@empire-builder-kit/nx 1.0.0-rc.30 → 1.0.0-rc.32

package/src/repository-policy/policy.js

@@ -3,22 +3,34 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEPLOYMENT_PROFILES = exports.REPOSITORY_MODE_PRESETS = exports.SLICE_PRODUCTION_STATUSES = exports.DEFAULT_RECOVERY_PRODUCTION_FOUNDATION_PROFILE = exports.PRODUCTION_FOUNDATION_PROFILES = exports.PRODUCTION_APPROVAL_MODES = exports.PRODUCTION_ACCESS_VALUES = exports.REPOSITORY_POLICY_SCHEMA_URL = exports.REPOSITORY_POLICY_SCHEMA_VERSION = exports.REPOSITORY_POLICY_FILE = void 0;
 exports.normalizeDeploymentAccountId = normalizeDeploymentAccountId;
 exports.requiresGithubDeployment = requiresGithubDeployment;
+exports.activeDeploymentStages = activeDeploymentStages;
+exports.isActiveDeploymentStage = isActiveDeploymentStage;
+exports.productionRehearsalStage = productionRehearsalStage;
 exports.validateDeploymentAccountTopology = validateDeploymentAccountTopology;
 exports.configuredDeploymentAccountTopology = configuredDeploymentAccountTopology;
+exports.configuredDeploymentAccountForStage = configuredDeploymentAccountForStage;
 exports.configuredDeploymentRegion = configuredDeploymentRegion;
 exports.validateRepositoryOperatingPolicy = validateRepositoryOperatingPolicy;
 exports.formatRepositoryPolicyIssues = formatRepositoryPolicyIssues;
 exports.parseRepositoryOperatingPolicy = parseRepositoryOperatingPolicy;
+exports.validateRepositoryOperatingPolicyMigrationProvenance = validateRepositoryOperatingPolicyMigrationProvenance;
 exports.readRepositoryOperatingPolicy = readRepositoryOperatingPolicy;
 exports.createIncubationRepositoryPolicy = createIncubationRepositoryPolicy;
 exports.applyRepositoryPolicyChange = applyRepositoryPolicyChange;
 exports.evaluateRepositoryPolicyRequest = evaluateRepositoryPolicyRequest;
 exports.assertRepositoryPolicyRequest = assertRepositoryPolicyRequest;
+const node_crypto_1 = require("node:crypto");
+const node_buffer_1 = require("node:buffer");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const validation_js_1 = require("../validation.js");
+const identity_js_1 = require("../workspace-deployment/identity.js");
+const migration_evidence_js_1 = require("../workspace-deployment/migration-evidence.js");
 exports.REPOSITORY_POLICY_FILE = 'ebk.repository-policy.json';
 exports.REPOSITORY_POLICY_SCHEMA_VERSION = 1;
+const MAX_REPOSITORY_POLICY_BYTES = 1024 * 1024;
+const MAX_WORKSPACE_DEPLOYMENT_MIGRATION_EVIDENCE_BYTES = 128 * 1024;
+const UNSUPPORTED_AWS_PARTITION_REGION = /^(?:us-iso-|us-isob-|eu-isoe-|us-isof-)/u;
 exports.REPOSITORY_POLICY_SCHEMA_URL = './node_modules/@empire-builder-kit/nx/schemas/repository-policy-v1.json';
 exports.PRODUCTION_ACCESS_VALUES = ['disabled', 'controlled'];
 exports.PRODUCTION_APPROVAL_MODES = [
@@ -41,6 +53,11 @@ exports.DEPLOYMENT_PROFILES = [
     'production-isolated',
     'fully-isolated',
 ];
+const DEPLOYMENT_STAGES_BY_PROFILE = {
+    starter: ['development', 'production'],
+    'production-isolated': ['development', 'staging', 'production'],
+    'fully-isolated': ['development', 'staging', 'production'],
+};
 function normalizeDeploymentAccountId(value, label) {
     if (typeof value === 'string' && /^\d{12}$/.test(value))
         return value;
@@ -53,19 +70,38 @@ function normalizeDeploymentAccountId(value, label) {
     throw new Error(`${label} must be an exact 12-digit AWS account ID.`);
 }
 function requiresGithubDeployment(profile, stage) {
-    return (stage === 'production' ||
-        (profile === 'fully-isolated' && stage === 'staging'));
+    return ((profile === 'production-isolated' && stage === 'production') ||
+        (profile === 'fully-isolated' && stage === 'staging') ||
+        (profile === 'fully-isolated' && stage === 'production'));
+}
+function activeDeploymentStages(profile) {
+    return DEPLOYMENT_STAGES_BY_PROFILE[profile];
+}
+function isActiveDeploymentStage(profile, stage) {
+    return activeDeploymentStages(profile).includes(stage);
+}
+function productionRehearsalStage(profile) {
+    return profile === 'starter' ? 'development' : 'staging';
 }
 function validateDeploymentAccountTopology(profile, accounts) {
-    for (const [stage, account] of Object.entries(accounts)) {
-        if (!/^\d{12}$/.test(account)) {
+    for (const stage of ['development', 'production']) {
+        if (!/^\d{12}$/.test(accounts[stage])) {
             throw new Error(`Deployment account for ${stage} must be an exact 12-digit AWS account ID.`);
         }
     }
-    const unique = new Set(Object.values(accounts));
-    if (profile === 'starter' && unique.size !== 1) {
-        throw new Error('The starter deployment profile requires one shared development, staging, and production AWS account.');
+    if (profile === 'starter') {
+        if (accounts.staging !== null) {
+            throw new Error('The starter deployment profile has no staging stage; its staging deployment account must be null.');
+        }
+        if (accounts.development !== accounts.production) {
+            throw new Error('The starter deployment profile requires one shared development and production AWS account.');
+        }
+        return { ...accounts };
+    }
+    if (accounts.staging === null || !/^\d{12}$/.test(accounts.staging)) {
+        throw new Error('Deployment account for staging must be an exact 12-digit AWS account ID.');
     }
+    const unique = new Set(Object.values(accounts));
     if (profile === 'production-isolated' &&
         (accounts.development !== accounts.staging ||
             accounts.production === accounts.staging)) {
@@ -77,10 +113,11 @@ function validateDeploymentAccountTopology(profile, accounts) {
     return { ...accounts };
 }
 function configuredDeploymentAccountTopology(profile, accounts) {
-    if (accounts.development === null ||
-        accounts.staging === null ||
-        accounts.production === null) {
-        throw new Error('Deployment account topology is incomplete; configure exact development, staging, and production AWS account IDs before deployment.');
+    if (accounts.development === null || accounts.production === null) {
+        throw new Error('Deployment account topology is incomplete; configure exact development and production AWS account IDs before deployment.');
+    }
+    if (profile !== 'starter' && accounts.staging === null) {
+        throw new Error('Deployment account topology is incomplete; isolated profiles require an exact staging AWS account ID.');
     }
     return validateDeploymentAccountTopology(profile, {
         development: accounts.development,
@@ -88,10 +125,22 @@ function configuredDeploymentAccountTopology(profile, accounts) {
         staging: accounts.staging,
     });
 }
+function configuredDeploymentAccountForStage(profile, accounts, stage) {
+    if (!isActiveDeploymentStage(profile, stage)) {
+        throw new Error(`Deployment stage ${stage} is inactive for the ${profile} deployment profile.`);
+    }
+    const topology = configuredDeploymentAccountTopology(profile, accounts);
+    const account = topology[stage];
+    if (account === null) {
+        throw new Error(`Deployment account for active stage ${stage} is not configured.`);
+    }
+    return account;
+}
 function configuredDeploymentRegion(region) {
     if (region === null ||
-        !/^[a-z]{2}(?:-gov)?-[a-z]+(?:-[a-z]+)*-\d$/.test(region)) {
-        throw new Error('Deployment Region is incomplete; configure one exact AWS Region before deployment.');
+        !/^[a-z]{2}(?:-gov)?-[a-z]+(?:-[a-z]+)*-\d$/.test(region) ||
+        UNSUPPORTED_AWS_PARTITION_REGION.test(region)) {
+        throw new Error('Deployment Region is incomplete or belongs to an unsupported AWS partition; configure one exact commercial, China, or GovCloud AWS Region before deployment.');
     }
     return region;
 }
@@ -106,6 +155,8 @@ const POLICY_PROPERTIES = new Set([
     'productionFoundation',
     'schemaVersion',
     'slices',
+    'workspaceDeploymentId',
+    'workspaceDeploymentProvenance',
 ]);
 const REQUIRED_POLICY_PROPERTIES = [
     'deploymentAccounts',
@@ -116,6 +167,8 @@ const REQUIRED_POLICY_PROPERTIES = [
     'productionFoundation',
     'schemaVersion',
     'slices',
+    'workspaceDeploymentId',
+    'workspaceDeploymentProvenance',
 ];
 function rejectUnknownProperties(value, allowed, path, issues) {
     for (const property of Object.keys(value)) {
@@ -149,6 +202,67 @@ function validateRepositoryOperatingPolicy(value) {
             path: 'policy.$schema',
         });
     }
+    if (!(0, validation_js_1.isRecord)(value.workspaceDeploymentProvenance)) {
+        issues.push({
+            message: 'must declare exact fresh or migrated provenance',
+            path: 'policy.workspaceDeploymentProvenance',
+        });
+    }
+    else {
+        const provenance = value.workspaceDeploymentProvenance;
+        const provenancePath = 'policy.workspaceDeploymentProvenance';
+        if (provenance.kind === 'fresh') {
+            rejectUnknownProperties(provenance, new Set(['kind', 'schemaVersion']), provenancePath, issues);
+            if (provenance.schemaVersion !== 1) {
+                issues.push({
+                    message: 'must equal 1',
+                    path: `${provenancePath}.schemaVersion`,
+                });
+            }
+        }
+        else if (provenance.kind === 'migrated') {
+            rejectUnknownProperties(provenance, new Set(['evidencePath', 'evidenceSha256', 'kind', 'schemaVersion']), provenancePath, issues);
+            const evidencePath = provenance.evidencePath;
+            const pathSegments = typeof evidencePath === 'string' ? evidencePath.split('/') : [];
+            if (typeof evidencePath !== 'string' ||
+                !/^docs\/adoption\/[A-Za-z0-9._/-]+[.]json$/u.test(evidencePath) ||
+                (0, node_path_1.isAbsolute)(evidencePath) ||
+                evidencePath.includes('\\') ||
+                evidencePath.includes('//') ||
+                pathSegments.some((segment) => segment === '' || segment === '.' || segment === '..')) {
+                issues.push({
+                    message: 'must be one normalized JSON path beneath docs/adoption without traversal',
+                    path: `${provenancePath}.evidencePath`,
+                });
+            }
+            if (typeof provenance.evidenceSha256 !== 'string' ||
+                !/^[a-f0-9]{64}$/u.test(provenance.evidenceSha256)) {
+                issues.push({
+                    message: 'must be one lowercase SHA-256 digest',
+                    path: `${provenancePath}.evidenceSha256`,
+                });
+            }
+            if (provenance.schemaVersion !== 1) {
+                issues.push({
+                    message: 'must equal 1',
+                    path: `${provenancePath}.schemaVersion`,
+                });
+            }
+        }
+        else {
+            issues.push({
+                message: 'kind must equal fresh or migrated',
+                path: `${provenancePath}.kind`,
+            });
+        }
+    }
+    if (typeof value.workspaceDeploymentId !== 'string' ||
+        !identity_js_1.WORKSPACE_DEPLOYMENT_ID_PATTERN.test(value.workspaceDeploymentId)) {
+        issues.push({
+            message: 'must be ebkws- followed by exactly 128 bits of lowercase hexadecimal identity',
+            path: 'policy.workspaceDeploymentId',
+        });
+    }
     if (!isOneOf(value.deploymentProfile, exports.DEPLOYMENT_PROFILES)) {
         issues.push({
             message: `must equal ${exports.DEPLOYMENT_PROFILES.join(', ')}`,
@@ -157,9 +271,10 @@ function validateRepositoryOperatingPolicy(value) {
     }
     if (value.deploymentRegion !== null &&
         (typeof value.deploymentRegion !== 'string' ||
-            !/^[a-z]{2}(?:-gov)?-[a-z]+(?:-[a-z]+)*-\d$/.test(value.deploymentRegion))) {
+            !/^[a-z]{2}(?:-gov)?-[a-z]+(?:-[a-z]+)*-\d$/.test(value.deploymentRegion) ||
+            UNSUPPORTED_AWS_PARTITION_REGION.test(value.deploymentRegion))) {
         issues.push({
-            message: 'must be null or one exact AWS Region',
+            message: 'must be null or one exact commercial, China, or GovCloud AWS Region',
             path: 'policy.deploymentRegion',
         });
     }
@@ -182,8 +297,10 @@ function validateRepositoryOperatingPolicy(value) {
             }
         }
         if (isOneOf(value.deploymentProfile, exports.DEPLOYMENT_PROFILES) &&
-            ['development', 'staging', 'production'].every((stage) => typeof value.deploymentAccounts?.[stage] === 'string' &&
-                /^\d{12}$/.test(value.deploymentAccounts[stage]))) {
+            typeof value.deploymentAccounts.development === 'string' &&
+            typeof value.deploymentAccounts.production === 'string' &&
+            (value.deploymentAccounts.staging === null ||
+                typeof value.deploymentAccounts.staging === 'string')) {
             try {
                 validateDeploymentAccountTopology(value.deploymentProfile, {
                     development: value.deploymentAccounts.development,
@@ -271,7 +388,7 @@ function missingPolicyDecisionGuidance(value) {
     const missing = REQUIRED_POLICY_PROPERTIES.filter((property) => !Object.prototype.hasOwnProperty.call(value, property));
     if (missing.length === 0)
         return '';
-    return `\nMissing required top-level policy members: ${missing.join(', ')}.\nClean regeneration required: regenerate the workspace from the current exact packed candidate, then deliberately reapply the reviewed deployment-profile, production-access, approval-mode, Foundation-profile, and per-Slice decisions. Existing prerelease repositories may instead run the repository-policy generator with --deploymentProfile=fully-isolated to retain the former authority model, then commit exact development, staging, and production AWS account IDs plus deploymentRegion before any deployment. This migration preserves the authority model, not deployability; all-null account topology remains fail closed. Missing decisions are not inferred or amended in place.`;
+    return `\nMissing required top-level policy members: ${missing.join(', ')}.\nClean regeneration required: regenerate the workspace from the current exact packed candidate, then deliberately reapply the reviewed deployment-profile, production-access, approval-mode, Foundation-profile, and per-Slice decisions. Existing prerelease repositories must explicitly migrate a stable workspaceDeploymentId and required migrated provenance with bounded, version-controlled tuple occupancy evidence; a legacy profile migration also requires --deploymentProfile=fully-isolated. Then commit exact development, staging, and production AWS account IDs plus deploymentRegion before any deployment. Migration preserves the reviewed authority model and workspace ownership assertion, not deployability; all-null account topology remains fail closed. Missing decisions are not inferred or amended in place.`;
 }
 function parseRepositoryOperatingPolicy(contents, source = exports.REPOSITORY_POLICY_FILE) {
     let value;
@@ -287,18 +404,155 @@ function parseRepositoryOperatingPolicy(contents, source = exports.REPOSITORY_PO
     }
     return result.value;
 }
-function readRepositoryOperatingPolicy(workspaceRoot) {
-    const path = (0, node_path_1.join)(workspaceRoot, exports.REPOSITORY_POLICY_FILE);
-    let contents;
+function workspaceDeploymentMigrationCoordinates(policy) {
+    const region = configuredDeploymentRegion(policy.deploymentRegion);
+    const accounts = configuredDeploymentAccountTopology(policy.deploymentProfile, policy.deploymentAccounts);
+    return activeDeploymentStages(policy.deploymentProfile)
+        .map((stage) => ({ accountId: accounts[stage], region, stage }))
+        .sort((left, right) => left.stage < right.stage ? -1 : left.stage > right.stage ? 1 : 0);
+}
+function validateRepositoryOperatingPolicyMigrationProvenance(input) {
+    if (input.policy.workspaceDeploymentProvenance.kind !== 'migrated')
+        return;
+    if (node_buffer_1.Buffer.byteLength(input.evidenceBytes, 'utf8') > 131_072) {
+        throw new Error(`Workspace deployment migration evidence at ${input.evidenceSource} exceeds the 128 KiB retention bound.`);
+    }
+    const actualDigest = (0, node_crypto_1.createHash)('sha256')
+        .update(input.evidenceBytes, 'utf8')
+        .digest('hex');
+    if (actualDigest !== input.policy.workspaceDeploymentProvenance.evidenceSha256) {
+        throw new Error(`Workspace deployment migration evidence at ${input.evidenceSource} does not match the committed SHA-256 binding.`);
+    }
+    let evidence;
+    try {
+        evidence = JSON.parse(input.evidenceBytes);
+    }
+    catch (error) {
+        throw new Error(`Workspace deployment migration evidence at ${input.evidenceSource} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    (0, migration_evidence_js_1.validateWorkspaceDeploymentMigrationEvidence)({
+        evidence,
+        expectedCoordinates: workspaceDeploymentMigrationCoordinates(input.policy),
+        workspaceDeploymentId: input.policy.workspaceDeploymentId,
+    });
+}
+function isContainedFilesystemPath(root, path) {
+    const fromRoot = (0, node_path_1.relative)(root, path);
+    return (fromRoot === '' ||
+        (!fromRoot.startsWith(`..${node_path_1.sep}`) &&
+            fromRoot !== '..' &&
+            !(0, node_path_1.isAbsolute)(fromRoot)));
+}
+function repositoryPolicyWorkspaceRoot(workspaceRoot) {
     try {
-        contents = (0, node_fs_1.readFileSync)(path, 'utf8');
+        const root = (0, node_fs_1.realpathSync)(workspaceRoot);
+        if (!(0, node_fs_1.lstatSync)(root).isDirectory()) {
+            throw new Error('workspace root is not a directory');
+        }
+        return root;
     }
     catch (error) {
-        throw new Error(`Repository Operating Policy is required at ${path}: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`Repository Operating Policy workspace root is unavailable at ${workspaceRoot}: ${error instanceof Error ? error.message : String(error)}`);
     }
-    return parseRepositoryOperatingPolicy(contents, path);
 }
-function createIncubationRepositoryPolicy(deploymentProfile = 'starter') {
+function readBoundedContainedRepositoryFile(input) {
+    const segments = input.relativePath.split('/');
+    if (input.relativePath.length === 0 ||
+        input.relativePath.includes('\0') ||
+        input.relativePath.includes('\\') ||
+        (0, node_path_1.isAbsolute)(input.relativePath) ||
+        segments.some((segment) => segment === '' || segment === '.' || segment === '..')) {
+        throw new Error(`${input.label} path escaped the workspace: ${input.relativePath}`);
+    }
+    const path = (0, node_path_1.resolve)(input.workspaceRoot, ...segments);
+    if (!isContainedFilesystemPath(input.workspaceRoot, path)) {
+        throw new Error(`${input.label} path escaped the workspace: ${path}`);
+    }
+    let descriptor;
+    try {
+        const pathMetadata = (0, node_fs_1.lstatSync)(path);
+        if (pathMetadata.isSymbolicLink() || !pathMetadata.isFile()) {
+            throw new Error('path is not one regular non-symlink file');
+        }
+        const resolvedPath = (0, node_fs_1.realpathSync)(path);
+        if (!isContainedFilesystemPath(input.workspaceRoot, resolvedPath)) {
+            throw new Error(`${input.label} path escaped the workspace through a parent path`);
+        }
+        descriptor = (0, node_fs_1.openSync)(path, node_fs_1.constants.O_RDONLY | (node_fs_1.constants.O_NOFOLLOW ?? 0));
+        const metadata = (0, node_fs_1.fstatSync)(descriptor);
+        if (!metadata.isFile() ||
+            metadata.dev !== pathMetadata.dev ||
+            metadata.ino !== pathMetadata.ino) {
+            throw new Error('path changed before it could be read safely');
+        }
+        if (metadata.size > input.maximumBytes) {
+            throw new Error(`file exceeds ${input.maximumDescription}`);
+        }
+        const capacity = Math.min(input.maximumBytes + 1, metadata.size + 1);
+        const buffer = node_buffer_1.Buffer.alloc(capacity);
+        let offset = 0;
+        while (offset < buffer.byteLength) {
+            const count = (0, node_fs_1.readSync)(descriptor, buffer, offset, buffer.byteLength - offset, null);
+            if (count === 0)
+                break;
+            offset += count;
+        }
+        const finalMetadata = (0, node_fs_1.fstatSync)(descriptor);
+        if (offset !== metadata.size ||
+            finalMetadata.size !== metadata.size ||
+            finalMetadata.mtimeMs !== metadata.mtimeMs ||
+            finalMetadata.ctimeMs !== metadata.ctimeMs) {
+            throw new Error('file changed while it was read or exceeded its fixed byte bound');
+        }
+        const finalPathMetadata = (0, node_fs_1.lstatSync)(path);
+        const finalResolvedPath = (0, node_fs_1.realpathSync)(path);
+        if (finalPathMetadata.isSymbolicLink() ||
+            !finalPathMetadata.isFile() ||
+            finalPathMetadata.dev !== metadata.dev ||
+            finalPathMetadata.ino !== metadata.ino ||
+            !isContainedFilesystemPath(input.workspaceRoot, finalResolvedPath)) {
+            throw new Error('path changed after it was read safely');
+        }
+        return {
+            contents: buffer.subarray(0, offset).toString('utf8'),
+            path: finalResolvedPath,
+        };
+    }
+    catch (error) {
+        throw new Error(`${input.label} is required as a bounded contained regular non-symlink file at ${path}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    finally {
+        if (descriptor !== undefined)
+            (0, node_fs_1.closeSync)(descriptor);
+    }
+}
+function readRepositoryOperatingPolicy(workspaceRoot) {
+    const workspace = repositoryPolicyWorkspaceRoot(workspaceRoot);
+    const policySource = readBoundedContainedRepositoryFile({
+        label: 'Repository Operating Policy',
+        maximumBytes: MAX_REPOSITORY_POLICY_BYTES,
+        maximumDescription: 'its 1 MiB control-file bound',
+        relativePath: exports.REPOSITORY_POLICY_FILE,
+        workspaceRoot: workspace,
+    });
+    const policy = parseRepositoryOperatingPolicy(policySource.contents, policySource.path);
+    if (policy.workspaceDeploymentProvenance.kind === 'migrated') {
+        const evidenceSource = readBoundedContainedRepositoryFile({
+            label: 'Workspace deployment migration evidence',
+            maximumBytes: MAX_WORKSPACE_DEPLOYMENT_MIGRATION_EVIDENCE_BYTES,
+            maximumDescription: 'the 128 KiB retention bound',
+            relativePath: policy.workspaceDeploymentProvenance.evidencePath,
+            workspaceRoot: workspace,
+        });
+        validateRepositoryOperatingPolicyMigrationProvenance({
+            evidenceBytes: evidenceSource.contents,
+            evidenceSource: evidenceSource.path,
+            policy,
+        });
+    }
+    return policy;
+}
+function createIncubationRepositoryPolicy(deploymentProfile = 'starter', workspaceDeploymentId = (0, identity_js_1.createWorkspaceDeploymentId)()) {
     return {
         $schema: exports.REPOSITORY_POLICY_SCHEMA_URL,
         deploymentAccounts: {
@@ -317,6 +571,8 @@ function createIncubationRepositoryPolicy(deploymentProfile = 'starter') {
         },
         schemaVersion: exports.REPOSITORY_POLICY_SCHEMA_VERSION,
         slices: {},
+        workspaceDeploymentId,
+        workspaceDeploymentProvenance: { kind: 'fresh', schemaVersion: 1 },
     };
 }
 function applyRepositoryPolicyChange(current, change) {
@@ -340,6 +596,9 @@ function applyRepositoryPolicyChange(current, change) {
     }
     if (change.deploymentProfile !== undefined) {
         next.deploymentProfile = change.deploymentProfile;
+        if (change.deploymentProfile === 'starter') {
+            next.deploymentAccounts.staging = null;
+        }
     }
     if (change.deploymentAccounts !== undefined) {
         next.deploymentAccounts = {
@@ -379,6 +638,12 @@ function evaluateRepositoryPolicyRequest(policy, request) {
         }
         projectNames.add(project.name);
     }
+    if ((request.stage === 'development' ||
+        request.stage === 'staging' ||
+        request.stage === 'production') &&
+        !isActiveDeploymentStage(policy.deploymentProfile, request.stage)) {
+        reasons.push(`Stage ${request.stage} is inactive for the ${policy.deploymentProfile} deployment profile.`);
+    }
     if (request.stage !== 'production') {
         return { allowed: reasons.length === 0, reasons };
     }

package/src/repository-policy/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../../packages/nx/src/repository-policy/policy.ts"],"names":[],"mappings":";;;AA0DA,oEAcC;AAED,4DAQC;AAED,8EAgCC;AAED,kFAkBC;AAED,gEAUC;AAoGD,8EA4KC;AAED,oEAIC;AAYD,wEAmBC;AAED,sEAaC;AAED,4EAuBC;AAED,kEAyDC;AAED,0EA+CC;AAED,sEAYC;AA3mBD,qCAAuC;AACvC,yCAAiC;AACjC,oDAK0B;AAEb,QAAA,sBAAsB,GAAG,4BAAqC,CAAC;AAC/D,QAAA,gCAAgC,GAAG,CAAU,CAAC;AAC9C,QAAA,4BAA4B,GACvC,yEAAkF,CAAC;AAExE,QAAA,wBAAwB,GAAG,CAAC,UAAU,EAAE,YAAY,CAAU,CAAC;AAC/D,QAAA,yBAAyB,GAAG;IACvC,cAAc;IACd,sBAAsB;CACd,CAAC;AACE,QAAA,8BAA8B,GAAG;IAC5C,gBAAgB;IAChB,UAAU;CACF,CAAC;AACE,QAAA,8CAA8C,GACzD,UAAmB,CAAC;AACT,QAAA,yBAAyB,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AACnE,QAAA,uBAAuB,GAAG;IACrC,YAAY;IACZ,uBAAuB;IACvB,aAAa;CACL,CAAC;AACE,QAAA,mBAAmB,GAAG;IACjC,SAAS;IACT,qBAAqB;IACrB,gBAAgB;CACR,CAAC;AAuBX,SAAgB,4BAA4B,CAC1C,KAAsB,EACtB,KAAa;IAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,KAAK,IAAI,eAAe;QACxB,KAAK,IAAI,eAAe,EACxB,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC;AACxE,CAAC;AAED,SAAgB,wBAAwB,CACtC,OAA0B,EAC1B,KAA+B;IAE/B,OAAO,CACL,KAAK,KAAK,YAAY;QACtB,CAAC,OAAO,KAAK,gBAAgB,IAAI,KAAK,KAAK,SAAS,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,SAAgB,iCAAiC,CAC/C,OAA0B,EAC1B,QAAmC;IAEnC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,4CAA4C,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,sGAAsG,CACvG,CAAC;IACJ,CAAC;IACD,IACE,OAAO,KAAK,qBAAqB;QACjC,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,OAAO;YACxC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,iIAAiI,CAClI,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,gBAAgB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;AACzB,CAAC;AAED,SAAgB,mCAAmC,CACjD,OAA0B,EAC1B,QAAsC;IAEtC,IACE,QAAQ,CAAC,WAAW,KAAK,IAAI;QAC7B,QAAQ,CAAC,OAAO,KAAK,IAAI;QACzB,QAAQ,CAAC,UAAU,KAAK,IAAI,EAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oIAAoI,CACrI,CAAC;IACJ,CAAC;IACD,OAAO,iCAAiC,CAAC,OAAO,EAAE;QAChD,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,0BAA0B,CAAC,MAAqB;IAC9D,IACE,MAAM,KAAK,IAAI;QACf,CAAC,2CAA2C,CAAC,IAAI,CAAC,MAAM,CAAC,EACzD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAsDD,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAClD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,SAAS;IACT,oBAAoB;IACpB,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,sBAAsB;IACtB,eAAe;IACf,QAAQ;CACT,CAAC,CAAC;AACH,MAAM,0BAA0B,GAAG;IACjC,oBAAoB;IACpB,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,sBAAsB;IACtB,eAAe;IACf,QAAQ;CACA,CAAC;AAEX,SAAS,uBAAuB,CAC9B,KAA8B,EAC9B,OAA4B,EAC5B,IAAY,EACZ,MAAyB;IAEzB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,4BAA4B;gBACrC,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,KAAc,EACd,MAAoB;IAEpB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAU,CAAC,CAAC;AAClE,CAAC;AAED,SAAgB,iCAAiC,CAC/C,KAAc;IAEd,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC1D,KAAK,EAAE,KAAK;SACb,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,uBAAuB,CAAC,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEpE,IAAI,KAAK,CAAC,aAAa,KAAK,wCAAgC,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IACE,KAAK,CAAC,OAAO,KAAK,SAAS;QAC3B,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAClE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,4BAA4B;YACrC,IAAI,EAAE,gBAAgB;SACvB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,2BAAmB,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,cAAc,2BAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACvD,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IACE,KAAK,CAAC,gBAAgB,KAAK,IAAI;QAC/B,CAAC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;YACzC,CAAC,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,EAC5E,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,sCAAsC;YAC/C,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EACL,+EAA+E;YACjF,IAAI,EAAE,2BAA2B;SAClC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,uBAAuB,CACrB,KAAK,CAAC,kBAAkB,EACxB,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,EACjD,2BAA2B,EAC3B,MAAM,CACP,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAU,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAChD,IACE,OAAO,KAAK,IAAI;gBAChB,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAC1D,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,kDAAkD;oBAC3D,IAAI,EAAE,6BAA6B,KAAK,EAAE;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IACE,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,2BAAmB,CAAC;YACrD,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,KAAK,CAC5C,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,KAAK,QAAQ;gBACrD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAW,CAAC,CAC7D,EACD,CAAC;YACD,IAAI,CAAC;gBACH,iCAAiC,CAAC,KAAK,CAAC,iBAAiB,EAAE;oBACzD,WAAW,EAAE,KAAK,CAAC,kBAAkB,CAAC,WAAqB;oBAC3D,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,UAAoB;oBACzD,OAAO,EAAE,KAAK,CAAC,kBAAkB,CAAC,OAAiB;iBACpD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,IAAI,EAAE,2BAA2B;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,gCAAwB,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,cAAc,gCAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAC9D,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EACL,8EAA8E;YAChF,IAAI,EAAE,2BAA2B;SAClC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,uBAAuB,CACrB,KAAK,CAAC,kBAAkB,EACxB,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EACjB,2BAA2B,EAC3B,MAAM,CACP,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,iCAAyB,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,cAAc,iCAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC/D,IAAI,EAAE,gCAAgC;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,4CAA4C;YACrD,IAAI,EAAE,6BAA6B;SACpC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,uBAAuB,CACrB,KAAK,CAAC,oBAAoB,EAC1B,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EACpB,6BAA6B,EAC7B,MAAM,CACP,CAAC;QACF,IACE,CAAC,OAAO,CACN,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAClC,sCAA8B,CAC/B,EACD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,cAAc,sCAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBACpE,IAAI,EAAE,qCAAqC;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,iBAAiB,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,uDAAuD;oBAChE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,uBAAuB,CACrB,KAAK,EACL,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,EAC7B,IAAI,EACJ,MAAM,CACP,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,iCAAyB,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,cAAc,iCAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAC7D,IAAI,EAAE,GAAG,IAAI,mBAAmB;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAA,gCAAgB,EAA4B,KAAK,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,4BAA4B,CAC1C,MAAsC;IAEtC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc;IACnD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,CAC/C,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CACrE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,OAAO,gDAAgD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,wqBAAwqB,CAAC;AACpvB,CAAC;AAED,SAAgB,8BAA8B,CAC5C,QAAgB,EAChB,SAAiB,8BAAsB;IAEvC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxH,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,iBAAiB,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,6BAA6B,CAAC,KAAK,CAAC,EAAE,CAC9I,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,SAAgB,6BAA6B,CAC3C,aAAqB;IAErB,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,8BAAsB,CAAC,CAAC;IACzD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAChH,CAAC;IACJ,CAAC;IACD,OAAO,8BAA8B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,SAAgB,gCAAgC,CAC9C,oBAAuC,SAAS;IAEhD,OAAO;QACL,OAAO,EAAE,oCAA4B;QACrC,kBAAkB,EAAE;YAClB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;SACd;QACD,iBAAiB;QACjB,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,UAAU;QAC5B,kBAAkB,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;QAC5C,oBAAoB,EAAE;YACpB,OAAO,EACL,iBAAiB,KAAK,SAAS;gBAC7B,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,sDAA8C;SACrD;QACD,aAAa,EAAE,wCAAgC;QAC/C,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC;AAED,SAAgB,2BAA2B,CACzC,OAAkC,EAClC,MAA8B;IAE9B,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC;QACnC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,KAAK,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC;QACrC,IAAI,CAAC,oBAAoB,GAAG,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5D,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAC3C,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC;QACrC,IAAI,CAAC,oBAAoB,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,CAAC,kBAAkB,GAAG;YACxB,GAAG,IAAI,CAAC,kBAAkB;YAC1B,GAAG,MAAM,CAAC,kBAAkB;SAC7B,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QAChD,IAAI,CAAC,kBAAkB,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,sBAAsB,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,2BAA2B,KAAK,SAAS,EAAE,CAAC;QACrD,IAAI,CAAC,oBAAoB,GAAG;YAC1B,OAAO,EAAE,MAAM,CAAC,2BAA2B;SAC5C,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,sBAAsB,KAAK,oDAAoD,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,MAAM,GAAG,iCAAiC,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,mDAAmD,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,SAAgB,+BAA+B,CAC7C,MAAiC,EACjC,OAAgC;IAEhC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,IAAI,8BAA8B,CAAC,CAAC;QACtE,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC7D,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,cAAc,GAClB,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC;IAC7D,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,gBAAgB,KAAK,YAAY,EAAE,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC;IAEpD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,gBAAgB,IAAI,SAAS,CAAC;YAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CACV,iBAAiB,OAAO,CAAC,IAAI,wCAAwC,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QAC7B,0BAA0B,EAAE,OAAO;QACnC,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,6BAA6B,CAC3C,aAAqB,EACrB,OAAgC;IAEhC,MAAM,MAAM,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,+BAA+B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,wCAAwC,OAAO,CAAC,MAAM,QAAQ,OAAO,CAAC,KAAK,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9I,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../../packages/nx/src/repository-policy/policy.ts"],"names":[],"mappings":";;;AAqFA,oEAcC;AAED,4DASC;AAED,wDAIC;AAED,0DAOC;AAED,4DAIC;AAED,8EA6CC;AAED,kFAmBC;AAED,kFAkBC;AAED,gEAWC;AAoHD,8EA8PC;AAED,oEAIC;AAYD,wEAmBC;AAqBD,oHAkCC;AAoID,sEA8BC;AAED,4EA0BC;AAED,kEA4DC;AAED,0EA0DC;AAED,sEAYC;AA5/BD,6CAAyC;AACzC,6CAAqC;AACrC,qCAQiB;AACjB,yCAA+D;AAC/D,oDAK0B;AAC1B,qEAG6C;AAC7C,yFAA6G;AAEhG,QAAA,sBAAsB,GAAG,4BAAqC,CAAC;AAC/D,QAAA,gCAAgC,GAAG,CAAU,CAAC;AAC3D,MAAM,2BAA2B,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,iDAAiD,GAAG,GAAG,GAAG,IAAI,CAAC;AACrE,MAAM,gCAAgC,GACpC,0CAA0C,CAAC;AAChC,QAAA,4BAA4B,GACvC,yEAAkF,CAAC;AAExE,QAAA,wBAAwB,GAAG,CAAC,UAAU,EAAE,YAAY,CAAU,CAAC;AAC/D,QAAA,yBAAyB,GAAG;IACvC,cAAc;IACd,sBAAsB;CACd,CAAC;AACE,QAAA,8BAA8B,GAAG;IAC5C,gBAAgB;IAChB,UAAU;CACF,CAAC;AACE,QAAA,8CAA8C,GACzD,UAAmB,CAAC;AACT,QAAA,yBAAyB,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AACnE,QAAA,uBAAuB,GAAG;IACrC,YAAY;IACZ,uBAAuB;IACvB,aAAa;CACL,CAAC;AACE,QAAA,mBAAmB,GAAG;IACjC,SAAS;IACT,qBAAqB;IACrB,gBAAgB;CACR,CAAC;AAWX,MAAM,4BAA4B,GAAG;IACnC,OAAO,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC;IACtC,qBAAqB,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC;IAC/D,gBAAgB,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC;CAG3D,CAAC;AAcF,SAAgB,4BAA4B,CAC1C,KAAsB,EACtB,KAAa;IAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,KAAK,IAAI,eAAe;QACxB,KAAK,IAAI,eAAe,EACxB,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4CAA4C,CAAC,CAAC;AACxE,CAAC;AAED,SAAgB,wBAAwB,CACtC,OAA0B,EAC1B,KAA+B;IAE/B,OAAO,CACL,CAAC,OAAO,KAAK,qBAAqB,IAAI,KAAK,KAAK,YAAY,CAAC;QAC7D,CAAC,OAAO,KAAK,gBAAgB,IAAI,KAAK,KAAK,SAAS,CAAC;QACrD,CAAC,OAAO,KAAK,gBAAgB,IAAI,KAAK,KAAK,YAAY,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAgB,sBAAsB,CACpC,OAA0B;IAE1B,OAAO,4BAA4B,CAAC,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,uBAAuB,CACrC,OAA0B,EAC1B,KAAa;IAEb,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAC7C,KAAiC,CAClC,CAAC;AACJ,CAAC;AAED,SAAgB,wBAAwB,CACtC,OAA0B;IAE1B,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,SAAgB,iCAAiC,CAC/C,OAA0B,EAC1B,QAAmC;IAEnC,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,YAAY,CAAU,EAAE,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,4CAA4C,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,IACE,OAAO,KAAK,qBAAqB;QACjC,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,OAAO;YACxC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,iIAAiI,CAClI,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,gBAAgB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;AACzB,CAAC;AAED,SAAgB,mCAAmC,CACjD,OAA0B,EAC1B,QAAsC;IAEtC,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,0HAA0H,CAC3H,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,iCAAiC,CAAC,OAAO,EAAE;QAChD,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,mCAAmC,CACjD,OAA0B,EAC1B,QAAsC,EACtC,KAA+B;IAE/B,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,oBAAoB,KAAK,wBAAwB,OAAO,sBAAsB,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,mCAAmC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,uCAAuC,KAAK,qBAAqB,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,0BAA0B,CAAC,MAAqB;IAC9D,IACE,MAAM,KAAK,IAAI;QACf,CAAC,2CAA2C,CAAC,IAAI,CAAC,MAAM,CAAC;QACzD,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8JAA8J,CAC/J,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAkED,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAClD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,SAAS;IACT,oBAAoB;IACpB,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,sBAAsB;IACtB,eAAe;IACf,QAAQ;IACR,uBAAuB;IACvB,+BAA+B;CAChC,CAAC,CAAC;AACH,MAAM,0BAA0B,GAAG;IACjC,oBAAoB;IACpB,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,sBAAsB;IACtB,eAAe;IACf,QAAQ;IACR,uBAAuB;IACvB,+BAA+B;CACvB,CAAC;AAEX,SAAS,uBAAuB,CAC9B,KAA8B,EAC9B,OAA4B,EAC5B,IAAY,EACZ,MAAyB;IAEzB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,4BAA4B;gBACrC,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,KAAc,EACd,MAAoB;IAEpB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAU,CAAC,CAAC;AAClE,CAAC;AAED,SAAgB,iCAAiC,CAC/C,KAAc;IAEd,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC1D,KAAK,EAAE,KAAK;SACb,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,uBAAuB,CAAC,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEpE,IAAI,KAAK,CAAC,aAAa,KAAK,wCAAgC,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IACE,KAAK,CAAC,OAAO,KAAK,SAAS;QAC3B,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAClE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,4BAA4B;YACrC,IAAI,EAAE,gBAAgB;SACvB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,iDAAiD;YAC1D,IAAI,EAAE,sCAAsC;SAC7C,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,KAAK,CAAC,6BAA6B,CAAC;QACvD,MAAM,cAAc,GAAG,sCAAsC,CAAC;QAC9D,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAChC,uBAAuB,CACrB,UAAU,EACV,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,EAClC,cAAc,EACd,MAAM,CACP,CAAC;YACF,IAAI,UAAU,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,cAAc;oBACvB,IAAI,EAAE,GAAG,cAAc,gBAAgB;iBACxC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC1C,uBAAuB,CACrB,UAAU,EACV,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,gBAAgB,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,EACpE,cAAc,EACd,MAAM,CACP,CAAC;YACF,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;YAC7C,MAAM,YAAY,GAChB,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,IACE,OAAO,YAAY,KAAK,QAAQ;gBAChC,CAAC,4CAA4C,CAAC,IAAI,CAAC,YAAY,CAAC;gBAChE,IAAA,sBAAU,EAAC,YAAY,CAAC;gBACxB,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC3B,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC3B,YAAY,CAAC,IAAI,CACf,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACnE,EACD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EACL,0EAA0E;oBAC5E,IAAI,EAAE,GAAG,cAAc,eAAe;iBACvC,CAAC,CAAC;YACL,CAAC;YACD,IACE,OAAO,UAAU,CAAC,cAAc,KAAK,QAAQ;gBAC7C,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAClD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,sCAAsC;oBAC/C,IAAI,EAAE,GAAG,cAAc,iBAAiB;iBACzC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,UAAU,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,cAAc;oBACvB,IAAI,EAAE,GAAG,cAAc,gBAAgB;iBACxC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,mCAAmC;gBAC5C,IAAI,EAAE,GAAG,cAAc,OAAO;aAC/B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IACE,OAAO,KAAK,CAAC,qBAAqB,KAAK,QAAQ;QAC/C,CAAC,6CAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAClE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EACL,+EAA+E;YACjF,IAAI,EAAE,8BAA8B;SACrC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,2BAAmB,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,cAAc,2BAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACvD,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IACE,KAAK,CAAC,gBAAgB,KAAK,IAAI;QAC/B,CAAC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;YACzC,CAAC,2CAA2C,CAAC,IAAI,CAC/C,KAAK,CAAC,gBAAgB,CACvB;YACD,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,EAChE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EACL,qEAAqE;YACvE,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EACL,+EAA+E;YACjF,IAAI,EAAE,2BAA2B;SAClC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,uBAAuB,CACrB,KAAK,CAAC,kBAAkB,EACxB,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,EACjD,2BAA2B,EAC3B,MAAM,CACP,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAU,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAChD,IACE,OAAO,KAAK,IAAI;gBAChB,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAC1D,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,kDAAkD;oBAC3D,IAAI,EAAE,6BAA6B,KAAK,EAAE;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IACE,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,2BAAmB,CAAC;YACrD,OAAO,KAAK,CAAC,kBAAkB,CAAC,WAAW,KAAK,QAAQ;YACxD,OAAO,KAAK,CAAC,kBAAkB,CAAC,UAAU,KAAK,QAAQ;YACvD,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,KAAK,IAAI;gBACxC,OAAO,KAAK,CAAC,kBAAkB,CAAC,OAAO,KAAK,QAAQ,CAAC,EACvD,CAAC;YACD,IAAI,CAAC;gBACH,iCAAiC,CAAC,KAAK,CAAC,iBAAiB,EAAE;oBACzD,WAAW,EAAE,KAAK,CAAC,kBAAkB,CAAC,WAAqB;oBAC3D,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,UAAoB;oBACzD,OAAO,EAAE,KAAK,CAAC,kBAAkB,CAAC,OAAwB;iBAC3D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/D,IAAI,EAAE,2BAA2B;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,gCAAwB,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,cAAc,gCAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAC9D,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EACL,8EAA8E;YAChF,IAAI,EAAE,2BAA2B;SAClC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,uBAAuB,CACrB,KAAK,CAAC,kBAAkB,EACxB,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EACjB,2BAA2B,EAC3B,MAAM,CACP,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,iCAAyB,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,cAAc,iCAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBAC/D,IAAI,EAAE,gCAAgC;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,4CAA4C;YACrD,IAAI,EAAE,6BAA6B;SACpC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,uBAAuB,CACrB,KAAK,CAAC,oBAAoB,EAC1B,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EACpB,6BAA6B,EAC7B,MAAM,CACP,CAAC;QACF,IACE,CAAC,OAAO,CACN,KAAK,CAAC,oBAAoB,CAAC,OAAO,EAClC,sCAA8B,CAC/B,EACD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,cAAc,sCAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBACpE,IAAI,EAAE,qCAAqC;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,iBAAiB,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,uDAAuD;oBAChE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,uBAAuB,CACrB,KAAK,EACL,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,EAC7B,IAAI,EACJ,MAAM,CACP,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,iCAAyB,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,cAAc,iCAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAC7D,IAAI,EAAE,GAAG,IAAI,mBAAmB;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAA,gCAAgB,EAA4B,KAAK,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,4BAA4B,CAC1C,MAAsC;IAEtC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc;IACnD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,CAC/C,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CACrE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,OAAO,gDAAgD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gzBAAgzB,CAAC;AAC53B,CAAC;AAED,SAAgB,8BAA8B,CAC5C,QAAgB,EAChB,SAAiB,8BAAsB;IAEvC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxH,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,iBAAiB,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,6BAA6B,CAAC,KAAK,CAAC,EAAE,CAC9I,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,SAAS,uCAAuC,CAC9C,MAAiC;IAMjC,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,mCAAmC,CAClD,MAAM,CAAC,iBAAiB,EACxB,MAAM,CAAC,kBAAkB,CAC1B,CAAC;IACF,OAAO,sBAAsB,CAAC,MAAM,CAAC,iBAAiB,CAAC;SACpD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;SACzE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACjE,CAAC;AACN,CAAC;AAED,SAAgB,oDAAoD,CAAC,KAIpE;IACC,IAAI,KAAK,CAAC,MAAM,CAAC,6BAA6B,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO;IAC3E,IAAI,oBAAM,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,8CAA8C,KAAK,CAAC,cAAc,uCAAuC,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACtC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC;SACnC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,IACE,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,6BAA6B,CAAC,cAAc,EAC1E,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8CAA8C,KAAK,CAAC,cAAc,gDAAgD,CACnH,CAAC;IACJ,CAAC;IACD,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAY,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,8CAA8C,KAAK,CAAC,cAAc,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClJ,CAAC;IACJ,CAAC;IACD,IAAA,oEAA4C,EAAC;QAC3C,QAAQ;QACR,mBAAmB,EAAE,uCAAuC,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1E,qBAAqB,EAAE,KAAK,CAAC,MAAM,CAAC,qBAAqB;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY,EAAE,IAAY;IAC3D,MAAM,QAAQ,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;YAC/B,QAAQ,KAAK,IAAI;YACjB,CAAC,IAAA,sBAAU,EAAC,QAAQ,CAAC,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,aAAqB;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,aAAa,CAAC,CAAC;QACzC,IAAI,CAAC,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,gEAAgE,aAAa,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3I,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,kCAAkC,CAAC,KAM3C;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,IACE,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAC/B,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjC,IAAA,sBAAU,EAAC,KAAK,CAAC,YAAY,CAAC;QAC9B,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACnE,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,KAAK,gCAAgC,KAAK,CAAC,YAAY,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,aAAa,EAAE,GAAG,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,gCAAgC,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;QACrC,IAAI,YAAY,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,YAAY,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,KAAK,mDAAmD,CAClE,CAAC;QACJ,CAAC;QAED,UAAU,GAAG,IAAA,kBAAQ,EACnB,IAAI,EACJ,mBAAS,CAAC,QAAQ,GAAG,CAAC,mBAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CACjD,CAAC;QACF,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;QACvC,IACE,CAAC,QAAQ,CAAC,MAAM,EAAE;YAClB,QAAQ,CAAC,GAAG,KAAK,YAAY,CAAC,GAAG;YACjC,QAAQ,CAAC,GAAG,KAAK,YAAY,CAAC,GAAG,EACjC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,oBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,IAAA,kBAAQ,EACpB,UAAU,EACV,MAAM,EACN,MAAM,EACN,MAAM,CAAC,UAAU,GAAG,MAAM,EAC1B,IAAI,CACL,CAAC;YACF,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM;YACvB,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC;QACD,MAAM,aAAa,GAAG,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;QAC5C,IACE,MAAM,KAAK,QAAQ,CAAC,IAAI;YACxB,aAAa,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YACpC,aAAa,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YAC1C,aAAa,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAC1C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,iBAAiB,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;QAC7C,IACE,iBAAiB,CAAC,cAAc,EAAE;YAClC,CAAC,iBAAiB,CAAC,MAAM,EAAE;YAC3B,iBAAiB,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;YACtC,iBAAiB,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;YACtC,CAAC,yBAAyB,CAAC,KAAK,CAAC,aAAa,EAAE,iBAAiB,CAAC,EAClE,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACrD,IAAI,EAAE,iBAAiB;SACxB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,KAAK,mEAAmE,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnJ,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAgB,6BAA6B,CAC3C,aAAqB;IAErB,MAAM,SAAS,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,kCAAkC,CAAC;QACtD,KAAK,EAAE,6BAA6B;QACpC,YAAY,EAAE,2BAA2B;QACzC,kBAAkB,EAAE,8BAA8B;QAClD,YAAY,EAAE,8BAAsB;QACpC,aAAa,EAAE,SAAS;KACzB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,8BAA8B,CAC3C,YAAY,CAAC,QAAQ,EACrB,YAAY,CAAC,IAAI,CAClB,CAAC;IACF,IAAI,MAAM,CAAC,6BAA6B,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7D,MAAM,cAAc,GAAG,kCAAkC,CAAC;YACxD,KAAK,EAAE,yCAAyC;YAChD,YAAY,EAAE,iDAAiD;YAC/D,kBAAkB,EAAE,6BAA6B;YACjD,YAAY,EAAE,MAAM,CAAC,6BAA6B,CAAC,YAAY;YAC/D,aAAa,EAAE,SAAS;SACzB,CAAC,CAAC;QACH,oDAAoD,CAAC;YACnD,aAAa,EAAE,cAAc,CAAC,QAAQ;YACtC,cAAc,EAAE,cAAc,CAAC,IAAI;YACnC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,gCAAgC,CAC9C,oBAAuC,SAAS,EAChD,wBAAgC,IAAA,yCAA2B,GAAE;IAE7D,OAAO;QACL,OAAO,EAAE,oCAA4B;QACrC,kBAAkB,EAAE;YAClB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,IAAI;SACd;QACD,iBAAiB;QACjB,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,UAAU;QAC5B,kBAAkB,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;QAC5C,oBAAoB,EAAE;YACpB,OAAO,EACL,iBAAiB,KAAK,SAAS;gBAC7B,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,sDAA8C;SACrD;QACD,aAAa,EAAE,wCAAgC;QAC/C,MAAM,EAAE,EAAE;QACV,qBAAqB;QACrB,6BAA6B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE;KACnE,CAAC;AACJ,CAAC;AAED,SAAgB,2BAA2B,CACzC,OAAkC,EAClC,MAA8B;IAE9B,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC;QACnC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,KAAK,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC;QACrC,IAAI,CAAC,oBAAoB,GAAG,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5D,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAC3C,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC;QACrC,IAAI,CAAC,oBAAoB,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAClD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC3C,IAAI,CAAC,kBAAkB,CAAC,OAAO,GAAG,IAAI,CAAC;QACzC,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,CAAC,kBAAkB,GAAG;YACxB,GAAG,IAAI,CAAC,kBAAkB;YAC1B,GAAG,MAAM,CAAC,kBAAkB;SAC7B,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QAChD,IAAI,CAAC,kBAAkB,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,sBAAsB,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,2BAA2B,KAAK,SAAS,EAAE,CAAC;QACrD,IAAI,CAAC,oBAAoB,GAAG;YAC1B,OAAO,EAAE,MAAM,CAAC,2BAA2B;SAC5C,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,sBAAsB,KAAK,oDAAoD,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,MAAM,GAAG,iCAAiC,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,mDAAmD,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,SAAgB,+BAA+B,CAC7C,MAAiC,EACjC,OAAgC;IAEhC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,IAAI,8BAA8B,CAAC,CAAC;QACtE,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,IACE,CAAC,OAAO,CAAC,KAAK,KAAK,aAAa;QAC9B,OAAO,CAAC,KAAK,KAAK,SAAS;QAC3B,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC;QACjC,CAAC,uBAAuB,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,EACjE,CAAC;QACD,OAAO,CAAC,IAAI,CACV,SAAS,OAAO,CAAC,KAAK,wBAAwB,MAAM,CAAC,iBAAiB,sBAAsB,CAC7F,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC7D,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,cAAc,GAClB,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC;IAC7D,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,gBAAgB,KAAK,YAAY,EAAE,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC;IAEpD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,gBAAgB,IAAI,SAAS,CAAC;YAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CACV,iBAAiB,OAAO,CAAC,IAAI,wCAAwC,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QAC7B,0BAA0B,EAAE,OAAO;QACnC,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,6BAA6B,CAC3C,aAAqB,EACrB,OAAgC;IAEhC,MAAM,MAAM,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,+BAA+B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,wCAAwC,OAAO,CAAC,MAAM,QAAQ,OAAO,CAAC,KAAK,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9I,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/src/schemas/performance-policy-v1.json

@@ -249,7 +249,9 @@
         "productionExceptionalOnly"
       ],
       "properties": {
-        "allowedProtectedStages": { "const": ["staging"] },
+        "allowedProtectedStages": {
+          "oneOf": [{ "const": ["development"] }, { "const": ["staging"] }]
+        },
         "maximumConcurrency": { "$ref": "#/$defs/positiveInteger" },
         "maximumDurationSeconds": { "$ref": "#/$defs/positiveInteger" },
         "maximumEstimatedCostUsd": {

package/src/schemas/repository-policy-v1.json

@@ -12,7 +12,9 @@
     "productionAccess",
     "productionApproval",
     "productionFoundation",
-    "slices"
+    "slices",
+    "workspaceDeploymentId",
+    "workspaceDeploymentProvenance"
   ],
   "properties": {
     "$schema": { "type": "string", "minLength": 1 },
@@ -26,7 +28,7 @@
         { "type": "null" },
         {
           "type": "string",
-          "pattern": "^[a-z]{2}(-gov)?-[a-z]+(-[a-z]+)*-[0-9]$"
+          "pattern": "^(?!(us-iso-|us-isob-|eu-isoe-|us-isof-))[a-z]{2}(-gov)?-[a-z]+(-[a-z]+)*-[0-9]$"
         }
       ]
     },
@@ -95,6 +97,48 @@
           }
         }
       }
+    },
+    "workspaceDeploymentId": {
+      "type": "string",
+      "pattern": "^ebkws-[a-f0-9]{32}$",
+      "description": "Stable generated identity shared by clones of this workspace and bound to every active AWS stage tuple."
+    },
+    "workspaceDeploymentProvenance": {
+      "oneOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "schemaVersion"],
+          "properties": {
+            "kind": { "const": "fresh" },
+            "schemaVersion": { "const": 1 }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "evidencePath",
+            "evidenceSha256",
+            "kind",
+            "schemaVersion"
+          ],
+          "properties": {
+            "evidencePath": {
+              "type": "string",
+              "pattern": "^docs/adoption/[A-Za-z0-9._/-]+[.]json$",
+              "not": { "pattern": "/(?:[.]|[.][.])(?:/|$)|//" }
+            },
+            "evidenceSha256": {
+              "type": "string",
+              "pattern": "^[a-f0-9]{64}$"
+            },
+            "kind": { "const": "migrated" },
+            "schemaVersion": { "const": 1 }
+          }
+        }
+      ],
+      "description": "Required origin declaration. Migrated identities retain an exact version-controlled occupancy-evidence binding."
     }
   }
 }