@inhuman.tools/policy 0.0.0-stage → 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (141) hide show
  1. package/authorize.scm +4 -0
  2. package/dist/acknowledge.d.ts +70 -0
  3. package/dist/acknowledge.d.ts.map +1 -0
  4. package/dist/acknowledge.js +162 -0
  5. package/dist/acknowledge.js.map +1 -0
  6. package/dist/authorize.d.ts +8 -0
  7. package/dist/authorize.d.ts.map +1 -0
  8. package/dist/authorize.js +39 -0
  9. package/dist/authorize.js.map +1 -0
  10. package/dist/bind.d.ts +6 -0
  11. package/dist/bind.d.ts.map +1 -0
  12. package/dist/bind.js +45 -0
  13. package/dist/bind.js.map +1 -0
  14. package/dist/check.d.ts +30 -0
  15. package/dist/check.d.ts.map +1 -0
  16. package/dist/check.js +389 -0
  17. package/dist/check.js.map +1 -0
  18. package/dist/classes.d.ts +23 -0
  19. package/dist/classes.d.ts.map +1 -0
  20. package/dist/classes.js +139 -0
  21. package/dist/classes.js.map +1 -0
  22. package/dist/compile.d.ts +40 -0
  23. package/dist/compile.d.ts.map +1 -0
  24. package/dist/compile.js +311 -0
  25. package/dist/compile.js.map +1 -0
  26. package/dist/deadline.d.ts +5 -0
  27. package/dist/deadline.d.ts.map +1 -0
  28. package/dist/deadline.js +17 -0
  29. package/dist/deadline.js.map +1 -0
  30. package/dist/decide.d.ts +64 -0
  31. package/dist/decide.d.ts.map +1 -0
  32. package/dist/decide.js +482 -0
  33. package/dist/decide.js.map +1 -0
  34. package/dist/error-with-invariant.d.ts +9 -0
  35. package/dist/error-with-invariant.d.ts.map +1 -0
  36. package/dist/error-with-invariant.js +12 -0
  37. package/dist/error-with-invariant.js.map +1 -0
  38. package/dist/floor.d.ts +9 -0
  39. package/dist/floor.d.ts.map +1 -0
  40. package/dist/floor.js +9 -0
  41. package/dist/floor.js.map +1 -0
  42. package/dist/glob-expand.d.ts +10 -0
  43. package/dist/glob-expand.d.ts.map +1 -0
  44. package/dist/glob-expand.js +132 -0
  45. package/dist/glob-expand.js.map +1 -0
  46. package/dist/guards.d.ts +26 -0
  47. package/dist/guards.d.ts.map +1 -0
  48. package/dist/guards.js +419 -0
  49. package/dist/guards.js.map +1 -0
  50. package/dist/identity.d.ts +11 -0
  51. package/dist/identity.d.ts.map +1 -0
  52. package/dist/identity.js +23 -0
  53. package/dist/identity.js.map +1 -0
  54. package/dist/index.d.ts +8 -0
  55. package/dist/index.d.ts.map +1 -0
  56. package/dist/index.js +8 -0
  57. package/dist/index.js.map +1 -0
  58. package/dist/license-law.d.ts +43 -0
  59. package/dist/license-law.d.ts.map +1 -0
  60. package/dist/license-law.js +129 -0
  61. package/dist/license-law.js.map +1 -0
  62. package/dist/license.d.ts +3 -0
  63. package/dist/license.d.ts.map +1 -0
  64. package/dist/license.js +2 -0
  65. package/dist/license.js.map +1 -0
  66. package/dist/lift.d.ts +4 -0
  67. package/dist/lift.d.ts.map +1 -0
  68. package/dist/lift.js +14 -0
  69. package/dist/lift.js.map +1 -0
  70. package/dist/path-policy.d.ts +53 -0
  71. package/dist/path-policy.d.ts.map +1 -0
  72. package/dist/path-policy.js +248 -0
  73. package/dist/path-policy.js.map +1 -0
  74. package/dist/peel-cwd.d.ts +8 -0
  75. package/dist/peel-cwd.d.ts.map +1 -0
  76. package/dist/peel-cwd.js +120 -0
  77. package/dist/peel-cwd.js.map +1 -0
  78. package/dist/prep.d.ts +58 -0
  79. package/dist/prep.d.ts.map +1 -0
  80. package/dist/prep.js +690 -0
  81. package/dist/prep.js.map +1 -0
  82. package/dist/processor.d.ts +71 -0
  83. package/dist/processor.d.ts.map +1 -0
  84. package/dist/processor.js +132 -0
  85. package/dist/processor.js.map +1 -0
  86. package/dist/reasonable-defaults.d.ts +1448 -0
  87. package/dist/reasonable-defaults.d.ts.map +1 -0
  88. package/dist/reasonable-defaults.js +6 -0
  89. package/dist/reasonable-defaults.js.map +1 -0
  90. package/dist/reasonable-defaults.json +1662 -0
  91. package/dist/run-authorization.d.ts +8 -0
  92. package/dist/run-authorization.d.ts.map +1 -0
  93. package/dist/run-authorization.js +16 -0
  94. package/dist/run-authorization.js.map +1 -0
  95. package/dist/schemas/tirith.d.ts +58 -0
  96. package/dist/schemas/tirith.d.ts.map +1 -0
  97. package/dist/schemas/tirith.js +23 -0
  98. package/dist/schemas/tirith.js.map +1 -0
  99. package/dist/tirith-units.d.ts +2 -0
  100. package/dist/tirith-units.d.ts.map +1 -0
  101. package/dist/tirith-units.js +227 -0
  102. package/dist/tirith-units.js.map +1 -0
  103. package/dist/tirith.d.ts +24 -0
  104. package/dist/tirith.d.ts.map +1 -0
  105. package/dist/tirith.js +311 -0
  106. package/dist/tirith.js.map +1 -0
  107. package/dist/tool-path.d.ts +8 -0
  108. package/dist/tool-path.d.ts.map +1 -0
  109. package/dist/tool-path.js +38 -0
  110. package/dist/tool-path.js.map +1 -0
  111. package/dist/types.d.ts +87 -0
  112. package/dist/types.d.ts.map +1 -0
  113. package/dist/types.js +14 -0
  114. package/dist/types.js.map +1 -0
  115. package/dist/verdict.d.ts +15 -0
  116. package/dist/verdict.d.ts.map +1 -0
  117. package/dist/verdict.js +55 -0
  118. package/dist/verdict.js.map +1 -0
  119. package/package.json +62 -3
  120. package/src/acknowledge.ts +206 -0
  121. package/src/authorize.ts +38 -0
  122. package/src/bind.ts +58 -0
  123. package/src/check.ts +552 -0
  124. package/src/classes.ts +156 -0
  125. package/src/compile.ts +370 -0
  126. package/src/deadline.ts +15 -0
  127. package/src/floor.ts +16 -0
  128. package/src/glob-expand.ts +137 -0
  129. package/src/guards.ts +428 -0
  130. package/src/identity.ts +26 -0
  131. package/src/index.ts +24 -0
  132. package/src/lift.ts +15 -0
  133. package/src/path-policy.ts +280 -0
  134. package/src/processor.ts +187 -0
  135. package/src/reasonable-defaults.json +1662 -0
  136. package/src/reasonable-defaults.ts +8 -0
  137. package/src/run-authorization.ts +23 -0
  138. package/src/tool-path.ts +43 -0
  139. package/src/types.ts +102 -0
  140. package/src/verdict.ts +63 -0
  141. package/README.md +0 -3
@@ -0,0 +1,311 @@
1
+ /**
2
+ * Compile a policy.json document into CommandNode + path terms.
3
+ * `"--"` is a handle, not a subcommand: omitted `policy` inherits.
4
+ * Extra keys on a command object are refused — verbs live under `subcommands`.
5
+ */
6
+ import { ErrorWithInvariant } from "@inhuman.tools/error-with-invariant";
7
+ import { isClassId } from "./classes.js";
8
+ import { GUARDS } from "./guards.js";
9
+ import { mergePathTerms, normalizePath } from "./path-policy.js";
10
+ export class PolicyCompileError extends ErrorWithInvariant {
11
+ name = "PolicyCompileError";
12
+ }
13
+ export class PolicyAssumeError extends ErrorWithInvariant {
14
+ name = "PolicyAssumeError";
15
+ expected;
16
+ actual;
17
+ command;
18
+ constructor(message, detail) {
19
+ super(message);
20
+ if (detail !== undefined) {
21
+ this.expected = detail.expected;
22
+ this.actual = detail.actual;
23
+ this.command = detail.command;
24
+ }
25
+ }
26
+ }
27
+ const DISPS = new Set(["policyApprove", "approve", "allow", "ask", "deny", "block"]);
28
+ const RESERVED = new Set([
29
+ "policy",
30
+ "class",
31
+ "family_args",
32
+ "arg_types",
33
+ "arg_rest_type",
34
+ "flag_paths",
35
+ "guard",
36
+ "matcher",
37
+ "--",
38
+ "subcommands",
39
+ ]);
40
+ export function compilePolicy(document) {
41
+ const raw = document;
42
+ if (raw === null || raw === undefined)
43
+ return { assume: [] };
44
+ PolicyCompileError.invariant(isRecord(raw), "policy.json: document must be a mapping");
45
+ const unknown = Object.keys(raw).filter((key) => !key.startsWith(".") &&
46
+ ![
47
+ "read_file",
48
+ "write_file",
49
+ "read_block",
50
+ "write_block",
51
+ "bash",
52
+ "assume",
53
+ "read_miss_class",
54
+ "write_miss_class",
55
+ ].includes(key));
56
+ PolicyCompileError.invariant(unknown.length === 0, `policy.json: unknown top-level key ${unknown[0]}`);
57
+ const readMiss = parseClass(raw.read_miss_class, "read_miss_class") ?? "envelope-read";
58
+ const writeMiss = parseClass(raw.write_miss_class, "write_miss_class") ?? "envelope-write";
59
+ return {
60
+ bash: raw.bash === undefined ? undefined : parseCommandDef(raw.bash, "bash", true),
61
+ read: mergePathTerms("read", readMiss, parsePathList(raw.read_file, "read_file", "policyApprove", "envelope-read"), parseBlockList(raw.read_block, "read_block", "credential")),
62
+ write: mergePathTerms("write", writeMiss, parsePathList(raw.write_file, "write_file", "ask", "workspace-write"), parseBlockList(raw.write_block, "write_block", "control-plane")),
63
+ assume: parseAssume(raw.assume),
64
+ };
65
+ }
66
+ /** A class id from the closed taxonomy. An unknown id is a compile error, never a new class. */
67
+ function parseClass(value, path) {
68
+ if (value === undefined)
69
+ return undefined;
70
+ PolicyCompileError.invariant(isClassId(value), `policy.json: unknown class ${String(value)} at ${path}`);
71
+ return value;
72
+ }
73
+ /** A path item is a string, or `{ path, class }` to tag the rule with a dist class. */
74
+ function pathItem(item, field) {
75
+ if (typeof item === "string")
76
+ return { pattern: item };
77
+ PolicyCompileError.invariant(isRecord(item), `${field}: each pattern is a string or { path, class }`);
78
+ const extra = Object.keys(item).filter((key) => key !== "path" && key !== "class");
79
+ PolicyCompileError.invariant(extra.length === 0, `${field}: unknown key ${extra[0]}`);
80
+ PolicyCompileError.invariant(typeof item.path === "string", `${field}: { path } is a string`);
81
+ return { pattern: item.path, class: parseClass(item.class, `${field}.class`) };
82
+ }
83
+ function parsePathList(value, field, enable, enableClass) {
84
+ if (value === undefined)
85
+ return undefined;
86
+ PolicyCompileError.invariant(Array.isArray(value), `${field}: list of strings`);
87
+ return value.map((raw) => {
88
+ const { pattern: item, class: tagged } = pathItem(raw, field);
89
+ PolicyCompileError.invariant(!item.startsWith("-"), "path pattern: - is not a prefix; ! is deny on the enable list");
90
+ const deny = item.startsWith("!");
91
+ const stem = normalizePath(deny ? item.slice(1) : item);
92
+ PolicyCompileError.invariant(stem !== undefined, "path pattern: empty or unresolvable");
93
+ return {
94
+ id: `${field}:${deny ? "!" : ""}${stem}`,
95
+ polarity: deny ? "deny" : enable,
96
+ stem,
97
+ unanchored: stem !== "." && !stem.startsWith("/") && !stem.includes("/"),
98
+ class: tagged ?? (deny ? "protected-file" : enableClass),
99
+ };
100
+ });
101
+ }
102
+ function parseBlockList(value, field, defaultClass) {
103
+ if (value === undefined)
104
+ return undefined;
105
+ PolicyCompileError.invariant(Array.isArray(value), `${field}: list of strings`);
106
+ return value.map((raw) => {
107
+ const { pattern: item, class: tagged } = pathItem(raw, field);
108
+ PolicyCompileError.invariant(!item.startsWith("!") && !item.startsWith("-"), "block list: stem without a polarity prefix");
109
+ const stem = normalizePath(item);
110
+ PolicyCompileError.invariant(stem !== undefined, "path pattern: empty or unresolvable");
111
+ return {
112
+ id: `${field}:${stem}`,
113
+ polarity: "block",
114
+ stem,
115
+ unanchored: stem !== "." && !stem.startsWith("/") && !stem.includes("/"),
116
+ class: tagged ?? defaultClass,
117
+ };
118
+ });
119
+ }
120
+ function parseAssume(value) {
121
+ if (value === undefined)
122
+ return [];
123
+ PolicyCompileError.invariant(Array.isArray(value), "assume: list of { command, expect }");
124
+ return value.map((item, i) => {
125
+ PolicyCompileError.invariant(isRecord(item), `assume[${i}]: mapping`);
126
+ PolicyCompileError.invariant(typeof item.command === "string", `assume[${i}]: command is a string`);
127
+ const expect = asDisposition(item.expect);
128
+ PolicyCompileError.invariant(expect !== undefined, `assume[${i}]: expect is approve|ask|deny|block`);
129
+ const expectClass = parseClass(item.expect_class, `assume[${i}].expect_class`);
130
+ return { command: item.command, expect, ...(expectClass === undefined ? {} : { expectClass }) };
131
+ });
132
+ }
133
+ function parseFamilyArgs(value, path) {
134
+ if (value === undefined)
135
+ return 0;
136
+ PolicyCompileError.invariant(typeof value === "number" && Number.isInteger(value) && value >= 0 && value <= 4, `${path}.family_args: integer 0..4`);
137
+ return value;
138
+ }
139
+ function parseCommandDef(value, path, policyRequired) {
140
+ const disp = asDisposition(value);
141
+ if (disp !== undefined) {
142
+ return { policy: disp, familyArgs: 0, argTypes: [], flagPaths: {}, guards: [], matchers: [], subcommands: {} };
143
+ }
144
+ PolicyCompileError.invariant(isRecord(value), `${path}: command is a disposition or a mapping`);
145
+ const extra = Object.keys(value).filter((key) => !RESERVED.has(key));
146
+ PolicyCompileError.invariant(extra.length === 0, `${path}: unknown key ${extra[0]} — verbs go under subcommands`);
147
+ const policy = value.policy === undefined ? undefined : asDisposition(value.policy);
148
+ PolicyCompileError.invariant(value.policy === undefined || policy !== undefined, `${path}.policy: approve|ask|deny|block`);
149
+ PolicyCompileError.invariant(!policyRequired || policy !== undefined, `${path}: policy is required`);
150
+ const subcommands = {};
151
+ if (value.subcommands !== undefined) {
152
+ PolicyCompileError.invariant(isRecord(value.subcommands), `${path}.subcommands: mapping`);
153
+ for (const [name, def] of Object.entries(value.subcommands)) {
154
+ subcommands[String(name)] = parseCommandDef(def, `${path}.subcommands.${name}`, true);
155
+ }
156
+ }
157
+ return {
158
+ policy,
159
+ class: parseClass(value.class, `${path}.class`),
160
+ familyArgs: parseFamilyArgs(value.family_args, path),
161
+ argTypes: parseArgTypes(value.arg_types, `${path}.arg_types`),
162
+ argRestType: parseArgType(value.arg_rest_type, `${path}.arg_rest_type`),
163
+ flagPaths: parseFlagPaths(value.flag_paths, `${path}.flag_paths`),
164
+ guards: parseGuards(value.guard, `${path}.guard`),
165
+ matchers: parseMatchers(value.matcher, `${path}.matcher`),
166
+ dash: value["--"] === undefined ? undefined : parseCommandDef(value["--"], `${path}.--`, false),
167
+ subcommands,
168
+ };
169
+ }
170
+ function parseArgTypes(value, path) {
171
+ if (value === undefined)
172
+ return [];
173
+ PolicyCompileError.invariant(Array.isArray(value), `${path}: list`);
174
+ return value.map((item, i) => {
175
+ const parsed = parseArgType(item, `${path}[${i}]`);
176
+ PolicyCompileError.invariant(parsed !== undefined, `${path}[${i}]: missing`);
177
+ return parsed;
178
+ });
179
+ }
180
+ function parseArgType(value, path) {
181
+ if (value === undefined)
182
+ return undefined;
183
+ PolicyCompileError.invariant(value === "read_path" || value === "write_path", `${path}: read_path|write_path`);
184
+ return value;
185
+ }
186
+ /** `{ "--output": "write_path", "-o": "write_path" }`. Long names also match every unambiguous-prefix spelling. */
187
+ function parseFlagPaths(value, path) {
188
+ if (value === undefined)
189
+ return {};
190
+ PolicyCompileError.invariant(isRecord(value), `${path}: mapping of option to read_path|write_path`);
191
+ const out = {};
192
+ for (const [name, kind] of Object.entries(value)) {
193
+ PolicyCompileError.invariant(name.startsWith("-"), `${path}.${name}: option name`);
194
+ const parsed = parseArgType(kind, `${path}.${name}`);
195
+ PolicyCompileError.invariant(parsed !== undefined, `${path}.${name}: missing`);
196
+ for (const spelling of withPrefixes([name]))
197
+ out[spelling] = parsed;
198
+ }
199
+ return out;
200
+ }
201
+ function parseGuards(value, path) {
202
+ const names = stringList(value, path);
203
+ for (const name of names)
204
+ PolicyCompileError.invariant(GUARDS.has(name), `${path}: unknown guard ${name}`);
205
+ return names;
206
+ }
207
+ /** getopt_long accepts any unique prefix of a long option; the policy treats every prefix as the option. */
208
+ function withPrefixes(names) {
209
+ const out = new Set(names);
210
+ for (const name of names) {
211
+ if (!name.startsWith("--"))
212
+ continue;
213
+ for (let end = 3; end < name.length; end += 1)
214
+ out.add(name.slice(0, end));
215
+ }
216
+ return [...out];
217
+ }
218
+ function parseMatchers(value, path) {
219
+ if (value === undefined)
220
+ return [];
221
+ PolicyCompileError.invariant(Array.isArray(value), `${path}: list`);
222
+ return value.map((item, i) => {
223
+ const here = `${path}[${i}]`;
224
+ PolicyCompileError.invariant(isRecord(item), `${here}: mapping`);
225
+ const extra = Object.keys(item).filter((key) => !["flags", "glob", "tok", "matcher", "policy", "class"].includes(key));
226
+ PolicyCompileError.invariant(extra.length === 0, `${here}: unknown key ${extra[0]}`);
227
+ const policy = item.policy === undefined ? undefined : asDisposition(item.policy);
228
+ PolicyCompileError.invariant(item.policy === undefined || policy !== undefined, `${here}.policy: approve|ask|deny|block`);
229
+ return {
230
+ class: parseClass(item.class, `${here}.class`),
231
+ flags: parseFlags(item.flags, `${here}.flags`),
232
+ globs: stringList(item.glob, `${here}.glob`),
233
+ toks: stringList(item.tok, `${here}.tok`),
234
+ matchers: parseMatchers(item.matcher, `${here}.matcher`),
235
+ policy,
236
+ };
237
+ });
238
+ }
239
+ function parseFlags(value, path) {
240
+ if (value === undefined)
241
+ return {};
242
+ PolicyCompileError.invariant(isRecord(value), `${path}: mapping`);
243
+ const out = {};
244
+ for (const [raw, spec] of Object.entries(value)) {
245
+ const canonical = String(raw);
246
+ out[canonical] = parseFlagConstraint(spec, canonical, `${path}.${canonical}`);
247
+ }
248
+ return out;
249
+ }
250
+ function parseFlagConstraint(value, canonical, path) {
251
+ if (value === true || value === null) {
252
+ return { names: [canonical], vals: [], takesValue: false };
253
+ }
254
+ PolicyCompileError.invariant(isRecord(value), `${path}: true or { alias, value, value_type }`);
255
+ const extra = Object.keys(value).filter((key) => !["alias", "value", "value_type", "abbrev"].includes(key));
256
+ PolicyCompileError.invariant(extra.length === 0, `${path}: unknown key ${extra[0]}`);
257
+ const aliases = stringList(value.alias, `${path}.alias`);
258
+ const vals = stringList(value.value, `${path}.value`);
259
+ const takesValue = vals.length > 0 || value.value_type !== undefined;
260
+ if (value.value_type !== undefined) {
261
+ PolicyCompileError.invariant(typeof value.value_type === "string", `${path}.value_type: string`);
262
+ }
263
+ PolicyCompileError.invariant(value.abbrev === undefined || typeof value.abbrev === "boolean", `${path}.abbrev: boolean`);
264
+ const names = [canonical, ...aliases];
265
+ return { names: value.abbrev === true ? withPrefixes(names) : names, vals, takesValue };
266
+ }
267
+ function stringList(value, path) {
268
+ if (value === undefined)
269
+ return [];
270
+ if (typeof value === "string")
271
+ return [value];
272
+ PolicyCompileError.invariant(Array.isArray(value), `${path}: string or list of strings`);
273
+ return value.map((item, i) => {
274
+ PolicyCompileError.invariant(typeof item === "string", `${path}[${i}]: string`);
275
+ return item;
276
+ });
277
+ }
278
+ function asDisposition(value) {
279
+ if (typeof value !== "string" || !DISPS.has(value))
280
+ return undefined;
281
+ if (value === "allow" || value === "approve" || value === "policyApprove")
282
+ return "policyApprove";
283
+ return value;
284
+ }
285
+ export function flagVocab(node) {
286
+ const names = new Set();
287
+ addMatcherFlags(node.matchers, names, false);
288
+ return names;
289
+ }
290
+ export function valueFlagNames(node) {
291
+ const names = new Set();
292
+ addMatcherFlags(node.matchers, names, true);
293
+ for (const name of Object.keys(node.flagPaths))
294
+ names.add(name);
295
+ return names;
296
+ }
297
+ function addMatcherFlags(matchers, names, valueOnly) {
298
+ for (const matcher of matchers) {
299
+ for (const flag of Object.values(matcher.flags)) {
300
+ if (valueOnly && !flag.takesValue)
301
+ continue;
302
+ for (const name of flag.names)
303
+ names.add(name);
304
+ }
305
+ addMatcherFlags(matcher.matchers, names, valueOnly);
306
+ }
307
+ }
308
+ function isRecord(value) {
309
+ return value !== null && typeof value === "object" && !Array.isArray(value);
310
+ }
311
+ //# sourceMappingURL=compile.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"compile.js","sourceRoot":"","sources":["../src/compile.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAgB,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAiB,MAAM,kBAAkB,CAAC;AAKhF,MAAM,OAAO,kBAAmB,SAAQ,kBAAkB;IACtC,IAAI,GAAG,oBAAoB,CAAC;CAC/C;AAED,MAAM,OAAO,iBAAkB,SAAQ,kBAAkB;IACrC,IAAI,GAAG,mBAAmB,CAAC;IACpC,QAAQ,CAAe;IACvB,MAAM,CAAe;IACrB,OAAO,CAAU;IAE1B,YAAY,OAAe,EAAE,MAAwE;QACnG,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC5B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAChC,CAAC;IACH,CAAC;CACF;AAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACrF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,QAAQ;IACR,OAAO;IACP,aAAa;IACb,WAAW;IACX,eAAe;IACf,YAAY;IACZ,OAAO;IACP,SAAS;IACT,IAAI;IACJ,aAAa;CACd,CAAC,CAAC;AAgBH,MAAM,UAAU,aAAa,CAAC,QAAiB;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC;IACrB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC7D,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,yCAAyC,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CACrC,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,CAAC;YACC,WAAW;YACX,YAAY;YACZ,YAAY;YACZ,aAAa;YACb,MAAM;YACN,QAAQ;YACR,iBAAiB;YACjB,kBAAkB;SACnB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAClB,CAAC;IACF,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,sCAAsC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,eAAe,EAAE,iBAAiB,CAAC,IAAI,eAAe,CAAC;IACvF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,IAAI,gBAAgB,CAAC;IAC3F,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;QAClF,IAAI,EAAE,cAAc,CAClB,MAAM,EACN,QAAQ,EACR,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,CAAC,EAC3E,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,CAC3D;QACD,KAAK,EAAE,cAAc,CACnB,OAAO,EACP,SAAS,EACT,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,CAAC,EACrE,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,eAAe,CAAC,CAChE;QACD,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,kBAAkB,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,8BAA8B,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACzG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uFAAuF;AACvF,SAAS,QAAQ,CAAC,IAAa,EAAE,KAAa;IAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvD,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,+CAA+C,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC;IACnF,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,GAAG,KAAK,iBAAiB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtF,kBAAkB,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,GAAG,KAAK,wBAAwB,CAAC,CAAC;IAC9F,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,aAAa,CACpB,KAAc,EACd,KAAa,EACb,MAA+B,EAC/B,WAAoB;IAEpB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9D,kBAAkB,CAAC,SAAS,CAC1B,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EACrB,+DAA+D,CAChE,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxD,kBAAkB,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,qCAAqC,CAAC,CAAC;QACxF,OAAO;YACL,EAAE,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE;YACxC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,IAAI;YACJ,UAAU,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxE,KAAK,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC;SACtC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa,EAAE,YAAqB;IAC1E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9D,kBAAkB,CAAC,SAAS,CAC1B,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAC9C,4CAA4C,CAC7C,CAAC;QACF,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,kBAAkB,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,qCAAqC,CAAC,CAAC;QACxF,OAAO;YACL,EAAE,EAAE,GAAG,KAAK,IAAI,IAAI,EAAE;YACtB,QAAQ,EAAE,OAAgB;YAC1B,IAAI;YACJ,UAAU,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxE,KAAK,EAAE,MAAM,IAAI,YAAY;SACX,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,qCAAqC,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC3B,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;QACtE,kBAAkB,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,UAAU,CAAC,wBAAwB,CAAC,CAAC;QACpG,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,kBAAkB,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,UAAU,CAAC,qCAAqC,CAAC,CAAC;QACrG,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC/E,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAClG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAY;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAClC,kBAAkB,CAAC,SAAS,CAC1B,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAChF,GAAG,IAAI,4BAA4B,CACpC,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAY,EAAE,cAAuB;IAC5E,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACjH,CAAC;IACD,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,yCAAyC,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,GAAG,IAAI,iBAAiB,KAAK,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;IAClH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpF,kBAAkB,CAAC,SAAS,CAC1B,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAClD,GAAG,IAAI,iCAAiC,CACzC,CAAC;IACF,kBAAkB,CAAC,SAAS,CAAC,CAAC,cAAc,IAAI,MAAM,KAAK,SAAS,EAAE,GAAG,IAAI,sBAAsB,CAAC,CAAC;IACrG,MAAM,WAAW,GAAgC,EAAE,CAAC;IACpD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,uBAAuB,CAAC,CAAC;QAC1F,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,eAAe,CAAC,GAAG,EAAE,GAAG,IAAI,gBAAgB,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM;QACN,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC;QAC/C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC;QACpD,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC;QAC7D,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,IAAI,gBAAgB,CAAC;QACvE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,aAAa,CAAC;QACjE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC;QACjD,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,CAAC;QACzD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,KAAK,EAAE,KAAK,CAAC;QAC/F,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,kBAAkB,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,kBAAkB,CAAC,SAAS,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,YAAY,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC;IAC/G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mHAAmH;AACnH,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,6CAA6C,CAAC,CAAC;IACpG,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,IAAI,eAAe,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QACrD,kBAAkB,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,GAAG,IAAI,IAAI,IAAI,WAAW,CAAC,CAAC;QAC/E,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAC3G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4GAA4G;AAC5G,SAAS,YAAY,CAAC,KAAwB;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAC7B,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC/E,CAAC;QACF,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,GAAG,IAAI,iBAAiB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClF,kBAAkB,CAAC,SAAS,CAC1B,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EACjD,GAAG,IAAI,iCAAiC,CACzC,CAAC;QACF,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC;YAC9C,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC;YAC9C,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC;YAC5C,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,MAAM,CAAC;YACzC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,CAAC;YACxD,MAAM;SACP,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;IAClE,MAAM,GAAG,GAAmC,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,GAAG,CAAC,SAAS,CAAC,GAAG,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,SAAiB,EAAE,IAAY;IAC1E,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,wCAAwC,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5G,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,GAAG,IAAI,iBAAiB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC;IACrE,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,kBAAkB,CAAC,SAAS,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,GAAG,IAAI,qBAAqB,CAAC,CAAC;IACnG,CAAC;IACD,kBAAkB,CAAC,SAAS,CAC1B,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,EAC/D,GAAG,IAAI,kBAAkB,CAC1B,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,CAAC;IACtC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,6BAA6B,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC3B,kBAAkB,CAAC,SAAS,CAAC,OAAO,IAAI,KAAK,QAAQ,EAAE,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrE,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,eAAe;QAAE,OAAO,eAAe,CAAC;IAClG,OAAO,KAAoB,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAiB;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,QAA4B,EAAE,KAAkB,EAAE,SAAkB;IAC3F,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE,SAAS;YAC5C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}
@@ -0,0 +1,5 @@
1
+ /** Judge budget shared by the adapters. Crush's hook self-bounds at the same 20 s. */
2
+ export declare const JUDGE_DEADLINE_MS = 20000;
3
+ /** Reject when `work` has not settled in `ms`; the caller maps a rejection to deny. */
4
+ export declare function withDeadline<T>(work: Promise<T>, ms?: number): Promise<T>;
5
+ //# sourceMappingURL=deadline.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"deadline.d.ts","sourceRoot":"","sources":["../src/deadline.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,eAAO,MAAM,iBAAiB,QAAS,CAAC;AAExC,uFAAuF;AACvF,wBAAsB,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,GAAE,MAA0B,GAAG,OAAO,CAAC,CAAC,CAAC,CAUlG"}
@@ -0,0 +1,17 @@
1
+ /** Judge budget shared by the adapters. Crush's hook self-bounds at the same 20 s. */
2
+ export const JUDGE_DEADLINE_MS = 20_000;
3
+ /** Reject when `work` has not settled in `ms`; the caller maps a rejection to deny. */
4
+ export async function withDeadline(work, ms = JUDGE_DEADLINE_MS) {
5
+ let timer;
6
+ const expired = new Promise((_resolve, reject) => {
7
+ timer = setTimeout(() => reject(new Error("authorization timed out")), ms);
8
+ });
9
+ try {
10
+ return await Promise.race([work, expired]);
11
+ }
12
+ finally {
13
+ if (timer !== undefined)
14
+ clearTimeout(timer);
15
+ }
16
+ }
17
+ //# sourceMappingURL=deadline.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"deadline.js","sourceRoot":"","sources":["../src/deadline.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,IAAgB,EAAE,KAAa,iBAAiB;IACpF,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}
@@ -0,0 +1,64 @@
1
+ /**
2
+ * Votes. `complete` returns JSON `{ value }`. Scheme `#f` is an abstain.
3
+ * Sage and Jev build that same object. A thrown error falls back to `complete`;
4
+ * an abort does not. A failure is never an allow. Jev has no sort.
5
+ */
6
+ import { EnvCapability } from "@inhuman.tools/arrival";
7
+ import { z } from "zod";
8
+ import { ErrorWithInvariant } from "./error-with-invariant.js";
9
+ export declare class DecideError extends ErrorWithInvariant {
10
+ readonly name = "DecideError";
11
+ }
12
+ export type DecideRequest = {
13
+ kind: "yesno";
14
+ instructions: string;
15
+ } | {
16
+ kind: "choose";
17
+ instructions: string;
18
+ options: readonly {
19
+ option: string;
20
+ description?: string;
21
+ }[];
22
+ } | {
23
+ kind: "scale";
24
+ instructions: string;
25
+ levels: readonly {
26
+ level: number;
27
+ description?: string;
28
+ }[];
29
+ } | {
30
+ kind: "gauge";
31
+ instructions: string;
32
+ start: number;
33
+ end: number;
34
+ step: number;
35
+ } | {
36
+ kind: "tag";
37
+ instructions: string;
38
+ tags: readonly {
39
+ tag: string;
40
+ description?: string;
41
+ }[];
42
+ } | {
43
+ kind: "sort";
44
+ instructions: string;
45
+ items: readonly {
46
+ id: string;
47
+ content: string;
48
+ }[];
49
+ };
50
+ export type DecideComplete = (request: DecideRequest) => Promise<unknown>;
51
+ export declare const decideCapability: EnvCapability<{
52
+ backend: z.ZodDefault<z.ZodEnum<{
53
+ structured: "structured";
54
+ sage: "sage";
55
+ jev: "jev";
56
+ }>>;
57
+ complete: z.ZodOptional<z.ZodFunction<z.ZodTuple<readonly [z.ZodType<DecideRequest, DecideRequest, z.core.$ZodTypeInternals<DecideRequest, DecideRequest>>], null>, z.ZodPromise<z.ZodUnknown>>>;
58
+ document: z.ZodDefault<z.ZodString>;
59
+ sageApiKey: z.ZodOptional<z.ZodString>;
60
+ jevApiKey: z.ZodOptional<z.ZodString>;
61
+ sageAsk: z.ZodOptional<z.ZodFunction<z.ZodTuple<readonly [z.ZodString, z.ZodType<DecideRequest, DecideRequest, z.core.$ZodTypeInternals<DecideRequest, DecideRequest>>], null>, z.ZodPromise<z.ZodUnknown>>>;
62
+ jevAsk: z.ZodOptional<z.ZodFunction<z.ZodTuple<readonly [z.ZodString, z.ZodType<DecideRequest, DecideRequest, z.core.$ZodTypeInternals<DecideRequest, DecideRequest>>], null>, z.ZodPromise<z.ZodUnknown>>>;
63
+ }, Record<string, never>>;
64
+ //# sourceMappingURL=decide.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"decide.d.ts","sourceRoot":"","sources":["../src/decide.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AASvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,qBAAa,WAAY,SAAQ,kBAAkB;IACjD,SAAkB,IAAI,iBAAiB;CACxC;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GACtG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GACnG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,CAAC;AAE9F,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAyb1E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;yBAkF3B,CAAC"}