WACrD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC;WACnD,eAAe,CAAC,iBAAiB,KAAK,KAAK;QAAE,OAAO,WAAW,CAAA;IACpE,MAAM,UAAU,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAA;IACpD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,WAAW,CAAA;IACxF,CAAC;IACD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,WAAW,CAAA;IAChD,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IACrD,0EAA0E;IAC1E,4EAA4E;IAC5E,gDAAgD;IAChD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,WAAW,CAAA;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IAChF,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,WAAW,CAAA;IAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,2BAA2B,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAA;IAC9F,CAAC;IACD,OAAO,YAAY,CAAA;AACrB,CAAC"}