@inhuman.tools/turn 0.0.0-stage → 0.2.0

package/dist/policy-processor/classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.js","sourceRoot":"","sources":["../../src/policy-processor/classifier.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,WAAW,EACX,KAAK,EACL,IAAI,GAGL,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,uCAAuC,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EAEV,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAA0B,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAGnG,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE/D,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,iBAAiB,GAIlB,MAAM,gBAAgB,CAAC;AAExB,SAAS,KAAK,CAAC,IAAY,EAAE,OAAe;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;IAChC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAChG,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,EAAE;QAAE,OAAO;IAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC;AAK3C,SAAS,MAAM,CAAC,KAAc;IAC5B,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,QAAQ,KAAK,EAAE,CAAC;gBACd,KAAK,OAAO,CAAC;gBACb,KAAK,MAAM;oBACT,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBAC7B;oBACE,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACvF,CAAC;QACH,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;YACvF,MAAM,GAAG,GAAG,KAAgC,CAAC;YAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;YAClD,QAAQ,QAAQ,EAAE,CAAC;gBACjB,KAAK,OAAO,CAAC;gBACb,KAAK,MAAM;oBACT,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACtB;oBACE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;YAC/C,CAAC;QACH,CAAC;QACD;YACE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,MAAkB,EAClB,EAAuC,EACvC,IAAe;IAEf,MAAM,KAAK,GAAG,aAAa,CACzB,EAAE,EACF,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAgB,CAAC,EAC7D,WAAW,CAAC,MAAM,CAAC,CACpB,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACpD,MAAM,CAAC,gBAAgB,CACrB,OAAO,EACP,GAAG,EAAE;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC3F,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,eAAe,GAAG,IAAI,YAAY,CAAC,CAAC,CAAS,EAAU,EAAE;IAC7D,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,wBAAwB;YAC3B,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qCAAqC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtF,KAAK,wBAAwB;YAC3B,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qCAAqC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtF,KAAK,yBAAyB;YAC5B,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sCAAsC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvF,KAAK,iCAAiC;YACpC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,8CAA8C,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/F,KAAK,mCAAmC;YACtC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gDAAgD,CAAC,EAAE,MAAM,CAAC,CAAC;QACjG,KAAK,+BAA+B;YAClC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,4CAA4C,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7F,KAAK,uBAAuB;YAC1B,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oCAAoC,CAAC,EAAE,MAAM,CAAC,CAAC;QACrF,KAAK,mCAAmC;YACtC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gDAAgD,CAAC,EAAE,MAAM,CAAC,CAAC;QACjG,KAAK,yBAAyB;YAC5B,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sCAAsC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvF,KAAK,yBAAyB;YAC5B,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,sCAAsC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvF,KAAK,sBAAsB;YACzB,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mCAAmC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpF;YACE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AASjF,MAAM,UAAU,eAAe,CAC7B,GAAqC,EACrC,IAA0B;IAM1B,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpG,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,MAAM,UAAU,GAAG,UAAU,KAAK,EAAE,IAAI,IAAI,EAAE,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrH,MAAM,KAAK,GAAG,CAAC,UAAU,IAAI,UAAU,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,UAAU,KAAK,KAAK,EAAE,EAAE,CAAC;AAC/D,CAAC;AA6CD,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAsB,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9E,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE9C,SAAS,gBAAgB,CAAC,MAAc;IACtC,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO;IAC5C,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACrB,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,EACjF,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CACvE,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,SAAS,SAAS,CAAC,KAA6B;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,IAAI,CAAC,CAAC,IAAI,YAAY,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3F,CAAC;AAED,mHAAmH;AACnH,SAAS,gBAAgB,CAAC,GAAgB;IACxC,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB,EAAE,GAAgB,EAAE,OAAe;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC;IAC1C,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;QAC5C,QAAQ,EAAE,KAAK,CAAC,gBAAgB;QAChC,eAAe,EAAE,KAAK,CAAC,oBAAoB;KAC5C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,KAAK,WAAW,CAAC;IAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC;IAC1C,MAAM,MAAM,GAAG,QAAQ,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,8DAA8D;IAC9D,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,+BAA+B,EAAE,OAAO,EAAE,CAAC;IACjG,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACnE,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,gGAAgG;QAChG,6DAA6D;QAC7D,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC;YAC1D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC1D,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QAClE,uFAAuF;QACvF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1E,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;IACzF,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,KAAc;QACpB,MAAM;QACN,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO;QACP,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;KAC3B,CAAC;IACF,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAU,CAAC;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IAClC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,WAAuE,CAAC;IAC1F,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QACrC,OAAO,EAAE,GAAG,CAAC,aAAuE;QACpF,KAAK;QACL,YAAY;QACZ,WAAW;QACX,gBAAgB,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU;QAC7C,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO;QACP,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC;KAChC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,cAAc,CAAC;QAC5B,OAAO;QACP,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAgD;QAC1D,KAAK;QACL,cAAc,EAAE,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;KAC3E,CAAC,CAAC;IACH,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE;YACJ,QAAQ;YACR,MAAM;YACN,UAAU;YACV,cAAc,EAAE,QAAQ,CAAC,eAAe,KAAK,EAAE;YAC/C,QAAQ,EAAE,WAAW;YACrB,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YACxC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACrD,KAAK,EAAE;gBACL,YAAY;gBACZ,WAAW;gBACX,cAAc,EAAE,MAAM;gBACtB,6DAA6D;gBAC7D,YAAY,EAAE,CAAC,CACb,MAAM,CAAC,YAAY,KAAK,KAAK;oBAC7B,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC,CACjE;gBACD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;aAC3B;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAmB,EACnB,GAAgB,EAChB,QAAwB;IAExB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC;IAC1C,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;QAC5C,QAAQ,EAAE,KAAK,CAAC,gBAAgB;QAChC,eAAe,EAAE,KAAK,CAAC,oBAAoB;KAC5C,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,UAAU,KAAK,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gCAAgC,SAAS,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACpH,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE;YACpC,YAAY,EAAE,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;YAC7D,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE;gBACN,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;gBAC3C,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,MAAM,EAAE,eAAe;gBACvB,GAAG;gBACH,YAAY,EAAE,KAAK,CAAC,UAAU;gBAC9B,eAAe,EAAE,KAAK,CAAC,KAAK;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB;SACF,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YACpD,IAAI,EAAE,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACxF,OAAO,MAAM,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;gBAAS,CAAC;YACT,MAAM,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,uBAAuB,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvE,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;IAEY,gBAAgB;;;;;;;;iBAAhB,gBAAgB;;;mCAC1B,UAAU;iCA2CV,MAAM;qCAqNN,MAAM;2CAiBN,MAAM;YAjRK,0KAAS,OAAO,6BAAP,OAAO,yFAAK;YA4CjC,kKAAA,KAAK,6DAwKJ;YA6CD,8KAAA,SAAS,6DAcR;YAGD,gMAAA,eAAe,6DAKd;;;QAhRU,GAAG,GARH,mDAAgB;QAShB,KAAK;QARJ,2EAAmB,CAAC,EAAC;QAArB,IAAS,OAAO,6CAAK;QAArB,IAAS,OAAO,mDAAK;QACjC,MAAM,uDAA4C;QAClD,aAAa,CAA8B;QAC3C,KAAK,CAAgC;QACrC,IAAI,GAAG,CAAC,CAAC;QAET,YACW,GAAgB,EAChB,KAAmB;YADnB,QAAG,GAAH,GAAG,CAAa;YAChB,UAAK,GAAL,KAAK,CAAc;QAC3B,CAAC;QAEJ,KAAK,CAAC,oBAAoB;YACxB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACzC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;gBACzE,IAAI,QAAQ,IAAI,IAAI;oBAAE,OAAO,SAAS,CAAC;gBACvC,MAAM,MAAM,GACV,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;gBACxG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBACvD,wFAAwF;gBACxF,MAAM,IAAI,GACR,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;oBAC/D,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC9D,OAAO,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5C,IAAI,QAAQ,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;gBACxC,kGAAkG;gBAClG,OAAO;oBACL,IAAI,CAAC,CAAC,CAAC;oBACP,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,8DAA8D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;iBAC3G,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBAChE,IAAI,MAAM,IAAI,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,YAAY;oBAAE,OAAO,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC,CAAC;YAChG,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,KAAK;YACH,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO;YAC1D,IAAI,CAAC,KAAK,GAAG,QAAQ,CACnB,GAAmB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,EACvE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACb,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnB,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;gBACxB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBACnD,KAAK,CACH,eAAe,EACf,QAAQ,IAAI,CAAC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACnI,CAAC;gBACF,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;oBAClB,KAAK,OAAO;wBACV,WAAW,CAAC,GAAG,EAAE;4BACf,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI;gCAAE,OAAO;4BAC/C,IAAI,CAAC,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC;4BAC1C,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;gCACnE,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,0BAA0B,CAAC;4BACpD,CAAC;wBACH,CAAC,CAAC,CAAC;wBACH,OAAO;oBACT,KAAK,SAAS;wBACZ,WAAW,CAAC,GAAG,EAAE;4BACf,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI;gCAAE,OAAO;4BAC/C,IAAI,CAAC,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC;4BAC1C,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;wBACrC,CAAC,CAAC,CAAC;wBACH,OAAO;oBACT,KAAK,WAAW;wBACd,IAAI,CAAC,eAAe,CAClB,4FAA4F,CAC7F,CAAC;wBACF,OAAO;oBACT,KAAK,SAAS;wBACZ,WAAW,CAAC,GAAG,EAAE;4BACf,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI;gCAAE,OAAO;4BAC/C,IAAI,CAAC,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC;4BAC1C,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;wBACpE,CAAC,CAAC,CAAC;wBACH,OAAO;oBACT,KAAK,MAAM;wBACT,IAAI,CAAC,eAAe,CAAC,kFAAkF,CAAC,CAAC;wBACzG,OAAO;oBACT,KAAK,WAAW;wBACd,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;wBACtC,OAAO;oBACT,KAAK,OAAO;wBACV,yEAAyE;wBACzE,kEAAkE;wBAClE,IAAI,CAAC,eAAe,CAClB,+FAA+F,CAChG,CAAC;wBACF,OAAO;oBACT,KAAK,QAAQ;wBACX,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAC9B,OAAO;oBACT,KAAK,KAAK;wBACR,MAAM;gBACV,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,CAAC,aAAa,GAAG,IAAI,eAAe,EAAE,CAAC;gBAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC;gBACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC/B,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,8BAA8B,SAAS,IAAI,CAAC,CAAC,CAAC;gBAC7E,CAAC,EAAE,SAAS,CAAC,CAAC;gBACd,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,IAAI,IAAI,GAAmB,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;oBAC/D,IAAI,KAAK,CAAC;oBACV,IAAI,CAAC;wBACH,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE;4BACnC,YAAY,EAAE,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;4BAC7D,MAAM,EAAE,YAAY,CAAC,MAAM;4BAC3B,MAAM,EAAE;gCACN,UAAU,EAAE,IAAI,CAAC,UAAU;gCAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,WAAW,EAAE,IAAI,CAAC,WAAW;gCAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;gCACnB,UAAU,EAAE,IAAI,CAAC,MAAM;gCACvB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;oCACzB,CAAC,CAAC,EAAE;oCACJ,CAAC,CAAC;wCACE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS;wCACvC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ;wCACrC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ;wCACrC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe;wCACnD,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;wCAC5B,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;wCAClC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;qCAC/B,CAAC;gCACN,MAAM,EAAE,eAAe;gCACvB,GAAG,EAAE,IAAI,CAAC,GAAG;gCACb,YAAY,EAAE,IAAI,CAAC,UAAU;gCAC7B,eAAe,EAAE,IAAI,CAAC,KAAK;gCAC3B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;6BAC9B;yBACF,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,GAAG,EAAE,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1E,CAAC;oBACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxB,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BACzC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gCAC5B,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;4BAChE,CAAC;iCAAM,CAAC;gCACN,MAAM,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;gCACtD,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;oCACrB,IAAI,GAAG,EAAE,IAAI,EAAE,iBAAiB,OAAO,EAAE,EAAE,CAAC;gCAC9C,CAAC;qCAAM,CAAC;oCACN,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;oCAC/C,IAAI;wCACF,IAAI,KAAK,SAAS;4CAChB,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE;4CACrC,CAAC,CAAC,MAAM,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;gCAC9D,CAAC;4BACH,CAAC;wBACH,CAAC;gCAAS,CAAC;4BACT,MAAM,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;wBACxC,CAAC;oBACH,CAAC;oBACD,IAAI,GAAG,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;wBACtB,KAAK,CAAC,eAAe,EAAE,aAAa,KAAK,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;wBACxE,OAAO;oBACT,CAAC;oBACD,WAAW,CAAC,GAAG,EAAE;wBACf,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI;4BAAE,OAAO;wBAC/C,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;4BACnB,KAAK,CAAC,eAAe,EAAE,YAAY,KAAK,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;4BACpF,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gCACvC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gCACnE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gCAChC,OAAO;4BACT,CAAC;4BACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;4BAC1B,OAAO;wBACT,CAAC;wBACD,KAAK,CAAC,eAAe,EAAE,QAAQ,IAAI,CAAC,QAAQ,QAAQ,KAAK,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;wBACxF,IAAI,CAAC,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC;wBAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;4BAAE,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;wBAClE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;4BAAE,IAAI,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC;wBAClE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACpE,CAAC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,GAAG,KAAK,IAAI,CAAC,IAAI;wBAAE,OAAO;oBAC9B,KAAK,CACH,eAAe,EACf,aAAa,KAAK,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC1G,CAAC;oBACF,WAAW,CAAC,GAAG,EAAE;wBACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBACpE,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;4BAClC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;4BACnE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;4BAC3B,OAAO;wBACT,CAAC;wBACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBACvB,CAAC,CAAC,CAAC;gBACL,CAAC;wBAAS,CAAC;oBACT,YAAY,CAAC,QAAQ,CAAC,CAAC;oBACvB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO;wBAAE,YAAY,CAAC,KAAK,EAAE,CAAC;oBACvD,IAAI,IAAI,CAAC,aAAa,KAAK,YAAY;wBAAE,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;gBAC1E,CAAC;YACH,CAAC,EACD,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,CACvD,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;YACf,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;YAC/B,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC;QAED;;;;WAIG;QACH,KAAK,CAAC,SAAS,CACb,MAAkB,EAClB,OAAqC,EACrC,IAAkB;YAElB,MAAM,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,OAAO,EAAE,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACrF,MAAM,MAAM,GAAG,CAAC,OAAwB,EAAE,KAAY,EAAkB,EAAE;gBACxE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;oBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC7D,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB;oBAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBACrG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YACtF,CAAC,CAAC;YACF,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;gBAAE,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACjE,OAAO;oBACL,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,2CAA2C;oBACxF,KAAK,EAAE,CAAC;iBACT,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3F,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAkB,EAAE,EAAuC,EAAE,KAAY;YACxF,OAAO,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,CAAC;QAGD,SAAS,CAAC,IAAY;YACpB,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI;gBAAE,OAAO;YAC/C,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC1D,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;YACzB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO;YAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,UAAU,CACtB,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE;gBAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBACxB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;YACnB,CAAC,CAAC,EACF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CACxB,CAAC;QACJ,CAAC;QAGD,eAAe,CAAC,IAAY;YAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI;gBAAE,OAAO;YAC/C,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC1D,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,iBAAiB,CAAC;YACxC,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QAED,WAAW;YACT,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO;YACtC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,CAAC;;;SA9RU,gBAAgB"}

package/dist/policy-processor/cluster.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Strings the agent controls are JSON-encoded here: the judge prompt places them in a
+ * labelled "untrusted" block, and encoding keeps a newline-and-label from forging a new section.
+ */
+/** Arguments for the matching `classifier/*` lambda, or undefined if the payload is missing. */
+export declare function classifierArgs(name: string, args: Readonly<Record<string, unknown>> | null): unknown[] | undefined;
+//# sourceMappingURL=cluster.d.ts.map

package/dist/policy-processor/cluster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cluster.d.ts","sourceRoot":"","sources":["../../src/policy-processor/cluster.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,gGAAgG;AAChG,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,OAAO,EAAE,GAAG,SAAS,CAkBlH"}

package/dist/policy-processor/cluster.js

@@ -0,0 +1,32 @@
+/**
+ * Classifier-lambda payload. Cluster table and args parse live in
+ * harness-model. This module keeps the unknown[] shape the remainder
+ * ports apply.
+ */
+import { clusterOf, fileQuestion } from "@inhuman.tools/harness-model";
+/**
+ * Strings the agent controls are JSON-encoded here: the judge prompt places them in a
+ * labelled "untrusted" block, and encoding keeps a newline-and-label from forging a new section.
+ */
+/** Arguments for the matching `classifier/*` lambda, or undefined if the payload is missing. */
+export function classifierArgs(name, args) {
+    switch (clusterOf(name)) {
+        case "bash": {
+            if (typeof args?.command !== "string" || args.command === "")
+                return undefined;
+            const cwd = typeof args.cwd === "string" && args.cwd !== "" && args.cwd !== "." ? args.cwd : undefined;
+            return cwd === undefined
+                ? [JSON.stringify(args.command)]
+                : [JSON.stringify(args.command), `cwd ${JSON.stringify(cwd)}`];
+        }
+        case "read":
+            return [JSON.stringify(fileQuestion(name, args) ?? ".")];
+        case "write": {
+            const question = fileQuestion(name, args);
+            return question == null ? undefined : [JSON.stringify(question)];
+        }
+        case "mcp":
+            return [JSON.stringify(name), JSON.stringify(args ?? {})];
+    }
+}
+//# sourceMappingURL=cluster.js.map

package/dist/policy-processor/cluster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cluster.js","sourceRoot":"","sources":["../../src/policy-processor/cluster.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEvE;;;GAGG;AACH,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAA8C;IACzF,QAAQ,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC/E,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACvG,OAAO,GAAG,KAAK,SAAS;gBACtB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,KAAK,MAAM;YACT,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC3D,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1C,OAAO,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,KAAK,KAAK;YACR,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/policy-processor/evidence.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Classifier request cuts from the job's owning turn. Nested jobs keep
+ * that turn; a caller-supplied turn would be the wrong one. Privileged
+ * is user prompts on the owning turn and its tail ancestry — continue
+ * mints `prompt: ""` with the authorization on the tail. Unattended /
+ * eval with no user text: owning ProgrammaticJob expr (approval.md
+ * EVIDENCE). The bag itself is not a remainder subject — only inner
+ * ToolCallJob leaves.
+ */
+import { SessionTurn, ToolCallJob } from "@inhuman.tools/harness-model";
+export type EvidenceCuts = {
+    /** Oldest-first user prompts on the owning turn and its tails (the eval expression when there are none). */
+    readonly userMessages?: readonly string[];
+    /** The agent's last completed answer before the most recent user message. Round 2 of the soft-deny judge only. */
+    readonly agentAnswer?: string;
+    readonly privileged: string;
+    readonly priorTurn: string;
+    readonly quarantined: string;
+    readonly policy?: string;
+};
+export declare function evidenceCuts(job: ToolCallJob): EvidenceCuts;
+export declare function evidenceIdentity(cuts: EvidenceCuts): string;
+/** Cluster+payload remainder skip key. */
+export declare function evidencePayloadKey(job: ToolCallJob): string | null;
+export declare function owningTurn(job: ToolCallJob): SessionTurn | null;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/policy-processor/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/policy-processor/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAKL,WAAW,EAEX,WAAW,EACZ,MAAM,8BAA8B,CAAC;AAGtC,MAAM,MAAM,YAAY,GAAG;IACzB,4GAA4G;IAC5G,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,kHAAkH;IAClH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,YAAY,CAsC3D;AAoDD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAE3D;AAED,0CAA0C;AAC1C,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAMlE;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CAE/D"}

package/dist/policy-processor/evidence.js

@@ -0,0 +1,204 @@
+/**
+ * Classifier request cuts from the job's owning turn. Nested jobs keep
+ * that turn; a caller-supplied turn would be the wrong one. Privileged
+ * is user prompts on the owning turn and its tail ancestry — continue
+ * mints `prompt: ""` with the authorization on the tail. Unattended /
+ * eval with no user text: owning ProgrammaticJob expr (approval.md
+ * EVIDENCE). The bag itself is not a remainder subject — only inner
+ * ToolCallJob leaves.
+ */
+import { clusterOf, fileQuestion, ProgrammaticJob, reactChunks, SessionTurn, tapeCompletion, ToolCallJob, } from "@inhuman.tools/harness-model";
+import { parseTirithEvidence, tirithPolicyCut } from "@inhuman.tools/policy-tirith";
+export function evidenceCuts(job) {
+    const turn = owningTurn(job);
+    const program = owningProgram(job);
+    if (turn == null) {
+        const expr = program?.expr.trim() || "";
+        return {
+            userMessages: expr === "" ? [] : [expr],
+            agentAnswer: "",
+            privileged: expr,
+            priorTurn: "",
+            quarantined: "",
+            policy: policyPipCut(job.policyEvidenceJson),
+        };
+    }
+    const prior = [];
+    const quarantined = [];
+    for (const chunk of reactChunks(turn)) {
+        const completion = tapeCompletion(chunk);
+        if (completion != null) {
+            if (!completion.isDone || underJob(completion, job))
+                continue;
+            if (completion.responseText !== "")
+                prior.push(completion.responseText);
+            continue;
+        }
+        if (!(chunk instanceof ToolCallJob) || chunk === job)
+            continue;
+        if (chunk.sealedOutcomeJson() == null)
+            continue;
+        const text = observationText(chunk.observationPayload());
+        if (text === "")
+            continue;
+        quarantined.push(`${chunk.name} → ${text}`);
+    }
+    const messages = userPrompts(turn, program);
+    return {
+        userMessages: messages,
+        agentAnswer: agentAnswerBefore(turn),
+        privileged: messages.join("\n"),
+        priorTurn: prior.join("\n"),
+        quarantined: quarantined.join("\n"),
+        policy: policyPipCut(job.policyEvidenceJson),
+    };
+}
+function policyPipCut(json) {
+    if (json == null || json === "")
+        return "";
+    const report = parseTirithEvidence(json);
+    if (report != null)
+        return tirithPolicyCut(report);
+    return json;
+}
+/** Oldest-first user prompts on `turn` then tails. Expr only when none exist. */
+function userPrompts(turn, program) {
+    const seen = new Set();
+    const prompts = [];
+    let cell = turn;
+    while (cell != null && !seen.has(cell)) {
+        seen.add(cell);
+        const text = cell.prompt.trim();
+        if (text !== "")
+            prompts.push(text);
+        cell = cell.turnTail instanceof SessionTurn ? cell.turnTail : null;
+    }
+    prompts.reverse();
+    if (prompts.length > 0)
+        return prompts;
+    const expr = program?.expr.trim() || "";
+    return expr === "" ? [] : [expr];
+}
+/**
+ * The agent's last completed answer that precedes the most recent user message: the proposal a short
+ * reply ("let's do it") refers to. Not the current turn's text, never tool output. Empty when there is
+ * none (the most recent user message opens the conversation).
+ */
+function agentAnswerBefore(turn) {
+    const seen = new Set();
+    let cell = turn;
+    while (cell != null && !seen.has(cell) && cell.prompt.trim() === "") {
+        seen.add(cell);
+        cell = cell.turnTail instanceof SessionTurn ? cell.turnTail : null;
+    }
+    // `cell` carries the most recent user prompt. Its tails hold the answers that came before it.
+    let earlier = cell != null && cell.turnTail instanceof SessionTurn ? cell.turnTail : null;
+    while (earlier != null && !seen.has(earlier)) {
+        seen.add(earlier);
+        const chunks = reactChunks(earlier);
+        for (const chunk of chunks.toReversed()) {
+            const completion = tapeCompletion(chunk);
+            if (completion != null && completion.isDone && completion.responseText !== "")
+                return completion.responseText;
+        }
+        earlier = earlier.turnTail instanceof SessionTurn ? earlier.turnTail : null;
+    }
+    return "";
+}
+export function evidenceIdentity(cuts) {
+    return JSON.stringify([cuts.privileged, cuts.priorTurn, cuts.quarantined, cuts.policy ?? "", cuts.agentAnswer ?? ""]);
+}
+/** Cluster+payload remainder skip key. */
+export function evidencePayloadKey(job) {
+    const payload = canonicalPayload(job);
+    if (payload == null || payload === "")
+        return null;
+    // The tier and classes are part of the key: a payload that was an ask under one policy and a
+    // soft-deny under another must not share a vote.
+    return JSON.stringify([clusterOf(job.name), payload, job.policyResult, job.policyClassesJson ?? ""]);
+}
+export function owningTurn(job) {
+    return ancestor(job, (parent) => parent instanceof SessionTurn);
+}
+function owningProgram(job) {
+    return ancestor(job, (parent) => parent instanceof ProgrammaticJob);
+}
+function ancestor(job, match) {
+    const seen = new Set();
+    let node = job;
+    while (node != null) {
+        if (seen.has(node))
+            return null;
+        seen.add(node);
+        const parent = node.parent;
+        if (match(parent))
+            return parent;
+        if (parent instanceof SessionTurn)
+            return null;
+        node = parent !== null && typeof parent === "object" && "parent" in parent ? parent : null;
+    }
+    return null;
+}
+function underJob(node, job) {
+    const seen = new Set();
+    let cur = node;
+    while (cur != null) {
+        if (seen.has(cur))
+            return false;
+        seen.add(cur);
+        if (cur === job)
+            return true;
+        const parent = cur.parent;
+        if (parent instanceof SessionTurn)
+            return false;
+        cur = parent !== null && typeof parent === "object" && "parent" in parent ? parent : null;
+    }
+    return false;
+}
+function observationText(value) {
+    if (typeof value === "string")
+        return value;
+    if (value === undefined)
+        return "";
+    try {
+        const json = JSON.stringify(value);
+        return typeof json === "string" ? json : "";
+    }
+    catch {
+        return String(value);
+    }
+}
+function canonicalPayload(job) {
+    const args = job.args;
+    switch (clusterOf(job.name)) {
+        case "bash": {
+            const command = args?.command;
+            if (typeof command !== "string" || command === "")
+                return null;
+            const cwd = args?.cwd;
+            if (typeof cwd === "string" && cwd !== "" && cwd !== ".")
+                return `${command}\ncwd ${cwd}`;
+            return command;
+        }
+        case "read":
+            return fileQuestion(job.name, args) ?? ".";
+        case "write":
+            return fileQuestion(job.name, args);
+        case "mcp":
+            return `${job.name}\n${stableJson(args ?? {})}`;
+    }
+}
+function sortKeys(value) {
+    if (value === null || typeof value !== "object")
+        return value;
+    if (Array.isArray(value))
+        return value.map((item) => sortKeys(item));
+    const rec = value;
+    return Object.fromEntries(Object.keys(rec)
+        .toSorted()
+        .map((key) => [key, sortKeys(rec[key])]));
+}
+function stableJson(value) {
+    return JSON.stringify(sortKeys(value));
+}
+//# sourceMappingURL=evidence.js.map

package/dist/policy-processor/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/policy-processor/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,SAAS,EACT,YAAY,EACZ,eAAe,EACf,WAAW,EACX,WAAW,EACX,cAAc,EACd,WAAW,GACZ,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAapF,MAAM,UAAU,YAAY,CAAC,GAAgB;IAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QACxC,OAAO;YACL,YAAY,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACvC,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,EAAE;YACf,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC;SAC7C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC;gBAAE,SAAS;YAC9D,IAAI,UAAU,CAAC,YAAY,KAAK,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACxE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,IAAI,KAAK,KAAK,GAAG;YAAE,SAAS;QAC/D,IAAI,KAAK,CAAC,iBAAiB,EAAE,IAAI,IAAI;YAAE,SAAS;QAChD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACzD,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS;QAC1B,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO;QACL,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC;QACpC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/B,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3B,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB;IACvC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,SAAS,WAAW,CAAC,IAAiB,EAAE,OAA+B;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAe,CAAC;IACpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,IAAI,GAAuB,IAAI,CAAC;IACpC,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,GAAG,IAAI,CAAC,QAAQ,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,OAAO,EAAE,CAAC;IAClB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACxC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,IAAiB;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAe,CAAC;IACpC,IAAI,IAAI,GAAuB,IAAI,CAAC;IACpC,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACpE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,GAAG,IAAI,CAAC,QAAQ,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IACD,8FAA8F;IAC9F,IAAI,OAAO,GAAuB,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9G,OAAO,OAAO,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,UAAU,IAAI,IAAI,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,YAAY,KAAK,EAAE;gBAAE,OAAO,UAAU,CAAC,YAAY,CAAC;QAChH,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,QAAQ,YAAY,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAkB;IACjD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;AACxH,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,kBAAkB,CAAC,GAAgB;IACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACnD,6FAA6F;IAC7F,iDAAiD;IACjD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAgB;IACzC,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,EAAyB,EAAE,CAAC,MAAM,YAAY,WAAW,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,aAAa,CAAC,GAAgB;IACrC,OAAO,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,EAA6B,EAAE,CAAC,MAAM,YAAY,eAAe,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,QAAQ,CAAI,GAAwB,EAAE,KAAuC;IACpF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,IAAI,GAA+B,GAAG,CAAC;IAC3C,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,MAAM,GAAY,IAAI,CAAC,MAAM,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QACjC,IAAI,MAAM,YAAY,WAAW;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,GAAG,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAE,MAA8B,CAAC,CAAC,CAAC,IAAI,CAAC;IACtH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAyB,EAAE,GAAgB;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,GAAG,GAA+B,IAAI,CAAC;IAC3C,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,MAAM,GAAY,GAAG,CAAC,MAAM,CAAC;QACnC,IAAI,MAAM,YAAY,WAAW;YAAE,OAAO,KAAK,CAAC;QAChD,GAAG,GAAG,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAE,MAA8B,CAAC,CAAC,CAAC,IAAI,CAAC;IACrH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAgB;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,QAAQ,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;YAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC/D,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,CAAC;YACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;gBAAE,OAAO,GAAG,OAAO,SAAS,GAAG,EAAE,CAAC;YAC1F,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,MAAM;YACT,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC;QAC7C,KAAK,OAAO;YACV,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,KAAK,KAAK;YACR,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACb,QAAQ,EAAE;SACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/policy-processor/explain.d.ts

@@ -0,0 +1,59 @@
+import { type GrantRow, type GrantSubject, type PermissionMode } from "@inhuman.tools/harness-model";
+import { type ClassId } from "@inhuman.tools/policy/floor";
+import { type LicenseScope } from "./scope.js";
+export type ExplainProbe = {
+    readonly kind: "shell";
+    readonly command: string;
+    readonly cwd?: string;
+} | {
+    readonly kind: "path";
+    readonly cluster: "read" | "write";
+    readonly path: string;
+} | {
+    readonly kind: "mcp";
+    readonly server: string;
+    readonly account?: string;
+    readonly tool: string;
+} | {
+    readonly kind: "tool";
+    readonly name: string;
+    readonly args?: Readonly<Record<string, unknown>>;
+};
+export type Tier = "block" | "soft-deny" | "ask" | "allow";
+export type Explanation = {
+    readonly tier: Tier;
+    readonly classes: Array<{
+        readonly id: ClassId;
+        readonly label: string;
+    }>;
+    readonly votes: Array<{
+        readonly tier: Tier;
+        readonly class: ClassId;
+        readonly ruleId: string;
+        readonly lift?: string;
+    }>;
+    readonly resolver: {
+        readonly kind: "allow" | "judge" | "human" | "deny";
+        readonly layer: "dist" | "managed" | "user" | "project" | "session";
+        readonly onDeny?: "human" | "deny";
+        readonly onFail?: "human" | "deny";
+    } | null;
+    readonly grant: GrantRow | null;
+    readonly grantable: GrantSubject[];
+    /** Acknowledgement flags that cover the call in this mode and the stored ack that satisfies them. */
+    readonly ack: {
+        readonly flags: Array<{
+            readonly label: string;
+            readonly why?: string;
+            readonly layer: string;
+        }>;
+        readonly satisfiedBy: GrantRow | null;
+    } | null;
+    readonly outcome: "runs" | "judge-ask" | "judge-soft-deny" | "prompts-you" | "denied" | "blocked";
+    readonly reason: string;
+};
+export declare function explainCall(scope: LicenseScope, probe: ExplainProbe, options?: {
+    readonly mode?: PermissionMode;
+    readonly unattended?: boolean;
+}): Promise<Explanation>;
+//# sourceMappingURL=explain.d.ts.map

package/dist/policy-processor/explain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../src/policy-processor/explain.ts"],"names":[],"mappings":"AAMA,OAAO,EAKL,KAAK,QAAQ,EACb,KAAK,YAAY,EAUjB,KAAK,cAAc,EACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAkC,KAAK,OAAO,EAAqB,MAAM,6BAA6B,CAAC;AAG9G,OAAO,EAA+B,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAE5E,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpF;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,CAAC;AAExG,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,WAAW,GAAG,KAAK,GAAG,OAAO,CAAC;AAE3D,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1E,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACpB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;QACpB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;IACH,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;QACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;QACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;QACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;KACpC,GAAG,IAAI,CAAC;IACT,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC;IACnC,qGAAqG;IACrG,QAAQ,CAAC,GAAG,EAAE;QACZ,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjG,QAAQ,CAAC,WAAW,EAAE,QAAQ,GAAG,IAAI,CAAC;KACvC,GAAG,IAAI,CAAC;IACT,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,iBAAiB,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAqBF,wBAAsB,WAAW,CAC/B,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9E,OAAO,CAAC,WAAW,CAAC,CA4GtB"}

package/dist/policy-processor/explain.js

@@ -0,0 +1,224 @@
+/**
+ * "What would happen to this call right now?" The same floor, grant and resolution code as a real
+ * call, with no judge and no effect, so the answer cannot drift from the real path.
+ */
+import nodePath from "node:path";
+import { activeAcks, clusterOf, collectAckFlags, coveringGrants, grantOptionsFor, isShellHatch, layersOf, matchAckFlags, readRootList, resolveAcks, resolveCall, ruleStampFor, } from "@inhuman.tools/harness-model";
+import { CLASSES, classesOf, join, cast } from "@inhuman.tools/policy/floor";
+import { tirithClass, tirithDisposition, tirithFailure } from "@inhuman.tools/policy-tirith";
+import { floorVerdict, withRealRoots } from "./scope.js";
+const TIER = { block: "block", deny: "soft-deny", ask: "ask", policyApprove: "allow" };
+function nameAndArgs(probe) {
+    switch (probe.kind) {
+        case "shell":
+            return {
+                name: "shell",
+                args: { command: probe.command, ...(probe.cwd === undefined ? {} : { cwd: probe.cwd }) },
+                mcpName: "shell",
+            };
+        case "path":
+            return { name: probe.cluster === "read" ? "read_file" : "write_file", args: { path: probe.path }, mcpName: "" };
+        case "mcp":
+            return { name: `mcp__${probe.server}__${probe.tool}`, args: {}, mcpName: probe.tool };
+        case "tool":
+            return { name: probe.name, args: { ...probe.args }, mcpName: probe.name };
+    }
+}
+export async function explainCall(scope, probe, options = {}) {
+    const root = scope.root;
+    const { name, args, mcpName } = nameAndArgs(probe);
+    const source = root.policyProgram.trim() === "" ? scope.distSource() : root.policyProgram;
+    let verdict;
+    const layers = layersOf({
+        user: root.authorizationUserJson,
+        project: root.authorizationProjectJson,
+        session: root.authorizationOverlayJson,
+    });
+    const ruleMcp = probe.kind === "mcp"
+        ? { server: probe.server, account: probe.account ?? probe.server, tool: probe.tool }
+        : undefined;
+    const rule = clusterOf(name) === "mcp"
+        ? ruleStampFor(layers, { tool: name, ...(ruleMcp === undefined ? {} : { mcp: ruleMcp }) })
+        : {};
+    try {
+        const policy = await scope.compiledPolicy(source, await withRealRoots(readRootList(root.readRoots).toSorted()));
+        verdict = await floorVerdict(policy, name, args, root.path, mcpName, rule);
+    }
+    catch (error) {
+        verdict = cast("block", "policy-fault", "host:policy-invalid");
+        return finish(verdict, null, null, [], `the policy is invalid, so every call is blocked: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (clusterOf(name) === "bash" && typeof args.command === "string") {
+        try {
+            const report = await scope.checkShell(args.command, {
+                cwd: nodePath.resolve(root.path, typeof args.cwd === "string" ? args.cwd : "."),
+            });
+            verdict = join([
+                verdict,
+                cast(tirithDisposition(report), tirithClass(report), `tirith:${report.findings.map((f) => f.rule_id).join("+")}`),
+            ]);
+        }
+        catch (error) {
+            const report = tirithFailure(error);
+            verdict = join([verdict, cast(tirithDisposition(report), tirithClass(report), "tirith:error")]);
+        }
+    }
+    const tierVotes = verdict.votes.filter((vote) => vote.disposition === verdict.disposition);
+    const classes = classesOf(verdict);
+    const cluster = clusterOf(name);
+    const mcp = ruleMcp;
+    const hatch = typeof args.command === "string" && isShellHatch(args.command);
+    const call = {
+        tier: verdict.disposition,
+        cluster,
+        hatch,
+        votes: tierVotes,
+        mcp,
+        toolName: name,
+    };
+    const grant = verdict.disposition === "ask" ? (coveringGrants(scope.visibleGrants(), call)?.[0] ?? null) : null;
+    const grantable = grantOptionsFor(call).map((option) => option.subject);
+    const subject = {
+        tool: name,
+        units: tierVotes.flatMap((vote) => (vote.unit === undefined ? [] : [vote.unit])),
+        paths: tierVotes.flatMap((vote) => (vote.path === undefined ? [] : [vote.path])),
+        ...(mcp === undefined ? {} : { mcp }),
+    };
+    const resolution = verdict.disposition === "ask" || verdict.disposition === "deny"
+        ? resolveCall(layers, {
+            mode: options.mode ?? root.permissionMode,
+            cluster,
+            tier: verdict.disposition,
+            classes,
+            unattended: options.unattended ?? false,
+            subject,
+        })
+        : null;
+    const mode = options.mode ?? root.permissionMode;
+    const ackCall = {
+        classes,
+        ...(mcp === undefined ? {} : { mcp }),
+        tool: name,
+        units: [...(verdict.seen ?? []), ...verdict.votes.flatMap((vote) => (vote.unit === undefined ? [] : [vote.unit]))],
+    };
+    const active = verdict.disposition === "block" ? [] : activeAcks(matchAckFlags(collectAckFlags(layers), ackCall), mode);
+    const acks = resolveAcks(active, scope.visibleAcks(), ackCall);
+    const ack = active.length === 0
+        ? null
+        : {
+            flags: active.map((flag) => ({
+                label: flag.label,
+                ...(flag.why === undefined ? {} : { why: flag.why }),
+                layer: flag.layer,
+            })),
+            satisfiedBy: acks.state === "satisfied" ? (scope.visibleAcks().find((row) => row.id === acks.ackedBy[0]) ?? null) : null,
+        };
+    return withAck(finish(verdict, resolution, grant, grantable, undefined, options.unattended ?? false), ack, options.unattended ?? false);
+}
+/**
+ * An unsatisfied flag stops a call that would run, and follows one that waits for a judge or a person.
+ * `block` and denials are untouched: an acknowledgement never lifts anything.
+ */
+function withAck(base, ack, unattended) {
+    if (ack === null || ack.satisfiedBy !== null)
+        return { ...base, ack };
+    const what = ack.flags.map((flag) => flag.label).join("; ");
+    if (base.outcome === "blocked" || base.outcome === "denied")
+        return { ...base, ack };
+    if (unattended) {
+        return {
+            ...base,
+            ack,
+            outcome: "denied",
+            reason: `${base.reason} It also needs your acknowledgement (${what}); this run is unattended, so it is denied as interaction_required and the run continues.`,
+        };
+    }
+    if (base.outcome === "runs") {
+        return {
+            ...base,
+            ack,
+            outcome: "prompts-you",
+            reason: `${base.reason} It is flagged to need your acknowledgement (${what}), so you are asked before it runs.`,
+        };
+    }
+    return { ...base, ack, reason: `${base.reason} If it is allowed, you are still asked to acknowledge it (${what}).` };
+}
+function finish(verdict, resolution, grant, grantable, forced, unattended = false) {
+    const tier = TIER[verdict.disposition] ?? "ask";
+    const classes = classesOf(verdict);
+    const base = {
+        tier,
+        classes: classes.map((id) => ({ id, label: CLASSES[id].label })),
+        votes: verdict.votes.map((vote) => ({
+            tier: TIER[vote.disposition] ?? "ask",
+            class: vote.class,
+            ruleId: vote.ruleId,
+            ...(vote.lift === undefined ? {} : { lift: vote.lift }),
+        })),
+        grant,
+        grantable,
+        ack: null,
+    };
+    const what = classes.map((id) => CLASSES[id].label.toLowerCase()).join(", ");
+    if (verdict.disposition === "block") {
+        return {
+            ...base,
+            resolver: null,
+            outcome: "blocked",
+            reason: forced ?? `Blocked (${what}). Nothing lifts a block: no mode, grant, judge or answer.`,
+        };
+    }
+    if (resolution === null) {
+        return { ...base, resolver: null, outcome: "runs", reason: "The floor allows it." };
+    }
+    const { resolver, layer, interaction } = resolution;
+    const cell = {
+        kind: resolver.kind,
+        layer,
+        ...(resolver.kind === "judge" ? { onDeny: resolver.onDeny, onFail: resolver.onFail } : {}),
+    };
+    const tierName = tier === "soft-deny" ? "Soft-deny" : "Ask";
+    if (grant !== null) {
+        return {
+            ...base,
+            resolver: cell,
+            outcome: "runs",
+            reason: `${tierName} (${what}), covered by a stored grant: ${grant.label}.`,
+        };
+    }
+    switch (resolver.kind) {
+        case "allow":
+            return {
+                ...base,
+                resolver: cell,
+                outcome: "runs",
+                reason: `${tierName} (${what}); the ${layer} table allows it in this mode.`,
+            };
+        case "deny":
+            return {
+                ...base,
+                resolver: cell,
+                outcome: "denied",
+                reason: interaction.resolver || (unattended && interaction.onDeny)
+                    ? `${tierName} (${what}) needs a person, and this run is unattended: denied as interaction_required.`
+                    : `${tierName} (${what}); the ${layer} table denies it.`,
+            };
+        case "human":
+            return {
+                ...base,
+                resolver: cell,
+                outcome: "prompts-you",
+                reason: `${tierName} (${what}): you are asked${tier === "soft-deny" ? " every time; nothing is remembered" : ""}.`,
+            };
+        case "judge":
+            return {
+                ...base,
+                resolver: cell,
+                outcome: tier === "soft-deny" ? "judge-soft-deny" : "judge-ask",
+                reason: tier === "soft-deny"
+                    ? `Soft-deny (${what}): the judge decides whether you explicitly asked for exactly this; a "no" ${resolver.onDeny === "human" ? "asks you" : "denies it"}. Grants do not apply.`
+                    : `Ask (${what}): the judge decides; a "no" ${resolver.onDeny === "human" ? "asks you" : "denies it"}.`,
+            };
+    }
+}
+//# sourceMappingURL=explain.js.map