@intutic/shared-types 2.9.1 → 3.0.1

package/dist/scopeMatch.js

@@ -0,0 +1,451 @@
+"use strict";
+/**
+ * Scope and plan semantics, ported from the proxy so every surface answers
+ * "is this change inside the scope?" and "is this run on its plan?" the same
+ * way.
+ *
+ * | Function | Port of |
+ * |---|---|
+ * | {@link isWithinScope} | `is_within_scope`, `plugins/anomaly/detectors.rs` |
+ * | {@link collectScopePaths} | `collect_scope_paths`, `sops.rs`, the org ceiling included |
+ * | {@link planOffSteps} | `PlanAdherenceDetector`, `detectors.rs`, with {@link PLAN_DEVIATION_TOLERANCE} |
+ * | {@link changeTargets} | `manifest_from_invocations`, `manifest.rs`: the mutation entries of one call |
+ * | {@link diffChangedPaths} | (new) the paths a unified or git diff changes |
+ *
+ * Beside them, what only the gates need: {@link scopeRelativePath} makes a
+ * gate's target relative to its workspace root (a path outside the root is
+ * out of scope), {@link isPlanExemptTool} names the calls `plan_approval:`
+ * never refuses, and {@link isFileWriteCall} says whether a call changed files,
+ * which makes an earlier passing test run stale (Q1).
+ *
+ * Self-contained but for `./phrases.ts`, so `@intutic/gate` keeps a
+ * byte-identical copy and the JavaScript hook gates embed
+ * {@link SCOPE_MATCH_JS_SOURCE} beside the phrase matcher's source. The
+ * Python port is `intutic_clawde/gate/scope_match.py`; the proxy's Rust runs
+ * the same `fixtures/scope-plan-vectors.json`. `manifestParity.test.ts`
+ * holds the tool and key lists to `manifest.rs` and `actions.rs`.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SCOPE_MATCH_JS_SOURCE = exports.FILE_WRITE_SHELL_PHRASES = exports.PLAN_EXEMPT_TOOLS = exports.SCOPE_TARGET_MAX_BYTES = exports.SCOPE_MOVE_TO_KEYS = exports.SCOPE_MOVE_FROM_KEYS = exports.SCOPE_READ_TOOLS = exports.SCOPE_SHELL_TOOLS = exports.SCOPE_COMMAND_KEYS = exports.SCOPE_PATH_KEYS = exports.SCOPE_EDITOR_TOOLS = exports.SCOPE_MOVE_TOOLS = exports.SCOPE_DELETE_TOOLS = exports.SCOPE_EDIT_TOOLS = exports.SCOPE_WRITE_TOOLS = exports.NARROWED_TO_NOTHING = exports.PLAN_DEVIATION_TOLERANCE = void 0;
+exports.isWithinScope = isWithinScope;
+exports.sopAppliesToRole = sopAppliesToRole;
+exports.collectScopePaths = collectScopePaths;
+exports.collectPlanSteps = collectPlanSteps;
+exports.planOffSteps = planOffSteps;
+exports.changeTargets = changeTargets;
+exports.diffChangedPaths = diffChangedPaths;
+exports.scopeRelativePath = scopeRelativePath;
+exports.isPlanExemptTool = isPlanExemptTool;
+exports.isFileWriteCall = isFileWriteCall;
+const phrases_js_1 = require("./phrases.js");
+/** The share of off-plan steps a plan forgives under `plan_steps_mode: advise` (`PLAN_DEVIATION_TOLERANCE` in detectors.rs). */
+exports.PLAN_DEVIATION_TOLERANCE = 0.4;
+/** What an org ceiling disjoint from the workspace list leaves (`NARROWED_TO_NOTHING`, sops.rs): no path is inside it. */
+exports.NARROWED_TO_NOTHING = '<none: workspace list disjoint from org ceiling>';
+/** `WRITE_TOOLS`, manifest.rs. */
+exports.SCOPE_WRITE_TOOLS = ['write', 'write_file', 'writefile', 'create_file', 'createfile'];
+/** `EDIT_TOOLS`, manifest.rs. */
+exports.SCOPE_EDIT_TOOLS = ['edit', 'edit_file', 'editfile', 'multiedit', 'apply_patch', 'str_replace', 'notebookedit'];
+/** `DELETE_TOOLS`, manifest.rs. */
+exports.SCOPE_DELETE_TOOLS = ['delete_file', 'deletefile', 'remove_file', 'rm_file'];
+/** `MOVE_TOOLS`, manifest.rs. */
+exports.SCOPE_MOVE_TOOLS = ['move_file', 'movefile', 'rename_file', 'rename'];
+/** `EDITOR_TOOLS`, actions.rs: the text editor, whose `command` decides whether it writes. */
+exports.SCOPE_EDITOR_TOOLS = ['str_replace_editor', 'text_editor', 'texteditor', 'str_replace_based_edit_tool'];
+/** `PATH_KEYS`, manifest.rs. */
+exports.SCOPE_PATH_KEYS = ['file_path', 'filepath', 'path', 'filename', 'target_file', 'notebook_path'];
+/** `COMMAND_KEYS`, manifest.rs. */
+exports.SCOPE_COMMAND_KEYS = ['command', 'cmd', 'script'];
+/** `SHELL_TOOLS`, actions.rs. */
+exports.SCOPE_SHELL_TOOLS = ['bash', 'shell', 'run_command', 'runcommand', 'execute_command', 'run_shell_command', 'terminal', 'execute', 'exec'];
+/** `READ_TOOLS`, actions.rs. */
+exports.SCOPE_READ_TOOLS = ['read', 'readfile', 'view', 'cat', 'open_file'];
+/** A move's source and destination keys, manifest.rs. */
+exports.SCOPE_MOVE_FROM_KEYS = ['source', 'source_path', 'from', 'old_path'];
+exports.SCOPE_MOVE_TO_KEYS = ['destination', 'destination_path', 'to', 'new_path'];
+/** A target is cut to this many bytes, and marked with `…` when it was (`TARGET_MAX`, manifest.rs). */
+exports.SCOPE_TARGET_MAX_BYTES = 512;
+/**
+ * Tools `plan_approval:` never refuses: the read tools and the search and
+ * listing tools an agent needs to write a plan in the first place.
+ */
+exports.PLAN_EXEMPT_TOOLS = ['read', 'readfile', 'view', 'cat', 'open_file', 'glob', 'grep', 'ls', 'list_dir', 'search', 'todowrite'];
+/**
+ * Shell phrases that change files in the working tree. With the mutation
+ * tools ({@link changeTargets}), a call matching one makes an earlier passing
+ * test run stale ({@link isFileWriteCall}).
+ */
+exports.FILE_WRITE_SHELL_PHRASES = [
+    'sed -i',
+    'perl -i',
+    'perl -pi',
+    'git apply',
+    'git am',
+    'git checkout',
+    'git switch',
+    'git restore',
+    'git reset',
+    'git merge',
+    'git pull',
+    'git rebase',
+    'git cherry-pick',
+    'git revert',
+    'git stash pop',
+    'git stash apply',
+    'patch -p',
+];
+/** ASCII lower case, as Rust's `to_ascii_lowercase`. */
+function scopeAsciiLower(s) {
+    return s.replace(/[A-Z]+/g, (m) => m.toLowerCase());
+}
+/** `tool_is`, actions.rs: the name, lower-cased, is one of `group` or ends with one. */
+function scopeToolIs(name, group) {
+    const lower = name.toLowerCase();
+    for (const t of group)
+        if (lower === t || lower.slice(-t.length) === t)
+            return true;
+    return false;
+}
+/** The first of `keys` whose value in `input` is a non-empty string. */
+function scopeKeyed(input, keys) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input))
+        return null;
+    const o = input;
+    for (const k of keys) {
+        const v = o[k];
+        if (typeof v === 'string' && v !== '')
+            return v;
+    }
+    return null;
+}
+/** `clip`, manifest.rs: the first {@link SCOPE_TARGET_MAX_BYTES} bytes, and `…` when cut. */
+function scopeClip(s) {
+    let bytes = 0;
+    let i = 0;
+    while (i < s.length) {
+        const c = s.charCodeAt(i);
+        let n = 3;
+        let w = 1;
+        if (c < 0x80)
+            n = 1;
+        else if (c < 0x800)
+            n = 2;
+        else if (c >= 0xd800 && c <= 0xdbff && i + 1 < s.length) {
+            const l = s.charCodeAt(i + 1);
+            if (l >= 0xdc00 && l <= 0xdfff) {
+                n = 4;
+                w = 2;
+            }
+        }
+        if (bytes + n > 512)
+            return s.slice(0, i) + '…';
+        bytes += n;
+        i += w;
+    }
+    return s;
+}
+/**
+ * Is `target` inside any of `scopes`? Segment-prefix match: `packages/proxy`
+ * covers `packages/proxy/src/main.rs`, not `packages/proxy-extras/x.rs`.
+ * Leading `./` and `/` and trailing `/` are dropped, and the comparison
+ * ignores ASCII case. An empty scope covers everything.
+ */
+function isWithinScope(target, scopes) {
+    const norm = (s) => {
+        let t = s;
+        while (t.slice(0, 2) === './')
+            t = t.slice(2);
+        let a = 0;
+        while (a < t.length && t.charAt(a) === '/')
+            a++;
+        t = t.slice(a);
+        let b = t.length;
+        while (b > 0 && t.charAt(b - 1) === '/')
+            b--;
+        return scopeAsciiLower(t.slice(0, b));
+    };
+    const t = norm(target);
+    for (const raw of scopes) {
+        const s = norm(raw);
+        if (s === '' || t === s || t.slice(0, s.length + 1) === s + '/')
+            return true;
+    }
+    return false;
+}
+/** `applies_to`, sops.rs: an unscoped SOP applies to everyone; a scoped one only to its roles, and never to a caller with no role. */
+function sopAppliesToRole(roles, role) {
+    if (roles.length === 0)
+        return true;
+    if (role === '')
+        return false;
+    return roles.indexOf(scopeAsciiLower(role)) !== -1;
+}
+/**
+ * The path scope in force for `role` (`collect_scope_paths`): the workspace
+ * SOPs' scopes, narrowed by the org SOPs' (a workspace scope survives when it
+ * is inside an org one; none surviving is {@link NARROWED_TO_NOTHING}; no
+ * workspace scope takes the org's), sorted and deduplicated. Empty means
+ * unrestricted.
+ */
+function collectScopePaths(sops, role) {
+    const workspace = [];
+    const org = [];
+    for (const s of sops) {
+        if (!sopAppliesToRole(s.roles, role))
+            continue;
+        for (const p of s.scopePaths)
+            (s.scope === 'org' ? org : workspace).push(p);
+    }
+    let out;
+    if (org.length === 0)
+        out = workspace;
+    else if (workspace.length === 0)
+        out = org;
+    else {
+        out = workspace.filter((w) => isWithinScope(w, org));
+        if (out.length === 0)
+            out = [exports.NARROWED_TO_NOTHING];
+    }
+    return out.slice().sort().filter((p, i, all) => i === 0 || all[i - 1] !== p);
+}
+/**
+ * The plan in force for `role` (`collect_plan_steps`, sops.rs): the
+ * workspace SOPs' steps in order, not deduplicated (a plan is a sequence),
+ * narrowed by the org SOPs' steps by membership ignoring ASCII case (none
+ * surviving is {@link NARROWED_TO_NOTHING}; no workspace plan takes the
+ * org's). Empty means no plan.
+ */
+function collectPlanSteps(sops, role) {
+    const workspace = [];
+    const org = [];
+    for (const s of sops) {
+        if (!sopAppliesToRole(s.roles, role))
+            continue;
+        for (const p of s.planSteps)
+            (s.scope === 'org' ? org : workspace).push(p);
+    }
+    if (org.length === 0)
+        return workspace;
+    if (workspace.length === 0)
+        return org;
+    const allowed = org.map(scopeAsciiLower);
+    const out = workspace.filter((w) => allowed.indexOf(scopeAsciiLower(w)) !== -1);
+    return out.length > 0 ? out : [exports.NARROWED_TO_NOTHING];
+}
+/**
+ * The off-plan steps of `sequence` against `planSteps` (`PlanAdherenceDetector`):
+ * empty when there is no plan or no sequence, or when the off-plan share is
+ * at most `tolerance`; otherwise the off-plan names, sorted and deduplicated,
+ * with the share. Names compare ignoring ASCII case.
+ */
+function planOffSteps(sequence, planSteps, tolerance) {
+    if (planSteps.length === 0 || sequence.length === 0)
+        return { offPlan: [], ratio: 0 };
+    const plan = planSteps.map(scopeAsciiLower);
+    const off = sequence.filter((t) => plan.indexOf(scopeAsciiLower(t)) === -1);
+    if (off.length === 0)
+        return { offPlan: [], ratio: 0 };
+    const ratio = off.length / sequence.length;
+    if (ratio <= tolerance)
+        return { offPlan: [], ratio };
+    return { offPlan: off.slice().sort().filter((p, i, all) => i === 0 || all[i - 1] !== p), ratio: Math.min(1, ratio) };
+}
+/**
+ * The mutations one tool call makes, as the proxy's change manifest records
+ * them: a move's source and destination; a text-editor call unless it is a
+ * `view`; a write, edit or delete tool's path. Only path targets that are not
+ * empty, each clipped as the manifest clips it. A shell command is never a
+ * path, so a shell call has none.
+ */
+function changeTargets(tool, input) {
+    if (scopeToolIs(tool, ['move_file', 'movefile', 'rename_file', 'rename'])) {
+        const from = scopeKeyed(input, ['source', 'source_path', 'from', 'old_path']);
+        const to = scopeKeyed(input, ['destination', 'destination_path', 'to', 'new_path']);
+        if (from !== null || to !== null) {
+            const out = [];
+            if (from !== null)
+                out.push({ op: 'move', target: scopeClip(from) });
+            if (to !== null)
+                out.push({ op: 'move', target: scopeClip(to) });
+            return out;
+        }
+    }
+    const keys = ['file_path', 'filepath', 'path', 'filename', 'target_file', 'notebook_path'];
+    let op = null;
+    if (scopeToolIs(tool, ['str_replace_editor', 'text_editor', 'texteditor', 'str_replace_based_edit_tool'])) {
+        const o = input !== null && typeof input === 'object' && !Array.isArray(input) ? input : {};
+        const command = typeof o.command === 'string' ? scopeAsciiLower(o.command) : '';
+        op = command === 'view' ? null : command === 'create' ? 'write' : 'edit';
+        if (op === null)
+            return [];
+    }
+    else if (scopeToolIs(tool, ['write', 'write_file', 'writefile', 'create_file', 'createfile']))
+        op = 'write';
+    else if (scopeToolIs(tool, ['edit', 'edit_file', 'editfile', 'multiedit', 'apply_patch', 'str_replace', 'notebookedit']))
+        op = 'edit';
+    else if (scopeToolIs(tool, ['delete_file', 'deletefile', 'remove_file', 'rm_file']))
+        op = 'delete';
+    if (op === null)
+        return [];
+    const target = scopeKeyed(input, keys);
+    return target === null ? [] : [{ op, target: scopeClip(target) }];
+}
+/** One path from a diff header, or null: quotes dropped, a `a/` or `b/` prefix dropped, `/dev/null` and empty refused, anything after a tab cut. */
+function scopeDiffPath(raw, prefix) {
+    let p = raw;
+    const tab = p.indexOf('\t');
+    if (tab !== -1)
+        p = p.slice(0, tab);
+    // Spaces only (not tabs), trimmed by index: a `/[ ]+$/` backtracks
+    // quadratically on a long run of spaces that is not at the end.
+    let start = 0;
+    let end = p.length;
+    while (start < end && p.charCodeAt(start) === 32)
+        start++;
+    while (end > start && p.charCodeAt(end - 1) === 32)
+        end--;
+    p = p.slice(start, end);
+    if (p.length >= 2 && p.charAt(0) === '"' && p.charAt(p.length - 1) === '"')
+        p = p.slice(1, -1);
+    if (p === '/dev/null' || p === '')
+        return null;
+    if (prefix !== '' && p.slice(0, prefix.length) === prefix)
+        p = p.slice(prefix.length);
+    return p === '' ? null : p;
+}
+/**
+ * The paths a diff changes, in the order first seen, each once: from
+ * `diff --git a/X b/Y` (both, when it splits unambiguously), `--- a/X`,
+ * `+++ b/Y`, `rename from X` and `rename to Y`. `/dev/null` is not a path.
+ */
+function diffChangedPaths(diff) {
+    const out = [];
+    const add = (p) => {
+        if (p !== null && out.indexOf(p) === -1)
+            out.push(p);
+    };
+    for (const raw of diff.split('\n')) {
+        const line = raw.replace(/\r$/, '');
+        if (line.slice(0, 11) === 'diff --git ') {
+            const rest = line.slice(11);
+            if (rest.slice(0, 2) !== 'a/')
+                continue;
+            const first = rest.indexOf(' b/');
+            if (first === -1)
+                continue;
+            if (rest.indexOf(' b/', first + 1) === -1) {
+                add(scopeDiffPath(rest.slice(0, first), 'a/'));
+                add(scopeDiffPath(rest.slice(first + 1), 'b/'));
+            }
+            else if ((rest.length - 5) % 2 === 0) {
+                // `a/P b/P` with ` b/` inside P: the split that names one path twice.
+                const n = (rest.length - 5) / 2;
+                const a = rest.slice(2, 2 + n);
+                if (rest.slice(2 + n, 5 + n) === ' b/' && rest.slice(5 + n) === a)
+                    add(scopeDiffPath(a, ''));
+            }
+        }
+        else if (line.slice(0, 4) === '--- ')
+            add(scopeDiffPath(line.slice(4), 'a/'));
+        else if (line.slice(0, 4) === '+++ ')
+            add(scopeDiffPath(line.slice(4), 'b/'));
+        else if (line.slice(0, 12) === 'rename from ')
+            add(scopeDiffPath(line.slice(12), ''));
+        else if (line.slice(0, 10) === 'rename to ')
+            add(scopeDiffPath(line.slice(10), ''));
+    }
+    return out;
+}
+/** A POSIX path with `.` and `..` resolved and slashes collapsed; `..` never climbs above `/`. */
+function scopeNormalisePath(p) {
+    const parts = [];
+    for (const seg of p.split('/')) {
+        if (seg === '' || seg === '.')
+            continue;
+        if (seg === '..')
+            parts.pop();
+        else
+            parts.push(seg);
+    }
+    return '/' + parts.join('/');
+}
+/**
+ * `target` relative to the workspace `root` (both resolved against `cwd`
+ * when relative), or null when it is outside the root, names a home
+ * directory (`~`), or either path is not absolute after resolving. A gate
+ * checks the result with {@link isWithinScope}; null is out of scope.
+ */
+function scopeRelativePath(target, cwd, root) {
+    if (target === '' || target.charAt(0) === '~' || cwd.charAt(0) !== '/' || root.charAt(0) !== '/')
+        return null;
+    const abs = scopeNormalisePath(target.charAt(0) === '/' ? target : cwd + '/' + target);
+    const base = scopeNormalisePath(root);
+    if (abs === base)
+        return '';
+    const head = base === '/' ? '/' : base + '/';
+    return abs.slice(0, head.length) === head ? abs.slice(head.length) : null;
+}
+/** Whether `plan_approval:` lets `tool` run before the plan is approved: one of {@link PLAN_EXEMPT_TOOLS}, ignoring case, bare or as an MCP tool (`mcp__<server>__grep`). */
+function isPlanExemptTool(tool) {
+    const lower = tool.toLowerCase();
+    for (const t of ['read', 'readfile', 'view', 'cat', 'open_file', 'glob', 'grep', 'ls', 'list_dir', 'search', 'todowrite']) {
+        if (lower === t || lower.slice(-(t.length + 2)) === '__' + t)
+            return true;
+    }
+    return false;
+}
+/**
+ * Whether the call changed files: a mutation ({@link changeTargets}) or a
+ * shell command with one of {@link FILE_WRITE_SHELL_PHRASES} (`sed -i`,
+ * `git checkout`, …). An earlier passing test run is stale after one.
+ */
+function isFileWriteCall(tool, input) {
+    if (changeTargets(tool, input).length > 0)
+        return true;
+    if (!scopeToolIs(tool, ['bash', 'shell', 'run_command', 'runcommand', 'execute_command', 'run_shell_command', 'terminal', 'execute', 'exec']))
+        return false;
+    const command = scopeKeyed(input, ['command', 'cmd', 'script']);
+    if (command === null)
+        return false;
+    const words = (0, phrases_js_1.phraseText)(command);
+    for (const p of ['sed -i', 'perl -i', 'perl -pi', 'git apply', 'git am', 'git checkout', 'git switch', 'git restore', 'git reset', 'git merge', 'git pull', 'git rebase', 'git cherry-pick', 'git revert', 'git stash pop', 'git stash apply', 'patch -p']) {
+        if ((0, phrases_js_1.hasPhrase)(words, p))
+            return true;
+    }
+    return false;
+}
+/**
+ * The functions above as JavaScript source, for the hook gates to embed
+ * after the phrase matcher's source (`PHRASES_JS_SOURCE`), which
+ * {@link isFileWriteCall} calls. The lists the functions read are written
+ * into them, so the source needs nothing else; `scopeMatch.test.ts` holds
+ * those copies to the exported lists.
+ */
+exports.SCOPE_MATCH_JS_SOURCE = [
+    scopeAsciiLower,
+    scopeToolIs,
+    scopeKeyed,
+    scopeClip,
+    isWithinScope,
+    sopAppliesToRole,
+    collectScopePaths,
+    collectPlanSteps,
+    planOffSteps,
+    changeTargets,
+    scopeDiffPath,
+    diffChangedPaths,
+    scopeNormalisePath,
+    scopeRelativePath,
+    isPlanExemptTool,
+    isFileWriteCall,
+]
+    .map((fn) => fn
+    .toString()
+    .replace(/\(0,\s*(?:[\w$]+_js_\d+|__vite_ssr_import_\d+__)\.([\w$]+)\)/g, '$1')
+    .replace(/\b(?:[\w$]+_js_\d+|__vite_ssr_import_\d+__)\.([\w$]+)/g, '$1')
+    .replace(/\bexports\./g, ''))
+    .join('\n')
+    .replace(/\bNARROWED_TO_NOTHING\b/g, JSON.stringify(exports.NARROWED_TO_NOTHING));
+//# sourceMappingURL=scopeMatch.js.map

package/dist/scopeMatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeMatch.js","sourceRoot":"","sources":["../src/scopeMatch.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AA4HH,sCAiBC;AAUD,4CAIC;AASD,8CAeC;AAgBD,4CAYC;AAQD,oCAQC;AASD,sCAwBC;AAyBD,4CA2BC;AAmBD,8CAOC;AAGD,4CAMC;AAOD,0CAUC;AAtWD,6CAAoD;AAEpD,gIAAgI;AACnH,QAAA,wBAAwB,GAAG,GAAG,CAAA;AAE3C,0HAA0H;AAC7G,QAAA,mBAAmB,GAAG,kDAAkD,CAAA;AAErF,kCAAkC;AACrB,QAAA,iBAAiB,GAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAA;AACrH,iCAAiC;AACpB,QAAA,gBAAgB,GAAsB,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC,CAAA;AAC/I,mCAAmC;AACtB,QAAA,kBAAkB,GAAsB,CAAC,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,CAAC,CAAA;AAC5G,iCAAiC;AACpB,QAAA,gBAAgB,GAAsB,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;AACrG,8FAA8F;AACjF,QAAA,kBAAkB,GAAsB,CAAC,oBAAoB,EAAE,aAAa,EAAE,YAAY,EAAE,6BAA6B,CAAC,CAAA;AACvI,gCAAgC;AACnB,QAAA,eAAe,GAAsB,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,CAAC,CAAA;AAC/H,mCAAmC;AACtB,QAAA,kBAAkB,GAAsB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;AACjF,iCAAiC;AACpB,QAAA,iBAAiB,GAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;AACzK,gCAAgC;AACnB,QAAA,gBAAgB,GAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,CAAA;AACnG,yDAAyD;AAC5C,QAAA,oBAAoB,GAAsB,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;AACvF,QAAA,kBAAkB,GAAsB,CAAC,aAAa,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;AAC1G,uGAAuG;AAC1F,QAAA,sBAAsB,GAAG,GAAG,CAAA;AAEzC;;;GAGG;AACU,QAAA,iBAAiB,GAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;AAE7J;;;;GAIG;AACU,QAAA,wBAAwB,GAAsB;IACzD,QAAQ;IACR,SAAS;IACT,UAAU;IACV,WAAW;IACX,QAAQ;IACR,cAAc;IACd,YAAY;IACZ,aAAa;IACb,WAAW;IACX,WAAW;IACX,UAAU;IACV,YAAY;IACZ,iBAAiB;IACjB,YAAY;IACZ,eAAe;IACf,iBAAiB;IACjB,UAAU;CACX,CAAA;AAQD,wDAAwD;AACxD,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;AACrD,CAAC;AAED,wFAAwF;AACxF,SAAS,WAAW,CAAC,IAAY,EAAE,KAAwB;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IAChC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;IACnF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,KAAc,EAAE,IAAuB;IACzD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACpF,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACd,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,6FAA6F;AAC7F,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,IAAI,CAAC,GAAG,IAAI;YAAE,CAAC,GAAG,CAAC,CAAA;aACd,IAAI,CAAC,GAAG,KAAK;YAAE,CAAC,GAAG,CAAC,CAAA;aACpB,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAC7B,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;gBAC/B,CAAC,GAAG,CAAC,CAAA;gBACL,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,GAAG,GAAG;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAA;QAC/C,KAAK,IAAI,CAAC,CAAA;QACV,CAAC,IAAI,CAAC,CAAA;IACR,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,MAAc,EAAE,MAAyB;IACrE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE;QACjC,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC7C,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,CAAC,EAAE,CAAA;QAC/C,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACd,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,CAAC,EAAE,CAAA;QAC5C,OAAO,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAA;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IACtB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;QACnB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG;YAAE,OAAO,IAAI,CAAA;IAC9E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AASD,sIAAsI;AACtI,SAAgB,gBAAgB,CAAC,KAAwB,EAAE,IAAY;IACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,KAAK,CAAA;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;AACpD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,IAAyB,EAAE,IAAY;IACvE,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC;YAAE,SAAQ;QAC9C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;YAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,GAAa,CAAA;IACjB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,GAAG,SAAS,CAAA;SAChC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,GAAG,GAAG,CAAA;SACrC,CAAC;QACJ,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QACpD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,GAAG,CAAC,2BAAmB,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;AAC9E,CAAC;AASD;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,IAAwB,EAAE,IAAY;IACrE,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC;YAAE,SAAQ;QAC9C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS;YAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAA;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IACxC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC/E,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,2BAAmB,CAAC,CAAA;AACrD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,YAAY,CAAC,QAA2B,EAAE,SAA4B,EAAE,SAAiB;IACvG,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;IACrF,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;IACtD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;IAC1C,IAAI,KAAK,IAAI,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;IACrD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAA;AACtH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,IAAY,EAAE,KAAc;IACxD,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;QAC7E,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAA;QACnF,IAAI,IAAI,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,GAAG,GAAmB,EAAE,CAAA;YAC9B,IAAI,IAAI,KAAK,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACpE,IAAI,EAAE,KAAK,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAChE,OAAO,GAAG,CAAA;QACZ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,CAAC,CAAA;IAC1F,IAAI,EAAE,GAA8B,IAAI,CAAA;IACxC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,oBAAoB,EAAE,aAAa,EAAE,YAAY,EAAE,6BAA6B,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,CAAC,GAAG,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAA;QACxH,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/E,EAAE,GAAG,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;QACxE,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,EAAE,CAAA;IAC5B,CAAC;SAAM,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;QAAE,EAAE,GAAG,OAAO,CAAA;SACxG,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;QAAE,EAAE,GAAG,MAAM,CAAA;SAChI,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QAAE,EAAE,GAAG,QAAQ,CAAA;IAClG,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACtC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,oJAAoJ;AACpJ,SAAS,aAAa,CAAC,GAAW,EAAE,MAAc;IAChD,IAAI,CAAC,GAAG,GAAG,CAAA;IACX,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACnC,mEAAmE;IACnE,gEAAgE;IAChE,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;IAClB,OAAO,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,CAAA;IACzD,OAAO,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,CAAA;IACzD,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACvB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9F,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAC9C,IAAI,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrF,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AAC5B,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,GAAG,GAAG,CAAC,CAAgB,EAAE,EAAE;QAC/B,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACtD,CAAC,CAAA;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACnC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,aAAa,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;gBAAE,SAAQ;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACjC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,SAAQ;YAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;gBAC9C,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;YACjD,CAAC;iBAAM,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,sEAAsE;gBACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;gBAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC9B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;oBAAE,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAC9F,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM;YAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;aAC1E,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM;YAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;aACxE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,cAAc;YAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;aAChF,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,YAAY;YAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,kGAAkG;AAClG,SAAS,kBAAkB,CAAC,CAAS;IACnC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;YAAE,SAAQ;QACvC,IAAI,GAAG,KAAK,IAAI;YAAE,KAAK,CAAC,GAAG,EAAE,CAAA;;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9B,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,MAAc,EAAE,GAAW,EAAE,IAAY;IACzE,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAC7G,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,CAAA;IACtF,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC3B,MAAM,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAA;IAC5C,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3E,CAAC;AAED,6KAA6K;AAC7K,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IAChC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1H,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;IAC3E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,IAAY,EAAE,KAAc;IAC1D,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACtD,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3J,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC/D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAClC,MAAM,KAAK,GAAG,IAAA,uBAAU,EAAC,OAAO,CAAC,CAAA;IACjC,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,UAAU,CAAC,EAAE,CAAC;QAC3P,IAAI,IAAA,sBAAS,EAAC,KAAK,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;IACtC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG;IACnC,eAAe;IACf,WAAW;IACX,UAAU;IACV,SAAS;IACT,aAAa;IACb,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;CAChB;KACE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACV,EAAE;KACC,QAAQ,EAAE;KACV,OAAO,CAAC,+DAA+D,EAAE,IAAI,CAAC;KAC9E,OAAO,CAAC,wDAAwD,EAAE,IAAI,CAAC;KACvE,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAC/B;KACA,IAAI,CAAC,IAAI,CAAC;KACV,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,2BAAmB,CAAC,CAAC,CAAA"}

package/dist/sopKeySince.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Which proxy version reads each newer SOP front-matter key.
+ *
+ * The proxy reads keys as line prefixes and ignores the ones it does not know
+ * (`sops.rs`), so an older proxy cannot fail closed on a new key: a
+ * `scope_paths_mode: enforce` it does not read stays advisory there, and a
+ * `closed_lanes:` holds nothing. Where a SOP is validated, the control plane
+ * compares a workspace's `gateways.proxyVersion` with these and warns
+ * (`sop_key_needs_newer_gateway`). Hook gates and SDKs fail closed on the
+ * keys they evaluate through fallback lines instead (gateRuleRecord.ts).
+ *
+ * `null`: the proxy never reads the key; it is a gate-only rule
+ * (`plan_approval:`), so no proxy version is too old for it.
+ *
+ * @module
+ */
+/** The proxy release that first reads the newer keys. */
+export declare const LOOP_GRAPH_GATE_PROXY_VERSION = "3.0.0";
+/**
+ * Each key, as written at the start of its line, and the proxy version that
+ * reads it. `requires_before:[ok]` stands for a qualified `requires_before:`
+ * (`action:run_tests[ok]` on its left): an older proxy compares the literal,
+ * which never appears in a sequence, so it refuses the gated call always.
+ */
+export declare const SOP_KEY_SINCE: Readonly<Record<string, string | null>>;
+/** `major.minor.patch` (a `v` prefix and any `-pre` or `+build` suffix ignored) as three numbers, or null. */
+export declare function parseProxyVersion(version: string | null | undefined): [number, number, number] | null;
+/** Whether `version` is older than `since`. An unreadable or unknown version is not known to be older: the caller says it could not tell. */
+export declare function proxyVersionOlder(version: string | null | undefined, since: string): boolean | null;
+/**
+ * The keys the SOP's front matter (the text between the fences) uses that a
+ * proxy at `proxyVersion` does not read, each with the version that does, in
+ * {@link SOP_KEY_SINCE} order. A key is used when a line, at any
+ * indentation, starts with it; a qualified `requires_before:` when such a
+ * line holds `[ok]`. A proxy whose version is unknown gets every used key.
+ */
+export declare function sopKeysNeedingNewerProxy(front: string, proxyVersion: string | null | undefined): Array<{
+    key: string;
+    since: string;
+}>;
+//# sourceMappingURL=sopKeySince.d.ts.map

package/dist/sopKeySince.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sopKeySince.d.ts","sourceRoot":"","sources":["../src/sopKeySince.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,yDAAyD;AACzD,eAAO,MAAM,6BAA6B,UAAU,CAAA;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAWjE,CAAA;AAED,8GAA8G;AAC9G,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAGrG;AAED,6IAA6I;AAC7I,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAMnG;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAatI"}

package/dist/sopKeySince.js

@@ -0,0 +1,81 @@
+"use strict";
+/**
+ * Which proxy version reads each newer SOP front-matter key.
+ *
+ * The proxy reads keys as line prefixes and ignores the ones it does not know
+ * (`sops.rs`), so an older proxy cannot fail closed on a new key: a
+ * `scope_paths_mode: enforce` it does not read stays advisory there, and a
+ * `closed_lanes:` holds nothing. Where a SOP is validated, the control plane
+ * compares a workspace's `gateways.proxyVersion` with these and warns
+ * (`sop_key_needs_newer_gateway`). Hook gates and SDKs fail closed on the
+ * keys they evaluate through fallback lines instead (gateRuleRecord.ts).
+ *
+ * `null`: the proxy never reads the key; it is a gate-only rule
+ * (`plan_approval:`), so no proxy version is too old for it.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SOP_KEY_SINCE = exports.LOOP_GRAPH_GATE_PROXY_VERSION = void 0;
+exports.parseProxyVersion = parseProxyVersion;
+exports.proxyVersionOlder = proxyVersionOlder;
+exports.sopKeysNeedingNewerProxy = sopKeysNeedingNewerProxy;
+/** The proxy release that first reads the newer keys. */
+exports.LOOP_GRAPH_GATE_PROXY_VERSION = '3.0.0';
+/**
+ * Each key, as written at the start of its line, and the proxy version that
+ * reads it. `requires_before:[ok]` stands for a qualified `requires_before:`
+ * (`action:run_tests[ok]` on its left): an older proxy compares the literal,
+ * which never appears in a sequence, so it refuses the gated call always.
+ */
+exports.SOP_KEY_SINCE = {
+    'requires_before:[ok]': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
+    'scope_paths_mode:': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
+    'plan_steps_mode:': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
+    'plan_approval:': null,
+    'closed_lanes:': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
+    'open_actions:': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
+    'on_reask_exhausted:': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
+    'context_isolation:': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
+    'node_kind:': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
+    'node_kind_allow:': exports.LOOP_GRAPH_GATE_PROXY_VERSION,
+};
+/** `major.minor.patch` (a `v` prefix and any `-pre` or `+build` suffix ignored) as three numbers, or null. */
+function parseProxyVersion(version) {
+    const m = /^v?(\d{1,6})\.(\d{1,6})\.(\d{1,6})(?:[-+].*)?$/.exec((version ?? '').trim());
+    return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
+}
+/** Whether `version` is older than `since`. An unreadable or unknown version is not known to be older: the caller says it could not tell. */
+function proxyVersionOlder(version, since) {
+    const v = parseProxyVersion(version);
+    const s = parseProxyVersion(since);
+    if (!v || !s)
+        return null;
+    for (let i = 0; i < 3; i++)
+        if (v[i] !== s[i])
+            return v[i] < s[i];
+    return false;
+}
+/**
+ * The keys the SOP's front matter (the text between the fences) uses that a
+ * proxy at `proxyVersion` does not read, each with the version that does, in
+ * {@link SOP_KEY_SINCE} order. A key is used when a line, at any
+ * indentation, starts with it; a qualified `requires_before:` when such a
+ * line holds `[ok]`. A proxy whose version is unknown gets every used key.
+ */
+function sopKeysNeedingNewerProxy(front, proxyVersion) {
+    const lines = front.split('\n').map((l) => l.trim());
+    const out = [];
+    for (const key of Object.keys(exports.SOP_KEY_SINCE)) {
+        const since = exports.SOP_KEY_SINCE[key];
+        if (since === null || since === undefined)
+            continue;
+        const used = key === 'requires_before:[ok]'
+            ? lines.some((l) => l.startsWith('requires_before:') && l.includes('[ok]'))
+            : lines.some((l) => l.startsWith(key));
+        if (used && proxyVersionOlder(proxyVersion, since) !== false)
+            out.push({ key, since });
+    }
+    return out;
+}
+//# sourceMappingURL=sopKeySince.js.map

package/dist/sopKeySince.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sopKeySince.js","sourceRoot":"","sources":["../src/sopKeySince.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAyBH,8CAGC;AAGD,8CAMC;AASD,4DAaC;AAzDD,yDAAyD;AAC5C,QAAA,6BAA6B,GAAG,OAAO,CAAA;AAEpD;;;;;GAKG;AACU,QAAA,aAAa,GAA4C;IACpE,sBAAsB,EAAE,qCAA6B;IACrD,mBAAmB,EAAE,qCAA6B;IAClD,kBAAkB,EAAE,qCAA6B;IACjD,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,qCAA6B;IAC9C,eAAe,EAAE,qCAA6B;IAC9C,qBAAqB,EAAE,qCAA6B;IACpD,oBAAoB,EAAE,qCAA6B;IACnD,YAAY,EAAE,qCAA6B;IAC3C,kBAAkB,EAAE,qCAA6B;CAClD,CAAA;AAED,8GAA8G;AAC9G,SAAgB,iBAAiB,CAAC,OAAkC;IAClE,MAAM,CAAC,GAAG,gDAAgD,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACvF,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC9D,CAAC;AAED,6IAA6I;AAC7I,SAAgB,iBAAiB,CAAC,OAAkC,EAAE,KAAa;IACjF,MAAM,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAA;IACnE,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,wBAAwB,CAAC,KAAa,EAAE,YAAuC;IAC7F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACpD,MAAM,GAAG,GAA0C,EAAE,CAAA;IACrD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,qBAAa,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,SAAQ;QACnD,MAAM,IAAI,GACR,GAAG,KAAK,sBAAsB;YAC5B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3E,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1C,IAAI,IAAI,IAAI,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}