@intutic/shared-types 2.9.1 → 3.0.0

package/dist/gateRuleRecord.js

@@ -0,0 +1,474 @@
+"use strict";
+/**
+ * Rule records in the policy snapshot: the `@rule` record, its
+ * fallback line, and how a gate that reads it decides a call (Tier R).
+ *
+ * A gate that cannot evaluate a rule must refuse what the rule covers, never
+ * skip it. So for each rule a gate is to enforce, the snapshot writer emits
+ * two lines inside the digest, as the decide records do:
+ *
+ * - an `@rule` record of five tab-separated columns: the tag, the fallback
+ *   line's id or `-`, the kind, the rollout (`shadow` or `enforce`), and
+ *   base64 of the canonical JSON of its payload, `{v, ref, sopTitle, …kind
+ *   fields}`. Every reader up to v22 needs six
+ *   columns for a rule, so it skips the record;
+ * - for an enforcing record, a fallback line: an ordinary `block` rule whose
+ *   id is `<kind>-fallback:<n>@<sha256(sopId)[:12]>`
+ *   ({@link gateRuleFallbackId}), on what the rule covers
+ *   ({@link gateRuleFallback}). A gate that reads `@rule` records skips a
+ *   fallback line only when a record that decodes names it.
+ *
+ * A snapshot with any `@rule` record is written in format 3
+ * ({@link RULE_SNAPSHOT_FORMAT}). Kinds in this batch:
+ *
+ * | Kind | From | Gate decision |
+ * |---|---|---|
+ * | `requires_outcome` | `requires_before: action:run_tests[ok] -> X` | X refused `PREREQUISITE_UNMET` unless the latest test run in the session passed |
+ * | `scope_paths` | `scope_paths:` with `scope_paths_mode: enforce` | a file change outside the scope refused `OUT_OF_SCOPE` |
+ * | `plan_approval` | `plan_approval: required\|strict` | refused `PLAN_NOT_APPROVED` until the session's plan is approved; under `strict`, a tool not in the plan refused `OFF_PLAN` |
+ *
+ * Only SOPs with no `roles:` compile: a gate knows no agent role.
+ *
+ * Self-contained but for `./testOutcome.ts`, `./scopeMatch.ts`, `./lanes.ts`
+ * and `./phrases.ts` (all carried by `@intutic/gate` as byte-identical
+ * copies), so `@intutic/gate` keeps a byte-identical copy of this file too.
+ * The Python port is `intutic_clawde/gate/rule_record.py`; both run
+ * `fixtures/rule-record-vectors.json`.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RULE_RECORD_JS_SOURCE = exports.V22_ACTION_TOKENS = exports.GATE_RULE_KINDS = exports.RULE_SCOPE_PATH_MAX_CHARS = exports.RULE_SCOPE_PATHS_MAX = exports.RULE_SOP_TITLE_MAX_CHARS = exports.RULE_SNAPSHOT_FORMAT = exports.RULE_RECORD_TAG = void 0;
+exports.gateRuleRef = gateRuleRef;
+exports.gateRuleFallbackId = gateRuleFallbackId;
+exports.gateRuleFallbackReason = gateRuleFallbackReason;
+exports.gateRulePayload = gateRulePayload;
+exports.encodeGateRuleRecord = encodeGateRuleRecord;
+exports.decodeGateRuleRecord = decodeGateRuleRecord;
+exports.toServedGateRecord = toServedGateRecord;
+exports.fromServedGateRecord = fromServedGateRecord;
+exports.gateRuleFallback = gateRuleFallback;
+exports.compileSopGateRecords = compileSopGateRecords;
+exports.gateRulePlanFromResponse = gateRulePlanFromResponse;
+exports.evaluateGateRuleRecords = evaluateGateRuleRecords;
+const lanes_js_1 = require("./lanes.js");
+const scopeMatch_js_1 = require("./scopeMatch.js");
+const testOutcome_js_1 = require("./testOutcome.js");
+/** First column of a rule record. */
+exports.RULE_RECORD_TAG = '@rule';
+/** The snapshot format a snapshot carrying any rule record is written in. */
+exports.RULE_SNAPSHOT_FORMAT = 3;
+/** The longest SOP title a record carries, in code points. */
+exports.RULE_SOP_TITLE_MAX_CHARS = 80;
+/** The most scope paths one record carries, and the longest of them in code points. */
+exports.RULE_SCOPE_PATHS_MAX = 64;
+exports.RULE_SCOPE_PATH_MAX_CHARS = 512;
+exports.GATE_RULE_KINDS = ['requires_outcome', 'scope_paths', 'plan_approval'];
+/** The four action tokens a v22 hook gate's classifier knows: a fallback on one of them can use the `action` subject. */
+exports.V22_ACTION_TOKENS = ['action:deploy', 'action:publish', 'action:release', 'action:db_write'];
+/**
+ * The fields of each kind's payload, sorted: `{v, ref, sopTitle, …kind
+ * fields}`. The kind, the fallback id and the rollout are columns 3, 2 and 4,
+ * not payload fields. Any other field refuses the record.
+ */
+const RULE_RECORD_FIELDS = {
+    requires_outcome: ['adjacent', 'first', 'qualifier', 'ref', 'sopTitle', 'then', 'v'],
+    scope_paths: ['ref', 'scopePaths', 'sopTitle', 'v'],
+    plan_approval: ['mode', 'ref', 'sopTitle', 'v'],
+};
+/** `ref`: `<sopId>#<kind>:<n>`. */
+function gateRuleRef(sopId, kind, n) {
+    return sopId + '#' + kind + ':' + n;
+}
+/** `fallbackId`: `<kind>-fallback:<n>@<first 12 hex of sha256(sopId)>`. */
+function gateRuleFallbackId(kind, n, sopId, sha256Hex) {
+    return kind + '-fallback:' + n + '@' + sha256Hex(sopId).slice(0, 12);
+}
+/** What an older gate says when a rule's fallback line refuses. The writer scrubs and bounds it like any reason. */
+function gateRuleFallbackReason(kind, sopTitle) {
+    if (kind === 'requires_outcome')
+        return 'Qualified requires_before (' + sopTitle + '): this gate cannot read test results, so the call it gates is refused; upgrade the Intutic gate';
+    if (kind === 'scope_paths')
+        return 'scope_paths_mode: enforce (' + sopTitle + '): this gate cannot check a change against the scope, so every file change is refused; upgrade the Intutic gate';
+    return 'plan_approval (' + sopTitle + '): this gate cannot check plan approval, so every call is refused; upgrade the Intutic gate';
+}
+function ruleIsObject(v) {
+    return v !== null && typeof v === 'object' && !Array.isArray(v);
+}
+/** JSON with keys sorted at every level and no whitespace, so a record is byte-stable. */
+function ruleCanonicalJson(v) {
+    if (Array.isArray(v))
+        return '[' + v.map(ruleCanonicalJson).join(',') + ']';
+    if (ruleIsObject(v))
+        return '{' + Object.keys(v).sort().map((k) => JSON.stringify(k) + ':' + ruleCanonicalJson(v[k])).join(',') + '}';
+    return JSON.stringify(v);
+}
+function ruleToBase64(text) {
+    let binary = '';
+    for (const byte of new TextEncoder().encode(text))
+        binary += String.fromCharCode(byte);
+    return btoa(binary);
+}
+/** Standard base64 back to UTF-8 text. Throws on anything but the canonical encoding of valid UTF-8. */
+function ruleFromBase64(b64) {
+    const text = new TextDecoder('utf-8', { fatal: true }).decode(Uint8Array.from(atob(b64), (c) => c.charCodeAt(0)));
+    if (ruleToBase64(text) !== b64)
+        throw new Error('not canonical base64');
+    return text;
+}
+/** A short text a record may carry: a string with no tab, CR or LF, at most `max` code points (and, with `min`, at least that many). */
+function ruleText(v, max, min) {
+    if (typeof v !== 'string' || /[\t\r\n]/.test(v))
+        return false;
+    const n = Array.from(v).length;
+    return n >= min && n <= max;
+}
+/** The record's payload: everything but the kind, the fallback id and the rollout, which are columns. */
+function gateRulePayload(record) {
+    const payload = {};
+    for (const k of Object.keys(record))
+        if (k !== 'kind' && k !== 'fallbackId' && k !== 'rollout')
+            payload[k] = record[k];
+    return payload;
+}
+/** The record as one `.rules` line. */
+function encodeGateRuleRecord(record) {
+    return [exports.RULE_RECORD_TAG, record.fallbackId ?? '-', record.kind, record.rollout, ruleToBase64(ruleCanonicalJson(gateRulePayload(record)))].join('\t');
+}
+/**
+ * Reads an `@rule` line back, its kind, fallback id and rollout from the
+ * columns and the rest from the payload. Null, and so the fallback line stays
+ * in force, for any other line or when: it does not have five columns; the
+ * base64 or JSON is damaged; the kind (column 3) is unknown; the payload has
+ * a field its kind does not have or lacks one; the rollout (column 4) is not
+ * `shadow` or `enforce`; a field is out of its bounds; the ref does not end
+ * `#<kind>:<n>`; an enforcing record's fallback id (column 2) is not
+ * `<kind>-fallback:<n>@<12 hex>` for the same n, or a shadow record's is
+ * not `-`.
+ */
+function decodeGateRuleRecord(line) {
+    const f = line.split('\t');
+    if (f.length !== 5 || f[0] !== '@rule' || !f[4])
+        return null;
+    const kind = f[2];
+    if (kind !== 'requires_outcome' && kind !== 'scope_paths' && kind !== 'plan_approval')
+        return null;
+    let r;
+    try {
+        r = JSON.parse(ruleFromBase64(f[4]));
+    }
+    catch {
+        return null;
+    }
+    if (!ruleIsObject(r))
+        return null;
+    const fields = RULE_RECORD_FIELDS[kind];
+    const keys = Object.keys(r).sort();
+    if (keys.length !== fields.length || keys.some((k, i) => k !== fields[i]))
+        return null;
+    if (f[3] !== 'shadow' && f[3] !== 'enforce')
+        return null;
+    r = { ...r, kind, fallbackId: f[1] === '-' ? null : f[1], rollout: f[3] };
+    if (!ruleIsObject(r))
+        return null;
+    if (r.v !== 1)
+        return null;
+    if (!ruleText(r.sopTitle, 80, 0))
+        return null;
+    if (typeof r.ref !== 'string')
+        return null;
+    const m = /^.+#([a-z_]+):([1-9][0-9]{0,5})$/.exec(r.ref);
+    if (!m || m[1] !== kind)
+        return null;
+    if (r.rollout === 'enforce') {
+        if (typeof r.fallbackId !== 'string' || !new RegExp('^' + kind + '-fallback:' + m[2] + '@[0-9a-f]{12}$').test(r.fallbackId))
+            return null;
+    }
+    else if (r.fallbackId !== null) {
+        return null;
+    }
+    if (kind === 'requires_outcome') {
+        if (r.first !== 'action:run_tests' || r.qualifier !== 'ok' || typeof r.adjacent !== 'boolean')
+            return null;
+        if (typeof r.then !== 'string' || !/^[A-Za-z][A-Za-z0-9_.:-]{0,63}$/.test(r.then) || r.then === 'action:run_tests')
+            return null;
+    }
+    else if (kind === 'scope_paths') {
+        const paths = r.scopePaths;
+        if (!Array.isArray(paths) || paths.length < 1 || paths.length > 64 || paths.some((p) => !ruleText(p, 512, 1)))
+            return null;
+    }
+    else if (r.mode !== 'required' && r.mode !== 'strict') {
+        return null;
+    }
+    return r;
+}
+/** A record in the served shape. */
+function toServedGateRecord(record, sopId) {
+    return { sopId, kind: record.kind, rollout: record.rollout, fallbackId: record.fallbackId, payload: gateRulePayload(record) };
+}
+/**
+ * A served record as a gate record, or null when it does not hold together:
+ * checked by encoding it and reading the line back, so a writer never emits
+ * a record no gate can decode (its fallback line would refuse instead).
+ */
+function fromServedGateRecord(served) {
+    if (!ruleIsObject(served) || !ruleIsObject(served.payload))
+        return null;
+    const fields = Object.keys(served.payload).filter((k) => k !== 'kind' && k !== 'fallbackId' && k !== 'rollout');
+    if (fields.length !== Object.keys(served.payload).length)
+        return null;
+    const line = [exports.RULE_RECORD_TAG, served.fallbackId ?? '-', served.kind, served.rollout, ruleToBase64(ruleCanonicalJson(served.payload))].join('\t');
+    return decodeGateRuleRecord(line);
+}
+/** A title as a record carries it: tabs and newlines collapsed, at most 80 code points. */
+function ruleSopTitle(title) {
+    return Array.from(title.replace(/[\t\r\n]+/g, ' ').trim()).slice(0, 80).join('');
+}
+/** A regex literal for a tool name in a portable-ERE tool rule. */
+function ruleEscape(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/**
+ * The fallback line for an enforcing record: what an older gate refuses in
+ * its place. `requires_outcome`: the gated call (by the action subject for
+ * the four tokens a v22 classifier knows, by the token's phrases for a newer
+ * token, by the shell tools for a token with no phrases, by the tool subject
+ * for a tool); `scope_paths`: every mutation tool; `plan_approval`: every call.
+ */
+function gateRuleFallback(record) {
+    if (record.fallbackId === null)
+        return null;
+    const base = { id: record.fallbackId, severity: 'block', reason: gateRuleFallbackReason(record.kind, record.sopTitle) };
+    if (record.kind === 'plan_approval')
+        return { ...base, subject: 'tool', source: ' [^ ]+ ', ignoreCase: false };
+    if (record.kind === 'scope_paths') {
+        const tools = [...scopeMatch_js_1.SCOPE_WRITE_TOOLS, ...scopeMatch_js_1.SCOPE_EDIT_TOOLS, ...scopeMatch_js_1.SCOPE_DELETE_TOOLS, ...scopeMatch_js_1.SCOPE_MOVE_TOOLS, ...scopeMatch_js_1.SCOPE_EDITOR_TOOLS];
+        return { ...base, subject: 'tool', source: ' [^ ]*(' + tools.map(ruleEscape).join('|') + ') ', ignoreCase: true };
+    }
+    const then = record.then;
+    if (exports.V22_ACTION_TOKENS.indexOf(then) !== -1)
+        return { ...base, subject: 'action', source: ' (' + ruleEscape(then) + ') ', ignoreCase: true };
+    if (then.slice(0, 7) === 'action:') {
+        const phrases = Object.prototype.hasOwnProperty.call(lanes_js_1.LANE_PHRASES, then) ? lanes_js_1.LANE_PHRASES[then] : [];
+        if (phrases.length > 0)
+            return { ...base, subject: 'phrase', source: phrases.join('|'), ignoreCase: true };
+        return { ...base, subject: 'tool', source: ' [^ ]*(' + scopeMatch_js_1.SCOPE_SHELL_TOOLS.map(ruleEscape).join('|') + ') ', ignoreCase: true };
+    }
+    return { ...base, subject: 'tool', source: ' (' + ruleEscape(then) + ') ', ignoreCase: false };
+}
+/**
+ * The records (and, for each enforcing one, its fallback line) one SOP
+ * compiles to: each qualified `requires_before`, then its `scope_paths` when
+ * `scope_paths_mode: enforce`, then its `plan_approval:`. Nothing for a SOP
+ * with `roles:` (a gate knows no role). A shadow SOP (`mode: shadow`, or
+ * `entry.shadow`, which the writer sets for SILENT_LOG) gets shadow records
+ * and no fallback lines.
+ */
+function compileSopGateRecords(entry, fm, sha256Hex) {
+    const out = { records: [], fallbacks: [] };
+    if (fm.roles.length > 0)
+        return out;
+    const rollout = fm.mode === 'shadow' || entry.shadow === true ? 'shadow' : 'enforce';
+    const sopTitle = ruleSopTitle(entry.sopTitle);
+    const add = (record) => {
+        out.records.push(record);
+        const fallback = gateRuleFallback(record);
+        if (fallback)
+            out.fallbacks.push(fallback);
+    };
+    const base = (kind, n) => ({
+        v: 1,
+        ref: gateRuleRef(entry.sopId, kind, n),
+        sopTitle,
+        fallbackId: rollout === 'enforce' ? gateRuleFallbackId(kind, n, entry.sopId, sha256Hex) : null,
+        rollout,
+    });
+    let n = 0;
+    for (const [first, then, adjacent] of fm.requiresBefore) {
+        if (first !== 'action:run_tests[ok]' || !/^[A-Za-z][A-Za-z0-9_.:-]{0,63}$/.test(then) || then === 'action:run_tests')
+            continue;
+        n += 1;
+        add({ ...base('requires_outcome', n), kind: 'requires_outcome', first: 'action:run_tests', qualifier: 'ok', then, adjacent });
+    }
+    if (fm.scopePathsMode === 'enforce') {
+        const paths = fm.scopePaths.filter((p) => ruleText(p, 512, 1)).slice(0, 64);
+        if (paths.length > 0)
+            add({ ...base('scope_paths', 1), kind: 'scope_paths', scopePaths: paths });
+    }
+    if (fm.planApproval !== null)
+        add({ ...base('plan_approval', 1), kind: 'plan_approval', mode: fm.planApproval });
+    return out;
+}
+/**
+ * The session's plan from `GET /api/v1/plans/session/:sessionId`: `status`
+ * is the HTTP status, or null when the control plane could not be reached.
+ * 200 with `lifecycleState` APPROVED or EXECUTING is approved, its tools the
+ * steps' `tool` (or `toolName`) names; 200 in any other state, and 404, are
+ * none; anything else is unavailable, which refuses as none does.
+ */
+function gateRulePlanFromResponse(status, body) {
+    if (status === 404)
+        return { status: 'none' };
+    if (status !== 200 || !ruleIsObject(body))
+        return { status: 'unavailable' };
+    if (body.lifecycleState !== 'APPROVED' && body.lifecycleState !== 'EXECUTING')
+        return { status: 'none' };
+    const tools = [];
+    for (const step of Array.isArray(body.steps) ? body.steps : []) {
+        if (!ruleIsObject(step))
+            continue;
+        const tool = typeof step.tool === 'string' ? step.tool : step.toolName;
+        if (typeof tool === 'string' && tool.trim() !== '' && tools.indexOf(tool.trim()) === -1)
+            tools.push(tool.trim());
+    }
+    return { status: 'approved', tools };
+}
+function ruleLower(s) {
+    return s.toLowerCase();
+}
+/** The plan rule of `records` (strict beats required), or null. */
+function rulePlanFinding(records, call) {
+    if (records.length === 0 || (0, scopeMatch_js_1.isPlanExemptTool)(call.tool))
+        return null;
+    const strict = records.find((r) => r.mode === 'strict');
+    const rec = strict ?? records[0];
+    const ruleId = 'plan_approval.' + rec.sopTitle;
+    const scope = { tools: [call.tool] };
+    if (call.sessionId === '') {
+        return { code: 'PLAN_NOT_APPROVED', ruleId, scope, ref: rec.ref, reason: 'plan_approval: ' + rec.mode + ' (' + rec.sopTitle + '): ' + call.harness + ' sent no session id, so no approved plan can be found for this session' };
+    }
+    if (call.plan.status !== 'approved') {
+        const why = call.plan.status === 'none' ? 'this session has no approved plan' : 'the approved plans could not be read';
+        return { code: 'PLAN_NOT_APPROVED', ruleId, scope, ref: rec.ref, reason: 'plan_approval: ' + rec.mode + ' (' + rec.sopTitle + '): ' + why + '; get the plan approved, then retry' };
+    }
+    if (rec.mode === 'strict') {
+        const tool = ruleLower(call.tool);
+        if (!call.plan.tools.some((t) => ruleLower(t) === tool)) {
+            return { code: 'OFF_PLAN', ruleId, scope, ref: rec.ref, reason: call.tool + ' is not a step of this session\'s approved plan (plan_approval: strict, ' + rec.sopTitle + ')' };
+        }
+    }
+    return null;
+}
+/** The first requires_outcome record the call is gated by and does not meet, or null. */
+function ruleRequiresFinding(records, call) {
+    const tool = ruleLower(call.tool);
+    for (const rec of records) {
+        if (call.actions.indexOf(rec.then) === -1 && ruleLower(rec.then) !== tool)
+            continue;
+        let c;
+        let why = null;
+        if (!call.observable)
+            c = 'not_observable';
+        else if (call.sessionId === '')
+            c = 'no_session';
+        else {
+            const got = (0, testOutcome_js_1.prerequisiteCase)(call.outcomes, rec.first, rec.adjacent, call.nowMs);
+            c = got.case;
+            why = got.why;
+        }
+        if (c === 'met')
+            continue;
+        return {
+            code: 'PREREQUISITE_UNMET',
+            ruleId: 'requires_before.' + rec.first + '[ok]' + (rec.adjacent ? '~>' : '->') + rec.then,
+            reason: (0, testOutcome_js_1.prerequisiteUnmetReason)(rec.first, rec.then, c, why, call.harness),
+            scope: { tools: [rec.then], step: rec.first },
+            ref: rec.ref,
+        };
+    }
+    return null;
+}
+/** A change outside the union of the records' scopes, or null. */
+function ruleScopeFinding(records, call) {
+    if (records.length === 0)
+        return null;
+    const targets = (0, scopeMatch_js_1.changeTargets)(call.tool, call.input);
+    if (targets.length === 0)
+        return null;
+    const scopes = [];
+    for (const r of records)
+        for (const p of r.scopePaths)
+            if (scopes.indexOf(p) === -1)
+                scopes.push(p);
+    const outside = [];
+    for (const t of targets) {
+        const rel = (0, scopeMatch_js_1.scopeRelativePath)(t.target, call.cwd, call.root);
+        if ((rel === null || !(0, scopeMatch_js_1.isWithinScope)(rel, scopes)) && outside.indexOf(t.target) === -1)
+            outside.push(t.target);
+    }
+    if (outside.length === 0)
+        return null;
+    const rec = records[0];
+    return {
+        code: 'OUT_OF_SCOPE',
+        ruleId: 'scope_paths.' + rec.sopTitle,
+        reason: 'Changes outside the declared file scope: ' + outside.join(', ') + ' (scope: ' + scopes.join(', ') + ')',
+        scope: { paths: outside },
+        ref: rec.ref,
+    };
+}
+/** The findings of one rollout's records, in order: plan approval, then qualified prerequisites, then scope. */
+function ruleFindings(records, call) {
+    const out = [];
+    const plan = rulePlanFinding(records.filter((r) => r.kind === 'plan_approval'), call);
+    if (plan)
+        out.push(plan);
+    const requires = ruleRequiresFinding(records.filter((r) => r.kind === 'requires_outcome'), call);
+    if (requires)
+        out.push(requires);
+    const scope = ruleScopeFinding(records.filter((r) => r.kind === 'scope_paths'), call);
+    if (scope)
+        out.push(scope);
+    return out;
+}
+/**
+ * Tier R: the snapshot's rule records against one call. The enforcing
+ * records' first finding refuses; the shadow records' findings are reported
+ * and change nothing. A rule failure (an unreadable plan feed, an unreadable
+ * outcome state) is a finding, so it refuses whatever the client's
+ * `failClosed` says.
+ */
+function evaluateGateRuleRecords(records, call) {
+    const enforce = ruleFindings(records.filter((r) => r.rollout === 'enforce'), call);
+    return { refusal: enforce.length > 0 ? enforce[0] : null, shadow: ruleFindings(records.filter((r) => r.rollout === 'shadow'), call) };
+}
+/**
+ * The decoder and Tier R as JavaScript source, for the hook gates to embed
+ * after `PHRASES_JS_SOURCE`, `TEST_OUTCOME_JS_SOURCE` and
+ * `SCOPE_MATCH_JS_SOURCE`, whose functions these call. The constants the
+ * functions read are written into the source.
+ */
+exports.RULE_RECORD_JS_SOURCE = [
+    `const RULE_RECORD_FIELDS = ${JSON.stringify(RULE_RECORD_FIELDS)};`,
+    `const LANE_PHRASES = ${JSON.stringify(lanes_js_1.LANE_PHRASES)};`,
+    `const V22_ACTION_TOKENS = ${JSON.stringify(exports.V22_ACTION_TOKENS)};`,
+    `const SCOPE_WRITE_TOOLS = ${JSON.stringify(scopeMatch_js_1.SCOPE_WRITE_TOOLS)};`,
+    `const SCOPE_EDIT_TOOLS = ${JSON.stringify(scopeMatch_js_1.SCOPE_EDIT_TOOLS)};`,
+    `const SCOPE_DELETE_TOOLS = ${JSON.stringify(scopeMatch_js_1.SCOPE_DELETE_TOOLS)};`,
+    `const SCOPE_MOVE_TOOLS = ${JSON.stringify(scopeMatch_js_1.SCOPE_MOVE_TOOLS)};`,
+    `const SCOPE_EDITOR_TOOLS = ${JSON.stringify(scopeMatch_js_1.SCOPE_EDITOR_TOOLS)};`,
+    `const SCOPE_SHELL_TOOLS = ${JSON.stringify(scopeMatch_js_1.SCOPE_SHELL_TOOLS)};`,
+    ...[
+        ruleIsObject,
+        ruleFromBase64,
+        ruleToBase64,
+        ruleText,
+        decodeGateRuleRecord,
+        gateRuleFallbackReason,
+        ruleEscape,
+        gateRuleFallback,
+        ruleLower,
+        rulePlanFinding,
+        ruleRequiresFinding,
+        ruleScopeFinding,
+        ruleFindings,
+        evaluateGateRuleRecords,
+        gateRulePlanFromResponse,
+    ].map((fn) => fn
+        .toString()
+        .replace(/\(0,\s*(?:[\w$]+_js_\d+|__vite_ssr_import_\d+__)\.([\w$]+)\)/g, '$1')
+        .replace(/\b(?:[\w$]+_js_\d+|__vite_ssr_import_\d+__)\.([\w$]+)/g, '$1')
+        .replace(/\bexports\./g, '')),
+].join('\n');
+//# sourceMappingURL=gateRuleRecord.js.map

package/dist/gateRuleRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateRuleRecord.js","sourceRoot":"","sources":["../src/gateRuleRecord.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;;;AAmEH,kCAEC;AAGD,gDAEC;AAGD,wDAIC;AAkCD,0CAIC;AAGD,oDAEC;AAaD,oDAsCC;AAgBD,gDAEC;AAOD,oDAMC;AA2CD,4CAgBC;AAUD,sDAiCC;AAmBD,4DAWC;AAwID,0DAGC;AA3dD,yCAAyC;AACzC,mDAAqN;AACrN,qDAAsH;AAGtH,qCAAqC;AACxB,QAAA,eAAe,GAAG,OAAO,CAAA;AACtC,6EAA6E;AAChE,QAAA,oBAAoB,GAAG,CAAC,CAAA;AACrC,8DAA8D;AACjD,QAAA,wBAAwB,GAAG,EAAE,CAAA;AAC1C,uFAAuF;AAC1E,QAAA,oBAAoB,GAAG,EAAE,CAAA;AACzB,QAAA,yBAAyB,GAAG,GAAG,CAAA;AAG/B,QAAA,eAAe,GAA4B,CAAC,kBAAkB,EAAE,aAAa,EAAE,eAAe,CAAC,CAAA;AAE5G,yHAAyH;AAC5G,QAAA,iBAAiB,GAAsB,CAAC,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAA;AAkC5H;;;;GAIG;AACH,MAAM,kBAAkB,GAA4C;IAClE,gBAAgB,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC;IACpF,WAAW,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC;IACnD,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC;CAChD,CAAA;AAED,mCAAmC;AACnC,SAAgB,WAAW,CAAC,KAAa,EAAE,IAAkB,EAAE,CAAS;IACtE,OAAO,KAAK,GAAG,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,CAAA;AACrC,CAAC;AAED,2EAA2E;AAC3E,SAAgB,kBAAkB,CAAC,IAAkB,EAAE,CAAS,EAAE,KAAa,EAAE,SAAmC;IAClH,OAAO,IAAI,GAAG,YAAY,GAAG,CAAC,GAAG,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACtE,CAAC;AAED,oHAAoH;AACpH,SAAgB,sBAAsB,CAAC,IAAkB,EAAE,QAAgB;IACzE,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,6BAA6B,GAAG,QAAQ,GAAG,kGAAkG,CAAA;IACrL,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,6BAA6B,GAAG,QAAQ,GAAG,iHAAiH,CAAA;IAC/L,OAAO,iBAAiB,GAAG,QAAQ,GAAG,6FAA6F,CAAA;AACrI,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AACjE,CAAC;AAED,0FAA0F;AAC1F,SAAS,iBAAiB,CAAC,CAAU;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IAC3E,IAAI,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACrI,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,IAAI,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IACtF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;AACrB,CAAC;AAED,wGAAwG;AACxG,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjH,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACvE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,wIAAwI;AACxI,SAAS,QAAQ,CAAC,CAAU,EAAE,GAAW,EAAE,GAAW;IACpD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAC9B,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAA;AAC7B,CAAC;AAED,yGAAyG;AACzG,SAAgB,eAAe,CAAC,MAAsB;IACpD,MAAM,OAAO,GAA4B,EAAE,CAAA;IAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC,GAAI,MAA6C,CAAC,CAAC,CAAC,CAAA;IAC9J,OAAO,OAA4E,CAAA;AACrF,CAAC;AAED,uCAAuC;AACvC,SAAgB,oBAAoB,CAAC,MAAsB;IACzD,OAAO,CAAC,uBAAe,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACtJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5D,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAiB,CAAA;IACjC,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,IAAI,CAAA;IAClG,IAAI,CAAU,CAAA;IACd,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACtF,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACxD,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7C,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1C,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACxD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACpC,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAA;IAC1I,CAAC;SAAM,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,KAAK,KAAK,kBAAkB,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QAC1G,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,IAAI,CAAA;IACjI,CAAC;SAAM,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAA;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;IAC5H,CAAC;SAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,CAA8B,CAAA;AACvC,CAAC;AAeD,oCAAoC;AACpC,SAAgB,kBAAkB,CAAC,MAAsB,EAAE,KAAa;IACtE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAA;AAC/H,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,MAAwB;IAC3D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,SAAS,CAAC,CAAA;IAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACrE,MAAM,IAAI,GAAG,CAAC,uBAAe,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjJ,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAA;AACnC,CAAC;AA0BD,2FAA2F;AAC3F,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAClF,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACjD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,MAAsB;IACrD,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC3C,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAgB,EAAE,MAAM,EAAE,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAA;IAChI,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;IAC9G,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,CAAC,GAAG,iCAAiB,EAAE,GAAG,gCAAgB,EAAE,GAAG,kCAAkB,EAAE,GAAG,gCAAgB,EAAE,GAAG,kCAAkB,CAAC,CAAA;QAC5H,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;IACnH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IACxB,IAAI,yBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;IAC3I,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,uBAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,uBAAY,CAAC,IAAI,CAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACnG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;QAC1G,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,iCAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;IAC/H,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;AAChG,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CACnC,KAA4D,EAC5D,EAAuB,EACvB,SAAmC;IAEnC,MAAM,GAAG,GAAiE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IACxG,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAA;IACnC,MAAM,OAAO,GAAyB,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1G,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,CAAC,MAAsB,EAAE,EAAE;QACrC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACxB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,QAAQ;YAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC5C,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,CAAC,IAAkB,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC,EAAE,CAAU;QACb,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,QAAQ;QACR,UAAU,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9F,OAAO;KACR,CAAC,CAAA;IACF,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,sBAAsB,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,kBAAkB;YAAE,SAAQ;QAC9H,CAAC,IAAI,CAAC,CAAA;QACN,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC/H,CAAC;IACD,IAAI,EAAE,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC3E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;IAClG,CAAC;IACD,IAAI,EAAE,CAAC,YAAY,KAAK,IAAI;QAAE,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,EAAE,CAAC,CAAA;IAChH,OAAO,GAAG,CAAA;AACZ,CAAC;AAYD;;;;;;GAMG;AACH,SAAgB,wBAAwB,CAAC,MAAqB,EAAE,IAAa;IAC3E,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC7C,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;IAC3E,IAAI,IAAI,CAAC,cAAc,KAAK,UAAU,IAAI,IAAI,CAAC,cAAc,KAAK,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IACxG,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC/D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,SAAQ;QACjC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAA;QACtE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAClH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;AACtC,CAAC;AAyCD,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;AACxB,CAAC;AAED,mEAAmE;AACnE,SAAS,eAAe,CAAC,OAAsC,EAAE,IAAkB;IACjF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAA,gCAAgB,EAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;IACvD,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAE,CAAA;IACjC,MAAM,MAAM,GAAG,gBAAgB,GAAG,GAAG,CAAC,QAAQ,CAAA;IAC9C,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;IACpC,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,iBAAiB,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC,OAAO,GAAG,wEAAwE,EAAE,CAAA;IACjO,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,sCAAsC,CAAA;QACtH,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,iBAAiB,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC,QAAQ,GAAG,KAAK,GAAG,GAAG,GAAG,qCAAqC,EAAE,CAAA;IACrL,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,GAAG,0EAA0E,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAA;QAC/K,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,mBAAmB,CAAC,OAAyC,EAAE,IAAkB;IACxF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,SAAQ;QACnF,IAAI,CAAmB,CAAA;QACvB,IAAI,GAAG,GAAkB,IAAI,CAAA;QAC7B,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,CAAC,GAAG,gBAAgB,CAAA;aACrC,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE;YAAE,CAAC,GAAG,YAAY,CAAA;aAC3C,CAAC;YACJ,MAAM,GAAG,GAAG,IAAA,iCAAgB,EAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;YAChF,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;YACZ,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;QACf,CAAC;QACD,IAAI,CAAC,KAAK,KAAK;YAAE,SAAQ;QACzB,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,kBAAkB,GAAG,GAAG,CAAC,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI;YACzF,MAAM,EAAE,IAAA,wCAAuB,EAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC;YAC1E,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE;YAC7C,GAAG,EAAE,GAAG,CAAC,GAAG;SACb,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,kEAAkE;AAClE,SAAS,gBAAgB,CAAC,OAAoC,EAAE,IAAkB;IAChF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,MAAM,OAAO,GAAG,IAAA,6BAAa,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;YAAE,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnG,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAA,iCAAiB,EAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5D,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,IAAA,6BAAa,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC/G,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;IACvB,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,cAAc,GAAG,GAAG,CAAC,QAAQ;QACrC,MAAM,EAAE,2CAA2C,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG;QAChH,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACzB,GAAG,EAAE,GAAG,CAAC,GAAG;KACb,CAAA;AACH,CAAC;AAED,gHAAgH;AAChH,SAAS,YAAY,CAAC,OAAkC,EAAE,IAAkB;IAC1E,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAA2B,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,EAAE,IAAI,CAAC,CAAA;IAC9G,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,EAAE,IAAI,CAAC,CAAA;IAC5H,IAAI,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAChC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,IAAI,CAAC,CAAA;IAC5G,IAAI,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1B,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,uBAAuB,CAAC,OAAkC,EAAE,IAAkB;IAC5F,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;IAClF,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,EAAE,CAAA;AACxI,CAAC;AAED;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG;IACnC,8BAA8B,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,GAAG;IACnE,wBAAwB,IAAI,CAAC,SAAS,CAAC,uBAAY,CAAC,GAAG;IACvD,6BAA6B,IAAI,CAAC,SAAS,CAAC,yBAAiB,CAAC,GAAG;IACjE,6BAA6B,IAAI,CAAC,SAAS,CAAC,iCAAiB,CAAC,GAAG;IACjE,4BAA4B,IAAI,CAAC,SAAS,CAAC,gCAAgB,CAAC,GAAG;IAC/D,8BAA8B,IAAI,CAAC,SAAS,CAAC,kCAAkB,CAAC,GAAG;IACnE,4BAA4B,IAAI,CAAC,SAAS,CAAC,gCAAgB,CAAC,GAAG;IAC/D,8BAA8B,IAAI,CAAC,SAAS,CAAC,kCAAkB,CAAC,GAAG;IACnE,6BAA6B,IAAI,CAAC,SAAS,CAAC,iCAAiB,CAAC,GAAG;IACjE,GAAG;QACD,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,QAAQ;QACR,oBAAoB;QACpB,sBAAsB;QACtB,UAAU;QACV,gBAAgB;QAChB,SAAS;QACT,eAAe;QACf,mBAAmB;QACnB,gBAAgB;QAChB,YAAY;QACZ,uBAAuB;QACvB,wBAAwB;KACzB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACX,EAAE;SACC,QAAQ,EAAE;SACV,OAAO,CAAC,+DAA+D,EAAE,IAAI,CAAC;SAC9E,OAAO,CAAC,wDAAwD,EAAE,IAAI,CAAC;SACvE,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAC/B;CACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA"}