@flanksource/clicky-ui 0.3.44 → 0.3.45

package/dist/lib/permission-strategies.cjs

@@ -41,18 +41,77 @@ const STRATEGY_PRESETS = [
   }
 ];
 const MATCH_FIELD_OPTIONS = [
-  { value: "name", label: "Tool name" },
-  { value: "group", label: "Group" },
-  { value: "parent", label: "Parent" },
-  { value: "entity", label: "Entity" },
-  { value: "action", label: "Action" },
-  { value: "verb", label: "Verb" },
-  { value: "method", label: "HTTP method" },
-  { value: "scope", label: "Scope" },
-  { value: "readOnly", label: "Read only" },
-  { value: "destructive", label: "Destructive" },
-  { value: "idempotent", label: "Idempotent" }
+  {
+    value: "name",
+    label: "Tool name",
+    description: "The operation's unique id, e.g. todo_create."
+  },
+  {
+    value: "group",
+    label: "Group",
+    description: "The permission category a tool is filed under."
+  },
+  {
+    value: "parent",
+    label: "Parent",
+    description: "The surface a tool belongs to, e.g. Contacts."
+  },
+  {
+    value: "entity",
+    label: "Entity",
+    description: "The resource type the operation acts on."
+  },
+  {
+    value: "action",
+    label: "Action",
+    description: "The operation's action name within its entity."
+  },
+  {
+    value: "verb",
+    label: "Verb",
+    description: "What the operation does: get, list, create, delete…"
+  },
+  {
+    value: "method",
+    label: "HTTP method",
+    description: "GET, POST, PATCH or DELETE for HTTP-backed tools."
+  },
+  {
+    value: "scope",
+    label: "Scope",
+    description: "Whether it acts on one item or a whole collection."
+  },
+  {
+    value: "readOnly",
+    label: "Read only",
+    description: "Tools that declare they never change anything."
+  },
+  {
+    value: "destructive",
+    label: "Destructive",
+    description: "Tools that declare they may delete or overwrite data."
+  },
+  {
+    value: "idempotent",
+    label: "Idempotent",
+    description: "Tools that declare repeating a call is safe."
+  }
 ];
+function strategySummary(rule) {
+  const preset = strategyPreset(rule);
+  if (preset !== "custom") {
+    return STRATEGY_PRESETS.find((option) => option.value === preset).label;
+  }
+  return activeMatchFields(rule).map((field) => {
+    var _a;
+    const label = ((_a = MATCH_FIELD_OPTIONS.find((option) => option.value === field)) == null ? void 0 : _a.label) ?? field;
+    if (isHintField(field)) {
+      return `${label} is ${rule[field] ? "Yes" : "No"}`;
+    }
+    const values = patternValues(rule[field]);
+    return `${label} ${values.length > 1 ? "in" : "is"} ${values.join(", ")}`;
+  }).join(" · ");
+}
 function strategyPreset(rule) {
   const fields = activeMatchFields(rule);
   if (fields.length !== 1) return "custom";
@@ -149,6 +208,7 @@ exports.patternsText = patternsText;
 exports.removeCondition = removeCondition;
 exports.replaceMatchField = replaceMatchField;
 exports.strategyPreset = strategyPreset;
+exports.strategySummary = strategySummary;
 exports.toolFieldSuggestions = toolFieldSuggestions;
 exports.updateCondition = updateCondition;
 exports.updatePatternCondition = updatePatternCondition;

package/dist/lib/permission-strategies.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"permission-strategies.cjs","sources":["../../src/lib/permission-strategies.ts"],"sourcesContent":["import {\n  matchesTool,\n  type MatchPatterns,\n  type PermissionRule,\n} from \"../data/chat/tool-policy\";\nimport type { ToolMeta } from \"../data/chat/types\";\n\nexport const PATTERN_FIELDS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\nexport const HINT_FIELDS = [\"readOnly\", \"destructive\", \"idempotent\"] as const;\nexport const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS] as const;\n\nexport type MatchField = (typeof MATCH_FIELDS)[number];\nexport type StrategyPreset =\n  | \"all\"\n  | \"read-only\"\n  | \"destructive\"\n  | \"idempotent\"\n  | \"custom\";\n\nexport const STRATEGY_PRESETS: Array<{\n  value: StrategyPreset;\n  label: string;\n  description: string;\n}> = [\n  {\n    value: \"all\",\n    label: \"All tools\",\n    description: \"Match every tool in the catalog.\",\n  },\n  {\n    value: \"read-only\",\n    label: \"Read-only tools\",\n    description: \"Match tools explicitly marked read-only.\",\n  },\n  {\n    value: \"destructive\",\n    label: \"Destructive tools\",\n    description: \"Match tools explicitly marked destructive.\",\n  },\n  {\n    value: \"idempotent\",\n    label: \"Idempotent tools\",\n    description: \"Match tools safe to repeat.\",\n  },\n  {\n    value: \"custom\",\n    label: \"Custom conditions\",\n    description: \"Combine tool metadata and safety annotations.\",\n  },\n];\n\nexport const MATCH_FIELD_OPTIONS: Array<{ value: MatchField; label: string }> =\n  [\n    { value: \"name\", label: \"Tool name\" },\n    { value: \"group\", label: \"Group\" },\n    { value: \"parent\", label: \"Parent\" },\n    { value: \"entity\", label: \"Entity\" },\n    { value: \"action\", label: \"Action\" },\n    { value: \"verb\", label: \"Verb\" },\n    { value: \"method\", label: \"HTTP method\" },\n    { value: \"scope\", label: \"Scope\" },\n    { value: \"readOnly\", label: \"Read only\" },\n    { value: \"destructive\", label: \"Destructive\" },\n    { value: \"idempotent\", label: \"Idempotent\" },\n  ];\n\nexport function strategyPreset(rule: PermissionRule): StrategyPreset {\n  const fields = activeMatchFields(rule);\n  if (fields.length !== 1) return \"custom\";\n  if (fields[0] === \"name\" && patternsText(rule.name) === \"*\") return \"all\";\n  if (fields[0] === \"readOnly\" && rule.readOnly === true) return \"read-only\";\n  if (fields[0] === \"destructive\" && rule.destructive === true) {\n    return \"destructive\";\n  }\n  if (fields[0] === \"idempotent\" && rule.idempotent === true) {\n    return \"idempotent\";\n  }\n  return \"custom\";\n}\n\nexport function applyStrategyPreset(\n  rule: PermissionRule,\n  preset: Exclude<StrategyPreset, \"custom\">,\n): PermissionRule {\n  if (preset === \"all\") return { name: \"*\", policy: rule.policy };\n  if (preset === \"read-only\") return { readOnly: true, policy: rule.policy };\n  if (preset === \"destructive\")\n    return { destructive: true, policy: rule.policy };\n  return { idempotent: true, policy: rule.policy };\n}\n\nexport function activeMatchFields(rule: PermissionRule): MatchField[] {\n  return MATCH_FIELDS.filter((field) => rule[field] !== undefined);\n}\n\nexport function patternsText(value: MatchPatterns | undefined): string {\n  return typeof value === \"string\" ? value : (value ?? []).join(\", \");\n}\n\nexport function patternValues(value: MatchPatterns | undefined): string[] {\n  return typeof value === \"string\" ? (value ? [value] : []) : (value ?? []);\n}\n\nexport function updatePatternCondition({\n  rule,\n  field,\n  value,\n}: {\n  rule: PermissionRule;\n  field: (typeof PATTERN_FIELDS)[number];\n  value: MatchPatterns;\n}): PermissionRule {\n  return { ...rule, [field]: value };\n}\n\nexport function conditionText(rule: PermissionRule, field: MatchField): string {\n  if (isHintField(field)) return String(rule[field]);\n  return patternsText(rule[field]);\n}\n\nexport function replaceMatchField(\n  rule: PermissionRule,\n  current: MatchField,\n  next: MatchField,\n): PermissionRule {\n  if (current === next) return rule;\n  const match = { ...rule } as Record<string, unknown>;\n  const previous = match[current];\n  delete match[current];\n  match[next] = isHintField(next)\n    ? typeof previous === \"boolean\"\n      ? previous\n      : true\n    : typeof previous === \"string\" || Array.isArray(previous)\n      ? previous\n      : \"*\";\n  return match as PermissionRule;\n}\n\nexport function updateCondition(\n  rule: PermissionRule,\n  field: MatchField,\n  value: string,\n): PermissionRule {\n  if (isHintField(field)) return { ...rule, [field]: value === \"true\" };\n  const patterns = value\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter(Boolean);\n  return {\n    ...rule,\n    [field]: patterns.length <= 1 ? (patterns[0] ?? \"\") : patterns,\n  };\n}\n\nexport function removeCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  const next = { ...rule } as Record<string, unknown>;\n  delete next[field];\n  if (activeMatchFields(next as PermissionRule).length === 0) next.name = \"*\";\n  return next as PermissionRule;\n}\n\nexport function addCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  if (rule[field] !== undefined) return rule;\n  return { ...rule, [field]: isHintField(field) ? true : \"*\" };\n}\n\nexport function isHintField(\n  field: MatchField,\n): field is (typeof HINT_FIELDS)[number] {\n  return (HINT_FIELDS as readonly MatchField[]).includes(field);\n}\n\nexport function matchingTools(rule: PermissionRule, tools: ToolMeta[]) {\n  return tools.filter((tool) => matchesTool(rule, tool));\n}\n\nexport function toolFieldSuggestions(\n  tools: ToolMeta[],\n  field: Exclude<MatchField, (typeof HINT_FIELDS)[number]>,\n) {\n  const values = new Set<string>();\n  for (const tool of tools) {\n    const value = tool[field === \"name\" ? \"name\" : field];\n    if (typeof value === \"string\" && value.trim()) values.add(value);\n  }\n  return Array.from(values).sort((left, right) => left.localeCompare(right));\n}\n"],"names":["matchesTool"],"mappings":";;;AAOO,MAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,cAAc,CAAC,YAAY,eAAe,YAAY;AAC5D,MAAM,eAAe,CAAC,GAAG,gBAAgB,GAAG,WAAW;AAUvD,MAAM,mBAIR;AAAA,EACH;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAEjB;AAEO,MAAM,sBACX;AAAA,EACE,EAAE,OAAO,QAAQ,OAAO,YAAA;AAAA,EACxB,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,QAAQ,OAAO,OAAA;AAAA,EACxB,EAAE,OAAO,UAAU,OAAO,cAAA;AAAA,EAC1B,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,YAAY,OAAO,YAAA;AAAA,EAC5B,EAAE,OAAO,eAAe,OAAO,cAAA;AAAA,EAC/B,EAAE,OAAO,cAAc,OAAO,aAAA;AAChC;AAEK,SAAS,eAAe,MAAsC;AACnE,QAAM,SAAS,kBAAkB,IAAI;AACrC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,MAAI,OAAO,CAAC,MAAM,UAAU,aAAa,KAAK,IAAI,MAAM,IAAK,QAAO;AACpE,MAAI,OAAO,CAAC,MAAM,cAAc,KAAK,aAAa,KAAM,QAAO;AAC/D,MAAI,OAAO,CAAC,MAAM,iBAAiB,KAAK,gBAAgB,MAAM;AAC5D,WAAO;AAAA,EACT;AACA,MAAI,OAAO,CAAC,MAAM,gBAAgB,KAAK,eAAe,MAAM;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,oBACd,MACA,QACgB;AAChB,MAAI,WAAW,MAAO,QAAO,EAAE,MAAM,KAAK,QAAQ,KAAK,OAAA;AACvD,MAAI,WAAW,YAAa,QAAO,EAAE,UAAU,MAAM,QAAQ,KAAK,OAAA;AAClE,MAAI,WAAW;AACb,WAAO,EAAE,aAAa,MAAM,QAAQ,KAAK,OAAA;AAC3C,SAAO,EAAE,YAAY,MAAM,QAAQ,KAAK,OAAA;AAC1C;AAEO,SAAS,kBAAkB,MAAoC;AACpE,SAAO,aAAa,OAAO,CAAC,UAAU,KAAK,KAAK,MAAM,MAAS;AACjE;AAEO,SAAS,aAAa,OAA0C;AACrE,SAAO,OAAO,UAAU,WAAW,SAAS,SAAS,CAAA,GAAI,KAAK,IAAI;AACpE;AAEO,SAAS,cAAc,OAA4C;AACxE,SAAO,OAAO,UAAU,WAAY,QAAQ,CAAC,KAAK,IAAI,CAAA,IAAO,SAAS,CAAA;AACxE;AAEO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AACF,GAImB;AACjB,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,MAAA;AAC7B;AAEO,SAAS,cAAc,MAAsB,OAA2B;AAC7E,MAAI,YAAY,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC;AACjD,SAAO,aAAa,KAAK,KAAK,CAAC;AACjC;AAEO,SAAS,kBACd,MACA,SACA,MACgB;AAChB,MAAI,YAAY,KAAM,QAAO;AAC7B,QAAM,QAAQ,EAAE,GAAG,KAAA;AACnB,QAAM,WAAW,MAAM,OAAO;AAC9B,SAAO,MAAM,OAAO;AACpB,QAAM,IAAI,IAAI,YAAY,IAAI,IAC1B,OAAO,aAAa,YAClB,WACA,OACF,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,IACpD,WACA;AACN,SAAO;AACT;AAEO,SAAS,gBACd,MACA,OACA,OACgB;AAChB,MAAI,YAAY,KAAK,EAAG,QAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,UAAU,OAAA;AAC7D,QAAM,WAAW,MACd,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAA,CAAM,EACzB,OAAO,OAAO;AACjB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,CAAC,KAAK,GAAG,SAAS,UAAU,IAAK,SAAS,CAAC,KAAK,KAAM;AAAA,EAAA;AAE1D;AAEO,SAAS,gBACd,MACA,OACgB;AAChB,QAAM,OAAO,EAAE,GAAG,KAAA;AAClB,SAAO,KAAK,KAAK;AACjB,MAAI,kBAAkB,IAAsB,EAAE,WAAW,QAAQ,OAAO;AACxE,SAAO;AACT;AAEO,SAAS,aACd,MACA,OACgB;AAChB,MAAI,KAAK,KAAK,MAAM,OAAW,QAAO;AACtC,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,YAAY,KAAK,IAAI,OAAO,IAAA;AACzD;AAEO,SAAS,YACd,OACuC;AACvC,SAAQ,YAAsC,SAAS,KAAK;AAC9D;AAEO,SAAS,cAAc,MAAsB,OAAmB;AACrE,SAAO,MAAM,OAAO,CAAC,SAASA,WAAAA,YAAY,MAAM,IAAI,CAAC;AACvD;AAEO,SAAS,qBACd,OACA,OACA;AACA,QAAM,6BAAa,IAAA;AACnB,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,KAAK,UAAU,SAAS,SAAS,KAAK;AACpD,QAAI,OAAO,UAAU,YAAY,MAAM,OAAQ,QAAO,IAAI,KAAK;AAAA,EACjE;AACA,SAAO,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAC3E;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"permission-strategies.cjs","sources":["../../src/lib/permission-strategies.ts"],"sourcesContent":["import {\n  matchesTool,\n  type MatchPatterns,\n  type PermissionRule,\n} from \"../data/chat/tool-policy\";\nimport type { ToolMeta } from \"../data/chat/types\";\n\nexport const PATTERN_FIELDS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\nexport const HINT_FIELDS = [\"readOnly\", \"destructive\", \"idempotent\"] as const;\nexport const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS] as const;\n\nexport type MatchField = (typeof MATCH_FIELDS)[number];\nexport type StrategyPreset =\n  | \"all\"\n  | \"read-only\"\n  | \"destructive\"\n  | \"idempotent\"\n  | \"custom\";\n\nexport const STRATEGY_PRESETS: Array<{\n  value: StrategyPreset;\n  label: string;\n  description: string;\n}> = [\n  {\n    value: \"all\",\n    label: \"All tools\",\n    description: \"Match every tool in the catalog.\",\n  },\n  {\n    value: \"read-only\",\n    label: \"Read-only tools\",\n    description: \"Match tools explicitly marked read-only.\",\n  },\n  {\n    value: \"destructive\",\n    label: \"Destructive tools\",\n    description: \"Match tools explicitly marked destructive.\",\n  },\n  {\n    value: \"idempotent\",\n    label: \"Idempotent tools\",\n    description: \"Match tools safe to repeat.\",\n  },\n  {\n    value: \"custom\",\n    label: \"Custom conditions\",\n    description: \"Combine tool metadata and safety annotations.\",\n  },\n];\n\nexport const MATCH_FIELD_OPTIONS: Array<{\n  value: MatchField;\n  label: string;\n  description: string;\n}> = [\n  {\n    value: \"name\",\n    label: \"Tool name\",\n    description: \"The operation's unique id, e.g. todo_create.\",\n  },\n  {\n    value: \"group\",\n    label: \"Group\",\n    description: \"The permission category a tool is filed under.\",\n  },\n  {\n    value: \"parent\",\n    label: \"Parent\",\n    description: \"The surface a tool belongs to, e.g. Contacts.\",\n  },\n  {\n    value: \"entity\",\n    label: \"Entity\",\n    description: \"The resource type the operation acts on.\",\n  },\n  {\n    value: \"action\",\n    label: \"Action\",\n    description: \"The operation's action name within its entity.\",\n  },\n  {\n    value: \"verb\",\n    label: \"Verb\",\n    description: \"What the operation does: get, list, create, delete…\",\n  },\n  {\n    value: \"method\",\n    label: \"HTTP method\",\n    description: \"GET, POST, PATCH or DELETE for HTTP-backed tools.\",\n  },\n  {\n    value: \"scope\",\n    label: \"Scope\",\n    description: \"Whether it acts on one item or a whole collection.\",\n  },\n  {\n    value: \"readOnly\",\n    label: \"Read only\",\n    description: \"Tools that declare they never change anything.\",\n  },\n  {\n    value: \"destructive\",\n    label: \"Destructive\",\n    description: \"Tools that declare they may delete or overwrite data.\",\n  },\n  {\n    value: \"idempotent\",\n    label: \"Idempotent\",\n    description: \"Tools that declare repeating a call is safe.\",\n  },\n];\n\n/** A strategy's actual match, e.g. \"Tool name in a, b · Destructive is No\". */\nexport function strategySummary(rule: PermissionRule): string {\n  const preset = strategyPreset(rule);\n  if (preset !== \"custom\") {\n    return STRATEGY_PRESETS.find((option) => option.value === preset)!.label;\n  }\n  return activeMatchFields(rule)\n    .map((field) => {\n      const label =\n        MATCH_FIELD_OPTIONS.find((option) => option.value === field)?.label ??\n        field;\n      if (isHintField(field)) {\n        return `${label} is ${rule[field] ? \"Yes\" : \"No\"}`;\n      }\n      const values = patternValues(rule[field]);\n      return `${label} ${values.length > 1 ? \"in\" : \"is\"} ${values.join(\", \")}`;\n    })\n    .join(\" · \");\n}\n\nexport function strategyPreset(rule: PermissionRule): StrategyPreset {\n  const fields = activeMatchFields(rule);\n  if (fields.length !== 1) return \"custom\";\n  if (fields[0] === \"name\" && patternsText(rule.name) === \"*\") return \"all\";\n  if (fields[0] === \"readOnly\" && rule.readOnly === true) return \"read-only\";\n  if (fields[0] === \"destructive\" && rule.destructive === true) {\n    return \"destructive\";\n  }\n  if (fields[0] === \"idempotent\" && rule.idempotent === true) {\n    return \"idempotent\";\n  }\n  return \"custom\";\n}\n\nexport function applyStrategyPreset(\n  rule: PermissionRule,\n  preset: Exclude<StrategyPreset, \"custom\">,\n): PermissionRule {\n  if (preset === \"all\") return { name: \"*\", policy: rule.policy };\n  if (preset === \"read-only\") return { readOnly: true, policy: rule.policy };\n  if (preset === \"destructive\")\n    return { destructive: true, policy: rule.policy };\n  return { idempotent: true, policy: rule.policy };\n}\n\nexport function activeMatchFields(rule: PermissionRule): MatchField[] {\n  return MATCH_FIELDS.filter((field) => rule[field] !== undefined);\n}\n\nexport function patternsText(value: MatchPatterns | undefined): string {\n  return typeof value === \"string\" ? value : (value ?? []).join(\", \");\n}\n\nexport function patternValues(value: MatchPatterns | undefined): string[] {\n  return typeof value === \"string\" ? (value ? [value] : []) : (value ?? []);\n}\n\nexport function updatePatternCondition({\n  rule,\n  field,\n  value,\n}: {\n  rule: PermissionRule;\n  field: (typeof PATTERN_FIELDS)[number];\n  value: MatchPatterns;\n}): PermissionRule {\n  return { ...rule, [field]: value };\n}\n\nexport function conditionText(rule: PermissionRule, field: MatchField): string {\n  if (isHintField(field)) return String(rule[field]);\n  return patternsText(rule[field]);\n}\n\nexport function replaceMatchField(\n  rule: PermissionRule,\n  current: MatchField,\n  next: MatchField,\n): PermissionRule {\n  if (current === next) return rule;\n  const match = { ...rule } as Record<string, unknown>;\n  const previous = match[current];\n  delete match[current];\n  match[next] = isHintField(next)\n    ? typeof previous === \"boolean\"\n      ? previous\n      : true\n    : typeof previous === \"string\" || Array.isArray(previous)\n      ? previous\n      : \"*\";\n  return match as PermissionRule;\n}\n\nexport function updateCondition(\n  rule: PermissionRule,\n  field: MatchField,\n  value: string,\n): PermissionRule {\n  if (isHintField(field)) return { ...rule, [field]: value === \"true\" };\n  const patterns = value\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter(Boolean);\n  return {\n    ...rule,\n    [field]: patterns.length <= 1 ? (patterns[0] ?? \"\") : patterns,\n  };\n}\n\nexport function removeCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  const next = { ...rule } as Record<string, unknown>;\n  delete next[field];\n  if (activeMatchFields(next as PermissionRule).length === 0) next.name = \"*\";\n  return next as PermissionRule;\n}\n\nexport function addCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  if (rule[field] !== undefined) return rule;\n  return { ...rule, [field]: isHintField(field) ? true : \"*\" };\n}\n\nexport function isHintField(\n  field: MatchField,\n): field is (typeof HINT_FIELDS)[number] {\n  return (HINT_FIELDS as readonly MatchField[]).includes(field);\n}\n\nexport function matchingTools(rule: PermissionRule, tools: ToolMeta[]) {\n  return tools.filter((tool) => matchesTool(rule, tool));\n}\n\nexport function toolFieldSuggestions(\n  tools: ToolMeta[],\n  field: Exclude<MatchField, (typeof HINT_FIELDS)[number]>,\n) {\n  const values = new Set<string>();\n  for (const tool of tools) {\n    const value = tool[field === \"name\" ? \"name\" : field];\n    if (typeof value === \"string\" && value.trim()) values.add(value);\n  }\n  return Array.from(values).sort((left, right) => left.localeCompare(right));\n}\n"],"names":["matchesTool"],"mappings":";;;AAOO,MAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,cAAc,CAAC,YAAY,eAAe,YAAY;AAC5D,MAAM,eAAe,CAAC,GAAG,gBAAgB,GAAG,WAAW;AAUvD,MAAM,mBAIR;AAAA,EACH;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAEjB;AAEO,MAAM,sBAIR;AAAA,EACH;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAEjB;AAGO,SAAS,gBAAgB,MAA8B;AAC5D,QAAM,SAAS,eAAe,IAAI;AAClC,MAAI,WAAW,UAAU;AACvB,WAAO,iBAAiB,KAAK,CAAC,WAAW,OAAO,UAAU,MAAM,EAAG;AAAA,EACrE;AACA,SAAO,kBAAkB,IAAI,EAC1B,IAAI,CAAC,UAAU;;AACd,UAAM,UACJ,yBAAoB,KAAK,CAAC,WAAW,OAAO,UAAU,KAAK,MAA3D,mBAA8D,UAC9D;AACF,QAAI,YAAY,KAAK,GAAG;AACtB,aAAO,GAAG,KAAK,OAAO,KAAK,KAAK,IAAI,QAAQ,IAAI;AAAA,IAClD;AACA,UAAM,SAAS,cAAc,KAAK,KAAK,CAAC;AACxC,WAAO,GAAG,KAAK,IAAI,OAAO,SAAS,IAAI,OAAO,IAAI,IAAI,OAAO,KAAK,IAAI,CAAC;AAAA,EACzE,CAAC,EACA,KAAK,KAAK;AACf;AAEO,SAAS,eAAe,MAAsC;AACnE,QAAM,SAAS,kBAAkB,IAAI;AACrC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,MAAI,OAAO,CAAC,MAAM,UAAU,aAAa,KAAK,IAAI,MAAM,IAAK,QAAO;AACpE,MAAI,OAAO,CAAC,MAAM,cAAc,KAAK,aAAa,KAAM,QAAO;AAC/D,MAAI,OAAO,CAAC,MAAM,iBAAiB,KAAK,gBAAgB,MAAM;AAC5D,WAAO;AAAA,EACT;AACA,MAAI,OAAO,CAAC,MAAM,gBAAgB,KAAK,eAAe,MAAM;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,oBACd,MACA,QACgB;AAChB,MAAI,WAAW,MAAO,QAAO,EAAE,MAAM,KAAK,QAAQ,KAAK,OAAA;AACvD,MAAI,WAAW,YAAa,QAAO,EAAE,UAAU,MAAM,QAAQ,KAAK,OAAA;AAClE,MAAI,WAAW;AACb,WAAO,EAAE,aAAa,MAAM,QAAQ,KAAK,OAAA;AAC3C,SAAO,EAAE,YAAY,MAAM,QAAQ,KAAK,OAAA;AAC1C;AAEO,SAAS,kBAAkB,MAAoC;AACpE,SAAO,aAAa,OAAO,CAAC,UAAU,KAAK,KAAK,MAAM,MAAS;AACjE;AAEO,SAAS,aAAa,OAA0C;AACrE,SAAO,OAAO,UAAU,WAAW,SAAS,SAAS,CAAA,GAAI,KAAK,IAAI;AACpE;AAEO,SAAS,cAAc,OAA4C;AACxE,SAAO,OAAO,UAAU,WAAY,QAAQ,CAAC,KAAK,IAAI,CAAA,IAAO,SAAS,CAAA;AACxE;AAEO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AACF,GAImB;AACjB,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,MAAA;AAC7B;AAEO,SAAS,cAAc,MAAsB,OAA2B;AAC7E,MAAI,YAAY,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC;AACjD,SAAO,aAAa,KAAK,KAAK,CAAC;AACjC;AAEO,SAAS,kBACd,MACA,SACA,MACgB;AAChB,MAAI,YAAY,KAAM,QAAO;AAC7B,QAAM,QAAQ,EAAE,GAAG,KAAA;AACnB,QAAM,WAAW,MAAM,OAAO;AAC9B,SAAO,MAAM,OAAO;AACpB,QAAM,IAAI,IAAI,YAAY,IAAI,IAC1B,OAAO,aAAa,YAClB,WACA,OACF,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,IACpD,WACA;AACN,SAAO;AACT;AAEO,SAAS,gBACd,MACA,OACA,OACgB;AAChB,MAAI,YAAY,KAAK,EAAG,QAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,UAAU,OAAA;AAC7D,QAAM,WAAW,MACd,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAA,CAAM,EACzB,OAAO,OAAO;AACjB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,CAAC,KAAK,GAAG,SAAS,UAAU,IAAK,SAAS,CAAC,KAAK,KAAM;AAAA,EAAA;AAE1D;AAEO,SAAS,gBACd,MACA,OACgB;AAChB,QAAM,OAAO,EAAE,GAAG,KAAA;AAClB,SAAO,KAAK,KAAK;AACjB,MAAI,kBAAkB,IAAsB,EAAE,WAAW,QAAQ,OAAO;AACxE,SAAO;AACT;AAEO,SAAS,aACd,MACA,OACgB;AAChB,MAAI,KAAK,KAAK,MAAM,OAAW,QAAO;AACtC,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,YAAY,KAAK,IAAI,OAAO,IAAA;AACzD;AAEO,SAAS,YACd,OACuC;AACvC,SAAQ,YAAsC,SAAS,KAAK;AAC9D;AAEO,SAAS,cAAc,MAAsB,OAAmB;AACrE,SAAO,MAAM,OAAO,CAAC,SAASA,WAAAA,YAAY,MAAM,IAAI,CAAC;AACvD;AAEO,SAAS,qBACd,OACA,OACA;AACA,QAAM,6BAAa,IAAA;AACnB,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,KAAK,UAAU,SAAS,SAAS,KAAK;AACpD,QAAI,OAAO,UAAU,YAAY,MAAM,OAAQ,QAAO,IAAI,KAAK;AAAA,EACjE;AACA,SAAO,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAC3E;;;;;;;;;;;;;;;;;;;;;"}

package/dist/lib/permission-strategies.d.ts

@@ -13,7 +13,10 @@ export declare const STRATEGY_PRESETS: Array<{
 export declare const MATCH_FIELD_OPTIONS: Array<{
     value: MatchField;
     label: string;
+    description: string;
 }>;
+/** A strategy's actual match, e.g. "Tool name in a, b · Destructive is No". */
+export declare function strategySummary(rule: PermissionRule): string;
 export declare function strategyPreset(rule: PermissionRule): StrategyPreset;
 export declare function applyStrategyPreset(rule: PermissionRule, preset: Exclude<StrategyPreset, "custom">): PermissionRule;
 export declare function activeMatchFields(rule: PermissionRule): MatchField[];

package/dist/lib/permission-strategies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission-strategies.d.ts","sourceRoot":"","sources":["../../src/lib/permission-strategies.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,eAAO,MAAM,cAAc,qFASjB,CAAC;AACX,eAAO,MAAM,WAAW,oDAAqD,CAAC;AAC9E,eAAO,MAAM,YAAY,8HAA+C,CAAC;AAEzE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,MAAM,MAAM,cAAc,GACtB,KAAK,GACL,WAAW,GACX,aAAa,GACb,YAAY,GACZ,QAAQ,CAAC;AAEb,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC;IACnC,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CA0BA,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAazE,CAAC;AAEJ,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAYnE;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,GACxC,cAAc,CAMhB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,EAAE,CAEpE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,CAErE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,EAAE,CAExE;AAED,wBAAgB,sBAAsB,CAAC,EACrC,IAAI,EACJ,KAAK,EACL,KAAK,GACN,EAAE;IACD,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,EAAE,aAAa,CAAC;CACtB,GAAG,cAAc,CAEjB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAG7E;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,UAAU,GACf,cAAc,CAahB;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,MAAM,GACZ,cAAc,CAUhB;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,GAChB,cAAc,CAKhB;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,GAChB,cAAc,CAGhB;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,UAAU,GAChB,KAAK,IAAI,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAEvC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,cAEpE;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,QAAQ,EAAE,EACjB,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,YAQzD"}
+{"version":3,"file":"permission-strategies.d.ts","sourceRoot":"","sources":["../../src/lib/permission-strategies.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,eAAO,MAAM,cAAc,qFASjB,CAAC;AACX,eAAO,MAAM,WAAW,oDAAqD,CAAC;AAC9E,eAAO,MAAM,YAAY,8HAA+C,CAAC;AAEzE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,MAAM,MAAM,cAAc,GACtB,KAAK,GACL,WAAW,GACX,aAAa,GACb,YAAY,GACZ,QAAQ,CAAC;AAEb,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC;IACnC,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CA0BA,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC;IACtC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CAwDA,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAiB5D;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAYnE;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,GACxC,cAAc,CAMhB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,EAAE,CAEpE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,CAErE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,EAAE,CAExE;AAED,wBAAgB,sBAAsB,CAAC,EACrC,IAAI,EACJ,KAAK,EACL,KAAK,GACN,EAAE;IACD,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,EAAE,aAAa,CAAC;CACtB,GAAG,cAAc,CAEjB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAG7E;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,UAAU,GACf,cAAc,CAahB;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,MAAM,GACZ,cAAc,CAUhB;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,GAChB,cAAc,CAKhB;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,GAChB,cAAc,CAGhB;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,UAAU,GAChB,KAAK,IAAI,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAEvC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,cAEpE;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,QAAQ,EAAE,EACjB,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,YAQzD"}

package/dist/lib/permission-strategies.js

@@ -39,18 +39,77 @@ const STRATEGY_PRESETS = [
   }
 ];
 const MATCH_FIELD_OPTIONS = [
-  { value: "name", label: "Tool name" },
-  { value: "group", label: "Group" },
-  { value: "parent", label: "Parent" },
-  { value: "entity", label: "Entity" },
-  { value: "action", label: "Action" },
-  { value: "verb", label: "Verb" },
-  { value: "method", label: "HTTP method" },
-  { value: "scope", label: "Scope" },
-  { value: "readOnly", label: "Read only" },
-  { value: "destructive", label: "Destructive" },
-  { value: "idempotent", label: "Idempotent" }
+  {
+    value: "name",
+    label: "Tool name",
+    description: "The operation's unique id, e.g. todo_create."
+  },
+  {
+    value: "group",
+    label: "Group",
+    description: "The permission category a tool is filed under."
+  },
+  {
+    value: "parent",
+    label: "Parent",
+    description: "The surface a tool belongs to, e.g. Contacts."
+  },
+  {
+    value: "entity",
+    label: "Entity",
+    description: "The resource type the operation acts on."
+  },
+  {
+    value: "action",
+    label: "Action",
+    description: "The operation's action name within its entity."
+  },
+  {
+    value: "verb",
+    label: "Verb",
+    description: "What the operation does: get, list, create, delete…"
+  },
+  {
+    value: "method",
+    label: "HTTP method",
+    description: "GET, POST, PATCH or DELETE for HTTP-backed tools."
+  },
+  {
+    value: "scope",
+    label: "Scope",
+    description: "Whether it acts on one item or a whole collection."
+  },
+  {
+    value: "readOnly",
+    label: "Read only",
+    description: "Tools that declare they never change anything."
+  },
+  {
+    value: "destructive",
+    label: "Destructive",
+    description: "Tools that declare they may delete or overwrite data."
+  },
+  {
+    value: "idempotent",
+    label: "Idempotent",
+    description: "Tools that declare repeating a call is safe."
+  }
 ];
+function strategySummary(rule) {
+  const preset = strategyPreset(rule);
+  if (preset !== "custom") {
+    return STRATEGY_PRESETS.find((option) => option.value === preset).label;
+  }
+  return activeMatchFields(rule).map((field) => {
+    var _a;
+    const label = ((_a = MATCH_FIELD_OPTIONS.find((option) => option.value === field)) == null ? void 0 : _a.label) ?? field;
+    if (isHintField(field)) {
+      return `${label} is ${rule[field] ? "Yes" : "No"}`;
+    }
+    const values = patternValues(rule[field]);
+    return `${label} ${values.length > 1 ? "in" : "is"} ${values.join(", ")}`;
+  }).join(" · ");
+}
 function strategyPreset(rule) {
   const fields = activeMatchFields(rule);
   if (fields.length !== 1) return "custom";
@@ -148,6 +207,7 @@ export {
   removeCondition,
   replaceMatchField,
   strategyPreset,
+  strategySummary,
   toolFieldSuggestions,
   updateCondition,
   updatePatternCondition

package/dist/lib/permission-strategies.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-strategies.js","sources":["../../src/lib/permission-strategies.ts"],"sourcesContent":["import {\n  matchesTool,\n  type MatchPatterns,\n  type PermissionRule,\n} from \"../data/chat/tool-policy\";\nimport type { ToolMeta } from \"../data/chat/types\";\n\nexport const PATTERN_FIELDS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\nexport const HINT_FIELDS = [\"readOnly\", \"destructive\", \"idempotent\"] as const;\nexport const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS] as const;\n\nexport type MatchField = (typeof MATCH_FIELDS)[number];\nexport type StrategyPreset =\n  | \"all\"\n  | \"read-only\"\n  | \"destructive\"\n  | \"idempotent\"\n  | \"custom\";\n\nexport const STRATEGY_PRESETS: Array<{\n  value: StrategyPreset;\n  label: string;\n  description: string;\n}> = [\n  {\n    value: \"all\",\n    label: \"All tools\",\n    description: \"Match every tool in the catalog.\",\n  },\n  {\n    value: \"read-only\",\n    label: \"Read-only tools\",\n    description: \"Match tools explicitly marked read-only.\",\n  },\n  {\n    value: \"destructive\",\n    label: \"Destructive tools\",\n    description: \"Match tools explicitly marked destructive.\",\n  },\n  {\n    value: \"idempotent\",\n    label: \"Idempotent tools\",\n    description: \"Match tools safe to repeat.\",\n  },\n  {\n    value: \"custom\",\n    label: \"Custom conditions\",\n    description: \"Combine tool metadata and safety annotations.\",\n  },\n];\n\nexport const MATCH_FIELD_OPTIONS: Array<{ value: MatchField; label: string }> =\n  [\n    { value: \"name\", label: \"Tool name\" },\n    { value: \"group\", label: \"Group\" },\n    { value: \"parent\", label: \"Parent\" },\n    { value: \"entity\", label: \"Entity\" },\n    { value: \"action\", label: \"Action\" },\n    { value: \"verb\", label: \"Verb\" },\n    { value: \"method\", label: \"HTTP method\" },\n    { value: \"scope\", label: \"Scope\" },\n    { value: \"readOnly\", label: \"Read only\" },\n    { value: \"destructive\", label: \"Destructive\" },\n    { value: \"idempotent\", label: \"Idempotent\" },\n  ];\n\nexport function strategyPreset(rule: PermissionRule): StrategyPreset {\n  const fields = activeMatchFields(rule);\n  if (fields.length !== 1) return \"custom\";\n  if (fields[0] === \"name\" && patternsText(rule.name) === \"*\") return \"all\";\n  if (fields[0] === \"readOnly\" && rule.readOnly === true) return \"read-only\";\n  if (fields[0] === \"destructive\" && rule.destructive === true) {\n    return \"destructive\";\n  }\n  if (fields[0] === \"idempotent\" && rule.idempotent === true) {\n    return \"idempotent\";\n  }\n  return \"custom\";\n}\n\nexport function applyStrategyPreset(\n  rule: PermissionRule,\n  preset: Exclude<StrategyPreset, \"custom\">,\n): PermissionRule {\n  if (preset === \"all\") return { name: \"*\", policy: rule.policy };\n  if (preset === \"read-only\") return { readOnly: true, policy: rule.policy };\n  if (preset === \"destructive\")\n    return { destructive: true, policy: rule.policy };\n  return { idempotent: true, policy: rule.policy };\n}\n\nexport function activeMatchFields(rule: PermissionRule): MatchField[] {\n  return MATCH_FIELDS.filter((field) => rule[field] !== undefined);\n}\n\nexport function patternsText(value: MatchPatterns | undefined): string {\n  return typeof value === \"string\" ? value : (value ?? []).join(\", \");\n}\n\nexport function patternValues(value: MatchPatterns | undefined): string[] {\n  return typeof value === \"string\" ? (value ? [value] : []) : (value ?? []);\n}\n\nexport function updatePatternCondition({\n  rule,\n  field,\n  value,\n}: {\n  rule: PermissionRule;\n  field: (typeof PATTERN_FIELDS)[number];\n  value: MatchPatterns;\n}): PermissionRule {\n  return { ...rule, [field]: value };\n}\n\nexport function conditionText(rule: PermissionRule, field: MatchField): string {\n  if (isHintField(field)) return String(rule[field]);\n  return patternsText(rule[field]);\n}\n\nexport function replaceMatchField(\n  rule: PermissionRule,\n  current: MatchField,\n  next: MatchField,\n): PermissionRule {\n  if (current === next) return rule;\n  const match = { ...rule } as Record<string, unknown>;\n  const previous = match[current];\n  delete match[current];\n  match[next] = isHintField(next)\n    ? typeof previous === \"boolean\"\n      ? previous\n      : true\n    : typeof previous === \"string\" || Array.isArray(previous)\n      ? previous\n      : \"*\";\n  return match as PermissionRule;\n}\n\nexport function updateCondition(\n  rule: PermissionRule,\n  field: MatchField,\n  value: string,\n): PermissionRule {\n  if (isHintField(field)) return { ...rule, [field]: value === \"true\" };\n  const patterns = value\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter(Boolean);\n  return {\n    ...rule,\n    [field]: patterns.length <= 1 ? (patterns[0] ?? \"\") : patterns,\n  };\n}\n\nexport function removeCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  const next = { ...rule } as Record<string, unknown>;\n  delete next[field];\n  if (activeMatchFields(next as PermissionRule).length === 0) next.name = \"*\";\n  return next as PermissionRule;\n}\n\nexport function addCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  if (rule[field] !== undefined) return rule;\n  return { ...rule, [field]: isHintField(field) ? true : \"*\" };\n}\n\nexport function isHintField(\n  field: MatchField,\n): field is (typeof HINT_FIELDS)[number] {\n  return (HINT_FIELDS as readonly MatchField[]).includes(field);\n}\n\nexport function matchingTools(rule: PermissionRule, tools: ToolMeta[]) {\n  return tools.filter((tool) => matchesTool(rule, tool));\n}\n\nexport function toolFieldSuggestions(\n  tools: ToolMeta[],\n  field: Exclude<MatchField, (typeof HINT_FIELDS)[number]>,\n) {\n  const values = new Set<string>();\n  for (const tool of tools) {\n    const value = tool[field === \"name\" ? \"name\" : field];\n    if (typeof value === \"string\" && value.trim()) values.add(value);\n  }\n  return Array.from(values).sort((left, right) => left.localeCompare(right));\n}\n"],"names":[],"mappings":";AAOO,MAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,cAAc,CAAC,YAAY,eAAe,YAAY;AAC5D,MAAM,eAAe,CAAC,GAAG,gBAAgB,GAAG,WAAW;AAUvD,MAAM,mBAIR;AAAA,EACH;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAEjB;AAEO,MAAM,sBACX;AAAA,EACE,EAAE,OAAO,QAAQ,OAAO,YAAA;AAAA,EACxB,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,QAAQ,OAAO,OAAA;AAAA,EACxB,EAAE,OAAO,UAAU,OAAO,cAAA;AAAA,EAC1B,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,YAAY,OAAO,YAAA;AAAA,EAC5B,EAAE,OAAO,eAAe,OAAO,cAAA;AAAA,EAC/B,EAAE,OAAO,cAAc,OAAO,aAAA;AAChC;AAEK,SAAS,eAAe,MAAsC;AACnE,QAAM,SAAS,kBAAkB,IAAI;AACrC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,MAAI,OAAO,CAAC,MAAM,UAAU,aAAa,KAAK,IAAI,MAAM,IAAK,QAAO;AACpE,MAAI,OAAO,CAAC,MAAM,cAAc,KAAK,aAAa,KAAM,QAAO;AAC/D,MAAI,OAAO,CAAC,MAAM,iBAAiB,KAAK,gBAAgB,MAAM;AAC5D,WAAO;AAAA,EACT;AACA,MAAI,OAAO,CAAC,MAAM,gBAAgB,KAAK,eAAe,MAAM;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,oBACd,MACA,QACgB;AAChB,MAAI,WAAW,MAAO,QAAO,EAAE,MAAM,KAAK,QAAQ,KAAK,OAAA;AACvD,MAAI,WAAW,YAAa,QAAO,EAAE,UAAU,MAAM,QAAQ,KAAK,OAAA;AAClE,MAAI,WAAW;AACb,WAAO,EAAE,aAAa,MAAM,QAAQ,KAAK,OAAA;AAC3C,SAAO,EAAE,YAAY,MAAM,QAAQ,KAAK,OAAA;AAC1C;AAEO,SAAS,kBAAkB,MAAoC;AACpE,SAAO,aAAa,OAAO,CAAC,UAAU,KAAK,KAAK,MAAM,MAAS;AACjE;AAEO,SAAS,aAAa,OAA0C;AACrE,SAAO,OAAO,UAAU,WAAW,SAAS,SAAS,CAAA,GAAI,KAAK,IAAI;AACpE;AAEO,SAAS,cAAc,OAA4C;AACxE,SAAO,OAAO,UAAU,WAAY,QAAQ,CAAC,KAAK,IAAI,CAAA,IAAO,SAAS,CAAA;AACxE;AAEO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AACF,GAImB;AACjB,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,MAAA;AAC7B;AAEO,SAAS,cAAc,MAAsB,OAA2B;AAC7E,MAAI,YAAY,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC;AACjD,SAAO,aAAa,KAAK,KAAK,CAAC;AACjC;AAEO,SAAS,kBACd,MACA,SACA,MACgB;AAChB,MAAI,YAAY,KAAM,QAAO;AAC7B,QAAM,QAAQ,EAAE,GAAG,KAAA;AACnB,QAAM,WAAW,MAAM,OAAO;AAC9B,SAAO,MAAM,OAAO;AACpB,QAAM,IAAI,IAAI,YAAY,IAAI,IAC1B,OAAO,aAAa,YAClB,WACA,OACF,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,IACpD,WACA;AACN,SAAO;AACT;AAEO,SAAS,gBACd,MACA,OACA,OACgB;AAChB,MAAI,YAAY,KAAK,EAAG,QAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,UAAU,OAAA;AAC7D,QAAM,WAAW,MACd,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAA,CAAM,EACzB,OAAO,OAAO;AACjB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,CAAC,KAAK,GAAG,SAAS,UAAU,IAAK,SAAS,CAAC,KAAK,KAAM;AAAA,EAAA;AAE1D;AAEO,SAAS,gBACd,MACA,OACgB;AAChB,QAAM,OAAO,EAAE,GAAG,KAAA;AAClB,SAAO,KAAK,KAAK;AACjB,MAAI,kBAAkB,IAAsB,EAAE,WAAW,QAAQ,OAAO;AACxE,SAAO;AACT;AAEO,SAAS,aACd,MACA,OACgB;AAChB,MAAI,KAAK,KAAK,MAAM,OAAW,QAAO;AACtC,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,YAAY,KAAK,IAAI,OAAO,IAAA;AACzD;AAEO,SAAS,YACd,OACuC;AACvC,SAAQ,YAAsC,SAAS,KAAK;AAC9D;AAEO,SAAS,cAAc,MAAsB,OAAmB;AACrE,SAAO,MAAM,OAAO,CAAC,SAAS,YAAY,MAAM,IAAI,CAAC;AACvD;AAEO,SAAS,qBACd,OACA,OACA;AACA,QAAM,6BAAa,IAAA;AACnB,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,KAAK,UAAU,SAAS,SAAS,KAAK;AACpD,QAAI,OAAO,UAAU,YAAY,MAAM,OAAQ,QAAO,IAAI,KAAK;AAAA,EACjE;AACA,SAAO,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAC3E;"}
+{"version":3,"file":"permission-strategies.js","sources":["../../src/lib/permission-strategies.ts"],"sourcesContent":["import {\n  matchesTool,\n  type MatchPatterns,\n  type PermissionRule,\n} from \"../data/chat/tool-policy\";\nimport type { ToolMeta } from \"../data/chat/types\";\n\nexport const PATTERN_FIELDS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\nexport const HINT_FIELDS = [\"readOnly\", \"destructive\", \"idempotent\"] as const;\nexport const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS] as const;\n\nexport type MatchField = (typeof MATCH_FIELDS)[number];\nexport type StrategyPreset =\n  | \"all\"\n  | \"read-only\"\n  | \"destructive\"\n  | \"idempotent\"\n  | \"custom\";\n\nexport const STRATEGY_PRESETS: Array<{\n  value: StrategyPreset;\n  label: string;\n  description: string;\n}> = [\n  {\n    value: \"all\",\n    label: \"All tools\",\n    description: \"Match every tool in the catalog.\",\n  },\n  {\n    value: \"read-only\",\n    label: \"Read-only tools\",\n    description: \"Match tools explicitly marked read-only.\",\n  },\n  {\n    value: \"destructive\",\n    label: \"Destructive tools\",\n    description: \"Match tools explicitly marked destructive.\",\n  },\n  {\n    value: \"idempotent\",\n    label: \"Idempotent tools\",\n    description: \"Match tools safe to repeat.\",\n  },\n  {\n    value: \"custom\",\n    label: \"Custom conditions\",\n    description: \"Combine tool metadata and safety annotations.\",\n  },\n];\n\nexport const MATCH_FIELD_OPTIONS: Array<{\n  value: MatchField;\n  label: string;\n  description: string;\n}> = [\n  {\n    value: \"name\",\n    label: \"Tool name\",\n    description: \"The operation's unique id, e.g. todo_create.\",\n  },\n  {\n    value: \"group\",\n    label: \"Group\",\n    description: \"The permission category a tool is filed under.\",\n  },\n  {\n    value: \"parent\",\n    label: \"Parent\",\n    description: \"The surface a tool belongs to, e.g. Contacts.\",\n  },\n  {\n    value: \"entity\",\n    label: \"Entity\",\n    description: \"The resource type the operation acts on.\",\n  },\n  {\n    value: \"action\",\n    label: \"Action\",\n    description: \"The operation's action name within its entity.\",\n  },\n  {\n    value: \"verb\",\n    label: \"Verb\",\n    description: \"What the operation does: get, list, create, delete…\",\n  },\n  {\n    value: \"method\",\n    label: \"HTTP method\",\n    description: \"GET, POST, PATCH or DELETE for HTTP-backed tools.\",\n  },\n  {\n    value: \"scope\",\n    label: \"Scope\",\n    description: \"Whether it acts on one item or a whole collection.\",\n  },\n  {\n    value: \"readOnly\",\n    label: \"Read only\",\n    description: \"Tools that declare they never change anything.\",\n  },\n  {\n    value: \"destructive\",\n    label: \"Destructive\",\n    description: \"Tools that declare they may delete or overwrite data.\",\n  },\n  {\n    value: \"idempotent\",\n    label: \"Idempotent\",\n    description: \"Tools that declare repeating a call is safe.\",\n  },\n];\n\n/** A strategy's actual match, e.g. \"Tool name in a, b · Destructive is No\". */\nexport function strategySummary(rule: PermissionRule): string {\n  const preset = strategyPreset(rule);\n  if (preset !== \"custom\") {\n    return STRATEGY_PRESETS.find((option) => option.value === preset)!.label;\n  }\n  return activeMatchFields(rule)\n    .map((field) => {\n      const label =\n        MATCH_FIELD_OPTIONS.find((option) => option.value === field)?.label ??\n        field;\n      if (isHintField(field)) {\n        return `${label} is ${rule[field] ? \"Yes\" : \"No\"}`;\n      }\n      const values = patternValues(rule[field]);\n      return `${label} ${values.length > 1 ? \"in\" : \"is\"} ${values.join(\", \")}`;\n    })\n    .join(\" · \");\n}\n\nexport function strategyPreset(rule: PermissionRule): StrategyPreset {\n  const fields = activeMatchFields(rule);\n  if (fields.length !== 1) return \"custom\";\n  if (fields[0] === \"name\" && patternsText(rule.name) === \"*\") return \"all\";\n  if (fields[0] === \"readOnly\" && rule.readOnly === true) return \"read-only\";\n  if (fields[0] === \"destructive\" && rule.destructive === true) {\n    return \"destructive\";\n  }\n  if (fields[0] === \"idempotent\" && rule.idempotent === true) {\n    return \"idempotent\";\n  }\n  return \"custom\";\n}\n\nexport function applyStrategyPreset(\n  rule: PermissionRule,\n  preset: Exclude<StrategyPreset, \"custom\">,\n): PermissionRule {\n  if (preset === \"all\") return { name: \"*\", policy: rule.policy };\n  if (preset === \"read-only\") return { readOnly: true, policy: rule.policy };\n  if (preset === \"destructive\")\n    return { destructive: true, policy: rule.policy };\n  return { idempotent: true, policy: rule.policy };\n}\n\nexport function activeMatchFields(rule: PermissionRule): MatchField[] {\n  return MATCH_FIELDS.filter((field) => rule[field] !== undefined);\n}\n\nexport function patternsText(value: MatchPatterns | undefined): string {\n  return typeof value === \"string\" ? value : (value ?? []).join(\", \");\n}\n\nexport function patternValues(value: MatchPatterns | undefined): string[] {\n  return typeof value === \"string\" ? (value ? [value] : []) : (value ?? []);\n}\n\nexport function updatePatternCondition({\n  rule,\n  field,\n  value,\n}: {\n  rule: PermissionRule;\n  field: (typeof PATTERN_FIELDS)[number];\n  value: MatchPatterns;\n}): PermissionRule {\n  return { ...rule, [field]: value };\n}\n\nexport function conditionText(rule: PermissionRule, field: MatchField): string {\n  if (isHintField(field)) return String(rule[field]);\n  return patternsText(rule[field]);\n}\n\nexport function replaceMatchField(\n  rule: PermissionRule,\n  current: MatchField,\n  next: MatchField,\n): PermissionRule {\n  if (current === next) return rule;\n  const match = { ...rule } as Record<string, unknown>;\n  const previous = match[current];\n  delete match[current];\n  match[next] = isHintField(next)\n    ? typeof previous === \"boolean\"\n      ? previous\n      : true\n    : typeof previous === \"string\" || Array.isArray(previous)\n      ? previous\n      : \"*\";\n  return match as PermissionRule;\n}\n\nexport function updateCondition(\n  rule: PermissionRule,\n  field: MatchField,\n  value: string,\n): PermissionRule {\n  if (isHintField(field)) return { ...rule, [field]: value === \"true\" };\n  const patterns = value\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter(Boolean);\n  return {\n    ...rule,\n    [field]: patterns.length <= 1 ? (patterns[0] ?? \"\") : patterns,\n  };\n}\n\nexport function removeCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  const next = { ...rule } as Record<string, unknown>;\n  delete next[field];\n  if (activeMatchFields(next as PermissionRule).length === 0) next.name = \"*\";\n  return next as PermissionRule;\n}\n\nexport function addCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  if (rule[field] !== undefined) return rule;\n  return { ...rule, [field]: isHintField(field) ? true : \"*\" };\n}\n\nexport function isHintField(\n  field: MatchField,\n): field is (typeof HINT_FIELDS)[number] {\n  return (HINT_FIELDS as readonly MatchField[]).includes(field);\n}\n\nexport function matchingTools(rule: PermissionRule, tools: ToolMeta[]) {\n  return tools.filter((tool) => matchesTool(rule, tool));\n}\n\nexport function toolFieldSuggestions(\n  tools: ToolMeta[],\n  field: Exclude<MatchField, (typeof HINT_FIELDS)[number]>,\n) {\n  const values = new Set<string>();\n  for (const tool of tools) {\n    const value = tool[field === \"name\" ? \"name\" : field];\n    if (typeof value === \"string\" && value.trim()) values.add(value);\n  }\n  return Array.from(values).sort((left, right) => left.localeCompare(right));\n}\n"],"names":[],"mappings":";AAOO,MAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,cAAc,CAAC,YAAY,eAAe,YAAY;AAC5D,MAAM,eAAe,CAAC,GAAG,gBAAgB,GAAG,WAAW;AAUvD,MAAM,mBAIR;AAAA,EACH;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAEjB;AAEO,MAAM,sBAIR;AAAA,EACH;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAEjB;AAGO,SAAS,gBAAgB,MAA8B;AAC5D,QAAM,SAAS,eAAe,IAAI;AAClC,MAAI,WAAW,UAAU;AACvB,WAAO,iBAAiB,KAAK,CAAC,WAAW,OAAO,UAAU,MAAM,EAAG;AAAA,EACrE;AACA,SAAO,kBAAkB,IAAI,EAC1B,IAAI,CAAC,UAAU;;AACd,UAAM,UACJ,yBAAoB,KAAK,CAAC,WAAW,OAAO,UAAU,KAAK,MAA3D,mBAA8D,UAC9D;AACF,QAAI,YAAY,KAAK,GAAG;AACtB,aAAO,GAAG,KAAK,OAAO,KAAK,KAAK,IAAI,QAAQ,IAAI;AAAA,IAClD;AACA,UAAM,SAAS,cAAc,KAAK,KAAK,CAAC;AACxC,WAAO,GAAG,KAAK,IAAI,OAAO,SAAS,IAAI,OAAO,IAAI,IAAI,OAAO,KAAK,IAAI,CAAC;AAAA,EACzE,CAAC,EACA,KAAK,KAAK;AACf;AAEO,SAAS,eAAe,MAAsC;AACnE,QAAM,SAAS,kBAAkB,IAAI;AACrC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,MAAI,OAAO,CAAC,MAAM,UAAU,aAAa,KAAK,IAAI,MAAM,IAAK,QAAO;AACpE,MAAI,OAAO,CAAC,MAAM,cAAc,KAAK,aAAa,KAAM,QAAO;AAC/D,MAAI,OAAO,CAAC,MAAM,iBAAiB,KAAK,gBAAgB,MAAM;AAC5D,WAAO;AAAA,EACT;AACA,MAAI,OAAO,CAAC,MAAM,gBAAgB,KAAK,eAAe,MAAM;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,oBACd,MACA,QACgB;AAChB,MAAI,WAAW,MAAO,QAAO,EAAE,MAAM,KAAK,QAAQ,KAAK,OAAA;AACvD,MAAI,WAAW,YAAa,QAAO,EAAE,UAAU,MAAM,QAAQ,KAAK,OAAA;AAClE,MAAI,WAAW;AACb,WAAO,EAAE,aAAa,MAAM,QAAQ,KAAK,OAAA;AAC3C,SAAO,EAAE,YAAY,MAAM,QAAQ,KAAK,OAAA;AAC1C;AAEO,SAAS,kBAAkB,MAAoC;AACpE,SAAO,aAAa,OAAO,CAAC,UAAU,KAAK,KAAK,MAAM,MAAS;AACjE;AAEO,SAAS,aAAa,OAA0C;AACrE,SAAO,OAAO,UAAU,WAAW,SAAS,SAAS,CAAA,GAAI,KAAK,IAAI;AACpE;AAEO,SAAS,cAAc,OAA4C;AACxE,SAAO,OAAO,UAAU,WAAY,QAAQ,CAAC,KAAK,IAAI,CAAA,IAAO,SAAS,CAAA;AACxE;AAEO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AACF,GAImB;AACjB,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,MAAA;AAC7B;AAEO,SAAS,cAAc,MAAsB,OAA2B;AAC7E,MAAI,YAAY,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC;AACjD,SAAO,aAAa,KAAK,KAAK,CAAC;AACjC;AAEO,SAAS,kBACd,MACA,SACA,MACgB;AAChB,MAAI,YAAY,KAAM,QAAO;AAC7B,QAAM,QAAQ,EAAE,GAAG,KAAA;AACnB,QAAM,WAAW,MAAM,OAAO;AAC9B,SAAO,MAAM,OAAO;AACpB,QAAM,IAAI,IAAI,YAAY,IAAI,IAC1B,OAAO,aAAa,YAClB,WACA,OACF,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,IACpD,WACA;AACN,SAAO;AACT;AAEO,SAAS,gBACd,MACA,OACA,OACgB;AAChB,MAAI,YAAY,KAAK,EAAG,QAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,UAAU,OAAA;AAC7D,QAAM,WAAW,MACd,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAA,CAAM,EACzB,OAAO,OAAO;AACjB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,CAAC,KAAK,GAAG,SAAS,UAAU,IAAK,SAAS,CAAC,KAAK,KAAM;AAAA,EAAA;AAE1D;AAEO,SAAS,gBACd,MACA,OACgB;AAChB,QAAM,OAAO,EAAE,GAAG,KAAA;AAClB,SAAO,KAAK,KAAK;AACjB,MAAI,kBAAkB,IAAsB,EAAE,WAAW,QAAQ,OAAO;AACxE,SAAO;AACT;AAEO,SAAS,aACd,MACA,OACgB;AAChB,MAAI,KAAK,KAAK,MAAM,OAAW,QAAO;AACtC,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,YAAY,KAAK,IAAI,OAAO,IAAA;AACzD;AAEO,SAAS,YACd,OACuC;AACvC,SAAQ,YAAsC,SAAS,KAAK;AAC9D;AAEO,SAAS,cAAc,MAAsB,OAAmB;AACrE,SAAO,MAAM,OAAO,CAAC,SAAS,YAAY,MAAM,IAAI,CAAC;AACvD;AAEO,SAAS,qBACd,OACA,OACA;AACA,QAAM,6BAAa,IAAA;AACnB,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,KAAK,UAAU,SAAS,SAAS,KAAK;AACpD,QAAI,OAAO,UAAU,YAAY,MAAM,OAAQ,QAAO,IAAI,KAAK;AAAA,EACjE;AACA,SAAO,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAC3E;"}