@namzu/sdk 45.1.0 → 48.0.0

package/dist/authorization/reexec-wrapper.js

@@ -0,0 +1,532 @@
+/**
+ * One layer of a re-exec wrapper (`sudo`, `env`, `nice`, `timeout`, …): the
+ * shared "what does this wrapper's own name, options and mandatory
+ * arguments consume, and what is left" logic behind two different
+ * questions that must never quietly disagree about where a wrapper ends:
+ *
+ * - the shell lexer's `nestedShellCommand` (`shell-lexer.ts`), which reads a
+ *   literal `-c` payload as a command line of its own — and needs to look
+ *   PAST a wrapper to find one, since `env -i bash -c "…"` and
+ *   `nice -n 5 sh -ec "…"` hide the shell exactly as `bash -c "…"` does,
+ *   just one or more words later;
+ * - `program.ts`'s `resolveChain`, which asks the same question — is there
+ *   a shell hiding behind this wrapper — for the live `bash` tool's
+ *   escalation, the scheduled-run floor and `verifyScheduledScript`, and
+ *   which ALSO needs to know which `NAME=value` pairs a layer skipped past
+ *   (`sudo`'s, `env`'s), to feed a poisoning one (`PATH=`, `LD_PRELOAD=`)
+ *   into its own check — this module reports them, but is not itself the
+ *   one that judges a name poisoning.
+ *
+ * A security review found the two questions above answered independently:
+ * the lexer's own nested-shell detection only ever looked at the literal
+ * head, so `env -i bash -c "$X"` read as an ordinary, unremarkable command
+ * (never opaque, so never escalated and never denied on the recovered
+ * text), and `toybox sh -c "$X"` was missed entirely (only `busybox` was
+ * named); separately, `sudo`'s own unwrapping never skipped a `NAME=value`
+ * pair the way `env`'s did, so `sudo VAR=value $(echo ls)` reported the
+ * assignment word itself as the program and never looked at the real one.
+ * Both questions now go through `unwrapReexecChain`/`shellInvocation`/
+ * `shellDashC` here.
+ */
+export const LITERAL = (w) => !w.expands;
+/**
+ * The last path segment of a word's value. Duplicated from `shell-lexer.ts`
+ * (not imported) so this module stays free of a runtime dependency back on
+ * it — `shell-lexer.ts` imports FROM here for its own `nestedShellCommand`,
+ * and a value-level import cycle between the two would be fragile. Both
+ * copies are the same three lines; keep them in sync by hand.
+ */
+function basename(word) {
+    const cut = word.lastIndexOf('/');
+    return cut < 0 ? word : word.slice(cut + 1);
+}
+/** `NAME=value` read off an assignment word's own text, or null. */
+export function assignmentName(word) {
+    const text = word.text.replace(/\\\n/g, '');
+    const match = /^([A-Za-z_][A-Za-z0-9_]*)\+?=/.exec(text);
+    return match && word.value.startsWith(match[0]) ? match[1] : null;
+}
+/**
+ * Shells whose `-c` this reads, by basename. `shell-lexer.ts` exports this
+ * same set as `NESTED_SHELLS`, so the lexer and wrapper reader cannot drift.
+ */
+export const PLAIN_SHELL_NAMES = new Set([
+    'sh',
+    'bash',
+    'dash',
+    'zsh',
+    'ksh',
+    'ash',
+    'mksh',
+]);
+const NO_ASSIGNMENTS = [];
+function justRest(rest) {
+    return { rest, assignments: NO_ASSIGNMENTS };
+}
+/**
+ * Skip a wrapper's own recognised, argument-taking or bare options over
+ * `words`, stopping at the first word that is not one of them. An
+ * option-shaped word (`-x`, `--long`) this does not recognise is `unknown`,
+ * never treated as the program; a word this cannot classify because it
+ * expands is left for the caller. `explicit`, when given, names options
+ * that ARE recognised but never lead to a named program at all (`sudo -i`
+ * runs a runtime-chosen login shell) — checked before `flags`/`withArg`.
+ */
+export function skipOptions(words, flags, withArg, explicit) {
+    let i = 0;
+    while (i < words.length) {
+        const w = words[i];
+        if (!LITERAL(w))
+            return justRest(words.slice(i));
+        if (w.value === '--')
+            return justRest(words.slice(i + 1));
+        const reason = explicit?.get(w.value);
+        if (reason !== undefined)
+            return { unknown: reason };
+        if (flags.has(w.value)) {
+            i += 1;
+            continue;
+        }
+        if (withArg.has(w.value)) {
+            i += 2;
+            continue;
+        }
+        const eq = w.value.indexOf('=');
+        if (w.value.startsWith('--') && eq > 0 && withArg.has(w.value.slice(0, eq))) {
+            i += 1;
+            continue;
+        }
+        // A short option's value attached to its flag (`-c2`, `-n10`, `-oL`).
+        if (!w.value.startsWith('--') && w.value.length > 2 && withArg.has(w.value.slice(0, 2))) {
+            i += 1;
+            continue;
+        }
+        if (/^--?[A-Za-z]/.test(w.value)) {
+            return { unknown: `an option this does not read: ${w.value}` };
+        }
+        return justRest(words.slice(i));
+    }
+    return { none: true };
+}
+/** Skip leading `NAME=value` words, collecting each name (no judgement about which one — that is `program.ts`'s business). */
+function skipAssignmentWords(words) {
+    let i = 0;
+    const assignments = [];
+    while (i < words.length) {
+        const w = words[i];
+        if (!LITERAL(w))
+            return { rest: words.slice(i), assignments };
+        const name = assignmentName(w);
+        if (name === null)
+            return { rest: words.slice(i), assignments };
+        assignments.push(name);
+        i += 1;
+    }
+    return { none: true };
+}
+/** `env [-i] [-0] [-u NAME]… [-C dir] [NAME=value]… [program [args]]`. */
+function unwrapEnv(words) {
+    let i = 0;
+    const assignments = [];
+    for (;;) {
+        const w = words[i];
+        if (w === undefined)
+            return { none: true };
+        if (!LITERAL(w))
+            return { rest: words.slice(i), assignments };
+        if (w.value === '--')
+            return { rest: words.slice(i + 1), assignments };
+        if (w.value === '-i' || w.value === '-0' || w.value === '--ignore-environment') {
+            i += 1;
+            continue;
+        }
+        if (w.value === '-u' || w.value === '-C' || w.value === '--unset' || w.value === '--chdir') {
+            i += 2;
+            continue;
+        }
+        if (/^--(?:unset|chdir)=/.test(w.value)) {
+            i += 1;
+            continue;
+        }
+        const name = assignmentName(w);
+        if (name !== null) {
+            assignments.push(name);
+            i += 1;
+            continue;
+        }
+        if (/^--?[A-Za-z]/.test(w.value))
+            return { unknown: `an option this does not read: ${w.value}` };
+        return { rest: words.slice(i), assignments };
+    }
+}
+/**
+ * One level of a re-exec wrapper's own name and options, or `null` when
+ * `words[0]` does not name one this reads. `words` is already known
+ * literal and non-empty by the caller.
+ */
+export function skipOneReexecWrapper(words) {
+    const head = words[0];
+    const name = basename(head.value);
+    const rest = words.slice(1);
+    switch (name) {
+        case 'env':
+            return unwrapEnv(rest);
+        case 'sudo': {
+            const skipped = skipOptions(rest, new Set(['-A', '-b', '-E', '-H', '-k', '-K', '-n', '-P', '-S', '-v']), new Set(['-g', '-h', '-p', '-u', '-U', '--group', '--host', '--user']), new Map([
+                ['-i', 'sudo -i runs a runtime-chosen login shell, not a named program'],
+                ['--login', 'sudo --login runs a runtime-chosen login shell, not a named program'],
+                ['-s', 'sudo -s runs a runtime-chosen shell, not a named program'],
+                ['--shell', 'sudo --shell runs a runtime-chosen shell, not a named program'],
+                ['-e', 'sudo -e (sudoedit) opens a runtime-chosen editor, not a named program'],
+                ['--edit', 'sudo --edit (sudoedit) opens a runtime-chosen editor, not a named program'],
+            ]));
+            if ('unknown' in skipped)
+                return skipped;
+            // A `sudo NAME=value…` pair sets an environment variable for the
+            // sudo'd command only, same as `env`'s.
+            return skipAssignmentWords('none' in skipped ? [] : skipped.rest);
+        }
+        case 'sudoedit':
+            return { unknown: 'sudoedit always opens a runtime-chosen editor, not a named program' };
+        case 'doas':
+            return skipOptions(rest, new Set(['-n']), new Set(['-C', '-u']));
+        case 'pkexec':
+            return skipOptions(rest, new Set(['--disable-internal-agent']), new Set(['--user']));
+        case 'nice': {
+            const first = rest[0];
+            if (first !== undefined && LITERAL(first) && /^-\d+$/.test(first.value)) {
+                return justRest(rest.slice(1));
+            }
+            return skipOptions(rest, new Set([]), new Set(['-n', '--adjustment']));
+        }
+        case 'ionice': {
+            const skipped = skipOptions(rest, new Set(['-t']), new Set(['-c', '-n']));
+            if (rest.some((w) => LITERAL(w) && w.value === '-p'))
+                return { none: true };
+            return skipped;
+        }
+        case 'nohup':
+            return skipOptions(rest, new Set([]), new Set([]));
+        case 'setsid':
+            return skipOptions(rest, new Set(['-w', '-c', '-f']), new Set([]));
+        case 'timeout': {
+            const skipped = skipOptions(rest, new Set(['--preserve-status', '--foreground', '-v', '--verbose']), new Set(['-s', '-k', '--signal', '--kill-after']));
+            if ('rest' in skipped) {
+                const duration = skipped.rest[0];
+                if (duration === undefined)
+                    return { none: true };
+                return justRest(skipped.rest.slice(1));
+            }
+            return skipped;
+        }
+        case 'stdbuf':
+            return skipOptions(rest, new Set([]), new Set(['-i', '-o', '-e', '--input', '--output', '--error']));
+        case 'chrt': {
+            if (rest.some((w) => LITERAL(w) && (w.value === '-p' || w.value === '-m')))
+                return { none: true };
+            const skipped = skipOptions(rest, new Set(['-b', '-d', '-f', '-i', '-o', '-r', '-a', '-v', '--all-tasks', '--verbose']), new Set([]));
+            if ('rest' in skipped) {
+                const priority = skipped.rest[0];
+                if (priority === undefined)
+                    return { none: true };
+                return justRest(skipped.rest.slice(1));
+            }
+            return skipped;
+        }
+        case 'taskset': {
+            if (rest.some((w) => LITERAL(w) && w.value === '-p'))
+                return { none: true };
+            const skipped = skipOptions(rest, new Set(['-a', '--all-tasks']), new Set(['-c', '--cpu-list']));
+            if ('rest' in skipped) {
+                const usedCpuList = rest.some((w) => LITERAL(w) &&
+                    (w.value === '-c' ||
+                        w.value === '--cpu-list' ||
+                        w.value.startsWith('--cpu-list=') ||
+                        (w.value.startsWith('-c') && !w.value.startsWith('--') && w.value.length > 2)));
+                if (usedCpuList)
+                    return skipped;
+                const mask = skipped.rest[0];
+                if (mask === undefined)
+                    return { none: true };
+                return justRest(skipped.rest.slice(1));
+            }
+            return skipped;
+        }
+        case 'time':
+            return skipOptions(rest, new Set(['-p', '--portability']), new Set([]));
+        case 'command': {
+            if (rest.some((w) => LITERAL(w) && (w.value === '-v' || w.value === '-V')))
+                return { none: true };
+            return skipOptions(rest, new Set(['-p']), new Set([]));
+        }
+        case 'builtin':
+            return justRest(rest);
+        case 'exec':
+            return skipOptions(rest, new Set(['-c', '-l']), new Set(['-a']));
+        case 'busybox':
+        case 'toybox':
+            // A multi-call binary: the next word names the applet to run.
+            return justRest(rest);
+        case 'unshare':
+            return skipOptions(rest, new Set([
+                '-i',
+                '--ipc',
+                '-m',
+                '--mount',
+                '-n',
+                '--net',
+                '-p',
+                '--pid',
+                '-u',
+                '--uts',
+                '-U',
+                '--user',
+                '-C',
+                '--cgroup',
+                '-T',
+                '--time',
+                '-f',
+                '--fork',
+                '-r',
+                '--map-root-user',
+                '-c',
+                '--map-current-user',
+                '--mount-proc',
+            ]), new Set([
+                '-R',
+                '--root',
+                '-w',
+                '--wd',
+                '-S',
+                '--setuid',
+                '-G',
+                '--setgid',
+                '-s',
+                '--setgroups',
+                '--propagation',
+            ]));
+        case 'nsenter':
+            return skipOptions(rest, new Set([
+                '-m',
+                '--mount',
+                '-u',
+                '--uts',
+                '-i',
+                '--ipc',
+                '-n',
+                '--net',
+                '-p',
+                '--pid',
+                '-C',
+                '--cgroup',
+                '-U',
+                '--user',
+                '-T',
+                '--time',
+                '--preserve-credentials',
+                '-r',
+                '--root',
+                '-w',
+                '--wd',
+                '-F',
+                '--no-fork',
+                '-Z',
+                '--follow-context',
+            ]), new Set(['-t', '--target', '-S', '--setuid', '-G', '--setgid']));
+        case 'chroot': {
+            const skipped = skipOptions(rest, new Set(['--skip-chdir']), new Set(['--groups', '--userspec']));
+            if ('unknown' in skipped)
+                return skipped;
+            const afterOptions = 'none' in skipped ? [] : skipped.rest;
+            const newroot = afterOptions[0];
+            if (newroot === undefined)
+                return { none: true };
+            const remaining = afterOptions.slice(1);
+            return remaining.length === 0
+                ? { unknown: 'chroot without a command runs an interactive shell, not a named program' }
+                : justRest(remaining);
+        }
+        case 'setpriv':
+            return skipOptions(rest, new Set([
+                '--clear-groups',
+                '--keep-groups',
+                '--no-new-privs',
+                '--reset-env',
+                '-d',
+                '--dump',
+            ]), new Set([
+                '--inh-caps',
+                '--ambient-caps',
+                '--bounding-set',
+                '--groups',
+                '--pdeathsig',
+                '--securebits',
+                '--reuid',
+                '--ruid',
+                '--regid',
+                '--rgid',
+                '--selinux-label',
+                '--apparmor-profile',
+            ]));
+        case 'prlimit': {
+            if (rest.some((w) => LITERAL(w) && (w.value === '-p' || w.value === '--pid')))
+                return { none: true };
+            const resources = [
+                '--as',
+                '--core',
+                '--cpu',
+                '--data',
+                '--fsize',
+                '--locks',
+                '--memlock',
+                '--msgqueue',
+                '--nice',
+                '--nofile',
+                '--nproc',
+                '--rss',
+                '--rtprio',
+                '--rttime',
+                '--sigpending',
+                '--stack',
+            ];
+            return skipOptions(rest, new Set(['--noheadings', '--raw', '--verbose', ...resources]), new Set(['-o', '--output', ...resources]));
+        }
+        case 'numactl': {
+            if (rest.some((w) => LITERAL(w) &&
+                (w.value === '--show' ||
+                    w.value === '--hardware' ||
+                    w.value === '-s' ||
+                    w.value === '-H'))) {
+                return { none: true };
+            }
+            return skipOptions(rest, new Set(['--localalloc', '-l']), new Set(['--interleave', '--membind', '--cpunodebind', '--physcpubind', '--preferred']));
+        }
+        default:
+            return null;
+    }
+}
+/**
+ * Every name {@link skipOneReexecWrapper} recognises — kept in sync BY HAND
+ * with its `switch`. A cheap pre-check for a caller (the parser's own
+ * `inspect()`) that wants to skip the more expensive chain-following for
+ * the overwhelming majority of simple commands that do not start with any
+ * of these.
+ */
+export const REEXEC_WRAPPER_NAMES = new Set([
+    'env',
+    'sudo',
+    'sudoedit',
+    'doas',
+    'pkexec',
+    'nice',
+    'ionice',
+    'nohup',
+    'setsid',
+    'timeout',
+    'stdbuf',
+    'chrt',
+    'taskset',
+    'time',
+    'command',
+    'builtin',
+    'exec',
+    'busybox',
+    'toybox',
+    'unshare',
+    'nsenter',
+    'chroot',
+    'setpriv',
+    'prlimit',
+    'numactl',
+]);
+/** How many re-exec wrappers a chain unwraps before giving up (`sudo env nice … prog`). */
+const MAX_WRAPPER_DEPTH = 8;
+/**
+ * Follow a chain of re-exec wrappers all the way through: `words` with every
+ * layer `skipOneReexecWrapper` recognises peeled off, and every `NAME=value`
+ * pair skipped along the way, or why it could not be followed to the end.
+ * `{ none: true }` when a wrapper consumed everything (nothing left to be a
+ * program at all).
+ */
+export function unwrapReexecChain(words) {
+    let current = words;
+    const assignments = [];
+    for (let depth = 0; depth < MAX_WRAPPER_DEPTH; depth += 1) {
+        const head = current[0];
+        if (head === undefined)
+            return { none: true };
+        if (!LITERAL(head))
+            return { rest: current, assignments };
+        const step = skipOneReexecWrapper(current);
+        if (step === null)
+            return { rest: current, assignments };
+        if ('unknown' in step)
+            return step;
+        if ('none' in step)
+            return { none: true };
+        assignments.push(...step.assignments);
+        if (step.rest.length === 0)
+            return { none: true };
+        current = step.rest;
+    }
+    return { unknown: 'too many re-exec wrappers to follow' };
+}
+/** Where a shell is directly named, or reached through one hop of busybox/toybox applet dispatch. */
+export function shellInvocation(words) {
+    const head = words[0];
+    if (head === undefined || !LITERAL(head))
+        return null;
+    const name = basename(head.value);
+    if (PLAIN_SHELL_NAMES.has(name))
+        return { shell: name, rest: words.slice(1) };
+    if (name === 'busybox' || name === 'toybox') {
+        const applet = words[1];
+        if (applet !== undefined && LITERAL(applet) && PLAIN_SHELL_NAMES.has(basename(applet.value))) {
+            return { shell: basename(applet.value), rest: words.slice(2) };
+        }
+    }
+    return null;
+}
+/**
+ * A shell's own `-c` among its other options (clustered short forms
+ * included, `-ec`, `-lc`), the argument right after it, or why none was
+ * found. This is exactly the scan `nestedShellCommand` used to run only for
+ * a literal head; factored out so a wrapped shell (`env -i bash -c "…"`,
+ * `nice -n 5 sh -ec "…"`) is read the identical way.
+ */
+export function shellDashC(rest) {
+    let command = false;
+    let payload;
+    for (let i = 0; i < rest.length; i += 1) {
+        const word = rest[i];
+        if (!LITERAL(word))
+            return { unknown: 'nested shell option' };
+        const value = word.value;
+        if (value === '--' || value === '-') {
+            payload = rest[i + 1];
+            break;
+        }
+        if (value.startsWith('--')) {
+            if (value === '--rcfile' || value === '--init-file')
+                i += 1;
+            continue;
+        }
+        if (/^[-+][A-Za-z]+$/.test(value)) {
+            if (value.startsWith('-') && value.includes('c'))
+                command = true;
+            if (/[oO]$/.test(value))
+                i += 1;
+            continue;
+        }
+        payload = word;
+        break;
+    }
+    if (!command)
+        return { none: true };
+    if (payload === undefined)
+        return { unknown: 'nested shell without a command' };
+    if (!LITERAL(payload))
+        return { unknown: 'nested shell command is expanded at runtime' };
+    return { payload };
+}
+//# sourceMappingURL=reexec-wrapper.js.map

package/dist/authorization/reexec-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reexec-wrapper.js","sourceRoot":"","sources":["../../src/authorization/reexec-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAY,EAAW,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;AAE5D;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACjC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,IAAe;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxD,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAY,CAAC,CAAC,CAAC,IAAI,CAAA;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IAC7D,IAAI;IACJ,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;CACN,CAAC,CAAA;AAcF,MAAM,cAAc,GAAsB,EAAE,CAAA;AAE5C,SAAS,QAAQ,CAAC,IAA0B;IAC3C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,CAAA;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAC1B,KAA2B,EAC3B,KAA0B,EAC1B,OAA4B,EAC5B,QAAsC;IAEtC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAc,CAAA;QAC/B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAChD,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACzD,MAAM,MAAM,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;QACpD,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,CAAC,IAAI,CAAC,CAAA;YACN,SAAQ;QACT,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,CAAC,IAAI,CAAC,CAAA;YACN,SAAQ;QACT,CAAC;QACD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7E,CAAC,IAAI,CAAC,CAAA;YACN,SAAQ;QACT,CAAC;QACD,sEAAsE;QACtE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,CAAC,IAAI,CAAC,CAAA;YACN,SAAQ;QACT,CAAC;QACD,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,iCAAiC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;QAC/D,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAChC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACtB,CAAC;AAED,8HAA8H;AAC9H,SAAS,mBAAmB,CAAC,KAA2B;IACvD,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAc,CAAA;QAC/B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAA;QAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAA;QAC/D,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtB,CAAC,IAAI,CAAC,CAAA;IACP,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACtB,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,KAA2B;IAC7C,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,SAAS,CAAC;QACT,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAClB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAC1C,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAA;QAC7D,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,CAAA;QACtE,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,sBAAsB,EAAE,CAAC;YAChF,CAAC,IAAI,CAAC,CAAA;YACN,SAAQ;QACT,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC5F,CAAC,IAAI,CAAC,CAAA;YACN,SAAQ;QACT,CAAC;QACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,CAAC,IAAI,CAAC,CAAA;YACN,SAAQ;QACT,CAAC;QACD,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACtB,CAAC,IAAI,CAAC,CAAA;YACN,SAAQ;QACT,CAAC;QACD,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,iCAAiC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;QAChG,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAA;IAC7C,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAA2B;IAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAc,CAAA;IAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3B,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,KAAK;YACT,OAAO,SAAS,CAAC,IAAI,CAAC,CAAA;QACvB,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,OAAO,GAAG,WAAW,CAC1B,IAAI,EACJ,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EACrE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EACtE,IAAI,GAAG,CAAC;gBACP,CAAC,IAAI,EAAE,gEAAgE,CAAC;gBACxE,CAAC,SAAS,EAAE,qEAAqE,CAAC;gBAClF,CAAC,IAAI,EAAE,0DAA0D,CAAC;gBAClE,CAAC,SAAS,EAAE,+DAA+D,CAAC;gBAC5E,CAAC,IAAI,EAAE,uEAAuE,CAAC;gBAC/E,CAAC,QAAQ,EAAE,2EAA2E,CAAC;aACvF,CAAC,CACF,CAAA;YACD,IAAI,SAAS,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAA;YACxC,iEAAiE;YACjE,wCAAwC;YACxC,OAAO,mBAAmB,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAClE,CAAC;QACD,KAAK,UAAU;YACd,OAAO,EAAE,OAAO,EAAE,oEAAoE,EAAE,CAAA;QACzF,KAAK,MAAM;YACV,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACjE,KAAK,QAAQ;YACZ,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,0BAA0B,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QACrF,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACrB,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzE,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/B,CAAC;YACD,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;QACvE,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;YACzE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAC3E,OAAO,OAAO,CAAA;QACf,CAAC;QACD,KAAK,OAAO;YACX,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QACnD,KAAK,QAAQ;YACZ,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QACnE,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,OAAO,GAAG,WAAW,CAC1B,IAAI,EACJ,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,EACjE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC,CACjD,CAAA;YACD,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBAChC,IAAI,QAAQ,KAAK,SAAS;oBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;gBACjD,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YACvC,CAAC;YACD,OAAO,OAAO,CAAA;QACf,CAAC;QACD,KAAK,QAAQ;YACZ,OAAO,WAAW,CACjB,IAAI,EACJ,IAAI,GAAG,CAAC,EAAE,CAAC,EACX,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAC7D,CAAA;QACF,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;gBACzE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACtB,MAAM,OAAO,GAAG,WAAW,CAC1B,IAAI,EACJ,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,EACrF,IAAI,GAAG,CAAC,EAAE,CAAC,CACX,CAAA;YACD,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBAChC,IAAI,QAAQ,KAAK,SAAS;oBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;gBACjD,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YACvC,CAAC;YACD,OAAO,OAAO,CAAA;QACf,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAC3E,MAAM,OAAO,GAAG,WAAW,CAC1B,IAAI,EACJ,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,EAC9B,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAC7B,CAAA;YACD,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CACL,OAAO,CAAC,CAAC,CAAC;oBACV,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI;wBAChB,CAAC,CAAC,KAAK,KAAK,YAAY;wBACxB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;wBACjC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAChF,CAAA;gBACD,IAAI,WAAW;oBAAE,OAAO,OAAO,CAAA;gBAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBAC5B,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;gBAC7C,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YACvC,CAAC;YACD,OAAO,OAAO,CAAA;QACf,CAAC;QACD,KAAK,MAAM;YACV,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QACxE,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;gBACzE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACtB,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QACvD,CAAC;QACD,KAAK,SAAS;YACb,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAA;QACtB,KAAK,MAAM;YACV,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjE,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACZ,8DAA8D;YAC9D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAA;QACtB,KAAK,SAAS;YACb,OAAO,WAAW,CACjB,IAAI,EACJ,IAAI,GAAG,CAAC;gBACP,IAAI;gBACJ,OAAO;gBACP,IAAI;gBACJ,SAAS;gBACT,IAAI;gBACJ,OAAO;gBACP,IAAI;gBACJ,OAAO;gBACP,IAAI;gBACJ,OAAO;gBACP,IAAI;gBACJ,QAAQ;gBACR,IAAI;gBACJ,UAAU;gBACV,IAAI;gBACJ,QAAQ;gBACR,IAAI;gBACJ,QAAQ;gBACR,IAAI;gBACJ,iBAAiB;gBACjB,IAAI;gBACJ,oBAAoB;gBACpB,cAAc;aACd,CAAC,EACF,IAAI,GAAG,CAAC;gBACP,IAAI;gBACJ,QAAQ;gBACR,IAAI;gBACJ,MAAM;gBACN,IAAI;gBACJ,UAAU;gBACV,IAAI;gBACJ,UAAU;gBACV,IAAI;gBACJ,aAAa;gBACb,eAAe;aACf,CAAC,CACF,CAAA;QACF,KAAK,SAAS;YACb,OAAO,WAAW,CACjB,IAAI,EACJ,IAAI,GAAG,CAAC;gBACP,IAAI;gBACJ,SAAS;gBACT,IAAI;gBACJ,OAAO;gBACP,IAAI;gBACJ,OAAO;gBACP,IAAI;gBACJ,OAAO;gBACP,IAAI;gBACJ,OAAO;gBACP,IAAI;gBACJ,UAAU;gBACV,IAAI;gBACJ,QAAQ;gBACR,IAAI;gBACJ,QAAQ;gBACR,wBAAwB;gBACxB,IAAI;gBACJ,QAAQ;gBACR,IAAI;gBACJ,MAAM;gBACN,IAAI;gBACJ,WAAW;gBACX,IAAI;gBACJ,kBAAkB;aAClB,CAAC,EACF,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAC/D,CAAA;QACF,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,WAAW,CAC1B,IAAI,EACJ,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,EACzB,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CACnC,CAAA;YACD,IAAI,SAAS,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAA;YACxC,MAAM,YAAY,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAA;YAC1D,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;YAC/B,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YAChD,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACvC,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC;gBAC5B,CAAC,CAAC,EAAE,OAAO,EAAE,yEAAyE,EAAE;gBACxF,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QACvB,CAAC;QACD,KAAK,SAAS;YACb,OAAO,WAAW,CACjB,IAAI,EACJ,IAAI,GAAG,CAAC;gBACP,gBAAgB;gBAChB,eAAe;gBACf,gBAAgB;gBAChB,aAAa;gBACb,IAAI;gBACJ,QAAQ;aACR,CAAC,EACF,IAAI,GAAG,CAAC;gBACP,YAAY;gBACZ,gBAAgB;gBAChB,gBAAgB;gBAChB,UAAU;gBACV,aAAa;gBACb,cAAc;gBACd,SAAS;gBACT,QAAQ;gBACR,SAAS;gBACT,QAAQ;gBACR,iBAAiB;gBACjB,oBAAoB;aACpB,CAAC,CACF,CAAA;QACF,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;gBAC5E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACtB,MAAM,SAAS,GAAG;gBACjB,MAAM;gBACN,QAAQ;gBACR,OAAO;gBACP,QAAQ;gBACR,SAAS;gBACT,SAAS;gBACT,WAAW;gBACX,YAAY;gBACZ,QAAQ;gBACR,UAAU;gBACV,SAAS;gBACT,OAAO;gBACP,UAAU;gBACV,UAAU;gBACV,cAAc;gBACd,SAAS;aACT,CAAA;YACD,OAAO,WAAW,CACjB,IAAI,EACJ,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC,CAAC,EAC7D,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,CAAC,CACzC,CAAA;QACF,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,IACC,IAAI,CAAC,IAAI,CACR,CAAC,CAAC,EAAE,EAAE,CACL,OAAO,CAAC,CAAC,CAAC;gBACV,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ;oBACpB,CAAC,CAAC,KAAK,KAAK,YAAY;oBACxB,CAAC,CAAC,KAAK,KAAK,IAAI;oBAChB,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CACnB,EACA,CAAC;gBACF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;YACtB,CAAC;YACD,OAAO,WAAW,CACjB,IAAI,EACJ,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,EAC/B,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,CACvF,CAAA;QACF,CAAC;QACD;YACC,OAAO,IAAI,CAAA;IACb,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAChE,KAAK;IACL,MAAM;IACN,UAAU;IACV,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;IACN,SAAS;IACT,MAAM;IACN,SAAS;IACT,SAAS;IACT,MAAM;IACN,SAAS;IACT,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;CACT,CAAC,CAAA;AAEF,2FAA2F;AAC3F,MAAM,iBAAiB,GAAG,CAAC,CAAA;AAE3B;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA2B;IAC5D,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,iBAAiB,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;QACzD,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;QAC1C,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;QACxD,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,CAAA;QAClC,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QACzC,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAA;QACrC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QACjD,OAAO,GAAG,IAAI,CAAC,IAAI,CAAA;IACpB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAA;AAC1D,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAC9B,KAA2B;IAE3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACrB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7E,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9F,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/D,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACzB,IAA0B;IAE1B,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,OAA8B,CAAA;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAc,CAAA;QACjC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAA;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACxB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YACrB,MAAK;QACN,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,aAAa;gBAAE,CAAC,IAAI,CAAC,CAAA;YAC3D,SAAQ;QACT,CAAC;QACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,GAAG,IAAI,CAAA;YAChE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAA;YAC/B,SAAQ;QACT,CAAC;QACD,OAAO,GAAG,IAAI,CAAA;QACd,MAAK;IACN,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACnC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAA;IAC/E,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAA;IACxF,OAAO,EAAE,OAAO,EAAE,CAAA;AACnB,CAAC"}

package/dist/authorization/rules.d.ts

@@ -1,3 +1,4 @@
+import type { ToolSourceRef } from '../toolsets/types.js';
 import type { AuthorizationRule, GateDecision } from '../types/authorization/index.js';
 import type { ToolDefinition } from '../types/tool/index.js';
 import type { ShellDialect } from './shell-lexer.js';
@@ -8,6 +9,14 @@ export interface EvaluateRuleOptions {
      * opaque. `ToolDefinition.commandDialect` supplies it for a tool.
      */
     readonly commandDialect?: ShellDialect;
+    /**
+     * Where the tool named by this call came from, when the caller has a
+     * `ToolManager` to ask (`ToolManager.sourceOf`). `allow_read_only` reads
+     * this to decide whether an MCP server's own `readOnlyHint` is trusted;
+     * absent, `isTrustedReadOnly` treats the tool as host-defined, matching a
+     * caller with no manager to ask.
+     */
+    readonly toolSource?: ToolSourceRef;
 }
 export declare function evaluateRule(rule: AuthorizationRule, toolName: string, toolInput: unknown, toolDef: ToolDefinition | undefined, compiledPattern?: RegExp, nameSet?: Set<string>, options?: EvaluateRuleOptions): GateDecision | null;
 //# sourceMappingURL=rules.d.ts.map

package/dist/authorization/rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/authorization/rules.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAE5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAEpD,MAAM,WAAW,mBAAmB;IACnC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,YAAY,CAAA;CACtC;AAED,wBAAgB,YAAY,CAC3B,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,OAAO,EAClB,OAAO,EAAE,cAAc,GAAG,SAAS,EACnC,eAAe,CAAC,EAAE,MAAM,EACxB,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EACrB,OAAO,GAAE,mBAAwB,GAC/B,YAAY,GAAG,IAAI,CAkLrB"}
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/authorization/rules.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAE5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAEpD,MAAM,WAAW,mBAAmB;IACnC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,YAAY,CAAA;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAA;CACnC;AAED,wBAAgB,YAAY,CAC3B,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,OAAO,EAClB,OAAO,EAAE,cAAc,GAAG,SAAS,EACnC,eAAe,CAAC,EAAE,MAAM,EACxB,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EACrB,OAAO,GAAE,mBAAwB,GAC/B,YAAY,GAAG,IAAI,CAiMrB"}

package/dist/authorization/rules.js

@@ -1,5 +1,6 @@
 import { DANGEROUS_PATTERNS } from '../constants/tools/index.js';
 import { isTrustedReadOnly } from '../tools/trusted-read-only.js';
+import { matchesSourceIdGlob } from '../toolsets/source-glob.js';
 import { decodedCommands, decomposeCommandLine } from './command-line.js';
 export function evaluateRule(rule, toolName, toolInput, toolDef, compiledPattern, nameSet, options = {}) {
     // A command line is read for the shell that will run it. Not knowing
@@ -10,7 +11,7 @@ export function evaluateRule(rule, toolName, toolInput, toolDef, compiledPattern
             // A server's own claim about its own tool cannot settle this. See
             // `isTrustedReadOnly`: a self-declaration may raise the requirement
             // and never lower it.
-            if (!isTrustedReadOnly(toolDef, toolInput))
+            if (!isTrustedReadOnly(toolDef, toolInput, options.toolSource))
                 return null;
             // Read-only is a claim about the DATA a call returns, not about the
             // CHANNEL it travels over. A tool can be `readOnlyHint: true` AND
@@ -23,6 +24,14 @@ export function evaluateRule(rule, toolName, toolInput, toolDef, compiledPattern
             const category = toolDef?.category;
             if (category && rule.excludeCategories?.includes(category))
                 return null;
+            // A read that sends the operator's screen to the model provider is
+            // the one read a person may want to allow first
+            // (`ToolDefinition.capturesScreen`). It falls through to the review
+            // policy, which asks once per session when the host keeps a consent
+            // record and approves it as the read it is otherwise. An explicit
+            // allow rule for the tool still allows it here.
+            if (capturesScreen(toolDef, toolInput))
+                return null;
             return 'allow';
         }
         case 'deny_dangerous_patterns': {
@@ -46,6 +55,12 @@ export function evaluateRule(rule, toolName, toolInput, toolDef, compiledPattern
         case 'deny_by_name': {
             return nameSet?.has(toolName) ? 'deny' : null;
         }
+        case 'by_source': {
+            const source = options.toolSource;
+            return source !== undefined && rule.sources.some((id) => matchesSourceIdGlob(source.id, id))
+                ? rule.decision
+                : null;
+        }
         case 'custom_pattern': {
             if (!compiledPattern)
                 return null;
@@ -170,4 +185,15 @@ export function evaluateRule(rule, toolName, toolInput, toolDef, compiledPattern
         }
     }
 }
+function capturesScreen(toolDef, toolInput) {
+    if (!toolDef?.capturesScreen)
+        return false;
+    try {
+        return toolDef.capturesScreen(toolInput);
+    }
+    catch {
+        // A declaration that cannot answer is not trusted to say "no".
+        return true;
+    }
+}
 //# sourceMappingURL=rules.js.map