@google/gemini-cli 0.12.0-nightly.20251027.cb0947c5 → 0.12.0-preview.11

package/dist/src/config/policy.d.ts

@@ -3,7 +3,14 @@
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-import { type PolicyEngineConfig, ApprovalMode, type PolicyEngine, type MessageBus } from '@google/gemini-cli-core';
+import { type PolicyEngineConfig, type ApprovalMode, type PolicyEngine, type MessageBus } from '@google/gemini-cli-core';
 import { type Settings } from './settings.js';
-export declare function createPolicyEngineConfig(settings: Settings, approvalMode: ApprovalMode): PolicyEngineConfig;
+export declare function createPolicyEngineConfig(settings: Settings, approvalMode: ApprovalMode): Promise<PolicyEngineConfig>;
 export declare function createPolicyUpdater(policyEngine: PolicyEngine, messageBus: MessageBus): void;
+/**
+ * Gets and clears any policy errors that were stored during config loading.
+ * This should be called once the UI is ready to display errors.
+ *
+ * @returns Array of formatted error messages, or empty array if no errors
+ */
+export declare function getPolicyErrorsForUI(): string[];

package/dist/src/config/policy.js

@@ -3,65 +3,135 @@
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-import { PolicyDecision, ApprovalMode, 
-// Read-only tools
-GREP_TOOL_NAME, LS_TOOL_NAME, READ_MANY_FILES_TOOL_NAME, READ_FILE_TOOL_NAME, 
-// Write tools
-SHELL_TOOL_NAME, WRITE_FILE_TOOL_NAME, WEB_FETCH_TOOL_NAME, GLOB_TOOL_NAME, EDIT_TOOL_NAME, MEMORY_TOOL_NAME, WEB_SEARCH_TOOL_NAME, MessageBusType, } from '@google/gemini-cli-core';
-import {} from './settings.js';
-// READ_ONLY_TOOLS is a list of built-in tools that do not modify the user's
-// files or system state.
-const READ_ONLY_TOOLS = new Set([
-    GLOB_TOOL_NAME,
-    GREP_TOOL_NAME,
-    LS_TOOL_NAME,
-    READ_FILE_TOOL_NAME,
-    READ_MANY_FILES_TOOL_NAME,
-    WEB_SEARCH_TOOL_NAME,
-]);
-// WRITE_TOOLS is a list of built-in tools that can modify the user's files or
-// system state. These tools have a shouldConfirmExecute method.
-// We are keeping this here for visibility and to maintain backwards compatibility
-// with the existing tool permissions system. Eventually we'll remove this and
-// any tool that isn't read only will require a confirmation unless altered by
-// config and policy.
-const WRITE_TOOLS = new Set([
-    EDIT_TOOL_NAME,
-    MEMORY_TOOL_NAME,
-    SHELL_TOOL_NAME,
-    WRITE_FILE_TOOL_NAME,
-    WEB_FETCH_TOOL_NAME,
-]);
-export function createPolicyEngineConfig(settings, approvalMode) {
-    const rules = [];
+import { PolicyDecision, MessageBusType, Storage, } from '@google/gemini-cli-core';
+import { getSystemSettingsPath } from './settings.js';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { loadPoliciesFromToml, } from './policy-toml-loader.js';
+// Get the directory name of the current module
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+// Store policy loading errors to be displayed after UI is ready
+let storedPolicyErrors = [];
+function getPolicyDirectories() {
+    const DEFAULT_POLICIES_DIR = path.resolve(__dirname, 'policies');
+    const USER_POLICIES_DIR = Storage.getUserPoliciesDir();
+    const systemSettingsPath = getSystemSettingsPath();
+    const ADMIN_POLICIES_DIR = path.join(path.dirname(systemSettingsPath), 'policies');
+    return [
+        DEFAULT_POLICIES_DIR,
+        USER_POLICIES_DIR,
+        ADMIN_POLICIES_DIR,
+    ].reverse();
+}
+/**
+ * Determines the policy tier (1=default, 2=user, 3=admin) for a given directory.
+ * This is used by the TOML loader to assign priority bands.
+ */
+function getPolicyTier(dir) {
+    const DEFAULT_POLICIES_DIR = path.resolve(__dirname, 'policies');
+    const USER_POLICIES_DIR = Storage.getUserPoliciesDir();
+    const systemSettingsPath = getSystemSettingsPath();
+    const ADMIN_POLICIES_DIR = path.join(path.dirname(systemSettingsPath), 'policies');
+    // Normalize paths for comparison
+    const normalizedDir = path.resolve(dir);
+    const normalizedDefault = path.resolve(DEFAULT_POLICIES_DIR);
+    const normalizedUser = path.resolve(USER_POLICIES_DIR);
+    const normalizedAdmin = path.resolve(ADMIN_POLICIES_DIR);
+    if (normalizedDir === normalizedDefault)
+        return 1;
+    if (normalizedDir === normalizedUser)
+        return 2;
+    if (normalizedDir === normalizedAdmin)
+        return 3;
+    // Default to tier 1 if unknown
+    return 1;
+}
+/**
+ * Formats a policy file error for console logging.
+ */
+function formatPolicyError(error) {
+    const tierLabel = error.tier.toUpperCase();
+    let message = `[${tierLabel}] Policy file error in ${error.fileName}:\n`;
+    message += `  ${error.message}`;
+    if (error.details) {
+        message += `\n${error.details}`;
+    }
+    if (error.suggestion) {
+        message += `\n  Suggestion: ${error.suggestion}`;
+    }
+    return message;
+}
+export async function createPolicyEngineConfig(settings, approvalMode) {
+    const policyDirs = getPolicyDirectories();
+    // Load policies from TOML files
+    const { rules: tomlRules, errors } = await loadPoliciesFromToml(approvalMode, policyDirs, getPolicyTier);
+    // Store any errors encountered during TOML loading
+    // These will be emitted by getPolicyErrorsForUI() after the UI is ready.
+    if (errors.length > 0) {
+        storedPolicyErrors = errors.map((error) => formatPolicyError(error));
+    }
+    const rules = [...tomlRules];
     // Priority system for policy rules:
     // - Higher priority numbers win over lower priority numbers
     // - When multiple rules match, the highest priority rule is applied
     // - Rules are evaluated in order of priority (highest first)
     //
-    // Priority levels used in this configuration:
-    //   0: Default allow-all (YOLO mode only)
-    //   10: Write tools default to ASK_USER
-    //   50: Auto-accept read-only tools
-    //   85: MCP servers allowed list
-    //   90: MCP servers with trust=true
-    //   100: Explicitly allowed individual tools
-    //   195: Explicitly excluded MCP servers
-    //   199: Tools that the user has selected as "Always Allow" in the interactive UI.
-    //   200: Explicitly excluded individual tools (highest priority)
-    // MCP servers that are explicitly allowed in settings.mcp.allowed
-    // Priority: 85 (lower than trusted servers)
-    if (settings.mcp?.allowed) {
-        for (const serverName of settings.mcp.allowed) {
+    // Priority bands (tiers):
+    // - Default policies (TOML): 1 + priority/1000 (e.g., priority 100 → 1.100)
+    // - User policies (TOML): 2 + priority/1000 (e.g., priority 100 → 2.100)
+    // - Admin policies (TOML): 3 + priority/1000 (e.g., priority 100 → 3.100)
+    //
+    // This ensures Admin > User > Default hierarchy is always preserved,
+    // while allowing user-specified priorities to work within each tier.
+    //
+    // Settings-based and dynamic rules (all in user tier 2.x):
+    //   2.95: Tools that the user has selected as "Always Allow" in the interactive UI
+    //   2.9:  MCP servers excluded list (security: persistent server blocks)
+    //   2.4:  Command line flag --exclude-tools (explicit temporary blocks)
+    //   2.3:  Command line flag --allowed-tools (explicit temporary allows)
+    //   2.2:  MCP servers with trust=true (persistent trusted servers)
+    //   2.1:  MCP servers allowed list (persistent general server allows)
+    //
+    // TOML policy priorities (before transformation):
+    //   10: Write tools default to ASK_USER (becomes 1.010 in default tier)
+    //   15: Auto-edit tool override (becomes 1.015 in default tier)
+    //   50: Read-only tools (becomes 1.050 in default tier)
+    //   999: YOLO mode allow-all (becomes 1.999 in default tier)
+    // MCP servers that are explicitly excluded in settings.mcp.excluded
+    // Priority: 2.9 (highest in user tier for security - persistent server blocks)
+    if (settings.mcp?.excluded) {
+        for (const serverName of settings.mcp.excluded) {
             rules.push({
                 toolName: `${serverName}__*`,
+                decision: PolicyDecision.DENY,
+                priority: 2.9,
+            });
+        }
+    }
+    // Tools that are explicitly excluded in the settings.
+    // Priority: 2.4 (user tier - explicit temporary blocks)
+    if (settings.tools?.exclude) {
+        for (const tool of settings.tools.exclude) {
+            rules.push({
+                toolName: tool,
+                decision: PolicyDecision.DENY,
+                priority: 2.4,
+            });
+        }
+    }
+    // Tools that are explicitly allowed in the settings.
+    // Priority: 2.3 (user tier - explicit temporary allows)
+    if (settings.tools?.allowed) {
+        for (const tool of settings.tools.allowed) {
+            rules.push({
+                toolName: tool,
                 decision: PolicyDecision.ALLOW,
-                priority: 85,
+                priority: 2.3,
             });
         }
     }
     // MCP servers that are trusted in the settings.
-    // Priority: 90 (higher than general allowed servers but lower than explicit tool allows)
+    // Priority: 2.2 (user tier - persistent trusted servers)
     if (settings.mcpServers) {
         for (const [serverName, serverConfig] of Object.entries(settings.mcpServers)) {
             if (serverConfig.trust) {
@@ -70,77 +140,22 @@ export function createPolicyEngineConfig(settings, approvalMode) {
                 rules.push({
                     toolName: `${serverName}__*`,
                     decision: PolicyDecision.ALLOW,
-                    priority: 90,
+                    priority: 2.2,
                 });
             }
         }
     }
-    // Tools that are explicitly allowed in the settings.
-    // Priority: 100
-    if (settings.tools?.allowed) {
-        for (const tool of settings.tools.allowed) {
-            rules.push({
-                toolName: tool,
-                decision: PolicyDecision.ALLOW,
-                priority: 100,
-            });
-        }
-    }
-    // Tools that are explicitly excluded in the settings.
-    // Priority: 200
-    if (settings.tools?.exclude) {
-        for (const tool of settings.tools.exclude) {
-            rules.push({
-                toolName: tool,
-                decision: PolicyDecision.DENY,
-                priority: 200,
-            });
-        }
-    }
-    // MCP servers that are explicitly excluded in settings.mcp.excluded
-    // Priority: 195 (high priority to block servers)
-    if (settings.mcp?.excluded) {
-        for (const serverName of settings.mcp.excluded) {
+    // MCP servers that are explicitly allowed in settings.mcp.allowed
+    // Priority: 2.1 (user tier - persistent general server allows)
+    if (settings.mcp?.allowed) {
+        for (const serverName of settings.mcp.allowed) {
             rules.push({
                 toolName: `${serverName}__*`,
-                decision: PolicyDecision.DENY,
-                priority: 195,
-            });
-        }
-    }
-    // Allow all read-only tools.
-    // Priority: 50
-    for (const tool of READ_ONLY_TOOLS) {
-        rules.push({
-            toolName: tool,
-            decision: PolicyDecision.ALLOW,
-            priority: 50,
-        });
-    }
-    // Only add write tool rules if not in YOLO mode
-    // In YOLO mode, the wildcard ALLOW rule handles everything
-    if (approvalMode !== ApprovalMode.YOLO) {
-        for (const tool of WRITE_TOOLS) {
-            rules.push({
-                toolName: tool,
-                decision: PolicyDecision.ASK_USER,
-                priority: 10,
+                decision: PolicyDecision.ALLOW,
+                priority: 2.1,
             });
         }
     }
-    if (approvalMode === ApprovalMode.YOLO) {
-        rules.push({
-            decision: PolicyDecision.ALLOW,
-            priority: 0, // Lowest priority - catches everything not explicitly configured
-        });
-    }
-    else if (approvalMode === ApprovalMode.AUTO_EDIT) {
-        rules.push({
-            toolName: EDIT_TOOL_NAME,
-            decision: PolicyDecision.ALLOW,
-            priority: 15, // Higher than write tools (10) to override ASK_USER
-        });
-    }
     return {
         rules,
         defaultDecision: PolicyDecision.ASK_USER,
@@ -152,8 +167,22 @@ export function createPolicyUpdater(policyEngine, messageBus) {
         policyEngine.addRule({
             toolName,
             decision: PolicyDecision.ALLOW,
-            priority: 199, // High priority, but lower than explicit DENY (200)
+            // User tier (2) + high priority (950/1000) = 2.95
+            // This ensures user "always allow" selections are high priority
+            // but still lose to admin policies (3.xxx) and settings excludes (200)
+            priority: 2.95,
         });
     });
 }
+/**
+ * Gets and clears any policy errors that were stored during config loading.
+ * This should be called once the UI is ready to display errors.
+ *
+ * @returns Array of formatted error messages, or empty array if no errors
+ */
+export function getPolicyErrorsForUI() {
+    const errors = [...storedPolicyErrors];
+    storedPolicyErrors = []; // Clear after retrieving
+    return errors;
+}
 //# sourceMappingURL=policy.js.map

package/dist/src/config/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/config/policy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEL,cAAc,EAEd,YAAY;AACZ,kBAAkB;AAClB,cAAc,EACd,YAAY,EACZ,yBAAyB,EACzB,mBAAmB;AACnB,cAAc;AACd,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EAGpB,cAAc,GAEf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAiB,MAAM,eAAe,CAAC;AAE9C,4EAA4E;AAC5E,yBAAyB;AACzB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,cAAc;IACd,cAAc;IACd,YAAY;IACZ,mBAAmB;IACnB,yBAAyB;IACzB,oBAAoB;CACrB,CAAC,CAAC;AAEH,8EAA8E;AAC9E,gEAAgE;AAChE,kFAAkF;AAClF,8EAA8E;AAC9E,8EAA8E;AAC9E,qBAAqB;AACrB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,oBAAoB;IACpB,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,UAAU,wBAAwB,CACtC,QAAkB,EAClB,YAA0B;IAE1B,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,oCAAoC;IACpC,4DAA4D;IAC5D,oEAAoE;IACpE,6DAA6D;IAC7D,EAAE;IACF,8CAA8C;IAC9C,0CAA0C;IAC1C,wCAAwC;IACxC,oCAAoC;IACpC,iCAAiC;IACjC,oCAAoC;IACpC,6CAA6C;IAC7C,yCAAyC;IACzC,mFAAmF;IACnF,iEAAiE;IAEjE,kEAAkE;IAClE,4CAA4C;IAC5C,IAAI,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC;QAC1B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;gBAC5B,QAAQ,EAAE,cAAc,CAAC,KAAK;gBAC9B,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,yFAAyF;IACzF,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,QAAQ,CAAC,UAAU,CACpB,EAAE,CAAC;YACF,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;gBACvB,uCAAuC;gBACvC,0FAA0F;gBAC1F,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;oBAC5B,QAAQ,EAAE,cAAc,CAAC,KAAK;oBAC9B,QAAQ,EAAE,EAAE;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,gBAAgB;IAChB,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,cAAc,CAAC,KAAK;gBAC9B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,gBAAgB;IAChB,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,cAAc,CAAC,IAAI;gBAC7B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,iDAAiD;IACjD,IAAI,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;gBAC5B,QAAQ,EAAE,cAAc,CAAC,IAAI;gBAC7B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,eAAe;IACf,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,cAAc,CAAC,KAAK;YAC9B,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IAED,gDAAgD;IAChD,2DAA2D;IAC3D,IAAI,YAAY,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,cAAc,CAAC,QAAQ;gBACjC,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,YAAY,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,cAAc,CAAC,KAAK;YAC9B,QAAQ,EAAE,CAAC,EAAE,iEAAiE;SAC/E,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,YAAY,KAAK,YAAY,CAAC,SAAS,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,cAAc,CAAC,KAAK;YAC9B,QAAQ,EAAE,EAAE,EAAE,oDAAoD;SACnE,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,KAAK;QACL,eAAe,EAAE,cAAc,CAAC,QAAQ;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,YAA0B,EAC1B,UAAsB;IAEtB,UAAU,CAAC,SAAS,CAClB,cAAc,CAAC,aAAa,EAC5B,CAAC,OAAqB,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,YAAY,CAAC,OAAO,CAAC;YACnB,QAAQ;YACR,QAAQ,EAAE,cAAc,CAAC,KAAK;YAC9B,QAAQ,EAAE,GAAG,EAAE,oDAAoD;SACpE,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/config/policy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEL,cAAc,EAKd,cAAc,EAEd,OAAO,GACR,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAiB,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,oBAAoB,GAErB,MAAM,yBAAyB,CAAC;AAEjC,+CAA+C;AAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,gEAAgE;AAChE,IAAI,kBAAkB,GAAa,EAAE,CAAC;AAEtC,SAAS,oBAAoB;IAC3B,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACjE,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IACvD,MAAM,kBAAkB,GAAG,qBAAqB,EAAE,CAAC;IACnD,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAClC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAChC,UAAU,CACX,CAAC;IAEF,OAAO;QACL,oBAAoB;QACpB,iBAAiB;QACjB,kBAAkB;KACnB,CAAC,OAAO,EAAE,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACjE,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IACvD,MAAM,kBAAkB,GAAG,qBAAqB,EAAE,CAAC;IACnD,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAClC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAChC,UAAU,CACX,CAAC;IAEF,iCAAiC;IACjC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAEzD,IAAI,aAAa,KAAK,iBAAiB;QAAE,OAAO,CAAC,CAAC;IAClD,IAAI,aAAa,KAAK,cAAc;QAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,aAAa,KAAK,eAAe;QAAE,OAAO,CAAC,CAAC;IAEhD,+BAA+B;IAC/B,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAsB;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,OAAO,GAAG,IAAI,SAAS,0BAA0B,KAAK,CAAC,QAAQ,KAAK,CAAC;IACzE,OAAO,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,IAAI,mBAAmB,KAAK,CAAC,UAAU,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAkB,EAClB,YAA0B;IAE1B,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;IAE1C,gCAAgC;IAChC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAC7D,YAAY,EACZ,UAAU,EACV,aAAa,CACd,CAAC;IAEF,mDAAmD;IACnD,yEAAyE;IACzE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,KAAK,GAAiB,CAAC,GAAG,SAAS,CAAC,CAAC;IAE3C,oCAAoC;IACpC,4DAA4D;IAC5D,oEAAoE;IACpE,6DAA6D;IAC7D,EAAE;IACF,0BAA0B;IAC1B,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,EAAE;IACF,qEAAqE;IACrE,qEAAqE;IACrE,EAAE;IACF,2DAA2D;IAC3D,mFAAmF;IACnF,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,mEAAmE;IACnE,sEAAsE;IACtE,EAAE;IACF,kDAAkD;IAClD,wEAAwE;IACxE,gEAAgE;IAChE,wDAAwD;IACxD,6DAA6D;IAE7D,oEAAoE;IACpE,+EAA+E;IAC/E,IAAI,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;gBAC5B,QAAQ,EAAE,cAAc,CAAC,IAAI;gBAC7B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,wDAAwD;IACxD,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,cAAc,CAAC,IAAI;gBAC7B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,wDAAwD;IACxD,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,cAAc,CAAC,KAAK;gBAC9B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,yDAAyD;IACzD,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,QAAQ,CAAC,UAAU,CACpB,EAAE,CAAC;YACF,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;gBACvB,uCAAuC;gBACvC,0FAA0F;gBAC1F,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;oBAC5B,QAAQ,EAAE,cAAc,CAAC,KAAK;oBAC9B,QAAQ,EAAE,GAAG;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,+DAA+D;IAC/D,IAAI,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC;QAC1B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;gBAC5B,QAAQ,EAAE,cAAc,CAAC,KAAK;gBAC9B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,eAAe,EAAE,cAAc,CAAC,QAAQ;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,YAA0B,EAC1B,UAAsB;IAEtB,UAAU,CAAC,SAAS,CAClB,cAAc,CAAC,aAAa,EAC5B,CAAC,OAAqB,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,YAAY,CAAC,OAAO,CAAC;YACnB,QAAQ;YACR,QAAQ,EAAE,cAAc,CAAC,KAAK;YAC9B,kDAAkD;YAClD,gEAAgE;YAChE,uEAAuE;YACvE,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC;IACvC,kBAAkB,GAAG,EAAE,CAAC,CAAC,yBAAyB;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC"}