@gaunt-sloth/core 2.0.0-alpha.9 → 2.0.0-beta.0

package/dist/core/GthLangChainAgent.js.map

@@ -1 +1 @@
-{"version":3,"file":"GthLangChainAgent.js","sourceRoot":"","sources":["../../src/core/GthLangChainAgent.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAM1D;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,gBAAgB;IACrD,KAAK,CAAC,IAAI,CACR,OAA+B,EAC/B,QAAmB,EACnB,YAA8C;QAE9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,QAAQ,CAAC,+CAA+C,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;QAEhF,uDAAuD;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,cAAc,CAAC,kBAAkB,EAAE;YACjC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAEvE,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,uFAAuF;QACvF,4EAA4E;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC;QAC/E,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,YAAY,CACf,WAAW,CAAC,IAAI,EAChB,uHAAuH,CACxH,CAAC;QACJ,CAAC;QAED,+DAA+D;QAC/D,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAC/B,MAAM,aAAa,GACjB,CAAC,aAAa,IAAI,IAAI,CAAC,SAAS,EAAE,YAAY;YAC5C,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YACzD,CAAC,CAAC,EAAE,CAAC;QACT,QAAQ,CAAC,0BAA0B,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;QAE3D,wBAAwB;QACxB,MAAM,oBAAoB,GAAG,aAAa;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACzD,QAAQ,CAAC,6BAA6B,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC;QAErE,kFAAkF;QAClF,IAAI,KAAK,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,oBAAoB,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;YACtC,0FAA0F;YAC1F,sFAAsF;YACtF,wFAAwF;YACxF,wFAAwF;YACxF,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,KAAK;iBACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;iBACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;iBACtB,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,EAAE,iBAAiB,SAAS,EAAE,CAAC,CAAC;YAClE,QAAQ,CAAC,0BAA0B,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACnD,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,yBAAyB;QACzB,QAAQ,CAAC,yBAAyB,CAAC,CAAC;QAEpC,wDAAwD;QACxD,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB;YAC5D,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB;YACpC,8DAA8D;YAC9D,IAAI,CAAC,MAAM,CAAC,UAA+B,EAC3C,IAAI,CAAC,MAAM,CACZ;YACH,CAAC,CAAC,EAAE,CAAC;QAEP,yCAAyC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACvC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;YAChD,IAAI,EAAE,mCAAmC;YACzC,8DAA8D;YAC9D,UAAU,EAAE,CAAC,KAAU,EAAE,EAAE;gBACzB,cAAc,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;gBACzC,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC9D,IACE,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;oBACjC,WAAW,CAAC,UAAU;oBACtB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,CAAC,EAClC,CAAC;oBACD,YAAY,CACV,WAAW,CAAC,IAAI,EAChB,sBAAsB,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAClE,CAAC;gBACJ,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CAAC,CAAC;QAEH,6FAA6F;QAC7F,4FAA4F;QAC5F,+FAA+F;QAC/F,iGAAiG;QACjG,gGAAgG;QAChG,0FAA0F;QAC1F,4FAA4F;QAC5F,iGAAiG;QACjG,gGAAgG;QAChG,gGAAgG;QAChG,+FAA+F;QAC/F,gEAAgE;QAChE,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;YAC1C,IAAI,EAAE,2BAA2B;YACjC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBACvC,IAAI,CAAC;oBACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjC,QAAQ,CACN,4CAA4C,CAAC,CAAC,QAAQ,IAAI,SAAS,YAAY;4BAC7E,0BAA0B,CAAC,CAAC,OAAO,GAAG,CACzC,CAAC;wBACF,OAAO,IAAI,WAAW,CAAC;4BACrB,OAAO,EAAE,CAAC,CAAC,MAAM;4BACjB,8DAA8D;4BAC9D,YAAY,EAAG,OAAO,CAAC,QAAgB,EAAE,EAAE,IAAI,EAAE;4BACjD,MAAM,EAAE,OAAO;yBAChB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,CAAC,CAAC;gBACV,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,qFAAqF;QACrF,0FAA0F;QAC1F,MAAM,UAAU,GAAG,CAAC,kBAAkB,EAAE,GAAG,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;QAE3F,IAAI,CAAC,YAAY,CACf,WAAW,CAAC,IAAI,EAChB,sBAAsB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;QAEF,6FAA6F;QAC7F,2FAA2F;QAC3F,6FAA6F;QAC7F,8FAA8F;QAC9F,yFAAyF;QACzF,0FAA0F;QAC1F,oFAAoF;QACpF,+FAA+F;QAC/F,iFAAiF;QACjF,MAAM,UAAU,GACd,IAAI,CAAC,OAAO,KAAK,MAAM;YACrB,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;YAC7B,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM;gBACvB,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC7B,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,YAAY,GAChB,OAAO,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAEzF,6FAA6F;QAC7F,4CAA4C;QAC5C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;YACvB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;YACtB,KAAK;YACL,UAAU;YACV,YAAY;YACZ,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,QAAQ,CAAC,kCAAkC,CAAC,CAAC;IAC/C,CAAC;CACF"}
+{"version":3,"file":"GthLangChainAgent.js","sourceRoot":"","sources":["../../src/core/GthLangChainAgent.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAmC,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC9F,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,wBAAwB,EACxB,sBAAsB,EACtB,+BAA+B,EAC/B,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAA2B,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,wBAAwB,GAEzB,MAAM,WAAW,CAAC;AAMnB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,+BAA+B,CAC7C,oBAAoB,GAAW,2BAA2B;IAE1D,OAAO,gBAAgB,CAAC;QACtB,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,KAAK,CAAC;YAClB,8DAA8D;YAC9D,IAAI,EAAE,CAAC,KAAU,EAAE,EAAE;gBACnB,MAAM,QAAQ,GAAc,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,IAAI,WAAW,GAAG,CAAC,CAAC;gBACpB,IAAI,gBAAgB,GAAG,EAAE,CAAC;gBAC1B,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACxB,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;wBAChC,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;4BAC3B,WAAW,EAAE,CAAC;4BACd,IAAI,CAAC,gBAAgB,EAAE,CAAC;gCACtB,gBAAgB,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;4BACxE,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,+EAA+E;4BAC/E,6DAA6D;4BAC7D,MAAM;wBACR,CAAC;oBACH,CAAC;yBAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;wBACrC,yFAAyF;wBACzF,sFAAsF;wBACtF,0FAA0F;wBAC1F,uFAAuF;wBACvF,0FAA0F;wBAC1F,0FAA0F;wBAC1F,mFAAmF;wBACnF,6CAA6C;wBAC7C,SAAS;oBACX,CAAC;yBAAM,CAAC;wBACN,mFAAmF;wBACnF,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,WAAW,IAAI,oBAAoB,EAAE,CAAC;oBACxC,MAAM,SAAS,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBACxE,MAAM,MAAM,GACV,iBAAiB,WAAW,4DAA4D;wBACxF,+CAA+C;wBAC/C,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChD,0FAA0F;wBAC1F,sFAAsF,CAAC;oBACzF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC9D,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAY7C;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAA0D;IAE1D,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3D,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7E,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAChG,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,QAAQ,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAa;IAC3D,OAAO,GAAG,IAAI,GAAG,6BAA6B,GAAG,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAO,GAAyB,EAAE,EAClC,MAAkC;IAElC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,2BAA2B,CAAC;IACnE,OAAO,gBAAgB,CAAC;QACtB,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,KAAK,CAAC;YAClB,8DAA8D;YAC9D,IAAI,EAAE,CAAC,KAAU,EAAE,EAAE;gBACnB,oFAAoF;gBACpF,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;oBAAE,OAAO,SAAS,CAAC;gBACrC,MAAM,QAAQ,GAAc,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAEjF,uFAAuF;gBACvF,gFAAgF;gBAChF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyC,CAAC;gBAClE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;oBAC3B,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC/D,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;4BAChC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;4BAClB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;gCAC3B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gCACxD,6DAA6D;gCAC7D,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;4BACpE,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,6FAA6F;gBAC7F,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,IAAI,UAA8B,CAAC;gBACnC,IAAI,WAAW,GAAG,EAAE,CAAC;gBACrB,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACxB,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;wBAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,YAAsB,CAAC,CAAC;wBACtD,oFAAoF;wBACpF,IAAI,CAAC,IAAI;4BAAE,MAAM;wBACjB,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;4BAC7B,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC;4BACtB,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;4BACxB,MAAM,GAAG,CAAC,CAAC;wBACb,CAAC;6BAAM,IAAI,IAAI,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;4BACnC,MAAM,EAAE,CAAC;wBACX,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,kEAAkE;wBAC3E,CAAC;oBACH,CAAC;yBAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;wBACrC,SAAS,CAAC,4DAA4D;oBACxE,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,6DAA6D;oBACtE,CAAC;gBACH,CAAC;gBAED,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,GAAG,SAAS;oBAAE,OAAO,SAAS,CAAC;gBAErE,sFAAsF;gBACtF,wFAAwF;gBACxF,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,MAAM,GACV,iBAAiB,MAAM,6BAA6B,WAAW,wBAAwB;wBACvF,gFAAgF;wBAChF,kFAAkF;wBAClF,sFAAsF,CAAC;oBACzF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC9D,CAAC;gBAED,wFAAwF;gBACxF,6FAA6F;gBAC7F,qFAAqF;gBACrF,4FAA4F;gBAC5F,yEAAyE;gBACzE,IAAI,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,EAAE,CACN,2CAA2C,WAAW,6BAA6B;wBACjF,GAAG,MAAM,2EAA2E;wBACpF,uBAAuB,CAC1B,CAAC;gBACJ,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,gBAAgB;IACrD,KAAK,CAAC,IAAI,CACR,OAA+B,EAC/B,QAAmB,EACnB,YAA8C,EAC9C,OAA6B;QAE7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,kFAAkF;QAClF,2FAA2F;QAC3F,iCAAiC;QACjC,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,cAAc,CAAC;QAC9C,QAAQ,CAAC,+CAA+C,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;QAEhF,uDAAuD;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,cAAc,CAAC,kBAAkB,EAAE;YACjC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;SAC/B,CAAC,CAAC;QAEH,4FAA4F;QAC5F,2FAA2F;QAC3F,qDAAqD;QACrD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,YAAY,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,uFAAuF;QACvF,4EAA4E;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC;QAC/E,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,YAAY,CACf,uHAAuH,CACxH,CAAC;QACJ,CAAC;QAED,+DAA+D;QAC/D,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAC/B,MAAM,aAAa,GACjB,CAAC,aAAa,IAAI,IAAI,CAAC,SAAS,EAAE,YAAY;YAC5C,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YACzD,CAAC,CAAC,EAAE,CAAC;QACT,QAAQ,CAAC,0BAA0B,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;QAE3D,wBAAwB;QACxB,MAAM,oBAAoB,GAAG,aAAa;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACzD,QAAQ,CAAC,6BAA6B,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC;QAErE,kFAAkF;QAClF,IAAI,KAAK,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,oBAAoB,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,wFAAwF;YACxF,+EAA+E;YAC/E,wFAAwF;YACxF,yFAAyF;YACzF,4FAA4F;YAC5F,iCAAiC;YACjC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,KAAK;iBACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;iBACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;iBACtB,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;YAChD,QAAQ,CAAC,0BAA0B,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACnD,cAAc,CAAC,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,yBAAyB;QACzB,QAAQ,CAAC,yBAAyB,CAAC,CAAC;QAEpC,wDAAwD;QACxD,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB;YAC5D,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB;YACpC,8DAA8D;YAC9D,IAAI,CAAC,MAAM,CAAC,UAA+B,EAC3C,IAAI,CAAC,MAAM,CACZ;YACH,CAAC,CAAC,EAAE,CAAC;QAEP,yCAAyC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACvC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;YAChD,IAAI,EAAE,mCAAmC;YACzC,8DAA8D;YAC9D,UAAU,EAAE,CAAC,KAAU,EAAE,EAAE;gBACzB,cAAc,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;gBACzC,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC9D,IACE,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;oBACjC,WAAW,CAAC,UAAU;oBACtB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,CAAC,EAClC,CAAC;oBACD,YAAY,CACV,WAAW,CAAC,IAAI,EAChB,sBAAsB,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAClE,CAAC;gBACJ,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CAAC,CAAC;QAEH,4FAA4F;QAC5F,8FAA8F;QAC9F,gGAAgG;QAChG,2FAA2F;QAC3F,6FAA6F;QAC7F,iGAAiG;QACjG,iGAAiG;QACjG,yFAAyF;QACzF,gGAAgG;QAChG,+FAA+F;QAC/F,kGAAkG;QAClG,+FAA+F;QAC/F,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CACzE,CAAC;QACF,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;YAChD,IAAI,EAAE,6BAA6B;YACnC,8DAA8D;YAC9D,UAAU,EAAE,CAAC,KAAU,EAAE,EAAE;gBACzB,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC9D,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACrD,IAAI,WAAW,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC9E,MAAM,QAAQ,GAAG,iCAAiC,CAAC,WAAW,EAAE;oBAC9D,gBAAgB,EAAE,eAAe;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAC5B,QAAQ,CACN,8DAA8D,eAAe,CAC3E,QAAQ,CAAC,UAAU,IAAI,EAAE,CAC1B,EAAE,CACJ,CAAC;gBACF,uFAAuF;gBACvF,OAAO,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,CAAC;SACF,CAAC,CAAC;QAEH,+FAA+F;QAC/F,+FAA+F;QAC/F,iGAAiG;QACjG,gGAAgG;QAChG,0FAA0F;QAC1F,4FAA4F;QAC5F,iGAAiG;QACjG,gGAAgG;QAChG,gGAAgG;QAChG,+FAA+F;QAC/F,gEAAgE;QAChE,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;YAC1C,IAAI,EAAE,2BAA2B;YACjC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBACvC,IAAI,CAAC;oBACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjC,QAAQ,CACN,4CAA4C,CAAC,CAAC,QAAQ,IAAI,SAAS,YAAY;4BAC7E,0BAA0B,CAAC,CAAC,OAAO,GAAG,CACzC,CAAC;wBACF,OAAO,IAAI,WAAW,CAAC;4BACrB,OAAO,EAAE,CAAC,CAAC,MAAM;4BACjB,8DAA8D;4BAC9D,YAAY,EAAG,OAAO,CAAC,QAAgB,EAAE,EAAE,IAAI,EAAE;4BACjD,MAAM,EAAE,OAAO;yBAChB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,CAAC,CAAC;gBACV,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,2FAA2F;QAC3F,+FAA+F;QAC/F,6FAA6F;QAC7F,gGAAgG;QAChG,4FAA4F;QAC5F,6FAA6F;QAC7F,kGAAkG;QAClG,iGAAiG;QACjG,4FAA4F;QAC5F,iGAAiG;QACjG,+FAA+F;QAC/F,kGAAkG;QAClG,gGAAgG;QAChG,iGAAiG;QACjG,gGAAgG;QAChG,iGAAiG;QACjG,8FAA8F;QAC9F,2FAA2F;QAC3F,gEAAgE;QAChE,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;YAC7C,IAAI,EAAE,0BAA0B;YAChC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;gBACvC,IAAI,CAAC;oBACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IACE,CAAC,YAAY,KAAK;wBAClB,CAAC,CAAC,IAAI,KAAK,eAAe;wBAC1B,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EACjC,CAAC;wBACD,QAAQ,CAAC,sDAAsD,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC5E,OAAO,IAAI,WAAW,CAAC;4BACrB,OAAO,EAAE,CAAC,CAAC,OAAO;4BAClB,8DAA8D;4BAC9D,YAAY,EAAG,OAAO,CAAC,QAAgB,EAAE,EAAE,IAAI,EAAE;4BACjD,MAAM,EAAE,OAAO;yBAChB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,CAAC,CAAC;gBACV,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,4FAA4F;QAC5F,gGAAgG;QAChG,8FAA8F;QAC9F,yFAAyF;QACzF,+FAA+F;QAC/F,qDAAqD;QACrD,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;QAChD,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;YAC9C,IAAI,EAAE,2BAA2B;YACjC,8DAA8D;YAC9D,aAAa,EAAE,KAAK,EAAE,OAAY,EAAE,OAAY,EAAE,EAAE;gBAClD,sFAAsF;gBACtF,uFAAuF;gBACvF,yFAAyF;gBACzF,yFAAyF;gBACzF,qDAAqD;gBACrD,IAAI,MAAsC,CAAC;gBAC3C,IAAI,CAAC;oBACH,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;oBAC5C,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,qDAAqD;gBACvD,CAAC;gBACD,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;gBAClC,IAAI,CAAC,OAAO;oBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,CAAC;oBACH,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,2CAA2C;gBAC7C,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBACxC,IAAI,CAAC;oBACH,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;gBACjC,CAAC;gBAAC,MAAM,CAAC;oBACP,2CAA2C;gBAC7C,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC;SACF,CAAC,CAAC;QAEH,qFAAqF;QACrF,0FAA0F;QAC1F,iGAAiG;QACjG,iGAAiG;QACjG,+FAA+F;QAC/F,2FAA2F;QAC3F,qBAAqB;QACrB,gGAAgG;QAChG,6FAA6F;QAC7F,gGAAgG;QAChG,2FAA2F;QAC3F,kGAAkG;QAClG,4FAA4F;QAC5F,0FAA0F;QAC1F,8FAA8F;QAC9F,kGAAkG;QAClG,wFAAwF;QACxF,gGAAgG;QAChG,iGAAiG;QACjG,iDAAiD;QACjD,MAAM,eAAe,GAAG,+BAA+B,EAAE,CAAC;QAE1D,+FAA+F;QAC/F,iGAAiG;QACjG,kGAAkG;QAClG,kGAAkG;QAClG,2FAA2F;QAC3F,qFAAqF;QACrF,iGAAiG;QACjG,kGAAkG;QAClG,4FAA4F;QAC5F,4FAA4F;QAC5F,gGAAgG;QAChG,gCAAgC;QAChC,0CAA0C;QAC1C,sFAAsF;QACtF,wBAAwB;QACxB,MAAM,aAAa,GAAG,6BAA6B,CACjD,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QACtD,uFAAuF;QACvF,uFAAuF;QACvF,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CACxD,CAAC;QAEF,6FAA6F;QAC7F,sDAAsD;QACtD,gEAAgE;QAChE,2FAA2F;QAC3F,+FAA+F;QAC/F,qFAAqF;QACrF,4FAA4F;QAC5F,8FAA8F;QAC9F,uBAAuB;QACvB,EAAE;QACF,uEAAuE;QACvE,2FAA2F;QAC3F,yCAAyC;QACzC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,wBAAwB,CACrE,IAAI,CAAC,MAAM,IAAI,SAAS,EACxB,IAAI,CAAC,OAAO,CACb,CAAC;QACF,EAAE;QACF,yFAAyF;QACzF,gGAAgG;QAChG,yFAAyF;QACzF,uEAAuE;QACvE,EAAE;QACF,4FAA4F;QAC5F,6FAA6F;QAC7F,6FAA6F;QAC7F,4FAA4F;QAC5F,iGAAiG;QACjG,iGAAiG;QACjG,+FAA+F;QAC/F,EAAE;QACF,4EAA4E;QAC5E,oFAAoF;QACpF,0FAA0F;QAC1F,gCAAgC;QAChC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;QAC3E,MAAM,cAAc,GAAG,KAAK;aACzB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;aACzB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjF,8FAA8F;QAC9F,+FAA+F;QAC/F,6FAA6F;QAC7F,gGAAgG;QAChG,0FAA0F;QAC1F,+FAA+F;QAC/F,0BAA0B;QAC1B,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,6FAA6F;QAC7F,6FAA6F;QAC7F,0FAA0F;QAC1F,MAAM,UAAU,GAAG,gBAAgB;YACjC,CAAC,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YAC5D,CAAC,CAAC,YAAY,CAAC;QACjB,+DAA+D;QAC/D,MAAM,cAAc,GAAG,gBAAgB;YACrC,CAAC,CAAC,yBAAyB,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YAC1D,CAAC,CAAC,YAAY,CAAC;QACjB,iGAAiG;QACjG,0FAA0F;QAC1F,+FAA+F;QAC/F,8EAA8E;QAC9E,MAAM,kBAAkB,GACtB,cAAc,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAC;gBACE,wBAAwB,CAAC;oBACvB,WAAW,EAAE,MAAM,CAAC,WAAW,CAC7B,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;wBAC3B,IAAI;wBACJ,EAAE,gBAAgB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAA8B;qBACxE,CAAC,CACH;iBACF,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;QAED,yFAAyF;QACzF,6FAA6F;QAC7F,8FAA8F;QAC9F,8FAA8F;QAC9F,+FAA+F;QAC/F,4FAA4F;QAC5F,+FAA+F;QAC/F,gBAAgB;QAChB,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAE9D,wFAAwF;QACxF,+FAA+F;QAC/F,8FAA8F;QAC9F,sFAAsF;QACtF,4FAA4F;QAC5F,wFAAwF;QACxF,aAAa;QACb,MAAM,UAAU,GAAG;YACjB,kBAAkB;YAClB,qBAAqB;YACrB,eAAe;YACf,aAAa;YACb,GAAG,kBAAkB;YACrB,GAAG,oBAAoB;YACvB,wBAAwB;YACxB,wBAAwB;YACxB,sBAAsB;SACvB,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,sBAAsB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEpF,6FAA6F;QAC7F,2EAA2E;QAC3E,0FAA0F;QAC1F,oFAAoF;QACpF,+FAA+F;QAC/F,4FAA4F;QAC5F,+FAA+F;QAC/F,6FAA6F;QAC7F,kBAAkB;QAClB,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,gBAAgB,GACpB,OAAO,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAEzF,4FAA4F;QAC5F,8FAA8F;QAC9F,gGAAgG;QAChG,2FAA2F;QAC3F,+FAA+F;QAC/F,4FAA4F;QAC5F,+FAA+F;QAC/F,gGAAgG;QAChG,gGAAgG;QAChG,4CAA4C;QAC5C,MAAM,aAAa,GACjB,IAAI,CAAC,MAAM,CAAC,kBAAkB,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE3F,4FAA4F;QAC5F,iGAAiG;QACjG,+FAA+F;QAC/F,gGAAgG;QAChG,qFAAqF;QACrF,4FAA4F;QAC5F,gGAAgG;QAChG,8FAA8F;QAC9F,mBAAmB;QACnB,MAAM,eAAe,GACnB,IAAI,CAAC,OAAO,KAAK,MAAM;YACrB,CAAC,CAAC,wBAAwB,CACtB,iBAAiB,CAAC,aAAa,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC,EACvE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAC5B,aAAa,EACb,IAAI,CAAC,MAAM,CAAC,UAAU,CACvB;YACH,CAAC,CAAC,gBAAgB,CAAC;QAEvB,gGAAgG;QAChG,8FAA8F;QAC9F,6FAA6F;QAC7F,0FAA0F;QAC1F,6FAA6F;QAC7F,gGAAgG;QAChG,0FAA0F;QAC1F,0BAA0B;QAC1B,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAElF,4FAA4F;QAC5F,0FAA0F;QAC1F,8FAA8F;QAC9F,+FAA+F;QAC/F,qFAAqF;QACrF,0FAA0F;QAC1F,sFAAsF;QACtF,mDAAmD;QACnD,MAAM,eAAe,GAAG,aAAa;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,+BAA+B,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;QAE1F,6FAA6F;QAC7F,4CAA4C;QAC5C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;YACvB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;YACtB,KAAK;YACL,UAAU;YACV,YAAY;YACZ,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,QAAQ,CAAC,kCAAkC,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/core/approvals/annotations.d.ts

@@ -0,0 +1,122 @@
+/**
+ * @module core/approvals/annotations
+ *
+ * EXT-70 (spec §4.7, §4.7.1, §4.7.5) — **the one derivation of a tool call's effective annotation
+ * set**, and the only place trust is applied to an annotation. Everything downstream — the §4.7.2
+ * table, `hint` entries (§3.1), exposure (§4.7.6), the snapshot a sticky grant records (§4.7.4) —
+ * reads what {@link createEffectiveToolAnnotationSource} computes and never re-derives it. A second
+ * derivation is how a gate and a display come to disagree about what a tool is.
+ *
+ * ## Trust is decided by provenance, not by the annotation
+ *
+ * An annotation we did not write is a **claim, not a credential**: a third-party server's
+ * `readOnlyHint=true` exempts it from nothing, because a gate that honours it unconditionally is a
+ * gate any server can opt itself out of. So:
+ *
+ * - **our own tools are trusted** — a `tool` subject is a built-in or a tool the user wired into
+ *   their own config, and its annotations are read verbatim;
+ * - **an MCP server's are trusted per hint**, and only where the user said so in
+ *   `approvals.mcp` (§9). Per hint, never per server: believing a server's `readOnlyHint` while
+ *   disbelieving its `openWorldHint` is a coherent position and the common one.
+ *
+ * Every untrusted hint takes the MCP fail-closed default ({@link MCP_FAIL_CLOSED_ANNOTATIONS}), so
+ * **an untrusted server's effective set IS that constant** and its declarations cannot perturb any
+ * rule. They begin to matter at the moment the user trusts them — which is also the only moment
+ * they could start lying usefully.
+ *
+ * ## The one derivation on top
+ *
+ * **Where effective `readOnlyHint` is true, effective `destructiveHint` is false.** That is the MCP
+ * schema's own rule that `destructiveHint` is meaningful only when `readOnlyHint == false`, applied
+ * once here so no consumer ever reads a hint the specification itself calls meaningless.
+ *
+ * ## What a trusted annotation can buy
+ *
+ * A trusted external annotation may only ever bring a tool **up to** what the same annotation
+ * grants one of our own — never more. That holds by construction rather than by a rule: both
+ * provenances resolve into the same four booleans through this one function, so a fully-trusted
+ * server's declaration and a built-in's identical declaration produce identical effective sets, and
+ * there is no path by which the external one could produce something the internal one could not.
+ */
+import { type McpApprovalsConfig, type ToolAnnotationHint } from '#src/config/shell-policy.js';
+import { type EffectiveToolAnnotationSource } from '#src/core/approvals/matcher.js';
+/**
+ * What a tool **declares** about itself: the four MCP `ToolAnnotations` booleans, each optional
+ * because a tool that says nothing about a hint is the ordinary case and takes the fail-closed
+ * default. Distinct from {@link EffectiveToolAnnotations}, where all four are present, because the
+ * gap between *declared* and *effective* is exactly what trust decides.
+ */
+export interface DeclaredToolAnnotations {
+    readOnlyHint?: boolean;
+    destructiveHint?: boolean;
+    idempotentHint?: boolean;
+    openWorldHint?: boolean;
+}
+/**
+ * Where declared annotations come from, split by the provenance that decides their trust.
+ *
+ * Both members are optional and both may return `undefined` for a tool they do not know, which
+ * yields the fail-closed defaults — never "trusted, declaring nothing". An absent lookup is
+ * therefore the safe configuration rather than a broken one, and a source built with neither member
+ * is exactly the constant fail-closed source.
+ */
+export interface DeclaredToolAnnotationLookup {
+    /**
+     * Our own tools, by tool name. Whatever this returns is trusted **verbatim** — no per-hint
+     * filter applies, because we (or the user, in their own config) authored it.
+     */
+    builtIn?: (name: string) => DeclaredToolAnnotations | undefined;
+    /**
+     * One MCP server's declaration for one tool, from its `tools/list` response. `server` is the
+     * user's own `mcpServers` config key (§4.7.5), which is also the key its trust is looked up
+     * under; nothing a server says about its own name ever participates.
+     */
+    mcp?: (server: string, name: string) => DeclaredToolAnnotations | undefined;
+}
+/** Everything {@link createEffectiveToolAnnotationSource} needs. Both parts optional. */
+export interface EffectiveToolAnnotationOptions {
+    /** The resolved `approvals.mcp` block (§9), or `undefined` to trust nothing external. */
+    mcp?: McpApprovalsConfig;
+    /** The declared-annotation sources. Absent members simply declare nothing. */
+    declared?: DeclaredToolAnnotationLookup;
+}
+/**
+ * §4.7.1/§9 — the hints the user believes from ONE server, by the user's own config key.
+ *
+ * **`defaults` applies to servers not named under `servers`.** A server that names itself states
+ * its relationship in full, so `{"jira": {}}` trusts nothing however permissive `defaults` is.
+ * The alternative — falling back to `defaults` field by field — would mean a server named with an
+ * empty body silently inherits trust, and trust by omission is the failure this section exists to
+ * prevent.
+ *
+ * The lookup is an **own-property** one, and that is load-bearing rather than defensive noise.
+ * `servers` is a plain user-authored map, so a server key that collides with an `Object.prototype`
+ * member (`constructor`, `toString`, `hasOwnProperty`, `valueOf`) would otherwise resolve to the
+ * INHERITED value — truthy, so `defaults` is never consulted and that one server silently gets a
+ * relationship nobody wrote. Here that lands fail-closed; on the `expose` field [[EXT-73]] adds to
+ * this same block it lands fail-OPEN, because an absent `expose` means "expose every tool". A
+ * server's identity is the user's own config key (§4.7.5) and every such key must resolve by the
+ * same rule.
+ *
+ * **{@link UNRESOLVED_MCP_SERVER} trusts nothing, whatever `defaults` says.** A call whose server
+ * could not be resolved has no identity, so there is no relationship for it to inherit: it is not
+ * a server the user declined to name, it is a server nobody can name. Because the sentinel is
+ * `z.string().min(1)`-unspellable it can never appear under `servers`, so without this it would
+ * fall through to `defaults` and a permissive default would hand an *unattributable* tool the
+ * trust its user granted to real, identified ones — believing a tool that claims to be harmless
+ * precisely where we cannot say whose claim it is. The guard belongs here, where §4.7.5's "no
+ * trust can be granted to it" is asserted, rather than only in whichever lookup happens to run
+ * next.
+ */
+export declare function trustedAnnotationHints(mcp: McpApprovalsConfig | undefined, server: string): readonly ToolAnnotationHint[];
+/**
+ * EXT-70 §4.7.1 — build the {@link EffectiveToolAnnotationSource} the matcher reads a `hint` entry
+ * through, from the user's `approvals.mcp` block and whatever declared annotations are available.
+ *
+ * **It never returns `undefined`.** The contract admits it for a source that genuinely cannot
+ * answer, but this one always can: a tool nothing has declared for is not unknown, it is
+ * fail-closed — a writer that destroys, is not idempotent and reaches the open world. Answering
+ * with that constant is both more useful and no less safe than answering "undecidable", which the
+ * matcher would resolve in the same direction anyway.
+ */
+export declare function createEffectiveToolAnnotationSource(options?: EffectiveToolAnnotationOptions): EffectiveToolAnnotationSource;

package/dist/core/approvals/annotations.js

@@ -0,0 +1,137 @@
+/**
+ * @module core/approvals/annotations
+ *
+ * EXT-70 (spec §4.7, §4.7.1, §4.7.5) — **the one derivation of a tool call's effective annotation
+ * set**, and the only place trust is applied to an annotation. Everything downstream — the §4.7.2
+ * table, `hint` entries (§3.1), exposure (§4.7.6), the snapshot a sticky grant records (§4.7.4) —
+ * reads what {@link createEffectiveToolAnnotationSource} computes and never re-derives it. A second
+ * derivation is how a gate and a display come to disagree about what a tool is.
+ *
+ * ## Trust is decided by provenance, not by the annotation
+ *
+ * An annotation we did not write is a **claim, not a credential**: a third-party server's
+ * `readOnlyHint=true` exempts it from nothing, because a gate that honours it unconditionally is a
+ * gate any server can opt itself out of. So:
+ *
+ * - **our own tools are trusted** — a `tool` subject is a built-in or a tool the user wired into
+ *   their own config, and its annotations are read verbatim;
+ * - **an MCP server's are trusted per hint**, and only where the user said so in
+ *   `approvals.mcp` (§9). Per hint, never per server: believing a server's `readOnlyHint` while
+ *   disbelieving its `openWorldHint` is a coherent position and the common one.
+ *
+ * Every untrusted hint takes the MCP fail-closed default ({@link MCP_FAIL_CLOSED_ANNOTATIONS}), so
+ * **an untrusted server's effective set IS that constant** and its declarations cannot perturb any
+ * rule. They begin to matter at the moment the user trusts them — which is also the only moment
+ * they could start lying usefully.
+ *
+ * ## The one derivation on top
+ *
+ * **Where effective `readOnlyHint` is true, effective `destructiveHint` is false.** That is the MCP
+ * schema's own rule that `destructiveHint` is meaningful only when `readOnlyHint == false`, applied
+ * once here so no consumer ever reads a hint the specification itself calls meaningless.
+ *
+ * ## What a trusted annotation can buy
+ *
+ * A trusted external annotation may only ever bring a tool **up to** what the same annotation
+ * grants one of our own — never more. That holds by construction rather than by a rule: both
+ * provenances resolve into the same four booleans through this one function, so a fully-trusted
+ * server's declaration and a built-in's identical declaration produce identical effective sets, and
+ * there is no path by which the external one could produce something the internal one could not.
+ */
+import { TOOL_ANNOTATION_HINTS, } from '#src/config/shell-policy.js';
+import { MCP_FAIL_CLOSED_ANNOTATIONS, } from '#src/core/approvals/matcher.js';
+import { UNRESOLVED_MCP_SERVER } from '#src/core/approvals/mcpSubjects.js';
+/**
+ * §4.7.1/§9 — the hints the user believes from ONE server, by the user's own config key.
+ *
+ * **`defaults` applies to servers not named under `servers`.** A server that names itself states
+ * its relationship in full, so `{"jira": {}}` trusts nothing however permissive `defaults` is.
+ * The alternative — falling back to `defaults` field by field — would mean a server named with an
+ * empty body silently inherits trust, and trust by omission is the failure this section exists to
+ * prevent.
+ *
+ * The lookup is an **own-property** one, and that is load-bearing rather than defensive noise.
+ * `servers` is a plain user-authored map, so a server key that collides with an `Object.prototype`
+ * member (`constructor`, `toString`, `hasOwnProperty`, `valueOf`) would otherwise resolve to the
+ * INHERITED value — truthy, so `defaults` is never consulted and that one server silently gets a
+ * relationship nobody wrote. Here that lands fail-closed; on the `expose` field [[EXT-73]] adds to
+ * this same block it lands fail-OPEN, because an absent `expose` means "expose every tool". A
+ * server's identity is the user's own config key (§4.7.5) and every such key must resolve by the
+ * same rule.
+ *
+ * **{@link UNRESOLVED_MCP_SERVER} trusts nothing, whatever `defaults` says.** A call whose server
+ * could not be resolved has no identity, so there is no relationship for it to inherit: it is not
+ * a server the user declined to name, it is a server nobody can name. Because the sentinel is
+ * `z.string().min(1)`-unspellable it can never appear under `servers`, so without this it would
+ * fall through to `defaults` and a permissive default would hand an *unattributable* tool the
+ * trust its user granted to real, identified ones — believing a tool that claims to be harmless
+ * precisely where we cannot say whose claim it is. The guard belongs here, where §4.7.5's "no
+ * trust can be granted to it" is asserted, rather than only in whichever lookup happens to run
+ * next.
+ */
+export function trustedAnnotationHints(mcp, server) {
+    if (server === UNRESOLVED_MCP_SERVER)
+        return [];
+    const servers = mcp?.servers;
+    const named = servers && Object.hasOwn(servers, server) ? servers[server] : undefined;
+    const relationship = named ?? mcp?.defaults;
+    return relationship?.trustAnnotations ?? [];
+}
+/**
+ * §4.7.1 — the derivation that rides on top of every effective set: where `readOnlyHint` is true,
+ * `destructiveHint` is false. Applied to BOTH provenances, since it is a statement about the
+ * vocabulary rather than about who supplied it.
+ */
+function applyReadOnlyDerivation(annotations) {
+    return annotations.readOnlyHint ? { ...annotations, destructiveHint: false } : annotations;
+}
+/**
+ * Resolve one tool's effective set: each hint independently takes the declared value where that
+ * hint is trusted from that provenance, and the MCP fail-closed default everywhere else.
+ *
+ * A declared value that is not a boolean is treated as not declared — a `tools/list` response is
+ * network input, and a string `"true"` must not become a `true` the gate acts on.
+ */
+function effectiveAnnotations(declared, trusted) {
+    const resolved = { ...MCP_FAIL_CLOSED_ANNOTATIONS };
+    if (declared) {
+        for (const hint of TOOL_ANNOTATION_HINTS) {
+            if (!trusted.has(hint))
+                continue;
+            const value = declared[hint];
+            if (typeof value === 'boolean')
+                resolved[hint] = value;
+        }
+    }
+    return applyReadOnlyDerivation(resolved);
+}
+/** Our own tools are trusted on every hint. */
+const ALL_HINTS = new Set(TOOL_ANNOTATION_HINTS);
+/**
+ * EXT-70 §4.7.1 — build the {@link EffectiveToolAnnotationSource} the matcher reads a `hint` entry
+ * through, from the user's `approvals.mcp` block and whatever declared annotations are available.
+ *
+ * **It never returns `undefined`.** The contract admits it for a source that genuinely cannot
+ * answer, but this one always can: a tool nothing has declared for is not unknown, it is
+ * fail-closed — a writer that destroys, is not idempotent and reaches the open world. Answering
+ * with that constant is both more useful and no less safe than answering "undecidable", which the
+ * matcher would resolve in the same direction anyway.
+ */
+export function createEffectiveToolAnnotationSource(options = {}) {
+    const { mcp, declared } = options;
+    return (subject) => {
+        // Both branches are spelled out, and the TRUSTED one is never the fall-through. A trusted path
+        // reached by `else` silently widens the moment a third subject kind appears: the new kind would
+        // inherit read-everything-verbatim without anyone deciding that it should. The tail below is
+        // unreachable while the union has two members, and is what a third one would land on instead.
+        if (subject.kind === 'mcpTool') {
+            const trusted = new Set(trustedAnnotationHints(mcp, subject.server));
+            return effectiveAnnotations(declared?.mcp?.(subject.server, subject.name), trusted);
+        }
+        if (subject.kind === 'tool') {
+            return effectiveAnnotations(declared?.builtIn?.(subject.name), ALL_HINTS);
+        }
+        return { ...MCP_FAIL_CLOSED_ANNOTATIONS };
+    };
+}
+//# sourceMappingURL=annotations.js.map

package/dist/core/approvals/annotations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"annotations.js","sourceRoot":"","sources":["../../../src/core/approvals/annotations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EAEL,qBAAqB,GAEtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAGL,2BAA2B,GAG5B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AA6C3E;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAmC,EACnC,MAAc;IAEd,IAAI,MAAM,KAAK,qBAAqB;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,MAAM,YAAY,GAAG,KAAK,IAAI,GAAG,EAAE,QAAQ,CAAC;IAC5C,OAAO,YAAY,EAAE,gBAAgB,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,WAAqC;IACpE,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;AAC7F,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAC3B,QAA6C,EAC7C,OAAwC;IAExC,MAAM,QAAQ,GAA6B,EAAE,GAAG,2BAA2B,EAAE,CAAC;IAC9E,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,+CAA+C;AAC/C,MAAM,SAAS,GAAoC,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAElF;;;;;;;;;GASG;AACH,MAAM,UAAU,mCAAmC,CACjD,OAAO,GAAmC,EAAE;IAE5C,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAElC,OAAO,CAAC,OAAqD,EAA4B,EAAE;QACzF,+FAA+F;QAC/F,gGAAgG;QAChG,6FAA6F;QAC7F,8FAA8F;QAC9F,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACrE,OAAO,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,GAAG,2BAA2B,EAAE,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/approvals/grants.d.ts

@@ -0,0 +1,216 @@
+import type { ApprovalEntry, McpToolApprovalEntry, ShellApprovalEntry, ToolApprovalEntry, ToolAnnotationHint } from '#src/config/shell-policy.js';
+import type { ShellApprovalGateNotice } from '#src/config/shell-policy.js';
+import { type EffectiveToolAnnotations, type McpToolApprovalSubject, type ToolApprovalSubject } from '#src/core/approvals/matcher.js';
+import { type ToolApprovalScope } from '#src/core/types.js';
+/**
+ * The scopes a grant can be REMEMBERED at. `once` is absent by construction: it persists nothing,
+ * so it never becomes a grant.
+ */
+export type ApprovalGrantScope = Exclude<ToolApprovalScope, 'once'>;
+/**
+ * §3 — one thing the human granted: the entry that will be matched, plus what the approvals UI
+ * must be able to show about it (*what* was granted, *when*, and *at what scope*).
+ *
+ * The metadata is display only. The `entry` is the whole of what decides.
+ */
+export interface ApprovalGrant {
+    /** §3.1 — the entry, in the one grammar. */
+    entry: ApprovalEntry;
+    /** ISO-8601 instant the grant was made. */
+    grantedAt: string;
+    /** `session` for the life of this runner instance, `always` for the persisted store. */
+    scope: ApprovalGrantScope;
+    /**
+     * §4.7.4 — **the effective annotation set (§4.7.1) this tool grant was made under**, so a later
+     * `tools/list` that weakens it can be seen to have done so ({@link annotationWeakenings}) and the
+     * approvals UI can show what the user believed they were granting.
+     *
+     * Absent on a `shell` grant, which has no annotations, and on a tool grant restored from a file
+     * written before this field existed — in both cases there is nothing to compare, so the grant
+     * simply stands.
+     *
+     * **A private copy, always**, made on the way into the store: an effective set is something the
+     * source may hand out afresh or a caller may hold, and a snapshot that aliased either would let
+     * one grant's record be rewritten by something outside it — which is the same class of bug as a
+     * source returning the shared fail-closed constant instead of a copy.
+     */
+    annotations?: EffectiveToolAnnotations;
+}
+/**
+ * §3.1/§6 — the entry the escalation menu writes for a shell command: **that command, and only
+ * that command**.
+ *
+ * The single place a menu grant's entry is built, so the line the prompt shows the human ("this is
+ * what will be stored") and the line that lands in the store cannot drift apart.
+ */
+export declare function shellGrantEntry(command: string): ShellApprovalEntry;
+/**
+ * §4.7.4/§6 — the entry the escalation menu writes for a **tool** call: the tool's identity, plus
+ * the host where the call carries one.
+ *
+ * The counterpart of {@link shellGrantEntry} and the single place a tool grant's entry is built, so
+ * the line the prompt shows the human and the line that lands in the store cannot drift apart.
+ *
+ * **Identity, never arguments.** A grant recording a full argument signature would never match a
+ * second time — not a narrower grant, a useless one. That is knowingly broader than the shell's
+ * exact-command grant, with one bound: on the shell path §4.6's escape carries the host inside the
+ * command string, so it is host-scoped by construction, while a tool-identity-only grant on a fetch
+ * tool would be every host, forever.
+ *
+ * `server` on an `mcpTool` grant is the user's own `mcpServers` config key (§4.7.5). Nothing a
+ * server declares about its own name participates, and a grant for one server's tool can never be
+ * claimed by another server's same-named tool because the other server sits under a different key.
+ *
+ * **Returns `null` for a call whose server could not be resolved.** {@link UNRESOLVED_MCP_SERVER}
+ * is the empty string, which `server` (`z.string().min(1)`) cannot hold: such an entry would be
+ * written to the file and then silently dropped by the grammar's own validator on the next read, so
+ * the human would be told their approval was remembered when it was not. A call nobody can attribute
+ * to a server is not one anything can remember.
+ */
+export declare function toolGrantEntry(subject: ToolApprovalSubject | McpToolApprovalSubject): ToolApprovalEntry | McpToolApprovalEntry | null;
+/**
+ * §4.7.4 — which hints moved in the weakening direction between the set a grant was made under and
+ * the set that holds now. Empty means the grant still stands.
+ *
+ * **Only the four booleans are compared, so schema and description changes invalidate nothing** —
+ * not by a rule that exempts them, but because a snapshot is four booleans and a description is not
+ * one of them. Descriptions churn on every server release, and a grant that dissolved on churn
+ * would teach users that grants are worthless.
+ *
+ * **An untrusted server's declaration change likewise invalidates nothing**, again by construction:
+ * §4.7.1 makes an untrusted server's effective set the constant fail-closed default, so both sides
+ * of this comparison are that constant however the server re-declares itself. Only a **trusted**
+ * server can move an effective value — which is exactly where invalidation matters, since the
+ * trusted server is the one whose rug-pull would otherwise ride an existing grant.
+ */
+export declare function annotationWeakenings(snapshot: EffectiveToolAnnotations, current: EffectiveToolAnnotations): ToolAnnotationHint[];
+/**
+ * §4.7.1/§4.7.4 — **can WITHDRAWING trust in this hint weaken an effective set?**
+ *
+ * Withdrawing trust pushes a hint back to its MCP fail-closed default, and every weakening move
+ * *ends* at that default, so the answer does not depend on what a server declared: it is exactly
+ * whether the move (not-the-default → the default) is one of {@link WEAKENING_MOVES}. Three of the
+ * four hints answer yes — `readOnlyHint`, `openWorldHint` and `destructiveHint`, whose fail-closed
+ * default is `true`, so a server whose `destructiveHint: false` was believed becomes destructive
+ * again the moment it is not. `idempotentHint` is the only one that answers no, because no
+ * weakening move names it.
+ *
+ * **It asks {@link annotationWeakenings} rather than restating the table.** A second statement of
+ * which moves weaken is how a warning comes to describe a rule the gate no longer has — which
+ * matters most here, since this decides whether the human is told their saved approvals are about
+ * to be withdrawn.
+ */
+export declare function trustWithdrawalWeakens(hint: ToolAnnotationHint): boolean;
+/**
+ * §4.7.4 — the notice a weakened grant is removed with. **It names the tool, the server and the
+ * hint that moved**, because the human approved a tool *as annotated*: a tool that re-annotates
+ * itself into a more dangerous shape is a different proposition wearing the same name, and a notice
+ * that did not say which name changed would be indistinguishable from the gate malfunctioning.
+ *
+ * It takes the **entry** rather than the call's subject, so it describes the grant that was actually
+ * withdrawn — including its host bound, where it had one. One call may withdraw both a host-bound
+ * grant and a tool-only one, and two notices that could not be told apart would be worse than one.
+ * The entry is rendered by {@link describeApprovalEntry}, the same one-liner every other provenance
+ * message uses.
+ */
+export declare function describeWeakenedGrant(entry: ApprovalEntry, weakened: readonly ToolAnnotationHint[], snapshot: EffectiveToolAnnotations, current: EffectiveToolAnnotations): string;
+/**
+ * A set of grants with entry-identity semantics. Pure data + membership: it holds what the human
+ * granted and answers *is this the same grant*, never *does this grant cover that command*.
+ */
+export declare class ApprovalGrantStore {
+    private readonly grants;
+    constructor(initial?: readonly ApprovalGrant[]);
+    /**
+     * Add a grant. Returns whether it was new — an identical entry is not stored twice.
+     *
+     * The {@link ApprovalGrant.annotations} snapshot is **copied on the way in**, so what the store
+     * holds is private to this grant whatever the caller passed: the effective set may be a live
+     * object the caller keeps, or (were a source ever to regress) the shared fail-closed constant, and
+     * a store aliasing either would let one grant's record be rewritten from outside it. Copying here
+     * rather than at each call site makes that structural instead of a habit every caller must keep.
+     */
+    add(grant: ApprovalGrant): boolean;
+    /**
+     * The grant stored under this entry's identity, or `undefined`.
+     *
+     * **Identity, never a match decision** — the same de-duplication question {@link add} asks. It
+     * answers *"is this the same grant"*, and whether a grant covers a call remains
+     * `resolveApprovalRules`'s alone.
+     */
+    find(entry: ApprovalEntry): ApprovalGrant | undefined;
+    /**
+     * Drop the grant stored under this entry's identity. Returns whether one was there.
+     *
+     * §4.7.4's invalidation is a **removal** rather than a skip, and that is load-bearing: {@link add}
+     * de-duplicates by entry identity, so a grant left in place while being ignored would silently
+     * swallow the human's re-approval of the same tool — the grant would appear to be re-made and the
+     * stale snapshot would keep invalidating it.
+     */
+    remove(entry: ApprovalEntry): boolean;
+    /** Every grant, in the order they were made. */
+    list(): ApprovalGrant[];
+    /** Just the entries, for handing to the matcher as one of its rule lists. */
+    entries(): ApprovalEntry[];
+    /** How many grants are held. */
+    size(): number;
+}
+/** Optional seams for {@link PersistedApprovalGrants}. */
+export interface PersistedApprovalGrantsOptions {
+    /**
+     * Where the v1→v2 migration notice goes — the established {@link ShellApprovalGateNotice} shape
+     * the runner forwards to `statusUpdate`. Absent means the migration happens silently, which is
+     * why the runner always passes one.
+     */
+    onNotice?: (notice: ShellApprovalGateNotice) => void;
+}
+/**
+ * The persisted (`always`) grant store, backed by a JSON file whose path is injected (the runner
+ * resolves it via fileUtils → `.gsloth/.gsloth-settings/shell-allowlist.json`) so tests can point it
+ * at a temp dir.
+ *
+ * ## The v1 migration, and the direction it goes
+ *
+ * The shipped v1 file held `prefixes: string[]` — classified command PREFIXES, so a stored
+ * `npm test` also auto-approved `npm test --watch`. Each prefix migrates to an **`exact` entry for
+ * the same string**, with **one** notice naming the file.
+ *
+ * That narrows what the file grants, on purpose: a v1 prefix was broader than what the human was
+ * actually shown when they answered the prompt, so narrowing it costs at worst a re-prompt and
+ * never an execution — the direction every ambiguity in this design resolves. The migrated file is
+ * rewritten as v2 immediately, so the notice is a one-time event rather than a per-session one; a
+ * write that fails (read-only checkout) is not fatal — the grants are in force for this session and
+ * the notice simply appears again next time.
+ */
+export declare class PersistedApprovalGrants {
+    private readonly store;
+    private readonly filePath;
+    constructor(filePath: string, options?: PersistedApprovalGrantsOptions);
+    private static load;
+    /** Each v1 prefix → an `exact` entry for the same string, with ONE notice naming the file. */
+    private static migrateFromV1;
+    /** Every grant. */
+    list(): ApprovalGrant[];
+    /** Just the entries, for handing to the matcher as one of its rule lists. */
+    entries(): ApprovalEntry[];
+    /** How many grants are persisted. */
+    size(): number;
+    /** Add a grant and persist the whole store. A duplicate entry rewrites nothing. */
+    add(grant: ApprovalGrant): void;
+    /** The grant held under this entry's identity, or `undefined`. */
+    find(entry: ApprovalEntry): ApprovalGrant | undefined;
+    /**
+     * Drop the grant held under this entry's identity and rewrite the file. Returns whether one was
+     * there.
+     *
+     * The write is what makes §4.7.4's invalidation a one-time event: a removal held only in memory
+     * would be undone by the next session reloading the same stale snapshot, so the user would be
+     * told their grant had been withdrawn once per session, forever.
+     */
+    remove(entry: ApprovalEntry): boolean;
+    /**
+     * Write the file. Never throws: the grants are already in force for this session, and a
+     * read-only checkout must not end a run over a bookkeeping write.
+     */
+    private tryPersist;
+}