@namzu/sdk 45.0.0 → 46.0.0

package/dist/tools/schedules/types.d.ts

@@ -0,0 +1,252 @@
+/**
+ * The host side of the `schedule` and `session_loop` tools.
+ *
+ * The SDK holds the tool's contract with the model — its schema, its refusals
+ * and its confirmation rule — and nothing about where jobs are stored or how
+ * a confirmation is drawn. The host supplies both, and it computes every
+ * field a person is asked to confirm: the model's own words are never what
+ * the confirmation shows as fact.
+ */
+/** A rule effect, in the vocabulary of the CLI's `[permissions]` table. */
+export type ScheduleRuleEffect = 'allow' | 'ask' | 'deny';
+/** What the model proposes. Validated by the tool's schema, then by the host. */
+export interface ScheduleJobDraft {
+    readonly name: string;
+    readonly prompt: string;
+    /** Schedule words: `every 30m`, `0 9 * * 1-5`, `at 09:00`, `in 2h`. */
+    readonly when: string;
+    /** Folder the job runs in. Absent: the session's working directory. */
+    readonly folder?: string;
+    /** IANA zone for a cron expression or a local time. Absent: the host's. */
+    readonly tz?: string;
+    readonly permissions: {
+        readonly preset?: 'read-only' | 'edit-in-folder';
+        /**
+         * What happens to a call no rule covers. The model may choose `park`
+         * (wait for the operator) or `deny`; running uncovered calls without
+         * asking is an operator decision the tool cannot propose.
+         */
+        readonly unmatched: 'park' | 'deny';
+        readonly execution?: 'host' | 'sandbox';
+        readonly rules?: Readonly<Record<string, ScheduleRuleEffect | Readonly<Record<string, ScheduleRuleEffect>>>>;
+        /**
+         * Browser access for the run. Absent: the `browser` and `browser_act`
+         * tools are denied. Present: only the listed sites are reachable, at
+         * the listed level, and every other site is denied — there is no
+         * catch-all key. The tool refuses this block unless the host sets
+         * {@link ScheduleToolHost.browserGrants}.
+         */
+        readonly browser?: ScheduleBrowserGrant;
+    };
+    readonly budget?: {
+        readonly maxIterations?: number;
+        readonly tokenBudget?: number;
+        readonly timeoutMs?: number;
+    };
+}
+/**
+ * How far a scheduled run may go on one site. `read`: open and read pages,
+ * never change them. `ask`: open and change pages, each change parked for the
+ * operator. `act`: open and change pages without asking.
+ */
+export type ScheduleBrowserSiteLevel = 'read' | 'ask' | 'act';
+/** A scheduled job's browser grant. */
+export interface ScheduleBrowserGrant {
+    /** The browser profile the run uses; the operator's, signed in beforehand. */
+    readonly profile: string;
+    /**
+     * Canonical site key (`https://github.com`, `https://*.example.com`,
+     * `http://localhost:*`) to level. The tool canonicalises the keys the
+     * model wrote (see `canonicalizeBrowserSitePattern`) before the host sees
+     * them. Unlisted sites are denied.
+     */
+    readonly sites: Readonly<Record<string, ScheduleBrowserSiteLevel>>;
+    /** Show the browser window during the run. Default: no window. */
+    readonly headed?: boolean;
+}
+/** What the person confirming is shown. Every field is the host's own computation. */
+export interface ScheduleJobPreview {
+    readonly name: string;
+    /** The canonical folder the job would run in. */
+    readonly folder: string;
+    /** True when `folder` is outside the session's working directory and added directories. */
+    readonly outsideSessionRoots: boolean;
+    readonly prompt: string;
+    /** The schedule in words, with its zone. */
+    readonly schedule: string;
+    /** The next fire times, ISO-8601 UTC. */
+    readonly nextFireTimes: readonly string[];
+    /** The permission set expanded to one line per rule, config denies included. */
+    readonly rules: readonly string[];
+    readonly unmatched: 'park' | 'deny' | 'allow';
+    readonly execution: 'host' | 'sandbox';
+    /** A rule lets the run reach the network. */
+    readonly networkAccess: boolean;
+    readonly budget: {
+        readonly maxIterations: number;
+        readonly tokenBudget: number;
+        readonly timeoutMs: number;
+    };
+    /** Runs per day at most, times the token budget. Absent for a one-shot. */
+    readonly dailyTokenCeiling?: number;
+    /** Provider and model the job is pinned to. */
+    readonly model: string;
+    /** Where the run's credential comes from, in words. */
+    readonly credentialSource?: string;
+    /** Anything the host wants said in the warning colour. */
+    readonly warnings: readonly string[];
+}
+/** A job as the `list` action reports it. */
+export interface ScheduleJobSummary {
+    readonly name: string;
+    readonly folder: string;
+    readonly state: string;
+    readonly schedule: string;
+    readonly nextFireAt?: string;
+    readonly lastStatus?: string;
+    /** Present only for jobs in the session's own folder. */
+    readonly prompt?: string;
+    /**
+     * True for a job whose folder is the session's own. A host that lists
+     * other folders' jobs sets it so the model can tell them apart; the tool
+     * marks such a job `(this folder)`.
+     */
+    readonly inSessionFolder?: boolean;
+}
+/**
+ * What the model proposes to change in an existing job. Every field left
+ * out keeps the job's current value. `permissions`, when given, is the whole
+ * new set, with the same limits as a new job's; the host keeps the job's
+ * `execution` when it is not given, and its additional directories.
+ */
+export interface ScheduleJobChanges {
+    readonly prompt?: string;
+    readonly when?: string;
+    readonly folder?: string;
+    readonly tz?: string;
+    readonly permissions?: ScheduleJobDraft['permissions'];
+    readonly budget?: ScheduleJobDraft['budget'];
+}
+/** A proposed change to a job, as the host computed it. */
+export interface ScheduleJobUpdateProposal {
+    /** The job as it would be once changed. Every field is the host's own computation. */
+    readonly preview: ScheduleJobPreview;
+    /**
+     * What differs from the job as it stands (and from edits saved since it
+     * was last confirmed), one line each: `- ` what goes, `+ ` what comes.
+     */
+    readonly changes: readonly string[];
+    /** The change touches what a run may do: its rules, `unmatched`, where it runs, its browser grant. */
+    readonly permissionsChange: boolean;
+}
+/** What the person confirming a change is shown. */
+export interface ScheduleUpdateRequest extends ScheduleJobUpdateProposal {
+    /** The prompt tripwire's findings over `preview.prompt`. */
+    readonly promptFindings: readonly string[];
+    /** Always `model` from this tool. */
+    readonly proposedBy: 'model';
+}
+/** What the person answered to a proposed job. */
+export type ScheduleConfirmAnswer = 'create' | 'create-paused' | 'cancel';
+export interface ScheduleConfirmRequest {
+    readonly preview: ScheduleJobPreview;
+    /** The prompt tripwire's findings over `preview.prompt`. */
+    readonly promptFindings: readonly string[];
+    /** Always `model` from this tool: the banner says it was not the operator. */
+    readonly proposedBy: 'model';
+}
+export interface ScheduleToolHost {
+    /**
+     * The host can store and enforce {@link ScheduleJobDraft.permissions}
+     * `.browser`. Absent or false: the tool refuses a draft carrying one,
+     * rather than let the host drop it and confirm a job the model believes
+     * can use the browser.
+     */
+    readonly browserGrants?: boolean;
+    /** Validate the draft and compute what the person will be shown. Throws with a message on a refusal. */
+    preview(draft: ScheduleJobDraft): Promise<ScheduleJobPreview>;
+    /**
+     * Ask the person. Anything but `create` or `create-paused` — `cancel`, a
+     * thrown error, a closed screen — means no job.
+     *
+     * `signal` fires when the tool's own confirmation deadline elapses or the
+     * turn is aborted; a host that draws a screen closes it then rather than
+     * leaving it live after the tool has given up on the answer.
+     */
+    confirm(request: ScheduleConfirmRequest, signal?: AbortSignal): Promise<ScheduleConfirmAnswer>;
+    /**
+     * Create the job the person confirmed. `note`, when given, is appended to
+     * what the model is told, for what the person must still do before the
+     * job runs (install a scheduler, say): the model reports the job as set
+     * up otherwise.
+     */
+    create(draft: ScheduleJobDraft, preview: ScheduleJobPreview, options: {
+        readonly paused: boolean;
+    }): Promise<{
+        readonly name: string;
+        readonly note?: string;
+    }>;
+    /**
+     * Jobs, the session folder's in full, other folders' without their
+     * prompts. `allFolders: false` lets a host list only the session
+     * folder's; a host may list every job regardless, marking the session
+     * folder's with {@link ScheduleJobSummary.inSessionFolder}. The tool says
+     * "No scheduled jobs." when this returns none, so a host that filters
+     * says so only for its folder.
+     */
+    list(options: {
+        readonly allFolders: boolean;
+    }): Promise<readonly ScheduleJobSummary[]>;
+    /** A job by name or id prefix, or undefined. */
+    find(job: string): Promise<ScheduleJobSummary | undefined>;
+    /** Ask the person to confirm resuming or deleting a job. See `confirm` on `signal`. */
+    confirmAction(job: ScheduleJobSummary, action: 'resume' | 'delete', signal?: AbortSignal): Promise<boolean>;
+    pause(job: string): Promise<void>;
+    resume(job: string): Promise<void>;
+    delete(job: string): Promise<void>;
+    /**
+     * Validate a change to `job` (a name or id prefix) and compute what the
+     * person will be shown. Throws with a message on a refusal. The tool
+     * offers `update` only when a host has all three of `previewUpdate`,
+     * `confirmUpdate` and `update`.
+     */
+    previewUpdate?(job: string, changes: ScheduleJobChanges): Promise<ScheduleJobUpdateProposal>;
+    /**
+     * Ask the person whether to save the change. Anything but `true` — a
+     * thrown error, a closed screen — changes nothing. See `confirm` on
+     * `signal`.
+     */
+    confirmUpdate?(request: ScheduleUpdateRequest, signal?: AbortSignal): Promise<boolean>;
+    /**
+     * Save the change the person confirmed, to the same job: its id and its
+     * history are kept, and the confirmation is the person's. `note` as for
+     * `create`.
+     */
+    update?(preview: ScheduleJobPreview): Promise<{
+        readonly name: string;
+        readonly note?: string;
+    }>;
+}
+/** A prompt the session re-sends to itself on an interval. */
+export interface SessionLoop {
+    readonly id: string;
+    /** The interval in words. */
+    readonly schedule: string;
+    readonly prompt: string;
+    readonly createdAt: string;
+    readonly expiresAt?: string;
+    readonly lastFiredAt?: string;
+    readonly createdBy: 'operator' | 'model';
+}
+export interface SessionLoopHost {
+    /** Throws with a message when the interval is not usable or the loop limit is reached. */
+    create(request: {
+        readonly interval: string;
+        readonly prompt: string;
+        readonly createdBy: 'model';
+    }): Promise<SessionLoop>;
+    list(): readonly SessionLoop[];
+    /** Stop one loop by id, or every loop with `all`. Returns how many stopped. */
+    delete(id: string): Promise<number>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/tools/schedules/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/tools/schedules/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;AAEzD,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE;QACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,gBAAgB,CAAA;QAChD;;;;WAIG;QACH,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAA;QACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CACxB,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,CACjF,CAAA;QACD;;;;;;WAMG;QACH,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAA;KACvC,CAAA;IACD,QAAQ,CAAC,MAAM,CAAC,EAAE;QACjB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;QAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAC3B,CAAA;CACD;AAED;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAA;AAE7D,uCAAuC;AACvC,MAAM,WAAW,oBAAoB;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAA;IAClE,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,2FAA2F;IAC3F,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAA;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,yCAAyC;IACzC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,6CAA6C;IAC7C,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE;QAChB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;QAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC1B,CAAA;IACD,2EAA2E;IAC3E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,uDAAuD;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,6CAA6C;AAC7C,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAA;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;CAC5C;AAED,2DAA2D;AAC3D,MAAM,WAAW,yBAAyB;IACzC,sFAAsF;IACtF,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;IACpC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,sGAAsG;IACtG,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;CACnC;AAED,oDAAoD;AACpD,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACvE,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;CAC5B;AAED,kDAAkD;AAClD,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,eAAe,GAAG,QAAQ,CAAA;AAEzE,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;IACpC,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;IAChC,wGAAwG;IACxG,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC7D;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;IAC9F;;;;;OAKG;IACH,MAAM,CACL,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC7D;;;;;;;OAOG;IACH,IAAI,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAA;IACvF,gDAAgD;IAChD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAA;IAC1D,uFAAuF;IACvF,aAAa,CACZ,GAAG,EAAE,kBAAkB,EACvB,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAC3B,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC;;;;;OAKG;IACH,aAAa,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAA;IAC5F;;;;OAIG;IACH,aAAa,CAAC,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtF;;;;OAIG;IACH,MAAM,CAAC,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAChG;AAED,8DAA8D;AAC9D,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,6BAA6B;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAA;CACxC;AAED,MAAM,WAAW,eAAe;IAC/B,0FAA0F;IAC1F,MAAM,CAAC,OAAO,EAAE;QACf,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAC3B,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACxB,IAAI,IAAI,SAAS,WAAW,EAAE,CAAA;IAC9B,+EAA+E;IAC/E,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACnC"}

package/dist/tools/schedules/types.js

@@ -0,0 +1,11 @@
+/**
+ * The host side of the `schedule` and `session_loop` tools.
+ *
+ * The SDK holds the tool's contract with the model — its schema, its refusals
+ * and its confirmation rule — and nothing about where jobs are stored or how
+ * a confirmation is drawn. The host supplies both, and it computes every
+ * field a person is asked to confirm: the model's own words are never what
+ * the confirmation shows as fact.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/tools/schedules/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/tools/schedules/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/types/authorization/index.d.ts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import type { ShellDialect, ToolDefinition } from '../tool/index.js';
 export type GateDecision = 'allow' | 'deny' | 'review';
 export interface GateEvaluationResult {
     readonly decision: GateDecision;
@@ -81,11 +82,68 @@ export type AuthorizationRule = {
     /** The argument key, at the top level of the tool's input. */
     argument: string;
     pattern: string;
-    decision: 'allow' | 'deny';
+    /**
+     * `review` sends a matching call to the review policy — a person,
+     * or the turn's mode — instead of deciding it here. It matches as
+     * `deny` does (any segment of a command line), because it is a
+     * restriction: a rule that asks before `git push` must also ask
+     * before `true; git push`.
+     */
+    decision: 'allow' | 'deny' | 'review';
 } | {
     type: 'allow_by_tier';
     tiers: string[];
+} | {
+    /**
+     * A decision the host computes in code, in its place in the list.
+     *
+     * A pattern is the wrong tool for a rule about what a command line
+     * DOES: a regular expression over its text has to re-implement the
+     * shell's quoting, and every form it misses (`$'…'`, a line
+     * continuation, a quoted separator) is a way past the rule. A host
+     * that needs such a rule reads the line with `lexShellCommandLine`
+     * and decides on the words bash will pass, here.
+     *
+     * `decide` returns a decision, or `null` to let the next rule
+     * decide. A `decide` that throws is read as `deny`: a rule that
+     * could not reach a verdict must not let the call through.
+     */
+    type: 'predicate';
+    /**
+     * What the rule refuses or allows, in words. It is the reason the
+     * gate reports when this rule decides, so it should tell a model
+     * whether a different input could fare better.
+     */
+    description: string;
+    decide: AuthorizationPredicate;
+    /**
+     * The reason for THIS call, when `decide` returned a decision: what
+     * in the input matched, and where. The gate reports it instead of
+     * {@link description}. Absent, returning `null` or throwing, the
+     * gate reports `description`.
+     *
+     * A rule that refuses on several grounds and reports one fixed
+     * sentence leaves the model, and the person reading the refusal,
+     * to guess which ground it was. A scheduled run's refusal listed
+     * everything the rule protects when one word of the command had
+     * matched.
+     */
+    describe?: (call: AuthorizationPredicateCall) => string | null;
 };
+/** The call an `AuthorizationRule` of type `predicate` is asked about. */
+export interface AuthorizationPredicateCall {
+    readonly toolName: string;
+    readonly toolInput: unknown;
+    readonly toolDef: ToolDefinition | undefined;
+    /**
+     * The shell a command line in this call runs in: the caller's
+     * (`ToolCallContext.commandDialect`), or `sh` when it did not say, which
+     * is the reading that holds whichever shell runs it.
+     */
+    readonly commandDialect: ShellDialect;
+}
+/** The code behind an `AuthorizationRule` of type `predicate`. */
+export type AuthorizationPredicate = (call: AuthorizationPredicateCall) => GateDecision | null;
 export declare const AuthorizationRuleSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     type: z.ZodLiteral<"allow_read_only">;
     excludeCategories: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -148,18 +206,18 @@ export declare const AuthorizationRuleSchema: z.ZodDiscriminatedUnion<"type", [z
     toolNames: z.ZodArray<z.ZodString, "many">;
     argument: z.ZodString;
     pattern: z.ZodString;
-    decision: z.ZodEnum<["allow", "deny"]>;
+    decision: z.ZodEnum<["allow", "deny", "review"]>;
 }, "strip", z.ZodTypeAny, {
     type: "argument_pattern";
     pattern: string;
     toolNames: string[];
-    decision: "allow" | "deny";
+    decision: "allow" | "deny" | "review";
     argument: string;
 }, {
     type: "argument_pattern";
     pattern: string;
     toolNames: string[];
-    decision: "allow" | "deny";
+    decision: "allow" | "deny" | "review";
     argument: string;
 }>, z.ZodObject<{
     type: z.ZodLiteral<"allow_by_tier">;
@@ -170,6 +228,21 @@ export declare const AuthorizationRuleSchema: z.ZodDiscriminatedUnion<"type", [z
 }, {
     type: "allow_by_tier";
     tiers: string[];
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"predicate">;
+    description: z.ZodString;
+    decide: z.ZodType<AuthorizationPredicate, z.ZodTypeDef, AuthorizationPredicate>;
+    describe: z.ZodOptional<z.ZodType<(call: AuthorizationPredicateCall) => string | null, z.ZodTypeDef, (call: AuthorizationPredicateCall) => string | null>>;
+}, "strip", z.ZodTypeAny, {
+    type: "predicate";
+    description: string;
+    decide: AuthorizationPredicate;
+    describe?: ((call: AuthorizationPredicateCall) => string | null) | undefined;
+}, {
+    type: "predicate";
+    description: string;
+    decide: AuthorizationPredicate;
+    describe?: ((call: AuthorizationPredicateCall) => string | null) | undefined;
 }>]>;
 export declare const AuthorizationGateConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
@@ -235,18 +308,18 @@ export declare const AuthorizationGateConfigSchema: z.ZodObject<{
         toolNames: z.ZodArray<z.ZodString, "many">;
         argument: z.ZodString;
         pattern: z.ZodString;
-        decision: z.ZodEnum<["allow", "deny"]>;
+        decision: z.ZodEnum<["allow", "deny", "review"]>;
     }, "strip", z.ZodTypeAny, {
         type: "argument_pattern";
         pattern: string;
         toolNames: string[];
-        decision: "allow" | "deny";
+        decision: "allow" | "deny" | "review";
         argument: string;
     }, {
         type: "argument_pattern";
         pattern: string;
         toolNames: string[];
-        decision: "allow" | "deny";
+        decision: "allow" | "deny" | "review";
         argument: string;
     }>, z.ZodObject<{
         type: z.ZodLiteral<"allow_by_tier">;
@@ -257,6 +330,21 @@ export declare const AuthorizationGateConfigSchema: z.ZodObject<{
     }, {
         type: "allow_by_tier";
         tiers: string[];
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"predicate">;
+        description: z.ZodString;
+        decide: z.ZodType<AuthorizationPredicate, z.ZodTypeDef, AuthorizationPredicate>;
+        describe: z.ZodOptional<z.ZodType<(call: AuthorizationPredicateCall) => string | null, z.ZodTypeDef, (call: AuthorizationPredicateCall) => string | null>>;
+    }, "strip", z.ZodTypeAny, {
+        type: "predicate";
+        description: string;
+        decide: AuthorizationPredicate;
+        describe?: ((call: AuthorizationPredicateCall) => string | null) | undefined;
+    }, {
+        type: "predicate";
+        description: string;
+        decide: AuthorizationPredicate;
+        describe?: ((call: AuthorizationPredicateCall) => string | null) | undefined;
     }>]>, "many">>;
     allowReadOnlyTools: z.ZodDefault<z.ZodBoolean>;
     /**
@@ -295,11 +383,16 @@ export declare const AuthorizationGateConfigSchema: z.ZodObject<{
         type: "argument_pattern";
         pattern: string;
         toolNames: string[];
-        decision: "allow" | "deny";
+        decision: "allow" | "deny" | "review";
         argument: string;
     } | {
         type: "allow_by_tier";
         tiers: string[];
+    } | {
+        type: "predicate";
+        description: string;
+        decide: AuthorizationPredicate;
+        describe?: ((call: AuthorizationPredicateCall) => string | null) | undefined;
     })[];
     allowReadOnlyTools: boolean;
     denyDangerousPatterns: boolean;
@@ -330,11 +423,16 @@ export declare const AuthorizationGateConfigSchema: z.ZodObject<{
         type: "argument_pattern";
         pattern: string;
         toolNames: string[];
-        decision: "allow" | "deny";
+        decision: "allow" | "deny" | "review";
         argument: string;
     } | {
         type: "allow_by_tier";
         tiers: string[];
+    } | {
+        type: "predicate";
+        description: string;
+        decide: AuthorizationPredicate;
+        describe?: ((call: AuthorizationPredicateCall) => string | null) | undefined;
     })[] | undefined;
     allowReadOnlyTools?: boolean | undefined;
     allowReadOnlyExcludeCategories?: string[] | undefined;

package/dist/types/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;AAEtD,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,MAAM,iBAAiB,GAC1B;IACA;;;;;;;OAOG;IACH,IAAI,EAAE,iBAAiB,CAAA;IACvB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;CAC3B,GACD;IAAE,IAAI,EAAE,yBAAyB,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAC7C;IACA;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,EAAE,gBAAgB,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAA;IAChC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;CACpC,GACD;IACA;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,IAAI,EAAE,kBAAkB,CAAA;IACxB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAA;CACzB,GACD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AA6C7C,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IASlC,CAAA;AAEF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAIzC;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIF,CAAA;AAEF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAA;AAEnF;;;;;;;;;;;;GAYG;AAEH;;;;;;;;;;;;;;GAcG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEpE,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;AAEtD,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,MAAM,iBAAiB,GAC1B;IACA;;;;;;;OAOG;IACH,IAAI,EAAE,iBAAiB,CAAA;IACvB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;CAC3B,GACD;IAAE,IAAI,EAAE,yBAAyB,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAC7C;IACA;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,EAAE,gBAAgB,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAA;IAChC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;CACpC,GACD;IACA;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,IAAI,EAAE,kBAAkB,CAAA;IACxB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf;;;;;;OAMG;IACH,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;CACpC,GACD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1C;IACA;;;;;;;;;;;;;OAaG;IACH,IAAI,EAAE,WAAW,CAAA;IACjB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,sBAAsB,CAAA;IAC9B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,0BAA0B,KAAK,MAAM,GAAG,IAAI,CAAA;CAC7D,CAAA;AAEJ,0EAA0E;AAC1E,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAAA;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAA;CACrC;AAED,kEAAkE;AAClE,MAAM,MAAM,sBAAsB,GAAG,CAAC,IAAI,EAAE,0BAA0B,KAAK,YAAY,GAAG,IAAI,CAAA;AA8D9F,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6CAPnB,0BAA0B,KAAK,MAAM,GAAG,IAAI,uBAA5C,0BAA0B,KAAK,MAAM,GAAG,IAAI;;;;;uBAA5C,0BAA0B,KAAK,MAAM,GAAG,IAAI;;;;;uBAA5C,0BAA0B,KAAK,MAAM,GAAG,IAAI;IAiB3D,CAAA;AAEF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iDAnBzB,0BAA0B,KAAK,MAAM,GAAG,IAAI,uBAA5C,0BAA0B,KAAK,MAAM,GAAG,IAAI;;;;;2BAA5C,0BAA0B,KAAK,MAAM,GAAG,IAAI;;;;;2BAA5C,0BAA0B,KAAK,MAAM,GAAG,IAAI;;;IAuB5D;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA9Ba,0BAA0B,KAAK,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAA5C,0BAA0B,KAAK,MAAM,GAAG,IAAI;;;;;;EAkC3D,CAAA;AAEF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAA;AAEnF;;;;;;;;;;;;GAYG;AAEH;;;;;;;;;;;;;;GAcG"}

package/dist/types/authorization/index.js

@@ -36,12 +36,26 @@ const ArgumentPatternSchema = z.object({
     // fail-open shape this rule type exists to remove.
     argument: z.string().min(1),
     pattern: z.string().max(MAX_CUSTOM_PATTERN_LENGTH),
-    decision: z.enum(['allow', 'deny']),
+    decision: z.enum(['allow', 'deny', 'review']),
 });
 const AllowByTierSchema = z.object({
     type: z.literal('allow_by_tier'),
     tiers: z.array(z.string()),
 });
+const PredicateSchema = z.object({
+    type: z.literal('predicate'),
+    // A rule that says nothing about itself produces a refusal nobody can
+    // reason about.
+    description: z.string().min(1),
+    decide: z.custom((value) => typeof value === 'function', {
+        message: 'decide must be a function',
+    }),
+    // Named here so the gate's own parse keeps it: zod strips what a schema
+    // does not name.
+    describe: z
+        .custom((value) => typeof value === 'function', { message: 'describe must be a function' })
+        .optional(),
+});
 export const AuthorizationRuleSchema = z.discriminatedUnion('type', [
     AllowReadOnlySchema,
     DenyDangerousPatternsSchema,
@@ -51,6 +65,7 @@ export const AuthorizationRuleSchema = z.discriminatedUnion('type', [
     CustomPatternSchema,
     ArgumentPatternSchema,
     AllowByTierSchema,
+    PredicateSchema,
 ]);
 export const AuthorizationGateConfigSchema = z.object({
     enabled: z.boolean().default(false),

package/dist/types/authorization/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAA;AAsFlF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,iCAAiC;IACjC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAA;AACF,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAA;AAC5F,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC/B,CAAC,CAAA;AACF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAA;AACF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAA;AACF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;CAC7C,CAAC,CAAA;AACF,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,2EAA2E;IAC3E,mDAAmD;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;CACnC,CAAC,CAAA;AACF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC1B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACnE,mBAAmB;IACnB,2BAA2B;IAC3B,qBAAqB;IACrB,iBAAiB;IACjB,gBAAgB;IAChB,mBAAmB;IACnB,qBAAqB;IACrB,iBAAiB;CACjB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C;;;;;;;OAOG;IACH,8BAA8B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9D,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACvC,CAAC,CAAA;AAIF;;;;;;;;;;;;GAYG;AAEH;;;;;;;;;;;;;;GAcG"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAA;AAmJlF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,iCAAiC;IACjC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAA;AACF,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAA;AAC5F,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC/B,CAAC,CAAA;AACF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAA;AACF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAA;AACF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;CAC7C,CAAC,CAAA;AACF,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,2EAA2E;IAC3E,mDAAmD;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;CAC7C,CAAC,CAAA;AACF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC1B,CAAC,CAAA;AACF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,sEAAsE;IACtE,gBAAgB;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAyB,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,EAAE;QAChF,OAAO,EAAE,2BAA2B;KACpC,CAAC;IACF,wEAAwE;IACxE,iBAAiB;IACjB,QAAQ,EAAE,CAAC;SACT,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,EACtC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAC1C;SACA,QAAQ,EAAE;CACZ,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACnE,mBAAmB;IACnB,2BAA2B;IAC3B,qBAAqB;IACrB,iBAAiB;IACjB,gBAAgB;IAChB,mBAAmB;IACnB,qBAAqB;IACrB,iBAAiB;IACjB,eAAe;CACf,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C;;;;;;;OAOG;IACH,8BAA8B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9D,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACvC,CAAC,CAAA;AAIF;;;;;;;;;;;;GAYG;AAEH;;;;;;;;;;;;;;GAcG"}