@google/gemini-cli-core 0.39.0 → 0.39.1

package/dist/src/utils/trust.js

@@ -0,0 +1,276 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as crypto from 'node:crypto';
+import { lock } from 'proper-lockfile';
+import stripJsonComments from 'strip-json-comments';
+import { Storage } from '../config/storage.js';
+import { normalizePath, isSubpath } from './paths.js';
+import { FatalConfigError, getErrorMessage } from './errors.js';
+import { coreEvents } from './events.js';
+import { ideContextStore } from '../ide/ideContext.js';
+export var TrustLevel;
+(function (TrustLevel) {
+    TrustLevel["TRUST_FOLDER"] = "TRUST_FOLDER";
+    TrustLevel["TRUST_PARENT"] = "TRUST_PARENT";
+    TrustLevel["DO_NOT_TRUST"] = "DO_NOT_TRUST";
+})(TrustLevel || (TrustLevel = {}));
+export function isTrustLevel(value) {
+    return (typeof value === 'string' &&
+        Object.values(TrustLevel).some((v) => v === value));
+}
+/**
+ * Checks if a path is trusted based on headless mode, folder trust settings,
+ * IDE context, and local configuration file.
+ */
+export function checkPathTrust(options) {
+    if (process.env['GEMINI_CLI_TRUST_WORKSPACE'] === 'true') {
+        return { isTrusted: true, source: 'env' };
+    }
+    if (!options.isFolderTrustEnabled) {
+        return { isTrusted: true, source: undefined };
+    }
+    const ideTrust = ideContextStore.get()?.workspaceState?.isTrusted;
+    if (ideTrust !== undefined) {
+        return { isTrusted: ideTrust, source: 'ide' };
+    }
+    const folders = loadTrustedFolders();
+    if (folders.errors.length > 0) {
+        const errorMessages = folders.errors.map((error) => `Error in ${error.path}: ${error.message}`);
+        throw new FatalConfigError(`${errorMessages.join('\n')}\nPlease fix the configuration file and try again.`);
+    }
+    const isTrusted = folders.isPathTrusted(options.path);
+    return {
+        isTrusted,
+        source: isTrusted !== undefined ? 'file' : undefined,
+    };
+}
+const realPathCache = new Map();
+/**
+ * Parses the trusted folders JSON content, stripping comments.
+ */
+function parseTrustedFoldersJson(content) {
+    return JSON.parse(stripJsonComments(content));
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * FOR TESTING PURPOSES ONLY.
+ * Clears the real path cache.
+ */
+export function clearRealPathCacheForTesting() {
+    realPathCache.clear();
+}
+function getRealPath(location) {
+    let realPath = realPathCache.get(location);
+    if (realPath !== undefined) {
+        return realPath;
+    }
+    try {
+        realPath = fs.existsSync(location) ? fs.realpathSync(location) : location;
+    }
+    catch {
+        realPath = location;
+    }
+    realPathCache.set(location, realPath);
+    return realPath;
+}
+export class LoadedTrustedFolders {
+    user;
+    errors;
+    constructor(user, errors) {
+        this.user = user;
+        this.errors = errors;
+    }
+    get rules() {
+        return Object.entries(this.user.config).map(([path, trustLevel]) => ({
+            path,
+            trustLevel,
+        }));
+    }
+    /**
+     * Returns true or false if the path should be "trusted" based on the configuration.
+     *
+     * @param location path
+     * @param config optional config override
+     * @returns boolean if trusted/distrusted, undefined if no rule matches
+     */
+    isPathTrusted(location, config) {
+        const configToUse = config ?? this.user.config;
+        // Resolve location to its realpath for canonical comparison
+        const realLocation = getRealPath(location);
+        const normalizedLocation = normalizePath(realLocation);
+        let longestMatchLen = -1;
+        let longestMatchTrust = undefined;
+        for (const [rulePath, trustLevel] of Object.entries(configToUse)) {
+            const effectivePath = trustLevel === TrustLevel.TRUST_PARENT
+                ? path.dirname(rulePath)
+                : rulePath;
+            // Resolve effectivePath to its realpath for canonical comparison
+            const realEffectivePath = getRealPath(effectivePath);
+            const normalizedEffectivePath = normalizePath(realEffectivePath);
+            if (isSubpath(normalizedEffectivePath, normalizedLocation)) {
+                if (rulePath.length > longestMatchLen) {
+                    longestMatchLen = rulePath.length;
+                    longestMatchTrust = trustLevel;
+                }
+            }
+        }
+        if (longestMatchTrust === TrustLevel.DO_NOT_TRUST)
+            return false;
+        if (longestMatchTrust === TrustLevel.TRUST_FOLDER ||
+            longestMatchTrust === TrustLevel.TRUST_PARENT) {
+            return true;
+        }
+        return undefined;
+    }
+    async setValue(folderPath, trustLevel) {
+        if (this.errors.length > 0) {
+            const errorMessages = this.errors.map((error) => `Error in ${error.path}: ${error.message}`);
+            throw new FatalConfigError(`Cannot update trusted folders because the configuration file is invalid:\n${errorMessages.join('\n')}\nPlease fix the file manually before trying to update it.`);
+        }
+        const dirPath = path.dirname(this.user.path);
+        if (!fs.existsSync(dirPath)) {
+            await fs.promises.mkdir(dirPath, { recursive: true });
+        }
+        // lockfile requires the file to exist
+        if (!fs.existsSync(this.user.path)) {
+            await fs.promises.writeFile(this.user.path, JSON.stringify({}, null, 2), {
+                // Restrict file access to read/write for the owner only
+                mode: 0o600,
+            });
+        }
+        const release = await lock(this.user.path, {
+            retries: {
+                retries: 10,
+                minTimeout: 100,
+            },
+        });
+        const normalizedPath = normalizePath(folderPath);
+        const originalTrustLevel = this.user.config[normalizedPath];
+        try {
+            // Re-read the file to handle concurrent updates
+            const content = await fs.promises.readFile(this.user.path, 'utf-8');
+            const config = {};
+            try {
+                const parsed = parseTrustedFoldersJson(content);
+                if (isRecord(parsed)) {
+                    for (const [rawPath, value] of Object.entries(parsed)) {
+                        if (isTrustLevel(value)) {
+                            config[rawPath] = value;
+                        }
+                    }
+                }
+            }
+            catch (error) {
+                coreEvents.emitFeedback('error', `Failed to parse trusted folders file at ${this.user.path}. The file may be corrupted.`, error);
+            }
+            // Use normalized path as key
+            config[normalizedPath] = trustLevel;
+            this.user.config[normalizedPath] = trustLevel;
+            try {
+                saveTrustedFolders({ ...this.user, config });
+            }
+            catch (e) {
+                // Revert the in-memory change if the save failed.
+                if (originalTrustLevel === undefined) {
+                    delete this.user.config[normalizedPath];
+                }
+                else {
+                    this.user.config[normalizedPath] = originalTrustLevel;
+                }
+                throw e;
+            }
+        }
+        finally {
+            await release();
+        }
+    }
+}
+let loadedTrustedFolders;
+/**
+ * FOR TESTING PURPOSES ONLY.
+ * Resets the in-memory cache of the trusted folders configuration.
+ */
+export function resetTrustedFoldersForTesting() {
+    loadedTrustedFolders = undefined;
+    clearRealPathCacheForTesting();
+}
+export function loadTrustedFolders() {
+    if (loadedTrustedFolders) {
+        return loadedTrustedFolders;
+    }
+    const errors = [];
+    const userConfig = {};
+    const userPath = Storage.getTrustedFoldersPath();
+    try {
+        if (fs.existsSync(userPath)) {
+            const content = fs.readFileSync(userPath, 'utf-8');
+            const parsed = parseTrustedFoldersJson(content);
+            if (!isRecord(parsed)) {
+                errors.push({
+                    message: 'Trusted folders file is not a valid JSON object.',
+                    path: userPath,
+                });
+            }
+            else {
+                for (const [rawPath, trustLevel] of Object.entries(parsed)) {
+                    const normalizedPath = normalizePath(rawPath);
+                    if (isTrustLevel(trustLevel)) {
+                        userConfig[normalizedPath] = trustLevel;
+                    }
+                    else {
+                        const possibleValues = Object.values(TrustLevel).join(', ');
+                        errors.push({
+                            message: `Invalid trust level "${trustLevel}" for path "${rawPath}". Possible values are: ${possibleValues}.`,
+                            path: userPath,
+                        });
+                    }
+                }
+            }
+        }
+    }
+    catch (error) {
+        errors.push({
+            message: getErrorMessage(error),
+            path: userPath,
+        });
+    }
+    loadedTrustedFolders = new LoadedTrustedFolders({ path: userPath, config: userConfig }, errors);
+    return loadedTrustedFolders;
+}
+export function saveTrustedFolders(trustedFoldersFile) {
+    // Ensure the directory exists
+    const dirPath = path.dirname(trustedFoldersFile.path);
+    if (!fs.existsSync(dirPath)) {
+        fs.mkdirSync(dirPath, { recursive: true });
+    }
+    const content = JSON.stringify(trustedFoldersFile.config, null, 2);
+    const tempPath = `${trustedFoldersFile.path}.tmp.${crypto.randomUUID()}`;
+    try {
+        fs.writeFileSync(tempPath, content, {
+            encoding: 'utf-8',
+            // Restrict file access to read/write for the owner only
+            mode: 0o600,
+        });
+        fs.renameSync(tempPath, trustedFoldersFile.path);
+    }
+    catch (error) {
+        // Clean up temp file if it was created but rename failed
+        if (fs.existsSync(tempPath)) {
+            try {
+                fs.unlinkSync(tempPath);
+            }
+            catch {
+                // Ignore cleanup errors
+            }
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=trust.js.map

package/dist/src/utils/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../../../src/utils/trust.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,iBAAiB,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,CAAN,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,2CAA6B,CAAA;IAC7B,2CAA6B,CAAA;IAC7B,2CAA6B,CAAA;AAC/B,CAAC,EAJW,UAAU,KAAV,UAAU,QAIrB;AAaD,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CACnD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAqB;IAClD,IAAI,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,KAAK,MAAM,EAAE,CAAC;QACzD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;QAClC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,SAAS,CAAC;IAClE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IAErC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CACtC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CACtD,CAAC;QACF,MAAM,IAAI,gBAAgB,CACxB,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,oDAAoD,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO;QACL,SAAS;QACT,MAAM,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KACrD,CAAC;AACJ,CAAC;AAiBD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEhD;;GAEG;AACH,SAAS,uBAAuB,CAAC,OAAe;IAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B;IAC1C,aAAa,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,QAAQ,CAAC;IACtB,CAAC;IAED,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,OAAO,oBAAoB;IAEpB;IACA;IAFX,YACW,IAAwB,EACxB,MAA6B;QAD7B,SAAI,GAAJ,IAAI,CAAoB;QACxB,WAAM,GAAN,MAAM,CAAuB;IACrC,CAAC;IAEJ,IAAI,KAAK;QACP,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YACnE,IAAI;YACJ,UAAU;SACX,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CACX,QAAgB,EAChB,MAAmC;QAEnC,MAAM,WAAW,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAE/C,4DAA4D;QAC5D,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,kBAAkB,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;QAEvD,IAAI,eAAe,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,iBAAiB,GAA2B,SAAS,CAAC;QAE1D,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACjE,MAAM,aAAa,GACjB,UAAU,KAAK,UAAU,CAAC,YAAY;gBACpC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACxB,CAAC,CAAC,QAAQ,CAAC;YAEf,iEAAiE;YACjE,MAAM,iBAAiB,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;YACrD,MAAM,uBAAuB,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC;YAEjE,IAAI,SAAS,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,EAAE,CAAC;gBAC3D,IAAI,QAAQ,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;oBACtC,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC;oBAClC,iBAAiB,GAAG,UAAU,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,iBAAiB,KAAK,UAAU,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChE,IACE,iBAAiB,KAAK,UAAU,CAAC,YAAY;YAC7C,iBAAiB,KAAK,UAAU,CAAC,YAAY,EAC7C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAkB,EAAE,UAAsB;QACvD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CACtD,CAAC;YACF,MAAM,IAAI,gBAAgB,CACxB,6EAA6E,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,4DAA4D,CAClK,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;gBACvE,wDAAwD;gBACxD,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACzC,OAAO,EAAE;gBACP,OAAO,EAAE,EAAE;gBACX,UAAU,EAAE,GAAG;aAChB;SACF,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAE5D,IAAI,CAAC;YACH,gDAAgD;YAChD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpE,MAAM,MAAM,GAA+B,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBAChD,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrB,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;wBACtD,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;4BACxB,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;wBAC1B,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,CAAC,YAAY,CACrB,OAAO,EACP,2CAA2C,IAAI,CAAC,IAAI,CAAC,IAAI,8BAA8B,EACvF,KAAK,CACN,CAAC;YACJ,CAAC;YAED,6BAA6B;YAC7B,MAAM,CAAC,cAAc,CAAC,GAAG,UAAU,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,UAAU,CAAC;YAE9C,IAAI,CAAC;gBACH,kBAAkB,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,kDAAkD;gBAClD,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;oBACrC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;gBACxD,CAAC;gBACD,MAAM,CAAC,CAAC;YACV,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;CACF;AAED,IAAI,oBAAsD,CAAC;AAE3D;;;GAGG;AACH,MAAM,UAAU,6BAA6B;IAC3C,oBAAoB,GAAG,SAAS,CAAC;IACjC,4BAA4B,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,MAAM,UAAU,GAA+B,EAAE,CAAC;IAElD,MAAM,QAAQ,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;YAEhD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,kDAAkD;oBAC3D,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,KAAK,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC3D,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC9C,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC7B,UAAU,CAAC,cAAc,CAAC,GAAG,UAAU,CAAC;oBAC1C,CAAC;yBAAM,CAAC;wBACN,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC5D,MAAM,CAAC,IAAI,CAAC;4BACV,OAAO,EAAE,wBAAwB,UAAU,eAAe,OAAO,2BAA2B,cAAc,GAAG;4BAC7G,IAAI,EAAE,QAAQ;yBACf,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,GAAG,IAAI,oBAAoB,CAC7C,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,EACtC,MAAM,CACP,CAAC;IACF,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,kBAAsC;IAEtC,8BAA8B;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,GAAG,kBAAkB,CAAC,IAAI,QAAQ,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IAEzE,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE;YAClC,QAAQ,EAAE,OAAO;YACjB,wDAAwD;YACxD,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yDAAyD;QACzD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/src/utils/trust.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/utils/trust.test.js

@@ -0,0 +1,159 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { TrustLevel, loadTrustedFolders, resetTrustedFoldersForTesting, checkPathTrust, } from './trust.js';
+import { Storage } from '../config/storage.js';
+import { lock } from 'proper-lockfile';
+import { ideContextStore } from '../ide/ideContext.js';
+import * as headless from './headless.js';
+import { coreEvents } from './events.js';
+vi.mock('proper-lockfile');
+vi.mock('./headless.js', async (importOriginal) => {
+    const original = await importOriginal();
+    return {
+        ...original,
+        isHeadlessMode: vi.fn(),
+    };
+});
+describe('Trust Utility (Core)', () => {
+    const tempDir = path.join(os.tmpdir(), 'gemini-trust-test-' + Math.random().toString(36).slice(2));
+    const trustedFoldersPath = path.join(tempDir, 'trustedFolders.json');
+    beforeEach(() => {
+        fs.mkdirSync(tempDir, { recursive: true });
+        vi.spyOn(Storage, 'getTrustedFoldersPath').mockReturnValue(trustedFoldersPath);
+        vi.mocked(lock).mockResolvedValue(vi.fn().mockResolvedValue(undefined));
+        vi.mocked(headless.isHeadlessMode).mockReturnValue(false);
+        ideContextStore.clear();
+        resetTrustedFoldersForTesting();
+        delete process.env['GEMINI_CLI_TRUST_WORKSPACE'];
+    });
+    afterEach(() => {
+        fs.rmSync(tempDir, { recursive: true, force: true });
+        vi.restoreAllMocks();
+    });
+    it('should load empty config if file does not exist', () => {
+        const folders = loadTrustedFolders();
+        expect(folders.user.config).toEqual({});
+        expect(folders.errors).toEqual([]);
+    });
+    it('should load config from file', () => {
+        const config = {
+            [path.resolve('/trusted/path')]: TrustLevel.TRUST_FOLDER,
+        };
+        fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));
+        const folders = loadTrustedFolders();
+        // Use path.resolve for platform consistency in tests
+        const normalizedKey = path.resolve('/trusted/path').replace(/\\/g, '/');
+        const isWindows = process.platform === 'win32';
+        const finalKey = isWindows ? normalizedKey.toLowerCase() : normalizedKey;
+        expect(folders.user.config[finalKey]).toBe(TrustLevel.TRUST_FOLDER);
+    });
+    it('should handle isPathTrusted with longest match', () => {
+        const config = {
+            [path.resolve('/a')]: TrustLevel.TRUST_FOLDER,
+            [path.resolve('/a/b')]: TrustLevel.DO_NOT_TRUST,
+            [path.resolve('/a/b/c')]: TrustLevel.TRUST_FOLDER,
+        };
+        fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));
+        const folders = loadTrustedFolders();
+        expect(folders.isPathTrusted(path.resolve('/a/file.txt'))).toBe(true);
+        expect(folders.isPathTrusted(path.resolve('/a/b/file.txt'))).toBe(false);
+        expect(folders.isPathTrusted(path.resolve('/a/b/c/file.txt'))).toBe(true);
+        expect(folders.isPathTrusted(path.resolve('/other'))).toBeUndefined();
+    });
+    it('should handle TRUST_PARENT', () => {
+        const config = {
+            [path.resolve('/project/.gemini')]: TrustLevel.TRUST_PARENT,
+        };
+        fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));
+        const folders = loadTrustedFolders();
+        expect(folders.isPathTrusted(path.resolve('/project/file.txt'))).toBe(true);
+        expect(folders.isPathTrusted(path.resolve('/project/.gemini/config.yaml'))).toBe(true);
+    });
+    it('should save config correctly', async () => {
+        const folders = loadTrustedFolders();
+        const testPath = path.resolve('/new/trusted/path');
+        await folders.setValue(testPath, TrustLevel.TRUST_FOLDER);
+        const savedContent = JSON.parse(fs.readFileSync(trustedFoldersPath, 'utf-8'));
+        const normalizedKey = testPath.replace(/\\/g, '/');
+        const isWindows = process.platform === 'win32';
+        const finalKey = isWindows ? normalizedKey.toLowerCase() : normalizedKey;
+        expect(savedContent[finalKey]).toBe(TrustLevel.TRUST_FOLDER);
+    });
+    it('should handle comments in JSON', () => {
+        const content = `
+    {
+      // This is a comment
+      "path": "TRUST_FOLDER"
+    }
+    `;
+        fs.writeFileSync(trustedFoldersPath, content);
+        const folders = loadTrustedFolders();
+        expect(folders.errors).toHaveLength(0);
+    });
+    describe('checkPathTrust', () => {
+        it('should NOT return trusted if headless mode is on by default', () => {
+            const result = checkPathTrust({
+                path: '/any',
+                isFolderTrustEnabled: true,
+                isHeadless: true,
+            });
+            expect(result).toEqual({ isTrusted: undefined, source: undefined });
+        });
+        it('should return trusted if folder trust is disabled', () => {
+            const result = checkPathTrust({
+                path: '/any',
+                isFolderTrustEnabled: false,
+            });
+            expect(result).toEqual({ isTrusted: true, source: undefined });
+        });
+        it('should return IDE trust if available', () => {
+            ideContextStore.set({
+                workspaceState: { isTrusted: true },
+            });
+            const result = checkPathTrust({
+                path: '/any',
+                isFolderTrustEnabled: true,
+            });
+            expect(result).toEqual({ isTrusted: true, source: 'ide' });
+        });
+        it('should fall back to file trust', () => {
+            const config = {
+                [path.resolve('/trusted')]: TrustLevel.TRUST_FOLDER,
+            };
+            fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));
+            const result = checkPathTrust({
+                path: path.resolve('/trusted/file.txt'),
+                isFolderTrustEnabled: true,
+            });
+            expect(result).toEqual({ isTrusted: true, source: 'file' });
+        });
+        it('should return undefined trust if no rule matches', () => {
+            const result = checkPathTrust({
+                path: '/any',
+                isFolderTrustEnabled: true,
+            });
+            expect(result).toEqual({ isTrusted: undefined, source: undefined });
+        });
+    });
+    describe('coreEvents.emitFeedback', () => {
+        it('should report corrupted config via coreEvents.emitFeedback in setValue', async () => {
+            const folders = loadTrustedFolders();
+            const testPath = path.resolve('/new/path');
+            // Initialize with valid JSON
+            fs.writeFileSync(trustedFoldersPath, '{}', 'utf-8');
+            // Corrupt the file after initial load
+            fs.writeFileSync(trustedFoldersPath, 'invalid json', 'utf-8');
+            const spy = vi.spyOn(coreEvents, 'emitFeedback');
+            await folders.setValue(testPath, TrustLevel.TRUST_FOLDER);
+            expect(spy).toHaveBeenCalledWith('error', expect.stringContaining('may be corrupted'), expect.any(Error));
+        });
+    });
+});
+//# sourceMappingURL=trust.test.js.map

package/dist/src/utils/trust.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.test.js","sourceRoot":"","sources":["../../../src/utils/trust.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAC3B,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAChD,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAkC,CAAC;IACxE,OAAO;QACL,GAAG,QAAQ;QACX,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;KACxB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,EAAE,CAAC,MAAM,EAAE,EACX,oBAAoB,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3D,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAErE,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,eAAe,CACxD,kBAAkB,CACnB,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC1D,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,6BAA6B,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG;YACb,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,UAAU,CAAC,YAAY;SACzD,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7D,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;QACrC,qDAAqD;QACrD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;QAEzE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG;YACb,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,YAAY;YAC7C,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,YAAY;YAC/C,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,YAAY;SAClD,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7D,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;QAErC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG;YACb,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,EAAE,UAAU,CAAC,YAAY;SAC5D,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7D,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;QAErC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5E,MAAM,CACJ,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CACpE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACnD,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;QAE1D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAC7B,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAC7C,CAAC;QACF,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;QAEzE,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,OAAO,GAAG;;;;;KAKf,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAE9C,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,MAAM,GAAG,cAAc,CAAC;gBAC5B,IAAI,EAAE,MAAM;gBACZ,oBAAoB,EAAE,IAAI;gBAC1B,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,MAAM,GAAG,cAAc,CAAC;gBAC5B,IAAI,EAAE,MAAM;gBACZ,oBAAoB,EAAE,KAAK;aAC5B,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,eAAe,CAAC,GAAG,CAAC;gBAClB,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;aACpC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,cAAc,CAAC;gBAC5B,IAAI,EAAE,MAAM;gBACZ,oBAAoB,EAAE,IAAI;aAC3B,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,MAAM,GAAG;gBACb,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,YAAY;aACpD,CAAC;YACF,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAE7D,MAAM,MAAM,GAAG,cAAc,CAAC;gBAC5B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;gBACvC,oBAAoB,EAAE,IAAI;aAC3B,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,MAAM,GAAG,cAAc,CAAC;gBAC5B,IAAI,EAAE,MAAM;gBACZ,oBAAoB,EAAE,IAAI;aAC3B,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;YACtF,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAE3C,6BAA6B;YAC7B,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAEpD,sCAAsC;YACtC,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;YAE9D,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YACjD,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;YAE1D,MAAM,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAC9B,OAAO,EACP,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAC3C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAClB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}